Bogey
-
Items
15 -
Registratiedatum
-
Laatst bezocht
Bogey's prestaties
-
een aantal windows updates mislukken steeds op laptop met vista
Bogey plaatste een topic in Archief Windows Algemeen
Beste, al zeer geruime mislukken een aantal windows updates steeds wat vervelend is want de laptop vraagt altijd bij het afsluiten om windows updates te installeren. Het gaat om volgende updates: KB2835393: Beveiligingsupdate voor Microsoft .NET Framework 4 op Windows XP, Windows Server 2003, Windows Vista, Windows 7 en Windows Server 2008 x86 KB2600217: Update voor Microsoft .NET Framework 4 op Windows XP, Windows Server 2003, Windows Vista, Windows 7 en Windows Server 2008 x86 Beveiligingsupdate voor Microsoft .NET Framework 4 voor XP, Server 2003, Vista en Server 2008 voor x86-systemen (KB2861188) KB2840628: Beveiligingsupdate voor Microsoft .NET Framework 4 op Windows XP, Windows Server 2003, Windows Vista, Windows 7 en Windows Server 2008 x86 KB2604121: Beveiligingsupdate voor Microsoft .NET Framework 4 op Windows XP, Windows Server 2003, Windows Vista, Windows 7 en Windows Server 2008 x86 KB2861697: Beveiligingsupdate voor Microsoft .NET Framework 3.5 SP1 op Windows XP, Windows Server 2003, Windows Vista en Windows Server 2008 x86 KB2836939: Update voor Microsoft .NET Framework 4 op Windows XP, Windows Server 2003, Windows Vista, Windows 7 en Windows Server 2008 x86 KB2858302: Beveiligingsupdate voor Microsoft .NET Framework 4 op Windows XP, Windows Server 2003, Windows Vista, Windows 7 en Windows Server 2008 x86 KB2789642: Beveiligingsupdate voor Microsoft .NET Framework 4 op Windows XP, Windows Server 2003, Windows Vista, Windows 7 en Windows Server 2008 x86 Foutdetails: Code 643 Ik vermoed dat het iets te maken heeft met Microsoft .NET Framework maar heb er te weinig verstand van om te weten waarvoor dit dient, laat staan wat ik er moet aan doen. Bij voorbaat bedankt. Bogey -
zeer trage computer - harddisk werkt vorrtdurend
Bogey reageerde op Bogey's topic in Archief Bestrijding malware & virussen
ja, en die andere updates blijken te lukken. Het is altijd die ene die mislukt. -
zeer trage computer - harddisk werkt vorrtdurend
Bogey reageerde op Bogey's topic in Archief Bestrijding malware & virussen
Sorry, ik had pagina 2 niet gezien en dus je antwoord gemist. Maar toch is de computer nog traag. Er lopen 82 processen en een veelvoud aan services. Is dit niet wat veel en hoe kan ik dit copieren en plakken om te posten ? -
zeer trage computer - harddisk werkt vorrtdurend
Bogey reageerde op Bogey's topic in Archief Bestrijding malware & virussen
Ik begrijp er niets meer van. XP heeft nooit op deze computer gestaan, enkel 7. Windows update vraagt me welke downloads ik wil doen. [TABLE] [TR] [TD=class: co1]7601.17514.101119-1850_Update_Sp_Wave1-GRMSP1.1_DVD.iso[/TD] [TD]1.9 GB[/TD] [/TR] [TR] [TD=class: co1]Windows_Win7SP1.7601.17514.101119-1850.AMD64CHK.Symbols.msi[/TD] [TD]262.7 MB[/TD] [/TR] [TR] [TD=class: co1]Windows_Win7SP1.7601.17514.101119-1850.AMD64FRE.Symbols.msi[/TD] [TD]287.8 MB[/TD] [/TR] [TR] [TD=class: co1]Windows_Win7SP1.7601.17514.101119-1850.IA64CHK.Symbols.msi[/TD] [TD]241.8 MB[/TD] [/TR] [TR] [TD=class: co1]Windows_Win7SP1.7601.17514.101119-1850.IA64FRE.Symbols.msi[/TD] [TD]193.4 MB[/TD] [/TR] [TR] [TD=class: co1]Windows_Win7SP1.7601.17514.101119-1850.X86CHK.Symbols.msi[/TD] [TD]294.5 MB[/TD] [/TR] [TR] [TD=class: co1]Windows_Win7SP1.7601.17514.101119-1850.X86FRE.Symbols.msi[/TD] [TD]330.6 MB[/TD] [/TR] [TR] [TD=class: co1]windows6.1-KB976932-IA64.exe[/TD] [TD]511.6 MB[/TD] [/TR] [TR] [TD=class: co1]windows6.1-KB976932-X64.exe[/TD] [TD]903.2 MB[/TD] [/TR] [TR] [TD=class: co1]windows6.1-KB976932-X86.exe kunt u me zeggen welke ik moet doen ? Verder kan ik melden dat de computer terug zo traag loopt als een oudje met een looprek en de zoek.exe wil zelfs niet openen. Ik ga even heropstarten en kijken welke processen allemaal lopen en posten. Misschien zit daar iets bij wat niet deugd. [/TD] [TD]537.8 MB [/TD] [/TR] [/TABLE] -
zeer trage computer - harddisk werkt vorrtdurend
Bogey reageerde op Bogey's topic in Archief Bestrijding malware & virussen
Ik begrijp er niets van. Deze computer heeft nooit xp gehad, altijd 7. In het downloadcentrum moet ik kiezen welke downloads ik wens. Welke kies ik dan ? [TABLE] [TR] [TD=class: co1]7601.17514.101119-1850_Update_Sp_Wave1-GRMSP1.1_DVD.iso[/TD] [TD]1.9 GB[/TD] [/TR] [TR] [TD=class: co1]Windows_Win7SP1.7601.17514.101119-1850.AMD64CHK.Symbols.msi[/TD] [TD]262.7 MB[/TD] [/TR] [TR] [TD=class: co1]Windows_Win7SP1.7601.17514.101119-1850.AMD64FRE.Symbols.msi[/TD] [TD]287.8 MB[/TD] [/TR] [TR] [TD=class: co1]Windows_Win7SP1.7601.17514.101119-1850.IA64CHK.Symbols.msi[/TD] [TD]241.8 MB[/TD] [/TR] [TR] [TD=class: co1]Windows_Win7SP1.7601.17514.101119-1850.IA64FRE.Symbols.msi[/TD] [TD]193.4 MB[/TD] [/TR] [TR] [TD=class: co1]Windows_Win7SP1.7601.17514.101119-1850.X86CHK.Symbols.msi[/TD] [TD]294.5 MB[/TD] [/TR] [TR] [TD=class: co1]Windows_Win7SP1.7601.17514.101119-1850.X86FRE.Symbols.msi[/TD] [TD]330.6 MB[/TD] [/TR] [TR] [TD=class: co1]windows6.1-KB976932-IA64.exe[/TD] [TD]511.6 MB[/TD] [/TR] [TR] [TD=class: co1]windows6.1-KB976932-X64.exe[/TD] [TD]903.2 MB[/TD] [/TR] [TR] [TD=class: co1]windows6.1-KB976932-X86.exe[/TD] [TD]537.8 MB [/TD] [/TR] [/TABLE] -
zeer trage computer - harddisk werkt vorrtdurend
Bogey reageerde op Bogey's topic in Archief Bestrijding malware & virussen
Hij loopt nu een stuk sneller maar die ene Windows update mislukt nog steeds. Windows 7 Service Pack 1 (KB976932) Installatiedatum: 10/10/2013 12:17 Installatiestatus: mislukt Foutdetails: Code C0000135 Type update: belangrijk Windows 7 Service Pack 1 is een aanbevolen verzameling updates en verbeteringen aan Windows die zijn gecombineerd in één enkele installeerbare update. Het servicepack maakt uw computer veiliger en betrouwbaarder. Een standaardinstallatie duurt ongeveer 30 minuten en u moet uw computer ongeveer halverwege het proces opnieuw opstarten. Moet ik mij hier zorgen over maken ? -
zeer trage computer - harddisk werkt vorrtdurend
Bogey reageerde op Bogey's topic in Archief Bestrijding malware & virussen
# AdwCleaner v3.006 - Report created 08/10/2013 at 23:46:23 # Updated 01/10/2013 by Xplode # Operating System : Windows 7 Home Premium (32 bits) # Username : Ainsley - AINSLEY-PC # Running from : C:\Users\Ainsley\Desktop\adwcleaner.exe # Option : Clean ***** [ Services ] ***** ***** [ Files / Folders ] ***** ***** [ Shortcuts ] ***** ***** [ Registry ] ***** Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASMANCS Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32 Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2504091 Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E30ED111-BD63-48C2-A6CB-AB3C9FFFB07C} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E30ED111-BD63-48C2-A6CB-AB3C9FFFB07C} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E30ED111-BD63-48C2-A6CB-AB3C9FFFB07C} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9F329EF5-21B2-4E37-9540-9EB3890DA20C} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6634F61C-4A83-4155-91A0-AAE0A5998A8A} Key Deleted : HKCU\Software\Conduit Key Deleted : HKCU\Software\AppDataLow\Toolbar Key Deleted : HKCU\Software\AppDataLow\Software\Conduit Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong Key Deleted : HKCU\Software\AppDataLow\Software\smartbar Key Deleted : HKCU\Software\AppDataLow\Software\Vuze_Remote Key Deleted : HKLM\Software\Conduit Key Deleted : HKLM\Software\Vuze_Remote Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Vuze_Remote Toolbar ***** [ Browsers ] ***** -\\ Internet Explorer v9.0.8112.16476 -\\ Mozilla Firefox v24.0 (nl) [ File : C:\Users\Ainsley\AppData\Roaming\Mozilla\Firefox\Profiles\6pelajea.default\prefs.js ] ************************* AdwCleaner[R0].txt - [2764 octets] - [08/10/2013 23:34:12] AdwCleaner[R1].txt - [2754 octets] - [08/10/2013 23:45:45] AdwCleaner[s0].txt - [2729 octets] - [08/10/2013 23:46:23] ########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [2789 octets] ########## -
zeer trage computer - harddisk werkt vorrtdurend
Bogey reageerde op Bogey's topic in Archief Bestrijding malware & virussen
Zoek.exe Version 4.0.0.4 Updated 07-October-2013 Tool run by Ainsley on di 08/10/2013 at 21:13:37,83. Microsoft Windows 7 Home Premium 6.1.7600 x86 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Ainsley\AppData\Local\Temp\Rar$EX07.706\zoek.exe [script inserted] ==== System Restore Info ====================== 8/10/2013 21:16:12 Zoek.exe System Restore Point Created Succesfully. ==== Empty Folders Check ====================== C:\Program Files\eRightSoft C:\Program Files\MSXML 4.0 C:\Program Files\Temp C:\Program Files\Uninstall Information C:\Program Files\Windows Portable Devices C:\ProgramData\Application Data C:\ProgramData\Bureaublad C:\ProgramData\Desktop C:\ProgramData\Documenten C:\ProgramData\Documents C:\ProgramData\Favorieten C:\ProgramData\Favorites C:\ProgramData\Menu Start C:\ProgramData\Sjablonen C:\ProgramData\Start Menu C:\ProgramData\Templates C:\Users\Ainsley\AppData\Roaming\GrabPro C:\Users\Ainsley\AppData\Roaming\Media Center Programs C:\Users\Ainsley\AppData\Roaming\NeroDigital C:\Users\Default\AppData\Roaming\Media Center Programs C:\Users\Default User\AppData\Roaming\Media Center Programs C:\Users\Ainsley\AppData\Local\Application Data C:\Users\Ainsley\AppData\Local\Diagnostics C:\Users\Ainsley\AppData\Local\ElevatedDiagnostics C:\Users\Ainsley\AppData\Local\Geschiedenis C:\Users\Ainsley\AppData\Local\Temporary Internet Files C:\Users\Default\AppData\Local\Application Data C:\Users\Default\AppData\Local\Geschiedenis C:\Users\Default\AppData\Local\History C:\Users\Default\AppData\Local\Temp C:\Users\Default\AppData\Local\Temporary Internet Files C:\Users\Default User\AppData\Local\Application Data C:\Users\Default User\AppData\Local\Geschiedenis C:\Users\Default User\AppData\Local\History C:\Users\Default User\AppData\Local\Temp C:\Users\Default User\AppData\Local\Temporary Internet Files C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp C:\Windows\serviceprofiles\Localservice\AppData\Local\PnrpSqm ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-4135291173-4029946494-2574289834-1001\Software\Microsoft\Internet Explorer\SearchScopes\{19900F26-1E1C-4700-8D32-476044CBB6EA} deleted successfully ==== Deleting CLSID Registry Values ====================== HKEY_USERS\S-1-5-21-4135291173-4029946494-2574289834-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{BA14329E-9550-4989-B3F2-9732E92D17CC} deleted successfully HKEY_USERS\S-1-5-21-4135291173-4029946494-2574289834-1001\Software\Microsoft\Internet Explorer\URLSearchHooks\{BA14329E-9550-4989-B3F2-9732E92D17CC} deleted successfully HKEY_USERS\S-1-5-21-4135291173-4029946494-2574289834-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\urlsearchhooks\{BA14329E-9550-4989-B3F2-9732E92D17CC} deleted successfully ==== Deleting Services ====================== ==== FireFox Fix ====================== ProfilePath: C:\Users\Ainsley\AppData\Roaming\Mozilla\Firefox\Profiles\6pelajea.default user.js not found ---- Lines CT2504091 removed from prefs.js ---- user_pref("CT2504091..clientLogIsEnabled", false); user_pref("CT2504091..clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent"); user_pref("CT2504091..uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"); user_pref("CT2504091.ALLOW_SHOWING_HIDDEN_TOOLBAR", false); user_pref("CT2504091.AboutPrivacyUrl", "Index | Conduit"); user_pref("CT2504091.AppTrackingLastCheckTime", "Mon Jul 02 2012 23:56:54 GMT+0200 (Romance (zomertijd))"); user_pref("CT2504091.BrowserCompStateIsOpen_129707804829376918", true); user_pref("CT2504091.BrowserCompStateIsOpen_129990558296257215", true); user_pref("CT2504091.BrowserCompStateIsOpen_1359634298000", true); user_pref("CT2504091.BrowserCompStateIsOpen_1366636701000", true); user_pref("CT2504091.BrowserCompStateIsOpen_1367226520000", true); user_pref("CT2504091.CTID", "CT2504091"); user_pref("CT2504091.CurrentServerDate", "4-6-2013"); user_pref("CT2504091.DialogsAlignMode", "LTR"); user_pref("CT2504091.DialogsGetterLastCheckTime", "Tue May 28 2013 00:03:47 GMT+0200 (Romance (standaardtijd))"); user_pref("CT2504091.DownloadReferralCookieData", ""); user_pref("CT2504091.EMailNotifierPollDate", "Wed Aug 01 2012 23:59:19 GMT+0200 (Romance (zomertijd))"); user_pref("CT2504091.FeedLastCount129079840422964131", 19); user_pref("CT2504091.FeedPollDate128891351169457140", "Mon Oct 01 2012 22:15:22 GMT+0200 (Romance (zomertijd))"); user_pref("CT2504091.FeedPollDate129079840422964131", "Mon Jun 03 2013 23:45:51 GMT+0200 (Romance (standaardtijd))"); user_pref("CT2504091.FeedTTL128891351169457140", 40); user_pref("CT2504091.FirstServerDate", "1-2-2011"); user_pref("CT2504091.FirstTime", true); user_pref("CT2504091.FirstTimeFF3", true); user_pref("CT2504091.FirstTimeSettingsDone", true); user_pref("CT2504091.FixPageNotFoundErrors", true); user_pref("CT2504091.GroupingServerCheckInterval", 1440); user_pref("CT2504091.GroupingServiceUrl", "http://grouping.services.conduit.com/"); user_pref("CT2504091.HasUserGlobalKeys", true); user_pref("CT2504091.HomePageProtectorEnabled", false); user_pref("CT2504091.HomepageBeforeUnload", "resource:/browserconfig.properties"); user_pref("CT2504091.Initialize", true); user_pref("CT2504091.InitializeCommonPrefs", true); user_pref("CT2504091.InstallationAndCookieDataSentCount", 3); user_pref("CT2504091.InstallationType", "UnknownIntegration"); user_pref("CT2504091.InstalledDate", "Tue Feb 01 2011 21:01:43 GMT+0100 (Romance (standaardtijd))"); user_pref("CT2504091.IsAlertDBUpdated", true); user_pref("CT2504091.IsGrouping", false); user_pref("CT2504091.IsMulticommunity", false); user_pref("CT2504091.IsOpenThankYouPage", false); user_pref("CT2504091.IsOpenUninstallPage", false); user_pref("CT2504091.LanguagePackLastCheckTime", "Mon Jun 03 2013 23:45:52 GMT+0200 (Romance (standaardtijd))"); user_pref("CT2504091.LanguagePackReloadIntervalMM", 1440); user_pref("CT2504091.LanguagePackServiceUrl", "http://translation.users.conduit.com/Translation.ashx"); user_pref("CT2504091.LastLogin_2.7.2.0", "Sun Apr 10 2011 18:51:57 GMT+0200 (Romance (zomertijd))"); user_pref("CT2504091.LastLogin_3.13.0.6", "Thu Jul 05 2012 23:58:35 GMT+0200 (Romance (zomertijd))"); user_pref("CT2504091.LastLogin_3.14.1.0", "Wed Aug 22 2012 01:07:20 GMT+0200 (Romance (zomertijd))"); user_pref("CT2504091.LastLogin_3.15.1.0", "Tue Nov 06 2012 23:55:38 GMT+0100 (Romance (standaardtijd))"); user_pref("CT2504091.LastLogin_3.16.0.100", "Sat Feb 16 2013 22:56:43 GMT+0100 (Romance (standaardtijd))"); user_pref("CT2504091.LastLogin_3.16.0.3", "Sat Jan 05 2013 00:31:01 GMT+0100 (Romance (standaardtijd))"); user_pref("CT2504091.LastLogin_3.18.0.7", "Mon Jun 03 2013 23:45:51 GMT+0200 (Romance (standaardtijd))"); user_pref("CT2504091.LastLogin_3.3.3.2", "Tue Jun 05 2012 01:04:59 GMT+0200 (Romance (zomertijd))"); user_pref("CT2504091.LatestVersion", "3.18.0.7"); user_pref("CT2504091.Locale", "en-us"); user_pref("CT2504091.LoginCache", 4); user_pref("CT2504091.MCDetectTooltipHeight", "83"); user_pref("CT2504091.MCDetectTooltipShow", false); user_pref("CT2504091.MCDetectTooltipUrl", "http://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); user_pref("CT2504091.MCDetectTooltipWidth", "295"); user_pref("CT2504091.MyStuffEnabledAtInstallation", true); user_pref("CT2504091.SHRINK_TOOLBAR", 1); user_pref("CT2504091.SearchEngine", "Search||http://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2504091&octid=EB_ORIGINAL_CTID&SearchSource=1"); user_pref("CT2504091.SearchEngineBeforeUnload", "chrome://browser-region/locale/region.properties"); user_pref("CT2504091.SearchFromAddressBarIsInit", true); user_pref("CT2504091.SearchFromAddressBarUrl", "Zoeken="); user_pref("CT2504091.SearchInNewTabEnabled", true); user_pref("CT2504091.SearchInNewTabIntervalMM", 1440); user_pref("CT2504091.SearchInNewTabLastCheckTime", "Mon Jun 03 2013 23:45:50 GMT+0200 (Romance (standaardtijd))"); user_pref("CT2504091.SearchInNewTabServiceUrl", "http://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID"); user_pref("CT2504091.SearchInNewTabUsageUrl", "http://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID"); user_pref("CT2504091.SearchProtectorEnabled", false); user_pref("CT2504091.SearchProtectorToolbarDisabled", false); user_pref("CT2504091.ServiceMapLastCheckTime", "Mon Jun 03 2013 23:45:52 GMT+0200 (Romance (standaardtijd))"); user_pref("CT2504091.SettingsCheckIntervalMin", 120); user_pref("CT2504091.SettingsLastCheckTime", "Mon Jun 03 2013 23:45:50 GMT+0200 (Romance (standaardtijd))"); user_pref("CT2504091.SettingsLastUpdate", "1370247026"); user_pref("CT2504091.ThirdPartyComponentsInterval", 504); user_pref("CT2504091.ThirdPartyComponentsLastCheck", "Wed May 15 2013 00:39:25 GMT+0200 (Romance (zomertijd))"); user_pref("CT2504091.ThirdPartyComponentsLastUpdate", "1331805997"); user_pref("CT2504091.TrusteLinkUrl", "Validation Page for Online Privacy Certification by TRUSTe"); user_pref("CT2504091.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCityToolbar.com,MyCollegeToolbar.com,MyFamilyToolbar.com,MyForumToolbar.com,MyLibraryToolbar.com,MyRadioToolbar.com,MyStoreToolbar.com,MyTownToolbar.com,MyUniversityToolbar.com,OurChurchToolbar.com,MyXangaToolbar.com,Media-Toolbar.com,LoyaltyToolbar.com,MyTeamToolbar.com,GreatToolbars.com,OurOrganizationToolbar.com,OurBusinessToolbar.com,Toolbar.fm"); user_pref("CT2504091.UserID", "UN19533639528686530"); user_pref("CT2504091.ValidationData_Toolbar", 2); user_pref("CT2504091.alertChannelId", "897164"); user_pref("CT2504091.approveUntrustedApps", false); user_pref("CT2504091.backendstorage./9b+7e+x305", "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"); user_pref("CT2504091.backendstorage./9b+7e,x305", "247E28412F3F3E3779453A3D2A722C797B787D3128333C4748402C574C4F3C253E2C2E2B2F433A454E59505B57676A66426D62455E69543D56444643465B525D66716C216E6B587D73675069575956586E6570793327327D6A362B2E7A637C6A6C696A2278242D463A3E4546494C404B444C25504548357D37252724243C333E474E5351633863585B48314A383A36404F46515A5E706365697672766A507B7E5F48614F514D56665D68717C777A272121605F5D6733282B6B39267A637C6A6C686C2278242D384144457D493E41224F3C31793321237E22382F3A43584B4C4C48565E3762575A3B68554A334C3A3C383A5148535C6072654D686C7975796D537376624B645254505169606B74782B7D2024312D31252326396D392E317D66206D6E7474257B27303B3A3744493D413C44445050514449462D584D503D263F2D2E3433443B464F536558405B5F6C686C60466F62553E5745464C4A5C535E6721727457237A664F6856575D5A6D646F782E2134232E376B372C2F7B647D6B6C726E2379252E3244377E3A3E4B474B3F254F4F347C3624252B253B323D46514C5C625258653A5F5549324B393A40395047525B746B6077614D786D705D465F4D4E544C645B666F257E207D76222122246525232F69232E78617A68696E702076222B402F443C3A3643433F47224D4245327A342223282939303B444F4A4E5D505E63584F5E5A3C675C5F4C354E3C3D4242534A555E696468757B676F6A6E786E7E6D7C7823755C287C206C556E5C5D6261736A757E342C32293C25393F733F3437246C26737479772B222D36474545523A54404A2B564B4E3B243D2B2C312E4239444D626661613E695E614E37503E3B4241554C57606B6F7B507B7073604962504D5253675E69722C732221632F2427735C75636065627A717C263F2D30427642373A276F297673777D2E253039524C46472A4B58465854305B5053402942302D3136473E4952675A6356436E6366533C55424945475A515C65707C722123717D7D5A267A7D6A536C595D5D607168737C362B38363A6F39393135382B3E427743383B28702A76797D792F26313A5348554349504C474A305B50335752422B443130323449404B54595D67705F5E6066496D6858415A464E4D495F56616A2478267979222A282C602C21247059725E666262776E79233C7133373F303E323C4579453A3D2A722C777C7C7E3128333C514452584C5843594C5A4D4E35605538515C4730493538393A4E455059645F61756E6C6A684E78785D465F4A535254645B666F297E7C7D23612D2225715A735E676663786F7A242F2A2E3D3D4035323E38387B46462B732D7721207B3229343D484347445258584F5C5F4F5E366060452E47323B3A354C434E575C6768734873684B646F5A435C474F4C4B6158636C7772767628207D792727232B65312668222D776079646C69667E75212A3530344343463B38443E3E224D4245327A347E27232A39303B444F4651345F5457442D463139353B4B424D56615C606D5F63686E646468766D6F7276727C55217558717C675069545C585A6E65707925232B233326266D392E317D66206A726E6F257B2730354043393F44374225504548357D3722232B2D3C333E47524D515C60655B5461645C5D695B5B615F6D46716649626D58415A45464E4E5F56616A7570747473777A79247A2A622E23657E2A745D7661626A697B727D27322D313D363A41343749354741214C41443179337D7E2725382F3A434E4F5B515235605558452E4732323A374C434E576259646B676B4A756A6D5A435C464F4C516158636C777276282678782A2A2F257E65312629755E77616963667C737E282D3C313141357A463B3E2B732D767A21233229343D52454646425058315C5154412A432D313032483F4A535E676E6F6E6F6E616267656F74674E796E715E47604A4C5454655C6770267B7C7E2162287D715A735D5F6166786F7A24293233383A423641444641367C483D402D752F21237E217E352C3740554F504E475D514960544F515D5653643D685D604D364F41433F3C3D554C57606B6877767552727C6E624B6456585056526A616C752B7D2F24272023366A362B2E7A637C6E6F6A6C6F2379252E393438374B4B424A3C244447337B35272729222B3B323D46514C50605C60595E555557635D5D416C616445725F543D5648484947465C535E677C6F7A7072777522297C232A602C21247059726464626865786F7A24283A2D743034413D41357A43382A722C7D7D7A7A7E3229343D484B4A412E58583D263F31312E2D31453C47505C676761626E436E6366533C554747434B495B525D66716C4F4B5723777A6750695B5B575F5C6F66717A262124282A2827236F3B303320682273736F7772287E2A334C3C4B44423C4E422853484B38213A2C2C27282D4037424B565D5A5857615E5D406B606350395244443E4243584F5A63786F7220736F746F7123787977775E2A7E617A267059726463646265786F7A24292A723E3336764334266E2879787575762E2530393E3E54495149454B2E594E513E274032312E2D2F463D48516A606A6561647060467166694A646759425B4D4C4851526158636C22747575712028602C21637C28725B7466656063697A717C263B352E2E35337844393C7C4A372C742E207E797A7C342B363F4A4553574A565A335E5356432C4537353A3B3A4B424D566F58656E4772676A4B78655A435C4E4C51504F6259646D747C5C287C206C556E605E635D64746B76202B262A352F323B3D3D3335317844393C7C4A372C742E207D227D7D342B363F4A45494951595A504E4E5452603964595C49324B3D3B3E403B5148535C6762666D756D69786B527272614A63555353565169606B74782B7D652125322E32266B27367A637C6E6C6C6E6B2379252E3244377E3A3E4B474B3F254545347C3628262324283C333E47605A62375757462F483A38343C374E455059645F636A726A6675684F7A6F725F48615350545657675E69722C2162763025662E34232F2F2A2C6D38387C657E706C736C70257B2730493E4B3F4A40234D4D327A3426222922253A313C455E525E5351376161462F483A363D36384E4550596E6869676464676B6E4F79795E4760524E554E4F665D68717C2823292F7D2A2A25276833337760796B676E66702076222B36373B3F4436327E49492E7630227D257C25362D38414C4C585A50335D5D422B4436323931384A414C55605B647165477171563F584A464D45485E556069746F77207376297427212B237A2F642F2F735C7567636A62647B727D27322D353B3C3B79453A3D2A722C7D792022233229343D48434747464A4D4C564D5C355F5F442D4638343A3C3B4C434E57625C6A60704974696C59425B4D494F514F6158636C717928272A7929602C21247059726460656166786F7A242F2A3432413F764141266E2879757A76782E253039524441552A554A4D3A233C2E2A2A2E334239444D585357586659685C596F5D6964664868726458415A4C474E4C4F6057626B212221795C287C206C556E605B615D5D746B76202B262A3B3236323D2F75413639266E2879737A7B7C2E253039444D54524E465457472F5A4F523F2841332D343535473E49526B655F6043636D5F533C5547414645465B525D66716C7C777573267B5B277B7E6B546D5F595B5E5E736A757E2A333A6F3A32302C3939353D7743383B28702A7B757520783027323B4049444C5054562F5A4F523F2841332D2D3338473E49525D585C5F6F5D69646E6064696F65656977507B7073604962544D555152685F6A732D757C307B2E6632272A765F786A6369676E7E75212A383C3F3F34403C447E4A3F422F7731237B21267E372E39424D4850545B4F4F36615659462F48393C3C3E394E455059726F6E7165756979697767757A6954207477644D66575A5A56556C636E77237B7934302E242B3528296F3B3033206822727574776F287E2A333E393D493C494F4F4147504654554D2F5A4F523F28413235333630473E49525D585C6D6F6F59707367647277754D786D705D465F5053514D56655C67707B767929212C287D65312629755E77686B68656B7D742029342F373F4230393E3C3A483C3C234E4346337B3526292525273B323D46514C4E5B5E505A625556655D6968416C6164513A53444741434459505B647D6C6D686F7C217A5925797C69526B5C5F5959627168737C222B302F322F6F3B30332068227274747772287E2A333E3948413C25504548357D37282A2824283D343F4853535B3862624730493A3B3E3C3B4F46515A65606475736666676D6E726C537E7376634C655657585A5C6B626D767A232532232D3433362B292C6F3B303320682272736F7770287E2A334C3A4A4942254A40347C36272824252A3C333E47524D515F4C61545C60653E695E614E375041423C4247564D5861666F78777E66217956227679664F685959595E576E657079332D27286A362B6D322D7C657E6F6F6E7471257B27303B363C484D3D44244F4447347C3627272424253C333E47524D516060535E615B655955686D5D436E6366533C5546464343435B525D66716C707070767423797B7E237E2961222C7D715A73646461606379707B253E2E337533433345433F36457D493E412E763021217C2026362D3841584F5A315C5154412A43343430323449404B545F5A5E5A6E5C61616765734C6C76685C455E4F4E535451645B666F7A757927787C22287D7D22302828216B372C2F7B647D6E6D726B70247A262F3C413E3C3E3C3B3D244F4447347C3627262B24243C333E4755594D5B575F3A655A5D4A334C3D3C403E3C5249545D76666B67666C6D7266537E7376634C65565558525A6B626D767B7E202F2923272C3837366E3A2F327E67217170726E70277D293247483E4A3C244F4447347C362726272A263C333E47524D555D63545E5460576368685B6669636D61614873686B58415A4B4A4A49486057626B76207E75227B7B5F2B20236F5871626160675F776E79232E2931392F3D332F433A3E457B473C3F2C742E7E7D7C217C342B363F4A535A4D484A535B4D35605558452E4738363B3D354D444F586D605D746A6C73674D786D705D465F504E535150655C67702A797E212E7D262D7E6632272A765F7869676A6C6A7E24"); user_pref("CT2504091.backendstorage./9b+7e-x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user_pref("CT2504091.backendstorage./9b+7e06cg5el8:", "6E6D6A72716E6D757472"); user_pref("CT2504091.