Trage PC Google omgeleid int.search results

JohanDC · 13 februari 2012

ComboFix

ComboFix 12-02-12.01 - Johan 13/02/2012 16:25:13.2.1 - x86

Microsoft Windows XP Home Edition 5.1.2600.3.1252.32.1043.18.2047.1440 [GMT 1:00]

Gestart vanuit: c:\documents and settings\Johan\Bureaublad\ComboFix.exe

gebruikte Opdracht switches :: c:\documents and settings\Johan\Bureaublad\CFScript.txt

AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}

.

FILE ::

"c:\documents and settings\Johan\Application Data\Microsoft\Installer\{D90B9503-1506-4845-B037-3FCD26199133}\NewShortcut1.exe"

"c:\documents and settings\Johan\Application Data\Microsoft\Installer\{D90B9503-1506-4845-B037-3FCD26199133}\NewShortcut3.exe"

"c:\documents and settings\Johan\Application Data\Microsoft\Installer\{D90B9503-1506-4845-B037-3FCD26199133}\NewShortcut6.exe"

"C:\user.js"

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\documents and settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}

c:\documents and settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}\x86\DIFxAPI.dll

c:\documents and settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}\x86\DifXInstall32.exe

c:\documents and settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}\x86\DIFxInstallLog.txt

c:\documents and settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}\x86\GEARAspiWDM.inf

c:\documents and settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}\x86\gearaspiwdmx86.cat

c:\documents and settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}\x86\x86\GEARAspi.dll

c:\documents and settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}\x86\x86\GEARAspiWDM.sys

c:\documents and settings\All Users\Application Data\Babylon

c:\documents and settings\Ann\Application Data\BabylonToolbar

c:\documents and settings\Ann\Application Data\Search Settings

c:\documents and settings\Ann\Application Data\searchqutoolbar

c:\documents and settings\Johan\Application Data\Babylon

c:\documents and settings\Johan\Application Data\Babylon\log_file.txt

c:\documents and settings\Johan\Application Data\Microsoft\Installer\{D90B9503-1506-4845-B037-3FCD26199133}\NewShortcut1.exe

c:\documents and settings\Johan\Application Data\Microsoft\Installer\{D90B9503-1506-4845-B037-3FCD26199133}\NewShortcut3.exe

c:\documents and settings\Johan\Application Data\Microsoft\Installer\{D90B9503-1506-4845-B037-3FCD26199133}\NewShortcut6.exe

c:\documents and settings\Johan\Application Data\Search Settings

c:\documents and settings\Johan\Application Data\searchquband

c:\documents and settings\Johan\Application Data\searchqutoolbar

c:\documents and settings\Johan\Application Data\searchqutoolbar\dtx.ini

c:\documents and settings\Johan\Application Data\searchqutoolbar\geodata.xml

c:\documents and settings\Johan\Application Data\searchqutoolbar\geoip.xml

c:\documents and settings\Johan\Application Data\searchqutoolbar\guid.dat

c:\documents and settings\Johan\Application Data\searchqutoolbar\log.txt

c:\documents and settings\Johan\Application Data\searchqutoolbar\preferences.dat

c:\documents and settings\Johan\Application Data\searchqutoolbar\stats.dat

c:\documents and settings\Johan\Application Data\searchqutoolbar\uninstallIE.dat

c:\documents and settings\Johan\Application Data\searchqutoolbar\version.xml

c:\documents and settings\Johan\Application Data\searchqutoolbar\weather\5a0bd9dfdd64141d3f79f948848fe983

c:\documents and settings\Johan\Application Data\searchqutoolbar\weather\64899f93887b9f3d8dcb30e1723832a1

c:\documents and settings\Johan\Application Data\searchqutoolbar\weather\forecasts_cache.xml

c:\documents and settings\Johan\Application Data\searchqutoolbar\weather\observations_cache.xml

c:\documents and settings\Johan\Application Data\searchqutoolbar\weatherbutton_prefs.xml

c:\documents and settings\Johan\Local Settings\Application Data\Babylon

c:\documents and settings\Johan\Local Settings\Application Data\Babylon\Setup\bab033.tbinst.dat

c:\documents and settings\Johan\Local Settings\Application Data\Babylon\Setup\bab091.norecovericon.dat

c:\documents and settings\Johan\Local Settings\Application Data\Babylon\Setup\Babylon.dat

