Ga naar inhoud

AAdBollockunWAtch 3.0: chrome extensie

vermeulen
 Delen

Aanbevolen berichten

vermeulen Leerling

vermeulen

Geplaatst:
Geplaatst:

Beste

Ik slaag er maar niet in om een volhardende extensie uit Google Chrome te verwijderen. Verwijderen uit de map extensies van Chrome zelf werkt blijkbaar niet. Er is niets te vinden bij "Software" in het configuratiescherm. Malware Byte, CC-cleaner,.. het verandert tot nog toe niets.

De extensie is de volgende:

AAdBollockunWAtch 3.0

Id: jnilbpljkbfdbfdobpplflcpmeaogjhc(Deze extensie wordt beheerd en kan niet worden verwijderd of uitgeschakeld)

Hetgeen mij vooral zorgen baart, zijn de rechten die de extensie zichzelf toebedeelt. Gegevens openen, browse-activiteit openen en apps beheren.

Kan iemand mij helpen?

Dank bij voorbaat

Sven

Link naar reactie
Delen op andere sites
kape Grootmeester

kape

Geplaatst:
Geplaatst:

Download 51a5f5d096dae-icon_RSIT.pngRSIT van de onderstaande locaties en sla deze op het bureaublad op.

Hier staat een beschrijving hoe je kan kijken of je een 32- of 64-bitversie van Windows heeft.

Dubbelklik op RSIT.exe om de tool te starten.

  • Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  • Vervolgens wordt de "Disclaimer of warranty" getoond, klik vervolgens op "Continue"
  • Wanneer de tool gereed is wordt er een kladblok bestand genaamd "Log" geopend.
  • Plaats de inhoud hiervan in het volgende bericht.

Bekijk ook de instructievideo.

Link naar reactie
Delen op andere sites
vermeulen Leerling

vermeulen

Geplaatst:
  • Auteur
Geplaatst: (aangepast)

Dit was het resultaat:

Logfile of random's system information tool 1.09 (written by random/random)

Run by HP_Administrator at 2014-02-15 17:06:48

Microsoft Windows XP Professional Service Pack 2

System drive C: has 188 GB (81%) free of 232 GB

Total RAM: 1022 MB (35% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 17:06:49, on 15/02/2014

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Google\Update\GoogleUpdate.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\WINDOWS\eHome\ehRecvr.exe

C:\WINDOWS\eHome\ehSched.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Common Files\LightScribe\LSSrvc.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology Drivers\Elservice.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\WINDOWS\system32\dllhost.exe

C:\WINDOWS\ehome\ehtray.exe

C:\WINDOWS\RTHDCPL.EXE

C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe

C:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe

C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe

C:\Program Files\D-Link\D-Link Wireless N DWA-140\AirNCFG.exe

C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

C:\WINDOWS\eHome\ehmsas.exe

C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE

C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Application Data\uTorrent\uTorrent.exe

C:\WINDOWS\system32\wscntfy.exe

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe

C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Mijn documenten\Downloads\RSIT (1).exe

C:\Program Files\trend micro\HP_Administrator.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Yahoo Zoeken - zoeken op het web

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Yahoo Zoeken - zoeken op het web

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Yahoo Zoeken - zoeken op het web

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = Yahoo Zoeken - zoeken op het web

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe

O4 - HKLM\..\Run: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [iAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe

O4 - HKLM\..\Run: [DMAScheduler] "c:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe"

O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE

O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe

O4 - HKLM\..\Run: [D-Link D-Link Wireless N DWA-140] C:\Program Files\D-Link\D-Link Wireless N DWA-140\AirNCFG.exe

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe

O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"

O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup

O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [uTorrent] "C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Application Data\uTorrent\uTorrent.exe" /MINIMIZED

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')

O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')

O4 - .DEFAULT User Startup: PinMcLnk.lnk = C:\hp\bin\cloaker.exe (User 'Default user')

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra button: HP Clipboek - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll

O9 - Extra button: HP Slim selecteren - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL

O9 - Extra button: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm

O9 - Extra 'Tools' menuitem: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)

O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - MSN Games - Free Online Games

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - MSN Games - Free Online Games

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Wireless Service - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe

O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: Intel® Quick Resume technology (ELService) - Intel Corporation - C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology Drivers\Elservice.exe

O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--

End of file - 10142 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job

C:\WINDOWS\tasks\At1.job

C:\WINDOWS\tasks\At2.job

C:\WINDOWS\tasks\At3.job

C:\WINDOWS\tasks\At4.job

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job

C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"ehTray"=C:\WINDOWS\ehome\ehtray.exe [2005-08-18 64512]

"ftutil2"=ftutil2.dll,SetWriteCacheMode []

"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-07-22 16261632]

"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe [2006-07-06 151552]

"DMAScheduler"=c:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe [2006-04-13 90112]

"Recguard"=C:\WINDOWS\SMINST\RECGUARD.EXE [2005-07-22 237568]

"PCDrProfiler"= []

"ANIWZCS2Service"=C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe [2007-01-19 49152]

"D-Link D-Link Wireless N DWA-140"=C:\Program Files\D-Link\D-Link Wireless N DWA-140\AirNCFG.exe [2007-03-14 1388544]

"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]

"HPDJ Taskbar Utility"=C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe [2004-03-04 172032]

"ATICCC"=C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe [2006-05-10 90112]

"LogitechCommunicationsManager"=C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe [2006-06-26 497200]

"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-04-08 254696]

"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2011-07-05 421888]

"NPSStartup"= []

"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2012-12-19 41208]

"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]

"ISUSPM Startup"=C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe [2004-07-27 221184]

"ISUSScheduler"=C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2004-07-27 81920]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-09-02 15360]

"uTorrent"=C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Application Data\uTorrent\uTorrent.exe [2013-11-16 900440]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]

C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-03-11 49152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPBootOp]

C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe [2006-02-15 249856]

C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten

HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]

C:\WINDOWS\system32\Ati2evxx.dll [2006-07-18 86016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles

"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"F:\D-Link.exe"="F:\D-Link.exe:*:Enabled:Setup Wizard Template"

"C:\Program Files\World of Warcraft\WoW-3.2.0-enGB-downloader.exe"="C:\Program Files\World of Warcraft\WoW-3.2.0-enGB-downloader.exe:*:Enabled:Blizzard Downloader"

