Beroe7

Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 13:30:02, on 6/08/2012 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v9.00 (9.00.8112.16447) Boot mode: Normal Running processes: C:\Users\Tijmen\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe C:\Program Files (x86)\Launch Manager\LManager.exe C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe C:\Program Files (x86)\NetSupport\NetSupport School\runplugin.exe C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE C:\Program Files (x86)\Common Files\Adobe\Updater6\Adobe_Updater.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Users\Tijmen\Desktop\HijackThis.exe C:\Windows\SysWOW64\DllHost.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Acer | MSN R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Acer | MSN R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~4\Office14\GROOVEEX.DLL O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing) O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (file missing) O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing) O4 - HKLM\..\Run: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe O4 - HKLM\..\Run: [suiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" O4 - HKLM\..\Run: [EgisTecPMMUpdate] "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe" O4 - HKLM\..\Run: [EgisUpdate] "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d O4 - HKLM\..\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [backupManagerTray] "C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" -h -k O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe O4 - HKLM\..\Run: [Dolby Advanced Audio v2] "C:\Dolby PCEE4\pcee4.exe" -autostart O4 - HKLM\..\Run: [ArcadeMovieService] "C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe" O4 - HKLM\..\Run: [bCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices O4 - HKCU\..\Run: [Google Update] "C:\Users\Tijmen\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\Tijmen\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" O4 - HKUS\S-1-5-18\..\RunOnce: [isMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\RunOnce: [isMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'Default user') O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000 O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra button: PokerStars.be - {878AC5FC-BE78-4bae-896C-7F75B790A71E} - C:\Program Files (x86)\PokerStars.BE\PokerStarsUpdate.exe O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\nsl\nslsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\nsl\nslsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\nsl\nslsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\nsl\nslsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\nsl\nslsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\nsl\nslsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\nsl\nslsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\nsl\nslsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\nsl\nslsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\nsl\nslsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\nsl\nslsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll O23 - Service: Abrosoft: Abrosoft FantaMorph update permissions manager. 12810. - Unknown owner - C:\Program Files (x86)\Abrosoft\FantaMorph5\FantaUp.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Client32 - NetSupport Ltd - C:\Program Files (x86)\NetSupport\NetSupport School\client32.exe O23 - Service: Cron Service for Prey (CronService) - Fork Ltd. - C:\Prey\platform\windows\cronsvc.exe O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 12767 bytes

Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 10:06:23, on 6/08/2012 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v9.00 (9.00.8112.16447) Boot mode: Normal Running processes: C:\Users\Tijmen\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe C:\Program Files (x86)\Launch Manager\LManager.exe C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe C:\Program Files (x86)\Launch Manager\LMworker.exe C:\Program Files (x86)\NetSupport\NetSupport School\runplugin.exe C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe C:\Users\Tijmen\Desktop\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Acer | MSN R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Acer | MSN R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~4\Office14\GROOVEEX.DLL O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing) O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (file missing) O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing) O4 - HKLM\..\Run: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe O4 - HKLM\..\Run: [suiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" O4 - HKLM\..\Run: [EgisTecPMMUpdate] "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe" O4 - HKLM\..\Run: [EgisUpdate] "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d O4 - HKLM\..\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [backupManagerTray] "C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" -h -k O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe O4 - HKLM\..\Run: [Dolby Advanced Audio v2] "C:\Dolby PCEE4\pcee4.exe" -autostart O4 - HKLM\..\Run: [ArcadeMovieService] "C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe" O4 - HKLM\..\Run: [bCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices O4 - HKCU\..\Run: [Google Update] "C:\Users\Tijmen\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\Tijmen\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\RunOnce: [isMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\RunOnce: [isMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'Default user') O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000 O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra button: PokerStars.be - {878AC5FC-BE78-4bae-896C-7F75B790A71E} - C:\Program Files (x86)\PokerStars.BE\PokerStarsUpdate.exe O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\nsl\nslsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\nsl\nslsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\nsl\nslsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\nsl\nslsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\nsl\nslsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\nsl\nslsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\nsl\nslsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\nsl\nslsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\nsl\nslsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\nsl\nslsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\nsl\nslsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll O23 - Service: Abrosoft: Abrosoft FantaMorph update permissions manager. 12810. - Unknown owner - C:\Program Files (x86)\Abrosoft\FantaMorph5\FantaUp.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Client32 - NetSupport Ltd - C:\Program Files (x86)\NetSupport\NetSupport School\client32.exe O23 - Service: Cron Service for Prey (CronService) - Fork Ltd. - C:\Prey\platform\windows\cronsvc.exe O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 13083 bytes

Beste lezer, Sinds vandaag gaat mijn laptop met momenten heel heel traag, vooral als ik het internet gebruik. Mijn browser loopt continu vast, laadt pagina's is schokken (laden voor 1 seconde, hangt vast en laadt vervolgens verder). Ook de kleinste programma's zijn plots een probleem (het ligt dus niet aan mijn verbinding). Ook filmpjes gaan in schokken, terwijl het al gebufferd is. Ik dacht eerst een soort virus, maar na een Malwarebyte scan lijkt dit al uitgesloten. Zéér vervelend, laptop werkte prima, heb hem bijna een jaar nu. Alvast bedankt..