c:\documents and settings\Johan\Local Settings\Application Data\Babylon\Setup\BExternal.dll

c:\documents and settings\Johan\Local Settings\Application Data\Babylon\Setup\HtmlScreens\cmbx.png

c:\documents and settings\Johan\Local Settings\Application Data\Babylon\Setup\HtmlScreens\common.js

c:\documents and settings\Johan\Local Settings\Application Data\Babylon\Setup\HtmlScreens\eula.html

c:\documents and settings\Johan\Local Settings\Application Data\Babylon\Setup\HtmlScreens\lngs.png

c:\documents and settings\Johan\Local Settings\Application Data\Babylon\Setup\HtmlScreens\page1.css

c:\documents and settings\Johan\Local Settings\Application Data\Babylon\Setup\HtmlScreens\page1.html

c:\documents and settings\Johan\Local Settings\Application Data\Babylon\Setup\HtmlScreens\page1.js

c:\documents and settings\Johan\Local Settings\Application Data\Babylon\Setup\HtmlScreens\page1Lrg.css

c:\documents and settings\Johan\Local Settings\Application Data\Babylon\Setup\HtmlScreens\page2.css

c:\documents and settings\Johan\Local Settings\Application Data\Babylon\Setup\HtmlScreens\page2.html

c:\documents and settings\Johan\Local Settings\Application Data\Babylon\Setup\HtmlScreens\page2.js

c:\documents and settings\Johan\Local Settings\Application Data\Babylon\Setup\HtmlScreens\page2Lrg.css

c:\documents and settings\Johan\Local Settings\Application Data\Babylon\Setup\HtmlScreens\page9.html

c:\documents and settings\Johan\Local Settings\Application Data\Babylon\Setup\HtmlScreens\pBar.gif

c:\documents and settings\Johan\Local Settings\Application Data\Babylon\Setup\HtmlScreens\title1.png

c:\documents and settings\Johan\Local Settings\Application Data\Babylon\Setup\HtmlScreens\title2.png

c:\documents and settings\Johan\Local Settings\Application Data\Babylon\Setup\HtmlScreens\toolBar.jpg

c:\documents and settings\Johan\Local Settings\Application Data\Babylon\Setup\HtmlScreens\vIcn.png

c:\documents and settings\Johan\Local Settings\Application Data\Babylon\Setup\IECookieLow.dll

c:\documents and settings\Johan\Local Settings\Application Data\Babylon\Setup\Setup-tbmntr903-9.0.3.34.zpb

c:\documents and settings\Johan\Local Settings\Application Data\Babylon\Setup\Setup.exe

c:\documents and settings\Johan\Local Settings\Application Data\Babylon\Setup\SetupStrings.dat

c:\documents and settings\Johan\Local Settings\Application Data\Babylon\Setup\sqlite3.dll

