Ga naar inhoud

hjt-logje

manneke
 Delen

Aanbevolen berichten

manneke Meewerkend lid

manneke

Geplaatst:
Geplaatst:

Hoi pc-helpers,

Is het mogelijk het hjt-logje een na te kijken

Alvast bedankt

grts peter

Logfile of Trend Micro HijackThis v2.0.5

Scan saved at 11:48:17, on 6/12/2013

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v10.0 (10.00.9200.16736)

Boot mode: Normal

Running processes:

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\taskhost.exe

C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

C:\Program Files\Microsoft Security Client\msseces.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Windows\system32\Macromed\Flash\FlashUtil32_11_9_900_152_ActiveX.exe

C:\Windows\System32\MsSpellCheckingFacility.exe

C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE

C:\Program Files\Internet Explorer\iexplore.exe

C:\Users\peter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OL58PMU6\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN België: Hotmail, Skype, nieuws, entertainment, lifestyle en meer!

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN België: Hotmail, Skype, nieuws, entertainment, lifestyle en meer!

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer wordt aangeboden door MSN and Bing

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R3 - URLSearchHook: (no name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - (no file)

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--

End of file - 4056 bytes

Link naar reactie
Delen op andere sites
kape Grootmeester

kape

Geplaatst:
Geplaatst:

Start Hijackthis op. Selecteer “Scan”. Selecteer alleen de items die hieronder zijn genoemd:

R3 - URLSearchHook: (no name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - (no file)

Klik op 'Fix checked' om de items te verwijderen.

Let op : Windows Vista & 7 gebruikers dienen HijackThis als “administrator” uit te voeren via rechtermuisknop “als administrator uitvoeren". Indien dit via de snelkoppeling niet lukt voer je HijackThis als administrator uit in de volgende map : C:\Program Files\Trend Micro\HiJackThis of C:\Program Files (x86)\Trend Micro\HiJackThis.

Zijn er problemen met deze PC ? Of was dit enkel een routinecontrole ?

Link naar reactie
Delen op andere sites
kape Grootmeester

kape

Geplaatst:
Geplaatst:

Download 51a5f5d096dae-icon_RSIT.pngRSIT van de onderstaande locaties en sla deze op het bureaublad op.

Hier staat een beschrijving hoe je kan kijken of je een 32- of 64-bitversie van Windows heeft.

Dubbelklik op RSIT.exe om de tool te starten.

  • Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  • Vervolgens wordt de "Disclaimer of warranty" getoond, klik vervolgens op "Continue"
  • Wanneer de tool gereed is wordt er een kladblok bestand genaamd "Log" geopend.
  • Plaats de inhoud hiervan in het volgende bericht.

Link naar reactie
Delen op andere sites
manneke Meewerkend lid

manneke

Geplaatst:
  • Auteur
Geplaatst:

Kape,

Zoals gevraagd volgt het logje

Logfile of random's system information tool 1.09 (written by random/random)

Run by peter at 2013-12-07 09:19:21

Microsoft Windows 7 Home Premium Service Pack 1

System drive C: has 9 GB (11%) free of 88 GB

Total RAM: 1014 MB (42% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 9:19:41, on 7/12/2013

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v10.0 (10.00.9200.16736)

Boot mode: Normal

Running processes:

C:\Windows\system32\taskhost.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

C:\Program Files\Microsoft Security Client\msseces.exe

C:\Program Files\Microsoft Office\Office12\GROOVE.EXE

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Windows\system32\Macromed\Flash\FlashUtil32_11_9_900_152_ActiveX.exe

C:\Users\peter\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1OUK2GB5\RSIT.exe

C:\Program Files\trend micro\peter.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN België: Hotmail, Skype, nieuws, entertainment, lifestyle en meer!

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN België: Hotmail, Skype, nieuws, entertainment, lifestyle en meer!

