rare foutmelding en pc is traag en loopt vast

harekas · 16 september 2013

Hi, hier niet alles oke denk ik.

Ik kreeg deze foutmelding! meerdere malen.

Ik heb het hijack report toegevoegd.

Weten jullie wat er hier aan de hand is?

Dank je wel alvast en mooie avond!

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 16:51:56, on 16-9-2013

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Avira\AntiVir Desktop\sched.exe

C:\Program Files\Avira\AntiVir Desktop\avguard.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\KPN\Mobiel Internet Software\BecHelperService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\KPN\Mobiel Internet Software\LoggerServer.exe

C:\Program Files\DYMO\DYMO Label Software\DymoPnpService.exe

C:\Program Files\Java\jre7\bin\jqs.exe

C:\Program Files\Google\Update\1.3.21.153\GoogleCrashHandler.exe

C:\Program Files\KPN Back-up Online\BackupSC.exe

C:\Program Files\Mamut\Bin\Mamut.synchronizationservice.synchronizationwindowsservice.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

C:\Program Files\Nitro\Pro 8\NitroPDFDriverService8.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\Program Files\KPN Back-up Online\BackupFP.exe

C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe

C:\Program Files\Synology\Assistant\UsbClientService.exe

C:\WINDOWS\system32\SearchIndexer.exe

C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe

C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE

C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\RTHDCPL.EXE

C:\Program Files\TeamViewer\Version8\TeamViewer.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe

C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

C:\Program Files\Trust\250S Series\lwbwheel.exe

C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE

C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\Olympus\ib\olycamdetect.exe

C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Program Files\VoipBuster.com\VoipBuster\VoipBuster.exe

C:\Program Files\KPN Back-up Online\KPNBackupOnline.exe

C:\Program Files\TeamViewer\Version8\tv_w32.exe

C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe

C:\Program Files\HP\HP Officejet 6500 E710n-z\Bin\ScanToPCActivationApp.exe

C:\Program Files\DYMO\DYMO Label Software\DymoQuickPrint.exe

C:\Program Files\Messenger\msmsgs.exe

C:\Program Files\Skype\Phone\Skype.exe

C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe

C:\Program Files\Windows Desktop Search\WindowsSearch.exe

C:\WINDOWS\system32\RunDll32.exe

C:\WINDOWS\system32\WISPTIS.EXE

C:\Program Files\HP\HP Officejet 6500 E710n-z\Bin\HPNetworkCommunicatorCom.exe

C:\WINDOWS\system32\wbem\wmiapsrv.exe

C:\Program Files\Microsoft Office\Office14\WINWORD.EXE

C:\PROGRA~1\MICROS~3\Office14\OUTLOOK.EXE

C:\Program Files\HP\HP Officejet 6500 E710n-z\Bin\HPNetworkCommunicator.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\DYMO\DYMO Label Software\DLS.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Davilex Business\Davilex Business\Business.exe

C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

C:\WINDOWS\system32\NOTEPAD.EXE

C:\Program Files\File Type Assistant\tsassist.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\HijackThis.exe

C:\WINDOWS\system32\SearchProtocolHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

R3 - URLSearchHook: DeviceVM Url Search Hook - {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - C:\WINDOWS\system32\dvmurl.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll

O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

O2 - BHO: EspressoBHO - {FD6C6509-FE36-44B0-A917-6C2A0DDBDF88} - C:\Program Files\Hewlett-Packard\Smart Print 2.1\Espresso.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login

O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nview\nwiz.exe /installquiet

O4 - HKLM\..\Run: [MobileBroadband] C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe /silent

O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min

O4 - HKLM\..\Run: [LWBMOUSE] C:\Program Files\Trust\250S Series\lwbwheel.exe

O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [DLSService] "C:\Program Files\DYMO\DYMO Label Software\DLSService.exe"

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [Olympus ib] "C:\Program Files\Olympus\ib\olycamdetect.exe" /Startup

O4 - HKLM\..\Run: [MDS_Menu] "C:\Program Files\Olympus\ib\MUITransfer\MUIStartMenu.exe" "C:\Program Files\Olympus\ib" UpdateWithCreateOnce "Software\OLYMPUS\ib\1.0"

