Windows 7 computer vertoont verschillende gebreken

JANMATTHEUSSEN · 6 november 2012

Malware blokkeert regelmatig websites, internet stopt regelmatig, outlook stopt, kan niet op bepaalde websites, enz

Malware logje

2012/11/06 06:55:50 +0100 JANM-PC IRENE MESSAGE Starting protection

2012/11/06 06:55:51 +0100 JANM-PC IRENE MESSAGE Protection started successfully

2012/11/06 06:55:51 +0100 JANM-PC IRENE MESSAGE Starting IP protection

2012/11/06 06:55:52 +0100 JANM-PC IRENE MESSAGE IP Protection started successfully

2012/11/06 06:56:32 +0100 JANM-PC IRENE IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49157, Process: svchost.exe)

2012/11/06 07:06:13 +0100 JANM-PC IRENE MESSAGE Executing scheduled update: Daily

2012/11/06 07:06:19 +0100 JANM-PC IRENE MESSAGE Scheduled update executed successfully: database updated from version v2012.11.05.06 to version v2012.11.06.02

2012/11/06 07:06:19 +0100 JANM-PC IRENE MESSAGE Starting database refresh

2012/11/06 07:06:20 +0100 JANM-PC IRENE MESSAGE Stopping IP protection

2012/11/06 07:06:20 +0100 JANM-PC IRENE MESSAGE IP Protection stopped successfully

2012/11/06 07:06:22 +0100 JANM-PC IRENE MESSAGE Database refreshed successfully

2012/11/06 07:06:22 +0100 JANM-PC IRENE MESSAGE Starting IP protection

2012/11/06 07:06:23 +0100 JANM-PC IRENE MESSAGE IP Protection started successfully

2012/11/06 07:08:30 +0100 JANM-PC IRENE IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49218, Process: svchost.exe)

2012/11/06 07:10:15 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49232, Process: sidebar.exe)

2012/11/06 07:14:08 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49241, Process: outlook.exe)

2012/11/06 08:13:27 +0100 JANM-PC IRENE MESSAGE Starting protection

2012/11/06 08:13:27 +0100 JANM-PC IRENE MESSAGE Protection started successfully

2012/11/06 08:13:27 +0100 JANM-PC IRENE MESSAGE Starting IP protection

2012/11/06 08:13:28 +0100 JANM-PC IRENE MESSAGE IP Protection started successfully

2012/11/06 08:14:08 +0100 JANM-PC IRENE IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49157, Process: svchost.exe)

2012/11/06 08:19:57 +0100 JANM-PC (null) IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49192, Process: svchost.exe)

2012/11/06 08:19:57 +0100 JANM-PC (null) IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49194, Process: svchost.exe)

2012/11/06 08:19:57 +0100 JANM-PC (null) IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49196, Process: svchost.exe)

2012/11/06 08:19:57 +0100 JANM-PC (null) IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49198, Process: svchost.exe)

2012/11/06 08:19:57 +0100 JANM-PC (null) IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49200, Process: svchost.exe)

2012/11/06 08:20:05 +0100 JANM-PC (null) IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49204, Process: svchost.exe)

2012/11/06 11:42:38 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49207, Process: sidebar.exe)

2012/11/06 11:48:40 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49217, Process: sidebar.exe)

2012/11/06 11:48:56 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49221, Process: outlook.exe)

2012/11/06 11:53:13 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49240, Process: logtransport2.exe)

2012/11/06 11:55:53 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49269, Process: iexplore.exe)

2012/11/06 11:56:02 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49303, Process: iexplore.exe)

2012/11/06 11:56:26 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49366, Process: iexplore.exe)

2012/11/06 11:58:43 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49385, Process: agent.exe)

2012/11/06 12:01:48 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49401, Process: rundll32.exe)

2012/11/06 12:20:17 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49479, Process: logtransport2.exe)

2012/11/06 12:32:27 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49501, Process: iexplore.exe)

2012/11/06 12:33:40 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49548, Process: svchost.exe)

2012/11/06 12:33:40 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49550, Process: svchost.exe)

2012/11/06 12:33:40 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49552, Process: svchost.exe)

2012/11/06 12:33:40 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49554, Process: svchost.exe)

2012/11/06 12:34:04 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49556, Process: iexplore.exe)

2012/11/06 12:39:49 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49592, Process: outlook.exe)

2012/11/06 12:40:37 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49612, Process: iexplore.exe)

2012/11/06 12:41:09 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49624, Process: svchost.exe)

2012/11/06 12:41:09 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49625, Process: svchost.exe)

2012/11/06 12:41:09 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 8)

2012/11/06 12:45:58 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49636, Process: rundll32.exe)

2012/11/06 13:02:01 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49682, Process: iexplore.exe)

2012/11/06 13:05:14 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49877, Process: iexplore.exe)

2012/11/06 13:06:18 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49960, Process: iexplore.exe)

2012/11/06 13:10:35 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 50168, Process: iexplore.exe)

2012/11/06 13:12:20 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 50361, Process: outlook.exe)

2012/11/06 13:21:49 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 50432, Process: iexplore.exe)

2012/11/06 13:28:55 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 50496, Process: iexplore.exe)

2012/11/06 13:30:24 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 50522, Process: iexplore.exe)