c:\documents and settings\Nore\Application Data\BabylonToolbar

c:\documents and settings\Nore\Application Data\Search Settings

c:\documents and settings\Nore\Application Data\searchquband

c:\documents and settings\Nore\Application Data\searchqutoolbar

c:\documents and settings\Nore\Application Data\searchqutoolbar\dtx.ini

c:\documents and settings\Nore\Application Data\searchqutoolbar\guid.dat

c:\documents and settings\Nore\Application Data\searchqutoolbar\log.txt

c:\documents and settings\Nore\Application Data\searchqutoolbar\preferences.dat

c:\program files\Application Updater

c:\program files\Application Updater\ApplicationUpdater.exe

c:\program files\Application Updater\config.ini

c:\program files\BabylonToolbar

c:\program files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarApp.dll

c:\program files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarEng.dll

c:\program files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarsrv.exe

c:\program files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll

c:\program files\BabylonToolbar\BabylonToolbar\1.5.3.17\uninstall.exe

c:\program files\Common Files\Spigot

c:\program files\Common Files\Spigot\Search Settings\baidu_ff.xml

c:\program files\Common Files\Spigot\Search Settings\baidu_ie.xml

c:\program files\Common Files\Spigot\Search Settings\config.ini

c:\program files\Common Files\Spigot\Search Settings\Lang\res1031.ini

c:\program files\Common Files\Spigot\Search Settings\Lang\res1033.ini

c:\program files\Common Files\Spigot\Search Settings\Lang\res1034.ini

c:\program files\Common Files\Spigot\Search Settings\Lang\res1036.ini

c:\program files\Common Files\Spigot\Search Settings\Lang\res1040.ini

c:\program files\Common Files\Spigot\Search Settings\SearchSettings.exe

c:\program files\Common Files\Spigot\Search Settings\wth.dll

c:\program files\Common Files\Spigot\Search Settings\yahoo_ff.xml

c:\program files\Common Files\Spigot\Search Settings\yahoo_ie.xml

c:\program files\Common Files\Spigot\Search Settings\yandex_ff.xml

c:\program files\Common Files\Spigot\Search Settings\yandex_ie.xml

c:\program files\Common Files\Spigot\wtxpcom\chrome.manifest

c:\program files\Common Files\Spigot\wtxpcom\components\chrome.manifest

c:\program files\Common Files\Spigot\wtxpcom\components\IFBHOHelperWidgiToolbar.xpt

c:\program files\Common Files\Spigot\wtxpcom\components\IFBHOWidgiToolbar.xpt

c:\program files\Common Files\Spigot\wtxpcom\components\install.rdf

c:\program files\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll

c:\program files\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.10

c:\program files\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.11

c:\program files\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.12

c:\program files\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.5

c:\program files\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.6

c:\program files\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.7

c:\program files\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.8

c:\program files\Common Files\Spigot\wtxpcom\components\WidgiToolbarFF.dll.9

c:\program files\Common Files\Spigot\wtxpcom\install.rdf

c:\program files\DealPly

c:\program files\DealPly\DealPly.crx

c:\program files\DealPly\DealPlyUpdate.exe

c:\program files\DealPly\DealPlyUpdateRun.exe

c:\program files\DealPly\icon.ico

c:\program files\DealPly\uninst.exe

C:\user.js

c:\windows\system32\config\systemprofile\Application Data\Application Updater

.

(((((((((((((((((((( Bestanden Gemaakt van 2012-01-13 to 2012-02-13 ))))))))))))))))))))))))))))))

.

2012-02-12 13:10 . 2012-02-12 13:10 388096 ----a-r- c:\documents and settings\Johan\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

2012-02-12 13:10 . 2012-02-12 13:10 -------- d-----w- c:\program files\Trend Micro

2012-02-12 12:00 . 2012-02-12 12:00 -------- d-----w- C:\_OTL

2012-02-12 11:22 . 2012-02-12 11:22 -------- d--h--w- c:\windows\PIF

2012-02-11 13:45 . 2012-02-11 13:45 -------- d-----w- c:\documents and settings\Nore\Application Data\Ironsource

2012-02-11 13:45 . 2012-02-11 13:45 -------- d-----w- c:\documents and settings\Nore\Application Data\YouTube Downloader

2012-02-11 13:45 . 2012-02-11 13:45 -------- d-----w- c:\documents and settings\Nore\AppData

2012-02-08 22:04 . 2012-02-08 23:09 -------- d-----w- c:\documents and settings\Johan\Local Settings\Application Data\WMTools Downloaded Files

2012-02-08 19:54 . 2012-02-08 19:54 -------- d-----w- c:\program files\FoxTabVideoConverter

2012-02-08 19:52 . 2012-02-08 19:52 -------- d-----w- c:\documents and settings\Johan\Application Data\YouTube Downloader

2012-02-08 19:48 . 2012-02-08 19:48 -------- d-----w- c:\program files\YouTube Downloader Toolbar

2012-02-08 19:47 . 2012-02-08 19:47 -------- d-----w- c:\documents and settings\All Users\Application Data\YouTube Downloader

2012-02-08 19:46 . 2012-02-08 19:46 -------- d-----w- c:\program files\YouTube Downloader

2012-02-08 19:15 . 2012-02-08 19:38 -------- d-----w- c:\documents and settings\Johan\Application Data\vlc

2012-02-08 19:14 . 2012-02-08 19:14 -------- d-----w- c:\documents and settings\Johan\Local Settings\Application Data\Ilivid Player

2012-02-08 19:13 . 2012-02-08 19:13 -------- d-----w- c:\program files\iLivid

2012-02-08 19:11 . 2012-02-08 19:11 -------- d-----w- c:\documents and settings\Johan\AppData

2012-02-08 19:10 . 2012-02-08 19:10 -------- d-----w- c:\documents and settings\All Users\Application Data\boost_interprocess

2012-02-03 22:07 . 2012-02-03 22:07 -------- d-----w- c:\program files\Microsoft Money