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer wordt aangeboden door MSN and Bing

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--

End of file - 4330 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]

Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

Java Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-12-04 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-12-04 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]

"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2013-10-23 948440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]

"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"ConsentPromptBehaviorAdmin"=5

"ConsentPromptBehaviorUser"=3

"EnableUIADesktopToggle"=0

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

"vidc.mrle"=msrle32.dll

"vidc.msvc"=msvidc32.dll

"msacm.imaadpcm"=imaadp32.acm

"msacm.msg711"=msg711.acm

"msacm.msgsm610"=msgsm32.acm

"msacm.msadpcm"=msadp32.acm

"midimapper"=midimap.dll

"wavemapper"=msacm32.drv

"vidc.uyvy"=msyuv.dll

"vidc.yuy2"=msyuv.dll

"vidc.yvyu"=msyuv.dll

"vidc.iyuv"=iyuv_32.dll

"vidc.i420"=iyuv_32.dll

"vidc.yvu9"=tsbyuv.dll

"msacm.l3acm"=C:\Windows\System32\l3codeca.acm

"vidc.cvid"=iccvid.dll

"wave"=wdmaud.drv

"midi"=wdmaud.drv

"mixer"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-12-07 09:19:21 ----D---- C:\rsit

2013-12-07 09:19:21 ----D---- C:\Program Files\trend micro

2013-12-05 13:29:16 ----D---- C:\Program Files\LuxSat_ToolBox_v.5.7

2013-12-04 16:10:55 ----D---- C:\ProgramData\Oracle

2013-12-04 16:10:46 ----A---- C:\Windows\system32\javaws.exe

2013-12-04 16:10:14 ----A---- C:\Windows\system32\WindowsAccessBridge.dll

2013-12-04 16:10:14 ----A---- C:\Windows\system32\javaw.exe

2013-12-04 16:10:14 ----A---- C:\Windows\system32\java.exe

2013-12-04 16:09:33 ----D---- C:\Program Files\Java

2013-12-04 16:02:54 ----D---- C:\Windows\system32\siscardplugins

2013-12-04 16:02:54 ----D---- C:\Windows\system32\beidpp

2013-12-04 16:02:47 ----D---- C:\Program Files\BeID Minidriver

2013-12-04 16:02:45 ----D---- C:\Program Files\Mozilla Firefox

2013-12-04 16:02:45 ----D---- C:\Program Files\Belgium Identity Card

2013-12-04 16:02:19 ----D---- C:\drivers

2013-12-02 13:27:15 ----D---- C:\Users\peter\AppData\Roaming\Opera Software

2013-12-02 13:26:47 ----D---- C:\Program Files\Opera

2013-11-25 19:39:29 ----A---- C:\Windows\system32\jscript.dll

2013-11-25 19:39:28 ----A---- C:\Windows\system32\jscript9.dll

2013-11-25 19:39:26 ----A---- C:\Windows\system32\jsproxy.dll

2013-11-25 19:39:26 ----A---- C:\Windows\system32\ieui.dll

2013-11-25 19:39:26 ----A---- C:\Windows\system32\iesetup.dll

2013-11-25 19:39:24 ----A---- C:\Windows\system32\msfeeds.dll

2013-11-25 19:39:24 ----A---- C:\Windows\system32\iernonce.dll

2013-11-25 19:39:24 ----A---- C:\Windows\system32\ie4uinit.exe

2013-11-25 19:39:23 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe

2013-11-25 19:39:23 ----A---- C:\Windows\system32\iesysprep.dll

2013-11-25 19:39:22 ----A---- C:\Windows\system32\urlmon.dll

2013-11-25 19:39:21 ----A---- C:\Windows\system32\iertutil.dll

2013-11-25 19:39:19 ----A---- C:\Windows\system32\wininet.dll

2013-11-25 19:39:16 ----A---- C:\Windows\system32\ieframe.dll

2013-11-25 19:39:13 ----A---- C:\Windows\system32\mshtml.dll

2013-11-25 18:49:29 ----A---- C:\Windows\system32\comctl32.dll

2013-11-25 18:49:28 ----A---- C:\Windows\system32\drivers\usbscan.sys

2013-11-25 18:49:28 ----A---- C:\Windows\system32\drivers\hidclass.sys

2013-11-25 18:49:27 ----A---- C:\Windows\system32\drivers\hidparse.sys

2013-11-25 18:49:25 ----A---- C:\Windows\system32\mswsock.dll

2013-11-25 18:49:25 ----A---- C:\Windows\system32\drivers\tcpip.sys

2013-11-25 18:49:24 ----A---- C:\Windows\system32\drivers\afd.sys

2013-11-25 18:49:18 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll

2013-11-25 18:49:18 ----A---- C:\Windows\system32\authui.dll

2013-11-25 18:49:17 ----A---- C:\Windows\system32\credui.dll

2013-11-25 18:49:02 ----A---- C:\Windows\system32\schannel.dll

2013-11-25 18:49:02 ----A---- C:\Windows\system32\drivers\ksecpkg.sys

2013-11-25 18:49:02 ----A---- C:\Windows\system32\drivers\ksecdd.sys

2013-11-25 18:49:01 ----A---- C:\Windows\system32\sspisrv.dll

2013-11-25 18:49:01 ----A---- C:\Windows\system32\sspicli.dll