SpeedTouch 716 v5, vrij verouderde modem.

Bedankt voor de tips. De resultaten van de speedtest zijn volgende gegevens: Ping: 31 Download speed: 0.87 Mbps Upload speed: 0.22 Mbps Deze resultaten zijn toch sneller dan die ik daadwerkelijk krijg?

Gegroet, Vanaf het moment dat we een internetverbinding hebben aangeschaft (c.a 10 jaar geleden) hebben we reeds niets dan problemen gekend. Naast het feit dat we ontelbare keren automatisch zijn overgeplaatst van provider, ik geloof dat het begon bij het toenmalige Versatel, kampen we met een verschrikkelijk lage internetsnelheid. Uiteindelijk zijn we sinds 2-3 jaar, alweer noodgedwongen, bij Base beland. Hierover zijn we echter niet te spreken. Al jaren surften we tegen een snelheid die voor 10 jaar geleden misschien als normaal werd beschouwt (50 kb/sec downloadsnelheid), 2 jaar geleden realiseerden we dat dit slakkentempo in het tweede decennium van de 21e eeuw werd weggelachen en geen enkele hedendaagse media vlot of ten volle kon laten presteren. Na telefonisch contact met onze provider, Base, zijn we overgeplaatst naar een hoger "Home Pack" dewelke een hogere internetsnelheid zou verschaffen. We zijn gepromoveerd van onze luttele 50 kb/sec downloadsnelheid naar een schaarse 100 kb/sec, de uploadsnelheid en andere specificaties vermelden lijkt mij bij deze overbodig. Tegen deze snelheid surfen we reeds 2 jaar, ondertussen zijn we deze grap van Base stilaan beu. In tussentijd hebben tientallen malen met Base gebeld om ons de gerechtigde internetsnelheid te geven, telkens maakte de ene na de andere medewerker ons wat wijs en konden ze ons enkel overzetten naar een hoger Home Pack (zodat we weer voor een jaar langer contractueel gebonden zijn..). We zijn dus absoluut niet te spreken over Base als internetprovider, volgens de medewerkers is die 100 kb/sec "normaal" als je in ons huidig Home Pack bent aangesloten. Dit is uiteraard complete onzin, we betalen maandelijks meer dan 35 euro aan internet- en telefoonverbinding (die niets eens altijd even stabiel is). Er even bij vermelden dat de werknemer zijn lach amper kon inhouden toen we onze huidige snelheid duidelijk maakten, waarop hij vervolgens antwoordde dat dit normaal was en hij ons uiteraard een nieuw abonnement wou aansmeren. Eerst dachten we dat onze verouderde SpeedTouch modem aan de basis van dit probleem lag, maar na enkel opzoekwerk kan dit niet het (voornaamste) probleem zijn. Sinds enkele weken zijn we dan ook sterk aan het overwegen om over te stappen naar Telenet Fibernet. Bij deze is mijn vraag of er nog Base-surfers zijn met dit soort probleem (allicht in minder extreme mate). Waar kan het probleem van onze ongelooflijk lage internetverbinding liggen? Mvg, Beroe7.

Ja ik kan het uiteraard zelf verwijderen maar het lijkt mij normaal (vroeger toch) dat deze snelkoppeling na installatie weg gaat

Is er een manier dat de setup snelkoppeling van mijn bureaublad verdwijnt vanaf dat de installatie voltooid is, ik kan me herinneren dat dit vroeger zo was maar sinds windows 7 (meer dan 2 jaar) is dit nooit het geval. Alvast bedankt:-)

Er gebeurt niets als ik deze code in de opdrachtprompt. Voorlopig heb ik terug mijn oude modem aangesloten, moet de B-Box 2 aangesloten zijn om deze test uit te voeren? Verder denk ik dat het probleem ligt aan het feit dat we zijn aangesloten bij Base voor internet en dat we een B-box van Belgacom hebben gekocht.

Vandaag heb ik mezelf een nieuwe modem aangeschaft, B-Box 2. Mijn oude Speedtouch was veel te traag en viel regelmatig uit, dit terzijde. Bedrading en installatie van de B-Box modem verliep correct. Vervolgens surfte ik naar de configuratiepagina "92.168.1.1". Ik heb 2 PC's aangesloten op de B-Box, op beide PC's kregen we het signaal van de modem door maar op geen van beide kon ik internetverbinding krijgen (ook na de configuratie). Vermoedelijk een bepaalde instelling die niet correct is? Zelf ben ik geabonneerd via Base maar de verkoper waar ik de modem heb gekocht zei dat dit geen probleem kon vormen. Hij had zelf ook de modem voor eigen gebruik heel even gebruikt (misschien staat het ip-adres van hem nog ingesteld?). Alvast bedankt, een hulpbehoevend persoon!