2012-02-01 18:41 . 2012-02-01 18:41 -------- d-----w- c:\documents and settings\Johan\Application Data\Malwarebytes

2012-02-01 18:41 . 2012-02-01 18:41 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes

2012-02-01 18:41 . 2012-02-01 18:41 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2012-02-01 18:41 . 2011-12-10 14:24 20464 ----a-w- c:\windows\system32\drivers\mbam.sys

2012-01-31 06:01 . 2012-02-02 11:50 -------- d-----w- c:\documents and settings\Johan\Local Settings\Application Data\Spotify

2012-01-31 06:01 . 2012-02-02 11:55 -------- d-----w- c:\documents and settings\Johan\Application Data\Spotify

2012-01-29 20:51 . 2012-01-29 20:51 -------- d-----w- c:\documents and settings\Johan\Application Data\BabylonToolbar

2012-01-29 20:49 . 2007-08-21 12:32 98304 ----a-w- c:\windows\system32\redmonnt.dll

2012-01-29 20:49 . 2012-01-29 20:49 -------- d-----w- c:\program files\FoxTabPDFConverter

2012-01-29 20:25 . 2012-01-29 20:25 -------- d-----w- c:\documents and settings\Johan\Application Data\pdf995

2012-01-29 20:25 . 2012-01-29 20:25 -------- d-----w- c:\documents and settings\Johan\Local Settings\Application Data\pdf995

2012-01-29 20:23 . 2012-01-29 20:52 59 ----a-w- c:\windows\wpd99.drv

2012-01-29 20:23 . 2012-01-29 20:52 -------- d-----w- c:\documents and settings\All Users\Application Data\pdf995

2012-01-29 20:23 . 2012-01-29 20:23 36864 ----a-w- c:\windows\system32\pdf995mon.dll

2012-01-29 20:23 . 2012-01-29 20:23 1664512 ----a-w- c:\windows\system32\pdfmona.dll

2012-01-29 20:23 . 2012-01-29 20:25 -------- d-----w- c:\program files\pdf995

2012-01-15 11:13 . 2012-01-15 11:13 -------- d-----w- c:\documents and settings\NetworkService\Application Data\Apple Computer

2012-01-15 11:10 . 2012-01-15 11:10 -------- d-----w- c:\program files\iPod

2012-01-15 11:09 . 2012-01-15 11:10 -------- d-----w- c:\program files\iTunes

2012-01-15 11:09 . 2012-01-15 11:09 -------- d-----w- c:\documents and settings\LocalService\Application Data\Apple Computer

2012-01-15 11:08 . 2012-01-15 11:08 -------- d-----w- c:\program files\Bonjour

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-01-12 00:19 . 2012-01-12 00:19 4448256 ----a-w- c:\windows\system32\GPhotos.scr

2011-11-28 18:01 . 2011-04-15 15:27 41184 ----a-w- c:\windows\avastSS.scr

2011-11-28 18:01 . 2011-04-15 15:27 199816 ----a-w- c:\windows\system32\aswBoot.exe

2011-11-28 17:53 . 2011-04-15 15:28 435032 ----a-w- c:\windows\system32\drivers\aswSnx.sys

2011-11-28 17:53 . 2011-04-15 15:28 314456 ----a-w- c:\windows\system32\drivers\aswSP.sys

2011-11-28 17:52 . 2011-04-15 15:28 34392 ----a-w- c:\windows\system32\drivers\aswRdr.sys

2011-11-28 17:52 . 2011-04-15 15:28 52952 ----a-w- c:\windows\system32\drivers\aswTdi.sys

2011-11-28 17:52 . 2011-04-15 15:28 111320 ----a-w- c:\windows\system32\drivers\aswmon2.sys

2011-11-28 17:51 . 2011-04-15 15:28 105176 ----a-w- c:\windows\system32\drivers\aswmon.sys

2011-11-28 17:51 . 2011-04-15 15:28 20568 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys

2011-11-28 17:48 . 2011-04-15 15:28 30808 ----a-w- c:\windows\system32\drivers\aavmker4.sys

2011-11-27 21:09 . 2011-08-25 15:13 69000 ----a-w- c:\windows\system32\ftcserco.dll

2011-11-25 21:57 . 2002-09-11 12:00 293888 ----a-w- c:\windows\system32\winsrv.dll

2011-11-23 14:40 . 2002-09-11 12:00 1859712 ----a-w- c:\windows\system32\win32k.sys

2011-11-20 06:12 . 2002-09-11 12:00 60928 ----a-w- c:\windows\system32\packager.exe

2011-11-16 14:22 . 2010-12-30 09:55 354816 ----a-w- c:\windows\system32\winhttp.dll

2011-11-16 14:22 . 2002-09-11 12:00 152064 ----a-w- c:\windows\system32\schannel.dll

.

((((((((((((((((((((((((((((( SnapShot@2012-02-12_20.10.18 )))))))))))))))))))))))))))))))))))))))))

.

+ 2012-02-13 15:14 . 2012-02-13 15:14 16384 c:\windows\Temp\Perflib_Perfdata_240.dat

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]

@="{472083B0-C522-11CF-8763-00608CC02F24}"

[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]

2011-11-28 18:01 122512 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Akamai NetSession Interface"="c:\documents and settings\Johan\Local Settings\Application Data\Akamai\netsession_win.exe" [2012-02-02 3329824]

"MoneyAgent"="c:\program files\Microsoft Money\System\Money Express.exe" [2001-07-25 184376]

"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2011-04-04 39408]

"ISPMonitor"="c:\program files\ISP Monitor\isp.exe" [2010-02-28 423536]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-11-28 3744552]

"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-11-01 59240]

"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2011-10-24 421888]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-12-08 421736]

"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-01-13 460872]

"MoneyStartUp10.0"="c:\program files\Microsoft Money\System\Activation.exe" [2001-07-25 245810]

.

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableLinkedConnections"= 1 (0x1)

.

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]

"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

@="Driver"

.

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^Adobe Gamma Loader.lnk]

path=c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\Adobe Gamma Loader.lnk

backup=c:\windows\pss\Adobe Gamma Loader.lnkCommon Startup

.

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^BTTray.lnk]

path=c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\BTTray.lnk

backup=c:\windows\pss\BTTray.lnkCommon Startup

.

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^HP Digital Imaging Monitor.lnk]

path=c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\HP Digital Imaging Monitor.lnk

backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup

.

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^Windows Search.lnk]

path=c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\Windows Search.lnk

backup=c:\windows\pss\Windows Search.lnkCommon Startup

.

[HKLM\~\startupfolder\C:^Documents and Settings^Johan^Menu Start^Programma's^Opstarten^LaunchU3.exe.lnk]

path=c:\documents and settings\Johan\Menu Start\Programma's\Opstarten\LaunchU3.exe.lnk

backup=c:\windows\pss\LaunchU3.exe.lnkStartup

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\beid]

2011-05-23 11:36 2068480 ----a-w- c:\program files\Belgium Identity Card\beid35gui.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]

2008-04-14 17:02 15360 ----a-w- c:\windows\system32\ctfmon.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dit]

2002-08-28 12:43 73728 ----a-w- c:\windows\Dit.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]

2011-03-21 18:56 1230704 ----a-w- c:\program files\DivX\DivX Update\DivXUpdate.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]

2009-11-18 14:13 54576 ----a-w- c:\program files\HP\HP Software Update\hpwuschd2.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Iomega ImIconXP]

2008-01-17 07:56 249856 ----a-w- c:\program files\Iomega\REV System Software\ImIconXp.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISPMonitor]

2010-02-28 12:54 423536 ----a-w- c:\program files\ISP Monitor\isp.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBAgent]

2010-10-28 15:15 1406248 ----a-w- c:\program files\Nero\Nero 10\Nero BackItUp\NBAgent.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]

2008-05-03 03:46 13529088 ----a-w- c:\windows\system32\nvcpl.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]

2008-05-03 03:46 86016 ----a-w- c:\windows\system32\nvmctray.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]

2008-05-03 03:46 1630208 ----a-w- c:\windows\system32\nwiz.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerSuite]

2010-12-23 15:37 67448 ----a-w- c:\program files\Uniblue\PowerSuite\Launcher.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]

2010-12-30 19:34 577536 ----a-w- c:\windows\SOUNDMAN.EXE

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpeedUpMyPC]

2010-12-30 19:24 67960 ----a-w- c:\program files\Uniblue\SpeedUpMyPC\Launcher.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify]

2012-01-31 06:01 4009648 ----a-w- c:\documents and settings\Johan\Application Data\Spotify\spotify.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]

2011-04-04 18:09 39408 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USBestCR]