2013-11-25 18:49:01 ----A---- C:\Windows\system32\secur32.dll

2013-11-25 18:49:01 ----A---- C:\Windows\system32\ncrypt.dll

2013-11-25 18:49:01 ----A---- C:\Windows\system32\lsass.exe

2013-11-25 18:49:01 ----A---- C:\Windows\system32\lsasrv.dll

2013-11-25 18:49:01 ----A---- C:\Windows\system32\drivers\cng.sys

2013-11-25 18:48:37 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys

2013-11-25 18:48:33 ----A---- C:\Windows\system32\ntkrnlpa.exe

2013-11-25 18:48:32 ----A---- C:\Windows\system32\tdh.dll

2013-11-25 18:48:32 ----A---- C:\Windows\system32\ntoskrnl.exe

2013-11-25 18:48:32 ----A---- C:\Windows\system32\ntdll.dll

2013-11-25 18:48:31 ----A---- C:\Windows\system32\advapi32.dll

2013-11-25 18:48:28 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll

2013-11-25 18:48:26 ----A---- C:\Windows\system32\dciman32.dll

2013-11-25 18:48:26 ----A---- C:\Windows\system32\atmfd.dll

2013-11-25 18:48:25 ----A---- C:\Windows\system32\lpk.dll

2013-11-25 18:48:25 ----A---- C:\Windows\system32\fontsub.dll

2013-11-25 18:48:25 ----A---- C:\Windows\system32\atmlib.dll

2013-11-25 18:48:23 ----A---- C:\Windows\system32\scavengeui.dll

2013-11-25 18:48:12 ----A---- C:\Windows\system32\win32k.sys

2013-11-25 18:48:04 ----A---- C:\Windows\system32\WebClnt.dll

2013-11-25 18:48:04 ----A---- C:\Windows\system32\davclnt.dll

2013-11-25 18:48:03 ----A---- C:\Windows\system32\drivers\mrxdav.sys

2013-11-25 18:48:02 ----A---- C:\Windows\system32\gdi32.dll

2013-11-25 18:47:53 ----A---- C:\Windows\system32\shell32.dll

2013-11-25 18:47:51 ----A---- C:\Windows\system32\shdocvw.dll

2013-11-25 18:47:37 ----A---- C:\Windows\system32\drivers\ataport.sys

2013-11-25 18:47:30 ----A---- C:\Windows\system32\IKEEXT.DLL

2013-11-25 18:47:30 ----A---- C:\Windows\system32\FWPUCLNT.DLL

2013-11-25 18:47:29 ----A---- C:\Windows\system32\nshwfp.dll

2013-11-25 18:47:12 ----A---- C:\Windows\system32\crypt32.dll

2013-11-25 18:46:53 ----A---- C:\Windows\system32\drivers\usbcir.sys

2013-11-25 18:46:50 ----A---- C:\Windows\system32\drivers\Wdf01000.sys

2013-11-25 18:46:45 ----A---- C:\Windows\system32\kernel32.dll

2013-11-25 18:46:44 ----A---- C:\Windows\system32\KernelBase.dll

2013-11-25 18:46:43 ----A---- C:\Windows\system32\winsrv.dll

2013-11-25 18:46:42 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2013-11-25 18:46:42 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2013-11-25 18:46:42 ----A---- C:\Windows\system32\conhost.exe

2013-11-25 18:46:41 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2013-11-25 18:46:41 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2013-11-25 18:46:41 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2013-11-25 18:46:41 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-11-25 18:46:41 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2013-11-25 18:46:41 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2013-11-25 18:46:41 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2013-11-25 18:46:40 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2013-11-25 18:46:40 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2013-11-25 18:46:40 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2013-11-25 18:46:40 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2013-11-25 18:46:40 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2013-11-25 18:46:40 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2013-11-25 18:46:40 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2013-11-25 18:46:40 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2013-11-25 18:46:39 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2013-11-25 18:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2013-11-25 18:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2013-11-25 18:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2013-11-25 18:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2013-11-25 18:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2013-11-25 18:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2013-11-25 18:46:39 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2013-11-25 18:46:38 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2013-11-25 18:46:37 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2013-11-25 18:46:37 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

======List of files/folders modified in the last 1 month======

2013-12-07 09:19:21 ----RD---- C:\Program Files

2013-12-07 09:18:08 ----D---- C:\Windows\Temp

2013-12-07 09:18:05 ----D---- C:\Windows\Prefetch

2013-12-07 09:18:03 ----D---- C:\Windows\system32\config

2013-12-07 09:05:37 ----SHD---- C:\System Volume Information

2013-12-07 08:59:45 ----D---- C:\Windows\System32

2013-12-07 08:59:45 ----A---- C:\Windows\system32\PerfStringBackup.INI

2013-12-07 08:59:44 ----D---- C:\Windows\inf

2013-12-05 18:02:08 ----SHD---- C:\Windows\Installer

2013-12-05 18:02:08 ----HD---- C:\Config.Msi

2013-12-04 16:10:55 ----HD---- C:\ProgramData

2013-12-04 16:05:30 ----D---- C:\Windows\system32\catroot

2013-12-04 16:05:30 ----D---- C:\Program Files\DIFX

2013-12-04 16:05:28 ----D---- C:\Windows\system32\DriverStore

2013-12-04 16:02:46 ----D---- C:\Windows

2013-12-03 17:38:59 ----D---- C:\Windows\system32\Tasks

2013-12-02 14:51:21 ----A---- C:\Windows\system32\FlashPlayerApp.exe

2013-11-28 15:46:36 ----D---- C:\Windows\system32\NDF

2013-11-27 12:18:14 ----D---- C:\Program Files\Google

2013-11-26 11:25:19 ----D---- C:\Windows\Panther

2013-11-26 11:25:19 ----D---- C:\Windows\ModemLogs

2013-11-26 11:25:19 ----D---- C:\Windows\Logs

2013-11-26 11:25:19 ----D---- C:\Windows\debug

2013-11-26 11:12:48 ----D---- C:\Windows\winsxs

2013-11-26 11:12:06 ----D---- C:\Program Files\CCleaner

2013-11-26 11:06:29 ----D---- C:\ProgramData\Tarma Installer

2013-11-26 11:02:38 ----D---- C:\ProgramData\Nokia

2013-11-26 11:02:36 ----D---- C:\Program Files\Common Files

2013-11-26 11:01:56 ----D---- C:\Users\peter\AppData\Roaming\Nokia Suite

2013-11-26 11:01:56 ----D---- C:\Users\peter\AppData\Roaming\Nokia

2013-11-26 10:58:25 ----D---- C:\Windows\system32\catroot2

2013-11-25 22:11:31 ----D---- C:\Windows\rescache

2013-11-25 21:07:36 ----D---- C:\Windows\Microsoft.NET

2013-11-25 21:07:35 ----RSD---- C:\Windows\assembly

2013-11-25 20:23:50 ----D---- C:\Program Files\Microsoft Silverlight

2013-11-25 20:20:49 ----D---- C:\Windows\system32\nl-NL

2013-11-25 20:20:49 ----D---- C:\Windows\system32\drivers

2013-11-25 20:20:44 ----D---- C:\Program Files\Internet Explorer

2013-11-25 20:15:16 ----D---- C:\ProgramData\Microsoft Help

2013-11-25 20:07:10 ----D---- C:\Program Files\Microsoft Security Client

2013-11-25 19:39:05 ----D---- C:\Windows\system32\MRT

2013-11-19 11:21:30 ----N---- C:\Windows\system32\MpSigStub.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-09-27 214696]

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]

R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-09-27 104768]

R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2009-07-13 1035776]

R3 BthEnum;Bluetooth-stuurprogramma voor aanvraagblok; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]

R3 BTHUSB;USB-stuurprogramma voor Bluetooth-radio; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]

R3 NETw2v32;Stuurprogramma voor Intel® PRO/Wireless 2200BG-netwerkverbinding onder Windows Vista; C:\Windows\system32\DRIVERS\NETw2v32.sys [2007-03-06 2595840]

R3 RFCOMM;Bluetooth-apparaat (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]

R3 RTL8023xp;Realtek 10/100 NIC Family NDIS x86 Driver; C:\Windows\system32\DRIVERS\Rtnicxp.sys [2009-07-13 43008]