Als ik verschillende clips samen zet in een project, kan ik ze normaal mooi aan elkaar laten aansluiten (er verschijnt een blauw lijntje waardoor ze mooi samen klitten). S inds nu doet die het plots niet meer. Kan iemand mij helpen? Grtz, Beroe7

Phaha, dom van me, het stond dus op "off" Thx.

Pf, dom van me, het werkt nu!

Ik heb sinds gisteren Lightwork (Video Editing Software) gedownload. Ik wil het uitproberen, maar als ik mijn clips wil importeren krijg ik enkel een groen scherm als clip. Het zijn .AVI files opgenomen met screenrecorder Fraps. Is er iets mis met de instellingen van Lightworks, of ondersteund het programma .AVI niet (wat mij sterk zou verbazen)? Ik heb al wel .mp4 files geïmporteerd maar deze hebben een zeervreemd geluid (geruis en het lijkt sterk vertraagd), ook het beeld zelf klopt niet helemaal.. Alvast bedankt, Beroe7.

Onder het tablad "Opnemen" kan ik hem denk ik vinden, maar het volumebalkje (groene blokjes) beweegt enkel als ik de verbinding in/uit de PC staak/haal.

IK heb een fatal1ty Gaminhg Headset, al een tijdje, werkt perfect. Ik heb de optie om het microfoontje er niet op aan te sluiten, ik laat het er altijd af. Ik heb het nu echter wel nodig, maar ik krijg hem maar niet aan de praat.. Kan iemand mij helpen? Grtz, beroe7.

Plots is het probleem opgelost! Dank jullie wel!

ComboFix 11-07-21.02 - Beroe 21/07/2011 11:44:00.1.4 - x86 Microsoft Windows 7 Home Premium 6.1.7600.0.1252.31.1043.18.3063.1941 [GMT 2:00] Gestart vanuit: c:\users\Beroe\Desktop\ComboFix.exe SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . . C:\CFLog c:\cflog\CrashLog_20100724.txt c:\cflog\CrashLog_20100729.txt c:\cflog\CrashLog_20100730.txt c:\cflog\CrashLog_20100802.txt c:\cflog\CrashLog_20100807.txt c:\cflog\CrashLog_20100809.txt c:\cflog\CrashLog_20100812.txt c:\cflog\CrashLog_20100826.txt c:\cflog\CrashLog_20100920.txt c:\cflog\CrashLog_20100923.txt c:\cflog\CrashLog_20101001.txt c:\cflog\CrashLog_20101010.txt c:\cflog\CrashLog_20101020.txt c:\cflog\CrashLog_20101028.txt c:\cflog\CrashLog_20101029.txt c:\cflog\CrashLog_20101103.txt c:\cflog\CrashLog_20101105.txt c:\cflog\CrashLog_20101117.txt c:\cflog\CrashLog_20101204.txt c:\cflog\CrashLog_20101205.txt c:\cflog\CrashLog_20101217.txt c:\cflog\CrashLog_20101221.txt c:\cflog\CrashLog_20101222.txt c:\cflog\CrashLog_20101227.txt c:\cflog\CrashLog_20110101.txt c:\cflog\CrashLog_20110102.txt c:\cflog\CrashLog_20110105.txt c:\cflog\CrashLog_20110106.txt c:\cflog\CrashLog_20110110.txt c:\cflog\CrashLog_20110113.txt c:\cflog\CrashLog_20110116.txt c:\cflog\CrashLog_20110122.txt c:\cflog\CrashLog_20110129.txt c:\cflog\CrashLog_20110211.txt c:\cflog\CrashLog_20110213.txt c:\cflog\CrashLog_20110219.txt c:\cflog\CrashLog_20110225.txt c:\cflog\CrashLog_20110226.txt c:\cflog\CrashLog_20110227.txt c:\cflog\CrashLog_20110301.txt c:\cflog\CrashLog_20110304.txt c:\cflog\CrashLog_20110305.txt c:\cflog\CrashLog_20110306.txt c:\cflog\CrashLog_20110307.txt c:\cflog\CrashLog_20110308.txt c:\cflog\CrashLog_20110311.txt c:\cflog\CrashLog_20110312.txt c:\cflog\CrashLog_20110313.txt c:\cflog\CrashLog_20110316.txt c:\cflog\CrashLog_20110318.txt c:\cflog\CrashLog_20110327.txt c:\cflog\CrashLog_20110401.txt c:\cflog\CrashLog_20110427.txt c:\cflog\CrashLog_20110509.txt c:\cflog\CrashLog_20110510.txt c:\cflog\CrashLog_20110514.txt c:\cflog\CrashLog_20110520.txt c:\cflog\CrashLog_20110525.txt c:\cflog\CrashLog_20110527.txt c:\cflog\CrashLog_20110528.txt c:\cflog\CrashLog_20110602.txt c:\cflog\CrashLog_20110605.txt c:\cflog\CrashLog_20110608.txt c:\cflog\CrashLog_20110610.txt c:\cflog\CrashLog_20110615.txt c:\cflog\CrashLog_20110617.txt c:\cflog\CrashLog_20110618.txt c:\cflog\CrashLog_20110620.txt c:\cflog\CrashLog_20110624.txt c:\cflog\CrashLog_20110625.txt c:\cflog\CrashLog_20110626.txt c:\cflog\CrashLog_20110627.txt c:\cflog\CrashLog_20110701.txt c:\cflog\CrashLog_20110702.txt c:\cflog\CrashLog_20110704.txt c:\cflog\CrashLog_20110705.txt c:\cflog\CrashLog_20110706.txt c:\cflog\CrashLog_20110707.txt c:\cflog\CrashLog_20110708.txt c:\cflog\CrashLog_20110709.txt c:\cflog\CrashLog_20110715.txt c:\cflog\CrashLog_20110716.txt c:\cflog\CrashLog_20110720.txt c:\cflog\KONAMI - Snelkoppeling.lnk C:\Install.exe c:\program files\Java\jre-04 c:\program files\Java\jre-04\bin\dwntdux.hlpddd.exe c:\program files\Java\jre-04\bin\UF c:\users\Beroe\AppData\Roaming\Beroe3SQLite3.dll c:\users\Beroe\AppData\Roaming\Beroelog.dat c:\users\Beroe\AppData\Roaming\chrtmp c:\users\Beroe\CrossFire_Setup_v1067.exe c:\users\Familie\AppData\Roaming\Familie3SQLite3.dll c:\users\noo\AppData\Roaming\noo3SQLite3.dll c:\windows\system32\windir . . (((((((((((((((((((( Bestanden Gemaakt van 2011-06-21 to 2011-07-21 )))))))))))))))))))))))))))))) . . 2011-07-21 09:48 . 2011-07-21 09:48 -------- d-----w- c:\users\Default\AppData\Local\temp 2011-07-21 09:48 . 2011-07-21 09:48 -------- d-----w- c:\users\noo\AppData\Local\temp 2011-07-21 09:48 . 2011-07-21 09:48 -------- d-----w- c:\users\Gast\AppData\Local\temp 2011-07-21 09:48 . 2011-07-21 09:48 -------- d-----w- c:\users\Familie\AppData\Local\temp 2011-07-20 17:09 . 2011-07-20 17:09 -------- d-----w- c:\users\Beroe\AppData\Roaming\Malwarebytes 2011-07-20 17:06 . 2011-07-20 17:06 -------- d-----w- c:\programdata\Malwarebytes 2011-07-20 17:06 . 2011-07-06 17:52 41272 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2011-07-20 17:06 . 2011-07-20 22:16 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2011-07-20 17:06 . 2011-07-06 17:52 22712 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-07-20 16:56 . 2011-07-20 16:56 388096 ----a-r- c:\users\Beroe\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2011-07-20 16:56 . 2011-07-20 16:56 -------- d-----w- c:\program files\Trend Micro 2011-07-19 15:35 . 2011-06-07 15:55 7074640 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A91EBF82-1A6B-4668-B0E4-8FC406E934CA}\mpengine.dll 2011-07-17 18:20 . 2011-07-17 18:21 -------- d-----w- c:\users\Beroe\AppData\Local\Ilivid Player 2011-07-17 18:14 . 2011-07-17 18:15 -------- d-----w- c:\program files\Windows iLivid Toolbar 2011-07-17 18:13 . 2011-07-17 18:13 -------- d-----w- c:\users\Beroe\AppData\Local\PackageAware 2011-07-13 15:43 . 2011-06-11 02:37 2332672 ----a-w- c:\windows\system32\win32k.sys 2011-07-12 18:04 . 2011-07-12 18:04 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2011-07-11 19:01 . 2011-07-13 15:51 -------- d-----w- c:\users\Beroe\AppData\Local\PokerStars.BE 2011-07-11 19:01 . 2011-07-17 13:47 -------- d-----w- c:\program files\PokerStars.BE 2011-06-30 10:01 . 2011-06-30 10:01 -------- d-----w- c:\users\Beroe\AppData\Roaming\IrfanView 2011-06-30 10:01 . 2011-06-30 10:01 -------- d-----w- c:\program files\IrfanView 2011-06-29 10:01 . 2011-05-24 10:35 294912 ----a-w- c:\windows\system32\umpnpmgr.dll 2011-06-29 10:01 . 2011-05-04 04:53 1553920 ----a-w- c:\windows\system32\tquery.dll 2011-06-29 10:01 . 2011-05-04 04:52 666624 ----a-w- c:\windows\system32\mssvp.dll 2011-06-29 10:01 . 2011-05-04 04:52 59392 ----a-w- c:\windows\system32\msscntrs.dll 2011-06-29 10:01 . 2011-05-04 04:52 337408 ----a-w- c:\windows\system32\mssph.dll 2011-06-29 10:01 . 2011-05-04 04:52 197120 ----a-w- c:\windows\system32\mssphtb.dll 2011-06-29 10:01 . 2011-05-04 04:52 1401856 ----a-w- c:\windows\system32\mssrch.dll 2011-06-29 10:01 . 2011-05-04 04:52 86528 ----a-w- c:\windows\system32\SearchFilterHost.exe 2011-06-29 10:01 . 2011-05-04 04:52 428032 ----a-w- c:\windows\system32\SearchIndexer.exe 2011-06-29 10:01 . 2011-05-04 04:52 164352 ----a-w- c:\windows\system32\SearchProtocolHost.exe 2011-06-24 08:40 . 2011-06-24 08:40 2106216 ----a-w- c:\program files\Mozilla Firefox\D3DCompiler_43.dll 2011-06-24 08:40 . 2011-06-24 08:40 1998168 ----a-w- c:\program files\Mozilla Firefox\d3dx9_43.dll . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2011-05-28 03:00 . 2011-06-16 09:06 1638912 ----a-w- c:\windows\system32\mshtml.tlb 2011-05-24 17:14 . 2010-12-03 15:21 222080 ------w- c:\windows\system32\MpSigStub.exe 2011-05-04 02:52 . 2010-12-03 16:21 472808 ----a-w- c:\windows\system32\deployJava1.dll 2011-05-04 02:43 . 2011-06-16 09:06 222720 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys 2011-05-04 02:43 . 