FUNMOODS ellende

[kape]

Download AdwCleaner by Xplode naar je Bureaublad.

• Sluit alle openstaande vensters
  
• Rechtsklik op AdwCleaner en selecteer als Administrator uitvoeren...
  
• Klik vervolgens op Delete
  
• Klik bij AdwCleaner – Information op OK
  
• Klik bij AdwCleaner – Restart Required op OK
  

Alle icoontjes verdwijnen van het Bureaublad, Dit is normaal

Je PC word opnieuw opgestart en er een opent logfile (C:\ AdwCleaner[xx].txt ) post de inhoud hier in een volgende bericht.

[Gast Hasje99]

Acties zijn uitgevoerd, de logfile vindt u hieronder.

Bij het opstarten van Mozilla kreeg ik de volgende melding "Gefeliciteerd de Fileconverter 1.4 werkbalk is geinstalleerd" Er waren twee opties "Installatie voltooien" en "Installatie afbreken" Ik heb voor afbreken gekozen.

# AdwCleaner v1.604 - Logfile created 09/20/2012 at 00:46:45

# Updated 23/04/2012 by Xplode

# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)

# User : Hans - HANS-PC

# Running from : C:\Users\Hans\AppData\Local\Temp\installer.exe

# Option [Delete]

***** [services] *****

***** [Files / Folders] *****

Folder Deleted : C:\Users\Hans\AppData\Local\Conduit

Folder Deleted : C:\Users\Hans\AppData\Local\Ilivid Player

Folder Deleted : C:\Users\Hans\AppData\LocalLow\BabylonToolbar

Folder Deleted : C:\Users\Hans\AppData\LocalLow\Conduit

Folder Deleted : C:\Users\Hans\AppData\LocalLow\ConduitEngine

Folder Deleted : C:\Users\Hans\AppData\LocalLow\PriceGong

Folder Deleted : C:\Users\Hans\AppData\LocalLow\Toolbar4

Folder Deleted : C:\Users\Hans\AppData\Roaming\BabylonToolbar

Folder Deleted : C:\Users\Hans\AppData\Roaming\OpenCandy

Folder Deleted : C:\Users\Hans\AppData\Roaming\Mozilla\Firefox\Profiles\pap4qzeb.default\Smartbar

Folder Deleted : C:\Users\Hans\AppData\Roaming\Mozilla\Firefox\Profiles\pap4qzeb.default\extensions\bbrs_002@blabbers.com

Folder Deleted : C:\ProgramData\~0

Folder Deleted : C:\ProgramData\Tarma Installer

Folder Deleted : C:\Program Files (x86)\Conduit

***** [Registry] *****

Key Deleted : HKCU\Software\Conduit

Key Deleted : HKCU\Software\Softonic

Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes

Key Deleted : HKLM\SOFTWARE\Babylon

Key Deleted : HKLM\SOFTWARE\Conduit

Key Deleted : HKLM\SOFTWARE\Freeze.com

Key Deleted : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb

***** [Registre - GUID] *****

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2D5E2D34-BED5-4B9F-9793-A31E26E6806E}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{872F3C0B-4462-424C-BB9F-74C6899B9F92}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}

Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]

[x64] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

***** [internet Browsers] *****

-\\ Internet Explorer v8.0.7601.17514

Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Backup.Old.Start Page] = hxxp://nl.ask.com/?l=dis&o=41648005&gct=hp --> hxxp://www.google.fr

-\\ Mozilla Firefox v10.0.2 (nl)

Profile name : default

File : C:\Users\Hans\AppData\Roaming\Mozilla\Firefox\Profiles\pap4qzeb.default\prefs.js

C:\Users\Hans\AppData\Roaming\Mozilla\Firefox\Profiles\pap4qzeb.default\user.js ... Deleted !

Deleted : user_pref("CT3241951.1000082.isDisplayHidden", "true");

Deleted : user_pref("CT3241951.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...]

Deleted : user_pref("CT3241951.1000234.TWC_TMP_city", "AMERSFOORT");

Deleted : user_pref("CT3241951.1000234.TWC_TMP_country", "NL");

Deleted : user_pref("CT3241951.1000234.TWC_locId", "NLXX0056");

Deleted : user_pref("CT3241951.1000234.TWC_location", "Amersfoort, Netherlands");

Deleted : user_pref("CT3241951.1000234.TWC_region", "OT");

Deleted : user_pref("CT3241951.1000234.TWC_temp_dis", "c");

Deleted : user_pref("CT3241951.1000234.TWC_wind_dis", "kmh");

Deleted : user_pref("CT3241951.1000234.weatherData", "{\"icon\":\"33.png\",\"temperature\":\"6°C\",\"temperatu[...]

Deleted : user_pref("CT3241951.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");

Deleted : user_pref("CT3241951.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]

Deleted : user_pref("CT3241951.FirstTime", "true");

Deleted : user_pref("CT3241951.FirstTimeFF3", "true");

Deleted : user_pref("CT3241951.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT324[...]