2012/11/06 13:40:10 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 50664, Process: iexplore.exe)

2012/11/06 13:43:30 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 50696, Process: logtransport2.exe)

2012/11/06 13:48:03 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 50777, Process: iexplore.exe)

2012/11/06 13:51:08 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 50797, Process: ielowutil.exe)

2012/11/06 13:51:32 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 50806, Process: svchost.exe)

2012/11/06 13:51:32 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 50807, Process: svchost.exe)

2012/11/06 13:51:32 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 50809, Process: svchost.exe)

2012/11/06 13:51:32 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 50810, Process: svchost.exe)

2012/11/06 13:51:32 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 50812, Process: svchost.exe)

2012/11/06 13:51:32 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 50813, Process: svchost.exe)

2012/11/06 13:51:32 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 50815, Process: svchost.exe)

2012/11/06 13:51:32 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 50816, Process: svchost.exe)

2012/11/06 13:51:32 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 50817, Process: svchost.exe)

2012/11/06 13:51:32 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 50818, Process: svchost.exe)

2012/11/06 13:51:32 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 50819, Process: svchost.exe)

2012/11/06 13:51:32 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 50820, Process: svchost.exe)

2012/11/06 13:51:32 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 50821, Process: svchost.exe)

2012/11/06 13:51:32 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 50822, Process: svchost.exe)

2012/11/06 13:51:32 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 50823, Process: svchost.exe)

2012/11/06 13:51:32 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 50824, Process: svchost.exe)

2012/11/06 13:57:10 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51042, Process: iexplore.exe)

2012/11/06 13:57:26 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51053, Process: outlook.exe)

2012/11/06 13:57:26 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51056, Process: svchost.exe)

2012/11/06 13:57:26 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51057, Process: svchost.exe)

2012/11/06 13:57:26 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51059, Process: svchost.exe)

2012/11/06 13:57:26 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51060, Process: svchost.exe)

2012/11/06 13:57:59 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51074, Process: iexplore.exe)

2012/11/06 14:03:20 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51175, Process: outlook.exe)

2012/11/06 14:03:20 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51178, Process: svchost.exe)

2012/11/06 14:03:20 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51179, Process: svchost.exe)

2012/11/06 14:03:20 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51181, Process: svchost.exe)

2012/11/06 14:03:20 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51182, Process: svchost.exe)

2012/11/06 14:05:36 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51211, Process: iexplore.exe)

2012/11/06 14:16:34 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51373, Process: iexplore.exe)

2012/11/06 14:22:19 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51478, Process: iexplore.exe)

2012/11/06 14:30:45 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51530, Process: iexplore.exe)

2012/11/06 14:36:14 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51654, Process: helppane.exe)

2012/11/06 15:00:04 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51659, Process: jusched.exe)

2012/11/06 15:00:04 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51661, Process: svchost.exe)

2012/11/06 15:00:04 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51662, Process: svchost.exe)

2012/11/06 15:00:37 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51664, Process: svchost.exe)

2012/11/06 15:00:37 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51665, Process: svchost.exe)

2012/11/06 15:00:37 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51667, Process: svchost.exe)

2012/11/06 15:00:37 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51668, Process: svchost.exe)

2012/11/06 15:00:37 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51670, Process: svchost.exe)

2012/11/06 15:00:37 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51671, Process: svchost.exe)

2012/11/06 15:00:37 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51673, Process: svchost.exe)

2012/11/06 15:00:37 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51674, Process: svchost.exe)

2012/11/06 15:00:37 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51675, Process: svchost.exe)

2012/11/06 15:00:37 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51676, Process: svchost.exe)

2012/11/06 15:00:37 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51677, Process: svchost.exe)

2012/11/06 15:00:37 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51678, Process: svchost.exe)

2012/11/06 15:00:37 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51679, Process: svchost.exe)

2012/11/06 15:00:37 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51680, Process: svchost.exe)

2012/11/06 15:00:37 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51681, Process: svchost.exe)

2012/11/06 15:00:37 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51682, Process: svchost.exe)

2012/11/06 15:30:31 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51685, Process: outlook.exe)

2012/11/06 15:30:39 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51688, Process: svchost.exe)

2012/11/06 15:30:39 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51689, Process: svchost.exe)

2012/11/06 15:30:39 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51691, Process: svchost.exe)

2012/11/06 15:30:39 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51692, Process: svchost.exe)

2012/11/06 15:53:29 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 51747, Process: iexplore.exe)

2012/11/06 15:53:37 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51759, Process: iexplore.exe)

2012/11/06 15:53:37 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51760, Process: iexplore.exe)

2012/11/06 15:53:37 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51761, Process: iexplore.exe)

2012/11/06 15:53:37 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51766, Process: iexplore.exe)

2012/11/06 15:53:37 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51770, Process: iexplore.exe)

2012/11/06 15:53:37 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51771, Process: iexplore.exe)

2012/11/06 15:53:37 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51772, Process: iexplore.exe)

2012/11/06 15:53:37 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51773, Process: iexplore.exe)

2012/11/06 15:53:37 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51775, Process: iexplore.exe)

2012/11/06 15:53:37 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51774, Process: iexplore.exe)

2012/11/06 15:53:37 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51776, Process: iexplore.exe)