2011-06-29 20:59 7041024 ----a-w- c:\program files\USIM Editor\iconcs387437.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]

"x10nets"=3 (0x3)

"WMPNetworkSvc"=3 (0x3)

"SeaPort"=3 (0x3)

"RevUDFService"=2 (0x2)

"ose"=3 (0x3)

"NVSvc"=2 (0x2)

"NAUpdate"=2 (0x2)

"MDM"=2 (0x2)

"Imapi Helper"=3 (0x3)

"idsvc"=3 (0x3)

"gusvc"=3 (0x3)

"gupdatem"=3 (0x3)

"gupdate"=2 (0x2)

"btwdins"=2 (0x2)

"BBSvc"=3 (0x3)

"avast! Antivirus"=2 (0x2)

"ATI Smart"=2 (0x2)

"Ati HotKey Poller"=2 (0x2)

"AfaService"=2 (0x2)

"Adobe LM Service"=3 (0x3)

.

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\Program Files\\Iomega\\Discovery Tool Pro\\Iomega NAS Discovery.exe"=

"c:\\Program Files\\Microsoft Games\\Flight Simulator 9\\fs9.exe"=

"c:\\WINDOWS\\system32\\dpnsvr.exe"=

"c:\\Documents and Settings\\Johan\\Mijn documenten\\Downloads\\fs\\MyFsGoogleEarth-1-0-1\\MyFsGoogleEarth-1-0-1\\MyFsGoogleEarth.exe"=

"c:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfcCopy.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe"=

"c:\\Program Files\\HP\\HP Software Update\\hpwucli.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\smart web printing\\SmartWebPrintExe.exe"=

"c:\\Documents and Settings\\Johan\\Local Settings\\Application Data\\Akamai\\netsession_win.exe"=

"c:\\Program Files\\Common Files\\SafeNet Sentinel\\Sentinel Protection Server\\WinNT\\spnsrvnt.exe"=

"c:\\Program Files\\Common Files\\SafeNet Sentinel\\Sentinel Keys Server\\sntlkeyssrvr.exe"=

"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=

"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=

"c:\\Program Files\\iTunes\\iTunes.exe"=

"c:\\Documents and Settings\\Johan\\Application Data\\Spotify\\spotify.exe"=

.

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

"5985:TCP"= 5985:TCP:*:Disabled:Windows Remote Management

"1080:TCP"= 1080:TCP:Akamai NetSession Interface

"5000:UDP"= 5000:UDP:Akamai NetSession Interface

.

R0 fttxr52P;fttxr52P;c:\windows\system32\drivers\fttxr52P.sys [8/11/2005 18:07 160256]

R0 imdrvfsf;Iomega File System Filter Driver;c:\windows\system32\drivers\imdrvfsf.sys [5/01/2007 13:39 30968]

R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [15/04/2011 16:28 435032]

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [15/04/2011 16:28 314456]

R2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe -k Akamai [11/09/2002 13:00 14336]

R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [15/04/2011 16:28 20568]

R2 ISPMonitorSrv;ISP Monitor;c:\program files\ISP Monitor\ISPMonitorSrv.exe [16/01/2010 20:18 36864]

R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [1/02/2012 19:41 652360]

R2 ousbehci;OrangeWare USB Enhanced Host Controller Service;c:\windows\system32\drivers\ousbehci.sys [30/12/2010 21:20 45696]

R2 SentinelSecurityRuntime;Sentinel Security Runtime;c:\program files\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe [27/05/2011 1:00 292384]

R3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdXP3.sys [15/06/2011 18:20 101904]

R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [1/02/2012 19:41 20464]

R3 ousb2hub;OrangeWare USB 2.0 Root Hub Support;c:\windows\system32\drivers\ousb2hub.sys [30/12/2010 21:20 56960]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18/03/2010 13:16 130384]

S3 3xHybrid;CTX SAA713x PCI Card;c:\windows\system32\drivers\3xHybrid.sys [30/12/2010 21:34 1006816]

S3 ctxS51;Creatix V.9X DSP Data Fax Modem;c:\windows\system32\drivers\ctxS51.sys [30/12/2010 21:35 1903646]

S3 dc3d;MS Hardware Device Detection Driver;c:\windows\system32\drivers\dc3d.sys [12/06/2011 13:57 44432]

S3 DLKRT32;D-Link DGE-528T Gigabit Ethernet Adapter Driver;c:\windows\system32\drivers\DLKRT32.sys [30/11/2011 19:56 167936]

S3 MHIKEY10;MHIKEY10;c:\windows\system32\Drivers\MHIKEY10.sys --> c:\windows\system32\Drivers\MHIKEY10.sys [?]