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A747370787774737B7A78242F4B49474F42357D5D5C3D"); user_pref("CT2504091.backendstorage./9b+7e31;cjc<=fbj#om", "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"); user_pref("CT2504091.backendstorage./9b+7e4x305", "247E302C407642373A276F29777B74762E2530413E4F494A522B55553A233C2B2F282941384354515E5D56615F56685C426D6265523B544346494A59505B6C697A7E21702370765925797C5D2A7A6C556E5D606363736A75272431383137323628733F3437774532276F29777A7D7C2E2530413E4B4A434F49492D584D50315E4B40294231343735473E495A6A69416C616445725F543D5645484B485B525D6E697C7D7C755824787B68516A595C5F5A6F6671237E3369343478617A696C6F6920762233304145473749373D204B432F77312023267E362D3849465B5155525F49355E51442D4635383B334B424D5E5B6C5F7272706373734C776C6F5C455E4D505254635A657673257827262D232163202E30212D322A35396D2E382A7D66206E717374257B273835464A4C3C4E3C4225504548294A4038213A292C2E2E3F3641524E62515C3B665B5E4B344D3C3F41405249546567764C776C6F5C455E4D505250635A6576737A76272B2D212F233165312668222D77607967656B6B7E7521322F3C2C443C3A3643433F47224D42253E49347C36242228253B323D4E4B585B5E513863585B48314A38363C374F4651625F7063636F6A6C4F7B746C527D7275624B645250555A69606B7C792F7C7C2422673432765F78656A6D6D7D7420313338442C467A3B3E2A722C787D7A7D31283344534443494A4F43305B50534029422E322E2F473E495A57646B645D70666E614873686B4C79665B445D494B4F4B625964756E782527272C227B622D2D715A735E666069786F7A2C29363D362F3A382F413541483D4639204B40233C47327A347E25242A39303B4C49565D566054555A533A5F5B56566359416C61445D68533C554046454A5A515C6D6A776755217558717C67506954555B5C6E6570227E2C2A2B6A362B2E7A637C666F716D22782435433947497D493E412E7630797E7D22352C3748455A50544A464D513560555839655648314A34353E3C4F4651625F746A6E6B78716F4F786B5E47605254555553665D6879762C22267B77237C2F23232329362F6D392E317D66207173706D6F267C2839364B41454941244E4E337B3527282424253B323D4E4B5C365F4F3953575957563E695E614E37504242403E47564D5869667779697D777255217578654E67595957555C6D646F2120212026272C3035286E3A2F712B36216923747471717929202B3C454A3E42254F4F347C36282825242D3C333E4F4C59605557505E635B653E695E614E375042423E3F45564D58696673786C707B757D2170737724797C267878252C217D64302528745D766868626C687C737E302D3A32303942447B473C3F2C742E202079247D342B36474955495648515E4E5861366156593A665749324B3D3C3B3C3F51485364616E756E6773736D517C7174614A63555453505869606B7C792F25297E7A272123263026322D2F703C3134744132246C2677767379742C232E3F503E5242544D45415841482F5A4F523F284133302E3435473E495A576C6A606D5D7146716669563F584A47454B4A5E5560716E24797D736F5D237C7829237C63297E725B7466636167657A717C2E2B3C36373F774533276F297A77757B772F2631423F5043434C54482E58583D263F312E2C322D453C4758556269626D5A6C6863467070553E57494644494C5D545F706D7A227A22755B277B7E6B546D5F5C5A5F61736A75272431272D3B392D34383476313D37377A463B3E2B732D7E7B797E7D332A354643504F594D4E53325D5255422B4436323133334A414C5D5A6F65695F5B6C68694B766B6E5B445D4F4A4F4F4E635A6576737B2A795F2B20236F5871635E606163776E792B28352532322F75413639266E287973757C7C2E2530413E4F424247464A4656534F5C5E4E345F5457442D4638313834384C434E5F5C6970696C7174776776684F7A6F725F4861534C505558675E697A777E7A2B2A7C3222312D362A6B372C2F7B647D6F68696A70247A2637464147433B494C3C244F4447347C36272A2A292B3C333E4F4C5D5E56526458565A3D685D604D364F4043414442554C5768676D7771797C6C6F79217E7C7423787D2A29287A612D2225715A73646765676979707B2D3031707275313E256D27777A7578782D242F404F44414A4D53452C574C4F3C253E2F31312E34443B465754695F6359555C63685E6B4772676A5740594A4C4B4A4C5F5661726C7959797968516A5B5D5B5C5E70677224212E2D26312F26382C713D32742E39246C2676787674752C232E3F3C4948414C4A4153472D554A3C253E2F312F2D2D443B4657546160596462596B5F456A60543D5647494745445C535E6F6C7378245823236750695A5C5856606F667123202D242B386C382D307C657E6F716B716F257B2738354249423D3A474D25504528414C3720392A2B292B2D3F36415263575266553C675C5F4C354E3F403E4041544B56676475797B6B7D6B71542074775826756750695A5B59595D6F667123202D342D26262C2A3870362C2068227273707576287E2A3B404D373C4C4F4B274C42367E38292A272C293E3540514D61385D534730493A3B373C3A4F4651625F7464635F4C71675B445D4E4F4A5251635A6576247D77247D7D612D2225715A7364655F676579707B2D3E322D41307642373A7A48352A722C7C7D777B79322934455553502D514C3C253E2F2F2E2E33443B465754695F635955626F5D5E6E62624974696C59425B4C4C4B494E61586374717E7A755D28226C556E5F5F5E5C5E746B7628253A30342A2634323B3434333743334636387E4A3F422F773122227E2224372E394A4F4850565A525056513863585B48314A3B3B38393D5047526360756B6F6561797B6976527D7275624B6455555159576A616C7D7A2C2D253230312832373525372B322638383637317743383B28702A7A7A767C2030273243404D544D4C5557535A5D53335E5356432C4536363237344B424D5E5B686F68717468736C74674E796E715E476051514C5457665D68797624227A2F232E202F7D232F29296C382D307C657E6F6F6A6D72257B273835463939413A3D484F40404644522B564B4E3B243D2E2D322F2E433A455653605E57675B5B586F5F6D6B656063724B766B6E5B445D4E4D524E54635A657673297E23787429242223212B272F632C3427286E3A2F327E67217170736E71277D293A38404942413F3926514649367E3829282A262D3E354051535A604F625C5D655959406B60635039524342434347584F5A6B687D73776D69707B797B777C297C7779602C21247059726362636265786F7A2C2936343539353D323137433737373D3B49224D4245327A3425242521273A313C4D4A57564F5A584F61553B665B5E3F6C594E375041403D4641564D586966736E6B6E6B7C7D77207174787A21287C5F2B2023633021725B7465646167697A717C2E2B383F38384038347A463B3E7E4C392E763021207B2225362D38494653524B5757514E545660543A655A5D4A334C3D3B3D3C3F52495465626F766F796D6E736C5378746F6F7C725A267A7D6A536C5D5B5B595E7269742623303529276F3B303320682272706F7373282D"); user_pref("CT2504091.backendstorage./9b+7ebe3g=;d9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B265146492965504656496571734D334B57"); user_pref("CT2504091.backendstorage./9b-0?3g>d", "6B6B693F706B74767A4776454A20474B764D257D237C542A242824285625595D5E2C3031"); user_pref("CT2504091.backendstorage./9b-0?3g@6:5;", ""); user_pref("CT2504091.backendstorage./9b-0?3gfa7ef", "2B2E2C3D"); user_pref("CT2504091.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F292A212C393D44307832332A354448584C3A232E333E58604F6456604F6852645858635E604E376B7167617059"); user_pref("CT2504091.backendstorage./9b/556,bi5a>g", "6E6D6C6D6B6E7472707276727A"); user_pref("CT2504091.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "6A696B7273747576"); user_pref("CT2504091.backendstorage./9b3=>@44i48?", "372C2D326975763342363341484776213F3E484F4E4D4648502B564B4E2E5959595F4C564F3764535750"); user_pref("CT2504091.backendstorage./9b5ba==9cjag", "6B3D3C696D6E6D717A6F4571757A794878784C2251"); user_pref("CT2504091.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D6A72716E6D757472777276"); user_pref("CT2504091.backendstorage./9b9643g3/9e", "6A"); user_pref("CT2504091.backendstorage./9b;45>:bi9i7ie", "2B2E2C3D"); user_pref("CT2504091.backendstorage./9b<:222h64<", "393F352F3E"); user_pref("CT2504091.backendstorage./9b<:222h64<l8daj", "6D7070707673737977742A7A72727D79757C7B"); user_pref("CT2504091.backendstorage./9b=+03eh8h8j?:", "4443"); user_pref("CT2504091.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B2651464929655046566470727951555E5E52"); user_pref("CT2504091.backendstorage./9b?b0d:8aj62<h", "6D"); user_pref("CT2504091.backendstorage./9ba@0<0bi6a7gn:6@l?", "6E6B"); user_pref("CT2504091.backendstorage._gpl_firstrun10100", "31333138393738373835"); user_pref("CT2504091.backendstorage._key_edilia__uid", "63663936623038332D616363322D343431372D393531382D363333376432623039313266"); user_pref("CT2504091.backendstorage.cb_experience_000", "3436"); user_pref("CT2504091.backendstorage.cb_firstuse0100", "31"); user_pref("CT2504091.backendstorage.cb_user_id_000", "43423138383334333030393538345F313335353836323336393334385F46697265666F78"); user_pref("CT2504091.backendstorage.cbcountry_000", "4245"); user_pref("CT2504091.backendstorage.cbcountry_001", "4245"); user_pref("CT2504091.backendstorage.cbfirsttime", "4D6F6E204A616E20303920323031322030303A31343A343020474D542B303130302028526F6D616E636520287374616E646161726474696A642929"); user_pref("CT2504091.backendstorage.cbopenmamsettings", "30"); user_pref("CT2504091.backendstorage.for_aoi", "31333138393738353536"); user_pref("CT2504091.backendstorage.for_ccid", "4265726C617265"); user_pref("CT2504091.backendstorage.for_cdtr6", "31333138393738373831"); user_pref("CT2504091.backendstorage.for_cid", "4245"); user_pref("CT2504091.backendstorage.for_ip", "37382E32332E33362E3634"); user_pref("CT2504091.backendstorage.for_lcut", "31333230383239343136"); user_pref("CT2504091.backendstorage.for_pid", "31303231"); user_pref("CT2504091.backendstorage.for_rid", "3038"); user_pref("CT2504091.backendstorage.for_zoneid", "3130313537"); user_pref("CT2504091.backendstorage.http://dl_gameplaylabs_com/items/conduit/temp._gpl_firstrun10100", "31333138393738373835"); user_pref("CT2504091.backendstorage.mam_gk_appsdata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user_pref("CT2504091.backendstorage.mam_gk_appsdefaultenabled", "6E756C6C"); user_pref("CT2504091.backendstorage.mam_gk_appstate_couponbuddy", "6F6E"); user_pref("CT2504091.backendstorage.mam_gk_appstate_easytobook", "6F6E"); user_pref("CT2504091.backendstorage.mam_gk_appstate_easytobook_targeted", "6F6E"); user_pref("CT2504091.backendstorage.mam_gk_appstate_pricegong", "6F6E"); user_pref("CT2504091.backendstorage.mam_gk_appstatereporttime", "31333730323935393537343633"); user_pref("CT2504091.backendstorage.mam_gk_configuration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user_pref("CT2504091.backendstorage.mam_gk_currentversion", "312E362E302E31"); user_pref("CT2504091.backendstorage.mam_gk_first_time", "31"); user_pref("CT2504091.backendstorage.mam_gk_lastlogintime", "31333730323935393537373330"); user_pref("CT2504091.backendstorage.mam_gk_localization", "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"); user_pref("CT2504091.backendstorage.mam_gk_settings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user_pref("CT2504091.backendstorage.mam_gk_settings1.6.0.1", "7B22537461747573223A22737563636565646564222C2244617461223A7B22696E74657276616C223A3234302C227374616D70223A223236375F30222C22697354657374223A747275652C22697357656C636F6D65457870657269656E6365456E61626C6564427944656661756C74223A747275652C224861645047223A66616C73652C226E657741707073457870657269656E6365223A66616C73652C22747261636B696E67223A7B226761223A747275652C226462223A747275657D2C227365727669636573223A5B7B226E616D65223A22636F6E66696775726174696F6E222C2275726C223A22687474703A2F2F636C69656E74736572766963652E6D616D2E636F6E647569742D73657276696365732E636F6D2F636F6E66696775726174696F6E3F637469643D435432353034303931267374616D703D3236375F3026636F756E7472793D42452662726F777365723D454242524F575345522662726F7773657276657273696F6E3D454242524F5753455256455253494F4E222C22696E74657276616C223A3234307D2C7B226E616D65223A226170707344617461222C2275726C223A22687474703A2F2F636C69656E74736572766963652E6D616D2E636F6E647569742D73657276696365732E636F6D2F61707073646174613F637469643D435432353034303931267374616D703D3236375F3026636F756E7472793D42452662726F777365723D454242524F575345522662726F7773657276657273696F6E3D454242524F5753455256455253494F4E26266C6F63616C3D45424C4F43414C45222C22696E74657276616C223A3234307D2C7B226E616D65223A226C6F63616C697A6174696F6E222C2275726C223A22687474703A2F2F6C6F63616C697A6174696F6E736572766963652E6D616D2E636F6E647569742E636F6D2F67657470726F647563747472616E736C6174696F6E3F703D6D616D266C3D45424C4F43414C45222C22696E74657276616C223A313434307D2C7B226E616D65223A226C6F67696E222C2275726C223A22687474703A2F2F6D616D2D616C6976652D6D73672E636F6E647569742D646174612E636F6D222C22696E74657276616C223A3234307D2C7B226E616D65223A227573616765222C2275726C223A22687474703A2F2F6D616D2D75736167652E636F6E647569742D646174612E636F6D2F222C22696E74657276616C223A3234307D5D7D2C226C61