2012/11/06 15:54:25 +0100 JANM-PC JanM IP-BLOCK 217.23.15.151 (Type: outgoing, Port: 51782, Process: iexplore.exe)

2012/11/06 15:54:25 +0100 JANM-PC JanM IP-BLOCK 217.23.15.151 (Type: outgoing, Port: 51781, Process: iexplore.exe)

2012/11/06 15:54:25 +0100 JANM-PC JanM IP-BLOCK 217.23.15.151 (Type: outgoing, Port: 51783, Process: iexplore.exe)

2012/11/06 15:54:25 +0100 JANM-PC JanM IP-BLOCK 217.23.15.151 (Type: outgoing, Port: 51784, Process: iexplore.exe)

2012/11/06 15:54:33 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51787, Process: iexplore.exe)

2012/11/06 15:54:34 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51786, Process: iexplore.exe)

2012/11/06 15:54:34 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51788, Process: iexplore.exe)

2012/11/06 15:54:34 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51789, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51791, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51790, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51792, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51793, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51799, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51798, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51800, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51802, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51801, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51803, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51805, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51804, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51807, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51806, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51809, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51808, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51810, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51811, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51812, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51813, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51814, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51816, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51815, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51863, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51862, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51866, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51867, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51868, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51869, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51870, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51871, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51873, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51872, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51877, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51878, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51879, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51880, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51881, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51883, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51882, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51884, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51885, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51887, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51888, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51886, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51889, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51890, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51891, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51892, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51893, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51894, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51895, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51896, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51897, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51898, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51899, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51900, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51817, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51818, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51820, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51821, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51819, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51822, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51823, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51824, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51825, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51826, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51827, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51828, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51829, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51830, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51831, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51832, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51833, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51834, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51835, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51836, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51837, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51838, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51839, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51841, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51840, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51844, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51845, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51846, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51843, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51844, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51845, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51846, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51847, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51848, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51849, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51853, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51852, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51854, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51855, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51856, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51858, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51859, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51860, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51861, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51857, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51865, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51864, Process: iexplore.exe)

2012/11/06 15:54:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51902, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51903, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51901, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51904, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51905, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51906, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51907, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51908, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51909, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51911, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51910, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51912, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51913, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51914, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51915, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51916, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51922, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51921, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51924, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51925, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51926, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51927, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51928, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51929, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51930, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51923, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51931, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51932, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51933, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51934, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51935, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51936, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51937, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51938, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51939, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51940, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51941, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51942, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51944, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51943, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51945, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51946, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51947, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51948, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51949, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51950, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51951, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51952, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51953, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51954, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51955, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51956, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51958, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51957, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51959, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51960, Process: iexplore.exe)

2012/11/06 15:54:51 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51961, Process: iexplore.exe)

2012/11/06 15:54:59 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51967, Process: iexplore.exe)

2012/11/06 15:54:59 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51968, Process: iexplore.exe)

2012/11/06 15:54:59 +0100 JANM-PC JanM IP-BLOCK 217.23.15.150 (Type: outgoing, Port: 51969, Process: iexplore.exe)

2012/11/06 16:29:59 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52027, Process: updater.exe)

2012/11/06 16:29:59 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52029, Process: updater.exe)

2012/11/06 18:06:15 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52038, Process: iexplore.exe)

2012/11/06 18:06:23 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52060, Process: googletoolbarnotifier.exe)

2012/11/06 18:06:47 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52068, Process: svchost.exe)

2012/11/06 18:06:47 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52069, Process: svchost.exe)

2012/11/06 18:06:47 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52071, Process: svchost.exe)

2012/11/06 18:06:47 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52072, Process: svchost.exe)

2012/11/06 18:06:47 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52074, Process: svchost.exe)

2012/11/06 18:06:48 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52075, Process: svchost.exe)

2012/11/06 18:06:48 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52077, Process: svchost.exe)

2012/11/06 18:06:48 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52078, Process: svchost.exe)

2012/11/06 18:06:48 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52079, Process: svchost.exe)

2012/11/06 18:06:48 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52080, Process: svchost.exe)

2012/11/06 18:06:48 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52081, Process: svchost.exe)

2012/11/06 18:06:48 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52082, Process: svchost.exe)

2012/11/06 18:06:48 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52083, Process: svchost.exe)

2012/11/06 18:06:48 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52084, Process: svchost.exe)

2012/11/06 18:06:48 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52085, Process: svchost.exe)

2012/11/06 18:06:48 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52086, Process: svchost.exe)

2012/11/06 18:15:30 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52103, Process: ascdownload.exe)

2012/11/06 18:16:10 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52105, Process: iexplore.exe)

2012/11/06 18:16:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52136, Process: svchost.exe)

2012/11/06 18:16:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52137, Process: svchost.exe)

2012/11/06 18:16:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52138, Process: svchost.exe)

2012/11/06 18:16:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52139, Process: svchost.exe)

2012/11/06 18:16:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52158, Process: svchost.exe)

2012/11/06 18:16:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52159, Process: svchost.exe)

2012/11/06 18:16:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52161, Process: svchost.exe)

2012/11/06 18:16:50 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52162, Process: svchost.exe)

2012/11/06 18:17:30 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52167, Process: svchost.exe)

2012/11/06 18:17:30 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52168, Process: svchost.exe)