Deleted : user_pref("CT3241951.UserID", "UN45083810100253431");

Deleted : user_pref("CT3241951.addressBarTakeOverEnabledInHidden", "true");

Deleted : user_pref("CT3241951.browser.search.defaultthis.engineName", true);

Deleted : user_pref("CT3241951.embeddedsData", "[{\"appId\":\"129887071461900157\",\"apiPermissions\":{\"cross[...]

Deleted : user_pref("CT3241951.enableAlerts", "never");

Deleted : user_pref("CT3241951.event_data", "JTVCJTVE");

Deleted : user_pref("CT3241951.fired_events", "AA==");

Deleted : user_pref("CT3241951.firstTimeDialogOpened", "true");

Deleted : user_pref("CT3241951.fixPageNotFoundErrorInHidden", "true");

Deleted : user_pref("CT3241951.fixUrls", true);

Deleted : user_pref("CT3241951.installType", "Unknown");

Deleted : user_pref("CT3241951.isCheckedStartAsHidden", true);

Deleted : user_pref("CT3241951.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");

Deleted : user_pref("CT3241951.isFirstTimeToolbarLoading", "false");

Deleted : user_pref("CT3241951.isNewTabEnabled", false);

Deleted : user_pref("CT3241951.isPerformedSmartBarTransition", "true");

Deleted : user_pref("CT3241951.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");

Deleted : user_pref("CT3241951.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");

Deleted : user_pref("CT3241951.key_date", "MjA=");

Deleted : user_pref("CT3241951.keyword", true);

Deleted : user_pref("CT3241951.migrateAppsAndComponents", true);

Deleted : user_pref("CT3241951.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.pc-helpforum[...]

Deleted : user_pref("CT3241951.search.searchAppId", "129887071461900157");

Deleted : user_pref("CT3241951.search.searchCount", "0");

Deleted : user_pref("CT3241951.searchInNewTabEnabled", "false");

Deleted : user_pref("CT3241951.searchInNewTabEnabledInHidden", "true");

Deleted : user_pref("CT3241951.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");

Deleted : user_pref("CT3241951.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]

Deleted : user_pref("CT3241951.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]

Deleted : user_pref("CT3241951.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]

Deleted : user_pref("CT3241951.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]

Deleted : user_pref("CT3241951.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]

Deleted : user_pref("CT3241951.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]

Deleted : user_pref("CT3241951.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1347894588462");

Deleted : user_pref("CT3241951.serviceLayer_services_appsMetadata_lastUpdate", "1348074404458");

Deleted : user_pref("CT3241951.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1346943526535");

Deleted : user_pref("CT3241951.serviceLayer_services_login_10.13.1.89_lastUpdate", "1348088809129");

Deleted : user_pref("CT3241951.serviceLayer_services_menu_769c590835a76d075fe33b9a87a87786_lastUpdate", "13480[...]

Deleted : user_pref("CT3241951.serviceLayer_services_menu_d32f45618f5a02bd965c56155a643855_lastUpdate", "13480[...]

Deleted : user_pref("CT3241951.serviceLayer_services_optimizer_lastUpdate", "1348093989441");

Deleted : user_pref("CT3241951.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1346943526574");

Deleted : user_pref("CT3241951.serviceLayer_services_searchAPI_lastUpdate", "1348074404519");

Deleted : user_pref("CT3241951.serviceLayer_services_serviceMap_lastUpdate", "1348074404318");

Deleted : user_pref("CT3241951.serviceLayer_services_toolbarContextMenu_lastUpdate", "1346943526508");

Deleted : user_pref("CT3241951.serviceLayer_services_toolbarSettings_lastUpdate", "1348088809737");

Deleted : user_pref("CT3241951.serviceLayer_services_translation_lastUpdate", "1348074404523");

Deleted : user_pref("CT3241951.settingsINI", true);

Deleted : user_pref("CT3241951.smartbar.CTID", "CT3241951");

Deleted : user_pref("CT3241951.smartbar.Uninstall", "0");

Deleted : user_pref("CT3241951.smartbar.toolbarName", "FileConverter 1.4 ");

Deleted : user_pref("CT3241951.startPage", "userChanged");

Deleted : user_pref("CT3241951.toolbarBornServerTime", "6-9-2012");

Deleted : user_pref("CT3241951.toolbarCurrentServerTime", "20-9-2012");

Deleted : user_pref("CT3241951_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]

Deleted : user_pref("Smartbar.ConduitSearchEngineList", "FileConverter 1.4 Customized Web Search");

Deleted : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3241951[...]

Deleted : user_pref("Smartbar.keywordURLSelectedCTID", "CT3241951");

Deleted : user_pref("backup.old.browser.search.defaultenginename", "Ask.com");

Deleted : user_pref("backup.old.browser.search.selectedEngine", "FileConverter 1.4 Customized Web Search");

Deleted : user_pref("browser.newtab.url", "hxxp://search.babylon.com/?affID=115293&tt=3512_1&babsrc=NT_ss&mntr[...]