R3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 84992]

R3 smwdm;smwdm; C:\Windows\system32\drivers\smwdm.sys [2005-03-28 220992]

R3 tifm21;tifm21; C:\Windows\system32\drivers\tifm21.sys [2006-07-06 168448]

S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]

S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]

S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]

S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]

S3 Bridge;@%SystemRoot%\system32\bridgeres.dll,-3; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 78336]

S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 78336]

S3 BthPan;Bluetooth-apparaat (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]

S3 BTHPORT;Stuurprogramma voor Bluetooth-poort; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]

S3 EMVSCARD;EMVSCARD; C:\Windows\System32\Drivers\EMVSCARD.sys [2006-12-19 20736]

S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2009-09-10 102912]

S3 hwusbdev;Huawei DataCard USB PNP Device; C:\Windows\system32\DRIVERS\ewusbdev.sys [2009-07-24 101248]

S3 LAN9500;LAN9500 USB 2.0 to Ethernet 10/100 Adapter Service; C:\Windows\system32\DRIVERS\lan9500-x86-n51f.sys [2009-02-06 57344]

S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2012-10-17 19072]

S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]

S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]

S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]

S3 taphss;Anchorfree HSS Adapter; C:\Windows\system32\DRIVERS\taphss.sys [2012-03-26 32768]

S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 49664]

S3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 36352]

S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]

S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]

S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-10 65640]

R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-10-23 22208]

R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2013-10-23 280288]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

S2 gupdate;Google Update-service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-12-02 136176]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-02 257416]

S3 gupdatem;Google Update-service (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-12-02 136176]

S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]

S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]

S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2012-12-19 732648]

S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-05-15 1343400]

-----------------EOF-----------------

Link naar reactie
Delen op andere sites
kape Grootmeester

kape

Geplaatst:
Geplaatst:

Download 52147fb3b2536-AdwCleaner_99_3_16x16x32.pngAdwCleaner by Xplode naar het bureaublad.

AdwCleaner uitvoeren

  • Sluit alle openstaande vensters.
  • Dubbelklik op AdwCleaner.exe om de tool te starten.
  • Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  • Klik vervolgens op de knop Scan.
  • Wanneer de scan gereed is Klikt u vervolgens op de knop Clean.
  • Als dit gereed is wordt er gevraagd om de computer opnieuw op te starten, klik hier op OK.
  • Nadat de computer opnieuw is opgestart wordt het logbestand automatisch geopend.
  • Plaats dit logbestand in het volgende bericht.