2012/11/06 18:17:30 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 8)

2012/11/06 18:17:54 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52171, Process: svchost.exe)

2012/11/06 18:19:33 +0100 JANM-PC JanM MESSAGE Starting database refresh

2012/11/06 18:19:33 +0100 JANM-PC JanM MESSAGE Stopping IP protection

2012/11/06 18:19:33 +0100 JANM-PC JanM MESSAGE IP Protection stopped successfully

2012/11/06 18:19:43 +0100 JANM-PC JanM MESSAGE Database refreshed successfully

2012/11/06 18:19:43 +0100 JANM-PC JanM MESSAGE Starting IP protection

2012/11/06 18:19:44 +0100 JANM-PC JanM MESSAGE IP Protection started successfully

2012/11/06 18:45:58 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52198, Process: msfeedssync.exe)

2012/11/06 18:46:06 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 52199, Process: msfeedssync.exe)

2012/11/06 20:48:19 +0100 JANM-PC JanM MESSAGE Starting protection

2012/11/06 20:48:19 +0100 JANM-PC JanM MESSAGE Protection started successfully

2012/11/06 20:48:19 +0100 JANM-PC JanM MESSAGE Starting IP protection

2012/11/06 20:48:20 +0100 JANM-PC JanM MESSAGE IP Protection started successfully

2012/11/06 20:48:53 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49187, Process: sidebar.exe)

2012/11/06 20:49:17 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49192, Process: svchost.exe)

2012/11/06 20:49:17 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49193, Process: svchost.exe)

2012/11/06 20:49:17 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49195, Process: svchost.exe)

2012/11/06 20:49:17 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49196, Process: svchost.exe)

2012/11/06 20:49:17 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49198, Process: svchost.exe)

2012/11/06 20:49:17 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49199, Process: svchost.exe)

2012/11/06 20:49:17 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49200, Process: svchost.exe)

2012/11/06 20:49:17 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49201, Process: svchost.exe)

2012/11/06 20:49:17 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49202, Process: svchost.exe)

2012/11/06 20:49:17 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49203, Process: svchost.exe)

2012/11/06 20:49:17 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49204, Process: svchost.exe)

2012/11/06 20:49:17 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49205, Process: svchost.exe)

2012/11/06 20:49:17 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49206, Process: svchost.exe)

2012/11/06 20:49:17 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49207, Process: svchost.exe)

2012/11/06 20:49:25 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49208, Process: iexplore.exe)

2012/11/06 20:49:33 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49223, Process: outlook.exe)

2012/11/06 20:49:41 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49230, Process: svchost.exe)

2012/11/06 20:49:41 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49231, Process: svchost.exe)

2012/11/06 20:49:41 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49233, Process: svchost.exe)

2012/11/06 20:49:41 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49234, Process: svchost.exe)

2012/11/06 20:54:14 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49323, Process: javaw.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49462, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49465, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49463, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49464, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49467, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49466, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49469, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49468, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49470, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49471, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49472, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49473, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49474, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49476, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49477, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49478, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49475, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49479, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49480, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49481, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49482, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49483, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49484, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49485, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49486, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49487, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49488, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49489, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49490, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49491, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49492, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49493, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49494, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49495, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49496, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49497, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49498, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49499, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49500, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49501, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49502, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49503, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49504, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49505, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49506, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49509, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49508, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49510, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49512, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49513, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49516, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49515, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49517, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49518, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49519, Process: iexplore.exe)

2012/11/06 20:57:35 +0100 JANM-PC JanM IP-BLOCK 220.73.161.56 (Type: outgoing, Port: 49520, Process: iexplore.exe)

2012/11/06 21:01:27 +0100 JANM-PC JanM IP-BLOCK 217.23.15.153 (Type: outgoing, Port: 49599, Process: svchost.exe)

Laatste logfile

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 21:34:22, on 6/11/2012

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v9.00 (9.00.8112.16450)

Boot mode: Normal

Running processes:

D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

D:\Windows\System32\spool\drivers\x64\3\WrtMon.exe

D:\Program Files\Mouse\Amoumain.exe

D:\Windows\System32\spool\drivers\x64\3\WrtProc.exe

D:\Program Files (x86)\Ask.com\Updater\Updater.exe

D:\Program Files (x86)\NetworkIndicator\NetworkIndicator.exe

D:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe

D:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE

D:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe

D:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe

D:\Program Files (x86)\McAfee\Common Framework\UdaterUI.exe

D:\Program Files (x86)\NewSoft\Presto! PageManager 9.01\PMSpeed.exe

D:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

D:\Program Files (x86)\Nuance\PDF Create 7\PdfCreate7Hook.exe

D:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

D:\Program Files (x86)\Fighters\Tray\FightersTray.exe

D:\Program Files (x86)\Fighters\SPAMfighter\sfagent.exe

D:\Program Files (x86)\Ask.com\Updater\Updater.exe

D:\Program Files (x86)\McAfee\Common Framework\McTray.exe

D:\Program Files (x86)\McAfee\VirusScan Enterprise\SHSTAT.EXE

D:\Program Files (x86)\Internet Explorer\iexplore.exe

D:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe

D:\Program Files (x86)\Internet Explorer\iexplore.exe

D:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_4_402_287_ActiveX.exe

D:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = (1) {searchTerms - Web Search Results}

