Ga naar inhoud

Michel Ludikhuyze

Lid
  • Items

    79
  • Registratiedatum

  • Laatst bezocht

Berichten die geplaatst zijn door Michel Ludikhuyze

  1. Ik heb ergens een 4s gekocht die nog in de originele verpakking zat , nieuwstaat dus .

    Bij opstarten bleek er de ios 5 in te zitten en werd mij prompt gevraagd om een upgrade te doen naar ios 9 .

    Ik had ergens gelezen dat je met een 4s moest voorzichtig zijn met upgrades want die zou kunnen vertragen . Elders las ik dat het maar over te verwaarlozen onderdelen van seconden ging ..

    Enfin ik heb daarstraks de upgrade gewaagd omdat ik een gps app wil installeren en ... Shit ! ( happens) een vertraging afhankelijk van het onderwerp maar soms tot 5 sec voor hij reageert op een opdracht , bv openen google ... De geïnstalleerde gps app werkt niet trouwens ...

    Dank U apple ...en nu maar sparen voor een recenter model zeker ?! :(

  2. Dus toch malware , oid . Ik ga de info bewaren voor later , heel erg bedankt , mijn vrouw is er in geslaagd om haar account terug te activeren . Wel vind ik het vervelend steeds mijn wachtwoord van gmail te moeten gebruiken . Voorheen kwam dat automatisch bij openen van gmail , alsook facebook . Het is nogal een lang wachtwoord ...

  3. Het gaat om een normaal aangekochte ipad . Op een gegeven ogenblik kregen wij een boodschap dat de ipad geblokkeerd was en dat wij enkel na betaling van een bepaalde som een herstel zouden krijgen . Er stond in de boodschap dat wij kinderpornosites hadden bezocht ..groot was onze verbazing !

    Dan heb ik via de instellingen een totaal herstel gedaan met als gevolg dat alle bewaarde gegevens verloren waren . Ik dacht die terug te vinden in icloud en heb een paar handelingen gedaan waarna er problemen ontstonden met gmail . Nu kan ik wel gmail gebruiken maar mijn vrouw niet . Telkens zij probeers een haar account te openen begint de tekst in de adresbalk heen en weer te flikkeren .

    Voorlopig gebruikt zij de desktop of haar smatphone . Dus geen grote ramp maar wel als we op vakantie gaan met de ipad ...

  4. Hallo, sinds ik een herstel heb uitgevoerd op mijn iPad ( om spyware te verwijderen die de iPad blokkeerde) mankeert er iets met de Gmail functie . Ik had vroeger twee accounts voor Gmail , voor mijn vrouw en één voor mezelf . Maar na het herstel lukt het ons niet om een tweede account toe te voegen of de Gmail functie gaat in storing en moet ik recetten .

    Hoe krijg ik dit terug in orde ?

  5. Ziehier het logje van MBAM :

    Malwarebytes Anti-Malware 1.75.0.1300

    Malwarebytes : Free anti-malware download

    Databaseversie: v2013.05.08.02

    Windows XP Service Pack 3 x86 NTFS

    Internet Explorer 8.0.6001.18702

    Gebruiker :: PC-34DB94722482 [administrator]

    8/05/2013 15:04:04

    mbam-log-2013-05-08 (15-04-04).txt

    Scan type: Snelle scan

    Ingeschakelde scan opties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM

    Uitgeschakelde scan opties: P2P

    Objecten gescand: 197357

    Verstreken tijd: 11 minuut/minuten, 55 seconde(n)

    Geheugenprocessen gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Geheugenmodulen gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Registersleutels gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Registerwaarden gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Registerdata gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Mappen gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Bestanden gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    (einde)

    - - - Updated - - -

    Eigenlijk had ik, eerst deze moeten posten , het logbestand voor de " zoek.exe " actie :

    Malwarebytes Anti-Malware 1.75.0.1300

    www.malwarebytes.org

    Databaseversie: v2013.05.08.02

    Windows XP Service Pack 3 x86 NTFS

    Internet Explorer 8.0.6001.18702

    :: PC-34DB94722482 [administrator]

    8/05/2013 14:25:36

    mbam-log-2013-05-08 (14-25-36).txt

    Scan type: Snelle scan

    Ingeschakelde scan opties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM

    Uitgeschakelde scan opties: P2P

    Objecten gescand: 197046

    Verstreken tijd: 6 minuut/minuten, 43 seconde(n)

    Geheugenprocessen gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Geheugenmodulen gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Registersleutels gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Registerwaarden gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Registerdata gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Mappen gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Bestanden gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    (einde)

  6. Ziehier het logje van de "zoek.exe" actie:

    Zoek.exe Version 4.0.0.2 Updated 06-May-2013

    Tool run by Gebruiker on wo 08/05/2013 at 14:42:03,43.

    Microsoft Windows XP Professional 5.1.2600 Service Pack 3 x86

    Running in: Normal Mode Internet Access Detected

    ==== Running Processes ======================

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost -k DcomLaunch

    svchost.exe

    c:\Program Files\Microsoft Security Client\MsMpEng.exe

    C:\WINDOWS\System32\svchost.exe -k netsvcs

    svchost.exe

    svchost.exe

    C:\WINDOWS\Explorer.EXE

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe

    svchost.exe

    C:\Program Files\Java\jre7\bin\jqs.exe

    C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

    C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

    C:\Program Files\CyberLink\Shared files\RichVideo.exe

    C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe

    C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

    C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe

    C:\WINDOWS\system32\svchost.exe -k imgsvc

    C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

    C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVECapSvc.exe

    C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe

    C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVESched.exe

    C:\Program Files\Microsoft Security Client\msseces.exe

    C:\Program Files\Common Files\Java\Java Update\jusched.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\Skype\Phone\Skype.exe

    C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Documents and Settings\Gebruiker\Mijn documenten\Downloads\zoek (1).exe

    C:\WINDOWS\system32\wscntfy.exe

    ==== Deleting CLSID Registry Keys ======================

    HKEY_USERS\S-1-5-21-436374069-1965331169-1177238915-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0C6F1B98-4844-4D13-B932-4526303BC074} deleted successfully

    ==== Deleting CLSID Registry Values ======================

    ==== Installed Programs ======================

    Adobe Flash Player 11 ActiveX

    Adobe Flash Player 11 Plugin

    Adobe Reader X (10.1.6) - Nederlands

    Apple Application Support

    Belgium e-ID middleware 4.0.4 (build 7251)

    Beveiligingsupdate for Windows XP (KB941569)

    Beveiligingsupdate voor Microsoft Windows (KB2564958)

    Beveiligingsupdate voor Windows Internet Explorer 8 (KB2510531)

    Beveiligingsupdate voor Windows Internet Explorer 8 (KB2618444)

    Beveiligingsupdate voor Windows Internet Explorer 8 (KB2744842)

    Beveiligingsupdate voor Windows Internet Explorer 8 (KB2797052)

    Beveiligingsupdate voor Windows Internet Explorer 8 (KB2809289)

    Beveiligingsupdate voor Windows Internet Explorer 8 (KB2817183)

    Beveiligingsupdate voor Windows Internet Explorer 8 (KB982381)

    Beveiligingsupdate voor Windows Media Player (KB2378111)

    Beveiligingsupdate voor Windows Media Player (KB952069)

    Beveiligingsupdate voor Windows Media Player (KB954155)

    Beveiligingsupdate voor Windows Media Player (KB973540)

    Beveiligingsupdate voor Windows Media Player (KB975558)

    Beveiligingsupdate voor Windows Media Player (KB978695)

    Beveiligingsupdate voor Windows Media Player 11 (KB954154)

    Beveiligingsupdate voor Windows XP (KB2079403)

    Beveiligingsupdate voor Windows XP (KB2115168)

    Beveiligingsupdate voor Windows XP (KB2229593)

    Beveiligingsupdate voor Windows XP (KB2296011)

    Beveiligingsupdate voor Windows XP (KB2347290)

    Beveiligingsupdate voor Windows XP (KB2360937)

    Beveiligingsupdate voor Windows XP (KB2387149)

    Beveiligingsupdate voor Windows XP (KB2393802)

    Beveiligingsupdate voor Windows XP (KB2412687)

    Beveiligingsupdate voor Windows XP (KB2419632)

    Beveiligingsupdate voor Windows XP (KB2423089)

    Beveiligingsupdate voor Windows XP (KB2440591)

    Beveiligingsupdate voor Windows XP (KB2443105)

    Beveiligingsupdate voor Windows XP (KB2476490)

    Beveiligingsupdate voor Windows XP (KB2478960)

    Beveiligingsupdate voor Windows XP (KB2478971)

    Beveiligingsupdate voor Windows XP (KB2479943)

    Beveiligingsupdate voor Windows XP (KB2481109)

    Beveiligingsupdate voor Windows XP (KB2483185)

    Beveiligingsupdate voor Windows XP (KB2485663)

    Beveiligingsupdate voor Windows XP (KB2506212)

    Beveiligingsupdate voor Windows XP (KB2507618)

    Beveiligingsupdate voor Windows XP (KB2507938)

    Beveiligingsupdate voor Windows XP (KB2508429)

    Beveiligingsupdate voor Windows XP (KB2509553)

    Beveiligingsupdate voor Windows XP (KB2510581)

    Beveiligingsupdate voor Windows XP (KB2535512)

    Beveiligingsupdate voor Windows XP (KB2536276-v2)

    Beveiligingsupdate voor Windows XP (KB2544521)

    Beveiligingsupdate voor Windows XP (KB2544893-v2)

    Beveiligingsupdate voor Windows XP (KB2566454)

    Beveiligingsupdate voor Windows XP (KB2570222)

    Beveiligingsupdate voor Windows XP (KB2570947)

    Beveiligingsupdate voor Windows XP (KB2584146)