S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [11/09/2002 13:00 14336]

S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18/03/2010 13:16 753504]

S4 AfaService;Afa Card Reader Service;c:\windows\system32\afasrv32.exe [29/06/2011 21:59 65536]

S4 BBSvc;Bing Bar Update Service;c:\program files\Microsoft\BingBar\BBSvc.EXE [15/02/2011 0:59 183560]

S4 gupdate;Google Updateservice (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2/01/2011 16:29 135664]

S4 gupdatem;Google Update-service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2/01/2011 16:29 135664]

S4 NAUpdate;@c:\program files\Nero\Update\NASvc.exe,-200;c:\program files\Nero\Update\NASvc.exe [4/05/2010 12:07 503080]

.

--- Andere Services/Drivers In Geheugen ---

.

*NewlyCreated* - WS2IFSL

*Deregistered* - revfs

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

WINRM REG_MULTI_SZ WINRM

Akamai REG_MULTI_SZ Akamai

HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12

hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

HPService REG_MULTI_SZ HPSLPSVC

.

Inhoud van de 'Gedeelde Taken' map

.

2012-02-09 c:\windows\Tasks\AppleSoftwareUpdate.job

- c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 16:57]

.

2012-02-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2011-01-02 15:29]

.

2012-02-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2011-01-02 15:29]

.

2012-02-13 c:\windows\Tasks\HP Photo Creations Communicator.job

- c:\documents and settings\All Users\Application Data\HP Photo Creations\MessageCheck.exe [2011-11-13 19:06]

.

2011-06-15 c:\windows\Tasks\Johan.job

- c:\program files\Nero\Nero 10\Nero BackItUp\NBCore.exe [2010-10-28 15:15]

.

2012-02-13 c:\windows\Tasks\RegistryBooster.job

- c:\program files\Uniblue\RegistryBooster\rbmonitor.exe [2010-12-23 19:25]

.

2011-06-15 c:\windows\Tasks\Tinkerbel.job

- c:\program files\Nero\Nero 10\Nero BackItUp\NBCore.exe [2010-10-28 15:15]

.

------- Bijkomende Scan -------

.

uStart Page = hxxp://www.google.be/webhp?hl=en

uSearchAssistant = hxxp://www.google.com/ie

uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200

Trusted Zone: scarlet.be\webmail

TCP: DhcpNameServer = 192.168.0.1

DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab

DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab

FF - ProfilePath - c:\documents and settings\Johan\Application Data\Mozilla\Firefox\Profiles\3snzwe8r.default\

FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=937811&p=

FF - prefs.js: browser.startup.homepage - hxxp://searchya.com/?chnl=ft-100&s=0&cr=1322983301&cd=2XzutAtN2Y1L1QzutDtDtCtD0D0C0EyE0EyEyDzy0D0DzztD0EtN0D0TzutBtDtCtBtDtBtDzz

FF - prefs.js: browser.search.selectedEngine - SearchYa!

FF - user.js: extensions.searchya_i.hmpg - true

FF - user.js: extensions.searchya_i.hmpgUrl - hxxp://searchya.com/?chnl=ft-100&s=0&cr=1322983301&cd=2XzutAtN2Y1L1QzutDtDtCtD0D0C0EyE0EyEyDzy0D0DzztD0EtN0D0TzutBtDtCtBtDtBtDzz

FF - user.js: extensions.searchya_i.dfltSrch - true

FF - user.js: extensions.searchya_i.srchPrvdr - SearchYa!

FF - user.js: extensions.searchya_i.dnsErr - true

FF - user.js: extensions.searchya_i.newTab - true

FF - user.js: extensions.searchya_i.newTabUrl - hxxp://searchya.com/?chnl=ft-100&s=2&cr=1322983301&cd=2XzutAtN2Y1L1QzutDtDtCtD0D0C0EyE0EyEyDzy0D0DzztD0EtN0D0TzutBtDtCtBtDtBtDzz

FF - user.js: extensions.searchya_i.tlbrSrchUrl - hxxp://searchya.com/?chnl=ft-100&s=3&cr=1322983301&cd=2XzutAtN2Y1L1QzutDtDtCtD0D0C0EyE0EyEyDzy0D0DzztD0EtN0D0TzutBtDtCtBtDtBtDzz&q=

FF - user.js: extensions.searchya_i.id - c06dd80e0000000000000010dce4e459

FF - user.js: extensions.searchya_i.instlDay - 15378

FF - user.js: extensions.searchya_i.vrsn - 1.5.11.13

FF - user.js: extensions.searchya_i.vrsni - 1.5.11.13

FF - user.js: extensions.searchya_i.vrsnTs - 1.5.11.1320:56

FF - user.js: extensions.searchya_i.prtnrId - ironsrc

FF - user.js: extensions.searchya_i.prdct - searchya

FF - user.js: extensions.searchya_i.aflt - foxtab

FF - user.js: extensions.searchya_i.smplGrp - none

FF - user.js: extensions.searchya_i.tlbrId - base

FF - user.js: extensions.searchya_i.instlRef - ft-100

FF - user.js: extensions.searchya_i.dfltLng -

FF - user.js: extensions.searchya_i.excTlbr - false

.

- - - - ORPHANS VERWIJDERD - - - -

.

AddRemove-BabylonToolbar - c:\program files\BabylonToolbar\BabylonToolbar\1.5.3.17\uninstall.exe

AddRemove-DealPly - c:\program files\DealPly\uninst.exe

AddRemove-FoxTab PDF Converter - c:\program files\FoxTabPDFConverter\Uninstall\Uninstall.exe

.

**************************************************************************

.

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2012-02-13 16:43

Windows 5.1.2600 Service Pack 3 NTFS

.

scannen van verborgen processen ...

.

scannen van verborgen autostart items ...

.

scannen van verborgen bestanden ...

.

Scan succesvol afgerond

verborgen bestanden: 0

.

**************************************************************************

.

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Akamai]

"ServiceDll"="c:\program files\common files\akamai/netsession_win_7de0ed9.dll"

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

.

[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]

@Denied: (2) (LocalSystem)

"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,

d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,62,35,d9,9b,24,06,98,42,a4,0b,72,\

"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,

d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,62,35,d9,9b,24,06,98,42,a4,0b,72,\

.

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\€–}|ÿÿÿÿÀ•}|ù•9~*]

"3140110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"

.

--------------------- DLLs Geladen Onder Lopende Processen ---------------------

.

- - - - - - - > 'winlogon.exe'(644)

c:\windows\system32\Ati2evxx.dll

.

Voltooingstijd: 2012-02-13 16:48:56

ComboFix-quarantined-files.txt 2012-02-13 15:48

ComboFix2.txt 2012-02-12 20:16

.

Pre-Run: 33.399.455.744 bytes beschikbaar

Post-Run: 33.372.229.632 bytes beschikbaar

.

- - End Of File - - CBD2F65234C49E8E424711F250B0732F

HiJackThis

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 17:08:51, on 13/02/2012

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\AVAST Software\Avast\AvastSvc.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\ISP Monitor\ISPMonitorSrv.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\AVAST Software\Avast\avastUI.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

C:\Program Files\Microsoft Money\System\Money Express.exe

C:\Program Files\ISP Monitor\isp.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\SearchIndexer.exe

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\system32\wscntfy.exe

C:\WINDOWS\explorer.exe

C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE

C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE

C:\WINDOWS\system32\SearchProtocolHost.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll

O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll

O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui

O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray

O4 - HKLM\..\Run: [MoneyStartUp10.0] "C:\Program Files\Microsoft Money\System\Activation.exe"

O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Documents and Settings\Johan\Local Settings\Application Data\Akamai\netsession_win.exe"

O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\Money Express.exe"

O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

O4 - HKCU\..\Run: [iSPMonitor] C:\Program Files\ISP Monitor\isp.exe

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200

O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL

O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Belkin\Bluetooth Software\btsendto_ie.htm

O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Belkin\Bluetooth Software\btsendto_ie.htm

O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyviewer.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O15 - Trusted Zone: Scarlet - Internet | Phone | TV | Mobile

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll

O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe

O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: ISP Monitor (ISPMonitorSrv) - How2 Studios - C:\Program Files\ISP Monitor\ISPMonitorSrv.exe

O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

O23 - Service: Sentinel Security Runtime (SentinelSecurityRuntime) - SafeNet, Inc. - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe

--

End of file - 7989 bytes

JohanDC · 13 februari 2012