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = (1) {searchTerms - Web Search Results}

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = (1) {searchTerms - Web Search Results}

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

F2 - REG:system.ini: UserInit=userinit.exe,

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - D:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files (x86)\Java\jre7\bin\ssv.dll

O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - D:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20120424160640.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - D:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL

O2 - BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - D:\PROGRA~2\IObit\ADVANC~2\BROWER~1\ASCPLU~1.DLL

O2 - BHO: ZeonIEEventHelper Class - {DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} - (no file)

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - D:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O3 - Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - (no file)

O4 - HKLM\..\Run: [McAfeeUpdaterUI] "D:\Program Files (x86)\McAfee\Common Framework\udaterui.exe" /StartedFromRunKey

O4 - HKLM\..\Run: [shStatEXE] "D:\Program Files (x86)\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE

O4 - HKLM\..\Run: [PMSpeed] D:\Program Files (x86)\NewSoft\Presto! PageManager 9.01\PMSpeed.EXE

O4 - HKLM\..\Run: [NUSB3MON] "D:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "D:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [OmniPage Preload] D:\Program Files (x86)\Nuance\OmniPage18\OmniPage18.exe /preload

O4 - HKLM\..\Run: [Nuance OmniPage 18-reminder] "D:\Program Files (x86)\Nuance\OmniPage18\Ereg\Ereg.exe" -r "D:\ProgramData\ScanSoft\OmniPage 18\Ereg\Ereg.ini"

O4 - HKLM\..\Run: [PDFCreHook] D:\Program Files (x86)\Nuance\PDF Create 7\pdfcreate7hook.exe

O4 - HKLM\..\Run: [PDF7 Registry Controller] D:\Program Files (x86)\Nuance\PDF Create 7\RegistryController.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "D:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [CommonToolkitTray] D:\Program Files (x86)\Fighters\Tray\FightersTray.exe

O4 - HKLM\..\Run: [sfagent] D:\Program Files (x86)\Fighters\SPAMfighter\sfagent.exe

O4 - HKLM\..\Run: [ApnUpdater] d:\program files (x86)\ask.com\updater\updater.exe

O4 - HKLM\..\Run: [JMB36X IDE Setup] d:\windows\raidtool\xinside.exe

O4 - HKLM\..\Run: [updateUSB] d:\windows\inf\updateusb.exe

O4 - HKCU\..\Run: [sidebar] D:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [NetworkIndicator] D:\Program Files (x86)\NetworkIndicator\NetworkIndicator.exe

O4 - HKCU\..\Run: [OpAgent] "OpAgent.exe" /agent

O4 - HKCU\..\Run: [iSUSPM] D:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler

O4 - HKCU\..\Run: [OfficeSyncProcess] "D:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE"

O4 - HKCU\..\Run: [TomTomHOME.exe] "D:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"

O4 - HKCU\..\Run: [Advanced SystemCare 6] "D:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" /AutoStart

O4 - HKCU\..\Run: [swg] "D:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)

O9 - Extra button: (no name) - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - D:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - D:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://oas.support.microsoft.com/ActiveX/MSDcode.cab

O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} (asusTek_sysctrl Class) - http://support.asus.com/select/asusTek_sys_ctrl3.cab

O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - D:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - D:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - D:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: Advanced SystemCare Service 6 (AdvancedSystemCareService6) - IObit - D:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - D:\Windows\System32\alg.exe (file missing)

O23 - Service: AMD External Events Utility - Unknown owner - D:\Windows\system32\atiesrxx.exe (file missing)

O23 - Service: ASUS System Control Service (AsSysCtrlService) - ASUSTeK Computer Inc. - D:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - D:\Windows\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - D:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - D:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - D:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - D:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - D:\Windows\system32\lsass.exe (file missing)

O23 - Service: MBAMScheduler - Malwarebytes Corporation - D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

O23 - Service: MBAMService - Malwarebytes Corporation - D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

O23 - Service: McAfee Framework Service (McAfeeFramework) - McAfee, Inc. - D:\Program Files (x86)\McAfee\Common Framework\FrameworkService.exe

O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - D:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe

O23 - Service: McAfee Task Manager (McTaskManager) - McAfee, Inc. - D:\Program Files (x86)\McAfee\VirusScan Enterprise\VsTskMgr.exe

O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - Unknown owner - D:\Windows\system32\mfevtps.exe (file missing)

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - D:\Windows\System32\msdtc.exe (file missing)

O23 - Service: Netlogon - Unknown owner - D:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - D:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - D:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - D:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - D:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: SPAMfighter Update Service - SPAMfighter ApS - D:\Program Files (x86)\Fighters\SPAMfighter\sfus.exe

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - D:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: Software Protection (sppsvc) - Unknown owner - D:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: Suite Service - SPAMfighter ApS - D:\Program Files (x86)\Fighters\FighterSuiteService.exe

O23 - Service: TomTomHOMEService - TomTom - D:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - D:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: UMVPFSrv - Logitech Inc. - D:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - D:\Windows\system32\lsass.exe (file missing)

O23 - Service: Virtual Disk (vds) - Unknown owner - D:\Windows\System32\vds.exe (file missing)