    Beveiligingsupdate voor Windows XP (KB2585542)

    Beveiligingsupdate voor Windows XP (KB2592799)

    Beveiligingsupdate voor Windows XP (KB2598479)

    Beveiligingsupdate voor Windows XP (KB2603381)

    Beveiligingsupdate voor Windows XP (KB2618451)

    Beveiligingsupdate voor Windows XP (KB2619339)

    Beveiligingsupdate voor Windows XP (KB2620712)

    Beveiligingsupdate voor Windows XP (KB2621440)

    Beveiligingsupdate voor Windows XP (KB2624667)

    Beveiligingsupdate voor Windows XP (KB2631813)

    Beveiligingsupdate voor Windows XP (KB2633171)

    Beveiligingsupdate voor Windows XP (KB2641653)

    Beveiligingsupdate voor Windows XP (KB2646524)

    Beveiligingsupdate voor Windows XP (KB2647516)

    Beveiligingsupdate voor Windows XP (KB2647518)

    Beveiligingsupdate voor Windows XP (KB2653956)

    Beveiligingsupdate voor Windows XP (KB2655992)

    Beveiligingsupdate voor Windows XP (KB2659262)

    Beveiligingsupdate voor Windows XP (KB2660465)

    Beveiligingsupdate voor Windows XP (KB2661637)

    Beveiligingsupdate voor Windows XP (KB2676562)

    Beveiligingsupdate voor Windows XP (KB2686509)

    Beveiligingsupdate voor Windows XP (KB2691442)

    Beveiligingsupdate voor Windows XP (KB2698365)

    Beveiligingsupdate voor Windows XP (KB2705219-v2)

    Beveiligingsupdate voor Windows XP (KB2712808)

    Beveiligingsupdate voor Windows XP (KB2719985)

    Beveiligingsupdate voor Windows XP (KB2723135-v2)

    Beveiligingsupdate voor Windows XP (KB2724197)

    Beveiligingsupdate voor Windows XP (KB2727528)

    Beveiligingsupdate voor Windows XP (KB2753842-v2)

    Beveiligingsupdate voor Windows XP (KB2757638)

    Beveiligingsupdate voor Windows XP (KB2758857)

    Beveiligingsupdate voor Windows XP (KB2761226)

    Beveiligingsupdate voor Windows XP (KB2770660)

    Beveiligingsupdate voor Windows XP (KB2778344)

    Beveiligingsupdate voor Windows XP (KB2779030)

    Beveiligingsupdate voor Windows XP (KB2780091)

    Beveiligingsupdate voor Windows XP (KB2799494)

    Beveiligingsupdate voor Windows XP (KB2802968)

    Beveiligingsupdate voor Windows XP (KB2807986)

    Beveiligingsupdate voor Windows XP (KB2808735)

    Beveiligingsupdate voor Windows XP (KB2813170)

    Beveiligingsupdate voor Windows XP (KB2813345)

    Beveiligingsupdate voor Windows XP (KB2820917)

    Beveiligingsupdate voor Windows XP (KB923561)

    Beveiligingsupdate voor Windows XP (KB946648)

    Beveiligingsupdate voor Windows XP (KB950762)

    Beveiligingsupdate voor Windows XP (KB950974)

    Beveiligingsupdate voor Windows XP (KB951376-v2)

    Beveiligingsupdate voor Windows XP (KB952004)

    Beveiligingsupdate voor Windows XP (KB952954)

    Beveiligingsupdate voor Windows XP (KB954459)

    Beveiligingsupdate voor Windows XP (KB956572)

    Beveiligingsupdate voor Windows XP (KB956744)

    Beveiligingsupdate voor Windows XP (KB956802)

    Beveiligingsupdate voor Windows XP (KB956844)

    Beveiligingsupdate voor Windows XP (KB958644)

    Beveiligingsupdate voor Windows XP (KB959426)

    Beveiligingsupdate voor Windows XP (KB960803)

    Beveiligingsupdate voor Windows XP (KB960859)

    Beveiligingsupdate voor Windows XP (KB961501)

    Beveiligingsupdate voor Windows XP (KB969059)

    Beveiligingsupdate voor Windows XP (KB970430)

    Beveiligingsupdate voor Windows XP (KB971657)

    Beveiligingsupdate voor Windows XP (KB972270)

    Beveiligingsupdate voor Windows XP (KB973507)

    Beveiligingsupdate voor Windows XP (KB973869)

    Beveiligingsupdate voor Windows XP (KB973904)

    Beveiligingsupdate voor Windows XP (KB974112)

    Beveiligingsupdate voor Windows XP (KB974318)

    Beveiligingsupdate voor Windows XP (KB974392)

    Beveiligingsupdate voor Windows XP (KB974571)

    Beveiligingsupdate voor Windows XP (KB975025)

    Beveiligingsupdate voor Windows XP (KB975467)

    Beveiligingsupdate voor Windows XP (KB975560)

    Beveiligingsupdate voor Windows XP (KB975713)

    Beveiligingsupdate voor Windows XP (KB977816)

    Beveiligingsupdate voor Windows XP (KB977914)

    Beveiligingsupdate voor Windows XP (KB978338)

    Beveiligingsupdate voor Windows XP (KB978542)

    Beveiligingsupdate voor Windows XP (KB978601)

    Beveiligingsupdate voor Windows XP (KB978706)

    Beveiligingsupdate voor Windows XP (KB979309)

    Beveiligingsupdate voor Windows XP (KB979482)

    Beveiligingsupdate voor Windows XP (KB979687)

    Beveiligingsupdate voor Windows XP (KB981322)

    Beveiligingsupdate voor Windows XP (KB981997)

    Beveiligingsupdate voor Windows XP (KB982132)

    Beveiligingsupdate voor Windows XP (KB982665)

    Broadcom NetXtreme Ethernet Controller

    CCleaner

    Garmin BaseCamp

    Garmin USB Drivers

    Google Chrome

    Google Update Helper

    HiJackThis

    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)

    Hotfix for Windows Media Format 11 SDK (KB929399)

    Hotfix for Windows XP (KB954550-v5)

    Hotfix for Windows XP (KB976002-v5)

    Hotfix voor Windows Media Player 11 (KB939683)

    Hotfix voor Windows XP (KB2633952)

    Hotfix voor Windows XP (KB2756822)

    Hotfix voor Windows XP (KB2779562)

    Hotfix voor Windows XP (KB952287)

    Hotfix voor Windows XP (KB961118)

    Intel® Graphics Media Accelerator Driver

    Intel® Network Connections Drivers

    Java 7 Update 21

    Java Auto Updater

    JaVaWa GMTK 2.9

    K-Lite Codec Pack 8.0.0 (Full)

    KWorld TV713X BDA Driver

    Malwarebytes Anti-Malware versie 1.75.0.1300

    Microsoft .NET Framework 2.0 ???? - ????

    Microsoft .NET Framework 2.0 Language Pack - CHT

    Microsoft .NET Framework 2.0 Service Pack 2

    Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - NLD

    Microsoft .NET Framework 3.0 Service Pack 2

    Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - NLD

    Microsoft .NET Framework 3.5 Language Pack SP1 - nld

    Microsoft .NET Framework 3.5 SP1

    Microsoft Application Error Reporting

    Microsoft Compression Client Pack 1.0 for Windows XP

    Microsoft Security Client

    Microsoft Security Essentials

    Microsoft Silverlight

    Microsoft User-Mode Driver Framework Feature Pack 1.0

    Microsoft Visual C++ 2005 Redistributable

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219

    MSXML 4.0 SP2 (KB954430)

    MSXML 4.0 SP2 (KB973688)

    Nikon Message Center 2

    OpenOffice.org 3.4.1

    OSM generic routable

    Picture Control Utility

    QuickTime

    Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)

    Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)

    Security Update for Microsoft .NET Framework 3.5 SP1 (KB2736416)

    Skype Click to Call

    SkypeT 6.3

    Smart Card Reader Drivers Installer

    Spybot - Search & Destroy

    System Requirements Lab for Intel

    Taalpakket voor Microsoft .NET Framework 3.5 SP1 - NL

    TomTom HOME

    TomTom HOME Visual Studio Merge Modules

    Tyre

    Update voor Windows Internet Explorer 8 (KB2598845)

    Update voor Windows XP (KB2345886)

    Update voor Windows XP (KB2467659)

    Update voor Windows XP (KB2641690)

    Update voor Windows XP (KB2661254-v2)

    Update voor Windows XP (KB2736233)

    Update voor Windows XP (KB2749655)

    Update voor Windows XP (KB898461)

    Update voor Windows XP (KB951978)

    Update voor Windows XP (KB955759)

    Update voor Windows XP (KB968389)

    Update voor Windows XP (KB971029)

    Update voor Windows XP (KB973687)

    Update voor Windows XP (KB973815)

    ViewNX 2

    WebFldrs XP

    Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0)

    Windows Genuine Advantage Notifications (KB905474)

    Windows Internet Explorer 8

    Windows Media Format 11 runtime

    WinRAR archiver

    ==== FireFox Fix ======================

    ProfilePath: C:\Documents and Settings\Gebruiker\Application Data\Mozilla\Firefox\Profiles\7m3zp0dy.default

    user.js not found

    ---- Lines ask.com removed from prefs.js ----

    user_pref("browser.search.selectedEngine", "Ask.com");

    user_pref("browser.search.order.1", "Ask.com");

    ---- Lines ask.com modified from prefs.js ----

    ---- FireFox user.js and prefs.js backups ----

    prefs_20130805_1449_.backup

    prefs_20131304_0710_.backup

    ==== Deleting Files \ Folders ======================

    "C:\Documents and Settings\Gebruiker\Application Data\Mozilla\Firefox\Profiles\7m3zp0dy.default\searchplugins\askcom.xml" deleted