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

O4 - HKCU\..\Run: [VoipBuster] "C:\Program Files\VoipBuster.com\VoipBuster\VoipBuster.exe" -nosplash -minimized

O4 - HKCU\..\Run: [KPNBackupOnline] "C:\Program Files\KPN Back-up Online\KPNBackupOnline.exe" minimized

O4 - HKCU\..\Run: [uninstallHelper] "C:\Program Files\W3i\UninstallHelper\UninstallHelper.exe" /silent /autorun

O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog

O4 - HKCU\..\Run: [HP Officejet 6500 E710n-z (NET)] "C:\Program Files\HP\HP Officejet 6500 E710n-z\Bin\ScanToPCActivationApp.exe" -deviceID "CN1AG344D905JW:NW" -scfn "HP Officejet 6500 E710n-z (NET)" -AutoStart 1

O4 - HKCU\..\Run: [DymoQuickPrint] "C:\Program Files\DYMO\DYMO Label Software\DymoQuickPrint.exe" /startup

O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')

O4 - HKUS\S-1-5-21-1644491937-1757981266-1801674531-1005\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'UpdatusUser')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\S-1-5-18\..\RunOnce: [WUAppSetup] C:\Program Files\Common Files\logishrd\WUApp32.exe -v 0x046d -p 0x08c2 -f video -m logitech -d 11.0.0.1217 (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - HKUS\.DEFAULT\..\RunOnce: [WUAppSetup] C:\Program Files\Common Files\logishrd\WUApp32.exe -v 0x046d -p 0x08c2 -f video -m logitech -d 11.0.0.1217 (User 'Default user')

O4 - Startup: Inktwaarschuwingen controleren - HP Officejet 6500 E710n-z (netwerk).lnk = ?

O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe

O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~1\MICROS~3\Office14\ONBttnIE.dll/105

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office14\EXCEL.EXE/3000

O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files\Hewlett-Packard\Smart Print 2.1\LaunchEspresso.exe

O9 - Extra 'Tools' menuitem: HP Smart Print 2.1 - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files\Hewlett-Packard\Smart Print 2.1\LaunchEspresso.exe

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1346769824031

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1346836882578

O16 - DPF: {82E5DF24-51E8-47CD-864A-F4BD5005AA73} (iCloud Web App Plugin) - https://www.icloud.com/system/iCloud.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{255D8F30-9448-4A09-9A27-2B03A87883E0}: NameServer = 192.168.2.254

O17 - HKLM\System\CS1\Services\Tcpip\..\{255D8F30-9448-4A09-9A27-2B03A87883E0}: NameServer = 192.168.2.254

O17 - HKLM\System\CS2\Services\Tcpip\..\{255D8F30-9448-4A09-9A27-2B03A87883E0}: NameServer = 192.168.2.254

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe

O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe

O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: BecHelperService - Unknown owner - C:\Program Files\KPN\Mobiel Internet Software\BecHelperService.exe

O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: DYMO PnP Service (DymoPnpService) - Sanford, L.P. - C:\Program Files\DYMO\DYMO Label Software\DymoPnpService.exe

O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe

O23 - Service: KPN Back-up Online SC - KPN - C:\Program Files\KPN Back-up Online\BackupSC.exe

O23 - Service: Mamut Synchronization Service (MamutSyncService) - Mamut ASA - C:\Program Files\Mamut\Bin\Mamut.synchronizationservice.synchronizationwindowsservice.exe

O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

O23 - Service: NitroPDFDriverCreatorReadSpool8 (NitroDriverReadSpool8) - Nitro PDF Software - C:\Program Files\Nitro\Pro 8\NitroPDFDriverService8.exe

O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe

O23 - Service: UsbClientService - Unknown owner - C:\Program Files\Synology\Assistant\UsbClientService.exe

O23 - Service: Vodafone Mobile Broadband-service (VmbService) - Vodafone - C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe

--

End of file - 16383 bytes

foutmelding.txt

juisterr · 16 september 2013

We vragen tegenwoordig om Rsit logjes.

Download Zoek.zip naar het bureaublad.

Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.
Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.

Klik met de rechtermuisknop op Zoek.zip en klik op de optie "Alles uitpakken".
Dubbelklik vervolgens op Zoek.exe om de tool te starten.
Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Kopieer nu onderstaande code en plak die in het grote invulvenster:
Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.
```
emptyclsid;
firefoxlook; 
Chromelook; 
CHRdefaults;
autoclean; 
iedefaults; 
filesrcm;
```
Klik nu op de knop "Run script".
Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
Mocht na de herstart geen logje verschijnen, start zoek.exe dan opnieuw, de log verschijnt dan alsnog.
Post het geopende logje in het volgende bericht als bijlage.

harekas · 16 september 2013

Done as told! en zie hier het rapport...

Ik ben benieuwd naar je feedback? Dank je wel alvast en mooie avond,

We vragen tegenwoordig om Rsit logjes.
Zoek.exe Version 4.0.0.4 Updated 14-September-2013

Tool run by Shirley on ma 16-09-2013 at 21:19:50,76.

Microsoft Windows XP Home Edition 5.1.2600 Service Pack 3 x86

Running in: Normal Mode Internet Access Detected

Launched: C:\DOCUME~1\Shirley\LOCALS~1\Temp\Rar$DIa0.057\zoek.scr [script inserted]

==== System Restore Info ======================

16-9-2013 21:20:49 Zoek.exe System Restore Point Created Succesfully.

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1644491937-1757981266-1801674531-1004\Software\Microsoft\Internet Explorer\SearchScopes\{12760D28-0A7A-4375-A8B6-C0F47EA21AA9} deleted successfully

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== FireFox Fix ======================

ProfilePath: C:\Documents and Settings\Shirley\Application Data\Mozilla\Firefox\Profiles\27zl3w7v.default

user.js not found

---- Lines Search removed from prefs.js ----

---- Lines Search modified from prefs.js ----

user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"{20a82645-c095-46ed-80e3-08825760534b}\":{\"descriptor\":\"c:\\\\WINDOWS\\\\Microsoft.NET\\\\Framework\\\\v3.5\\\\Windows Presentation Foundation\\\\DotNetAssistantExtension\",\"mtime\":1346832550828,\"rdfTime\":1232707720000},\"{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}\":{\"descriptor\":\"C:\\\\Program Files\\\\Microsoft\\\\Search Enhancement Pack\\\\Default Manager\\\\DMExtension\",\"mtime\":1346903037968,\"rdfTime\":1273492620000}}},{\"name\":\"app-global\",\"addons\":{\"{972ce4c6-7e08-4474-a285-3208198ce6fd}\":{\"descriptor\":\"C:\\\\Program Files\\\\Mozilla Firefox\\\\browser\\\\extensions\\\\{972ce4c6-7e08-4474-a285-3208198ce6fd}\",\"mtime\":1378236595290,\"rdfTime\":1376493606000}}}]");

---- Lines browser.startup.page removed from prefs.js ----

user_pref("browser.startup.page", 1);

---- Lines browser.startup.page modified from prefs.js ----

---- FireFox user.js and prefs.js backups ----

prefs_16-09-2013_2130_.backup

==== Deleting Files \ Folders ======================

"C:\Documents and Settings\Shirley\Menu Start\Programma's\Qtrax Player.lnk" deleted

"C:\WINDOWS\tasks\At1.job" deleted

"C:\WINDOWS\tasks\At2.job" deleted

"C:\WINDOWS\tasks\At3.job" deleted

"C:\WINDOWS\tasks\At4.job" deleted

"C:\WINDOWS\tasks\At5.job" deleted

"C:\WINDOWS\tasks\At6.job" deleted

"C:\WINDOWS\tasks\At7.job" deleted

"C:\WINDOWS\tasks\At8.job" deleted

"C:\Documents and Settings\All Users\Application Data\boost_interprocess\D060107CA1B2CE01\BACKUP_FP_MUTEX" deleted

"C:\Program Files\Common Files\ParetoLogic" deleted

"C:\Documents and Settings\Shirley\Application Data\ParetoLogic" deleted

"C:\Documents and Settings\Shirley\Application Data\DriverCure" deleted

"C:\Documents and Settings\Shirley\Application Data\DSite" deleted

"C:\Documents and Settings\Shirley\Qtrax" deleted

"C:\Documents and Settings\All Users\Application Data\boost_interprocess" not deleted

"C:\Documents and Settings\All Users\Application Data\ParetoLogic" deleted

"C:\WINDOWS\System32\AI_RecycleBin" deleted

"C:\Documents and Settings\All Users\Application Data\boost_interprocess\D060107CA1B2CE01" not deleted

==== Files Recently Created / Modified ======================

====== C:\WINDOWS ====

2013-09-10 10:28:23 C0728A5F9A8BB6C5CC85E1EB02CFC129 403 ----a-w- C:\WINDOWS\ODBC.INI

====== C:\DOCUME~1\Shirley\LOCALS~1\Temp ====

2013-09-13 08:17:33 AC2CA2C713FDB6B491E8AA260075ECB4 2188944 ----a-w- C:\Documents and Settings\Shirley\Local Settings\Temp\BingBarSetup-Partner.exe

2013-09-10 10:26:42 7E6A5949EB8AC8B2DD5C8308BFF08D41 598016 ----a-w- C:\Documents and Settings\Shirley\Local Settings\Temp\certutil.exe

2013-09-10 10:26:26 F9F3AC8D429D0F0E21F638FE2114EA77 4247218 ----a-w- C:\Documents and Settings\Shirley\Local Settings\Temp\MamutBootstrapper\setup.exe

2013-09-10 10:26:17 BE88614985090A1CF6D46404D96C751B 9119232 ----a-w- C:\Documents and Settings\Shirley\Local Settings\Temp\MamutBootstrapper\mamut business software.msi

2013-09-10 10:26:11 CEFC82F6C5A3866EC247225F80D65890 5367710 ----a-w- C:\Documents and Settings\Shirley\Local Settings\Temp\MamutBootstrapper\mamut business software.exe

2013-09-10 10:12:29 2019A6394520A2BD3510D90CE69E05A0 74524000 ----a-w- C:\Documents and Settings\Shirley\Local Settings\Temp\MamutBootstrapper\ISSETUPPREREQUISITES\{57154C7C-EDB2-3BFD-A8BA-924C60913EBF}\sqlexpr_x86_enu.exe

2013-09-10 10:07:22 468854AB6E28C0A55777171BA8D5B01B 921088 ----a-w- C:\Documents and Settings\Shirley\Local Settings\Temp\MamutBootstrapper\ISSETUPPREREQUISITES\{80E0CCB7-CD66-4D50-ADD5-B64BCC98039D}\synchronization-v2.1-x86-enu.msi

2013-09-07 06:51:01 D0D8A48ED414BFE5B50F2C83408746B1 1177552 ----a-w- C:\WINDOWS\system32\config\systemprofile\Local Settings\Temp\CR_C15E1.tmp\setup.exe

====== Java Cache =====

2013-09-12 13:57:19 34974EBC4B9851E56765683501E4DA9E 12446 ----a-w- C:\Documents and Settings\Shirley\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0\2\3b402a82-1af0d7a7

2013-09-12 13:52:41 581BE739266C1901E6AE268C34DBA438 6180 ----a-w- C:\Documents and Settings\Shirley\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0\22\22e17456-36b89d76

2013-09-12 13:52:40 7F5135B0644F36A9791B615B0993C6EC 651 ----a-w- C:\Documents and Settings\Shirley\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0\25\41c97319-17a6c575

2013-09-12 13:57:07 D80698A4A1D4696758C34FB854687A55 27665 ----a-w- C:\Documents and Settings\Shirley\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0\27\5e64069b-53c994e7

2013-09-12 13:57:18 50CC385ADA39E542684EB3BC99B95074 52272 ----a-w- C:\Documents and Settings\Shirley\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0\32\74ead020-6f8d19e5

2013-08-18 18:13:25 56218164EE019834EDBD46A2FA1AD2C1 151861 ----a-w- C:\Documents and Settings\Shirley\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0\38\31eb7726-6809b2b0

2013-09-12 13:57:18 DEFE4A047817598E1957E15F017D9E7D 48809 ----a-w- C:\Documents and Settings\Shirley\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0\51\4c3d3633-4cc33f43

2013-09-12 13:57:18 05B6BC465E85439351B9E1F42FFF85C4 23240 ----a-w- C:\Documents and Settings\Shirley\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0\62\6fad133e-117c6f9e

====== C:\WINDOWS\system32 =====

2013-09-16 05:59:16 !HASH: COULD NOT OPEN FILE !!!!! 97787879 ----a-w- C:\WINDOWS\System32\??L

2013-09-13 04:54:15 A92C0EBD06660FE7A75605682163A7FE 97503480 ----a-w- C:\WINDOWS\System32\??L

2013-09-12 17:41:25 A5D78A802E77BFA998E39C3BA92895FE 97373152 ----a-w- C:\WINDOWS\System32\??L

2013-09-12 13:36:54 ACA17F8E1F9E8891DE15E2527D8D74D0 264616 ----a-w- C:\WINDOWS\System32\javaws.exe

2013-09-12 13:36:54 409ADC57814C2E2A15A798BF4BE05ED3 144896 ----a-w- C:\WINDOWS\System32\javacpl.cpl

2013-09-12 13:36:42 EC94122E6DCB6E731D8513A89AC9CF12 175016 ----a-w- C:\WINDOWS\System32\javaw.exe

2013-09-12 13:36:42 EC2A0F271C0FD4AD57B137845577F539 175016 ----a-w- C:\WINDOWS\System32\java.exe

2013-09-12 13:36:42 65F0FBCDBBA20FC4B0DADCA922150A99 94632 ----a-w- C:\WINDOWS\System32\WindowsAccessBridge.dll

2013-09-10 10:27:48 8C942BE66B44087A6D9F69E33776D3FC 4218880 ----a-w- C:\WINDOWS\System32\cdintf400.dll

2013-09-10 10:20:24 E5F6DE3C06CF0215D6E86D11339F8F74 47456 ----a-w- C:\WINDOWS\System32\perf-MSSQL10_50.MAMUT-sqlagtctr.dll

2013-09-10 10:20:11 B2E85EDAA157EE74547E210B23E204B6 73568 ----a-w- C:\WINDOWS\System32\perf-MSSQL$MAMUT-sqlctr10.50.1600.1.dll

2013-09-08 10:05:32 EC3BCD3C23B1C13707761EF807204594 96566691 ----a-w- C:\WINDOWS\System32\???6

2013-09-05 05:00:50 F912F7BC301561C2AA65426E9A108F25 96185213 ----a-w- C:\WINDOWS\System32\???6

====== C:\WINDOWS\system32\drivers =====

====== C:\WINDOWS\Tasks ======

====== C:\WINDOWS\Temp ======

======= C:\Program Files =====

2013-09-13 08:17:27 -------- d-----w- C:\Program Files\Common Files\Skype

2013-09-13 08:17:25 -------- d-----r- C:\Program Files\Skype

2013-09-13 08:12:07 32776560 ----a-w- C:\Program Files\SkypeSetupFull.exe

2013-09-12 13:37:07 -------- d-----w- C:\Program Files\Common Files\Java

2013-09-12 13:36:22 -------- d-----w- C:\Program Files\Java

2013-09-10 10:27:14 -------- d-----w- C:\Program Files\Mamut

2013-09-10 10:18:56 -------- d-----w- C:\Program Files\Microsoft Visual Studio 9.0

2013-09-05 13:21:25 -------- d-----w- C:\Program Files\Common Files\Adobe AIR

2013-09-03 19:30:01 -------- d-----w- C:\Program Files\Mozilla Maintenance Service

2013-09-03 19:28:47 281776 ----a-w- C:\Program Files\Firefox Setup Stub 23.0.1.exe

======= C: =====

====== C:\Documents and Settings\Shirley\Application Data ======

2013-09-13 08:17:34 -------- d-----w- C:\Documents and Settings\Shirley\Application Data\Skype