737455706461746554696D65223A313337303239353935373135367D"); user_pref("CT2504091.backendstorage.mam_gk_showclosebutton", "74727565"); user_pref("CT2504091.backendstorage.mam_gk_showwelcomegadget", "66616C7365"); user_pref("CT2504091.backendstorage.mam_gk_userid", "64303466363330612D333061342D343764662D393065332D653562336536656631353362"); user_pref("CT2504091.backendstorage.pg_enable", "74727565"); user_pref("CT2504091.backendstorage.searchappstate", "33"); user_pref("CT2504091.backendstorage.searchapptracking", "31"); user_pref("CT2504091.backendstorage.sf_just_installed", "46414C5345"); user_pref("CT2504091.backendstorage.sf_status", "454E41424C4544"); user_pref("CT2504091.backendstorage.sf_user_id", "6369645F313532303133323332303134373634383239"); user_pref("CT2504091.backendstorage.shoppingapp.gk.exipres", "536174204F637420303620323031322032323A31353A323320474D542B303230302028526F6D616E636520287A6F6D657274696A642929"); user_pref("CT2504091.backendstorage.shoppingapp.gk.geolocation", "62656C6769756D"); user_pref("CT2504091.backendstorage.url_history", "687474703A2F2F7777772E676F6F676C652E62652F75726C3F73613D74267263743D6A26713D6D736E2532307370616465732532306E6F74253230776F726B696E6726736F757263653D7765622663643D31267665643D3043435151466A41412675726C3D687474702533412532462532467A6F6E652E6D736E2E636F6D253246656E25324673706164657325324664656661756C742E68746D2665693D71366763545F37584E4D7A6D2D67616F787444524367267573673D4146516A434E45435455506E69703246387376533341774A3844376B38627A4E6851"); user_pref("CT2504091.backendstorage.url_history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user_pref("CT2504091.backendstorage.url_history_time", "31333237323738323736353235"); user_pref("CT2504091.clientLogIsEnabled", true); user_pref("CT2504091.clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent"); user_pref("CT2504091.components.1000034", false); user_pref("CT2504091.components.129079840422182852", false); user_pref("CT2504091.components.129079840422339107", false); user_pref("CT2504091.components.129707804829376918", false); user_pref("CT2504091.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"http://appdownload.conduit.com/\",\"RevertSettingsEnabled\":\"TRUE\",\"urlBarHiddenEnabled\":\"TRUE\",\"notFoundHiddenEnabled\":\"TRUE\",\"searchInNewTabHiddenEnabled\":\"TRUE\",\"WorkingAppsWhenHiddenList\":\"[\\\"6cfe5439-68c4-4541-859e-cf72ae454b3e\\\"]\",\"ChInterval\":\"24\"}"); user_pref("CT2504091.globalFirstTimeInfoLastCheckTime", "Sun Jun 02 2013 23:27:25 GMT+0200 (Romance (standaardtijd))"); user_pref("CT2504091.homepageProtectorEnableByLogin", true); user_pref("CT2504091.initDone", true); user_pref("CT2504091.isAppTrackingManagerOn", false); user_pref("CT2504091.myStuffEnabled", true); user_pref("CT2504091.myStuffPublihserMinWidth", 400); user_pref("CT2504091.myStuffSearchUrl", "SEARCH_TERM| Conduit Apps"); user_pref("CT2504091.myStuffServiceIntervalMM", 1440); user_pref("CT2504091.myStuffServiceUrl", "http://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT"); user_pref("CT2504091.oldAppsList", "129079840421557838,129079840422026594,111,129079849636241789,129079840422182852,129079840422339107,129079840422964131,1000034,129707804829376918,1000080,1000082,1000234,1000515,1000,1001,1002,1003,1004,1005,1006,1007,1008,1009,1010,1011,1012"); user_pref("CT2504091.revertSettingsEnabled", true); user_pref("CT2504091.searchProtectorDialogDelayInSec", 10); user_pref("CT2504091.searchProtectorEnableByLogin", true); user_pref("CT2504091.testingCtid", ""); user_pref("CT2504091.toolbarAppMetaDataLastCheckTime", "Mon Jun 03 2013 23:45:52 GMT+0200 (Romance (standaardtijd))"); user_pref("CT2504091.toolbarContextMenuLastCheckTime", "Wed May 22 2013 00:13:25 GMT+0200 (Romance (zomertijd))"); user_pref("CT2504091.undefined", "Mon May 02 2011 00:58:33 GMT+0200 (Romance (zomertijd))"); user_pref("CT2504091.uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation"); user_pref("CT2504091.usagesFlag", 2); user_pref("CommunityToolbar.ETag.http://Settings.toolbar.search.conduit.com/root/CT2504091/CT2504091", "\"4aaf6b5b620ef7419a99c09f29c921513\""); user_pref("CommunityToolbar.ETag.http://appsmetadata.toolbar.conduit-services.com/?ctid=CT2504091", "\"1367226812\""); user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en-us&ctid=CT2504091", "G9mW7heT/8xIX1frcduu0A=="); user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en-us&ctid=CT2504091", "2E1/v7EfCEDbv3VaBQMELg=="); user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en-us&ctid=CT2504091", "UgzXjW7BIkfdx+x39Ruv3w=="); user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en-us&ctid=CT2504091", "4BgM4MhF/sOgPsDNmIs3Yw=="); user_pref("CommunityToolbar.ETag.http://servicemap.conduit-services.com/Toolbar/?ownerId=CT2504091", "\"dbe4460d95840339477519b3f77dc11a\""); user_pref("CommunityToolbar.ETag.http://settings.toolbar.search.conduit.com/root/CT2504091/CT2504091", "\"1321973174\""); user_pref("CommunityToolbar.OriginalEngineOwner", "CT2504091"); user_pref("CommunityToolbar.ToolbarsList", "CT2504091"); user_pref("CommunityToolbar.ToolbarsList2", "CT2504091"); ---- Lines CT2504091 modified from prefs.js ---- ---- Lines conduit removed from prefs.js ---- user_pref("CommunityToolbar.alert.clientsServerUrl", "http://alert.client.conduit.com"); user_pref("CommunityToolbar.alert.servicesServerUrl", "http://alert.services.conduit.com"); user_pref("CommunityToolbar.ETag.http://alerts.conduit-services.com/root/897164/892962/BE", "\"0\""); user_pref("CommunityToolbar.ETag.http://alerts.conduit-services.com/root/909619/905414/BE", "\"0\""); user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en-us", "C5ZJe6gL80JBW5CuLy+wkg=="); user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en-us", "2E1/v7EfCEDbv3VaBQMELg=="); user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en-us", "UgzXjW7BIkfdx+x39Ruv3w=="); user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en-us", "4BgM4MhF/sOgPsDNmIs3Yw=="); user_pref("CommunityToolbar.ETag.http://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"0ea11bd291bce1:0\""); user_pref("CommunityToolbar.ETag.http://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3.2", "\"4ead38b3e6bcd1:0\""); user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13.0.6", "\"0d648794549cd1:0\""); user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.14.1.0", "\"0e0a4327275cd1:0\""); user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15.1.0", "\"0343677cfb1cd1:0\""); user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.16.0.100", "\"0343677cfb1cd1:0\""); user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.16.0.3", "\"0343677cfb1cd1:0\""); user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.18.0.7", "\"0343677cfb1cd1:0\""); user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.3.2", "\"4ead38b3e6bcd1:0\""); user_pref("CommunityToolbar.ETag.http://settings.engine.conduit-services.com/?browser=FF&lut=0", "634356118310000000"); user_pref("CommunityToolbar.ETag.PC Helpforum - Gratis hulp bij computer problemen 11:17:11 AM", "634356118310000000"); user_pref("CommunityToolbar.ETag.http://translation.toolbar.conduit-services.com/?locale=en-us", "\"6e47d2e621367bdb446d903609959bf4\""); user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Ainsley\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\6pelajea.default\\conduitCommon\\modules\\3.18.0.7"); user_pref("CommunityToolbar.MiniIPageGadgetSize.http://pricegong.conduitapps.com/v4//agreement/agree.html#pg_ext_msg_key_21d3deed,pg_agreement_msg_key,true", "338x407"); user_pref("CommunityToolbar.MiniIPageGadgetSize.http://pricegong.conduitapps.com/v4//agreement/agree.html#pg_ext_msg_key_229f1c26,pg_agreement_msg_key,true", "356x0"); user_pref("CommunityToolbar.MiniIPageGadgetSize.http://pricegong.conduitapps.com/v4//agreement/agree.html#pg_ext_msg_key_4bb6a242,pg_agreement_msg_key,true", "356x317"); user_pref("CommunityToolbar.MiniIPageGadgetSize.http://pricegong.conduitapps.com/v4//agreement/agree.html#pg_ext_msg_key_8b69ffe3,pg_agreement_msg_key,true", "356x317"); user_pref("CommunityToolbar.MiniIPageGadgetSize.http://pricegong.conduitapps.com/v4//agreement/agree.html#pg_ext_msg_key_a1f7f926,pg_agreement_msg_key,true", "356x317"); user_pref("CommunityToolbar.MiniIPageGadgetSize.http://pricegong.conduitapps.com/v4//agreement/agree.html#pg_ext_msg_key_b988513a,pg_agreement_msg_key,true", "356x317"); user_pref("CommunityToolbar.MiniIPageGadgetSize.http://pricegong.conduitapps.com/v4//agreement/agree.html#pg_ext_msg_key_ca0ff425,pg_agreement_msg_key,true", "356x317"); user_pref("CommunityToolbar.notifications.clientsServerUrl", "http://alert.client.conduit.com"); user_pref("CommunityToolbar.notifications.servicesServerUrl", "http://alert.services.conduit.com"); ---- Lines conduit modified from prefs.js ---- ---- Lines Search removed from prefs.js ---- ---- Lines Search modified from prefs.js ---- user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"msntoolbar@msn.com\":{\"descriptor\":\"C:\\\\Program Files\\\\MSN Toolbar\\\\Platform\\\\4.0.0357.1\\\\Firefox\",\"mtime\":1322771412930,\"rdfTime\":1251818786000},\"{27182e60-b5f3-411c-b545-b44205977502}\":{\"descriptor\":\"C:\\\\Program Files\\\\Microsoft\\\\Search Enhancement Pack\\\\Search Helper\\\\firefoxextension\\\\SearchHelperExtension\",\"mtime\":1322771423819,\"rdfTime\":1257344732000},\"{23fcfd51-4958-4f00-80a3-ae97e717ed8b}\":{\"descriptor\":\"C:\\\\Program Files\\\\DivX\\\\DivX Plus Web Player\\\\firefox\\\\DivXHTML5\",\"mtime\":1338458382323,\"rdfTime\":1315397198000},\"smartwebprinting@hp.com\":{\"descriptor\":\"C:\\\\Program Files\\\\HP\\\\Digital Imaging\\\\Smart Web Printing\\\\MozillaAddOn3\",\"mtime\":1349276489895,\"rdfTime\":1256182198000},\"{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}\":{\"descriptor\":\"C:\\\\ProgramData\\\\RealNetworks\\\\RealDownloader\\\\BrowserPlugins\\\\Firefox\\\\Ext\",\"mtime\":1379021508517,\"rdfTime\":1376486342000}}},{\"name\":\"app-global\",\"addons\":{\"{972ce4c6-7e08-4474-a285-3208198ce6fd}\":{\"descriptor\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\browser\\\\extensions\\\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\",\"mtime\":1380837798570,\"rdfTime\":1380837795560}}},{\"name\":\"winreg-app-user\",\"addons\":{\"smartwebprinting@hp.com\":{\"descriptor\":\"C:\\\\Program Files\\\\HP\\\\Digital Imaging\\\\Smart Web Printing\\\\MozillaAddOn3\",\"mtime\":1349276489895,\"rdfTime\":1256182198000}}},{\"name\":\"app-profile\",\"addons\":{\"2020Player@2020Technologies.com\":{\"descriptor\":\"C:\\\\Users\\\\Ainsley\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\6pelajea.default\\\\extensions\\\\2020Player@2020Technologies.com\",\"mtime\":1324410827706,\"rdfTime\":1291116114000},\"{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}\":{\"descriptor\":\"C:\\\\Users\\\\Ainsley\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\6pelajea.default\\\\extensions\\\\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi\",\"mtime\":1380706101534},\"{35379F86-8CCB-4724-AE33-4278DE266C70}\":{\"descriptor\":\"C:\\\\Program Files\\\\Orbitdownloader\\\\addons\\\\OneClickYouTubeDownloader\",\"mtime\":1349122008048,\"rdfTime\":1340199790000}}}]"); ---- Lines CommunityToolbar removed from prefs.js ---- user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Sun Jun 03 2012 23:52:56 GMT+0200 (Romance (zomertijd))"); user_pref("CommunityToolbar.alert.alertInfoInterval", 60); user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Tue Jun 05 2012 23:39:00 GMT+0200 (Romance (zomertijd))"); user_pref("CommunityToolbar.alert.locale", "en"); user_pref("CommunityToolbar.alert.loginIntervalMin", 1440); user_pref("CommunityToolbar.alert.loginLastCheckTime", "Tue Jun 05 2012 01:04:58 GMT+0200 (Romance (zomertijd))"); user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1313487611"); user_pref("CommunityToolbar.alert.messageShowTimeSec", 