    "C:\Documents and Settings\Gebruiker\Application Data\MapsGalaxy_39" deleted

    "C:\Documents and Settings\All Users\Application Data\Ask" deleted

    ==== Files Recently Created / Modified ======================

    ====== C:\WINDOWS ====

    2013-05-08 11:51:07 CD18E303B47E126EAACDEFAD26B006B2 712264 ----a-w- C:\WINDOWS\isRS-000.tmp

    2013-04-29 09:48:36 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\WINDOWS\ViewNX2.INI

    ====== C:\DOCUME~1\GEBRUI~1\LOCALS~1\Temp ====

    ====== C:\WINDOWS\system32 =====

    2013-05-01 04:57:11 AE81F63F6B6B117A8A53CA0F676CA857 39866368 ----a-w- C:\WINDOWS\System32\Het Weer als screensaver.scr

    2013-04-26 13:01:26 D0F47BFDDE810912F65E079B5956D6C7 94112 ----a-w- C:\WINDOWS\System32\WindowsAccessBridge.dll

    ====== C:\WINDOWS\system32\drivers =====

    2013-05-08 12:15:07 4A5FFDF0FE830C448830BD4B02B02B4B 35144 ----a-w- C:\WINDOWS\System32\drivers\mbamchameleon.sys

    2013-04-23 15:39:39 A0B8CF9DEB1184FBDD20784A58FA75D4 15104 ----a-w- C:\WINDOWS\System32\drivers\usbscan.sys

    ====== C:\WINDOWS\Tasks ======

    ====== C:\WINDOWS\Temp ======

    ======= C:\Program Files =====

    2013-04-29 09:41:49 -------- d-----w- C:\Program Files\Common Files\ArcSoft

    2013-04-29 09:37:41 -------- d-----w- C:\Program Files\Common Files\Nikon

    2013-04-29 09:36:26 -------- d-----w- C:\Program Files\Nikon

    2013-04-29 09:35:26 -------- d-----w- C:\Program Files\QuickTime

    2013-04-29 09:34:55 -------- d-----w- C:\Program Files\Common Files\Apple

    2013-04-26 13:30:59 -------- d-----w- C:\Program Files\Belgium Identity Card

    2013-04-26 12:27:29 -------- d-----w- C:\Program Files\Costar Electronics Inc

    2013-04-20 16:29:18 -------- d-----w- C:\Program Files\Common Files\Skype

    2013-04-20 06:38:22 -------- d-----w- C:\Program Files\TomTom HOME 2

    2013-04-20 06:37:50 -------- d-----w- C:\Program Files\TomTom International B.V

    ======= C: =====

    ====== C:\Documents and Settings\Gebruiker\Application Data ======

    2013-04-29 09:59:08 -------- d-----w- C:\Documents and Settings\All Users\Application Data\Nikon

    2013-04-29 09:43:36 -------- d-----w- C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Nikon

    2013-04-29 09:43:36 -------- d-----w- C:\Documents and Settings\Gebruiker\Application Data\Nikon

    2013-04-29 09:42:31 -------- d-----w- C:\Documents and Settings\Gebruiker\Local Settings\Application Data\ArcSoft

    2013-04-29 09:42:27 -------- d--h--w- C:\Documents and Settings\All Users\Application Data\ArcSoft

    2013-04-29 09:40:07 -------- d-----w- C:\Documents and Settings\Gebruiker\Application Data\ArcSoft

    2013-04-29 09:39:33 -------- d-----w- C:\Documents and Settings\All Users\Menu Start\Programma's\Nikon Message Center 2

    2013-04-29 09:37:44 -------- d-----w- C:\Documents and Settings\All Users\Menu Start\Programma's\ViewNX 2

    2013-04-29 09:37:05 E6082969673460D45E2A8B807C65485B 268 ---h--r- C:\Documents and Settings\Gebruiker\Application Data\Sampler Files

    2013-04-29 09:37:05 E6082969673460D45E2A8B807C65485B 268 ---h--r- C:\Documents and Settings\All Users\Application Data\Screen Savers

    2013-04-29 09:37:05 D17821D2CB1A251912F92378AB9C919E 12 ---h--r- C:\Documents and Settings\All Users\Application Data\Standard

    2013-04-29 09:37:05 C6CC686F2A1EEA001B467146D5B78ADD 12 ---h--r- C:\Documents and Settings\All Users\Application Data\StartupItems

    2013-04-29 09:37:05 229973BCA9B19808AB9824C20E0BA3AF 268 ---h--r- C:\Documents and Settings\Gebruiker\Application Data\Sampler Instruments

    2013-04-29 09:37:05 229973BCA9B19808AB9824C20E0BA3AF 268 ---h--r- C:\Documents and Settings\All Users\Application Data\Scripts Menu

    2013-04-29 09:37:05 20EC940A9D66573645F355F350C275CC 20 ---h--w- C:\Documents and Settings\All Users\Application Data\PKP_DLes.DAT

    2013-04-29 09:37:05 1793FF4095F70E659436B77330CC1C25 20 ---h--w- C:\Documents and Settings\All Users\Application Data\PKP_DLev.DAT

    2013-04-29 09:37:04 C36C033E56B66C21278EDFFA6AE7C1DA 268 ---h--r- C:\Documents and Settings\Gebruiker\Application Data\Sampler

    2013-04-29 09:37:04 C36C033E56B66C21278EDFFA6AE7C1DA 268 ---h--r- C:\Documents and Settings\All Users\Application Data\Screen Saver

    2013-04-29 09:37:04 B0C7F4F70649D3A6EC81840B084E4E36 20 ---h--w- C:\Documents and Settings\All Users\Application Data\PKP_DLet.DAT

    2013-04-29 09:37:04 4F270E822A5C3DD194327BC641E7C666 12 ---h--r- C:\Documents and Settings\All Users\Application Data\Speech Enhancer

    2013-04-29 09:37:04 -------- d-----w- C:\Documents and Settings\All Users\Application Data\Ultima_T15

    2013-04-29 09:37:04 -------- d-----w- C:\Documents and Settings\All Users\Application Data\EnterNHelp

    2013-04-29 09:36:05 -------- d-----w- C:\Documents and Settings\All Users\Menu Start\Programma's\QuickTime

    2013-04-29 09:35:24 -------- d-----w- C:\Documents and Settings\All Users\Application Data\Apple Computer

    2013-04-29 09:35:18 -------- d-----w- C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Apple Computer

    2013-04-29 09:34:55 -------- d-----w- C:\Documents and Settings\All Users\Application Data\Apple

    2013-04-29 09:33:14 -------- d-----w- C:\Documents and Settings\All Users\Menu Start\Programma's\Link to Nikon

    2013-04-26 13:31:09 -------- d-----w- C:\Documents and Settings\All Users\Menu Start\Programma's\Belgium - eID\Utilities

    2013-04-26 13:31:08 -------- d-----w- C:\Documents and Settings\All Users\Menu Start\Programma's\Belgium - eID

    2013-04-26 13:03:00 -------- d-----w- C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Sun

    2013-04-26 13:02:27 -------- d-----w- C:\Documents and Settings\All Users\Application Data\Sun

    2013-04-26 13:00:16 -------- d-----w- C:\Documents and Settings\Gebruiker\Application Data\Sun

    2013-04-20 06:38:59 -------- d-----w- C:\Documents and Settings\Gebruiker\Local Settings\Application Data\TomTom

    2013-04-20 06:38:59 -------- d-----w- C:\Documents and Settings\Gebruiker\Application Data\TomTom

    2013-04-20 06:38:35 -------- d-----w- C:\Documents and Settings\All Users\Menu Start\Programma's\TomTom

    2013-04-20 06:37:12 -------- d-----w- C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Downloaded Installations

    2013-04-14 19:50:36 AEF5AE4519043579C4CD644026F89FA2 57 ----a-w- C:\Documents and Settings\Gebruiker\Application Data\mbam.context.scan

    ====== C:\Documents and Settings\Gebruiker ======

    2013-05-07 23:24:54 -------- d--h--r- C:\Documents and Settings\Gebruiker\Onlangs geopend

    ====== C: exe-files ==

    2013-05-08 11:47:15 683FDD3D773C58B262DC07CD0C6CE938 10285040 ----a-w- C:\Documents and Settings\Gebruiker\Mijn documenten\Downloads\mbam-setup-1.75.0.1300 (1).exe

    2013-05-08 11:46:39 683FDD3D773C58B262DC07CD0C6CE938 10285040 ----a-w- C:\Documents and Settings\Gebruiker\Mijn documenten\Downloads\mbam-setup-1.75.0.1300.exe

    2013-05-05 20:26:31 8F11F0321ED84B1533FC1384AC71AC8D 59784 ----atw- C:\Program Files\Google\Update\1.3.21.145\GoogleUpdateBroker.exe

    2013-05-05 20:26:31 00F714CA28A01FACB709486D6DA306A8 59784 ----atw- C:\Program Files\Google\Update\1.3.21.145\GoogleUpdateOnDemand.exe

    2013-05-05 20:26:30 C26BB2535C1B20DEAFAEB12634BF4DC9 781592 ----a-w- C:\Program Files\Google\Update\1.3.21.145\GoogleUpdateSetup.exe

    2013-05-05 20:26:27 76B35CB0F3A4E69D6DFF27F542B9F856 216968 ----atw- C:\Program Files\Google\Update\1.3.21.145\GoogleCrashHandler.exe

    2013-05-05 20:26:27 506708142BC63DABA64F2D3AD1DCD5BF 116648 ----atw- C:\Program Files\Google\Update\1.3.21.145\GoogleUpdate.exe

    2013-05-05 20:26:27 4E252E85E5DC31BD645E809222AFAF27 287624 ----atw- C:\Program Files\Google\Update\1.3.21.145\GoogleCrashHandler64.exe