Deleted : user_pref("browser.search.defaultengine", "Ask.com");

Deleted : user_pref("browser.search.order.1", "Ask.com");

Deleted : user_pref("extensions.BabylonToolbar.babExt", "");

Deleted : user_pref("extensions.BabylonToolbar.babTrack", "affID=115293&tt=3512_1");

Deleted : user_pref("extensions.BabylonToolbar.cntry", "NL");

Deleted : user_pref("extensions.BabylonToolbar.dpk", "");

Deleted : user_pref("extensions.BabylonToolbar.envrmnt", "production");

Deleted : user_pref("extensions.BabylonToolbar.hdrMd5", "77D2646D21C12D60E46559FE3CAE1A0C");

Deleted : user_pref("extensions.BabylonToolbar.hmpg", false);

Deleted : user_pref("extensions.BabylonToolbar.isdcmntcmplt", true);

Deleted : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.6.9.1223:33:52");

Deleted : user_pref("extensions.BabylonToolbar.mntrvrsn", "1.3.1");

Deleted : user_pref("extensions.BabylonToolbar.newTab", false);

Deleted : user_pref("extensions.BabylonToolbar.pnu_base", "{\"newVrsn\":\"26\",\"lastVrsn\":\"26\",\"vrsnLoad\[...]

Deleted : user_pref("extensions.BabylonToolbar.sg", "none");

Deleted : user_pref("extensions.BabylonToolbar.smplGrp", "none");

Deleted : user_pref("extensions.BabylonToolbar.srcExt", "ss");

Deleted : user_pref("extensions.BabylonToolbar.vrsnTs", "1.6.9.1223:33:52");

Deleted : user_pref("extensions.funmoods.cntry", "NL");

Deleted : user_pref("extensions.funmoods.cv", "cv5");

Deleted : user_pref("extensions.funmoods.hdrMd5", "CD1CAE39638BD06FA4E90F594E2274AE");

Deleted : user_pref("extensions.funmoods.lastVrsnTs", "1.5.23.2220:51:19");

Deleted : user_pref("extensions.funmoods.newTab", true);

Deleted : user_pref("extensions.funmoods.sg", "none");

Deleted : user_pref("extensions.funmoods.smplGrp", "none");

Deleted : user_pref("extensions.funmoods.vrsnTs", "1.5.23.2220:51:19");

Deleted : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3241951&SearchSource=2&q=[...]

-\\ Google Chrome v [unable to get version]

File : C:\Users\Hans\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] File is clean.

*************************

AdwCleaner[s1].txt - [12322 octets] - [20/09/2012 00:46:45]

########## EOF - C:\AdwCleaner[s1].txt - [12451 octets] ##########

[kape]

En is er nu nog een probleem met de "FUNMOODS-ellende" ?

[Gast Hasje99]

Heb inmiddels diverse malen internet opgestart, en het lijkt erop dat het probleem opgelost is: de menubalk is verdwenen, tot op heden geen pop-ups meer gehad, en internet lijkt weer wat stabieler te zijn. Hoop dat het zo blijft, want hiermee is de Funmoods-ellende dus opgelost.

Ik wil hierbij dan ook mijn hartelijke dank en waardering uitspreken voor jullie werk, dit soort problemen kan een doorsnee PC gebruiker niet alleen oplossen. Dus nogmaals dank............

[kape]

Problemen van de baan, dan is het tijd voor de “grote schoonmaak” : verwijderen van gebruikte programma’s, een cleaning en het verwijderen van de besmette herstelpunten.

Verwijder Combofix: Start -> Uitvoeren/Zoekopdracht/Programma’s en bestanden zoeken en typ daar: ComboFix /Uninstall

Dit zal Combofix verwijderen + gerelateerde mappen en bestanden, herstelt de klokinstellingen opnieuw, verbergt de bestandsextensies, gaat verborgen bestanden en systeembestanden terug verbergen en maakt een nieuw herstelpunt.

Indien aanwezig mag je de map C:\Qoobox manueel verwijderen.

Download CCleaner.

Klik op “Download Latest Version” en dan start de download van CCleaner automatisch en gratis op.

Installeer het en start CCleaner op. Klik in de linkse kolom op “Cleaner”. Klik achtereenvolgens op ‘Analyseren’ en 'Schoonmaken'. Soms is 1 analyse niet voldoende. Deze procedure mag je herhalen tot de analyse geen fouten meer aangeeft. Klik vervolgens in de linkse kolom op “Register” en klik op ‘Scan naar problemen”. Als er fouten gevonden worden klik je op ”Herstel geselecteerde problemen” en ”OK”. Dan krijg je de vraag om een back-up te maken. Klik op “JA”. Kies dan “Herstel alle geselecteerde fouten”. Sluit hierna CCleaner terug af.

Wil je dit uitgebreid in beeld bekijken, klik dan hier voor de handleiding.

Het is aangewezen om de bestaande herstelpunten te verwijderen (daar zitten besmette herstelpunten tussen die je eventueel zou kunnen terugzetten). In Windows 7

• via Start -> Configuratiescherm -> Systeem & Beveiliging -> Systeem -> Systeembeveiliging -> schakel nu systeemherstel uit door de gewenste schijf te selecteren en op "configureren" te klikken.
  
• Klik nu op "verwijderen" om alle herstelpunten te verwijderen.
  
• Klik op "Toepassen" en "OK".
  
• Herstart nu de PC.