Mededeling

**jeke** · 28-06-13, 12:22

# AdwCleaner v2.303 - Verslag gemaakt op 28/06/2013 om 12:42:05
# Geactualiseerd op 08/06/2013 door Xplode
# Besturingssysteem : Microsoft Windows XP Service Pack 3 (32 bits)
# Gebruiker : Julien - THUIS
# Opstarten Modus : Normale modus
# Gelanceerd vanaf : C:\Documents and Settings\Alain\Bureaublad\adwcleaner.exe
# Optie [Verwijderen]

***** [Diensten] *****

***** [Files / Mappen] *****

***** [Register] *****

***** [Browsers] *****

-\\ Internet Explorer v8.0.6001.18702

[OK] Het register bevat geen enkele ongeoorloofde invoer.

-\\ Mozilla Firefox v21.0 (nl)

File : C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\94a5h6ce.default\prefs.js

[OK] De file bevat geen enkele ongeoorloofde invoer.

-\\ Google Chrome v27.0.1453.116

File : C:\Documents and Settings\Alain\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

[OK] De file bevat geen enkele ongeoorloofde invoer.

*************************

AdwCleaner[S1].txt - [2443 octets] - [05/06/2013 12:26:55]
AdwCleaner[S2].txt - [1066 octets] - [28/06/2013 12:42:05]

########## EOF - C:\AdwCleaner[S2].txt - [1126 octets] ##########

**jeke** · 28-06-13, 12:23

Stap 3 lukt niet.
Ik kan norman antivirus nergens uitschakelen.
Als ik op download klik dan meld norman een trojaans paard.

Stap 3:

Download DDS.com, DDS.scr of DDS.pif van één van deze locaties en plaats het op je bureaublad:

•DDS.com.
•DDS.scr.
•DDS.pif.

DDS is een diagnosetool en maakt gebruik van scripts.
Is het uitvoeren van scripts uitgeschakeld, dan schakel je dit weer in zodat er geen problemen optreden bij gebruik van DDS.

Dubbelklik op DDS om de tool te starten. (afhankelijk van de download die je gekozen hebt kan dit het bestand DDS.com, DDS.scr of DDS.pif zijn)
Wanneer het klaar is openen er twee logfiles: DDS.txt en Attach.txt
Beide logfiles sla je op je bureaublad.

Post de inhoud van DDS.txt.

De inhoud Attach.txt moet je niet posten en Attach.txt moet je niet als bijlage toevoegen aan je post, tenzij ik er om vraag.

**Emphyrio** · 28-06-13, 14:45

Topic verplaatst naar juiste sectie

**Emphyrio** · 28-06-13, 15:09

Oorspronkelijk geplaatst door jeke Bekijk Berichten

Stap 3 lukt niet.
Ik kan norman antivirus nergens uitschakelen.
Als ik op download klik dan meld norman een trojaans paard.

Rechtsklikken op de N icon en daarna "Stop On-access scanner" selecteren.

**jeke** · 30-06-13, 12:30

"Stop On-access scanner" verschijnt niet als ik rechts klik er komt op u bent beschermt.

**jeke** · 30-06-13, 12:38

dit zie ik dus http://i40.tinypic.com/avt200.jpg een afbeelding uploaden gaat niet via het forum internet explorer loopt vast bij het uploaden dus even klikken op de link