    2013-05-05 20:26:20 C26BB2535C1B20DEAFAEB12634BF4DC9 781592 ----a-w- C:\Program Files\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.21.145\GoogleUpdateSetup.exe

    === C: other files ==

    2013-05-08 12:15:07 4A5FFDF0FE830C448830BD4B02B02B4B 35144 ----a-w- C:\WINDOWS\system32\drivers\mbamchameleon.sys

    ==== Startup Registry Enabled ======================

    [HKEY_USERS\S-1-5-21-436374069-1965331169-1177238915-1003\Software\Microsoft\Windows\CurrentVersion\Run]

    "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe"

    "Skype"="C:\Program Files\Skype\Phone\Skype.exe /minimized /regrun"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "NvMediaCenter"="RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit"

    "Adobe ARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    "Persistence"="C:\WINDOWS\system32\igfxpers.exe"

    "MSC"="c:\Program Files\Microsoft Security Client\msseces.exe -hide -runkey"

    "SunJavaUpdateSched"="C:\Program Files\Common Files\Java\Java Update\jusched.exe"

    "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe -atboottime"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]

    "1"="C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\mbam-chameleon.exe /r /p"

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

    "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe"

    "Skype"="C:\Program Files\Skype\Phone\Skype.exe /minimized /regrun"

    ==== Startup Registry Disabled ======================

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Alcmtr]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="Alcmtr"

    "hkey"="HKLM"

    "command"="ALCMTR.EXE"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ArcSoft Connection Service]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="ArcSoft Connection Service"

    "hkey"="HKLM"

    "command"="C:\\Program Files\\Common Files\\ArcSoft\\Connection Service\\Bin\\ACDaemon.exe"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\beidsccertprop]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="beidsccertprop"

    "hkey"="HKLM"

    "command"="C:\\Program Files\\Belgium Identity Card\\BeID Certprop\\beidsccertprop.exe"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\CLMLServer]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="CLMLServer"

    "hkey"="HKLM"

    "command"="\"C:\\Program Files\\CyberLink\\PowerCinema\\Kernel\\CLML\\CLMLSvc.exe\""

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DAEMON Tools Pro Agent]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="DAEMON Tools Pro Agent"

    "hkey"="HKCU"

    "command"="\"C:\\Program Files\\DAEMON Tools Pro\\DTAgent.exe\" -autorun"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\HotKeysCmds]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="HotKeysCmds"

    "hkey"="HKLM"

    "command"="C:\\WINDOWS\\system32\\hkcmd.exe"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\IgfxTray]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="IgfxTray"

    "hkey"="HKLM"

    "command"="C:\\WINDOWS\\system32\\igfxtray.exe"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\KernelFaultCheck]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="KernelFaultCheck"

    "hkey"="HKLM"

    "command"="%systemroot%\\system32\\dumprep 0 -k"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Logitech Utility]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="Logitech Utility"

    "hkey"="HKLM"

    "command"="Logi_MwX.Exe"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Nikon Message Center 2]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="Nikon Message Center 2"

    "hkey"="HKLM"

    "command"="C:\\Program Files\\Nikon\\Nikon Message Center 2\\NkMC2.exe -s"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Optimizer Pro]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="Optimizer Pro"

    "hkey"="HKCU"

    "command"="C:\\Program Files\\Optimizer Pro\\OptProLauncher.exe"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PCMAgent]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="PCMAgent"

    "hkey"="HKLM"

    "command"="\"C:\\Program Files\\CyberLink\\PowerCinema\\PCMAgent.exe\""

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PlayMovie]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="PlayMovie"

    "hkey"="HKLM"

    "command"="\"C:\\Program Files\\CyberLink\\PlayMovie\\PMVService.exe\""

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\RTHDCPL]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="RTHDCPL"

    "hkey"="HKLM"

    "command"="RTHDCPL.EXE"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SDTray]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="SDTray"

    "hkey"="HKLM"

    "command"="\"C:\\Program Files\\Spybot - Search & Destroy 2\\SDTray.exe\""

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SkyTel]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="SkyTel"

    "hkey"="HKLM"

    "command"="SkyTel.EXE"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\TomTomHOME.exe]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="TomTomHOME.exe"

    "hkey"="HKCU"

    "command"="\"C:\\Program Files\\TomTom HOME 2\\TomTomHOMERunner.exe\""

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\TVEService]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="TVEService"

    "hkey"="HKLM"

    "command"="\"C:\\Program Files\\CyberLink\\TV Enhance\\TVEService.exe\""

    ==== Task Scheduler Jobs ======================

    C:\WINDOWS\tasks\Adobe Flash Player Updater.job --a------ C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [22/04/2013 07:33]

    C:\WINDOWS\tasks\Check for updates (Spybot - Search & Destroy).job --a------ C:\Program Files\Spybot - Search Destroy 2\SDUpdate.exe []

    C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [12/03/2012 20:04]

    C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [12/03/2012 20:04]

    C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job --ah----- C:\Program Files\Microsoft Security Client\MpCmdRun.exe [27/01/2013 12:11]

    C:\WINDOWS\tasks\Refresh immunization (Spybot - Search & Destroy).job --a------ C:\Program Files\Spybot - Search Destroy 2\SDImmunize.exe []

    C:\WINDOWS\tasks\Scan the system (Spybot - Search & Destroy).job --a------ C:\Program Files\Spybot - Search Destroy 2\SDScan.exe []

    C:\WINDOWS\tasks\User_Feed_Synchronization-{6008B089-E3E7-40CA-A296-A4B92170F245}.job --ah----- [undertermined Task]

    ==== Firefox Extensions ======================

    ProfilePath: C:\Documents and Settings\Gebruiker\Application Data\Mozilla\Firefox\Profiles\7m3zp0dy.default

    - MapsGalaxy - %ProfilePath%\extensions\39ffxtbr@MapsGalaxy_39.com

    AppDir: C:\Program Files\Mozilla Firefox

    - Belgium eID - %AppDir%\extensions\belgiumeid@eid.belgium.be

    ==== Firefox Plugins ======================

    Profilepath: C:\Documents and Settings\Gebruiker\Application Data\Mozilla\Firefox\Profiles\7m3zp0dy.default

    8F24103AB984847AA2939F58F19CCC98 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll - Java Platform SE 7 U21

    ADC539F67D3198679F480974EE203678 - C:\WINDOWS\system32\npDeployJava1.dll - Java Deployment Toolkit 7.0.210.11

    F7E72D3A281F922BACEC1A71A826D4C2 - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_169.dll - Shockwave Flash

    F647D0BEA553C1D0C251CE07DA6A5511 - C:\Program Files\Adobe\Reader 10.0\Reader\browser\nppdf32.dll - Adobe Acrobat

    DB988B4550DB9BCE86F9199D961057FC - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll - Adobe Acrobat

    A5C14075B571AF1C9592595BE724D9D2 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll - Silverlight Plug-In

    AB87EEFFD18F2BAAFC274E7075EA6C67 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation

    901DF887DBDF87FA3C659239F68F3228 - C:\Program Files\Windows Media Player\npdrmv2.dll - Microsoft® DRM

    0F9DEA5814D22F83FED5F427E263DED0 - C:\Program Files\Windows Media Player\npdsplay.dll - Windows Media Player Plug-in Dynamic Link Library

    F89E6BBD6A080D8C714DFB6F30678288 - C:\Program Files\Windows Media Player\npwmsdrm.dll - Microsoft® DRM

    3EA079023D32054BFD73D08E77C72609 - C:\WINDOWS\system32\npptools.dll - Besturingssysteem Microsoft® Windows®

    2AA3703D87E1327A2290C9D416D89A28 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrlui.dll - Microsoft® Silverlight

    ==== Chrome Look ======================

    HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

    lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx[02/10/2012 13:14]

    Skype Click to Call - Gebruiker - Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl

    ==== Set IE to Default ======================

    Old Values:

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

    "Start Page"="http://be.msn.com/default.aspx?lang=nl-be&ocid=oa-weather"

    New Values:

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

    "Start Page"="http://be.msn.com/default.aspx?lang=nl-be&ocid=oa-weather"

    ==== All HKCU SearchScopes ======================

    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

    "DefaultScope"="{518C2FAA-1395-4575-AA0A-6185D7ED730E}"

    {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

    {518C2FAA-1395-4575-AA0A-6185D7ED730E} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7ADFA_nlBE474"

    {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

    ==== Empty IE Cache ======================

    C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5 emptied successfully

    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Documents and Settings\Gebruiker\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

    C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

    ==== Empty FireFox Cache ======================

    No FireFox Cache found

    ==== Empty Chrome Cache ======================

    C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache emptied successfully

    ==== Empty All Flash Cache ======================

    Flash Cache Emptied Successfully

    ==== Empty All Java Cache ======================

    Java Cache cleared successfully

    After Reboot

    ==== Empty Temp Folders ======================

    C:\WINDOWS\Temp successfully emptied

    C:\DOCUME~1\GEBRUI~1\LOCALS~1\Temp successfully emptied

    ==== Empty Recycle Bin ======================

    C:\RECYCLER successfully emptied

    ==== Deleting Files / Folders ======================

    "C:\Documents and Settings\Gebruiker\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not deleted

    "C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not found

    "C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not found

  7. Met veel moeite krijg ik dit hier gepost :

    Een kleine maand geleden berichte ik over "haperende pc" , nu heb ik ongeveer dezelfde problemen en pc voert opdrachten niet meer uit , of enkel na lang aandringen ...:hmpf:

    Daarom hier alvast een HJ-logje :

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 7:14:23, on 8/05/2013

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v8.00 (8.00.6001.18702)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    c:\Program Files\Microsoft Security Client\MsMpEng.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe

    C:\Program Files\Microsoft Security Client\msseces.exe

    C:\Program Files\Common Files\Java\Java Update\jusched.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\Skype\Phone\Skype.exe

    C:\Program Files\Java\jre7\bin\jqs.exe

    C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

    C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

    C:\Program Files\CyberLink\Shared files\RichVideo.exe

    C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe

    C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

    C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

    C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVECapSvc.exe

    C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe

    C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVESched.exe

    C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN België: Hotmail, Skype, nieuws, entertainment, lifestyle en meer!