"C:\Program Files\World of Warcraft\Launcher.exe"="C:\Program Files\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher"

"C:\Program Files\BearShare Applications\BearShare\BearShare.exe"="C:\Program Files\BearShare Applications\BearShare\BearShare.exe:*:Enabled:BearShare"

"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"

"C:\Program Files\Google\Google Earth\client\googleearth.exe"="C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Enabled:Google Earth"

"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"

"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"

"C:\Program Files\Raptr\raptr.exe"="C:\Program Files\Raptr\raptr.exe:*:Enabled:Raptr Client"

"C:\Program Files\Raptr\raptr_im.exe"="C:\Program Files\Raptr\raptr_im.exe:*:Enabled:Raptr IM"

"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"

"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

"C:\Program Files\Microsoft Office\Office12\EXCEL.EXE"="C:\Program Files\Microsoft Office\Office12\EXCEL.EXE:*:Enabled:Microsoft Office Excel"

"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"

"C:\Riot Games\League of Legends\air\LolClient.exe"="C:\Riot Games\League of Legends\air\LolClient.exe:*:Enabled:League of Legends Lobby"

"C:\Riot Games\League of Legends\game\League of Legends.exe"="C:\Riot Games\League of Legends\game\League of Legends.exe:*:Enabled:League of Legends Game Client"

"C:\Program Files\Runes of Magic\Client.exe"="C:\Program Files\Runes of Magic\Client.exe:*:Enabled:Runes of Magic"

"C:\Program Files\World of Warcraft\Launcher.patch.exe"="C:\Program Files\World of Warcraft\Launcher.patch.exe:*:Enabled:Blizzard Launcher"

"C:\Program Files\Vuze\Azureus.exe"="C:\Program Files\Vuze\Azureus.exe:*:Enabled:Azureus / Vuze"

"C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\DeviceSetup.exe"="C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\DeviceSetup.exe:LocalSubNet:Enabled:HP-apparaatinstellingen"

"C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\HPNetworkCommunicator.exe"="C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\HPNetworkCommunicator.exe:LocalSubNet:Enabled:HP Netwerk communicator"

"C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe"="C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit"

"C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Application Data\uTorrent\uTorrent.exe"="C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Application Data\uTorrent\uTorrent.exe:*:Enabled:µTorrent"

"C:\Program Files\The Stanley Parable\stanley.exe"="C:\Program Files\The Stanley Parable\stanley.exe:*:Disabled:stanley"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"

"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

"midimapper"=midimap.dll

"msacm.imaadpcm"=imaadp32.acm

"msacm.msadpcm"=msadp32.acm

"msacm.msg711"=msg711.acm

"msacm.msgsm610"=msgsm32.acm

"msacm.trspch"=tssoft32.acm

"vidc.cvid"=iccvid.dll

"VIDC.I420"=i420vfw.dll

"vidc.iv31"=ir32_32.dll

"vidc.iv32"=ir32_32.dll

"vidc.iv41"=ir41_32.ax

"VIDC.IYUV"=iyuv_32.dll

"vidc.mrle"=msrle32.dll

"vidc.msvc"=msvidc32.dll

"VIDC.UYVY"=msyuv.dll

"VIDC.YUY2"=msyuv.dll

"VIDC.YVU9"=tsbyuv.dll

"VIDC.YVYU"=msyuv.dll

"wavemapper"=msacm32.drv

"msacm.msg723"=msg723.acm

"vidc.M263"=msh263.drv

"vidc.M261"=msh261.drv

"msacm.msaudio1"=msaud32.acm

"msacm.sl_anet"=sl_anet.acm

"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax

"vidc.iv50"=ir50_32.dll

"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm

"wave"=wdmaud.drv

"midi"=wdmaud.drv

"mixer"=wdmaud.drv

"aux"=wdmaud.drv

"MSVideo8"=VfWWDM32.dll

"wave1"=wdmaud.drv

"mixer1"=wdmaud.drv

"MSVideo"=vfwwdm32.dll

"vidc.yv12"=yv12vfw.dll

"msacm.siren"=sirenacm.dll

======List of files/folders created in the last 1 month======

2014-02-15 17:04:58 ----D---- C:\rsit

2014-02-15 17:04:58 ----D---- C:\Program Files\trend micro

2014-02-15 17:02:11 ----D---- C:\WINDOWS\LastGood

2014-02-15 13:23:17 ----D---- C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Application Data\Malwarebytes

2014-02-15 13:23:11 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes

2014-02-15 13:23:10 ----D---- C:\Program Files\Malwarebytes' Anti-Malware

2014-02-15 13:23:10 ----A---- C:\WINDOWS\system32\drivers\mbam.sys

2014-02-15 13:16:23 ----D---- C:\AdwCleaner

2014-02-15 13:09:54 ----D---- C:\Program Files\ALlCheaapPrice

2014-02-15 13:09:51 ----D---- C:\Program Files\AAdBollockunWAtch

2014-02-15 13:07:51 ----D---- C:\Program Files\ssuuruf and! kEep

2014-02-15 13:07:36 ----D---- C:\Program Files\RoboSavver

2014-02-02 22:29:00 ----D---- C:\Documents and Settings\All Users\Application Data\AAdBollockunWAtch

2014-02-02 22:28:59 ----HD---- C:\WINDOWS\system32\GroupPolicy

======List of files/folders modified in the last 1 month======

2014-02-15 17:06:24 ----D---- C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Application Data\uTorrent

2014-02-15 17:05:23 ----D---- C:\WINDOWS\Prefetch

2014-02-15 17:04:58 ----D---- C:\Program Files

2014-02-15 17:02:18 ----HD---- C:\WINDOWS\inf

2014-02-15 17:02:11 ----D---- C:\WINDOWS

2014-02-15 17:01:10 ----D---- C:\WINDOWS\Temp

2014-02-15 17:01:09 ----D---- C:\WINDOWS\Registration

2014-02-15 17:01:01 ----D---- C:\WINDOWS\system32\CatRoot2

2014-02-15 14:03:36 ----A---- C:\WINDOWS\SchedLgU.Txt

2014-02-15 14:03:30 ----D---- C:\WINDOWS\system32\CatRoot

2014-02-15 13:42:48 ----A---- C:\WINDOWS\NeroDigital.ini

2014-02-15 13:38:03 ----HDC---- C:\WINDOWS\$NtUninstallKB929123$

2014-02-15 13:38:03 ----D---- C:\WINDOWS\system32\drivers

2014-02-15 13:36:51 ----D---- C:\Documents and Settings\All Users\Application Data\suurf aoNd keep