O23 - Service: Volume Shadow Copy (VSS) - Unknown owner - D:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - D:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - D:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - D:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: Windows Media Player Network Sharing Service (WMPNetworkSvc) - Unknown owner - D:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--

End of file - 12976 bytes

Mako · 6 november 2012

Je topic werd verplaatst naar Bestrijding spyware, virussen, zo word je sneller geholpen door een malware-specialist.

kape · 7 november 2012

Start Hijackthis op. Selecteer “Scan”. Selecteer alleen de items die hieronder zijn genoemd:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = (1) {searchTerms - Web Search Results}

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = (1) {searchTerms - Web Search Results}

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = (1) {searchTerms - Web Search Results}

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O2 - BHO: ZeonIEEventHelper Class - {DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} - (no file)

O3 - Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - (no file)

O4 - HKLM\..\Run: [ApnUpdater] d:\program files (x86)\ask.com\updater\updater.exe

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)

Klik op 'Fix checked' om de items te verwijderen.

Let op : Windows Vista & 7 gebruikers dienen HijackThis als “administrator” uit te voeren via rechtermuisknop “als administrator uitvoeren". Indien dit via de snelkoppeling niet lukt voer je HijackThis als administrator uit in de volgende map : C:\Program Files\Trend Micro\HiJackThis of C:\Program Files (x86)\Trend Micro\HiJackThis.

Download MBAM (Malwarebytes Anti-Malware)

Dubbelklik op mbam-setup.exe om het programma te installeren.

Zorg ervoor dat er een vinkje geplaatst is voor Update Malwarebytes' Anti-Malware en Start Malwarebytes' Anti-Malware, Klik daarna op "Voltooien".

Indien een update gevonden werd, zal die gedownload en geïnstalleerd worden.

Wanneer het programma volledig up to date is, selecteer dan in het tabblad Scanner : "Snelle Scan", daarna klik op Scan.

Het scannen kan een tijdje duren, dus wees geduldig.

Wanneer de scan voltooid is, klik op OK, daarna "Bekijk Resultaten" om de resultaten te zien.

Zorg ervoor dat daar alles aangevinkt is, daarna klik op: Verwijder geselecteerde.

Na het verwijderen zal een log openen en zal er gevraagd worden om de computer opnieuw op te starten. (Zie verder).

Indien er de rootkit (TDSS) aanwezig is, zal MBAM vragen te herstarten. Doe dit dan ook.

MBAM zal na de herstart opnieuw scannen en de rootkit verwijderen.

Het log wordt automatisch bewaard door MBAM en kan je terugvinden door op de "Logs" tab te klikken in het programma.

Indien MBAM moeilijkheden heeft met het verwijderen van bepaalde bestanden zal het enkele meldingen geven waar je OK moet klikken. Daarna zal het vragen om de computer opnieuw op te starten... dus sta toe dat MBAM de computer opnieuw opstart.

Plak de inhoud van het logje in je volgende bericht, samen met een nieuw HijackThis log.

JANMATTHEUSSEN · 7 november 2012

Ik heb uw instructie opgevolgd en hier de resultaten;

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 20:41:12, on 7/11/2012

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v9.00 (9.00.8112.16450)

Boot mode: Normal

Running processes:

D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

D:\Program Files (x86)\Uniblue\RegistryBooster\rbmonitor.exe

D:\Windows\System32\spool\drivers\x64\3\WrtMon.exe

D:\Program Files\Mouse\Amoumain.exe

D:\Windows\System32\spool\drivers\x64\3\WrtProc.exe

D:\Program Files (x86)\Ask.com\Updater\Updater.exe

D:\Program Files (x86)\NetworkIndicator\NetworkIndicator.exe

D:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe

D:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE

D:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe

D:\Program Files (x86)\McAfee\Common Framework\UdaterUI.exe

D:\Program Files (x86)\NewSoft\Presto! PageManager 9.01\PMSpeed.exe

D:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application

\nusb3mon.exe

D:\Program Files (x86)\Nuance\PDF Create 7\PdfCreate7Hook.exe

D:\Program Files (x86)\McAfee\Common Framework\McTray.exe

D:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

D:\Program Files (x86)\Fighters\Tray\FightersTray.exe

D:\Program Files (x86)\Fighters\SPAMfighter\sfagent.exe

D:\Program Files (x86)\Ask.com\Updater\Updater.exe

D:\Program Files (x86)\McAfee\VirusScan Enterprise\SHSTAT.EXE

D:\Program Files (x86)\Internet Explorer\IELowutil.exe

D:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =

Babylon Search-

8e59-3b3c56be9c92&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms}

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

Google

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

MSN.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

MSN.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

F2 - REG:system.ini: UserInit=userinit.exe,

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - D:\Program

Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -

D:\Program Files (x86)\Java\jre7\bin\ssv.dll

O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - D:\Program Files

(x86)\Common Files\McAfee\SystemCore\ScriptSn.20120424160640.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - D:

\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:

\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL

O2 - BHO: ZeonIEEventHelper Class - {DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} - (no

file)

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} -

D:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - D:\Program

Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O3 - Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - (no file)

O4 - HKLM\..\Run: [McAfeeUpdaterUI] "D:\Program Files (x86)\McAfee\Common Framework