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll

    O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll

    O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe

    O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun

    O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll

    O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} (SysInfo Class) - http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.5.3.0.cab

    O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

    O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

    O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

    O23 - Service: ArcSoft Connect Daemon (ACDaemon) - Unknown owner - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (file missing)

    O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

    O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

    O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe

    O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

    O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe

    O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe

    O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe

    O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe

    O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe

    O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

    O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

    O23 - Service: TVEnhance Background Capture Service (TBCS) (TVECapSvc) - Unknown owner - C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVECapSvc.exe

    O23 - Service: TVEnhance Task Scheduler (TTS)) (TVESched) - Unknown owner - C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVESched.exe

    --

    End of file - 8334 bytes

  8. Wat ik ook probeerde met de info (usb-problemen) het werkte niet . Ik gebruikte de 2 poortjes vooraan de pc-kast maar toen ik het kabeltje achteraan aansloot werkte alles als normaal . Ik wist niet dat ik nog plaats had daar ...:hmmmm:

    Alleen weet ik nog steeds niet hoe hardware veilig te verwijderen daar het icoontje in de werkbalk ontbreekt.;-)

  9. Bedankt voor de reactie , ik werkte tot voor kort via de comp. van mijn vrouw met vista besturing . Maar ik wou terug op mijn pc (met Windxp) . Maar de pc herkende de camera een paar dagen en kon ik ook opnamen opladen , maar nu plots niet meer , ook niet met het Nikon programma . Maar ik ga eerst de door U toegevoegde info eens lezen en eventueel een andere poort proberen , nu gebruik ik de "makkelijke" voorzijde , :)

    Trouwens : ook het icoontje voor verwijderen van hardware is weer verdwenen .

  10. Beste , sinds kort herkent mijn pc mijn camera niet meer en kan ik ook geen opnamen overdragen naar de pc . Ik besloot het programma van de camera te installeren maar via dit programma gebeurd er ook niks . Vroeger ging dit als vanzelf !?

    Heeft er iemand enig idee ?

    Nota : op de pc(vista) van mijn vrouw werkt alles als normaal .

    groeten

  11. Ik ondervind geen problemen voor zover ik hem al gebruikt heb (pc) . Wel vind ik mijn favorieten terug bij WExpl. die waren sinds enkele weken plots verdwenen .

    Ziehier het logje van HJ :

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 19:51:13, on 13/04/2013

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v8.00 (8.00.6001.18702)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    c:\Program Files\Microsoft Security Client\MsMpEng.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\Explorer.EXE

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\Microsoft Security Client\msseces.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\Skype\Phone\Skype.exe

    C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe

    C:\Program Files\OpenOffice.org 3\program\soffice.exe

    C:\Program Files\OpenOffice.org 3\program\soffice.bin

    C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe

    C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

    C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

    C:\Program Files\CyberLink\Shared files\RichVideo.exe

    C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe

    C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

    C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe

    C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVECapSvc.exe

    C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe

    C:\WINDOWS\system32\wuauclt.exe

    C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVESched.exe

    C:\Program Files\Mozilla Firefox\firefox.exe

    C:\Program Files\Mozilla Firefox\plugin-container.exe

    C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

    O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll

    O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe

    O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun

    O4 - Startup: OpenOffice.org 3.4.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe

    O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe

    O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll

    O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} (SysInfo Class) - http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.5.3.0.cab

    O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

    O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

    O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

    O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

    O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

    O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: MapsGalaxyService (MapsGalaxy_39Service) - Unknown owner - C:\PROGRA~1\MAPSGA~2\bar\1.bin\39barsvc.exe (file missing)

    O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

    O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

    O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe

    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe

    O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe

    O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe

    O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe

    O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe

    O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

    O23 - Service: TVEnhance Background Capture Service (TBCS) (TVECapSvc) - Unknown owner - C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVECapSvc.exe

    O23 - Service: TVEnhance Task Scheduler (TTS)) (TVESched) - Unknown owner - C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVESched.exe

    --

    End of file - 7551 bytes

  12. Zo , ziehier het log :

    Zoek.exe Version 4.0.0.2 Updated 08-April-2013

    Tool run by Gebruiker on za 13/04/2013 at 7:07:11,81.

    Microsoft Windows XP Professional 5.1.2600 Service Pack 3 x86

    Running in: Normal Mode Internet Access Detected

    ==== Deleting CLSID Registry Keys ======================

    HKEY_USERS\S-1-5-21-436374069-1965331169-1177238915-1003\Software\Microsoft\Internet Explorer\SearchScopes\{b0441a0e-a49a-4e16-afc1-74ecced1921f} deleted successfully

    ==== Deleting CLSID Registry Values ======================

    ==== FireFox Fix ======================

    ProfilePath: C:\Documents and Settings\Gebruiker\Application Data\Mozilla\Firefox\Profiles\7m3zp0dy.default

    user.js not found

    ---- Lines 6vxi2otn@uyibx-kxbp.edu removed from prefs.js ----

    ---- Lines 6vxi2otn@uyibx-kxbp.edu modified from prefs.js ----

    user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"{20a82645-c095-46ed-80e3-08825760534b}\":{\"descriptor\":\"C:\\\\WINDOWS\\\\Microsoft.NET\\\\Framework\\\\v3.5\\\\Windows Presentation Foundation\\\\DotNetAssistantExtension\",\"mtime\":1360832330734},\"6vxi2otn@uyibx-kxbp.edu\":{\"descriptor\":\"C:\\\\Documents and Settings\\\\Gebruiker\\\\Application Data\\\\Mozilla\\\\Firefox\\\\Profiles\\\\7m3zp0dy.default\\\\extensions\\\\6vxi2otn@uyibx-kxbp.edu\",\"mtime\":1362593109000},\"39ffxtbr@MapsGalaxy_39.com\":{\"descriptor\":\"C:\\\\Program Files\\\\MapsGalaxy_39\\\\bar\\\\1.bin\",\"mtime\":1365829307671}}},{\"name\":\"app-global\",\"addons\":{\"{972ce4c6-7e08-4474-a285-3208198ce6fd}\":{\"descriptor\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\extensions\\\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\",\"mtime\":1365709241265}}},{\"name\":\"app-profile\",\"addons\":{\"39ffxtbr@MapsGalaxy_39.com\":{\"descriptor\":\"C:\\\\Documents and Settings\\\\Gebruiker\\\\Application Data\\\\Mozilla\\\\Firefox\\\\Profiles\\\\7m3zp0dy.default\\\\extensions\\\\39ffxtbr@MapsGalaxy_39.com\",\"mtime\":1365398954234},\"6vxi2otn@uyibx-kxbp.edu\":{\"descriptor\":\"C:\\\\Documents and Settings\\\\Gebruiker\\\\Application Data\\\\Mozilla\\\\Firefox\\\\Profiles\\\\7m3zp0dy.default\\\\extensions\\\\6vxi2otn@uyibx-kxbp.edu\",\"mtime\":1362593109000}}}]");

    ---- Lines WebSearch removed from prefs.js ----

    user_pref("browser.startup.homepage", "http://home.mywebsearch.com/index.jhtml?ptb=B1EC1643-04DD-4748-AB24-7E67B0DAC0CA&n=77fc8fe0&p2=^ZO^xdm043^YY^be&si=pd");

    user_pref("extensions.mywebsearch.prevDefaultEngine", "Google");

    user_pref("extensions.mywebsearch.prevKwdEnabled", true);

    user_pref("extensions.mywebsearch.prevKwdURL", "http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?st=kwd&ptb=B1EC1643-04DD-4748-AB24-7E67B0DAC0CA&n=77fc8fe0&ind=2013040608&p2=^ZO^xdm043^YY^be&si=pd&searchfor=");

    user_pref("extensions.mywebsearch.prevSelectedEngine", "Google");

    user_pref("extensions.toolbar.mindspark._49Members_.homepage", "http://home.mywebsearch.com/index.jhtml?ptb=B1EC1643-04DD-4748-AB24-7E67B0DAC0CA&n=77fc8fe0&p2=^ZO^xdm043^YY^be&si=pd");

    user_pref("keyword.URL", "http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?st=kwd&ptb=B1EC1643-04DD-4748-AB24-7E67B0DAC0CA&n=77fc8fe0&ind=2013040608&p2=^ZO^xdm043^YY^be&si=pd&searchfor=");

    ---- Lines WebSearch modified from prefs.js ----

    ---- Lines search.com removed from prefs.js ----

    ---- Lines search.com modified from prefs.js ----

    ---- Lines Web Search removed from prefs.js ----

    user_pref("browser.search.defaultenginename", "My Web Search");

    ---- Lines Web Search modified from prefs.js ----

    ---- FireFox user.js and prefs.js backups ----

    prefs_20131304_0710_.backup

    ==== Deleting Files \ Folders ======================

    "C:\Documents and Settings\Gebruiker\Application Data\Mozilla\Firefox\Profiles\7m3zp0dy.default\searchplugins\my-web-search.xml" deleted

    "C:\Documents and Settings\All Users\Application Data\Browse2ssaave" deleted

    "C:\Program Files\BrowseToSave" deleted

    "C:\Program Files\MapsGalaxy_39" deleted

    "C:\Program Files\WhiteSmoke_B" deleted

    "C:\found.000" deleted

    "C:\Documents and Settings\All Users\Application Data\SoftSafe" deleted

    "C:\Documents and Settings\All Users\Application Data\Browse2ssaave" deleted

    "C:\Documents and Settings\Gebruiker\Local Settings\Application Data\CRE" deleted