20); user_pref("CommunityToolbar.alert.showTrayIcon", false); user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300); user_pref("CommunityToolbar.alert.userId", "51dc84c2-ef13-47f1-9c75-22b6bfff0e04"); user_pref("CommunityToolbar.EngineOwner", ""); user_pref("CommunityToolbar.EngineOwnerGuid", "{ba14329e-9550-4989-b3f2-9732e92d17cc}"); user_pref("CommunityToolbar.EngineOwnerToolbarId", "vuze_remote"); user_pref("CommunityToolbar.globalUserId", "b71bfdb5-979d-48e6-8442-ffa24efede95"); user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true); user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true); user_pref("CommunityToolbar.IsEngineShown", true); user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true); user_pref("CommunityToolbar.killedEngine", true); user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.18.0.7"); user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Wed May 29 2013 00:13:25 GMT+0200 (Romance (standaardtijd))"); user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440); user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Mon Jun 03 2013 23:46:00 GMT+0200 (Romance (standaardtijd))"); user_pref("CommunityToolbar.notifications.firstTimeAlertShown", true); user_pref("CommunityToolbar.notifications.locale", "en"); user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440); user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Mon Jun 03 2013 00:04:05 GMT+0200 (Romance (standaardtijd))"); user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611"); user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20); user_pref("CommunityToolbar.notifications.showTrayIcon", false); user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300); user_pref("CommunityToolbar.notifications.userId", "198614e8-17d3-43f6-9e1f-2b20a3457886"); user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{ba14329e-9550-4989-b3f2-9732e92d17cc}"); user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "vuze_remote"); user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties"); user_pref("CommunityToolbar.undefined", ""); ---- Lines CommunityToolbar modified from prefs.js ---- ---- Lines {BA14329E-9550-4989-B3F2-9732E92D17CC} removed from prefs.js ---- ---- Lines {BA14329E-9550-4989-B3F2-9732E92D17CC} modified from prefs.js ---- user_pref("extensions.enabledItems", "{ba14329e-9550-4989-b3f2-9732e92d17cc}:3.13.0.6,2020Player@2020Technologies.com:5.0.4.0,{23fcfd51-4958-4f00-80a3-ae97e717ed8b}:2.1.2.145,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.14"); ---- FireFox user.js and prefs.js backups ---- prefs_20130810_2120_.backup ==== Deleting Files \ Folders ====================== "C:\ProgramData\16440868" deleted "C:\ProgramData\31905700" deleted "C:\Users\Ainsley\Downloads\avira_fusebundlegen-win32-en.zip" deleted "C:\END" deleted "C:\Users\Ainsley\AppData\Roaming\GrabPro" deleted "C:\Program Files\Vuze_Remote" deleted "C:\Program Files\Orbitdownloader" deleted "C:\Program Files\Conduit" deleted "C:\Users\Ainsley\AppData\Local\Conduit" deleted "C:\Users\Ainsley\AppData\LocalLow\Vuze_Remote" deleted "C:\Users\Ainsley\AppData\LocalLow\Conduit" deleted "C:\Users\Ainsley\AppData\Roaming\Mozilla\Firefox\Profiles\6pelajea.default\CT2504091" deleted "C:\Users\Ainsley\AppData\Roaming\Mozilla\Firefox\Profiles\6pelajea.default\CT2504091" deleted "C:\Users\Ainsley\AppData\Roaming\Mozilla\Firefox\Profiles\6pelajea.default\conduitCommon" deleted ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\Ainsley\AppData\Local\Temp ==== 2013-10-08 19:13:31 122A32A068A76C220AD47B3C2780407C 1263104 ----a-w- C:\Users\Ainsley\AppData\Local\Temp\Rar$EX07.706\Z-Analyse.scr 2013-10-05 21:53:23 6E67AF4D240E1280391E1544CD0878AF 6540120 ----a-w- C:\Users\Ainsley\AppData\Local\Temp\Setup000006e4\OSETUP.DLL ====== Java Cache ===== ====== C:\Windows\system32 ===== ====== C:\Windows\system32\drivers ===== ====== C:\Windows\Tasks ====== 2013-10-08 18:57:59 A622B69701DCB2588E73CB69A9042C65 3336 ----a-w- C:\Windows\system32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-4135291173-4029946494-2574289834-1001 2013-10-04 22:16:33 B7176790C828621B32CFD1C8AA68E9FB 3150 ----a-w- C:\Windows\system32\Tasks\{D1C0986D-9699-485F-AF3E-B8EB5D98FCD6} 2013-09-27 10:07:03 8A96855AA361B12FB7D47F46CE4F62F5 3358 ----a-w- C:\Windows\system32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-4135291173-4029946494-2574289834-1001 ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2013-10-07 22:29:57 -------- d-----w- C:\Program Files\trend micro 2013-09-12 21:31:47 -------- d-----w- C:\Program Files\RealNetworks 2013-09-12 21:30:54 -------- d-----w- C:\Program Files\Common Files\xing shared ======= C: ===== ====== C:\Users\Ainsley\AppData\Roaming ====== 2013-10-07 11:40:54 -------- d-----w- C:\Users\Ainsley\AppData\Roaming\Template 2013-10-07 11:40:51 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Users\Ainsley\AppData\Roaming\wklnhst.dat 2013-09-12 21:32:35 -------- d-----w- C:\Users\Ainsley\AppData\Roaming\RealNetworks ====== C:\Users\Ainsley ====== 2013-09-29 22:42:16 30D0AD41CC60C6A62277BB350A1EBE4E 4369632 ----a-w- C:\Users\Ainsley\Downloads\ccsetup406.exe 2013-09-12 21:31:47 -------- d-----w- C:\ProgramData\RealNetworks ====== C: exe-files == 2013-10-07 22:29:57 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\Ainsley.exe === C: other files == ==== Firefox Extensions ====================== ProfilePath: C:\Users\Ainsley\AppData\Roaming\Mozilla\Firefox\Profiles\6pelajea.default - RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext - Undetermined - %ProfilePath%\extensions\{35379F86-8CCB-4724-AE33-4278DE266C70} - Visualisateur 3D de 20-20 - %ProfilePath%\extensions\2020Player@2020Technologies.com - FlashGot - %ProfilePath%\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi ==== Firefox Plugins ====================== Profilepath: C:\Users\Ainsley\AppData\Roaming\Mozilla\Firefox\Profiles\6pelajea.default 3A9E1940B4459CC97FDCBB24FCB69004 - c:\program files\real\realplayer\Netscape6\nppl3260.dll - RealPlayer G2 LiveConnect-Enabled Plug-In (32-bit) 0FCEAA7D12B7B0BA825E5C770B1DCA48 - c:\program files\real\realplayer\Netscape6\nprpplugin.dll - RealPlayer Download Plugin E5AF72B7353FF8D431A7C463A4229524 - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll - Shockwave Flash BE126CB7049E89ED6F3038016668B502 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll - RealNetworks RealDownloader Chrome Background Extension Plug-In (32-bit) EAC427FEF96A13058C1ACD17C38966CF - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll - RealNetworks RealDownloader PepperFlashVideoShim Plug-In (32-bit) 96B3689320E9B16EDF38B7A5001C35F0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll - RealNetworks RealDownloader HTML5VideoShim Plug-In (32-bit) F8CB60A5ACA5D73807ECBD9942A8BCB7 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll - RealDownloader Plugin 101700E93EB905992B518256CB441829 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll - Google Update 7550FC1ADE982582D5920BEA6430E3D4 - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll - Google Earth Plugin F00A0EF5835E1B96F783D617F1948704 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll - iTunes Application Detector ED327201724EA05D509B7939ABE49E98 - c:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll - Silverlight Plug-In A66A630E101E7B5CF0946F34935660CC - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll - DivX Plus Web Player B938C1AE3ADCE166190895685B0BEB0D - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll - DivX VOD Helper Plug-in 566439A13C0769D8117FC003E84DF383 - C:\Users\Ainsley\AppData\Roaming\Mozilla\Firefox\Profiles\6pelajea.default\extensions\2020Player@2020Technologies.com\plugins\NP2020Player.dll - 20-20 3D Viewer 87132527E2256CF6683A18C4EB34DD3B - C:\Windows\system32\Wat\npWatWeb.dll - Windows Activation Technologies 32A783FE8D78DB883368CA851E274DBE - C:\Windows\system32\Adobe\Director\np32dsw.dll - Shockwave for Director / Shockwave for Director A055971A27B8B767F5F0858B8F299282 - C:\Program Files\Adobe\Reader 9.0\Reader\browser\nppdf32.dll - Adobe Acrobat 94F96DEFA48629AA8946142584BFC17C - C:\Program Files\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll - MSN® Toolbar 3509063A268A4197CF8E713BD22B0978 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll - Windows Live® Photo Gallery 075394F75303286C2FA91908CB781609 - C:\Program Files\Microsoft\Office Live\npOLW.dll - Microsoft Office Live Plug-in for Firefox / Microsoft Office Live Plug-in for Firefox D64C331B7D2723D3C8A05810D0D30AE0 - c:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrlui.dll - Microsoft ® Silverlight ==== Chrome Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions idhngdhcfkoamngbedgpaokgjbnpdiji - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx[14/08/2013 15:24] nneajnkjbffgblleaoojgaacokifdkhm - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx[12/12/2011 15:13] ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="Google" "Default_Page_URL"="Welcome to ALDI" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Default_Page_URL"="MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!" "Start Page"="Google" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{07F4F46C-2C5D-4246-ABD5-CC00013BEC72}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="{searchTerms} - Bing" {07F4F46C-2C5D-4246-ABD5-CC00013BEC72} Google Url="{searchTerms - Google zoeken}" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="{searchTerms} - Google Search}" {9FD5CCC1-860B-4B89-A725-81079BDFEDBF} Bing Url="{searchTerms} - Bing" ==== Reset Google Chrome ====================== Nothing found to reset ==== Empty IE Cache ====================== C:\Users\Ainsley\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\Ainsley\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Ainsley\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XBP0W459 will be deleted at reboot C:\Users\Ainsley\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot ==== Empty FireFox Cache ====================== C:\Users\Ainsley\AppData\Local\Mozilla\Firefox\Profiles\6pelajea.default\Cache emptied successfully ==== Empty Chrome Cache ====================== No Chrome User Data found ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Ainsley\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\Ainsley\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" deleted "C:\Users\Ainsley\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XBP0W459" not found ==== EOF on di 08/10/2013 at 21:32:27,49 ====================== -
zeer trage computer - harddisk werkt vorrtdurend
Bogey reageerde op Bogey's topic in Archief Bestrijding malware & virussen
Logfile of random's system information tool 1.09 (written by random/random) Run by Ainsley at 2013-10-08 00:29:56 Microsoft Windows 7 Home Premium System drive C: has 628 GB (45%) free of 1389 GB Total RAM: 3326 MB (70% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 0:30:06, on 8/10/2013 Platform: Windows 7 (WinNT 6.00.3504) MSIE: Internet Explorer v9.00 (9.00.8112.16476) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskhost.exe C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe C:\Program Files\Nero\Nero 10\Nero BackItUp\NBAgent.exe C:\Program Files\UsbBoost\TurboHddUsb.exe C:\Program Files\DivX\DivX Update\DivXUpdate.exe C:\Program Files\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\HP\HP Software Update\hpwuschd2.exe C:\Program Files\Real\RealPlayer\Update\realsched.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\MyTomTom 3\MyTomTomSA.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files\HP\HP Photosmart 6520 series\Bin\ScanToPCActivationApp.exe C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe C:\Windows\system32\wuauclt.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Windows\system32\Macromed\Flash\FlashUtil32_11_8_800_175_ActiveX.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE C:\Program Files\Microsoft\Office Live\OfficeLiveSignIn.exe C:\Windows\system32\taskeng.exe C:\Users\Ainsley\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O1SBZWA0\RSIT.exe C:\Program Files\trend micro\Ainsley.exe C:\Program Files\HP\HP Photosmart 6520 series\Bin\HPNetworkCommunicator.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Welcome to ALDI R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R3 - URLSearchHook: (no name) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - (no file) O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: MSN Toolbar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: MSN Toolbar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe" O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s O4 - HKLM\..\Run: [NBAgent] "C:\Program Files\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart O4 - HKLM\..