2014-02-15 13:36:51 ----D---- C:\Documents and Settings\All Users\Application Data\suurf And! keep

2014-02-15 13:36:51 ----D---- C:\Documents and Settings\All Users\Application Data\suruf anD kkeep

2014-02-15 13:36:51 ----D---- C:\Documents and Settings\All Users\Application Data\suruf ANd keep

2014-02-15 13:36:51 ----D---- C:\Documents and Settings\All Users\Application Data\surrfa and keeup

2014-02-15 13:36:51 ----D---- C:\Documents and Settings\All Users\Application Data\surif and okeep

2014-02-15 13:36:51 ----D---- C:\Documents and Settings\All Users\Application Data\surf and Keep

2014-02-15 13:36:51 ----D---- C:\Documents and Settings\All Users\Application Data\surf and keoep

2014-02-15 13:36:51 ----D---- C:\Documents and Settings\All Users\Application Data\surf and keeep

2014-02-15 13:36:51 ----D---- C:\Documents and Settings\All Users\Application Data\sourf Andd keeP

2014-02-15 13:19:49 ----D---- C:\WINDOWS\system32

2014-02-15 13:19:26 ----D---- C:\Documents and Settings\All Users\Application Data\ALlCheaapPrice

2014-02-15 13:19:25 ----D---- C:\Documents and Settings\All Users\Application Data\ssuuruf and! kEep

2014-02-15 13:19:25 ----D---- C:\Documents and Settings\All Users\Application Data\RoboSavver

2014-02-15 13:09:54 ----D---- C:\Documents and Settings\All Users\Application Data\b7088e126ccde083

2014-02-15 13:09:38 ----SD---- C:\WINDOWS\Tasks

2014-02-14 22:47:25 ----D---- C:\Documents and Settings\All Users\Application Data\DVD Shrink

2014-02-09 21:42:25 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe

2014-02-02 19:27:58 ----D---- C:\Documents and Settings\All Users\Application Data\VSO

2014-02-02 19:27:43 ----D---- C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Application Data\vlc

2014-01-25 15:44:26 ----SHD---- C:\WINDOWS\Installer

2014-01-25 15:44:26 ----HD---- C:\Config.Msi

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 bb-run;Promise driver accelerator; C:\WINDOWS\system32\DRIVERS\bb-run.sys [2003-11-05 17408]

R0 ftsata2;ftsata2; C:\WINDOWS\system32\DRIVERS\ftsata2.sys [2005-06-29 175104]

R0 iaStor;Intel RAID Controller; C:\WINDOWS\System32\DRIVERS\iastor.sys [2006-07-06 246784]

R0 ohci1394;OHCI Compliant IEEE 1394 Host Controller; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2004-08-04 61056]

R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2006-03-09 46080]

R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]

R1 ELhid;EL hid Service; \??\C:\WINDOWS\System32\Drivers\Elhid.sys []

R1 ELkbd;EL KB Service; \??\C:\WINDOWS\System32\Drivers\Elkbd.sys []

R1 ELmon;EL Monitor Service; \??\C:\WINDOWS\System32\Drivers\Elmon.sys []

R1 ELmou;EL Mouse Service; \??\C:\WINDOWS\System32\Drivers\Elmou.sys []

R1 intelppm;Intel GV3-processorstuurprogramma; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-04 40192]

R1 kbdhid;Stuurprogramma voor toetsenbord-HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-03 14848]

R2 ANIO;ANIO Service; \??\C:\WINDOWS\system32\ANIO.SYS []

R3 3xHybrid;3xHybrid service; C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2006-04-12 2829696]

R3 Arp1394;1394 ARP-clientprotocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-09-02 60800]

R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-07-18 1675776]

R3 ELacpi;ELacpi; C:\WINDOWS\system32\DRIVERS\ELacpi.sys [2006-05-09 9728]

R3 HDAudBus;Microsoft UAA-busstuurprogramma voor High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]

R3 HidUsb;Microsoft HID Class-stuurprogramma; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-07-25 4353024]

R3 mouhid;Stuurprogramma voor muis-HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-09-06 12288]

R3 NIC1394;1394-stuurprogramma; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-09-02 61824]

R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2013-09-21 47360]

R3 rt2870;Ralink 802.11n USB Wireless LAN Card Driver; C:\WINDOWS\system32\DRIVERS\rt2870.sys [2007-03-13 476416]

R3 StillCam;Stuurprogramma voor seriële digitale fotocamera; C:\WINDOWS\system32\DRIVERS\serscan.sys [2001-09-06 6912]

R3 usbccgp;Microsoft generiek hoofd-USB-stuurprogramma; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]

R3 usbstor;Stuurprogramma voor USB-massaopslag; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-09-02 26496]

R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-04 20480]

S3 CCDECODE;Closed Caption-decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-04 17024]

S3 e1express;Intel® PRO/1000 PCI Express Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e1e5132.sys [2006-05-16 229376]

S3 FsUsbExDisk;FsUsbExDisk; \??\C:\WINDOWS\system32\FsUsbExDisk.SYS []

S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2007-03-08 49920]

S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2007-03-08 16496]

S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2007-03-08 21568]

S3 LVcKap;Logitech AEC Driver; C:\WINDOWS\system32\DRIVERS\LVcKap.sys []

S3 LVMVDrv;Logitech Machine Vision Engine Loader; C:\WINDOWS\system32\DRIVERS\LVMVDrv.sys []

S3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys []

S3 MHNDRV;MHN-stuurprogramma; C:\WINDOWS\system32\DRIVERS\mhndrv.sys [2004-08-10 11008]

S3 MPE;BDA MPE-filter; C:\WINDOWS\system32\DRIVERS\MPE.sys [2004-08-04 15360]

S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-conversieprogramma; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-04 5504]

S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-04 85376]