2011-06-16 09:06 96256 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys 2011-05-04 02:43 . 2011-06-16 09:06 123392 ----a-w- c:\windows\system32\drivers\mrxsmb.sys 2011-05-03 04:50 . 2011-06-16 09:06 740864 ----a-w- c:\windows\system32\inetcomm.dll 2011-04-29 02:57 . 2011-06-16 09:06 311296 ----a-w- c:\windows\system32\drivers\srv.sys 2011-04-29 02:57 . 2011-06-16 09:06 309760 ----a-w- c:\windows\system32\drivers\srv2.sys 2011-04-29 02:57 . 2011-06-16 09:06 114176 ----a-w- c:\windows\system32\drivers\srvnet.sys 2011-04-27 11:29 . 2011-04-27 11:29 0 ---ha-w- c:\users\Beroe\AppData\Local\BITB41F.tmp 2011-04-27 02:33 . 2011-06-16 09:06 78336 ----a-w- c:\windows\system32\drivers\dfsc.sys 2011-04-25 04:56 . 2011-06-16 09:06 1286016 ----a-w- c:\windows\system32\drivers\tcpip.sys 2011-04-25 02:35 . 2011-06-16 09:06 338944 ----a-w- c:\windows\system32\drivers\afd.sys 2011-04-23 22:19 . 2011-04-23 22:19 0 ---ha-w- c:\users\Beroe\AppData\Local\BIT6DFD.tmp 2011-04-22 19:36 . 2011-05-24 19:16 26496 ----a-w- c:\windows\system32\drivers\Diskdump.sys 2011-04-22 19:31 . 2011-06-16 09:06 981504 ----a-w- c:\windows\system32\wininet.dll 2011-04-22 19:31 . 2011-06-16 09:06 44544 ----a-w- c:\windows\system32\licmgr10.dll 2011-04-22 18:23 . 2011-06-16 09:06 386048 ----a-w- c:\windows\system32\html.iec 2011-06-24 08:40 . 2011-05-07 18:13 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll . . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-04-16 3872080] "Software Informer"="c:\program files\Software Informer\softinfo.exe" [2011-02-15 2322505] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504] "WindowsLivePhone"="c:\program files\Windows Live\Device Manager\msgrdvmn.exe" [2008-12-22 787816] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288] "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072] "XboxStat"="c:\program files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2009-10-01 718688] "WindowsLivePhone"="c:\program files\Windows Live\Device Manager\msgrdvmn.exe" [2008-12-22 787816] "RemoteControl11"="c:\program files\CyberLink\PowerDVD11\PDVD11Serv.exe" [2011-05-19 234792] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696] . c:\users\Beroe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ BlueSoleil.lnk - c:\program files\IVT Corporation\BlueSoleil\gprs.exe [2008-3-19 43608] Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360] WinZip Quick Pick.lnk - c:\windows.old\Program Files\WinZip\WZQKPICK.EXE [2010-4-5 494920] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "mixer6"=wdmaud.drv . R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-01-22 136176] R3 gupdatem;Google Update-service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2011-01-22 136176] R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2011-07-06 41272] R3 vmwriter;VMware VSS Writer;c:\program files\VMware\VMware Server\vmVssWriter.exe [2009-10-20 22528] R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-12-03 1343400] R3 XDva377;XDva377;c:\windows\system32\XDva377.sys [x] R3 XDva379;XDva379;c:\windows\system32\XDva379.sys [x] R3 XDva380;XDva380;c:\windows\system32\XDva380.sys [x] R3 XDva382;XDva382;c:\windows\system32\XDva382.sys [x] R3 XDva383;XDva383;c:\windows\system32\XDva383.sys [x] R3 XDva384;XDva384;c:\windows\system32\XDva384.sys [x] R3 XDva385;XDva385;c:\windows\system32\XDva385.sys [x] R3 XDva386;XDva386;c:\windows\system32\XDva386.sys [x] R3 XDva387;XDva387;c:\windows\system32\XDva387.sys [x] S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys [2011-02-17 160560] S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys [2011-02-17 44784] S2 {329F96B6-DF1E-4328-BFDA-39EA953C1312};Power Control [2011/06/10 20:11];c:\program files\CyberLink\PowerDVD11\Common\NavFilter\000.fcl [2011-05-16 18:54 77296] S2 CLHNServiceForPowerDVD;CLHNServiceForPowerDVD;c:\program files\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe [2011-05-19 83240] S2 CyberLink PowerDVD 11.0 Monitor Service;CyberLink PowerDVD 11.0 Monitor Service;c:\program files\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe [2011-05-12 70952] S2 CyberLink PowerDVD 11.0 Service;CyberLink PowerDVD 11.0 Service;c:\program files\CyberLink\PowerDVD11\Common\MediaServer\CLMSServer.exe [2011-05-12 312616] S2 ntk_PowerDVD;ntk_PowerDVD;c:\program files\CyberLink\PowerDVD11\Kernel\DMP\ntk_PowerDVD.sys [2011-05-19 71664] S2 PaceLicenseDServices;PACE License Services;c:\program files\Common Files\PACE\Services\LicenseServices\LDSvc.exe [2010-10-21 2646528] S2 Start BT in service;Start BT in service;c:\program files\IVT Corporation\BlueSoleil\StartSkysolSvc.exe [2008-03-19 51816] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-10-16 369256] S2 vmci;VMware vmci;c:\windows\system32\Drivers\vmci.sys [2009-10-20 54960] S2 VMwareHostd;VMware Host Agent;c:\program files\VMware\VMware Server\vmware-hostd.exe [2009-10-20 322096] S2 VMwareServerWebAccess;VMware Server Web Access;c:\program files\VMware\VMware Server\tomcat\bin\Tomcat6.exe [2009-10-20 57344] S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32v.sys [2010-09-07 123496] S3 RTL8167;Realtek 8167 NT-stuurprogramma;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776] S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [2011-02-17 111152] S3 VBoxNetFlt;VBoxNetFlt Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [2011-02-17 122032] S3 XDva388;XDva388;c:\windows\system32\XDva388.sys [x] . . Inhoud van de 'Gedeelde Taken' map . 2011-07-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2011-01-22 17:55] . 2011-07-21 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2011-01-22 17:55] . . ------- Bijkomende Scan ------- . uInternet Settings,ProxyOverride = local IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000 IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~3\Office10\EXCEL.EXE/3000 LSP: c:\program files\VMware\VMware Server\vsocklib.dll TCP: DhcpNameServer = 192.168.1.254 FF - ProfilePath - c:\users\Beroe\AppData\Roaming\Mozilla\Firefox\Profiles\dhgooi8c.default\ FF - prefs.js: browser.search.selectedEngine - Search Results FF - prefs.js: browser.startup.homepage - hxxp://www.searchqu.com/406 FF - prefs.js: keyword.URL - hxxp://dts.search-results.com/sr?src=ffb&appid=102&systemid=406&q= . - - - - ORPHANS VERWIJDERD - - - - . Toolbar-10 - (no file) HKCU-Run-fsm - (no file) AddRemove-Xfire - c:\program files\Xfire\uninst.exe . . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\{329F96B6-DF1E-4328-BFDA-39EA953C1312}] "ImagePath"="\??\c:\program files\CyberLink\PowerDVD11\Common\NavFilter\000.fcl" . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Voltooingstijd: 2011-07-21 11:50:14 ComboFix-quarantined-files.txt 2011-07-21 09:50 . Pre-Run: 818.662.412.288 bytes beschikbaar Post-Run: 820.105.650.176 bytes beschikbaar . - - End Of File - - 9546F792A1112FF65E718AAEE958326C

Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 11:32:58, on 21/07/2011 Platform: Windows 7 (WinNT 6.00.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16800) Boot mode: Normal Running processes: C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe C:\Program Files\CyberLink\PowerDVD11\PDVD11Serv.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Software Informer\softinfo.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows.old\Program Files\WinZip\WZQKPICK.EXE C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil VoIP Plugin.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Windows\system32\wuauclt.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [XboxStat] "C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun O4 - HKLM\..\Run: [WindowsLivePhone] C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe /AutoRun O4 - HKLM\..\Run: [RemoteControl11] C:\Program Files\CyberLink\PowerDVD11\PDVD11Serv.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [software Informer] "C:\Program Files\Software Informer\softinfo.exe" -autorun O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [WindowsLivePhone] "C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe" /AutoRun O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O4 - Global Startup: BlueSoleil.lnk = C:\Program Files\IVT Corporation\BlueSoleil\gprs.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: WinZip Quick Pick.lnk = C:\Windows.old\Program Files\WinZip\WZQKPICK.EXE O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000 O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O10 - Unknown file in Winsock LSP: c:\program files\vmware\vmware server\vsocklib.dll O10 - Unknown file in Winsock LSP: c:\program files\vmware\vmware server\vsocklib.dll O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\system32\Skype4COM.dll O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe O23 - Service: CLHNServiceForPowerDVD - Unknown owner - C:\Program Files\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe O23 - Service: CyberLink PowerDVD 11.0 Monitor Service - CyberLink - C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe O23 - Service: CyberLink PowerDVD 11.0 Service - CyberLink - C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSServer.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: PACE License Services (PaceLicenseDServices) - PACE Anti-Piracy, Inc. - C:\Program Files\Common Files\PACE\Services\LicenseServices\LDSvc.exe O23 - Service: Start BT in service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\StartSkysolSvc.exe O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files\VMware\VMware Server\vmware-authd.exe O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\Windows\system32\vmnetdhcp.exe O23 - Service: VMware NAT Service - VMware, Inc. - C:\Windows\system32\vmnat.exe O23 - Service: VMware Host Agent (VMwareHostd) - Unknown owner - C:\Program Files\VMware\VMware Server\vmware-hostd.exe O23 - Service: VMware Server Web Access (VMwareServerWebAccess) - Apache Software Foundation - C:\Program Files\VMware\VMware Server\tomcat\bin\Tomcat6.exe O23 - Service: VMware VSS Writer (vmwriter) - VMware, Inc. - C:\Program Files\VMware\VMware Server\vmVssWriter.exe -- End of file - 8070 bytes

Zoals ik al zei had ik al eerder vandaag zo'n scan gedaan, vandaar dat er slechts 1 geinfecteerd bestand in gevonden. ------------------------------------------------------------------------------------------------------------------------ Malwarebytes' Anti-Malware 1.51.1.1800 Malwarebytes : Free anti-malware, anti-virus and spyware removal download Databaseversie: 7035 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 21/07/2011 0:21:07 mbam-log-2011-07-21 (00-21-07).txt Scantype: Snelle scan Objecten gescand: 194951 Verstreken tijd: 3 minuut/minuten, 20 seconde(n) Geheugenprocessen geïnfecteerd: 0 Geheugenmodulen geïnfecteerd: 0 Registersleutels geïnfecteerd: 0 Registerwaarden geïnfecteerd: 0 Registerdata geïnfecteerd: 0 Mappen geïnfecteerd: 0 Bestanden geïnfecteerd: 1 Geheugenprocessen geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Geheugenmodulen geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Registersleutels geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Registerwaarden geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Registerdata geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Mappen geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Bestanden geïnfecteerd: c:\Windows\System32\f3PSSavr.scr (PUP.FunWebProducts) -> Quarantined and deleted successfully.

Sinds gisteren heb ik het Searchqu probleem. Ik heb allicht perongeluk die Bandoo emoticons gedownload, dit was absoluut mijn bedoeling niet. Ik was met andere downloads bezig, allicht is het toen per ongeluk fout gegaan zonder ik er erg op had. Na enige research over hoe ik dit kan oplossen (searchqu.com wordt telkens opnieuw mijn startpagina) ben ik uiteindelijk nog geen stap verder. Heb al geprobeerd dit "virus" via Malwarebytes te verwijderen, zonder resultaat. Die Bandoo heb ik meteen verwijderd. Ik zag het plots staan op MSN en zag meteen dat ik per ongeluk iets gedownload had. Ik heb al een Hijack scan gemaakt, welke hebben betrekking op dit probleem, zelf kan ik er niet echt aan uit. Zoals de titel aangeeft ben ik een Firefox gebruiker. Alvast bedankt. ------------------------------------------------------------------------------------------------------------------------ Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 21:47:43, on 20/07/2011 Platform: Windows 7 (WinNT 6.00.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16800) Boot mode: Normal Running processes: C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe C:\Program Files\CyberLink\PowerDVD11\PDVD11Serv.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Windows iLivid Toolbar\Datamngr\datamngrUI.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Software Informer\softinfo.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe C:\Windows.old\Program Files\WinZip\WZQKPICK.EXE C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil VoIP Plugin.exe C:\Windows\system32\wuauclt.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~1\WI3C8A~1\Datamngr\ToolBar\searchqudtx.dll O2 - BHO: UrlHelper Class - {A40DC6C5-79D0-4ca8-A185-8FF989AF1115} - C:\PROGRA~1\WI3C8A~1\Datamngr\IEBHO.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [XboxStat] "C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun O4 - HKLM\..\Run: [WindowsLivePhone] C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe /AutoRun O4 - HKLM\..\Run: [RemoteControl11] C:\Program Files\CyberLink\PowerDVD11\PDVD11Serv.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [DATAMNGR] C:\PROGRA~1\WI3C8A~1\Datamngr\DATAMN~1.EXE O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [software Informer] "C:\Program Files\Software Informer\softinfo.exe" -autorun O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [WindowsLivePhone] "C:\Program Files\Windows Live\Device Manager\msgrdvmn.exe" /AutoRun O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O4 - Global Startup: BlueSoleil.lnk = C:\Program Files\IVT Corporation\BlueSoleil\gprs.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: WinZip Quick Pick.lnk = C:\Windows.old\Program Files\WinZip\WZQKPICK.EXE O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000 O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O10 - Unknown file in Winsock LSP: c:\program files\vmware\vmware server\vsocklib.dll O10 - Unknown file in Winsock LSP: c:\program files\vmware\vmware server\vsocklib.dll O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\system32\Skype4COM.dll O20 - AppInit_DLLs: c:\progra~1\wi3c8a~1\datamngr\datamngr.dll c:\progra~1\wi3c8a~1\datamngr\iebho.dll O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe O23 - Service: CLHNServiceForPowerDVD - Unknown owner - C:\Program Files\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe O23 - Service: CyberLink PowerDVD 11.0 Monitor Service - CyberLink - C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe O23 - Service: CyberLink PowerDVD 11.0 Service - CyberLink - C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSServer.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: PACE License Services (PaceLicenseDServices) - PACE Anti-Piracy, Inc. - C:\Program Files\Common Files\PACE\Services\LicenseServices\LDSvc.exe O23 - Service: Start BT in service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\StartSkysolSvc.exe O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files\VMware\VMware Server\vmware-authd.exe O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\Windows\system32\vmnetdhcp.exe O23 - Service: VMware NAT Service - VMware, Inc. - C:\Windows\system32\vmnat.exe O23 - Service: VMware Host Agent (VMwareHostd) - Unknown owner - C:\Program Files\VMware\VMware Server\vmware-hostd.exe O23 - Service: VMware Server Web Access (VMwareServerWebAccess) - Apache Software Foundation - C:\Program Files\VMware\VMware Server\tomcat\bin\Tomcat6.exe O23 - Service: VMware VSS Writer (vmwriter) - VMware, Inc. - C:\Program Files\VMware\VMware Server\vmVssWriter.exe -- End of file - 8626 bytes