    "C:\Documents and Settings\Gebruiker\Local Settings\Application Data\CRE" deleted

    "C:\Documents and Settings\Gebruiker\Application Data\Mozilla\Firefox\Profiles\7m3zp0dy.default\extensions\6vxi2otn@uyibx-kxbp.edu" deleted

    ==== Files Recently Created / Modified ======================

    ====== C:\WINDOWS ====

    2013-04-10 20:56:25 51805280F311A595A85BAB179B180309 1374 ----a-w- C:\WINDOWS\imsins.BAK

    ====== C:\DOCUME~1\GEBRUI~1\LOCALS~1\Temp ====

    ====== C:\WINDOWS\system32 =====

    2013-04-05 15:39:46 1FBCCC1C540ACC4EB3F718B659ED63CA 693976 ----a-w- C:\WINDOWS\System32\FlashPlayerApp.exe

    2013-04-05 08:44:31 537310193B7ED6DA6640FBC5CA862FEA 4554 ----a-w- C:\WINDOWS\System32\PerfStringBackup.TMP

    ====== C:\WINDOWS\system32\drivers =====

    2013-04-05 13:21:51 0DB7527DB188C7D967A37BB51BBF3963 40776 ----a-w- C:\WINDOWS\System32\drivers\mbamswissarmy.sys

    ====== C:\WINDOWS\Tasks ======

    2013-04-05 12:24:16 8CC1A3C15D31B863D5ABA2DAA53DA52F 462 ---ha-w- C:\WINDOWS\Tasks\User_Feed_Synchronization-{6008B089-E3E7-40CA-A296-A4B92170F245}.job

    ====== C:\WINDOWS\Temp ======

    ======= C:\Program Files =====

    2013-04-06 06:22:58 -------- d-----w- C:\Program Files\Tyre

    2013-04-05 13:15:06 -------- d-----w- C:\Program Files\Mozilla Maintenance Service

    ======= C: =====

    ====== C:\Documents and Settings\Gebruiker\Application Data ======

    2013-04-08 05:29:23 -------- d-----w- C:\Documents and Settings\Gebruiker\Local Settings\Application Data\IAC

    2013-04-08 05:29:22 -------- d-----w- C:\Documents and Settings\Gebruiker\Application Data\MapsGalaxy_39

    2013-04-06 06:23:32 -------- d-----w- C:\Documents and Settings\Gebruiker\Menu Start\Programma's\Tyre

    2013-04-06 06:23:02 -------- d-----w- C:\Documents and Settings\Gebruiker\Application Data\Tyre

    2013-04-06 06:23:02 -------- d-----w- C:\Documents and Settings\All Users\Menu Start\Programma's\Tyre

    2013-04-06 06:23:01 -------- d-----w- C:\Documents and Settings\All Users\Application Data\Tyre

    ====== C:\Documents and Settings\Gebruiker ======

    2013-04-05 18:36:27 -------- d--h--r- C:\Documents and Settings\Gebruiker\Onlangs geopend

    ====== C: exe-files ==

    2013-04-10 21:00:21 2BF1A08F7CB7752AF697EE228514497F 234872 -c----w- C:\WINDOWS\ie8updates\KB2817183-IE8\spuninst\spuninst.exe

    2013-04-10 21:00:17 A669C1B40E5D23F5EBE7EF498631B7D1 174080 -c----w- C:\WINDOWS\ie8updates\KB2817183-IE8\ie4uinit.exe

    2013-04-10 10:26:28 AA964645D3A987CA87186A36DFFBF28D 5677408 ----a-w- C:\Program Files\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\26.0.1410.64\26.0.1410.64_26.0.1410.43_chrome_updater.exe

    2013-04-08 05:28:33 77C2C0A7868D7B7E8A670EBBCE77DAAB 111 ----a-w- C:\Documents and Settings\Gebruiker\Local Settings\Temporary Internet Files\Content.IE5\21TLO1TC\MAPSGALAXY[1].EXE

    2013-04-08 05:28:33 57A4256D29A9F246AA29EE26A407E2CE 215088 ----a-w- C:\Documents and Settings\Gebruiker\Local Settings\Temporary Internet Files\Content.IE5\F4ILQV0U\MapsGalaxy[1].exe

    2013-04-06 06:24:40 17C2E4281FADD04771695A94FB82D878 41472 ----a-w- C:\Documents and Settings\Gebruiker\Application Data\Tyre\gpx2itn.exe

    2013-04-06 06:24:35 17C2E4281FADD04771695A94FB82D878 41472 ----a-w- C:\Documents and Settings\All Users\Application Data\Tyre\gpx2itn.exe

    2013-04-06 06:24:33 0079B1B0459B2749C3A499376EE1EF68 18946816 ----a-w- C:\Program Files\Tyre\TyreLite.exe

    2013-04-06 06:24:29 28C5451AE7C11FD63CB460AD07F21890 800712 ----a-w- C:\Program Files\Tyre\unins000.exe

    2013-04-06 06:24:05 80EE90B85A8D46B3B7BFD5E8894DB1BD 10280757 ----a-w- C:\Documents and Settings\Gebruiker\Application Data\Tyre\TyreSetup.exe

    2013-04-06 06:23:08 FF4139F975A27DBCA2D41F4A2C1ED432 40960 ----a-w- C:\Documents and Settings\Gebruiker\Application Data\Tyre\appstop.exe

    2013-04-06 06:23:01 FF4139F975A27DBCA2D41F4A2C1ED432 40960 ----a-w- C:\Documents and Settings\All Users\Application Data\Tyre\appstop.exe

    2013-04-06 06:23:00 DA25DE5E2662C9BC200A364DDECA9F5E 27697541 ----a-w- C:\Program Files\Tyre\Tyre.exe

    2013-04-06 06:20:44 82F8161A70928EA0E258E27BAC2C1BE5 4084751 ----a-w- C:\Documents and Settings\Gebruiker\Mijn documenten\Downloads\TyreSetup.exe

    === C: other files ==

    ==== Startup Registry Enabled ======================

    [HKEY_USERS\S-1-5-21-436374069-1965331169-1177238915-1003\Software\Microsoft\Windows\CurrentVersion\Run]

    "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe"

    "Skype"="C:\Program Files\Skype\Phone\Skype.exe /minimized /regrun"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "NvMediaCenter"="RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit"

    "Adobe ARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    "Persistence"="C:\WINDOWS\system32\igfxpers.exe"

    "MSC"="c:\Program Files\Microsoft Security Client\msseces.exe -hide -runkey"

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

    "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe"

    "Skype"="C:\Program Files\Skype\Phone\Skype.exe /minimized /regrun"

    ==== Startup Registry Disabled ======================

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Alcmtr]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="Alcmtr"

    "hkey"="HKLM"

    "command"="ALCMTR.EXE"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\CLMLServer]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="CLMLServer"

    "hkey"="HKLM"

    "command"="\"C:\\Program Files\\CyberLink\\PowerCinema\\Kernel\\CLML\\CLMLSvc.exe\""

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DAEMON Tools Pro Agent]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="DAEMON Tools Pro Agent"

    "hkey"="HKCU"

    "command"="\"C:\\Program Files\\DAEMON Tools Pro\\DTAgent.exe\" -autorun"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\HotKeysCmds]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="HotKeysCmds"

    "hkey"="HKLM"

    "command"="C:\\WINDOWS\\system32\\hkcmd.exe"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\IgfxTray]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="IgfxTray"

    "hkey"="HKLM"

    "command"="C:\\WINDOWS\\system32\\igfxtray.exe"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\KernelFaultCheck]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="KernelFaultCheck"

    "hkey"="HKLM"

    "command"="%systemroot%\\system32\\dumprep 0 -k"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Logitech Utility]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="Logitech Utility"

    "hkey"="HKLM"

    "command"="Logi_MwX.Exe"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Optimizer Pro]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="Optimizer Pro"

    "hkey"="HKCU"

    "command"="C:\\Program Files\\Optimizer Pro\\OptProLauncher.exe"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PCMAgent]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="PCMAgent"

    "hkey"="HKLM"

    "command"="\"C:\\Program Files\\CyberLink\\PowerCinema\\PCMAgent.exe\""

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PlayMovie]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="PlayMovie"

    "hkey"="HKLM"

    "command"="\"C:\\Program Files\\CyberLink\\PlayMovie\\PMVService.exe\""

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\RTHDCPL]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="RTHDCPL"

    "hkey"="HKLM"

    "command"="RTHDCPL.EXE"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SDTray]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="SDTray"

    "hkey"="HKLM"

    "command"="\"C:\\Program Files\\Spybot - Search & Destroy 2\\SDTray.exe\""

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SkyTel]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="SkyTel"

    "hkey"="HKLM"

    "command"="SkyTel.EXE"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\TVEService]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="TVEService"

    "hkey"="HKLM"

    "command"="\"C:\\Program Files\\CyberLink\\TV Enhance\\TVEService.exe\""

    ==== Startup Folders ======================

    2013-04-05 16:11:17 1761 ----a-w- C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\McAfee Security Scan Plus.lnk

    2013-01-07 15:40:55 864 ----a-w- C:\Documents and Settings\Gebruiker\Menu Start\Programma's\Opstarten\OpenOffice.org 3.4.1.lnk

    ==== Task Scheduler Jobs ======================

    C:\WINDOWS\tasks\Adobe Flash Player Updater.job --a------ C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [05/04/2013 17:39]

    C:\WINDOWS\tasks\Check for updates (Spybot - Search & Destroy).job --a------ C:\Program Files\Spybot - Search Destroy 2\SDUpdate.exe []

    C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [12/03/2012 20:04]