S3 NdisIP;Microsoft TV/Video-verbinding; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-04 10880]

S3 pepifilter;Volume Adapter; C:\WINDOWS\system32\DRIVERS\lv302af.sys []

S3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\WINDOWS\system32\DRIVERS\LV302V32.SYS [2009-04-30 2687512]

S3 Ps2;PS2; C:\WINDOWS\system32\DRIVERS\PS2.sys [2005-12-13 19072]

S3 rtl8139;NT-stuurprogramma voor Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]

S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-04 11136]

S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\WINDOWS\system32\DRIVERS\ss_bbus.sys [2010-04-27 98432]

S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\WINDOWS\system32\DRIVERS\ss_bmdfl.sys [2010-04-27 14848]

S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\WINDOWS\system32\DRIVERS\ss_bmdm.sys [2010-04-27 123648]

S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-04 15360]

S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2011-02-18 41984]

S3 usbaudio;Stuurprogramma voor USB-audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-03 59264]

S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]

S3 usbscan;Stuurprogramma voor USB-scanner; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]

S3 WN5301;LIteon Wireless PCI Network Adapter Service; C:\WINDOWS\system32\DRIVERS\wn5301.sys [2005-10-05 468768]

S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]

S3 WPRO_40_1340;WinPcap Packet Driver (WPRO_40_1340); C:\WINDOWS\system32\drivers\WPRO_40_1340.sys []

S3 WSTCODEC;World Standard Teletext-codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-04 19328]

S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Mobiel Apple apparaat; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2011-02-18 37664]

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-07-18 401408]

R2 ehRecvr;Media Center Receiver Service; C:\WINDOWS\eHome\ehRecvr.exe [2006-10-09 237568]

R2 ehSched;Media Center Scheduler-service; C:\WINDOWS\eHome\ehSched.exe [2005-08-18 102912]

R2 ELService;Intel® Quick Resume technology; C:\Program Files\Intel\IntelDH\Intel® Quick Resume Technology Drivers\Elservice.exe [2006-06-01 180224]

R2 hpqddsvc;HP CUE DeviceDiscovery-service; C:\WINDOWS\system32\svchost.exe [2004-09-02 14336]

R2 IAANTMON;Intel® Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe [2006-07-06 90112]

R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-05-04 153376]

R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-06-21 49152]

R2 McrdSvc;Media Center Extender Service; C:\WINDOWS\ehome\mcrdsvc.exe [2005-08-18 99328]

R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2004-09-02 14336]

R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2004-09-02 14336]

R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 1529728]

R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-09-02 14336]

R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2004-09-02 14336]

S2 ANIWZCSdService;ANIWZCSd Service; C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe [2007-01-19 49152]

S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2006-07-18 520192]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

S2 gupdate;Google Update-service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-11-25 116648]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-09 257928]

S3 aspnet_state;ASP.NET-statusservice; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]

S3 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2004-09-02 268288]

S3 gupdatem;Google Update-service (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-11-25 116648]

S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]

S3 MHN;MHN; C:\WINDOWS\System32\svchost.exe [2004-09-02 14336]

S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]

S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-04-07 430592]

S3 WMPNetworkSvc;Windows Media Player Network Sharing-service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-02 917504]

S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]

S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

aangepast door vermeulen
Link naar reactie
Delen op andere sites
kape Grootmeester

kape

Geplaatst:
Geplaatst:

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.

Download 51a612a8b27e2-Zoek.pngZoek.exe naar het bureaublad (niet de .zip- of .rar-versie)

  • Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.
  • Dubbelklik op Zoek.exe om de tool te starten.
  • Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  • Kopieer nu onderstaande code en plak die in het grote invulvenster:
  • Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.

  C:\WINDOWS\tasks\At1.job;f
 C:\WINDOWS\tasks\At2.job;f
 C:\WINDOWS\tasks\At3.job;f
 C:\WINDOWS\tasks\At4.job;f
 C:\Program Files\ALlCheaapPrice;fs
 C:\Program Files\AAdBollockunWAtch;fs
 C:\Program Files\ssuuruf and! kEep;fs
 C:\Program Files\RoboSavver;fs
 C:\Documents and Settings\All Users\Application Data\AAdBollockunWAtch;fs
 C:\Documents and Settings\All Users\Application Data\suurf aoNd keep;fs
 C:\Documents and Settings\All Users\Application Data\suurf And! Keep;fs
 C:\Documents and Settings\All Users\Application Data\suruf anD kkeep;fs
 C:\Documents and Settings\All Users\Application Data\suruf ANd keep;fs
 C:\Documents and Settings\All Users\Application Data\surrfa and keeup;fs
 C:\Documents and Settings\All Users\Application Data\surif and okeep;fs
 C:\Documents and Settings\All Users\Application Data\surf and Keep;fs
 C:\Documents and Settings\All Users\Application Data\surf and keoep;fs
 C:\Documents and Settings\All Users\Application Data\surf and keep;fs
 C:\Documents and Settings\All Users\Application Data\sourf Andd keep;fs
 C:\Documents and Settings\All Users\Application Data\ALlCheaapPrice;fs
 C:\Documents and Settings\All Users\Application Data\ssuuruf and! kEep;fs
 C:\Documents and Settings\All Users\Application Data\RoboSavver;fs
 C:\Documents and Settings\All Users\Application Data\b7088e126ccde083;fs
 emptyfolderscheck;delete 
startupall; 
filesrcm;

  • Klik op de knop "Options" en vink nu de onderstaande opties aan.
  • Do a Quick Scan

  • Auto Clean
  • De optie "Scan All Users" staat standaard aangevinkt.
  • Klik nu op de knop "Run script".
  • Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
  • Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
  • Post het geopende logje in het volgende bericht.

Link naar reactie
Delen op andere sites
vermeulen Leerling

vermeulen

Geplaatst:
  • Auteur
Geplaatst:

Ziezo:

Zoek.exe v5.0.0.0 Updated 15-February-2014

Tool run by HP_Administrator on zo 16/02/2014 at 13:28:15,36.

Microsoft Windows XP Professional 5.1.2600 Service Pack 2 x86

Running in: Normal Mode Internet Access Detected

Launched: C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Mijn documenten\Downloads\zoek.exe [scan all users] [script inserted] [Checkboxes used]

==== System Restore Info ======================

16/02/2014 13:29:38 Zoek.exe System Restore Point Created Succesfully.

==== Suspicious Entries Found ======================

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

"58640:TCP"="58640:TCP:*:Enabled:Pando Media Booster"

"58640:UDP"="58640:UDP:*:Enabled:Pando Media Booster"

"139:TCP"="139:TCP:*:Enabled:@xpsp2res.dll,-22004"

"445:TCP"="445:TCP:*:Enabled:@xpsp2res.dll,-22005"

"137:UDP"="137:UDP:*:Enabled:@xpsp2res.dll,-22001"

"138:UDP"="138:UDP:*:Enabled:@xpsp2res.dll,-22002"

"3389:TCP"="3389:TCP:*:Enabled:@xpsp2res.dll,-22009"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

"2869:TCP"="2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008"

"1900:UDP"="1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007"

"58640:TCP"="58640:TCP:*:Enabled:Pando Media Booster"

"58640:UDP"="58640:UDP:*:Enabled:Pando Media Booster"

"8396:TCP"="8396:TCP:*:Enabled:League of Legends Launcher"

"8396:UDP"="8396:UDP:*:Enabled:League of Legends Launcher"

"6885:TCP"="6885:TCP:*:Enabled:League of Legends Launcher"

"6885:UDP"="6885:UDP:*:Enabled:League of Legends Launcher"

"6953:TCP"="6953:TCP:*:Enabled:League of Legends Launcher"

"6953:UDP"="6953:UDP:*:Enabled:League of Legends Launcher"

"6897:TCP"="6897:TCP:*:Enabled:League of Legends Launcher"

"6897:UDP"="6897:UDP:*:Enabled:League of Legends Launcher"

"6932:TCP"="6932:TCP:*:Enabled:League of Legends Launcher"

"6932:UDP"="6932:UDP:*:Enabled:League of Legends Launcher"

"139:TCP"="139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004"

"445:TCP"="445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005"

"137:UDP"="137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001"

"138:UDP"="138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002"

"3389:TCP"="3389:TCP:*:Enabled:@xpsp2res.dll,-22009"

==== Empty Folders Check ======================

C:\Program Files\AAdBollockunWAtch deleted successfully

C:\Program Files\ALlCheaapPrice deleted successfully

C:\Program Files\MSXML 4.0 deleted successfully

C:\Program Files\RoboSavver deleted successfully

C:\Program Files\ssuuruf and! kEep deleted successfully

C:\Program Files\Webteh deleted successfully

C:\Documents and Settings\All Users\Application Data\AAdBollockunWAtch deleted successfully

C:\Documents and Settings\All Users\Application Data\ALlCheaapPrice deleted successfully

C:\Documents and Settings\All Users\Application Data\DowNLoiad! keEper deleted successfully

C:\Documents and Settings\All Users\Application Data\HP Product Assistant deleted successfully

C:\Documents and Settings\All Users\Application Data\HPSSUPPLY deleted successfully

C:\Documents and Settings\All Users\Application Data\RoboSavver deleted successfully

C:\Documents and Settings\All Users\Application Data\ssuuruf and! kEep deleted successfully

C:\Documents and Settings\All Users\Application Data\suurf, aend keepp deleted successfully

C:\Documents and Settings\All Users\Application Data\YoutubeAdblocker deleted successfully

C:\Documents and Settings\All Users\Application Data\YoutubeBookmark deleted successfully

C:\Documents and Settings\HP_Administrator\Application Data\AdobeUM deleted successfully

C:\Documents and Settings\HP_Administrator\Application Data\Atari deleted successfully

C:\Documents and Settings\HP_Administrator\Application Data\WinRAR deleted successfully

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Application Data\AdobeUM deleted successfully

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Application Data\Samsung deleted successfully

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Application Data\Vso deleted successfully

C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Windows Server deleted successfully

C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\WMTools Downloaded Files deleted successfully

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Local Settings\Application Data\OpenCandy deleted successfully

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Local Settings\Application Data\WMTools Downloaded Files deleted successfully

C:\Documents and Settings\LocalService\Local Settings\Application Data\Google deleted successfully

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== Deleting Files \ Folders ======================

C:\Program Files\ALlCheaapPrice not found

C:\Program Files\AAdBollockunWAtch not found

C:\Program Files\ssuuruf and! kEep not found

C:\Program Files\RoboSavver not found

C:\Documents and Settings\All Users\Application Data\AAdBollockunWAtch not found

C:\Documents and Settings\All Users\Application Data\surf and keoep not found

C:\Documents and Settings\All Users\Application Data\ALlCheaapPrice not found

C:\Documents and Settings\All Users\Application Data\ssuuruf and! kEep not found

C:\Documents and Settings\All Users\Application Data\RoboSavver not found

C:\Documents and Settings\All Users\Application Data\suurf aoNd keep deleted

C:\Documents and Settings\All Users\Application Data\suurf And! Keep deleted

C:\Documents and Settings\All Users\Application Data\suruf anD kkeep deleted

C:\Documents and Settings\All Users\Application Data\suruf ANd keep deleted

C:\Documents and Settings\All Users\Application Data\surrfa and keeup deleted

C:\Documents and Settings\All Users\Application Data\surif and okeep deleted

C:\Documents and Settings\All Users\Application Data\surf and Keep deleted

C:\Documents and Settings\All Users\Application Data\sourf Andd keep deleted

C:\Documents and Settings\All Users\Application Data\b7088e126ccde083 deleted

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\AppData\LocalLow\{15082BB3-51B7-E2EC-6CFC-A002E52CA028} deleted

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\AppData\LocalLow\{152F1AFC-DC03-79AB-AE02-7E15FAB8FFD0} deleted

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\AppData\LocalLow\{17EC82FF-FA50-139C-C260-FD172E283B20} deleted

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\AppData\LocalLow\{5B90EA96-A0D7-5A0E-29DE-A041752CB037} deleted

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\AppData\LocalLow\{6637806E-80CE-16F6-2928-AAE50AF48531} deleted

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\AppData\LocalLow\{698A1C28-AB10-CF19-DD58-3154E1544825} deleted

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\AppData\LocalLow\{7B5A237D-9F2A-A8AC-022C-CAA2F5FD90FF} deleted