2013-09-05 13:21:38 -------- d-----w- C:\Documents and Settings\Shirley\Application Data\com.adobe.downloadassistant.AdobeDownloadAssistant

2013-09-03 19:30:45 -------- d-----w- C:\Documents and Settings\Shirley\Local Settings\Application Data\Mozilla

====== C:\Documents and Settings\Shirley ======

2013-09-15 12:10:48 -------- d--h--r- C:\Documents and Settings\Shirley\Onlangs geopend

====== C: exe-files ==

=== C: other files ==

2013-09-12 13:36:27 8C636C988365FC3E61F1B5C5ACECCB55 18675 ----a-w- C:\Program Files\Java\jre7\lib\deploy\ffjcext.zip

==== Firefox Extensions ======================

==== Firefox Plugins ======================

Profilepath: C:\Documents and Settings\Shirley\Application Data\Mozilla\Firefox\Profiles\27zl3w7v.default

101700E93EB905992B518256CB441829 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll - Google Update

7550FC1ADE982582D5920BEA6430E3D4 - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll - Google Earth Plugin

43CEBDFA8B91BEB5FEBD4F9E6768AEF2 - C:\Program Files\VideoLAN\VLC\npvlc.dll - VLC Web Plugin

F045DF7AF127DC4BCC53421850114E15 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll - Silverlight Plug-In

CA0E1DFBE480CF0BE13A0883BEB378B6 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll - Java Platform SE 7 U40

AF661355EBAB898EB92D5454AEF93CE0 - C:\WINDOWS\system32\npDeployJava1.dll - Java Deployment Toolkit 7.0.400.43

F00A0EF5835E1B96F783D617F1948704 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll - iTunes Application Detector

77B09C2C6F407531447DA75E3ACD1C5B - C:\Program Files\Adobe\Reader 10.0\Reader\browser\nppdf32.dll - Adobe Acrobat

04ACC61B47857E779CD92D1D88770BF1 - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll - Adobe Acrobat

607D5DD893D217BCA2449F4A483818B5 - C:\Program Files\Nitro\Pro 8\npnitromozilla.dll - Nitro PDF plugin for Firefox and Chrome

626791785FF2A338575E8AF0563D8333 - C:\WINDOWS\npMSDM.dll - Microsoft Download Manager Plugin

D487461B647B19ECF4AF4C930A47BB2D - C:\Program Files\DYMO\DYMO Label Software\Framework\npDYMOLabelFramework.dll - DYMO Label Framework

AB87EEFFD18F2BAAFC274E7075EA6C67 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation

901DF887DBDF87FA3C659239F68F3228 - C:\Program Files\Windows Media Player\npdrmv2.dll - Microsoft® DRM

0F9DEA5814D22F83FED5F427E263DED0 - C:\Program Files\Windows Media Player\npdsplay.dll - Windows Media Player Plug-in Dynamic Link Library

F89E6BBD6A080D8C714DFB6F30678288 - C:\Program Files\Windows Media Player\npwmsdrm.dll - Microsoft® DRM

BBAFE24293695D557DC2319346C316A7 - C:\Program Files\Nitro\Pro 8\npnitroie.dll - Nitro PDF plugin for Internet Explorer

BC487C715486F7BFD9D88FAB92549BFA - C:\Program Files\Nitro\Pro 8\npdf.dll - Nitro PDF Library

A9657C67E350EA087350DA5895307E54 - C:\Program Files\Nitro\Pro 8\NPShellExtension.dll - Nitro Pro ShellExtension

7D28153B7D586330678AD522B71D89CB - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrlui.dll - Microsoft® Silverlight

3EA079023D32054BFD73D08E77C72609 - C:\WINDOWS\system32\npptools.dll - Besturingssysteem Microsoft® Windows®

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

aaaaabfjnbeinlpljodiajipidiompfl - C:\Documents and Settings\Shirley\Local Settings\Application Data\APN\GoogleCRXs\aaaaabfjnbeinlpljodiajipidiompfl_7.15.5.0.crx[]

Avira Toolbar - Han Struijk - Default\Extensions\aaaaabfjnbeinlpljodiajipidiompfl