Jou wopllising werkte niet echt, maar bracht me wel op een idee. ik gebruik Firefox en heb er een add-ons geinstalleerd ABP. Ik kan het uitschakel voor youtube, met als gevolg dat ik fimpjes terug kan bekijken. Wel vreemd, de add-ons sta al meer dan 2 maanden geinstalleerd.

Sinds gisteren kan ik geen Youtube video's meer bekijken (via IE wel, maar die gebruik ik normaal nooit en ben niet vanp plan om die slechte browser te gaan gebruiken..). Ik krijg volgende foutmelding, voor eender welke video ik probeer te laden. "Er is een fout opgetreden. Probeer het later opnieuw." Heb al enig opzoekwerk verricht, zonder resulaat. Ik geloof dat het iets met de cookies instellingen te maken heeft?

En het is niet mogelijk om het via "compatibiteitsproblemen oplossen" of dergelijke te runnen?

Ik heb zonet 5 uur moeten wachten voor de download van Adobe After Effects cs5. In wil het installeren en ik krijg volgende foutmelding: "Adobe After Effects CS5 kan alleen worden geïnstalleerd op een 64-bit systeem" Ik heb al enig opzoekwerk verricht, waaruit blijkt dat het onmogelijk is om van 32-bit, naar 64-bit te upgraden. Is er een mogelijkheid om dit wel te laten functioneren? =/ Mvg, Beroe7