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\AppData\LocalLow\{882DB603-8A21-6BF8-AF80-6814F2B1DA53} deleted

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\AppData\LocalLow\{8B2A16D3-7B9D-0429-F151-CEA21C1227FE} deleted

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\AppData\LocalLow\{8B9F982D-1887-E696-D49D-E856E0F721DE} deleted

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\AppData\LocalLow\{9E2B5DE8-91A2-4B80-AAE4-CD29915DC250} deleted

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\AppData\LocalLow\{A72427B4-2BFB-0ACC-7031-06739FB9D8FB} deleted

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\AppData\LocalLow\{A9667A48-F524-8E4D-DB2D-F4E7CAE07153} deleted

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\AppData\LocalLow\{B7AE6ED4-C3B8-00DC-5866-4183B8EBC4A5} deleted

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\AppData\LocalLow\{C78A4F07-DA4B-38DC-F616-965ACABD3B77} deleted

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\AppData\LocalLow\{CD967F05-5FB3-B968-9594-EFDCF6D775CE} deleted

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\AppData\LocalLow\{D01ABEC3-BDB0-F9D1-3DF2-714780074EF5} deleted

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\AppData\LocalLow\{DC5F56F9-F521-8A9E-9F4C-167527ED9AAF} deleted

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\AppData\LocalLow\{DE73A80E-7732-5636-7A08-9AA1F80D7449} deleted

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\AppData\LocalLow\{F0929C09-C0E2-0B75-29FD-2F13150F1EF9} deleted

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\AppData\LocalLow\{F1FF4890-BF96-D7EB-C005-1258F04A24B6} deleted

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\AppData\LocalLow\{F3417338-A54C-6DF2-2607-0D3FE7E1E65B} deleted

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\AppData\LocalLow\{FF89A364-EF39-E12B-7FCC-3ACAE16BEA07} deleted

C:\WINDOWS\system32\config\systemprofile\AppData\LocalLow\{1F91B394-B1BC-22A2-2D1B-923A4643A040} deleted

C:\WINDOWS\system32\config\systemprofile\AppData\LocalLow\{57066F1E-FD43-2614-D521-B63542FB1AC8} deleted

C:\WINDOWS\system32\config\systemprofile\AppData\LocalLow\{F0D8A7FA-FA95-B44B-7838-D1F789218FAD} deleted

C:\Documents and Settings\All Users\Application Data\surf and keoep deleted

C:\Documents and Settings\All Users\Application Data\surf and keeep deleted

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Application Data\Smiley.ico deleted

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Application Data\Babylon deleted

C:\Documents and Settings\All Users\Application Data\QuickSet deleted

C:\Documents and Settings\All Users\Application Data\InstallMate deleted

C:\Documents and Settings\All Users\Application Data\WinterSoft deleted

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Local Settings\Application Data\CRE deleted

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Local Settings\Application Data\Conduit deleted

C:\WINDOWS\WININIT.INI deleted

C:\WINDOWS\tasks\At1.job deleted

C:\WINDOWS\tasks\At2.job deleted

C:\WINDOWS\tasks\At3.job deleted

C:\WINDOWS\tasks\At4.job deleted

C:\WINDOWS\System32\SET2B0.tmp deleted

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Mijn documenten\Optimizer Pro deleted

==== Files Recently Created / Modified ======================

====== C:\WINDOWS ====

====== C:\DOCUME~1\HP_ADM~1.UW-\LOCALS~1\Temp ====

====== Java Cache =====

====== C:\WINDOWS\system32 =====

====== C:\WINDOWS\system32\drivers =====

2014-02-15 12:23:10 4470E3C1E0C3378E4CAB137893C12C3A 22856 ----a-w- C:\WINDOWS\System32\drivers\mbam.sys

====== C:\WINDOWS\Tasks ======

====== C:\WINDOWS\Temp ======

======= C:\Program Files =====

2014-02-15 16:04:58 -------- d-----w- C:\Program Files\trend micro

======= C: =====

====== C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Application Data ======

====== C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A ======

====== C: exe-files ==

2014-02-15 16:04:58 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\HP_Administrator.exe

2014-02-15 16:04:41 69CA82A7482A00D8EE063D2B97FC4338 781383 ----a-w- C:\RECYCLER\S-1-5-21-3362371921-3841972150-3728794387-1007\Dc2.exe

2014-02-15 16:04:34 69CA82A7482A00D8EE063D2B97FC4338 781383 ----a-w- C:\RECYCLER\S-1-5-21-3362371921-3841972150-3728794387-1007\Dc1.exe

2014-02-15 12:22:49 683FDD3D773C58B262DC07CD0C6CE938 10285040 ----a-w- C:\RECYCLER\S-1-5-21-3362371921-3841972150-3728794387-1007\Dc4.exe

2014-02-15 12:16:20 54DB2B8C60F04C5ADE6D711D47EABA75 1166132 ----a-w- C:\RECYCLER\S-1-5-21-3362371921-3841972150-3728794387-1007\Dc3.exe

=== C: other files ==

2014-02-15 12:23:10 4470E3C1E0C3378E4CAB137893C12C3A 22856 ----a-w- C:\WINDOWS\system32\drivers\mbam.sys

2014-02-14 21:57:10 41E916246EF2E53FA89D6DC650401B65 29716 ----a-w- C:\RECYCLER\S-1-5-21-3362371921-3841972150-3728794387-1007\Dc6.zip

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE"

[HKEY_USERS\S-1-5-21-3362371921-3841972150-3728794387-1007\Software\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe"

"uTorrent"="C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Application Data\uTorrent\uTorrent.exe /MINIMIZED"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ehTray"="C:\WINDOWS\ehome\ehtray.exe"

"ftutil2"="rundll32.exe ftutil2.dll,SetWriteCacheMode"

"RTHDCPL"="RTHDCPL.EXE"

"IAAnotif"="C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"

"DMAScheduler"="c:\Program Files\HP DigitalMedia Archive\DMAScheduler.exe"

"Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE"

"ANIWZCS2Service"="C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe"

"D-Link D-Link Wireless N DWA-140"="C:\Program Files\D-Link\D-Link Wireless N DWA-140\AirNCFG.exe"

"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe"

"HPDJ Taskbar Utility"="C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe"

"ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"