    C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job --a------ [undertermined Task]

    C:\WINDOWS\tasks\Microsoft Antimalware Scheduled Scan.job --ah----- C:\TMFP sP8c:\ProC:ram Files\Microsoft Security Client\MpCmdRun.exe []

    C:\WINDOWS\tasks\Refresh immunization (Spybot - Search & Destroy).job --a------ C:\Program Files\Spybot - Search Destroy 2\SDImmunize.exe []

    C:\WINDOWS\tasks\Scan the system (Spybot - Search & Destroy).job --a------ C:\Program Files\Spybot - Search Destroy 2\SDScan.exe []

    C:\WINDOWS\tasks\User_Feed_Synchronization-{6008B089-E3E7-40CA-A296-A4B92170F245}.job --ah----- [undertermined Task]

    ==== Firefox Extensions ======================

    ProfilePath: C:\Documents and Settings\Gebruiker\Application Data\Mozilla\Firefox\Profiles\7m3zp0dy.default

    - MapsGalaxy - %ProfilePath%\extensions\39ffxtbr@MapsGalaxy_39.com

    AppDir: C:\Program Files\Mozilla Firefox

    - Default - %AppDir%\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

    ==== Firefox Plugins ======================

    Profilepath: C:\Documents and Settings\Gebruiker\Application Data\Mozilla\Firefox\Profiles\7m3zp0dy.default

    47299371607DC2FB234444EEACB1639E - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll - Shockwave Flash

    F647D0BEA553C1D0C251CE07DA6A5511 - C:\Program Files\Adobe\Reader 10.0\Reader\browser\nppdf32.dll - Adobe Acrobat

    DB988B4550DB9BCE86F9199D961057FC - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll - Adobe Acrobat

    E0FF893763BA82BAABB869A351F0C455 - C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll - Google Update

    75300E5ED4CD5B4363C3DBBB2D03269C - C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMSS.dll - McAfee Security Scanner +

    A5C14075B571AF1C9592595BE724D9D2 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll - Silverlight Plug-In

    AB87EEFFD18F2BAAFC274E7075EA6C67 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation

    901DF887DBDF87FA3C659239F68F3228 - C:\Program Files\Windows Media Player\npdrmv2.dll - Microsoft® DRM

    0F9DEA5814D22F83FED5F427E263DED0 - C:\Program Files\Windows Media Player\npdsplay.dll - Windows Media Player Plug-in Dynamic Link Library

    F89E6BBD6A080D8C714DFB6F30678288 - C:\Program Files\Windows Media Player\npwmsdrm.dll - Microsoft® DRM

    2AA3703D87E1327A2290C9D416D89A28 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrlui.dll - Microsoft® Silverlight

    ==== Chrome Look ======================

    HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

    lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx[02/10/2012 13:14]

    Skype Click to Call - Gebruiker - Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl

    ==== Set IE to Default ======================

    Old Values:

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

    "Start Page"="http://home.mywebsearch.com/index.jhtml?n=77DE8857&p2=^ZO^xdm043^YY^be&ptb=B1EC1643-04DD-4748-AB24-7E67B0DAC0CA&si=pd"

    New Values:

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

    "Start Page"="http://www.google.com"

    ==== All HKCU SearchScopes ======================

    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

    "DefaultScope"="{518C2FAA-1395-4575-AA0A-6185D7ED730E}"

    {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

    {518C2FAA-1395-4575-AA0A-6185D7ED730E} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7ADFA_nlBE474"

    {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

    ==== Deleting CLSID Registry Keys ======================

    HKEY_USERS\S-1-5-21-436374069-1965331169-1177238915-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{364EA597-E728-4CE4-BB4A-ED846EF47970} deleted successfully

    HKEY_USERS\S-1-5-21-436374069-1965331169-1177238915-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{364EA597-E728-4CE4-BB4A-ED846EF47970} deleted successfully

    HKEY_CLASSES_ROOT\CLSID\{364EA597-E728-4CE4-BB4A-ED846EF47970} deleted successfully

    ==== Deleting CLSID Registry Values ======================

    HKEY_USERS\S-1-5-21-436374069-1965331169-1177238915-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{364EA597-E728-4CE4-BB4A-ED846EF47970} deleted successfully

    ==== shortcuts on Users Desktops ======================

    C:\Documents and Settings\Gebruiker\Bureaublad\HiJackThis.lnk - C:\Documents and Settings\Gebruiker\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

    ==== shortcuts on All Users Desktop ======================

    C:\Documents and Settings\All Users\Bureaublad\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner.exe

    C:\Documents and Settings\All Users\Bureaublad\Mozilla Firefox.lnk - C:\Program Files\Mozilla Firefox\firefox.exe

    C:\Documents and Settings\All Users\Bureaublad\Tyre.lnk - C:\Program Files\Tyre\Tyre.exe

    ==== shortcuts in Users Start Menu ======================

    C:\Documents and Settings\Gebruiker\Menu Start\Programma's\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe

    C:\Documents and Settings\Gebruiker\Menu Start\Programma's\Bureau-accessoires\Systeembeheer\Internet Explorer (zonder invoegtoepassingen).lnk - C:\Program Files\Internet Explorer\iexplore.exe -extoff

    C:\Documents and Settings\Gebruiker\Menu Start\Programma's\Tyre\Create or edit language file.lnk - C:\Program Files\Tyre\Tyre.exe /langedit

    C:\Documents and Settings\Gebruiker\Menu Start\Programma's\Tyre\Library.lnk - C:\Program Files\Tyre\Tyre.exe /library

    C:\Documents and Settings\Gebruiker\Menu Start\Programma's\Tyre\POI Manager.lnk - C:\Program Files\Tyre\Tyre.exe /pois

    C:\Documents and Settings\Gebruiker\Menu Start\Programma's\Tyre\Tourist Information Manager.lnk - C:\Program Files\Tyre\Tyre.exe /tim

    ==== shortcuts in All Users Start Menu ======================

    C:\Documents and Settings\All Users\Menu Start\Programma's\Mozilla Firefox.lnk - C:\Program Files\Mozilla Firefox\firefox.exe

    C:\Documents and Settings\All Users\Menu Start\Programma's\CCleaner\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner.exe

    C:\Documents and Settings\All Users\Menu Start\Programma's\CCleaner\Uninstall CCleaner.lnk - C:\Program Files\CCleaner\uninst.exe

    C:\Documents and Settings\All Users\Menu Start\Programma's\Google Chrome\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Documents and Settings\All Users\Menu Start\Programma's\McAfee Security Scan Plus\McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.0.318\mcuicnt.exe SecurityScanner.dll

    C:\Documents and Settings\All Users\Menu Start\Programma's\McAfee Security Scan Plus\Verwijderen.lnk - C:\Program Files\McAfee Security Scan\uninstall.exe C:\Program Files\McAfee Security Scan\3.0.318\McAfee.ico

    C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe

    C:\Documents and Settings\All Users\Menu Start\Programma's\Tyre\Tyre.lnk - C:\Program Files\Tyre\Tyre.exe

    C:\Documents and Settings\All Users\Menu Start\Programma's\Tyre\Verwijder Tyre.lnk - C:\Program Files\Tyre\unins000.exe

    ==== shortcuts in Quick Launch ======================

    C:\Documents and Settings\Gebruiker\Application Data\Microsoft\Internet Explorer\Quick Launch\De Internet Explorer-browser starten.lnk - C:\Program Files\Internet Explorer\iexplore.exe

    C:\Documents and Settings\Gebruiker\Application Data\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk - C:\Program Files\Mozilla Firefox\firefox.exe

    ==== Empty IE Cache ======================

    C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5 emptied successfully

    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Documents and Settings\Gebruiker\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

    C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

    ==== Empty FireFox Cache ======================

    C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Mozilla\Firefox\Profiles\7m3zp0dy.default\Cache emptied successfully

    ==== Empty Chrome Cache ======================

    C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache emptied successfully

    ==== Empty All Flash Cache ======================

    Flash Cache Emptied Successfully

    ==== Empty All Java Cache ======================

    No Java Cache Found

    After Reboot

    ==== Empty Temp Folders ======================

    C:\WINDOWS\Temp successfully emptied

    C:\DOCUME~1\GEBRUI~1\LOCALS~1\Temp successfully emptied

    ==== Empty Recycle Bin ======================

    C:\RECYCLER successfully emptied

    ==== Deleting Files / Folders ======================

    "C:\Documents and Settings\Gebruiker\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not deleted

    "C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not found

    "C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not found

  13. Hallo , sinds enkele weken heeft de pc kuren , soms verschijnen er andere schermen dan ik vraag , dan weer rolt de pagina automatisch naar onder , als ik iets wil schrijven in een vak rolt de cursor naar rechts , dan weer verschijnt plots het startmenu als ik iets aan het lezen ben , dan kan ik niks meer schrijven of steeds dat startmenu verschijnt weer ....pfffff

    Ik heb al enkele keren de scanner laten speuren naar rommel maar die meld niks .