\Run: [usbBoost] C:\Program Files\UsbBoost\TurboHddUsb.exe O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW O4 - HKLM\..\Run: [MSN Toolbar] "C:\Program Files\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe" O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [startCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [TkBellExe] "c:\program files\real\realplayer\Update\realsched.exe" -osboot O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [MyTomTomSA.exe] "C:\Program Files\MyTomTom 3\MyTomTomSA.exe" O4 - HKCU\..\Run: [HP Photosmart 6520 series (NET)] "C:\Program Files\HP\HP Photosmart 6520 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN28R150YJ05TZ:NW" -scfn "HP Photosmart 6520 series (NET)" -AutoStart 1 O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe O9 - Extra 'Tools' menuitem: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MIF5BA~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MIF5BA~1\Office12\ONBttnIE.dll O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MIF5BA~1\OFFICE11\REFIEBAR.DLL O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Plugin Control) - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab O16 - DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} (20-20 3D Viewer for IKEA) - http://kitchenplanner.ikea.com/be/Core/Player/2020PlayerAX_IKEA_Win32.cab O16 - DPF: {95B5D20C-BD31-4489-8ABF-F8C8BE748463} (MSN Games – Hearts) - http://zone.msn.com/bingame/zpagames/zpa_hrtz.cab99160.cab O16 - DPF: {9BDF4724-10AA-43D5-BD15-AEA0D2287303} (MSN Games – Texas Holdem Poker) - http://zone.msn.com/bingame/zpagames/zpa_txhe.cab79352.cab O16 - DPF: {A4110378-789B-455F-AE86-3A1BFC402853} (ZPA_SHVL Object) - http://zone.msn.com/bingame/zpagames/zpa_shvl.cab55579.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/ZPAFramework.cab102118.cab O16 - DPF: {FF3C5A9F-5A99-4930-80E8-4709194C2AD3} (MSN Games – Backgammon) - http://zone.msn.com/bingame/zpagames/ZPA_Backgammon.cab64162.cab O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @C:\Program Files\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files\Nero\Update\NASvc.exe O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe -- End of file - 11828 bytes ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job C:\Windows\tasks\GoogleUpdateTaskMachineCore.job C:\Windows\tasks\GoogleUpdateTaskMachineUA.job =========Mozilla firefox========= ProfilePath - C:\Users\Ainsley\AppData\Roaming\Mozilla\Firefox\Profiles\6pelajea.default prefs.js - "browser.startup.homepage" - "www.google.be" prefs.js - "extensions.enabledItems" - "{ba14329e-9550-4989-b3f2-9732e92d17cc}:3.13.0.6, 2020Player@2020Technologies.com:5.0.4.0, {23fcfd51-4958-4f00-80a3-ae97e717ed8b}:2.1.2.145, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.14" "msntoolbar@msn.com"=C:\Program Files\MSN Toolbar\Platform\4.0.0357.1\Firefox "{27182e60-b5f3-411c-b545-b44205977502}"=C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ "{23fcfd51-4958-4f00-80a3-ae97e717ed8b}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 "smartwebprinting@hp.com"=C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 "{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}"=C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 11.8.800.168 Plugin "Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer] "Description"=Adobe Shockwave Player "Path"=C:\Windows\system32\Adobe\Director\np32dsw.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=] "Description"=iTunes Detector Plug-in "Path"= [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0] "Description"= "Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0] "Description"=DivX Plus Web Player "Path"=C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0] "Description"=DivX VOD Helper Plug-in "Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin] "Description"=Google Earth in your browser "Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE] "Description"= "Path"=C:\Windows\system32\Wat\npWatWeb.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=c:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpWinExt,version=4.0] "Description"=MSN Toolbar "Path"=C:\Program Files\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeLive,version=1.4] "Description"=Office Live Update v1.4 "Path"=C:\Program Files\Microsoft\Office Live\npOLW.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709] "Description"=WLPG Install MIME type "Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=16.0.3.51] "Description"=RealPlayer LiveConnect-Enabled Plug-In "Path"=c:\program files\real\realplayer\Netscape6\nppl3260.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.3] "Description"=RealNetworks RealDownloader Chrome Background Extension Plug-In "Path"=C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.3] "Description"=RealNetworks RealDownloader HTML5VideoShim Plug-In "Path"=C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.3] "Description"=RealNetworks RealDownloader Peppe rFlash Video Shim Plug-In "Path"=C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpplugin;version=16.0.3.51] "Description"=RealPlayer Download Plugin "Path"=c:\program files\real\realplayer\Netscape6\nprpplugin.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@realnetworks.com/npdlplugin;version=1] "Description"=RealDownloader Plugin "Path"=C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3] "Description"=Google Update "Path"=C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9] "Description"=Google Update "Path"=C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll C:\Program Files\Mozilla Firefox\plugins\ NPOFFICE.DLL nppl3260.dll nppl3260.xpt nprpplugin.dll C:\Users\Ainsley\AppData\Roaming\Mozilla\Firefox\Profiles\6pelajea.default\extensions\ 2020Player@2020Technologies.com ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}] HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22 328248] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}] RealNetworks Download and Record Plugin for Internet Explorer - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2013-08-14 542376] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}] DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-12-12 194432] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}] Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-11-05 138624] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Aanmeldhulp voor Windows Live ID - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-03-30 403824] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}] MSN Toolbar BHO - C:\Program Files\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll [2009-11-16 506720] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-02-18 41760] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}] Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}] HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22 517688] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904] {8dcb7100-df86-4384-8842-8fa844297b3f} - MSN Toolbar - C:\Program Files\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll [2009-11-16 506720] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "CLMLServer"=C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe [2009-06-03 103720] "RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2009-12-03 8120864] "NBAgent"=C:\Program Files\Nero\Nero 10\Nero BackItUp\NBAgent.exe [2010-03-26 1234216] "UsbBoost"=C:\Program Files\UsbBoost\TurboHddUsb.exe [2011-02-27 3788800] "DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2011-07-29 1259376] "MSN Toolbar"=C:\Program Files\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe [2009-11-16 240992] "Microsoft Default Manager"=C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [2009-07-17 288080] "avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2013-10-01 681032] "APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-01-28 59720] "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2013-02-20 152392] "HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2011-10-28 49208] ""= [] "StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2013-03-28 642656] "TkBellExe"=c:\program files\real\realplayer\Update\realsched.exe [2013-09-12 295512] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504] "MyTomTomSA.exe"=C:\Program Files\MyTomTom 3\MyTomTomSA.exe [2013-05-23 455608] "HP Photosmart 6520 series (NET)"=C:\Program Files\HP\HP Photosmart 6520 series\Bin\ScanToPCActivationApp.exe [2012-10-17 1837672] "TomTomHOME.exe"=C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [2013-03-22 248208] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Users\Ainsley\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup OneNote 2007 Schermopname en Snel starten.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsScanner] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BsScanner] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "EnableLinkedConnections"=1 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "vidc.uyvy"=msyuv.dll "vidc.yuy2"=msyuv.dll "vidc.yvyu"=msyuv.dll "vidc.iyuv"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "vidc.yvu9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "vidc.cvid"=iccvid.dll "msacm.siren"=sirenacm.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "vidc.DIVX"=DivX.dll "vidc.yv12"=DivX.dll "wave2"=wdmaud.drv "midi2"=wdmaud.drv "mixer2"=wdmaud.drv "aux2"=wdmaud.drv "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 ======List of files/folders created in the last 1 month====== 2013-10-08 00:29:57 ----D---- C:\Program Files\trend micro 2013-10-08 00:29:56 ----D---- C:\rsit 2013-10-07 13:40:54 ----D---- C:\Users\Ainsley\AppData\Roaming\Template 2013-10-07 13:40:51 ----A---- C:\Users\Ainsley\AppData\Roaming\wklnhst.dat 2013-10-04 00:02:54 ----D---- C:\Program Files\Mozilla Firefox 2013-10-03 00:37:03 ----D---- C:\c997b32b1ba97cc4afc8 2013-10-02 23:59:46 ----D---- C:\9b95881e69e84f163b9e9871 2013-10-02 01:30:38 ----D---- C:\98e67b0bffc61227a3 2013-10-01 10:13:57 ----D---- C:\Windows\system32\catroot2 2013-10-01 00:13:41 ----D---- C:\8cf9b39f4a5d19b19bce1d18dd 2013-09-30 18:54:29 ----A---- C:\Windows\ntbtlog.txt 2013-09-30 18:48:16 ----D---- C:\7b91766cb7c54d29f8c6650a 2013-09-30 17:39:09 ----D---- C:\ee3521e98874e565a7470a168ec985 2013-09-20 02:53:08 ----D---- C:\e03a500700d4a6a4a4 2013-09-18 02:39:27 ----D---- C:\ed7e3bfbebc5392677e8ac229247 2013-09-12 23:32:35 ----D---- C:\Users\Ainsley\AppData\Roaming\RealNetworks 2013-09-12 23:31:47 ----D---- C:\ProgramData\RealNetworks 2013-09-12 23:31:47 ----D---- C:\Program Files\RealNetworks 2013-09-12 23:30:54 ----D---- C:\Program Files\Common Files\xing shared 2013-09-10 03:00:58 ----D---- C:\a7046e234460fd6489c8efacf75fa281 2013-09-09 02:57:49 ----D---- C:\8467517de68e461c51796da4f5 ======List of files/folders modified in the last 1 month====== 2013-10-08 00:30:00 ----D---- C:\Windows\Temp 2013-10-08 00:29:57 ----RD---- C:\Program Files 2013-10-08 00:18:49 ----D---- C:\Windows\system32\config 2013-10-07 13:40:54 ----D---- C:\Windows\system32\FxsTmp 2013-10-07 13:40:51 ----SD---- C:\Users\Ainsley\AppData\Roaming\Microsoft 2013-10-06 23:57:29 ----D---- C:\Windows\system32\Tasks 2013-10-05 23:22:58 ----D---- C:\Program Files\Mozilla Maintenance Service 2013-10-03 00:36:53 ----SHD---- C:\System Volume Information 2013-10-01 10:14:02 ----D---- C:\Windows\system32\catroot 2013-10-01 10:13:57 ----D---- C:\Windows\System32 2013-09-30 23:13:38 ----D---- C:\Windows\system32\drivers 2013-09-30 20:38:08 ----SHD---- C:\Windows\Installer 2013-09-30 20:38:01 ----D---- C:\Config.Msi 2013-09-30 20:37:55 ----D---- C:\Windows\SoftwareDistribution 2013-09-30 20:37:07 ----D---- C:\Windows\inf 2013-09-30 19:07:22 ----D---- C:\Windows\system32\catroot2.bak 2013-09-30 18:54:29 ----D---- C:\Windows 2013-09-30 00:44:39 ----D---- C:\Users\Ainsley\AppData\Roaming\Azureus 2013-09-30 00:44:30 ----D---- C:\Windows\debug 2013-09-30 00:43:05 ----D---- C:\Program Files\CCleaner 2013-09-23 14:35:08 ----D---- C:\Windows\Globalization 2013-09-23 12:08:36 ----D---- C:\Windows\Prefetch 2013-09-22 23:29:20 ----A---- C:\Windows\system32\FlashPlayerApp.exe 2013-09-17 18:11:50 ----A---- C:\Windows\system32\PerfStringBackup.INI 2013-09-12 23:31:47 ----D---- C:\ProgramData 2013-09-12 23:30:54 ----D---- C:\Program