**jeke** · 30-06-13, 12:46

DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.25.2
Run by Julien at 12:45:44 on 2013-06-30
Microsoft Windows XP Professional 5.1.2600.3.1252.31.1043.18.3063.1956 [GMT 2:00]
.
AV: Norman Security Suite *Enabled/Updated* {EB9EFB40-AE72-4C43-B204-0FCD0E92D5F1}
.
============== Running Processes ================
.
C:\Program Files\Norman\Npm\Bin\elogsvc.exe
C:\Program Files\Norman\Npm\Bin\Nvoy.exe
C:\Program Files\Norman\Ngs\Bin\Nnf.exe
C:\Program Files\Norman\Ngs\Bin\Nprosec.exe
C:\Program Files\Norman\Npm\Bin\Zanda.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Norman\Npm\Bin\ZLH.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Norman\Npm\Bin\zlhh.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Norman\Npm\Bin\scheduler.exe
C:\Program Files\Norman\Npm\Bin\Njeeves.exe
C:\Program Files\Norman\Nse\Bin\NSESVC.EXE
C:\Program Files\Norman\Nvc\Bin\nvcoas.exe
C:\Program Files\Norman\Nvc\bin\nhs.exe
C:\Program Files\Norman\Nvc\Bin\cclaw.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Julien\Application Data\U3\0000180CB7717D45\LaunchPad.exe
C:\Program Files\Audacity\audacity.exe
C:\Program Files\Ahead\Nero\nero.exe
C:\WINDOWS\system32\imapi.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k imgsvc
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.be/
uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [Norman ZANDA] "c:\program files\norman\npm\bin\ZLH.EXE" /LOAD /SPLASH
mRun: [NeroFilterCheck] c:\windows\system32\NeroCheck.exe
mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Explorer: NoDriveTypeAutoRun = dword:145
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
TCP: NameServer = 192.168.1.1
TCP: Interfaces\{AE2C0490-AE75-4FEC-8F76-3D5FE0A0A124} : DHCPNameServer = 192.168.1.1
Notify: igfxcui - igfxdev.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\27.0.1453.116\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\Julien\application data\mozilla\firefox\profiles\94a5h6ce.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.be/
FF - plugin: c:\program files\adobe\reader 11.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\google\update\1.3.21.145\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\program files\microsoft silverlight\5.1.20125.0\npctrlui.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_7_700_224.dll
FF - plugin: c:\windows\system32\npDeployJava1.dll
FF - plugin: c:\windows\system32\npptools.dll
.
============= SERVICES / DRIVERS ===============
.
R0 NvcMFlt;NvcMFlt;c:\windows\system32\drivers\nvcw32mf.sys [2013-2-23 47824]
R1 NGS;Norman General Security Driver;c:\program files\norman\ngs\bin\ngs.sys [2013-2-23 26904]
R1 NPROSEC;Norman Security driver;c:\program files\norman\ngs\bin\nprosec.sys [2013-2-23 92904]
R2 MBAMScheduler;MBAMScheduler;c:\program files\malwarebytes' anti-malware\mbamscheduler.exe [2013-6-28 418376]
R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2013-6-28 701512]
R2 Ndiskio;Ndiskio;c:\program files\norman\nse\bin\ndiskio.sys [2013-2-23 22880]
R2 NHS;Norman Hash Server;c:\program files\norman\nvc\bin\nhs.exe [2013-2-23 793520]
R2 NNFSVC;Norman Network Filtering service;c:\program files\norman\ngs\bin\nnf.exe [2013-2-23 271864]
R2 Norman ZANDA;Norman ZANDA;c:\program files\norman\npm\bin\zanda.exe [2012-2-13 433504]
R2 NPROSECSVC;Norman Security service;c:\program files\norman\ngs\bin\nprosec.exe [2013-2-23 109656]
R2 nregsec;Norman Registry Security driver;c:\program files\norman\ngs\bin\nregsec.sys [2013-2-23 67256]
R2 NVOY;Norman Resource Provider (NICCA);c:\program files\norman\npm\bin\nvoy.exe [2013-2-23 211528]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2013-6-28 22856]
R3 nsesvc;Norman Scanner Engine Service;c:\program files\norman\nse\bin\nsesvc.exe [2013-4-4 289048]
R3 nvcoas;Norman Virus Control on-access component;c:\program files\norman\nvc\bin\nvcoas.exe [2013-2-23 320696]
R3 Scheduler;Norman Scheduler Service;c:\program files\norman\npm\bin\scheduler.exe [2013-2-23 102976]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S3 PBProcessMonitor232;PolderbitS Process Monitor Driver 2;c:\program files\polderbits\video recorder\PBProcessMonitor232.sys [2013-3-15 16880]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
.
=============== File Associations ===============
.
ShellExec: AcroRd32.exe: print="c:\program files\adobe\acrobat 4.0\reader\AcroRd32.exe"
ShellExec: AcroRd32.exe: printto="c:\program files\adobe\acrobat 4.0\reader\AcroRd32.exe"
.
=============== Created Last 30 ================
.
2013-06-28 15:05:08 -------- d-----w- c:\program files\MP3Gain
2013-06-28 11:09:41 -------- d--h--w- c:\windows\PIF
2013-06-28 10:18:33 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-06-28 10:18:32 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2013-06-27 23:59:41 -------- d-----w- c:\program files\Spotnet
2013-06-27 23:59:41 -------- d-----w- c:\documents and settings\all users\application data\Spotnet
2013-06-19 11:03:44 144896 ----a-w- c:\windows\system32\javacpl.cpl
2013-06-19 11:03:39 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-06-05 10:34:26 -------- d-----w- c:\documents and settings\all users\application data\HitmanPro
2013-06-04 17:57:47 -------- d-----w- c:\documents and settings\Julien\application data\uTorrent
2013-06-04 17:39:42 -------- d-----w- c:\documents and settings\Julien\local settings\application data\CRE
2013-06-04 17:39:24 -------- d-----w- c:\documents and settings\Julien\local settings\application data\Temp
.
==================== Find3M ====================
.
2013-06-27 18:50:16 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-06-27 18:50:15 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-06-12 19:48:23 867240 ----a-w- c:\windows\system32\npDeployJava1.dll
2013-06-12 19:48:17 789416 ----a-w- c:\windows\system32\deployJava1.dll
2013-05-07 22:27:23 920064 ----a-w- c:\windows\system32\wininet.dll
2013-05-07 22:27:23 43520 ------w- c:\windows\system32\licmgr10.dll
2013-05-07 22:27:22 1469440 ------w- c:\windows\system32\inetcpl.cpl
2013-05-07 21:53:55 385024 ------w- c:\windows\system32\html.iec
2013-05-03 05:39:10 2154496 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-05-03 05:39:10 2033152 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-04-18 07:10:28 462040 ----a-w- c:\windows\system32\drivers\tdi_nf.sys
2013-04-18 07:10:13 122352 ----a-w- c:\windows\system32\drivers\ale7_nf64.sys
2013-04-18 07:10:03 120280 ----a-w- c:\windows\system32\drivers\ale_nf64.sys
2013-04-18 07:09:53 114088 ----a-w- c:\windows\system32\drivers\ale7_nf.sys
2013-04-18 07:09:36 111016 ----a-w- c:\windows\system32\drivers\ale_nf.sys
2013-04-12 14:01:38 1876480 ----a-w- c:\windows\system32\win32k.sys
2008-04-15 12:00:00 94784 --sh--w- c:\windows\twain.dll
2008-04-15 12:00:00 50688 --sh--w- c:\windows\twain_32.dll
2011-02-08 13:33:59 978944 --sh--w- c:\windows\system32\mfc42.dll
2008-04-15 12:00:00 57344 --sh--w- c:\windows\system32\msvcirt.dll
2008-04-15 12:00:00 413696 --sh--w- c:\windows\system32\msvcp60.dll
2008-04-15 12:00:00 343040 --sh--w- c:\windows\system32\msvcrt.dll
2013-01-26 03:55:45 552448 --sh--w- c:\windows\system32\oleaut32.dll
2008-04-15 12:00:00 84992 --sh--w- c:\windows\system32\olepro32.dll
2008-04-15 12:00:00 12288 --sh--w- c:\windows\system32\regsvr32.exe
.
============= FINISH: 12:46:19,34 ===============