"LogitechCommunicationsManager"="C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe"

"SunJavaUpdateSched"="C:\Program Files\Common Files\Java\Java Update\jusched.exe"

"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe -atboottime"

"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

"Adobe ARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

"ISUSPM Startup"="C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup"

"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe -start"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe"

"uTorrent"="C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Application Data\uTorrent\uTorrent.exe /MINIMIZED"

==== Startup Registry Disabled ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\HP Software Update]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="HPWuSchd2"

"hkey"="HKLM"

"command"="C:\\Program Files\\HP\\HP Software Update\\HPWuSchd2.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\HPBootOp]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="HPBootOp"

"hkey"="HKLM"

"command"="\"C:\\Program Files\\Hewlett-Packard\\HP Boot Optimizer\\HPBootOp.exe\" /run"

==== Startup Folders ======================

2010-04-27 20:08:06 572 ----a-w- C:\Documents and Settings\Default User\Menu Start\Programma's\Opstarten\Pin.lnk

2010-04-27 20:08:06 667 ----a-w- C:\Documents and Settings\Default User\Menu Start\Programma's\Opstarten\PinMcLnk.lnk

==== Task Scheduler Jobs ======================

C:\WINDOWS\tasks\Adobe Flash Player Updater.job --a------ C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [09/02/2014 21:42]

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [25/11/2013 20:24]

C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job --a------ [undetermined Task]

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]

"jqs@sun.com"=hex(2):43,00,3a,00,5c,00,50,00,72,00,6f,00,67,00,72,00,61,00,6d,\ []

==== Firefox Extensions ======================

ProfilePath: C:\Documents and Settings\HP_ADM~1\Application Data\TomTom\HOME\Profiles\w14wib5g.default

- Undetermined - C:\Program Files\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com

- Undetermined - C:\Program Files\TomTom HOME 2\xul\extensions\baseTheme@tomtom.com

ProfilePath: C:\Documents and Settings\HP_ADM~1.UW-\Application Data\TomTom\HOME\Profiles\juxtri7k.default

- Undetermined - C:\Program Files\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com

- Undetermined - C:\Program Files\TomTom HOME 2\xul\extensions\baseTheme@tomtom.com

==== Firefox Plugins ======================

==== Chrome Look ======================

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions

cjofdnhdkbflacojpfpkchgafjahijbb - C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Local Settings\Application Data\CRE\cjofdnhdkbflacojpfpkchgafjahijbb.crx[]

ssuuruf and kEep - Administrator\Local Settings\Application Data\Comodo\Dragon\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll

ssuuruf and kEep - Administrator\Local Settings\Application Data\Torch\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll

ssuuruf and kEep - ASPNET\Local Settings\Application Data\Comodo\Dragon\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll

ssuuruf and kEep - ASPNET\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll

ssuuruf and kEep - ASPNET\Local Settings\Application Data\Google\Chrome SxS\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll

ssuuruf and kEep - ASPNET\Local Settings\Application Data\Torch\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll

ssuuruf and kEep - Gast\Local Settings\Application Data\Comodo\Dragon\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll

ssuuruf and kEep - Gast\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll

ssuuruf and kEep - Gast\Local Settings\Application Data\Google\Chrome SxS\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll

ssuuruf and kEep - Gast\Local Settings\Application Data\Torch\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll

ssuuruf and kEep - HelpAssistant\Local Settings\Application Data\Comodo\Dragon\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll

ssuuruf and kEep - HelpAssistant\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll

ssuuruf and kEep - HelpAssistant\Local Settings\Application Data\Google\Chrome SxS\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll

ssuuruf and kEep - HelpAssistant\Local Settings\Application Data\Torch\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll

ssuuruf and kEep - HP_Administrator.UW-313AD20DCB0A\Local Settings\Application Data\Comodo\Dragon\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll

ssuuruf and kEep - HP_Administrator.UW-313AD20DCB0A\Local Settings\Application Data\Torch\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll

ssuuruf and kEep - SUPPORT_388945a0\Local Settings\Application Data\Comodo\Dragon\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll

ssuuruf and kEep - SUPPORT_388945a0\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll

ssuuruf and kEep - SUPPORT_388945a0\Local Settings\Application Data\Google\Chrome SxS\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll

ssuuruf and kEep - SUPPORT_388945a0\Local Settings\Application Data\Torch\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll

ssuuruf and kEep - SUPPORT_fddfa904\Local Settings\Application Data\Comodo\Dragon\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll

ssuuruf and kEep - SUPPORT_fddfa904\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll

ssuuruf and kEep - SUPPORT_fddfa904\Local Settings\Application Data\Google\Chrome SxS\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll

ssuuruf and kEep - SUPPORT_fddfa904\Local Settings\Application Data\Torch\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll

==== Chrome Fix ======================

C:\Documents and Settings\Administrator\Local Settings\Application Data\Comodo\Dragon\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll deleted successfully

C:\Documents and Settings\Administrator\Local Settings\Application Data\Torch\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll deleted successfully

C:\Documents and Settings\ASPNET\Local Settings\Application Data\Comodo\Dragon\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll deleted successfully

C:\Documents and Settings\ASPNET\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll deleted successfully

C:\Documents and Settings\ASPNET\Local Settings\Application Data\Google\Chrome SxS\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll deleted successfully

C:\Documents and Settings\ASPNET\Local Settings\Application Data\Torch\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll deleted successfully

C:\Documents and Settings\Gast\Local Settings\Application Data\Comodo\Dragon\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll deleted successfully

C:\Documents and Settings\Gast\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll deleted successfully

C:\Documents and Settings\Gast\Local Settings\Application Data\Google\Chrome SxS\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll deleted successfully

C:\Documents and Settings\Gast\Local Settings\Application Data\Torch\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll deleted successfully

C:\Documents and Settings\HelpAssistant\Local Settings\Application Data\Comodo\Dragon\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll deleted successfully

C:\Documents and Settings\HelpAssistant\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll deleted successfully

C:\Documents and Settings\HelpAssistant\Local Settings\Application Data\Google\Chrome SxS\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll deleted successfully

C:\Documents and Settings\HelpAssistant\Local Settings\Application Data\Torch\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll deleted successfully