\udaterui.exe" /StartedFromRunKey

O4 - HKLM\..\Run: [shStatEXE] "D:\Program Files (x86)\McAfee\VirusScan Enterprise

\SHSTAT.EXE" /STANDALONE

O4 - HKLM\..\Run: [PMSpeed] D:\Program Files (x86)\NewSoft\Presto! PageManager

9.01\PMSpeed.EXE

O4 - HKLM\..\Run: [NUSB3MON] "D:\Program Files (x86)\Renesas Electronics\USB 3.0 Host

Controller Driver\Application\nusb3mon.exe"

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\Program Files (x86)\Adobe\Reader

9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "D:\Program Files (x86)\Common Files\Adobe\ARM

\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [OmniPage Preload] D:\Program Files (x86)\Nuance

\OmniPage18\OmniPage18.exe /preload

O4 - HKLM\..\Run: [Nuance OmniPage 18-reminder] "D:\Program Files (x86)\Nuance

\OmniPage18\Ereg\Ereg.exe" -r "D:\ProgramData\ScanSoft\OmniPage 18\Ereg\Ereg.ini"

O4 - HKLM\..\Run: [PDFCreHook] D:\Program Files (x86)\Nuance\PDF Create

7\pdfcreate7hook.exe

O4 - HKLM\..\Run: [PDF7 Registry Controller] D:\Program Files (x86)\Nuance\PDF Create

7\RegistryController.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "D:\Program Files (x86)\Common Files\Java\Java

Update\jusched.exe"

O4 - HKLM\..\Run: [CommonToolkitTray] D:\Program Files (x86)\Fighters\Tray

\FightersTray.exe

O4 - HKLM\..\Run: [sfagent] D:\Program Files (x86)\Fighters\SPAMfighter\sfagent.exe

O4 - HKLM\..\Run: [ApnUpdater] d:\program files (x86)\ask.com\updater\updater.exe

O4 - HKLM\..\Run: [JMB36X IDE Setup] d:\windows\raidtool\xinside.exe

O4 - HKLM\..\Run: [updateUSB] d:\windows\inf\updateusb.exe

O4 - HKLM\..\Run: [beid] "D:\Program Files (x86)\Belgium Identity Card\beid35gui.exe"

/startup

O4 - HKCU\..\Run: [sidebar] D:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [NetworkIndicator] D:\Program Files (x86)\NetworkIndicator

\NetworkIndicator.exe

O4 - HKCU\..\Run: [OpAgent] "OpAgent.exe" /agent

O4 - HKCU\..\Run: [iSUSPM] D:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler

O4 - HKCU\..\Run: [OfficeSyncProcess] "D:\Program Files (x86)\Microsoft Office

\Office14\MSOSYNC.EXE"

O4 - HKCU\..\Run: [TomTomHOME.exe] "D:\Program Files (x86)\TomTom HOME

2\TomTomHOMERunner.exe"

O4 - HKCU\..\Run: [swg] "D:\Program Files (x86)\Google\GoogleToolbarNotifier

\GoogleToolbarNotifier.exe"

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe

/autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] D:\Windows\System32\mctadmin.exe (User

'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe

/autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] D:\Windows\System32\mctadmin.exe (User

'NETWORK SERVICE')

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-

00401C608501} - (no file)

O9 - Extra button: (no name) - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Program

Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-

EDE0DB0C95CA} - D:\Program Files (x86)\Microsoft Office

\Office14\ONBttnIELinkedNotes.dll

O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-

9849-EDE0DB0C95CA} - D:\Program Files (x86)\Microsoft Office

\Office14\ONBttnIELinkedNotes.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection

Control) - https://oas.support.microsoft.com/ActiveX/MSDcode.cab

O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} (asusTek_sysctrl Class) -

http://support.asus.com/select/asusTek_sys_ctrl3.cab

O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - D:\Program Files

(x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems

Incorporated - D:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe

Systems Incorporated - D:\Windows\SysWOW64\Macromed\Flash

\FlashPlayerUpdateService.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - D:

\Windows\System32\alg.exe (file missing)

O23 - Service: AMD External Events Utility - Unknown owner - D:\Windows

\system32\atiesrxx.exe (file missing)

O23 - Service: @%systemroot%\system32\CISVC.EXE,-1 (CISVC) - Unknown owner - D:

\Windows\system32\CISVC.EXE (file missing)

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - D:

\Windows\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - D:

\Windows\system32\fxssvc.exe (file missing)

O23 - Service: @%windir%\system32\inetsrv\iisres.dll,-30007 (IISADMIN) - Unknown owner -

D:\Windows\system32\inetsrv\inetinfo.exe (file missing)

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - D:\Windows\system32\lsass.exe

(file missing)

O23 - Service: MBAMScheduler - Malwarebytes Corporation - D:\Program Files

(x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

O23 - Service: MBAMService - Malwarebytes Corporation - D:\Program Files

(x86)\Malwarebytes' Anti-Malware\mbamservice.exe

O23 - Service: McAfee Framework Service (McAfeeFramework) - McAfee, Inc. - D:\Program

Files (x86)\McAfee\Common Framework\FrameworkService.exe

O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - D:\Program Files\Common Files

\McAfee\SystemCore\\mcshield.exe

O23 - Service: McAfee Task Manager (McTaskManager) - McAfee, Inc. - D:\Program Files