    Ik plaats hierbij alvast een logje van HJ:

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 21:03:27, on 12/04/2013

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v8.00 (8.00.6001.18702)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    c:\Program Files\Microsoft Security Client\MsMpEng.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\Microsoft Security Client\msseces.exe

    C:\PROGRA~1\MAPSGA~2\bar\1.bin\39brmon.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\Skype\Phone\Skype.exe

    C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe

    C:\Program Files\OpenOffice.org 3\program\soffice.exe

    C:\Program Files\OpenOffice.org 3\program\soffice.bin

    C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe

    C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

    C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

    C:\Program Files\CyberLink\Shared files\RichVideo.exe

    C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe

    C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

    C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe

    C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVECapSvc.exe

    C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe

    C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVESched.exe

    C:\WINDOWS\system32\wuauclt.exe

    C:\Program Files\Mozilla Firefox\firefox.exe

    C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.mywebsearch.com/index.jhtml?n=77DE8857&p2=^ZO^xdm043^YY^be&ptb=B1EC1643-04DD-4748-AB24-7E67B0DAC0CA&si=pd

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

    R3 - URLSearchHook: (no name) - {26842a09-ffa8-4e2c-ae12-0c80f01c3295} - C:\Program Files\MapsGalaxy_39\bar\1.bin\39SrcAs.dll

    O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: Toolbar BHO - {1e91a655-bb4b-4693-a05e-2edebc4c9d89} - C:\PROGRA~1\MAPSGA~2\bar\1.bin\39bar.dll

    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll

    O2 - BHO: Search Assistant BHO - {71c1d63a-c944-428a-a5bd-ba513190e5d2} - C:\Program Files\MapsGalaxy_39\bar\1.bin\39SrcAs.dll

    O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O3 - Toolbar: MapsGalaxy - {364ea597-e728-4ce4-bb4a-ed846ef47970} - C:\Program Files\MapsGalaxy_39\bar\1.bin\39bar.dll

    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe

    O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

    O4 - HKLM\..\Run: [MapsGalaxy Search Scope Monitor] "C:\PROGRA~1\MAPSGA~2\bar\1.bin\39srchmn.exe" /m=2 /w /h

    O4 - HKLM\..\Run: [MapsGalaxy_39 Browser Plugin Loader] C:\PROGRA~1\MAPSGA~2\bar\1.bin\39brmon.exe

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun

    O4 - Startup: OpenOffice.org 3.4.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe

    O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe

    O8 - Extra context menu item: &Search - http://tbedits.mapsgalaxy.com/one-toolbaredits/menusearch.jhtml?s=202980021&p2=^UX^xdm018^YY^be&si=maps4pc&a=5BA4B94B-406D-4440-9B13-13D307AF14B2&n=2013040801&cv=3

    O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll

    O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} (SysInfo Class) - http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.5.3.0.cab

    O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

    O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

    O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

    O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

    O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

    O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: MapsGalaxyService (MapsGalaxy_39Service) - COMPANYVERS_NAME - C:\PROGRA~1\MAPSGA~2\bar\1.bin\39barsvc.exe

    O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

    O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

    O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe

    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe

    O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe

    O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe

    O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe

    O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe

    O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

    O23 - Service: TVEnhance Background Capture Service (TBCS) (TVECapSvc) - Unknown owner - C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVECapSvc.exe

    O23 - Service: TVEnhance Task Scheduler (TTS)) (TVESched) - Unknown owner - C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVESched.exe

    --

    End of file - 8609 bytes

  14. Beste Mako , ziehier het gevraagde :

    # AdwCleaner v2.114 - Verslag gemaakt op 13/03/2013 om 22:39:52

    # Geactualiseerd op 05/03/2013 door Xplode

    # Besturingssysteem : Microsoft Windows XP Service Pack 3 (32 bits)

    # Gebruiker : Gebruiker - PC-34DB94722482

    # Opstarten Modus : Normale modus

    # Gelanceerd vanaf : C:\Documents and Settings\Gebruiker\Mijn documenten\Downloads\adwcleaner.exe

    # Optie [Verwijderen]

    ***** [Diensten] *****

    ***** [Files / Mappen] *****

    File Verwijdert : C:\END

    Map Verwijdert : C:\Documents and Settings\All Users\Application Data\InstallMate

    Map Verwijdert : C:\Documents and Settings\All Users\Application Data\Tarma Installer

    Map Verwijdert : C:\Documents and Settings\Gebruiker\Application Data\DefaultTab

    Map Verwijdert : C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Conduit

    Map Verwijdert : C:\Program Files\SearchProtect

    ***** [Register] *****

    Sleutel Verwijdert : HKCU\Software\AppDataLow\SProtector

    Sleutel Verwijdert : HKCU\Software\Softonic

    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}

    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}

    Sleutel Verwijdert : HKLM\Software\SP Global

    Sleutel Verwijdert : HKLM\Software\SProtector

    ***** [browsers] *****

    -\\ Internet Explorer v8.0.6001.18702

    [OK] Het register bevat geen enkele ongeoorloofde invoer.

    -\\ Mozilla Firefox v [Onmogelijk de versie te verkrijgen]

    File : C:\Documents and Settings\Gebruiker\Application Data\Mozilla\Firefox\Profiles\7m3zp0dy.default\prefs.js

    [OK] De file bevat geen enkele ongeoorloofde invoer.

    -\\ Google Chrome v25.0.1364.152

    File : C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

    Verwijdert [l.2452] : urls_to_restore_on_startup = [ "hxxp://www.google.com/", "hxxp://search.conduit.com/?CUI=UN56[...]

    *************************

    AdwCleaner[s1].txt - [2128 octets] - [13/03/2013 22:39:52]

    ########## EOF - C:\AdwCleaner[s1].txt - [2188 octets] ##########

  15. Beste Mako , hierna de gevraagde logjes na mijn aktie met MBAM :

    Malwarebytes Anti-Malware (-evaluatieversie-) 1.70.0.1100

    Malwarebytes : Free anti-malware download

    Databaseversie: v2013.03.13.09

    Windows XP Service Pack 3 x86 NTFS

    Internet Explorer 8.0.6001.18702

    Gebruiker :: PC-34DB94722482 [administrator]

    Bescherming: Ingeschakeld

    13/03/2013 15:09:41

    mbam-log-2013-03-13 (15-09-41).txt

    Scan type: Snelle scan

    Ingeschakelde scan opties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM

    Uitgeschakelde scan opties: P2P

    Objecten gescand: 188540

    Verstreken tijd: 9 minuut/minuten, 9 seconde(n)

    Geheugenprocessen gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Geheugenmodulen gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Registersleutels gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Registerwaarden gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Registerdata gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Mappen gedetecteerd: 1

    C:\Documents and Settings\Gebruiker\Application Data\SwvUpdater (PUP.Software.Updater) -> Succesvol in quarantaine geplaatst en verwijderd.

    Bestanden gedetecteerd: 2

    C:\Documents and Settings\Gebruiker\Application Data\SwvUpdater\Updater.xml (PUP.Software.Updater) -> Succesvol in quarantaine geplaatst en verwijderd.

    C:\WINDOWS\Tasks\AmiUpdXp.job (PUP.Software.Updater) -> Succesvol in quarantaine geplaatst en verwijderd.

    (einde)

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 15:30:19, on 13/03/2013

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v8.00 (8.00.6001.18702)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    c:\Program Files\Microsoft Security Client\MsMpEng.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe

    C:\Program Files\CyberLink\Shared files\RichVideo.exe

    C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe

    C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe

    C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVECapSvc.exe

    C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe

    C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVESched.exe

    C:\Program Files\Microsoft Security Client\msseces.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\Skype\Phone\Skype.exe

    C:\Program Files\OpenOffice.org 3\program\soffice.exe

    C:\Program Files\OpenOffice.org 3\program\soffice.bin

    C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

    C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

    C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

    C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll

    O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe

    O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

    O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun

    O4 - Startup: OpenOffice.org 3.4.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe

    O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll

    O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} (SysInfo Class) - http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.5.3.0.cab

    O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

    O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

    O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

    O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

    O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

    O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe

    O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe

    O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe

    O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe

    O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe

    O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

    O23 - Service: TVEnhance Background Capture Service (TBCS) (TVECapSvc) - Unknown owner - C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVECapSvc.exe

    O23 - Service: TVEnhance Task Scheduler (TTS)) (TVESched) - Unknown owner - C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVESched.exe

    --

    End of file - 7024 bytes

  16. Sinds kort krijg ik op "facebook" ongewenste reclame die bijna alles overlappen en ik niet wegkrijg . Ik stuur hierbij een recent HJ-logje .

    Met dank !

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 8:16:13, on 13/03/2013

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v8.00 (8.00.6001.18702)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    c:\Program Files\Microsoft Security Client\MsMpEng.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\Microsoft Security Client\msseces.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\OpenOffice.org 3\program\soffice.exe

    C:\Program Files\OpenOffice.org 3\program\soffice.bin

    C:\Program Files\CyberLink\Shared files\RichVideo.exe

    C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe

    C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe

    C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVECapSvc.exe

    C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe

    C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVESched.exe

    C:\Program Files\Skype\Phone\Skype.exe

    C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: EbuoookoBrOwwSe - {36ACF79E-3592-7C08-CFED-38F0D142FFB8} - C:\Documents and Settings\All Users\Application Data\EbuoookoBrOwwSe\5137858c0328b.dll

    O2 - BHO: Browse2ssaave - {5300D7A2-28FF-96D5-5582-2094DB7347E4} - C:\Documents and Settings\All Users\Application Data\Browse2ssaave\513785559c2ab.dll

    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll

    O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe

    O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun

    O4 - Startup: OpenOffice.org 3.4.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe

    O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll

    O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} (SysInfo Class) - http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.5.3.0.cab

    O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

    O20 - AppInit_DLLs: c:\progra~1\browse~1\sprote~1.dll

    O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)

    O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

    O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

    O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

    O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe

    O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe

    O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe

    O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe

    O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe

    O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

    O23 - Service: TVEnhance Background Capture Service (TBCS) (TVECapSvc) - Unknown owner - C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVECapSvc.exe

    O23 - Service: TVEnhance Task Scheduler (TTS)) (TVESched) - Unknown owner - C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVESched.exe

    --

    End of file - 6802 bytes

  17. Momenteel werkt het met een aansluiting op de achterkant , wel vind ik geen icoon voor veilig verwijderen . Na mijn bewerking laat ik alles even ingeplugd , na verloop van tijd ontkoppel ik de boel . Voorlopig werkt het zonder nadeel .

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.