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Local Settings\Application Data\Comodo\Dragon\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll deleted successfully

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Local Settings\Application Data\Torch\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll deleted successfully

C:\Documents and Settings\SUPPORT_388945a0\Local Settings\Application Data\Comodo\Dragon\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll deleted successfully

C:\Documents and Settings\SUPPORT_388945a0\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll deleted successfully

C:\Documents and Settings\SUPPORT_388945a0\Local Settings\Application Data\Google\Chrome SxS\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll deleted successfully

C:\Documents and Settings\SUPPORT_388945a0\Local Settings\Application Data\Torch\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll deleted successfully

C:\Documents and Settings\SUPPORT_fddfa904\Local Settings\Application Data\Comodo\Dragon\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll deleted successfully

C:\Documents and Settings\SUPPORT_fddfa904\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll deleted successfully

C:\Documents and Settings\SUPPORT_fddfa904\Local Settings\Application Data\Google\Chrome SxS\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll deleted successfully

C:\Documents and Settings\SUPPORT_fddfa904\Local Settings\Application Data\Torch\User Data\Default\Extensions\peechngdbikoobdijmljdpliplpakfll deleted successfully

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_peechngdbikoobdijmljdpliplpakfll_0.localstorage deleted successfully

==== Set IE to Default ======================

Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://google.be/"

"Search Page"="http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=NL_BE&c=64&bd=PAVILION&pf=desktop"

"Default_Page_URL"="http://www.google.com"

"Default_Search_URL"="http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=NL_BE&c=64&bd=PAVILION&pf=desktop"

"Search Bar"="http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=NL_BE&c=64&bd=PAVILION&pf=desktop"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]

"Default_Page_URL"="http://www.google.com"

"Start Page"="http://www.google.com"

"Search Bar"="http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=NL_BE&c=64&bd=PAVILION&pf=desktop"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]

"SearchAssistant"="http://www.google.com"

"CustomizeSearch"="http://www.google.com"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

No DefaultScope Set For HKCU

New Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"

"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"

"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"

"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"

"Start Page"="http://google.be/"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]

"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"

"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"

"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]

"CustomizeSearch"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm"

"SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\4a243a04-efd5-430b-aaa8-8f21183b53d0 deleted successfully

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1200E2DD-2C76-1F1B-0305-8F119B099C21} deleted successfully

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{167D74C3-E49B-4FED-1836-0E7B91B89481} deleted successfully

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{19836BA2-45E4-748B-72C7-AA3EFAE7E2F9} deleted successfully

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1B82CA26-F247-BA55-B3BF-2292CF5D6EAE} deleted successfully

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{23257D5C-4BEE-0A7E-41C1-1BFD18359F8A} deleted successfully

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2E3ED679-9402-ECFF-FCA2-A86623FE49B2} deleted successfully

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5DE26B0B-62C5-6FFD-BF60-930C9A4B94C2} deleted successfully

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{71E7176D-1EFA-86C1-62C8-46C5A2DED9D8} deleted successfully

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{8A5605B9-E6F7-C43A-BE41-6B985FDBAE4D} deleted successfully

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{8ACC849D-0181-E0B2-6D5E-8530E9C693FF} deleted successfully

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{B674B324-EF4B-C389-D8CE-F682AA5DE758} deleted successfully

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C46F112D-5E74-D06A-E0E9-691A21984271} deleted successfully

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{EE1A142E-A9DF-FCFE-6E5C-CFA6257BF58B} deleted successfully

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F5E7BD12-02C1-BBD4-4DE4-1C664F6B4F58} deleted successfully

HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ExtensionInstallForcelist deleted successfully

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions\cjofdnhdkbflacojpfpkchgafjahijbb deleted successfully

==== Empty IE Cache ======================

C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

C:\Documents and Settings\HP_Administrator\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache emptied successfully

C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=324 folders=134 31992226 bytes)

Link naar reactie
Delen op andere sites
kape Grootmeester

kape

Geplaatst:
Geplaatst:

Neen, dit volstaat wel. We zetten meteen de volgende stap:

Download 52147fb3b2536-AdwCleaner_99_3_16x16x32.pngAdwCleaner by Xplode naar het bureaublad.

AdwCleaner uitvoeren

  • Sluit alle openstaande vensters.
  • Dubbelklik op AdwCleaner.exe om de tool te starten.
  • Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  • Klik vervolgens op de knop Scan.
  • Wanneer de scan gereed is Klikt u vervolgens op de knop Clean.
  • Als dit gereed is wordt er gevraagd om de computer opnieuw op te starten, klik hier op OK.
  • Nadat de computer opnieuw is opgestart wordt het logbestand automatisch geopend.
  • Plaats dit logbestand in het volgende bericht.

Link naar reactie
Delen op andere sites
vermeulen Leerling

vermeulen

Geplaatst:
  • Auteur
Geplaatst:

# AdwCleaner v3.018 - Report created 16/02/2014 at 14:34:59

# Updated 28/01/2014 by Xplode

# Operating System : Microsoft Windows XP Service Pack 2 (32 bits)

# Username : HP_Administrator - VERMEULEN

# Running from : C:\Documents and Settings\HP_Administrator.UW-313AD20DCB0A\Mijn documenten\Downloads\adwcleaner.exe

# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702

-\\ Google Chrome v31.0.1650.63

*************************

AdwCleaner[R0].txt - [7735 octets] - [15/02/2014 13:16:24]

AdwCleaner[R1].txt - [862 octets] - [16/02/2014 14:34:25]

AdwCleaner[s0].txt - [6497 octets] - [15/02/2014 13:17:57]

AdwCleaner[s1].txt - [784 octets] - [16/02/2014 14:34:59]

########## EOF - C:\AdwCleaner\AdwCleaner[s1].txt - [843 octets] ##########

Link naar reactie
Delen op andere sites
 Delen
Ga naar topic overzicht
Logo

OVER ONS

PC Helpforum helpt GRATIS computergebruikers sinds juli 2006. Ons team geeft via het forum professioneel antwoord op uw vragen en probeert uw pc problemen zo snel mogelijk op te lossen. Word lid vandaag, plaats je vraag online en het PC Helpforum-team helpt u graag verder!

SITEMAP

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.