(x86)\McAfee\VirusScan Enterprise\VsTskMgr.exe

O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - Unknown owner - D:

\Windows\system32\mfevtps.exe (file missing)

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - D:\Windows

\System32\msdtc.exe (file missing)

O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - D:\Windows

\system32\mqsvc.exe (file missing)

O23 - Service: @mqutil.dll,-6203 (MSMQTriggers) - Unknown owner - D:\Windows

\system32\mqtgsvc.exe (file missing)

O23 - Service: Netlogon - Unknown owner - D:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%windir%\system32\nfsrc.dll,-5001 (NfsClnt) - Unknown owner - D:

\Windows\system32\nfsclnt.exe (file missing)

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown

owner - D:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner -

D:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - D:

\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner

- D:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - D:

\Windows\System32\spoolsv.exe (file missing)

O23 - Service: Software Protection (sppsvc) - Unknown owner - D:\Windows

\system32\sppsvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner

- D:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner -

D:\Windows\system32\lsass.exe (file missing)

O23 - Service: Virtual Disk (vds) - Unknown owner - D:\Windows\System32\vds.exe (file

missing)

O23 - Service: Volume Shadow Copy (VSS) - Unknown owner - D:\Windows

\system32\vssvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown

owner - D:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner -

D:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown

owner - D:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: Windows Media Player Network Sharing Service (WMPNetworkSvc) -

Unknown owner - D:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

O23 - Service: @%windir%\system32\inetsrv\iisres.dll,-20001 (WMSVC) - Unknown owner -

D:\Windows\system32\inetsrv\wmsvc.exe (file missing)

--

End of file - 12131 bytes

Malwarebytes Anti-Malware (PRO) 1.65.1.1000

www.malwarebytes.org

Databaseversie: v2012.11.07.03

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 9.0.8112.16421

JanM :: JANM-PC [administrator]

Realtime bescherming: Ingeschakeld

7/11/2012 20:41:35

mbam-log-2012-11-07 (20-41-35).txt

Scantype: Snelle scan

Uitgeschakelde scanopties: P2P

Objecten gescand: 249939

Verstreken tijd: 4 minuut/minuten, 47 seconde(n)

Geheugenprocessen gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

Geheugenmodulen gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

Registersleutels gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

Registerwaarden gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

Registerdata gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

Mappen gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

Bestanden gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

(einde)

kape · 8 november 2012

De behandeling met HijackThis lijkt niet correct uitgevoerd en/of gelukt te zijn. Heb je dit als Win 7-gebruiker uitgevoerd als "administrator" ? Zo nee, wil je het nog eens op die wijze herhalen en daarna een nieuw logje van HijackThis plaatsen.

JANMATTHEUSSEN · 8 november 2012

Kan mijn programmas niet openen als administrator. Er verschijnt geen snelkoppeling "run als administrator" bij het indrukken van de rechtse muisknop

Mako · 8 november 2012

Probeer het eens in volgende map:

C:\Program Files\Trend Micro\HiJackThis of C:\Program Files (x86)\Trend Micro\HiJackThis.

(Bekijk hier de afbeelding ---> Klik hier)

JANMATTHEUSSEN · 8 november 2012

Ik heb Mako gevolgd en zie hier het resultaat;

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 18:08:54, on 8/11/2012

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v9.00 (9.00.8112.16450)

Boot mode: Normal

Running processes:

D:\Program Files (x86)\Uniblue\RegistryBooster\rbmonitor.exe

D:\Windows\System32\spool\drivers\x64\3\WrtMon.exe

D:\Program Files\Mouse\Amoumain.exe

D:\Windows\System32\spool\drivers\x64\3\WrtProc.exe

D:\Program Files (x86)\NetworkIndicator\NetworkIndicator.exe

D:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe

D:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE

D:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe

D:\Program Files (x86)\McAfee\Common Framework\UdaterUI.exe

D:\Program Files (x86)\NewSoft\Presto! PageManager 9.01\PMSpeed.exe

D:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

D:\Program Files (x86)\Nuance\PDF Create 7\PdfCreate7Hook.exe

D:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

D:\Program Files (x86)\Fighters\Tray\FightersTray.exe

D:\Program Files (x86)\Fighters\SPAMfighter\sfagent.exe

D:\Program Files (x86)\Ask.com\Updater\Updater.exe

D:\Program Files (x86)\Nuance\Nuance Cloud Connector\GladinetClient.exe

D:\Program Files (x86)\McAfee\Common Framework\McTray.exe

D:\Program Files (x86)\McAfee\VirusScan Enterprise\SHSTAT.EXE

D:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

D:\Windows\sysWow64\SearchProtocolHost.exe

D:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = (1) {searchTerms - Web Search Results}

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer, optimized for Bing and MSN

F2 - REG:system.ini: UserInit=userinit.exe,

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - D:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files (x86)\Java\jre7\bin\ssv.dll

O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - D:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20120424160640.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - D:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - D:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O3 - Toolbar: Nuance PDF - {E3286BF1-E654-42FF-B4A6-5E111731DF6B} - D:\Program Files (x86)\Nuance\PDF Create 7\bin\ZeonIEFavClient.dll (file missing)