**jeke** · 30-06-13, 12:47

Results of screen317's Security Check version 0.99.68
Windows XP Service Pack 3 x86
Internet Explorer 8 Out of date!
``````````````Antivirus/Firewall Check:``````````````
Please wait while WMIC compiles updated MOF files.d
i
s
p
l
a
y
N
a
m
e
ECHO is off (uit).
N
o
r
m
a
n
ECHO is off (uit).
S
e
c
u
r
i
t
y
ECHO is off (uit).
S
u
i
t
e
ECHO is off (uit).
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
CCleaner
Java 7 Update 25
Adobe Flash Player 11.7.700.224
Adobe Reader XI
Mozilla Firefox 21.0 Firefox out of Date!
Google Chrome 27.0.1453.110
Google Chrome 27.0.1453.116
````````Process Check: objlist.exe by Laurent````````
`````````````````System Health check`````````````````
Total Fragmentation on Drive C::
````````````````````End of Log``````````````````````

**Emphyrio** · 30-06-13, 17:02

Download SystemLook.exe en plaats het bestand op het Bureaublad.
Dubbelklik SystemLook.exe om het programma te starten.
In het venster dat opent kopieer je onderstaande code:

Code:

:filefind
*utorrent*
:folderfind
*utorrent*
:regfind
*utorrent*

Klik op de knop "Look" om de scan te activeren.

Als de scan klaar is opent een tekstbestand (SystemLook.txt).
Post de inhoud van dit bestand.