Docs - Han Struijk - Default\Extensions\aohghmighlieiainnegkcijnfilokake

Google Drive - Han Struijk - Default\Extensions\apdfllckaahabafndbhieahigkjlhalf

YouTube - Han Struijk - Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo

Google Search - Han Struijk - Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

Gmail - Han Struijk - Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

Chrome In-App Payments service - Shirley - Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

==== Chrome Fix ======================

C:\Documents and Settings\Han Struijk\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaaaabfjnbeinlpljodiajipidiompfl deleted successfully

==== Set IE to Default ======================

Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]

"Tabs"="You have just opened a new tab#"

New Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]

"Tabs"="res://ieframe.dll/tabswelcome.htm"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

"DefaultScope"="{FD63BF63-BFFF-4B8F-9D26-4267DF7F17DD}"

{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Unknown Url="Not_Found"

{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="{searchTerms} - Google Search}"

{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} Unknown Url="Not_Found"

{E2C641D8-1D04-406F-B618-F0DC91567D5B} Bing Url="{searchTerms} - Bing"

{FD63BF63-BFFF-4B8F-9D26-4267DF7F17DD} Google Url="{searchTerms} - Buscar con Google"

==== Reset Google Chrome ======================

C:\Documents and Settings\Han Struijk\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences was reset successfully

C:\Documents and Settings\Shirley\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences was reset successfully

C:\Documents and Settings\Han Struijk\Local Settings\Application Data\Google\Chrome\User Data\Default\Web Data was reset successfully

C:\Documents and Settings\Shirley\Local Settings\Application Data\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1644491937-1757981266-1801674531-1004\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} deleted successfully

HKEY_USERS\S-1-5-21-1644491937-1757981266-1801674531-1011\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} deleted successfully

HKEY_USERS\S-1-5-21-1644491937-1757981266-1801674531-1004\Software\Microsoft\Internet Explorer\SearchScopes\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} deleted successfully

==== Deleting CLSID Registry Values ======================

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\aaaaabfjnbeinlpljodiajipidiompfl deleted successfully

==== Empty IE Cache ======================

C:\Documents and Settings\Causeway\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

C:\Documents and Settings\Han Struijk\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

C:\Documents and Settings\Shirley\Local Settings\Temp\Temporary Internet Files\Content.IE5 emptied successfully

C:\Documents and Settings\UpdatusUser\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

C:\Documents and Settings\Shirley\Local Settings\Temporary Internet Files\Content.IE5\6IG1OYFD will be deleted at reboot

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

C:\Documents and Settings\Shirley\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Cache found

==== Empty Chrome Cache ======================

C:\Documents and Settings\Han Struijk\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache emptied successfully

C:\Documents and Settings\Shirley\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied

C:\DOCUME~1\Shirley\LOCALS~1\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\RECYCLER successfully emptied

==== Deleting Files / Folders ======================

"C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not deleted

"C:\Documents and Settings\Shirley\Local Settings\Temporary Internet Files\Content.IE5\index.dat" deleted

"C:\Documents and Settings\All Users\Application Data\boost_interprocess" not deleted

"C:\Documents and Settings\Shirley\Local Settings\Temporary Internet Files\Content.IE5\6IG1OYFD" not found

==== EOF on ma 16-09-2013 at 21:58:41,90 ======================

Download Zoek.zip naar het bureaublad.

Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.
Klik met de rechtermuisknop op Zoek.zip en klik op de optie "Alles uitpakken".

Dubbelklik vervolgens op Zoek.exe om de tool te starten.

Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.

Kopieer nu onderstaande code en plak die in het grote invulvenster:
Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.
emptyclsid;
firefoxlook; 
Chromelook; 
CHRdefaults;
autoclean; 
iedefaults; 
filesrcm;
Klik nu op de knop "Run script".

Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).

Mocht na de herstart geen logje verschijnen, start zoek.exe dan opnieuw, de log verschijnt dan alsnog.

Post het geopende logje in het volgende bericht als bijlage.

juisterr · 17 september 2013

Download RSIT van de onderstaande locaties en sla deze op het bureaublad op.