Link naar reactie
Delen op andere sites
manneke Meewerkend lid

manneke

Geplaatst:
  • Auteur
Geplaatst:

Kape,

Hiermee het volgende logje

grts peter

# AdwCleaner v3.014 - Report created 08/12/2013 at 09:09:57

# Updated 01/12/2013 by Xplode

# Operating System : Windows 7 Home Premium Service Pack 1 (32 bits)

# Username : peter - PENK-LAPTOP

# Running from : C:\Users\peter\Desktop\adwcleaner.exe

# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\apn

Folder Deleted : C:\ProgramData\Tarma Installer

Folder Deleted : C:\Users\peter\AppData\Roaming\Systweak

File Deleted : C:\Windows\system32\roboot.exe

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASAPI32

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASMANCS

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\systweakasp_rasapi32

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\systweakasp_rasmancs

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{28387537-E3F9-4ED7-860C-11E69AF4A8A0}

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{043C5167-00BB-4324-AF7E-62013FAEDACF}

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21}

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{57334934-2D47-006A-76A7-7A786E7484D7}]

Key Deleted : HKLM\Software\InstallIQ

Key Deleted : HKLM\Software\systweak

Key Deleted : HKLM\Software\Tarma Installer

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16736

-\\ Google Chrome v31.0.1650.63

[ File : C:\Users\peter\AppData\Local\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [2291 octets] - [08/12/2013 09:08:35]

AdwCleaner[s0].txt - [2260 octets] - [08/12/2013 09:09:57]

########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [2320 octets] ##########

Link naar reactie
Delen op andere sites
kape Grootmeester

kape

Geplaatst:
Geplaatst:

Om het volledig op te ruimen, mag je niet vergeten om nog het volgende te doen:

Download 51a5ce45263de-delfix.pngDelfix by Xplode naar het bureaublad.

Dubbelklik op Delfix.exe om de tool te starten.

Zet nu vinkjes voor de volgende items:

  • Remove disinfection tools
  • Purge System Restore
  • Reset system settings

Klik nu op "Run" en wacht geduldig tot de tool gereed is.

Wanneer de tool gereed is wordt er een logbestand aangemaakt. Dit hoeft u echter niet te plaatsen.

Download CCleaner. (Als je het nog niet hebt)

Installeer het (als je niet wilt dat Google Chrome op je PC als standaard-webbrowser wordt geïnstalleerd, moet je de 2 vinkjes wegdoen !!!) en start CCleaner op.

Klik in de linkse kolom op “Cleaner”. Klik achtereenvolgens op ‘Analyseren’ en na de analyse op 'Schoonmaken'. Klik vervolgens in de linkse kolom op “Register” en klik op ‘Scan naar problemen”. Als er fouten gevonden worden klik je op ”Herstel geselecteerde problemen” en ”OK”. Dan krijg je de vraag om een back-up te maken. Klik op “JA”. Kies dan “Herstel alle geselecteerde fouten”.

Soms is 1 analyse niet voldoende. Deze procedure mag je herhalen tot de analyse geen fouten meer aangeeft.

Sluit hierna CCleaner terug af.

Wil je dit uitgebreid in beeld bekijken, klik dan hier voor de handleiding.

Link naar reactie
Delen op andere sites
Gast
Dit topic is nu gesloten voor nieuwe reacties.
 Delen
Ga naar topic overzicht
Logo

OVER ONS

PC Helpforum helpt GRATIS computergebruikers sinds juli 2006. Ons team geeft via het forum professioneel antwoord op uw vragen en probeert uw pc problemen zo snel mogelijk op te lossen. Word lid vandaag, plaats je vraag online en het PC Helpforum-team helpt u graag verder!

SITEMAP

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.