Files\Common Files 2013-09-12 23:30:51 ----D---- C:\ProgramData\Real 2013-09-12 23:30:41 ----A---- C:\Windows\system32\rmoc3260.dll 2013-09-12 23:30:34 ----A---- C:\Windows\system32\pndx5032.dll 2013-09-12 23:30:34 ----A---- C:\Windows\system32\pndx5016.dll 2013-09-12 23:30:29 ----A---- C:\Windows\system32\pncrt.dll 2013-09-12 23:30:20 ----A---- C:\Windows\system32\msvcr71.dll 2013-09-12 23:30:20 ----A---- C:\Windows\system32\msvcp71.dll 2013-09-12 23:27:28 ----D---- C:\Windows\Tasks 2013-09-11 02:44:58 ----D---- C:\Windows\system32\MRT 2013-09-11 02:43:06 ----A---- C:\Windows\system32\MRT.exe ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-05-05 14392] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648] R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2013-10-01 137208] R1 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [2013-10-01 37352] R1 FNETURPX;FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [2011-02-27 7936] R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2012-08-27 28520] R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128] R2 AODDriver4.2;AODDriver4.2; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [2012-04-09 48256] R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2013-10-01 89376] R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-03-29 9986048] R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2013-03-29 463872] R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW73.sys [2013-02-14 79872] R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 26840] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-12-03 2971680] R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2013-04-04 22856] R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-11-05 230912] R3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter; C:\Windows\system32\DRIVERS\RTL8192su.sys [2009-09-22 579072] R3 StillCam;Stuurprogramma voor seriële digitale fotocamera; C:\Windows\system32\DRIVERS\serscan.sys [2009-07-14 9216] R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2009-06-05 27320] S1 SASDIFSV;SASDIFSV; \??\C:\Users\Ainsley\AppData\Local\Temp\SAS_SelfExtract\SASDIFSV.SYS [] S1 SAS***IL;SAS***IL; \??\C:\Users\Ainsley\AppData\Local\Temp\SAS_SelfExtract\SAS***IL.SYS [] S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704] S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720] S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312] S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2009-11-19 100352] S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888] S3 FNETTBOH;FNETTBOH; C:\Windows\System32\drivers\FNETTBOH.SYS [2011-02-27 23680] S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368] S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304] S3 TrojanKillerDriver;GridinSoft Trojan Killer Driver; C:\Windows\system32\DRIVERS\gtkdrv.sys [2012-01-04 16128] S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2012-12-13 45056] S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328] S3 ViaC7;Stuurprogramma voor VIA C7-processor; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736] S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2013-03-29 219136] R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2013-03-28 291840] R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2013-10-01 440392] R2 AntiVirService;Avira Real-Time Protection; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2013-10-01 440392] R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2012-12-21 57008] R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 390504] R2 hpqddsvc;HP CUE DeviceDiscovery-service; C:\Windows\system32\svchost.exe [2009-07-14 20992] R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 20992] R2 MBAMScheduler;MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376] R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512] R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120] R2 NAUpdate;@C:\Program Files\Nero\Update\NASvc.exe,-200; C:\Program Files\Nero\Update\NASvc.exe [2010-03-25 490280] R2 PSI_SVC_2;Protexis Licensing V2; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [2007-07-24 185632] R2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [2013-08-14 39056] R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-11-05 242048] R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe [2013-03-22 93072] R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-03-30 1533808] R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 20992] R3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2013-02-20 553288] S2 gupdate;Google Updateservice (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-28 136176] S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992] S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-22 257416] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-28 136176] S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-10-04 118680] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-02-19 1343400] -----------------EOF----------------- -
zeer trage computer - harddisk werkt vorrtdurend
Bogey plaatste een topic in Archief Bestrijding malware & virussen
Hallo, Mijn computer werkt de laatste tijd zeer traag. Vooral op internet. Alles gaat goed in veilige modus. Ik heb MBAM al eens laten zoeken, evenals Avira en ccleaner maar niets helpt. Ik vermoed toch dat er ergens een virus moet op zitten want Windows updaten lukt zelfs handmatig niet. Hierbij alvast een hijackthis logbestandje. Dank op voorhand. Mvg, Bogey Logfile of Trend Micro HijackThis v2.0.5 Scan saved at 0:21:03, on 5/10/2013 Platform: Windows 7 (WinNT 6.00.3504) MSIE: Internet Explorer v9.00 (9.00.8112.16476) FIREFOX: 24.0 (nl) Boot mode: Normal Running processes: C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files\Nero\Nero 10\Nero BackItUp\NBAgent.exe C:\Program Files\UsbBoost\TurboHddUsb.exe C:\Program Files\DivX\DivX Update\DivXUpdate.exe C:\Program Files\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\HP\HP Software Update\hpwuschd2.exe C:\Program Files\Real\RealPlayer\Update\realsched.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\MyTomTom 3\MyTomTomSA.exe C:\Program Files\HP\HP Photosmart 6520 series\Bin\ScanToPCActivationApp.exe C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe C:\Windows\system32\wuauclt.exe C:\Windows\system32\taskhost.exe C:\Windows\system32\taskeng.exe C:\Users\Ainsley\Downloads\HijackThis(1).exe C:\Windows\system32\SearchFilterHost.exe C:\Windows\system32\DllHost.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Welcome to ALDI R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R3 - URLSearchHook: (no name) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - (no file) O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: MSN Toolbar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: MSN Toolbar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe" O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s O4 - HKLM\..\Run: [NBAgent] "C:\Program Files\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart O4 - HKLM\..\Run: [usbBoost] C:\Program Files\UsbBoost\TurboHddUsb.exe O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW O4 - HKLM\..\Run: [MSN Toolbar] "C:\Program Files\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe" O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [startCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [TkBellExe] "c:\program files\real\realplayer\Update\realsched.exe" -osboot O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [MyTomTomSA.exe] "C:\Program Files\MyTomTom 3\MyTomTomSA.exe" O4 - HKCU\..\Run: [HP Photosmart 6520 series (NET)] "C:\Program Files\HP\HP Photosmart 6520 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN28R150YJ05TZ:NW" -scfn "HP Photosmart 6520 series (NET)" -AutoStart 1 O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe O9 - Extra 'Tools' menuitem: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MIF5BA~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MIF5BA~1\Office12\ONBttnIE.dll O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MIF5BA~1\OFFICE11\REFIEBAR.DLL O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Plugin Control) - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab O16 - DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} (20-20 3D Viewer for IKEA) - http://kitchenplanner.ikea.com/be/Core/Player/2020PlayerAX_IKEA_Win32.cab O16 - DPF: {95B5D20C-BD31-4489-8ABF-F8C8BE748463} (MSN Games – Hearts) - http://zone.msn.com/bingame/zpagames/zpa_hrtz.cab99160.cab O16 - DPF: {9BDF4724-10AA-43D5-BD15-AEA0D2287303} (MSN Games – Texas Holdem Poker) - http://zone.msn.com/bingame/zpagames/zpa_txhe.cab79352.cab O16 - DPF: {A4110378-789B-455F-AE86-3A1BFC402853} (ZPA_SHVL Object) - http://zone.msn.com/bingame/zpagames/zpa_shvl.cab55579.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/ZPAFramework.cab102118.cab O16 - DPF: {FF3C5A9F-5A99-4930-80E8-4709194C2AD3} (MSN Games – Backgammon) - http://zone.msn.com/bingame/zpagames/ZPA_Backgammon.cab64162.cab O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @C:\Program Files\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files\Nero\Update\NASvc.exe O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe -- End of file - 11503 bytes -
IE9 is verschrikkelijk traag
Bogey reageerde op Bogey's topic in Archief Bestrijding malware & virussen
Ik ben naar IE8 terug geschakeld en die blijkt ook te blijven hangen. Zeer bizar, vooral omdat dit probleem zo plots gekomen is. Ik heb inmiddels ook Google chrome geinstalleerd en die werkt ook perfect, net als Firefox. Het probleem is dat ik IE wel degelijk nodig heb voor de msn services. Hebben jullie nog een idee in jullie trucendoos ? -
IE9 is verschrikkelijk traag
Bogey reageerde op Bogey's topic in Archief Bestrijding malware & virussen
Hallo Kape, Ja, firefox werkt op de normale snelheid. Mbam vond niets en IE is nog steeds even traag. Hierbij de gevraagde logs. mvg, Bogey Malwarebytes Anti-Malware 1.65.1.1000 Malwarebytes : Free anti-malware download Databaseversie: v2012.11.16.05 Windows Vista Service Pack 2 x86 NTFS Internet Explorer 9.0.8112.16421 Ainsley :: PC_VAN_AINSLEY [administrator] 16/11/2012 13:04:44 mbam-log-2012-11-16 (13-04-44).txt Scantype: Snelle scan Ingeschakelde scanopties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM Uitgeschakelde scanopties: P2P Objecten gescand: 198785 Verstreken tijd: 7 minuut/minuten, 52 seconde(n) Geheugenprocessen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Geheugenmodulen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registersleutels gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registerwaarden gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registerdata gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Mappen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Bestanden gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) (einde) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 13:19:33, on 16/11/2012 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v9.00 (9.00.8112.16450) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Windows\RtHDVCpl.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Windows\System32\rundll32.exe C:\Program Files\CardDetector\ICON225\CardDetector.exe C:\Program Files\HP\HP Software Update\hpwuschd2.exe C:\Program Files\DivX\DivX Update\DivXUpdate.exe C:\Program Files\Microsoft Security Client\msseces.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Windows\ehome\ehtray.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\DYMO\DYMO Label Software\DymoQuickPrint.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Users\Ainsley\AppData\Roaming\Dropbox\bin\Dropbox.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe C:\Program Files\Synaptics\SynTP\SynTPHelper.exe C:\Windows\system32\wuauclt.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe C:\Windows\system32\SearchFilterHost.exe C:\Users\Ainsley\Desktop\HijackThis(1).exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = O1 - Hosts: ::1 localhost O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [CardDetectorICON225] C:\Program Files\CardDetector\ICON225\CardDetector.exe O4 - HKLM\..\Run: [iEWINTERNET-BESessionManager] "C:\Program Files\Mobistar\IEWInternetBE\SessionManager\SessionManager.exe" O4 - HKLM\..\Run: [DLSService] "C:\Program Files\DYMO\DYMO Label Software\DLSService.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [DymoQuickPrint] "C:\Program Files\DYMO\DYMO Label Software\DymoQuickPrint.exe" /startup O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') O4 - Startup: Dropbox.lnk = C:\Users\Ainsley\AppData\Roaming\Dropbox\bin\Dropbox.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O8 - Extra context menu item: Figuur openen in &Microsoft PhotoDraw - res://C:\PROGRA~1\MICROS~4\Office\1043\phdintl.dll/phdContext.htm O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O15 - Trusted Zone: *.dexia.be O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab O16 - DPF: {A4110378-789B-455F-AE86-3A1BFC402853} (ZPA_SHVL Object) - http://zone.msn.com/bingame/zpagames/zpa_shvl.cab55579.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/ZPAFramework.cab102118.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: DYMO PnP Service (DymoPnpService) - Sanford, L.P. - C:\Program Files\DYMO\DYMO Label Software\DymoPnpService.exe O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe O23 - Service: France Telecom Routing Table Service (FTRTSVC) - Unknown owner - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\1\FTRTSVC.exe O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe -- End of file - 9127 bytes -
Beste mensen van PChelpforum, Hoewel ik met firefox snel kan surfen is er blijkbaar een probleem met mijn internet explorer (9). Opstarten gaat vlot maar eens ik probeer te surfen duurt het soms minuten lang voor een pagina te laden. Voorheen had ik dit probleem niet, maar sinds een aantal dagen heb ik te kampen met dit zeer frustrerend probleem. Kunnen jullie me helpen aub? Hierbij heb ik al een hijack log bijgevoegd. Met dank en vriendelijke groeten, Bogey Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 15:46:46, on 14/11/2012 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v9.00 (9.00.8112.16450) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Windows\RtHDVCpl.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Windows\System32\rundll32.exe C:\Program Files\CardDetector\ICON225\CardDetector.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files\HP\HP Software Update\hpwuschd2.exe C:\Program Files\DivX\DivX Update\DivXUpdate.exe C:\Program Files\Microsoft Security Client\msseces.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Windows\ehome\ehtray.exe C:\Program Files\DYMO\DYMO Label Software\DymoQuickPrint.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Users\Ainsley\AppData\Roaming\Dropbox\bin\Dropbox.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe C:\Program Files\Synaptics\SynTP\SynTPHelper.exe C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe C:\Windows\system32\taskeng.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe C:\Users\Ainsley\Desktop\HijackThis(1).exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = O1 - Hosts: ::1 localhost O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\7.1.391.0\BingExt.dll O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\7.1.391.0\BingExt.dll" (file missing) O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [CardDetectorICON225] C:\Program Files\CardDetector\ICON225\CardDetector.exe O4 - HKLM\..\Run: [iEWINTERNET-BESessionManager] "C:\Program Files\Mobistar\IEWInternetBE\SessionManager\SessionManager.exe" O4 - HKLM\..\Run: [DLSService] "C:\Program Files\DYMO\DYMO Label Software\DLSService.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [DymoQuickPrint] "C:\Program Files\DYMO\DYMO Label Software\DymoQuickPrint.exe" /startup O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') O4 - Startup: Dropbox.lnk = C:\Users\Ainsley\AppData\Roaming\Dropbox\bin\Dropbox.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O8 - Extra context menu item: Figuur openen in &Microsoft PhotoDraw - res://C:\PROGRA~1\MICROS~4\Office\1043\phdintl.dll/phdContext.htm O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\program files\nvidia corporation\networkaccessmanager\bin32\nvlsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O15 - Trusted Zone: *.dexia.be O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab O16 - DPF: {A4110378-789B-455F-AE86-3A1BFC402853} (ZPA_SHVL Object) - http://zone.msn.com/bingame/zpagames/zpa_shvl.cab55579.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/ZPAFramework.cab102118.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: DYMO PnP Service (DymoPnpService) - Sanford, L.P. - C:\Program Files\DYMO\DYMO Label Software\DymoPnpService.exe O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe O23 - Service: France Telecom Routing Table Service (FTRTSVC) - Unknown owner - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\1\FTRTSVC.exe O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe -- End of file - 9197 bytes
-
hier nog een fccu slachtoffer !
Bogey reageerde op Bogey's topic in Archief Bestrijding malware & virussen
Alles blijkt nu terug te werken. Bedankt kape. Hierbij nog even de logs die je vroeg. Malwarebytes Anti-Malware 1.62.0.1300 www.malwarebytes.org Databaseversie: v2012.08.01.07 Windows 7 x86 NTFS (Veilige modus/netwerkmogelijkheden) Internet Explorer 9.0.8112.16421 Ainsley :: AINSLEY-PC [administrator] 1/08/2012 22:18:57 mbam-log-2012-08-01 (22-18-57).txt Scantype: Snelle scan Ingeschakelde scanopties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM Uitgeschakelde scanopties: P2P Objecten gescand: 187435 Verstreken tijd: 47 seconde(n) Geheugenprocessen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Geheugenmodulen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registersleutels gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registerwaarden gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registerdata gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Mappen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Bestanden gedetecteerd: 1 C:\Users\Ainsley\AppData\Roaming\deo0_sar.exe (Trojan.Cridex) -> Succesvol in quarantaine geplaatst en verwijderd. (einde) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 23:15:45, on 1/08/2012 Platform: Windows 7 (WinNT 6.00.3504) MSIE: Internet Explorer v9.00 (9.00.8112.16447) Boot mode: Normal Running processes: C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe C:\Program Files\Nero\Nero 10\Nero BackItUp\NBAgent.exe C:\Program Files\UsbBoost\TurboHddUsb.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files\DivX\DivX Update\DivXUpdate.exe C:\Program Files\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Program Files\HP\HP Software Update\hpwuschd2.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Windows\system32\wuauclt.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Windows\system32\Macromed\Flash\FlashUtil32_11_3_300_268_ActiveX.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Windows\system32\taskhost.exe C:\Windows\system32\SearchFilterHost.exe C:\Windows\system32\taskeng.exe F:\hijackthis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Welcome to ALDI R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: MSN Toolbar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: MSN Toolbar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll O4 - HKLM\..\Run: [startCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe" O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s O4 - HKLM\..\Run: [NBAgent] "C:\Program Files\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart O4 - HKLM\..\Run: [usbBoost] C:\Program Files\UsbBoost\TurboHddUsb.exe O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW O4 - HKLM\..\Run: [MSN Toolbar] "C:\Program Files\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe" O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MIF5BA~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MIF5BA~1\Office12\ONBttnIE.dll O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MIF5BA~1\OFFICE11\REFIEBAR.DLL O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Plugin Control) - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab O16 - DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} (20-20 3D Viewer for IKEA) - http://kitchenplanner.ikea.com/be/Core/Player/2020PlayerAX_IKEA_Win32.cab O16 - DPF: {95B5D20C-BD31-4489-8ABF-F8C8BE748463} (MSN Games – Hearts) - http://zone.msn.com/bingame/zpagames/zpa_hrtz.cab99160.cab O16 - DPF: {A4110378-789B-455F-AE86-3A1BFC402853} (ZPA_SHVL Object) - http://zone.msn.com/bingame/zpagames/zpa_shvl.cab55579.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/ZPAFramework.cab102118.cab O16 - DPF: {FF3C5A9F-5A99-4930-80E8-4709194C2AD3} (MSN Games – Backgammon) - http://zone.msn.com/bingame/zpagames/ZPA_Backgammon.cab64162.cab O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira Realtime Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe O23 - Service: @C:\Program Files\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files\Nero\Update\NASvc.exe O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe -- End of file - 9315 bytes -
Beste mensen van pchelpforum, Ik heb eveneens een fccu virus op mijn computer. Ik dacht dat ik hem klein gekregen had door enkele lijnen in hijackthis te verwijderen die ik in andere logs op jullie site tegenkwam. Maar na 1 dag fccu-vrij te zijn was hij er al terug. Hieronder mijn hijackthis log. Wat mij opgevallen is, is dat er 2 lijnen niet uitgegooid raken (na fix checked en een nieuwe scan staan ze er doodleuk terug bij) namelijk: R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = MBAM vindt niets en ccleaner heeft ook niks spectaculairs te melden en toch blijft de fccu op mijn computer. Please, please help, ik word gek. Vriendelijke groeten, Bogey Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 17:20:52, on 1/08/2012 Platform: Windows 7 (WinNT 6.00.3504) MSIE: Internet Explorer v9.00 (9.00.8112.16447) Boot mode: Safe mode with network support Running processes: C:\Windows\Explorer.EXE C:\Windows\system32\ctfmon.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe F:\hijackthis\HijackThis.exe C:\Windows\system32\DllHost.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Welcome to ALDI R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: MSN Toolbar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: MSN Toolbar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll O4 - HKLM\..\Run: [startCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe" O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s O4 - HKLM\..\Run: [NBAgent] "C:\Program Files\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart O4 - HKLM\..\Run: [usbBoost] C:\Program Files\UsbBoost\TurboHddUsb.exe O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW O4 - HKLM\..\Run: [MSN Toolbar] "C:\Program Files\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe" O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" O4 - HKCU\..\Run: [update] C:\Users\Ainsley\AppData\Roaming\deo0_sar.exe O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: McAfee Security Scan Plus.lnk = ? O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MIF5BA~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MIF5BA~1\Office12\ONBttnIE.dll O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MIF5BA~1\OFFICE11\REFIEBAR.DLL O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Plugin Control) - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab O16 - DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} (20-20 3D Viewer for IKEA) - http://kitchenplanner.ikea.com/be/Core/Player/2020PlayerAX_IKEA_Win32.cab O16 - DPF: {95B5D20C-BD31-4489-8ABF-F8C8BE748463} (MSN Games – Hearts) - http://zone.msn.com/bingame/zpagames/zpa_hrtz.cab99160.cab O16 - DPF: {A4110378-789B-455F-AE86-3A1BFC402853} (ZPA_SHVL Object) - http://zone.msn.com/bingame/zpagames/zpa_shvl.cab55579.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/ZPAFramework.cab102118.cab O16 - DPF: {FF3C5A9F-5A99-4930-80E8-4709194C2AD3} (MSN Games – Backgammon) - http://zone.msn.com/bingame/zpagames/ZPA_Backgammon.cab64162.cab O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira Realtime Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe O23 - Service: @C:\Program Files\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files\Nero\Update\NASvc.exe O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe -- End of file - 8364 bytes