Hier staat een beschrijving hoe je kan kijken of je een 32- of 64-bitversie van Windows heeft.

RSIT 32 bit (RSIT.exe)
RSIT 64 bit (RSITx64.exe)

Dubbelklik op RSIT.exe om de tool te starten.

Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Vervolgens wordt de "Disclaimer of warranty" getoond, klik vervolgens op "Continue"
Wanneer de tool gereed is wordt er een kladblok bestand genaamd "Log" geopend.
Plaats de inhoud hiervan in het volgende bericht.

harekas · 17 september 2013

Hi, hierbij het logreport! Ik hoop dat je het weet op te lossen. Ik kan heel de tijd me mail niet opslaan dan krijg ik een melding "de bewerking is mislukt".

Dank je wel alvast,

Logfile of random's system information tool 1.09 (written by random/random)

Run by Shirley at 2013-09-17 16:41:55

Microsoft Windows XP Home Edition Service Pack 3

System drive C: has 694 GB (87%) free of 800 GB

Total RAM: 3326 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 16:42:06, on 17-9-2013

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Avira\AntiVir Desktop\sched.exe

C:\Program Files\Avira\AntiVir Desktop\avguard.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\KPN\Mobiel Internet Software\BecHelperService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\KPN\Mobiel Internet Software\LoggerServer.exe

C:\Program Files\DYMO\DYMO Label Software\DymoPnpService.exe

C:\Program Files\Java\jre7\bin\jqs.exe

C:\Program Files\Google\Update\1.3.21.153\GoogleCrashHandler.exe

C:\Program Files\KPN Back-up Online\BackupSC.exe

C:\Program Files\Mamut\Bin\Mamut.synchronizationservice.synchronizationwindowsservice.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

C:\Program Files\Nitro\Pro 8\NitroPDFDriverService8.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe

C:\Program Files\KPN Back-up Online\BackupFP.exe

C:\Program Files\Synology\Assistant\UsbClientService.exe

C:\WINDOWS\system32\SearchIndexer.exe

C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe

C:\Program Files\Avira\AntiVir Desktop\avshadow.exe

C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE

C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

C:\Program Files\TeamViewer\Version8\TeamViewer.exe

C:\Program Files\TeamViewer\Version8\tv_w32.exe

C:\WINDOWS\RTHDCPL.EXE

C:\WINDOWS\SOUNDMAN.EXE

C:\WINDOWS\system32\RunDLL32.exe

C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe

C:\Program Files\Avira\AntiVir Desktop\avgnt.exe

C:\Program Files\Trust\250S Series\lwbwheel.exe

C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE

C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\Olympus\ib\olycamdetect.exe

C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Program Files\VoipBuster.com\VoipBuster\VoipBuster.exe

C:\Program Files\KPN Back-up Online\KPNBackupOnline.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe

C:\Program Files\HP\HP Officejet 6500 E710n-z\Bin\ScanToPCActivationApp.exe

C:\Program Files\DYMO\DYMO Label Software\DymoQuickPrint.exe

C:\Program Files\Messenger\msmsgs.exe

C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe

C:\Program Files\Skype\Phone\Skype.exe

C:\Program Files\Windows Desktop Search\WindowsSearch.exe

C:\WINDOWS\system32\RunDll32.exe

C:\WINDOWS\system32\WISPTIS.EXE

C:\Program Files\HP\HP Officejet 6500 E710n-z\Bin\HPNetworkCommunicatorCom.exe

C:\WINDOWS\system32\wbem\wmiapsrv.exe

C:\Program Files\File Type Assistant\tsassist.exe

C:\WINDOWS\explorer.exe

C:\Program Files\HP\HP Officejet 6500 E710n-z\Bin\HPNetworkCommunicator.exe

C:\PROGRA~1\MICROS~3\Office14\OUTLOOK.EXE

C:\Program Files\Microsoft Office\Office14\EXCEL.EXE

C:\Program Files\Internet Explorer\iexplore.exe

C:\WINDOWS\system32\SearchProtocolHost.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\RSIT.exe

C:\Program Files\trend micro\Shirley.exe