**jeke** · 01-07-13, 14:39

Hier het logje.
SystemLook 30.07.11 by jpshortstuff
Log created at 14:36 on 01/07/2013 by Julien
Administrator - Elevation successful

========== filefind ==========

Searching for "*utorrent*"
C:\Documents and Settings\Julien\Application Data\uTorrent\utorrent.lng --a---- 1175755 bytes [18:01 04/06/2013] [18:01 04/06/2013] 784C0BD1D3DFEAF6142113F0EC4CF21E
C:\Documents and Settings\Julien\Bureaublad\[Opgelost] utorrent toolbar in google chrome firefox en internet explorer.url --a---- 6067 bytes [10:17 28/06/2013] [10:17 28/06/2013] 7D9BF2EB7FBD5712D820B640B0BECD01
C:\Documents and Settings\Julien\Favorieten\uTorrent handleiding en download Duken.nl.url --a---- 3100 bytes [17:57 04/06/2013] [17:57 04/06/2013] ACA109E6C0C45EC53FC584C26C87B354
C:\Documents and Settings\Julien\Favorieten\verwijder uTorrent Toolbar (Search.uTorrent.com) instructie.url --a---- 10188 bytes [10:25 05/06/2013] [10:39 28/06/2013] C17330C5A88620DEC46192E977940453
C:\Documents and Settings\Julien\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_utorrentbarnl.ourtoolbar.com_0.localstorage --a---- 3072 bytes [10:00 05/06/2013] [10:00 05/06/2013] 8ED543467C5D4A6B6A381871C751D741
C:\Documents and Settings\Julien\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_utorrentbarnl.ourtoolbar.com_0.localstorage-journal --a---- 3608 bytes [10:00 05/06/2013] [10:00 05/06/2013] 4E1214BBA90E81375BF7B0FB46FA8D1A
C:\Documents and Settings\Julien\Local Settings\Application Data\Microsoft\Internet Explorer\DOMStore\A6RKF5TJ\utorrent.nl.softonic[1].xml --a---- 13 bytes [17:49 04/06/2013] [17:51 04/06/2013] C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
C:\Documents and Settings\Julien\Local Settings\Temporary Internet Files\Content.IE5\2AX1Q5XR\70349-utorrent-toolbar-in-google-chrome-firefox-en-internet-explorer[1].htm --a---- 56183 bytes [12:35 01/07/2013] [12:35 01/07/2013] D4C9A51B66013716E36A6B060A0695C8
C:\Documents and Settings\Julien\Local Settings\Temporary Internet Files\Content.IE5\2AX1Q5XR\70459-utorrent-toolbar-in-google-chrome-firefox-en-internet-explorer[1].htm --a---- 123533 bytes [12:35 01/07/2013] [12:35 01/07/2013] 3C949FB556D51CF6B755463AEF4CDEA8

========== folderfind ==========

Searching for "*utorrent*"
C:\Documents and Settings\Julien\Application Data\uTorrent d------ [17:57 04/06/2013]

========== regfind ==========

Searching for "*utorrent*"
No data found.

-= EOF =-

**Emphyrio** · 02-07-13, 03:12

Herintializeer je Firefox.

Volg daarvoor deze handleiding: http://support.mozilla.org/nl/kb/fir...emen-verhelpen

Kan je deze richtlijnen eens volgen met betrekking tot Google Chrome?

Meldt even als je deze hebt uitgevoerd.

Download of Update Ccleaner

Start CCleaner op.

Run Ccleaner en klik in de linkse kolom op Opties
Selecteer het tabblad Geavanceerd
Haal het vinkje weg voor Verwijder alleen bestanden in Windows Temp-systeemmap die ouder zijn dan 24 uur
Haal het vinkje weg voor Verwijder alleen bestanden in de Prullenbak die ouder zijn dan 24 uur
Selecteer het tabblad Instellingen
Haal het vinkje weg bij "Computer automatisch schoonmaken...."
Klik in de linkse kolom op Cleaner.
Klik dan achtereenvolgens op Analyseer en Schoonmaken.
Klik vervolgens in de linkse kolom op Register
Klik op Scan naar problemen.
Als er fouten gevonden worden klik je op Herstel geselecteerde problemen en OK

Emphyrio

**Emphyrio** · 07-07-13, 15:23

Wilt het lukken?

**jeke** · 10-07-13, 20:22

ja ik heb alle dingen gedaan die gezegd zijn.

**Emphyrio** · 10-07-13, 20:32

En, probleem opgelost ?

Mededeling

utorrent toolbar in google chrome firefox en internet explorer

utorrent toolbar in google chrome firefox en internet explorer

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment