Mededeling

Collapse
No announcement yet.

Laptop start heel traag op

Collapse
X
  •  
  • Filter
  • Tijd
  • Show
Clear All
new posts

  • Laptop start heel traag op

    Mijn laptop start na de vakantie zeer langzaam op. Met name ook outlook doet er heel lang over. Malwarebytes vond 3 PUP bestanden die zijn verwijderd. De laptop is ook schoongemaakt en vrij van stof.
    Willen jullie svp de logbestanden bekijken?

    GMER 2.1.19357 - http://www.gmer.net
    Rootkit scan 2014-08-18 20:50:27
    Windows 6.1.7600 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 SAMSUNG_ rev.2AJ1 298,09GB
    Running: f3iru5bp.exe; Driver: C:\Users\PAULLO~1\AppData\Local\Temp\pwloikod.sys


    ---- Disk sectors - GMER 2.1 ----

    Disk \Device\Harddisk0\DR0 unknown MBR code

    ---- Threads - GMER 2.1 ----

    Thread C:\Windows\system32\WLANExt.exe [1592:1640] 000000018000b6d4
    Thread C:\Windows\system32\WLANExt.exe [1592:1644] 000000018000b6f0
    Thread C:\Windows\system32\WLANExt.exe [1592:1648] 000000018000b6b8
    Thread C:\Windows\system32\WLANExt.exe [1592:1652] 00000001800221a0
    Thread C:\Windows\system32\WLANExt.exe [1592:1656] 000007fef9322f9c
    Thread C:\Windows\System32\spoolsv.exe [1900:2624] 000007fef7b510c8
    Thread C:\Windows\System32\spoolsv.exe [1900:2632] 000007fef7b16144
    Thread C:\Windows\System32\spoolsv.exe [1900:2636] 000007fef7905fd0
    Thread C:\Windows\System32\spoolsv.exe [1900:2640] 000007fef78f3438
    Thread C:\Windows\System32\spoolsv.exe [1900:2644] 000007fef79063ec
    Thread C:\Windows\System32\spoolsv.exe [1900:2652] 000007fef7cf5e5c
    Thread C:\Windows\System32\spoolsv.exe [1900:2656] 000007fef7d2484c
    Thread C:\Windows\System32\spoolsv.exe [1900:3044] 000007fef7cd56dc
    Thread C:\Windows\SysWOW64\ctfmon.exe [4940:2396] 00000000771a2e3e
    Thread C:\Windows\SysWOW64\ctfmon.exe [4940:3648] 0000000075f68bec
    Thread C:\Windows\system32\svchost.exe [3052:3956] 000007fefd58a808
    Thread C:\Windows\system32\DllHost.exe [6368:5128] 000007fefde43570
    Thread C:\Windows\system32\DllHost.exe [6368:6352] 000007feee7dae60
    ---- Processes - GMER 2.1 ----

    Library C:\ProgramData\Trusteer\Rapport\store\exts\RapportGP\baseline\MSVCP80.dll (*** suspicious ***) @ C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [1080] (Microsoft® C++ Runtime Library/Microsoft Corporation)(2013-07-02 15:36:37) 0000000071c10000
    Library C:\ProgramData\Trusteer\Rapport\store\exts\RapportGP\baseline\MSVCR80.dll (*** suspicious ***) @ C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [1080] (Microsoft® C Runtime Library/Microsoft Corporation)(2013-07-02 15:36:37) 0000000071b70000
    Library C:\ProgramData\Trusteer\Rapport\store\exts\RapportVB\baseline\MSVCP80.dll (*** suspicious ***) @ C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [1080] (Microsoft® C++ Runtime Library/Microsoft Corporation)(2013-07-02 15:36:37) 0000000071880000
    Library C:\ProgramData\Trusteer\Rapport\store\exts\RapportVB\baseline\MSVCR80.dll (*** suspicious ***) @ C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [1080] (Microsoft® C Runtime Library/Microsoft Corporation)(2013-07-02 15:36:37) 00000000717e0000
    Process C:\ProgramData\DatacardService\DCService.exe (*** suspicious ***) @ C:\ProgramData\DatacardService\DCService.exe [2200](2010-09-29 01:33:40) 0000000000400000
    Library C:\ProgramData\Trusteer\Rapport\store\exts\RapportGP\baseline\MSVCP80.dll (*** suspicious ***) @ C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe [3260] (Microsoft® C++ Runtime Library/Microsoft Corporation)(2013-07-02 15:36:37) 0000000071c10000
    Library C:\ProgramData\Trusteer\Rapport\store\exts\RapportGP\baseline\MSVCR80.dll (*** suspicious ***) @ C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe [3260] (Microsoft® C Runtime Library/Microsoft Corporation)(2013-07-02 15:36:37) 0000000071b70000
    Library C:\ProgramData\Trusteer\Rapport\store\exts\RapportVB\baseline\MSVCP80.dll (*** suspicious ***) @ C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe [3260] (Microsoft® C++ Runtime Library/Microsoft Corporation)(2013-07-02 15:36:37) 0000000071880000
    Library C:\ProgramData\Trusteer\Rapport\store\exts\RapportVB\baseline\MSVCR80.dll (*** suspicious ***) @ C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe [3260] (Microsoft® C Runtime Library/Microsoft Corporation)(2013-07-02 15:36:37) 00000000717e0000
    Process C:\ProgramData\DatacardService\DCSHelper.exe (*** suspicious ***) @ C:\ProgramData\DatacardService\DCSHelper.exe [3888] (DataCardMonitor MFC Application/Huawei Technologies Co., Ltd.)(2010-09-29 01:33:34) 0000000000400000
    Library C:\Users\Paul Loomans\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll (*** suspicious ***) @ C:\Users\Paul Loomans\AppData\Roaming\Dropbox\bin\Dropbox.exe [7624](2014-08-15 18:46:08) 0000000003fd0000
    Library c:\users\paullo~1\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp0pjzj_.dll (*** suspicious ***) @ C:\Users\Paul Loomans\AppData\Roaming\Dropbox\bin\Dropbox.exe [7624](2014-08-18 13:21:25) 0000000004420000
    Library C:\Users\Paul Loomans\AppData\Roaming\Dropbox\bin\libcef.dll (*** suspicious ***) @ C:\Users\Paul Loomans\AppData\Roaming\Dropbox\bin\Dropbox.exe [7624](2013-08-23 19:01:44) 0000000059350000
    Library C:\Users\Paul Loomans\AppData\Roaming\Dropbox\bin\icudt.dll (*** suspicious ***) @ C:\Users\Paul Loomans\AppData\Roaming\Dropbox\bin\Dropbox.exe [7624] (ICU Data DLL/The ICU Project)(2013-08-23 19:01:42) 000000005fc40000

    ---- EOF - GMER 2.1 ----
    Bijgevoegde Bestanden

  • #2
    Hoi ploomans

    De eerste stap is het uitvoeren van deze richtlijn: !!! BELANGRIJK !!!: Lees dit eerst voor je een bericht plaatst!

    Logs niet tussen codetags of als bijlage aub.

    Emphyrio
    Malware Research [email protected] (MBAM) ..... ASAP & Unite Member
    E Dev * McAfee verwijderen. * Ccleaner * E-Peek

    Comment


    • #3
      Sorry...
      Hierbij nogmaals:

      DDS (Ver_2012-11-20.01) - NTFS_AMD64
      Internet Explorer: 8.0.7600.17267 BrowserJavaVersion: 10.67.2
      Run by Paul Loomans at 20:28:36 on 2014-08-18
      Microsoft Windows 7 Home Premium 6.1.7600.0.1252.31.1043.18.3892.1016 [GMT 2:00]
      .
      AV: AVG AntiVirus Free Edition 2014 *Enabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
      SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
      SP: AVG AntiVirus Free Edition 2014 *Enabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
      .
      ============== Running Processes ===============
      .
      c:\PROGRA~2\AVG\AVG2014\avgrsa.exe
      C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
      C:\Windows\system32\lsm.exe
      C:\Windows\system32\svchost.exe -k DcomLaunch
      C:\Windows\system32\nvvsvc.exe
      C:\Windows\system32\svchost.exe -k RPCSS
      C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
      C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
      C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
      C:\Windows\system32\svchost.exe -k netsvcs
      C:\Windows\system32\svchost.exe -k LocalService
      C:\Windows\system32\svchost.exe -k NetworkService
      C:\Windows\system32\WLANExt.exe
      C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
      C:\Windows\system32\nvvsvc.exe
      C:\Windows\System32\spoolsv.exe
      C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
      C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
      C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
      C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
      C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
      C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
      C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
      C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
      C:\ProgramData\DatacardService\DCService.exe
      C:\Windows\system32\EscSvc64.exe
      C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
      C:\Program Files (x86)\EPSON\MyEPSON Connect\mepService.exe
      C:\Windows\splwow64.exe
      C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
      C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
      C:\Program Files (x86)\EPSON\MyEPSON Connect\mep.exe
      C:\Windows\system32\taskeng.exe
      C:\Program Files (x86)\Samsung\Samsung Recovery Solution 4\WCScheduler.exe
      C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe
      C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe
      C:\Windows\system32\taskhost.exe
      C:\Windows\SysWOW64\Rezip.exe
      C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
      C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe
      C:\Windows\system32\svchost.exe -k imgsvc
      C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
      C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
      C:\Windows\system32\Dwm.exe
      C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
      C:\Windows\system32\igfxext.exe
      C:\Windows\Explorer.EXE
      C:\Windows\system32\igfxsrvc.exe
      C:\ProgramData\DatacardService\DCSHelper.exe
      C:\Windows\System32\hkcmd.exe
      C:\Windows\System32\igfxpers.exe
      C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      C:\Program Files\Windows Sidebar\sidebar.exe
      C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
      C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
      C:\Users\Paul Loomans\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
      C:\Windows\System32\spool\drivers\x64\3\E_IATILEE.EXE
      C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
      C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
      C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
      C:\Program Files (x86)\Brownie\BrStsW64.exe
      C:\Program Files (x86)\AVG\AVG2014\avgui.exe
      C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
      C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
      C:\Program Files (x86)\Brownie\brpjp04a.exe
      C:\Windows\SysWOW64\ctfmon.exe
      C:\Windows\system32\SearchIndexer.exe
      C:\Windows\system32\svchost.exe -k bthsvcs
      C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
      C:\Windows\SysWOW64\RunDll32.exe
      C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
      C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
      C:\Windows\splwow64.exe
      C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
      C:\Program Files (x86)\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe
      C:\Windows\system32\svchost.exe -k SDRSVC
      C:\Program Files\Windows Media Player\wmpnetwk.exe
      C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE
      C:\Program Files (x86)\Internet Explorer\IELowutil.exe
      C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
      C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
      C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
      C:\Users\Paul Loomans\AppData\Local\Google\Chrome\Application\chrome.exe
      C:\Users\Paul Loomans\AppData\Local\Google\Chrome\Application\chrome.exe
      C:\Windows\System32\svchost.exe -k LocalServicePeerNet
      C:\Users\Paul Loomans\AppData\Local\Google\Chrome\Application\chrome.exe
      C:\Users\Paul Loomans\AppData\Local\Google\Chrome\Application\chrome.exe
      C:\Users\Paul Loomans\AppData\Local\Google\Chrome\Application\chrome.exe
      C:\Users\Paul Loomans\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe
      C:\Users\Paul Loomans\AppData\Roaming\Dropbox\bin\Dropbox.exe
      C:\Users\Paul Loomans\AppData\Local\Google\Chrome\Application\chrome.exe
      C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
      C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
      C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
      C:\Users\Paul Loomans\Desktop\Defogger.exe
      C:\Program Files (x86)\MALWAREBYTES ANTI-MALWARE\mbam.exe
      C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE
      C:\Users\Paul Loomans\AppData\Local\Google\Chrome\Application\chrome.exe
      C:\Windows\system32\wuauclt.exe
      C:\Users\Paul Loomans\AppData\Local\Google\Chrome\Application\chrome.exe
      C:\Users\Paul Loomans\AppData\Local\Google\Chrome\Application\chrome.exe
      C:\Users\Paul Loomans\AppData\Local\Google\Chrome\Application\chrome.exe
      C:\Windows\system32\SearchProtocolHost.exe
      C:\Windows\system32\SearchFilterHost.exe
      C:\Windows\system32\wbem\wmiprvse.exe
      C:\Windows\System32\cscript.exe
      .
      ============== Pseudo HJT Report ===============
      .
      uStart Page = hxxp://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn
      mWinlogon: Userinit = userinit.exe,
      BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
      BHO: Aanmeldhulp voor Windows Live ID: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
      BHO: Skype Click to Call for Internet Explorer: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
      BHO: Google Toolbar Notifier BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll
      BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL
      BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
      TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
      TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
      uRun: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
      uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
      uRun: [Google Update] "C:\Users\Paul Loomans\AppData\Local\Google\Update\GoogleUpdate.exe" /c
      uRun: [HW_OPENEYE_OUC_Mobile Partner] "C:\Program Files (x86)\Mobile Partner\UpdateDog\ouc.exe"
      uRun: [TomTomHOME.exe] "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"
      uRun: [Spotify Web Helper] "C:\Users\Paul Loomans\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
      uRun: [Google+ Auto Backup] "C:\Users\Paul Loomans\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe" /autostart
      uRun: [EPLTarget\P0000000000000000] C:\Windows\System32\spool\DRIVERS\x64\3\E_IATILEE.EXE /EPT "EPLTarget\P0000000000000000" /M "XP-412 413 415 Series"
      mRun: [UpdateLBPShortCut] "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
      mRun: [UpdateP2GoShortCut] "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
      mRun: [UpdatePDRShortCut] "C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\PowerDirector" UpdateWithCreateOnce "Software\CyberLink\PowerDirector\7.0"
      mRun: [PDVD8LanguageShortcut] "C:\Program Files (x86)\CyberLink\PowerDVD8\Language\Language.exe"
      mRun: [UpdatePPShortCut] "C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\PowerProducer" UpdateWithCreateOnce "Software\CyberLink\PowerProducer\5.0"
      mRun: [UpdatePSTShortCut] "C:\Program Files (x86)\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"
      mRun: [UCam_Menu] "C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\2.0"
      mRun: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
      mRun: [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
      mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
      mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
      mRun: [BrStsWnd] C:\Program Files (x86)\Brownie\BrstsW64.exe Autorun
      mRun: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
      mRun: [EEventManager] "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
      mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
      mRunOnce: [Malwarebytes Anti-Malware (cleanup)] "C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe" "C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware"
      StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\BLUETO~1.LNK - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
      mPolicies-Explorer: NoActiveDesktop = dword:1
      mPolicies-Explorer: NoActiveDesktopChanges = dword:1
      mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
      mPolicies-System: ConsentPromptBehaviorUser = dword:3
      mPolicies-System: EnableUIADesktopToggle = dword:0
      mPolicies-System: EnableSecureUIAPath = dword:1
      IE: &Verzenden naar OneNote - C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
      IE: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr/200
      IE: Afbeelding verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
      IE: E&xporteren naar Microsoft Excel - C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
      IE: Pagina verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
      IE: Translate with Babylon - C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Action.htm
      IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
      IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
      IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
      IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
      IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
      DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
      DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
      DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
      TCP: NameServer = 192.168.2.2
      TCP: Interfaces\{1D129297-FE5F-45C9-853B-D2B23A6FE9F8} : NameServer = 194.151.228.34 194.151.228.50
      TCP: Interfaces\{9A42A558-ADD1-4BEC-A30B-6328DD496273} : DHCPNameServer = 192.168.2.2
      TCP: Interfaces\{AD754EFD-C3EA-4743-BDA8-CEE8A1A5CA0C} : NameServer = 194.151.228.34 194.151.228.50
      TCP: Interfaces\{DA9CAA04-9DE9-4E42-BFE4-D6632D10E054} : NameServer = 194.151.228.34 194.151.228.50
      TCP: Interfaces\{DCD9CA77-1DD9-445C-94F7-101728EEB58B} : DHCPNameServer = 192.168.2.2
      TCP: Interfaces\{DCD9CA77-1DD9-445C-94F7-101728EEB58B}\3596475636F6D6146403634493 : DHCPNameServer = 192.168.0.1
      TCP: Interfaces\{DCD9CA77-1DD9-445C-94F7-101728EEB58B}\A5978554C4F5142474E4F513 : DHCPNameServer = 212.98.37.128 194.230.55.99
      TCP: Interfaces\{DCD9CA77-1DD9-445C-94F7-101728EEB58B}\B405E4D265746573531393343353644333 : DHCPNameServer = 192.168.1.254
      TCP: Interfaces\{DCD9CA77-1DD9-445C-94F7-101728EEB58B}\B4C6162756E6265656B684579637A656 : DHCPNameServer = 192.168.2.254
      TCP: Interfaces\{DCD9CA77-1DD9-445C-94F7-101728EEB58B}\D416C69637368616 : DHCPNameServer = 192.168.1.1
      Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
      Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - <orphaned>
      Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
      Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
      Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
      AppInit_DLLs= C:\Windows\SysWOW64\nvinit.dll
      SSODL: WebCheck - <orphaned>
      x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      x64-BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
      x64-BHO: Skype Click to Call for Internet Explorer: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
      x64-BHO: Google Toolbar Notifier BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg64.dll
      x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL
      x64-TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
      x64-Run: [IgfxTray] C:\Windows\System32\igfxtray.exe
      x64-Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe
      x64-Run: [Persistence] C:\Windows\System32\igfxpers.exe
      x64-Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\System32\NvCpl.dll,NvStartup
      x64-Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
      x64-Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe
      x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
      x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
      x64-IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
      x64-IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
      x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
      x64-Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - <orphaned>
      x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
      x64-Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
      x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
      x64-Notify: igfxcui - igfxdev.dll
      x64-SSODL: WebCheck - <orphaned>
      .
      ================= FIREFOX ===================
      .
      FF - ProfilePath - C:\Users\Paul Loomans\AppData\Roaming\Mozilla\Firefox\Profiles\d9tw9nhc.default\
      FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
      FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
      FF - plugin: C:\Program Files (x86)\ABN AMRO e.dentifier2\Mozilla\npBECON.dll
      FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
      FF - plugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
      FF - plugin: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
      FF - plugin: C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll
      FF - plugin: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npdeployJava1.dll
      FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
      FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrlui.dll
      FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll
      FF - plugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
      FF - plugin: C:\Program Files (x86)\Sony\Media Go\npMediaGoDetector.dll
      FF - plugin: C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll
      FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
      FF - plugin: C:\Users\Paul Loomans\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll
      FF - plugin: C:\Users\Paul Loomans\AppData\Roaming\Mozilla\Firefox\Profiles\d9tw9nhc.default\extensions\{d0d3f03e-b5f1-41e6-9b14-3741bb0a9c32}\plugins\np-mswmp.dll
      FF - plugin: C:\Users\Paul Loomans\AppData\Roaming\Mozilla\Firefox\Profiles\d9tw9nhc.default\extensions\{d0d3f03e-b5f1-41e6-9b14-3741bb0a9c32}\plugins\npFirefoxPlugin.dll
      FF - plugin: C:\Users\Paul Loomans\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
      FF - plugin: C:\Users\Paul Loomans\AppData\Roaming\Mozilla\plugins\npo1d.dll
      FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll
      .
      ============= SERVICES / DRIVERS ===============
      .
      R0 AVGIDSHA;AVGIDSHA;C:\Windows\System32\drivers\avgidsha.sys [2014-6-17 190744]
      R0 Avgloga;AVG Logging Driver;C:\Windows\System32\drivers\avgloga.sys [2014-6-17 328984]
      R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;C:\Windows\System32\drivers\avgmfx64.sys [2014-6-17 123672]
      R0 Avgrkx64;AVG Anti-Rootkit Driver;C:\Windows\System32\drivers\avgrkx64.sys [2014-6-17 31512]
      R0 gfibto;gfibto;C:\Windows\System32\drivers\gfibto.sys [2013-1-16 14456]
      R0 RapportKE64;RapportKE64;C:\Windows\System32\drivers\RapportKE64.sys [2013-7-2 358616]
      R1 Avgdiska;AVG Disk Driver;C:\Windows\System32\drivers\avgdiska.sys [2014-6-30 152344]
      R1 AVGIDSDriver;AVGIDSDriver;C:\Windows\System32\drivers\avgidsdrivera.sys [2014-6-17 242968]
      R1 Avgldx64;AVG AVI Loader Driver;C:\Windows\System32\drivers\avgldx64.sys [2014-6-17 235800]
      R1 Avgtdia;AVG TDI Driver;C:\Windows\System32\drivers\avgtdia.sys [2014-6-17 269080]
      R1 RapportCerberus_69875;RapportCerberus_69875;C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerber us\baseline\RapportCerberus64_69875.sys [2014-8-17 631128]
      R1 RapportEI64;RapportEI64;C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [2014-7-10 299736]
      R1 RapportPG64;RapportPG64;C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys [2014-7-10 414296]
      R1 SABI;SAMSUNG Kernel Driver For Windows 7;C:\Windows\System32\drivers\SABI.sys [2010-6-24 13824]
      R2 AVGIDSAgent;AVGIDSAgent;C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [2014-8-11 3244048]
      R2 avgwd;AVG WatchDog;C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [2014-8-11 289328]
      R2 c2cautoupdatesvc;Skype Click to Call Updater;C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-7-14 1390176]
      R2 c2cpnrsvc;Skype Click to Call PNR Service;C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-7-14 1767520]
      R2 DCService.exe;DCService.exe;C:\ProgramData\DatacardService\DCService.exe [2010-9-29 249856]
      R2 EpsonScanSvc;Epson Scanner Service;C:\Windows\System32\escsvc64.exe [2014-1-22 144560]
      R2 MyEPSON Connect Service;MyEPSON Connect Service;C:\Program Files (x86)\epson\MyEPSON Connect\mepService.exe [2012-10-1 703616]
      R2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [2011-3-15 428384]
      R2 RapportMgmtService;Rapport Management Service;C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [2014-7-10 1886488]
      R2 Rezip;Rezip;C:\Windows\SysWOW64\Rezip.exe [2010-6-24 311296]
      R2 TomTomHOMEService;TomTomHOMEService;C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2012-1-23 92592]
      R2 UNS;Intel(R) Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-6-24 2320920]
      R3 btwampfl;Bluetooth AMP USB Filter;C:\Windows\System32\drivers\btwampfl.sys [2010-11-2 340520]
      R3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\System32\drivers\btwl2cap.sys [2010-11-2 39464]
      R3 HECIx64;Intel(R) Management Engine Interface;C:\Windows\System32\drivers\HECIx64.sys [2010-6-25 56344]
      R3 huawei_enumerator;huawei_enumerator;C:\Windows\System32\drivers\ew_jubusenum.sys [2011-4-14 86016]
      R3 Impcd;Impcd;C:\Windows\System32\drivers\Impcd.sys [2010-6-25 158976]
      R3 IntcDAud;Intel(R) Display Audio;C:\Windows\System32\drivers\IntcDAud.sys [2010-6-25 271872]
      R3 MBAMSwissArmy;MBAMSwissArmy;C:\Windows\System32\drivers\MBAMSwissArmy.sys [2014-7-6 122584]
      R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\System32\drivers\yk62x64.sys [2009-9-28 395264]
      S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
      S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
      S2 SkypeUpdate;Skype Updater;D:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
      S3 e.dentifier2;SmartCard Reader ABN AMRO e.dentifier2;C:\Windows\System32\drivers\aabed2.sys [2008-3-20 28672]
      S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;C:\Windows\System32\drivers\ew_hwusbdev.sys [2011-4-14 117248]
      S3 ewusbnet;HUAWEI USB-NDIS miniport;C:\Windows\System32\drivers\ewusbnet.sys [2011-4-14 256000]
      S3 fssfltr;fssfltr;C:\Windows\System32\drivers\fssfltr.sys [2010-12-15 48488]
      S3 fsssvc;Windows Live Family Safety Service;C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2011-5-13 1492840]
      S3 ggflt;SEMC USB Flash Driver Filter;C:\Windows\System32\drivers\ggflt.sys [2012-8-27 14448]
      S3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2009-6-10 187392]
      S3 Sony PC Companion;Sony PC Companion;C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2012-5-23 155320]
      S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2011-5-10 51712]
      S3 WatAdminSvc;Windows Activation Technologies-service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-11-17 1255736]
      .
      =============== Created Last 30 ================
      .
      2014-08-18 18:11:37 79064 ----a-w- C:\Windows\System32\drivers\trljfahc.sys
      2014-08-17 13:33:42 98216 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
      2014-08-17 11:44:47 526848 ----a-w- C:\Windows\System32\aepdu.dll
      2014-08-17 11:44:43 424448 ----a-w- C:\Windows\System32\aeinv.dll
      2014-08-17 11:35:28 -------- d-----w- C:\Program Files (x86)\Display
      2014-08-17 11:34:44 -------- d-----w- C:\ProgramData\PC Optimizer Pro
      2014-08-17 11:04:46 -------- d-----w- C:\Program Files (x86)\Display Offer
      2014-08-17 11:03:59 -------- d-----w- C:\Program Files\PC Optimizer Pro
      2014-08-17 11:01:32 -------- d-----w- C:\Program Files (x86)\SpeedItup Free
      2014-08-17 10:56:14 -------- d-----w- C:\Program Files (x86)\Skype
      2014-08-05 17:20:22 227728 ----a-w- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.dll
      2014-08-05 17:20:22 227728 ----a-w- C:\Program Files (x86)\Internet Explorer\Plugins\nppdf32.dll
      .
      ==================== Find3M ====================
      .
      2014-08-18 13:57:04 122584 ----a-w- C:\Windows\System32\drivers\MBAMSwissArmy.sys
      2014-07-10 17:23:38 358616 ----a-w- C:\Windows\System32\drivers\RapportKE64.sys
      2014-06-30 10:43:02 152344 ----a-w- C:\Windows\System32\drivers\avgdiska.sys
      2014-06-17 14:21:34 235800 ----a-w- C:\Windows\System32\drivers\avgldx64.sys
      2014-06-17 14:07:12 328984 ----a-w- C:\Windows\System32\drivers\avgloga.sys
      2014-06-17 14:06:58 269080 ----a-w- C:\Windows\System32\drivers\avgtdia.sys
      2014-06-17 14:06:24 190744 ----a-w- C:\Windows\System32\drivers\avgidsha.sys
      2014-06-17 14:06:22 242968 ----a-w- C:\Windows\System32\drivers\avgidsdrivera.sys
      2014-06-17 14:06:20 123672 ----a-w- C:\Windows\System32\drivers\avgmfx64.sys
      2014-06-17 14:06:06 31512 ----a-w- C:\Windows\System32\drivers\avgrkx64.sys
      .
      ============= FINISH: 20:30:10,00 ===============

      en

      GMER 2.1.19357 - http://www.gmer.net
      Rootkit scan 2014-08-18 20:50:27
      Windows 6.1.7600 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 SAMSUNG_ rev.2AJ1 298,09GB
      Running: f3iru5bp.exe; Driver: C:\Users\PAULLO~1\AppData\Local\Temp\pwloikod.sys


      ---- Disk sectors - GMER 2.1 ----

      Disk \Device\Harddisk0\DR0 unknown MBR code

      ---- Threads - GMER 2.1 ----

      Thread C:\Windows\system32\WLANExt.exe [1592:1640] 000000018000b6d4
      Thread C:\Windows\system32\WLANExt.exe [1592:1644] 000000018000b6f0
      Thread C:\Windows\system32\WLANExt.exe [1592:1648] 000000018000b6b8
      Thread C:\Windows\system32\WLANExt.exe [1592:1652] 00000001800221a0
      Thread C:\Windows\system32\WLANExt.exe [1592:1656] 000007fef9322f9c
      Thread C:\Windows\System32\spoolsv.exe [1900:2624] 000007fef7b510c8
      Thread C:\Windows\System32\spoolsv.exe [1900:2632] 000007fef7b16144
      Thread C:\Windows\System32\spoolsv.exe [1900:2636] 000007fef7905fd0
      Thread C:\Windows\System32\spoolsv.exe [1900:2640] 000007fef78f3438
      Thread C:\Windows\System32\spoolsv.exe [1900:2644] 000007fef79063ec
      Thread C:\Windows\System32\spoolsv.exe [1900:2652] 000007fef7cf5e5c
      Thread C:\Windows\System32\spoolsv.exe [1900:2656] 000007fef7d2484c
      Thread C:\Windows\System32\spoolsv.exe [1900:3044] 000007fef7cd56dc
      Thread C:\Windows\SysWOW64\ctfmon.exe [4940:2396] 00000000771a2e3e
      Thread C:\Windows\SysWOW64\ctfmon.exe [4940:3648] 0000000075f68bec
      Thread C:\Windows\system32\svchost.exe [3052:3956] 000007fefd58a808
      Thread C:\Windows\system32\DllHost.exe [6368:5128] 000007fefde43570
      Thread C:\Windows\system32\DllHost.exe [6368:6352] 000007feee7dae60
      ---- Processes - GMER 2.1 ----

      Library C:\ProgramData\Trusteer\Rapport\store\exts\RapportGP\baseline\MSVCP80.dll (*** suspicious ***) @ C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [1080] (Microsoft® C++ Runtime Library/Microsoft Corporation)(2013-07-02 15:36:37) 0000000071c10000
      Library C:\ProgramData\Trusteer\Rapport\store\exts\RapportGP\baseline\MSVCR80.dll (*** suspicious ***) @ C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [1080] (Microsoft® C Runtime Library/Microsoft Corporation)(2013-07-02 15:36:37) 0000000071b70000
      Library C:\ProgramData\Trusteer\Rapport\store\exts\RapportVB\baseline\MSVCP80.dll (*** suspicious ***) @ C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [1080] (Microsoft® C++ Runtime Library/Microsoft Corporation)(2013-07-02 15:36:37) 0000000071880000
      Library C:\ProgramData\Trusteer\Rapport\store\exts\RapportVB\baseline\MSVCR80.dll (*** suspicious ***) @ C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [1080] (Microsoft® C Runtime Library/Microsoft Corporation)(2013-07-02 15:36:37) 00000000717e0000
      Process C:\ProgramData\DatacardService\DCService.exe (*** suspicious ***) @ C:\ProgramData\DatacardService\DCService.exe [2200](2010-09-29 01:33:40) 0000000000400000
      Library C:\ProgramData\Trusteer\Rapport\store\exts\RapportGP\baseline\MSVCP80.dll (*** suspicious ***) @ C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe [3260] (Microsoft® C++ Runtime Library/Microsoft Corporation)(2013-07-02 15:36:37) 0000000071c10000
      Library C:\ProgramData\Trusteer\Rapport\store\exts\RapportGP\baseline\MSVCR80.dll (*** suspicious ***) @ C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe [3260] (Microsoft® C Runtime Library/Microsoft Corporation)(2013-07-02 15:36:37) 0000000071b70000
      Library C:\ProgramData\Trusteer\Rapport\store\exts\RapportVB\baseline\MSVCP80.dll (*** suspicious ***) @ C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe [3260] (Microsoft® C++ Runtime Library/Microsoft Corporation)(2013-07-02 15:36:37) 0000000071880000
      Library C:\ProgramData\Trusteer\Rapport\store\exts\RapportVB\baseline\MSVCR80.dll (*** suspicious ***) @ C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe [3260] (Microsoft® C Runtime Library/Microsoft Corporation)(2013-07-02 15:36:37) 00000000717e0000
      Process C:\ProgramData\DatacardService\DCSHelper.exe (*** suspicious ***) @ C:\ProgramData\DatacardService\DCSHelper.exe [3888] (DataCardMonitor MFC Application/Huawei Technologies Co., Ltd.)(2010-09-29 01:33:34) 0000000000400000
      Library C:\Users\Paul Loomans\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll (*** suspicious ***) @ C:\Users\Paul Loomans\AppData\Roaming\Dropbox\bin\Dropbox.exe [7624](2014-08-15 18:46:08) 0000000003fd0000
      Library c:\users\paullo~1\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp0pjzj_.dll (*** suspicious ***) @ C:\Users\Paul Loomans\AppData\Roaming\Dropbox\bin\Dropbox.exe [7624](2014-08-18 13:21:25) 0000000004420000
      Library C:\Users\Paul Loomans\AppData\Roaming\Dropbox\bin\libcef.dll (*** suspicious ***) @ C:\Users\Paul Loomans\AppData\Roaming\Dropbox\bin\Dropbox.exe [7624](2013-08-23 19:01:44) 0000000059350000
      Library C:\Users\Paul Loomans\AppData\Roaming\Dropbox\bin\icudt.dll (*** suspicious ***) @ C:\Users\Paul Loomans\AppData\Roaming\Dropbox\bin\Dropbox.exe [7624] (ICU Data DLL/The ICU Project)(2013-08-23 19:01:42) 000000005fc40000

      ---- EOF - GMER 2.1 ----

      Comment


      • #4
        Lees de instructies eens aandacht aub en post de gevraagde logs.
        Respecteer daarbij ook de volgorde.

        Dr Gmer log moet je niet posten.
        Malware Research [email protected] (MBAM) ..... ASAP & Unite Member
        E Dev * McAfee verwijderen. * Ccleaner * E-Peek

        Comment


        • #5
          Ik hoop dat het nu juist is wat ik post:
          1. mbamlog

          Malwarebytes Anti-Malware
          www.malwarebytes.org

          Scandatum: 18-8-2014
          Scantijd: 15:57:03
          Logbestand: mbamlog.txt
          Beheerder: Ja

          Versie: 2.00.2.1012
          Malwaredatabase: v2014.08.18.06
          Rootkitdatabase: v2014.08.16.01
          Licentie: Gratis
          Malwarebescherming: Uitgeschakeld
          Kwaadaardige Website Bescherming: Uitgeschakeld
          Self-protection: Uitgeschakeld

          Besturingssysteem: Windows 7
          Processor: x64
          Bestandssysteem: NTFS
          Gebruiker: Paul Loomans

          Scantype: Aangepaste Scan
          Resultaat: Voltooid
          Objecten Gescand: 653782
          Verstreken Tijd: 3 u, 28 m, 28 s

          Geheugen: Ingeschakeld
          Opstarten: Ingeschakeld
          Bestandssysteem: Ingeschakeld
          Archieven: Ingeschakeld
          Rootkits: Ingeschakeld
          Heuristics: Ingeschakeld
          POP: Ingeschakeld
          POA: Ingeschakeld

          Processen: 0
          (No malicious items detected)

          Modules: 0
          (No malicious items detected)

          Registersleutels: 0
          (No malicious items detected)

          Registerwaardes: 0
          (No malicious items detected)

          Registerdata: 0
          (No malicious items detected)

          Mappen: 0
          (No malicious items detected)

          Bestanden: 3
          PUP.Optional.Installcore, C:\Users\Paul Loomans\AppData\Local\Temp\InstallMonetizer.exe, In Quarantaine, [10379532bac1bd793345ebc49d644db3],
          PUP.Optional.Wajam, C:\Users\Paul Loomans\AppData\Local\Temp\nso5A13.tmp\OurChecker.exe, In Quarantaine, [62e5f5d2740740f6f1da2b3eff031de3],
          PUP.Optional.ClientConnect, C:\Users\Paul Loomans\AppData\Roaming\Mozilla\Firefox\Profiles\d9tw9nhc.default\extensions\{d0d3f03e-b5f1-41e6-9b14-3741bb0a9c32}\Plugins\npFirefoxPlugin.dll, In Quarantaine, [5fe801c64d2e79bd88419911df227a86],

          Fysieke Sectoren: 0
          (No malicious items detected)


          (end)

          2. DDS.txt

          DDS (Ver_2012-11-20.01) - NTFS_AMD64
          Internet Explorer: 8.0.7600.17267 BrowserJavaVersion: 10.67.2
          Run by Paul Loomans at 20:28:36 on 2014-08-18
          Microsoft Windows 7 Home Premium 6.1.7600.0.1252.31.1043.18.3892.1016 [GMT 2:00]
          .
          AV: AVG AntiVirus Free Edition 2014 *Enabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
          SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
          SP: AVG AntiVirus Free Edition 2014 *Enabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
          .
          ============== Running Processes ===============
          .
          c:\PROGRA~2\AVG\AVG2014\avgrsa.exe
          C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
          C:\Windows\system32\lsm.exe
          C:\Windows\system32\svchost.exe -k DcomLaunch
          C:\Windows\system32\nvvsvc.exe
          C:\Windows\system32\svchost.exe -k RPCSS
          C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
          C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
          C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
          C:\Windows\system32\svchost.exe -k netsvcs
          C:\Windows\system32\svchost.exe -k LocalService
          C:\Windows\system32\svchost.exe -k NetworkService
          C:\Windows\system32\WLANExt.exe
          C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
          C:\Windows\system32\nvvsvc.exe
          C:\Windows\System32\spoolsv.exe
          C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
          C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
          C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
          C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
          C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
          C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
          C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
          C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
          C:\ProgramData\DatacardService\DCService.exe
          C:\Windows\system32\EscSvc64.exe
          C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
          C:\Program Files (x86)\EPSON\MyEPSON Connect\mepService.exe
          C:\Windows\splwow64.exe
          C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
          C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
          C:\Program Files (x86)\EPSON\MyEPSON Connect\mep.exe
          C:\Windows\system32\taskeng.exe
          C:\Program Files (x86)\Samsung\Samsung Recovery Solution 4\WCScheduler.exe
          C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe
          C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe
          C:\Windows\system32\taskhost.exe
          C:\Windows\SysWOW64\Rezip.exe
          C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
          C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe
          C:\Windows\system32\svchost.exe -k imgsvc
          C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
          C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
          C:\Windows\system32\Dwm.exe
          C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
          C:\Windows\system32\igfxext.exe
          C:\Windows\Explorer.EXE
          C:\Windows\system32\igfxsrvc.exe
          C:\ProgramData\DatacardService\DCSHelper.exe
          C:\Windows\System32\hkcmd.exe
          C:\Windows\System32\igfxpers.exe
          C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
          C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
          C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
          C:\Program Files\Windows Sidebar\sidebar.exe
          C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
          C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
          C:\Users\Paul Loomans\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
          C:\Windows\System32\spool\drivers\x64\3\E_IATILEE.EXE
          C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
          C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
          C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
          C:\Program Files (x86)\Brownie\BrStsW64.exe
          C:\Program Files (x86)\AVG\AVG2014\avgui.exe
          C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
          C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
          C:\Program Files (x86)\Brownie\brpjp04a.exe
          C:\Windows\SysWOW64\ctfmon.exe
          C:\Windows\system32\SearchIndexer.exe
          C:\Windows\system32\svchost.exe -k bthsvcs
          C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
          C:\Windows\SysWOW64\RunDll32.exe
          C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
          C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
          C:\Windows\splwow64.exe
          C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
          C:\Program Files (x86)\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe
          C:\Windows\system32\svchost.exe -k SDRSVC
          C:\Program Files\Windows Media Player\wmpnetwk.exe
          C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE
          C:\Program Files (x86)\Internet Explorer\IELowutil.exe
          C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
          C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
          C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
          C:\Users\Paul Loomans\AppData\Local\Google\Chrome\Application\chrome.exe
          C:\Users\Paul Loomans\AppData\Local\Google\Chrome\Application\chrome.exe
          C:\Windows\System32\svchost.exe -k LocalServicePeerNet
          C:\Users\Paul Loomans\AppData\Local\Google\Chrome\Application\chrome.exe
          C:\Users\Paul Loomans\AppData\Local\Google\Chrome\Application\chrome.exe
          C:\Users\Paul Loomans\AppData\Local\Google\Chrome\Application\chrome.exe
          C:\Users\Paul Loomans\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe
          C:\Users\Paul Loomans\AppData\Roaming\Dropbox\bin\Dropbox.exe
          C:\Users\Paul Loomans\AppData\Local\Google\Chrome\Application\chrome.exe
          C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
          C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
          C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
          C:\Users\Paul Loomans\Desktop\Defogger.exe
          C:\Program Files (x86)\MALWAREBYTES ANTI-MALWARE\mbam.exe
          C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE
          C:\Users\Paul Loomans\AppData\Local\Google\Chrome\Application\chrome.exe
          C:\Windows\system32\wuauclt.exe
          C:\Users\Paul Loomans\AppData\Local\Google\Chrome\Application\chrome.exe
          C:\Users\Paul Loomans\AppData\Local\Google\Chrome\Application\chrome.exe
          C:\Users\Paul Loomans\AppData\Local\Google\Chrome\Application\chrome.exe
          C:\Windows\system32\SearchProtocolHost.exe
          C:\Windows\system32\SearchFilterHost.exe
          C:\Windows\system32\wbem\wmiprvse.exe
          C:\Windows\System32\cscript.exe
          .
          ============== Pseudo HJT Report ===============
          .
          uStart Page = hxxp://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn
          mWinlogon: Userinit = userinit.exe,
          BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
          BHO: Aanmeldhulp voor Windows Live ID: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
          BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
          BHO: Skype Click to Call for Internet Explorer: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
          BHO: Google Toolbar Notifier BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll
          BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL
          BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
          TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
          TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
          uRun: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
          uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
          uRun: [Google Update] "C:\Users\Paul Loomans\AppData\Local\Google\Update\GoogleUpdate.exe" /c
          uRun: [HW_OPENEYE_OUC_Mobile Partner] "C:\Program Files (x86)\Mobile Partner\UpdateDog\ouc.exe"
          uRun: [TomTomHOME.exe] "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"
          uRun: [Spotify Web Helper] "C:\Users\Paul Loomans\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
          uRun: [Google+ Auto Backup] "C:\Users\Paul Loomans\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe" /autostart
          uRun: [EPLTarget\P0000000000000000] C:\Windows\System32\spool\DRIVERS\x64\3\E_IATILEE.EXE /EPT "EPLTarget\P0000000000000000" /M "XP-412 413 415 Series"
          mRun: [UpdateLBPShortCut] "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
          mRun: [UpdateP2GoShortCut] "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
          mRun: [UpdatePDRShortCut] "C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\PowerDirector" UpdateWithCreateOnce "Software\CyberLink\PowerDirector\7.0"
          mRun: [PDVD8LanguageShortcut] "C:\Program Files (x86)\CyberLink\PowerDVD8\Language\Language.exe"
          mRun: [UpdatePPShortCut] "C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\PowerProducer" UpdateWithCreateOnce "Software\CyberLink\PowerProducer\5.0"
          mRun: [UpdatePSTShortCut] "C:\Program Files (x86)\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"
          mRun: [UCam_Menu] "C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\2.0"
          mRun: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
          mRun: [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
          mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
          mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
          mRun: [BrStsWnd] C:\Program Files (x86)\Brownie\BrstsW64.exe Autorun
          mRun: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
          mRun: [EEventManager] "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
          mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
          mRunOnce: [Malwarebytes Anti-Malware (cleanup)] "C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe" "C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware"
          StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\BLUETO~1.LNK - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
          mPolicies-Explorer: NoActiveDesktop = dword:1
          mPolicies-Explorer: NoActiveDesktopChanges = dword:1
          mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
          mPolicies-System: ConsentPromptBehaviorUser = dword:3
          mPolicies-System: EnableUIADesktopToggle = dword:0
          mPolicies-System: EnableSecureUIAPath = dword:1
          IE: &Verzenden naar OneNote - C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
          IE: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr/200
          IE: Afbeelding verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
          IE: E&xporteren naar Microsoft Excel - C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
          IE: Pagina verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
          IE: Translate with Babylon - C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Action.htm
          IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
          IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
          IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
          IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
          IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
          DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
          DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
          DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
          TCP: NameServer = 192.168.2.2
          TCP: Interfaces\{1D129297-FE5F-45C9-853B-D2B23A6FE9F8} : NameServer = 194.151.228.34 194.151.228.50
          TCP: Interfaces\{9A42A558-ADD1-4BEC-A30B-6328DD496273} : DHCPNameServer = 192.168.2.2
          TCP: Interfaces\{AD754EFD-C3EA-4743-BDA8-CEE8A1A5CA0C} : NameServer = 194.151.228.34 194.151.228.50
          TCP: Interfaces\{DA9CAA04-9DE9-4E42-BFE4-D6632D10E054} : NameServer = 194.151.228.34 194.151.228.50
          TCP: Interfaces\{DCD9CA77-1DD9-445C-94F7-101728EEB58B} : DHCPNameServer = 192.168.2.2
          TCP: Interfaces\{DCD9CA77-1DD9-445C-94F7-101728EEB58B}\3596475636F6D6146403634493 : DHCPNameServer = 192.168.0.1
          TCP: Interfaces\{DCD9CA77-1DD9-445C-94F7-101728EEB58B}\A5978554C4F5142474E4F513 : DHCPNameServer = 212.98.37.128 194.230.55.99
          TCP: Interfaces\{DCD9CA77-1DD9-445C-94F7-101728EEB58B}\B405E4D265746573531393343353644333 : DHCPNameServer = 192.168.1.254
          TCP: Interfaces\{DCD9CA77-1DD9-445C-94F7-101728EEB58B}\B4C6162756E6265656B684579637A656 : DHCPNameServer = 192.168.2.254
          TCP: Interfaces\{DCD9CA77-1DD9-445C-94F7-101728EEB58B}\D416C69637368616 : DHCPNameServer = 192.168.1.1
          Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
          Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - <orphaned>
          Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
          Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
          Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
          AppInit_DLLs= C:\Windows\SysWOW64\nvinit.dll
          SSODL: WebCheck - <orphaned>
          x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
          x64-BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
          x64-BHO: Skype Click to Call for Internet Explorer: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
          x64-BHO: Google Toolbar Notifier BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg64.dll
          x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL
          x64-TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
          x64-Run: [IgfxTray] C:\Windows\System32\igfxtray.exe
          x64-Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe
          x64-Run: [Persistence] C:\Windows\System32\igfxpers.exe
          x64-Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\System32\NvCpl.dll,NvStartup
          x64-Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
          x64-Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe
          x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
          x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
          x64-IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
          x64-IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
          x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
          x64-Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - <orphaned>
          x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
          x64-Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
          x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
          x64-Notify: igfxcui - igfxdev.dll
          x64-SSODL: WebCheck - <orphaned>
          .
          ================= FIREFOX ===================
          .
          FF - ProfilePath - C:\Users\Paul Loomans\AppData\Roaming\Mozilla\Firefox\Profiles\d9tw9nhc.default\
          FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
          FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
          FF - plugin: C:\Program Files (x86)\ABN AMRO e.dentifier2\Mozilla\npBECON.dll
          FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
          FF - plugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
          FF - plugin: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
          FF - plugin: C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll
          FF - plugin: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npdeployJava1.dll
          FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
          FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrlui.dll
          FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll
          FF - plugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
          FF - plugin: C:\Program Files (x86)\Sony\Media Go\npMediaGoDetector.dll
          FF - plugin: C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll
          FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
          FF - plugin: C:\Users\Paul Loomans\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll
          FF - plugin: C:\Users\Paul Loomans\AppData\Roaming\Mozilla\Firefox\Profiles\d9tw9nhc.default\extensions\{d0d3f03e-b5f1-41e6-9b14-3741bb0a9c32}\plugins\np-mswmp.dll
          FF - plugin: C:\Users\Paul Loomans\AppData\Roaming\Mozilla\Firefox\Profiles\d9tw9nhc.default\extensions\{d0d3f03e-b5f1-41e6-9b14-3741bb0a9c32}\plugins\npFirefoxPlugin.dll
          FF - plugin: C:\Users\Paul Loomans\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
          FF - plugin: C:\Users\Paul Loomans\AppData\Roaming\Mozilla\plugins\npo1d.dll
          FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll
          .
          ============= SERVICES / DRIVERS ===============
          .
          R0 AVGIDSHA;AVGIDSHA;C:\Windows\System32\drivers\avgidsha.sys [2014-6-17 190744]
          R0 Avgloga;AVG Logging Driver;C:\Windows\System32\drivers\avgloga.sys [2014-6-17 328984]
          R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;C:\Windows\System32\drivers\avgmfx64.sys [2014-6-17 123672]
          R0 Avgrkx64;AVG Anti-Rootkit Driver;C:\Windows\System32\drivers\avgrkx64.sys [2014-6-17 31512]
          R0 gfibto;gfibto;C:\Windows\System32\drivers\gfibto.sys [2013-1-16 14456]
          R0 RapportKE64;RapportKE64;C:\Windows\System32\drivers\RapportKE64.sys [2013-7-2 358616]
          R1 Avgdiska;AVG Disk Driver;C:\Windows\System32\drivers\avgdiska.sys [2014-6-30 152344]
          R1 AVGIDSDriver;AVGIDSDriver;C:\Windows\System32\drivers\avgidsdrivera.sys [2014-6-17 242968]
          R1 Avgldx64;AVG AVI Loader Driver;C:\Windows\System32\drivers\avgldx64.sys [2014-6-17 235800]
          R1 Avgtdia;AVG TDI Driver;C:\Windows\System32\drivers\avgtdia.sys [2014-6-17 269080]
          R1 RapportCerberus_69875;RapportCerberus_69875;C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerber us\baseline\RapportCerberus64_69875.sys [2014-8-17 631128]
          R1 RapportEI64;RapportEI64;C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [2014-7-10 299736]
          R1 RapportPG64;RapportPG64;C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys [2014-7-10 414296]
          R1 SABI;SAMSUNG Kernel Driver For Windows 7;C:\Windows\System32\drivers\SABI.sys [2010-6-24 13824]
          R2 AVGIDSAgent;AVGIDSAgent;C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [2014-8-11 3244048]
          R2 avgwd;AVG WatchDog;C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [2014-8-11 289328]
          R2 c2cautoupdatesvc;Skype Click to Call Updater;C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-7-14 1390176]
          R2 c2cpnrsvc;Skype Click to Call PNR Service;C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-7-14 1767520]
          R2 DCService.exe;DCService.exe;C:\ProgramData\DatacardService\DCService.exe [2010-9-29 249856]
          R2 EpsonScanSvc;Epson Scanner Service;C:\Windows\System32\escsvc64.exe [2014-1-22 144560]
          R2 MyEPSON Connect Service;MyEPSON Connect Service;C:\Program Files (x86)\epson\MyEPSON Connect\mepService.exe [2012-10-1 703616]
          R2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [2011-3-15 428384]
          R2 RapportMgmtService;Rapport Management Service;C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [2014-7-10 1886488]
          R2 Rezip;Rezip;C:\Windows\SysWOW64\Rezip.exe [2010-6-24 311296]
          R2 TomTomHOMEService;TomTomHOMEService;C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2012-1-23 92592]
          R2 UNS;Intel(R) Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-6-24 2320920]
          R3 btwampfl;Bluetooth AMP USB Filter;C:\Windows\System32\drivers\btwampfl.sys [2010-11-2 340520]
          R3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\System32\drivers\btwl2cap.sys [2010-11-2 39464]
          R3 HECIx64;Intel(R) Management Engine Interface;C:\Windows\System32\drivers\HECIx64.sys [2010-6-25 56344]
          R3 huawei_enumerator;huawei_enumerator;C:\Windows\System32\drivers\ew_jubusenum.sys [2011-4-14 86016]
          R3 Impcd;Impcd;C:\Windows\System32\drivers\Impcd.sys [2010-6-25 158976]
          R3 IntcDAud;Intel(R) Display Audio;C:\Windows\System32\drivers\IntcDAud.sys [2010-6-25 271872]
          R3 MBAMSwissArmy;MBAMSwissArmy;C:\Windows\System32\drivers\MBAMSwissArmy.sys [2014-7-6 122584]
          R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\System32\drivers\yk62x64.sys [2009-9-28 395264]
          S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
          S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
          S2 SkypeUpdate;Skype Updater;D:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
          S3 e.dentifier2;SmartCard Reader ABN AMRO e.dentifier2;C:\Windows\System32\drivers\aabed2.sys [2008-3-20 28672]
          S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;C:\Windows\System32\drivers\ew_hwusbdev.sys [2011-4-14 117248]
          S3 ewusbnet;HUAWEI USB-NDIS miniport;C:\Windows\System32\drivers\ewusbnet.sys [2011-4-14 256000]
          S3 fssfltr;fssfltr;C:\Windows\System32\drivers\fssfltr.sys [2010-12-15 48488]
          S3 fsssvc;Windows Live Family Safety Service;C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2011-5-13 1492840]
          S3 ggflt;SEMC USB Flash Driver Filter;C:\Windows\System32\drivers\ggflt.sys [2012-8-27 14448]
          S3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2009-6-10 187392]
          S3 Sony PC Companion;Sony PC Companion;C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2012-5-23 155320]
          S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2011-5-10 51712]
          S3 WatAdminSvc;Windows Activation Technologies-service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-11-17 1255736]
          .
          =============== Created Last 30 ================
          .
          2014-08-18 18:11:37 79064 ----a-w- C:\Windows\System32\drivers\trljfahc.sys
          2014-08-17 13:33:42 98216 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
          2014-08-17 11:44:47 526848 ----a-w- C:\Windows\System32\aepdu.dll
          2014-08-17 11:44:43 424448 ----a-w- C:\Windows\System32\aeinv.dll
          2014-08-17 11:35:28 -------- d-----w- C:\Program Files (x86)\Display
          2014-08-17 11:34:44 -------- d-----w- C:\ProgramData\PC Optimizer Pro
          2014-08-17 11:04:46 -------- d-----w- C:\Program Files (x86)\Display Offer
          2014-08-17 11:03:59 -------- d-----w- C:\Program Files\PC Optimizer Pro
          2014-08-17 11:01:32 -------- d-----w- C:\Program Files (x86)\SpeedItup Free
          2014-08-17 10:56:14 -------- d-----w- C:\Program Files (x86)\Skype
          2014-08-05 17:20:22 227728 ----a-w- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.dll
          2014-08-05 17:20:22 227728 ----a-w- C:\Program Files (x86)\Internet Explorer\Plugins\nppdf32.dll
          .
          ==================== Find3M ====================
          .
          2014-08-18 13:57:04 122584 ----a-w- C:\Windows\System32\drivers\MBAMSwissArmy.sys
          2014-07-10 17:23:38 358616 ----a-w- C:\Windows\System32\drivers\RapportKE64.sys
          2014-06-30 10:43:02 152344 ----a-w- C:\Windows\System32\drivers\avgdiska.sys
          2014-06-17 14:21:34 235800 ----a-w- C:\Windows\System32\drivers\avgldx64.sys
          2014-06-17 14:07:12 328984 ----a-w- C:\Windows\System32\drivers\avgloga.sys
          2014-06-17 14:06:58 269080 ----a-w- C:\Windows\System32\drivers\avgtdia.sys
          2014-06-17 14:06:24 190744 ----a-w- C:\Windows\System32\drivers\avgidsha.sys
          2014-06-17 14:06:22 242968 ----a-w- C:\Windows\System32\drivers\avgidsdrivera.sys
          2014-06-17 14:06:20 123672 ----a-w- C:\Windows\System32\drivers\avgmfx64.sys
          2014-06-17 14:06:06 31512 ----a-w- C:\Windows\System32\drivers\avgrkx64.sys
          .
          ============= FINISH: 20:30:10,00 ===============

          Comment


          • #6
            Download AdwCleaner by Xplode naar je Bureaublad.
            • Sluit alle openstaande vensters
            • Start AdwCleaner
            • Klik op Scannen
            • Klik op Verwijderen
            • KLIK HIER voor een vergroting! 

            Alle icoontjes verdwijnen van het Bureaublad,dit is normaal
            Je PC word opnieuw opgestart en er een opent een logfile (C:\ AdwCleaner\AdwCleaner[xx].txt
            Post deze inhoud hier op het Forum.

            Enkel de log na de "Verwijderen" optie heb ik nodig.

            Vergeet niet om je "smileys" uit te schakelen.

            Als je Startpagina ook gehijackt was,stel dan de zoekmachine opnieuw in.
            Deze word standaard door AdwCleaner terug gezet naar Google.com


            Download Security Check op je bureaublad via hier of hier

            Start Security Check
            Volg de Instructies in het scherm
            Aan het eind verschijnt een log ( checkup.txt )
            Plaats de inhoud ervan in je volgende antwoord.


            In je volgende posting, had ik graag de volgende logs gezien, gemaakt in de opgestelde volgorde:
            .
            • AdwCleaner
            • DDS (de DDS.txt gewoon posten, de ATTACHED.txt als bijlage meegeven aub)
            • checkup.txt

            .

            Emphyrio
            Malware Research [email protected] (MBAM) ..... ASAP & Unite Member
            E Dev * McAfee verwijderen. * Ccleaner * E-Peek

            Comment


            • #7
              Hierbij de drie bestanden:
              1. AdwCleaner:

              # AdwCleaner v3.307 - Rapport aangemaakt 19/08/2014 op 18:15:56
              # Laatste Update 17/08/2014 door Xplode
              # Besturingssysteem : Windows 7 Home Premium (64 bits)
              # Gebruikersnaam : Paul Loomans - PAULLAPTOP
              # Gestart vanuit : C:\Users\Paul Loomans\Desktop\adwcleaner_3.307.exe
              # Optie : Verwijderen

              ***** [ Services ] *****


              ***** [ Bestanden / Mappen ] *****

              Map Verwijderd : C:\ProgramData\PC Optimizer Pro
              Map Verwijderd : C:\ProgramData\WinMaximizer
              Map Verwijderd : C:\Program Files (x86)\SpeedItup Free
              Map Verwijderd : C:\Program Files (x86)\Toolbar Cleaner
              Map Verwijderd : C:\Program Files\PC Optimizer Pro
              Map Verwijderd : C:\Users\Paul Loomans\AppData\Local\Bundled software uninstaller
              Map Verwijderd : C:\Users\Paul Loomans\AppData\Roaming\Mozilla\Firefox\Profiles\d9tw9nhc.default\Extensions\{d0d3f03e-b5f1-41e6-9b14-3741bb0a9c32}
              Map Verwijderd : C:\Users\Paul Loomans\AppData\Roaming\Mozilla\Firefox\Profiles\d9tw9nhc.default\Extensions\staged\{d0d3f03e-b5f1-41e6-9b14-3741bb0a9c32}

              ***** [ Taken ] *****

              Taak Verwijderd : LaunchSignup

              ***** [ Snelkoppelingen ] *****

              Snelkoppeling Gedesinfecteerd : C:\Users\Paul Loomans\Desktop\Payroll works inloggen.lnk

              ***** [ Register ] *****

              Sleutel Verwijderd : HKCU\Software\Microsoft\Internet Explorer\MenuExt\Translate with Babylon
              Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\BabylonHelper.EXE
              Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\NCTAudioCDGrabber2.DLL
              Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Prod.cap
              Sleutel Verwijderd : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
              Sleutel Verwijderd : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\adawarebp_rasapi32
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\adawarebp_rasmancs
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASAPI32
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASMANCS
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASAPI32
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker-1_RASMANCS
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASAPI32
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASMANCS
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASMANCS
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASAPI32
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASMANCS
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\biclient_RASAPI32
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\biclient_RASMANCS
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\wajam_download_RASAPI32
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\wajam_download_RASMANCS
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_rasapi32
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_rasmancs
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_voor_audacity_RASAPI32
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_voor_audacity_RASMANCS
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_voor_autodesk-maya_RASAPI32
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_voor_autodesk-maya_RASMANCS
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_voor_free-audio-converter_RASAPI32
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_voor_free-audio-converter_RASMANCS
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_voor_gtaiv-patch_RASAPI32
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_voor_gtaiv-patch_RASMANCS
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_voor_steam_RASAPI32
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_voor_steam_RASMANCS
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_voor_utorrent_RASAPI32
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_voor_utorrent_RASMANCS
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_voor_vlc-media-player_RASAPI32
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_voor_vlc-media-player_RASMANCS
              Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\{6536801B-F50C-449B-9476-093DFD3789E3}
              Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
              Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{5EB0259D-AB79-4AE6-A6E6-24FFE21C3DA4}
              Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{CADAF6BE-BF50-4669-8BFD-C27BD4E6181B}
              Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
              Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
              Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
              Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
              Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
              Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
              Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
              Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
              Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
              Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
              Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25A3A431-30BB-47C8-AD6A-E1063801134F}
              Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
              Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}
              Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F72841F0-4EF1-4DF5-BCE5-B3AC8ACF5478}
              Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25A3A431-30BB-47C8-AD6A-E1063801134F}
              Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
              Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}
              Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{2BEF239C-752E-4001-8048-F256E0D8CD93}
              Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
              Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
              Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{49C00A51-6E59-41FE-B3FA-2D2157FAD67B}
              Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{6DFF5DBA-AE3A-46DB-B301-ECFFC6DB2982}
              Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
              Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{DE34CD67-F1C8-4001-9A23-B8A68F63F377}
              Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
              Sleutel Verwijderd : HKCU\Software\APN PIP
              Sleutel Verwijderd : HKCU\Software\AVG Nation toolbar
              Sleutel Verwijderd : HKCU\Software\Conduit
              Sleutel Verwijderd : HKCU\Software\pc optimizer pro
              Sleutel Verwijderd : HKCU\Software\WinMaximizer
              Sleutel Verwijderd : HKCU\Software\AppDataLow\Software\SmartBar
              Sleutel Verwijderd : HKLM\SOFTWARE\adawaretb
              Sleutel Verwijderd : HKLM\SOFTWARE\AVG Nation toolbar
              Sleutel Verwijderd : HKLM\SOFTWARE\AVG Secure Search
              Sleutel Verwijderd : HKLM\SOFTWARE\AVG Security Toolbar
              Sleutel Verwijderd : HKLM\SOFTWARE\Conduit
              Sleutel Verwijderd : HKLM\SOFTWARE\PIP
              Sleutel Verwijderd : HKLM\SOFTWARE\Toolbar Cleaner
              Sleutel Verwijderd : HKLM\SOFTWARE\WinMaximizer
              Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Toolbar Cleaner
              Sleutel Verwijderd : [x64] HKLM\SOFTWARE\pc optimizer pro
              Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4

              ***** [ Browsers ] *****

              -\\ Internet Explorer v8.0.7600.17267


              -\\ Mozilla Firefox v19.0.2 (nl)

              [ Bestand : C:\Users\Paul Loomans\AppData\Roaming\Mozilla\Firefox\Profiles\d9tw9nhc.default\prefs.js ]

              Regel verwijderd : user_pref("CT3281174_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1398946403704,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
              Regel verwijderd : user_pref("plugin.state.npconduitfirefoxplugin", 2);
              Regel verwijderd : user_pref("smartbar.machineId", "SBTDQJWCMLTDQNFCEJZQWUITDZZFAV3SHKE/QO8U5UDLLDMEIFJPKEJNZDV7NJOIVOLJ6JBM88T9CUTFCZOZMG");

              -\\ Google Chrome v

              [ Bestand : C:\Users\Paul Loomans\AppData\Local\Google\Chrome\User Data\Default\preferences ]


              *************************

              AdwCleaner[R0].txt - [9816 octets] - [19/08/2014 18:12:37]
              AdwCleaner[S0].txt - [9578 octets] - [19/08/2014 18:15:56]

              ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [9638 octets] ##########

              2.DDS

              DDS (Ver_2012-11-20.01) - NTFS_AMD64
              Internet Explorer: 8.0.7600.17267 BrowserJavaVersion: 10.67.2
              Run by Paul Loomans at 19:51:16 on 2014-08-19
              Microsoft Windows 7 Home Premium 6.1.7600.0.1252.31.1043.18.3892.1494 [GMT 2:00]
              .
              AV: AVG AntiVirus Free Edition 2014 *Enabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
              SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
              SP: AVG AntiVirus Free Edition 2014 *Enabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}
              .
              ============== Running Processes ===============
              .
              c:\PROGRA~2\AVG\AVG2014\avgrsa.exe
              C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
              C:\Windows\system32\lsm.exe
              C:\Windows\system32\svchost.exe -k DcomLaunch
              C:\Windows\system32\nvvsvc.exe
              C:\Windows\system32\svchost.exe -k RPCSS
              C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe
              C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
              C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
              C:\Windows\system32\svchost.exe -k netsvcs
              C:\Windows\system32\svchost.exe -k LocalService
              C:\Windows\system32\nvvsvc.exe
              C:\Windows\system32\svchost.exe -k NetworkService
              C:\Windows\system32\WLANExt.exe
              C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
              C:\Windows\System32\spoolsv.exe
              C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
              C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
              C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
              C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
              C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
              C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
              C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
              C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
              C:\ProgramData\DatacardService\DCService.exe
              C:\Windows\system32\EscSvc64.exe
              C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
              C:\Program Files (x86)\EPSON\MyEPSON Connect\mepService.exe
              C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
              C:\Windows\splwow64.exe
              C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
              C:\Windows\SysWOW64\Rezip.exe
              C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
              C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
              C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
              C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
              C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
              C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
              C:\Windows\system32\svchost.exe -k bthsvcs
              C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
              C:\Program Files (x86)\EPSON\MyEPSON Connect\mep.exe
              C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe
              C:\Windows\system32\taskeng.exe
              C:\Windows\system32\taskhost.exe
              C:\Windows\splwow64.exe
              C:\Windows\system32\Dwm.exe
              C:\Windows\Explorer.EXE
              C:\Program Files (x86)\Samsung\Samsung Recovery Solution 4\WCScheduler.exe
              C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe
              C:\Program Files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe
              C:\ProgramData\DatacardService\DCSHelper.exe
              C:\Windows\System32\hkcmd.exe
              C:\Windows\System32\igfxpers.exe
              C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
              C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
              C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
              C:\Program Files\Windows Sidebar\sidebar.exe
              C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
              C:\Users\Paul Loomans\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
              C:\Program Files (x86)\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe
              C:\Users\Paul Loomans\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe
              C:\Windows\System32\spool\drivers\x64\3\E_IATILEE.EXE
              C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
              C:\Windows\system32\NOTEPAD.EXE
              C:\Windows\system32\igfxext.exe
              C:\Windows\system32\igfxsrvc.exe
              C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
              C:\Windows\system32\svchost.exe -k SDRSVC
              C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
              C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
              C:\Program Files (x86)\Brownie\BrStsW64.exe
              C:\Windows\system32\SearchIndexer.exe
              C:\Program Files (x86)\AVG\AVG2014\avgui.exe
              C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
              C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
              C:\Windows\SysWOW64\RunDll32.exe
              C:\Program Files (x86)\Brownie\brpjp04a.exe
              C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
              C:\Program Files\Windows Media Player\wmpnetwk.exe
              C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
              C:\Windows\SysWOW64\ctfmon.exe
              C:\Users\Paul Loomans\AppData\Local\Google\Chrome\Application\chrome.exe
              C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE
              C:\Users\Paul Loomans\AppData\Local\Google\Chrome\Application\chrome.exe
              C:\Users\Paul Loomans\AppData\Local\Google\Chrome\Application\chrome.exe
              C:\Users\Paul Loomans\AppData\Local\Google\Chrome\Application\chrome.exe
              C:\Users\Paul Loomans\AppData\Local\Google\Chrome\Application\chrome.exe
              C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
              C:\Users\Paul Loomans\AppData\Local\Google\Chrome\Application\chrome.exe
              C:\Windows\System32\svchost.exe -k LocalServicePeerNet
              C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
              C:\Users\Paul Loomans\AppData\Local\Google\Chrome\Application\chrome.exe
              C:\Users\Paul Loomans\Desktop\SecurityCheck.exe
              C:\Windows\SysWOW64\cmd.exe
              C:\Windows\SysWOW64\notepad.exe
              C:\Users\Paul Loomans\AppData\Local\Google\Chrome\Application\chrome.exe
              C:\Windows\system32\SearchProtocolHost.exe
              C:\Users\Paul Loomans\Desktop\Defogger (1).exe
              C:\Windows\system32\SearchFilterHost.exe
              C:\Windows\system32\taskeng.exe
              C:\Windows\system32\wbem\wmiprvse.exe
              C:\Windows\System32\cscript.exe
              .
              ============== Pseudo HJT Report ===============
              .
              uStart Page = hxxp://www.google.com/ig/redirectdomain?brand=smsn&bmod=smsn
              mWinlogon: Userinit = userinit.exe,
              BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
              BHO: Aanmeldhulp voor Windows Live ID: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
              BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
              BHO: Skype Click to Call for Internet Explorer: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
              BHO: Google Toolbar Notifier BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll
              BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL
              BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
              TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
              TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
              uRun: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
              uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
              uRun: [Google Update] "C:\Users\Paul Loomans\AppData\Local\Google\Update\GoogleUpdate.exe" /c
              uRun: [HW_OPENEYE_OUC_Mobile Partner] "C:\Program Files (x86)\Mobile Partner\UpdateDog\ouc.exe"
              uRun: [TomTomHOME.exe] "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"
              uRun: [Spotify Web Helper] "C:\Users\Paul Loomans\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
              uRun: [Google+ Auto Backup] "C:\Users\Paul Loomans\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe" /autostart
              uRun: [EPLTarget\P0000000000000000] C:\Windows\System32\spool\DRIVERS\x64\3\E_IATILEE.EXE /EPT "EPLTarget\P0000000000000000" /M "XP-412 413 415 Series"
              mRun: [UpdateLBPShortCut] "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
              mRun: [UpdateP2GoShortCut] "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
              mRun: [UpdatePDRShortCut] "C:\Program Files (x86)\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\PowerDirector" UpdateWithCreateOnce "Software\CyberLink\PowerDirector\7.0"
              mRun: [PDVD8LanguageShortcut] "C:\Program Files (x86)\CyberLink\PowerDVD8\Language\Language.exe"
              mRun: [UpdatePPShortCut] "C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\PowerProducer" UpdateWithCreateOnce "Software\CyberLink\PowerProducer\5.0"
              mRun: [UpdatePSTShortCut] "C:\Program Files (x86)\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter"
              mRun: [UCam_Menu] "C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\2.0"
              mRun: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
              mRun: [PMBVolumeWatcher] C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
              mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
              mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
              mRun: [BrStsWnd] C:\Program Files (x86)\Brownie\BrstsW64.exe Autorun
              mRun: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
              mRun: [EEventManager] "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
              mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
              StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\BLUETO~1.LNK - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
              mPolicies-Explorer: NoActiveDesktop = dword:1
              mPolicies-Explorer: NoActiveDesktopChanges = dword:1
              mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
              mPolicies-System: ConsentPromptBehaviorUser = dword:3
              mPolicies-System: EnableUIADesktopToggle = dword:0
              mPolicies-System: EnableSecureUIAPath = dword:1
              IE: &Verzenden naar OneNote - C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
              IE: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr/200
              IE: Afbeelding verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
              IE: E&xporteren naar Microsoft Excel - C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
              IE: Pagina verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
              IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
              IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
              IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
              IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
              IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
              DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
              DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
              DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab
              TCP: NameServer = 192.168.2.2
              TCP: Interfaces\{1D129297-FE5F-45C9-853B-D2B23A6FE9F8} : NameServer = 194.151.228.34 194.151.228.50
              TCP: Interfaces\{9A42A558-ADD1-4BEC-A30B-6328DD496273} : DHCPNameServer = 192.168.2.2
              TCP: Interfaces\{AD754EFD-C3EA-4743-BDA8-CEE8A1A5CA0C} : NameServer = 194.151.228.34 194.151.228.50
              TCP: Interfaces\{DA9CAA04-9DE9-4E42-BFE4-D6632D10E054} : NameServer = 194.151.228.34 194.151.228.50
              TCP: Interfaces\{DCD9CA77-1DD9-445C-94F7-101728EEB58B} : DHCPNameServer = 192.168.2.2
              TCP: Interfaces\{DCD9CA77-1DD9-445C-94F7-101728EEB58B}\3596475636F6D6146403634493 : DHCPNameServer = 192.168.0.1
              TCP: Interfaces\{DCD9CA77-1DD9-445C-94F7-101728EEB58B}\A5978554C4F5142474E4F513 : DHCPNameServer = 212.98.37.128 194.230.55.99
              TCP: Interfaces\{DCD9CA77-1DD9-445C-94F7-101728EEB58B}\B405E4D265746573531393343353644333 : DHCPNameServer = 192.168.1.254
              TCP: Interfaces\{DCD9CA77-1DD9-445C-94F7-101728EEB58B}\B4C6162756E6265656B684579637A656 : DHCPNameServer = 192.168.2.254
              TCP: Interfaces\{DCD9CA77-1DD9-445C-94F7-101728EEB58B}\D416C69637368616 : DHCPNameServer = 192.168.1.1
              Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
              Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - <orphaned>
              Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
              Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
              Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
              AppInit_DLLs= C:\Windows\SysWOW64\nvinit.dll
              SSODL: WebCheck - <orphaned>
              x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
              x64-BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
              x64-BHO: Skype Click to Call for Internet Explorer: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
              x64-BHO: Google Toolbar Notifier BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg64.dll
              x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL
              x64-TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
              x64-Run: [IgfxTray] C:\Windows\System32\igfxtray.exe
              x64-Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe
              x64-Run: [Persistence] C:\Windows\System32\igfxpers.exe
              x64-Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\System32\NvCpl.dll,NvStartup
              x64-Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
              x64-Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe
              x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
              x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
              x64-IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
              x64-IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
              x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
              x64-Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - <orphaned>
              x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
              x64-Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll
              x64-Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - <orphaned>
              x64-Notify: igfxcui - igfxdev.dll
              x64-SSODL: WebCheck - <orphaned>
              .
              ================= FIREFOX ===================
              .
              FF - ProfilePath - C:\Users\Paul Loomans\AppData\Roaming\Mozilla\Firefox\Profiles\d9tw9nhc.default\
              FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
              FF - plugin: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
              FF - plugin: C:\Program Files (x86)\ABN AMRO e.dentifier2\Mozilla\npBECON.dll
              FF - plugin: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
              FF - plugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
              FF - plugin: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
              FF - plugin: C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll
              FF - plugin: C:\Program Files (x86)\Java\jre7\bin\dtplugin\npdeployJava1.dll
              FF - plugin: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
              FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrlui.dll
              FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npwachk.dll
              FF - plugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
              FF - plugin: C:\Program Files (x86)\Sony\Media Go\npMediaGoDetector.dll
              FF - plugin: C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll
              FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
              FF - plugin: C:\Users\Paul Loomans\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll
              FF - plugin: C:\Users\Paul Loomans\AppData\Roaming\Mozilla\Firefox\Profiles\d9tw9nhc.default\extensions\{d0d3f03e-b5f1-41e6-9b14-3741bb0a9c32}\plugins\np-mswmp.dll
              FF - plugin: C:\Users\Paul Loomans\AppData\Roaming\Mozilla\Firefox\Profiles\d9tw9nhc.default\extensions\{d0d3f03e-b5f1-41e6-9b14-3741bb0a9c32}\plugins\npFirefoxPlugin.dll
              FF - plugin: C:\Users\Paul Loomans\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
              FF - plugin: C:\Users\Paul Loomans\AppData\Roaming\Mozilla\plugins\npo1d.dll
              FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_171.dll
              .
              ============= SERVICES / DRIVERS ===============
              .
              R0 AVGIDSHA;AVGIDSHA;C:\Windows\System32\drivers\avgidsha.sys [2014-6-17 190744]
              R0 Avgloga;AVG Logging Driver;C:\Windows\System32\drivers\avgloga.sys [2014-6-17 328984]
              R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;C:\Windows\System32\drivers\avgmfx64.sys [2014-6-17 123672]
              R0 Avgrkx64;AVG Anti-Rootkit Driver;C:\Windows\System32\drivers\avgrkx64.sys [2014-6-17 31512]
              R0 gfibto;gfibto;C:\Windows\System32\drivers\gfibto.sys [2013-1-16 14456]
              R0 RapportKE64;RapportKE64;C:\Windows\System32\drivers\RapportKE64.sys [2013-7-2 358616]
              R1 Avgdiska;AVG Disk Driver;C:\Windows\System32\drivers\avgdiska.sys [2014-6-30 152344]
              R1 AVGIDSDriver;AVGIDSDriver;C:\Windows\System32\drivers\avgidsdrivera.sys [2014-6-17 242968]
              R1 Avgldx64;AVG AVI Loader Driver;C:\Windows\System32\drivers\avgldx64.sys [2014-6-17 235800]
              R1 Avgtdia;AVG TDI Driver;C:\Windows\System32\drivers\avgtdia.sys [2014-6-17 269080]
              R1 RapportCerberus_69875;RapportCerberus_69875;C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerber us\baseline\RapportCerberus64_69875.sys [2014-8-17 631128]
              R1 RapportEI64;RapportEI64;C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [2014-7-10 299736]
              R1 RapportPG64;RapportPG64;C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys [2014-7-10 414296]
              R1 SABI;SAMSUNG Kernel Driver For Windows 7;C:\Windows\System32\drivers\SABI.sys [2010-6-24 13824]
              R2 AVGIDSAgent;AVGIDSAgent;C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [2014-8-11 3244048]
              R2 avgwd;AVG WatchDog;C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [2014-8-11 289328]
              R2 c2cautoupdatesvc;Skype Click to Call Updater;C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-7-14 1390176]
              R2 c2cpnrsvc;Skype Click to Call PNR Service;C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-7-14 1767520]
              R2 DCService.exe;DCService.exe;C:\ProgramData\DatacardService\DCService.exe [2010-9-29 249856]
              R2 EpsonScanSvc;Epson Scanner Service;C:\Windows\System32\escsvc64.exe [2014-1-22 144560]
              R2 MyEPSON Connect Service;MyEPSON Connect Service;C:\Program Files (x86)\epson\MyEPSON Connect\mepService.exe [2012-10-1 703616]
              R2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [2011-3-15 428384]
              R2 RapportMgmtService;Rapport Management Service;C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [2014-7-10 1886488]
              R2 Rezip;Rezip;C:\Windows\SysWOW64\Rezip.exe [2010-6-24 311296]
              R2 TomTomHOMEService;TomTomHOMEService;C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2012-1-23 92592]
              R2 UNS;Intel(R) Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-6-24 2320920]
              R3 btwampfl;Bluetooth AMP USB Filter;C:\Windows\System32\drivers\btwampfl.sys [2010-11-2 340520]
              R3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\System32\drivers\btwl2cap.sys [2010-11-2 39464]
              R3 HECIx64;Intel(R) Management Engine Interface;C:\Windows\System32\drivers\HECIx64.sys [2010-6-25 56344]
              R3 huawei_enumerator;huawei_enumerator;C:\Windows\System32\drivers\ew_jubusenum.sys [2011-4-14 86016]
              R3 Impcd;Impcd;C:\Windows\System32\drivers\Impcd.sys [2010-6-25 158976]
              R3 IntcDAud;Intel(R) Display Audio;C:\Windows\System32\drivers\IntcDAud.sys [2010-6-25 271872]
              R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\System32\drivers\yk62x64.sys [2009-9-28 395264]
              S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
              S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
              S2 SkypeUpdate;Skype Updater;D:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
              S3 e.dentifier2;SmartCard Reader ABN AMRO e.dentifier2;C:\Windows\System32\drivers\aabed2.sys [2008-3-20 28672]
              S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;C:\Windows\System32\drivers\ew_hwusbdev.sys [2011-4-14 117248]
              S3 ewusbnet;HUAWEI USB-NDIS miniport;C:\Windows\System32\drivers\ewusbnet.sys [2011-4-14 256000]
              S3 fssfltr;fssfltr;C:\Windows\System32\drivers\fssfltr.sys [2010-12-15 48488]
              S3 fsssvc;Windows Live Family Safety Service;C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2011-5-13 1492840]
              S3 ggflt;SEMC USB Flash Driver Filter;C:\Windows\System32\drivers\ggflt.sys [2012-8-27 14448]
              S3 MBAMSwissArmy;MBAMSwissArmy;C:\Windows\System32\drivers\MBAMSwissArmy.sys [2014-7-6 122584]
              S3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2009-6-10 187392]
              S3 Sony PC Companion;Sony PC Companion;C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2012-5-23 155320]
              S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2011-5-10 51712]
              S3 WatAdminSvc;Windows Activation Technologies-service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-11-17 1255736]
              .
              =============== Created Last 30 ================
              .
              2014-08-19 16:14:43 536576 ----a-w- C:\Windows\SysWow64\sqlite3.dll
              2014-08-19 16:12:29 -------- d-----w- C:\AdwCleaner
              2014-08-17 13:33:42 98216 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
              2014-08-17 11:44:47 526848 ----a-w- C:\Windows\System32\aepdu.dll
              2014-08-17 11:44:43 424448 ----a-w- C:\Windows\System32\aeinv.dll
              2014-08-17 11:35:28 -------- d-----w- C:\Program Files (x86)\Display
              2014-08-17 11:04:46 -------- d-----w- C:\Program Files (x86)\Display Offer
              2014-08-17 10:56:14 -------- d-----w- C:\Program Files (x86)\Skype
              2014-08-05 17:20:22 227728 ----a-w- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.dll
              2014-08-05 17:20:22 227728 ----a-w- C:\Program Files (x86)\Internet Explorer\Plugins\nppdf32.dll
              .
              ==================== Find3M ====================
              .
              2014-08-19 14:18:11 122584 ----a-w- C:\Windows\System32\drivers\MBAMSwissArmy.sys
              2014-07-10 17:23:38 358616 ----a-w- C:\Windows\System32\drivers\RapportKE64.sys
              2014-06-30 10:43:02 152344 ----a-w- C:\Windows\System32\drivers\avgdiska.sys
              2014-06-17 14:21:34 235800 ----a-w- C:\Windows\System32\drivers\avgldx64.sys
              2014-06-17 14:07:12 328984 ----a-w- C:\Windows\System32\drivers\avgloga.sys
              2014-06-17 14:06:58 269080 ----a-w- C:\Windows\System32\drivers\avgtdia.sys
              2014-06-17 14:06:24 190744 ----a-w- C:\Windows\System32\drivers\avgidsha.sys
              2014-06-17 14:06:22 242968 ----a-w- C:\Windows\System32\drivers\avgidsdrivera.sys
              2014-06-17 14:06:20 123672 ----a-w- C:\Windows\System32\drivers\avgmfx64.sys
              2014-06-17 14:06:06 31512 ----a-w- C:\Windows\System32\drivers\avgrkx64.sys
              .
              ============= FINISH: 19:52:11,72 ===============

              3. checkup.txt

              Results of screen317's Security Check version 0.99.87
              Windows 7 x64 (UAC is enabled)
              Out of date service pack!!
              ``````````````Antivirus/Firewall Check:``````````````
              AVG AntiVirus Free Edition 2014
              Antivirus up to date!
              `````````Anti-malware/Other Utilities Check:`````````
              AVG PC Tuneup 2011
              JavaFX 2.1.1
              Java 7 Update 67
              Java(TM) 6 Update 33
              Adobe Flash Player 11.6.602.171 Flash Player out of Date!
              Adobe Reader XI
              Mozilla Firefox 19.0.2 Firefox out of Date!
              Google Chrome 36.0.1985.125
              Google Chrome 36.0.1985.143
              ````````Process Check: objlist.exe by Laurent````````
              AVG avgwdsvc.exe
              `````````````````System Health check`````````````````
              Total Fragmentation on Drive C: 1%
              ````````````````````End of Log``````````````````````
              Bijgevoegde Bestanden

              Comment


              • #8
                Verwijder Java(TM) 6 Update 33
                Update je Windows naar SP1 !
                Update je Firefox

                Als je dat hebt gedaan, post je een verse DDS log.
                Malware Research [email protected] (MBAM) ..... ASAP & Unite Member
                E Dev * McAfee verwijderen. * Ccleaner * E-Peek

                Comment


                • #9
                  Ik heb de java update 33 verwijderd, maar Windows update geeft nog steeds niet aan dat SP1 beschikbaar is.
                  Moet ik hem elders downloaden?

                  Comment


                  • #10
                    Elders? Nee, enkel bij Microsft Windows

                    We gaan eerst het een en ander repareren......


                    Download Windows Repair (All in One) en installeer het.

                    http://www.majorgeeks.com/files/deta...ws_repair.html

                    Start het op en gan naar het tabblad "Start Repairs"
                    Klik vervolgens achtereen op "Start" en "Nee"
                    Je gaat nu een venster zien met nummers(1-31)
                    Klik op "Unselect All"

                    Nu selecteer je de volgende nummers: 01-02-03-05-06-07-09-10-14-15-17-21-26

                    Vink (rechtsonder) "restart/shutdown system when finnished" aan.
                    Selecteer: "Restart System"
                    Klik op "Start".
                    (Sluit wel alle nog openstaande vensters, inclusief je browser, behalve Windows Repair uiteraard)

                    Laat het tool zijn werk doen.
                    Na een herstart kan/zal er een log verschijnen, die mag je posten.
                    Malware Research [email protected] (MBAM) ..... ASAP & Unite Member
                    E Dev * McAfee verwijderen. * Ccleaner * E-Peek

                    Comment


                    • #11
                      Gedaan. Er verschijnt geen log bij de herstart. Windows update geeft nog steeds niet aan dat SP1 beschikbaar is.

                      Comment


                      • #12
                        De logs vind je in C:\Program Files\Tweaking.com\Windows Repair (All in One)\Logs
                        Malware Research [email protected] (MBAM) ..... ASAP & Unite Member
                        E Dev * McAfee verwijderen. * Ccleaner * E-Peek

                        Comment


                        • #13
                          Hierbij het Repair-log.
                          De andere logjes zitten in de bijlage.
                          De laptop start nu al sneller op.


                          System Variables
                          --------------------------------------------------------------------------------
                          OS: Windows 7 Home Premium
                          OS Architecture: 64-bit
                          OS Version: 6.1.7600
                          OS Service Pack:
                          Computer Name: PAULLAPTOP
                          Windows Drive: C:\
                          Windows Path: C:\Windows
                          Program Files: C:\Program Files
                          Program Files (x86): C:\Program Files (x86)
                          Current Profile: C:\Users\Paul Loomans
                          Current Profile SID: S-1-5-21-424029373-3133588626-198081680-1001
                          Current Profile Classes: S-1-5-21-424029373-3133588626-198081680-1001_Classes
                          Profiles Location: C:\Users
                          Profiles Location 2: C:\Windows\ServiceProfiles
                          Local Settings AppData: C:\Users\Paul Loomans\AppData\Local
                          --------------------------------------------------------------------------------

                          System Information
                          --------------------------------------------------------------------------------
                          System Up Time: 0 Days 00:54:59

                          Process Count: 96
                          Commit Total: 1,90 GB
                          Commit Limit: 7,60 GB
                          Commit Peak: 3,22 GB
                          Handle Count: 27669
                          Kernel Total: 450,11 MB
                          Kernel Paged: 344,93 MB
                          Kernel Non Paged: 105,18 MB
                          System Cache: 17,39 GB
                          Thread Count: 1161
                          --------------------------------------------------------------------------------

                          Memory Before Cleaning with CleanMem
                          --------------------------------------------------------------------------------
                          Memory Total: 3,80 GB
                          Memory Used: 1,71 GB(45,0038%)
                          Memory Avail.: 2,09 GB
                          --------------------------------------------------------------------------------

                          Cleaning Memory Before Starting Repairs...

                          Memory After Cleaning with CleanMem
                          --------------------------------------------------------------------------------
                          Memory Total: 3,80 GB
                          Memory Used: 1,47 GB(38,7724%)
                          Memory Avail.: 2,33 GB
                          --------------------------------------------------------------------------------

                          Starting Repairs...
                          Started at (20-8-2014 9:11:18)

                          01 - Reset Registry Permissions 01/03
                          HKEY_CURRENT_USER & Sub Keys
                          Start (20-8-2014 9:11:21)
                          Running Repair Under Current User Account
                          Done (20-8-2014 9:12:07)

                          01 - Reset Registry Permissions 02/03
                          HKEY_LOCAL_MACHINE & Sub Keys
                          Start (20-8-2014 9:12:07)
                          Running Repair Under System Account
                          Done (20-8-2014 9:20:35)

                          01 - Reset Registry Permissions 03/03
                          HKEY_CLASSES_ROOT & Sub Keys
                          Start (20-8-2014 9:20:35)
                          Running Repair Under System Account
                          Done (20-8-2014 9:22:47)

                          02 - Reset File Permissions: C:
                          C: & Sub Folders
                          Start (20-8-2014 9:22:47)
                          Trying To Run Repair As Trusted Installer.
                          You will see a Interactive Services Detection Window.
                          The Repair Is Running In That Window.
                          This Is Normal And Will Go Away Once The Repair Is Finished.
                          Running Repair As Trusted Installer
                          Done (20-8-2014 9:41:42)

                          02 - Reset File Permissions: D:
                          D: & Sub Folders
                          Start (20-8-2014 9:41:42)
                          Trying To Run Repair As Trusted Installer.
                          You will see a Interactive Services Detection Window.
                          The Repair Is Running In That Window.
                          This Is Normal And Will Go Away Once The Repair Is Finished.
                          Running Repair As Trusted Installer
                          Done (20-8-2014 9:43:42)

                          02 - Reset File Permissions: All Profiles
                          C:\Users & Sub Folders
                          Start (20-8-2014 9:43:42)
                          Running Repair Under System Account
                          Done (20-8-2014 9:47:46)

                          02 - Reset File Permissions: Current Profile
                          C:\Users\Paul Loomans & Sub Folders
                          Start (20-8-2014 9:47:46)
                          Running Repair Under System Account
                          Done (20-8-2014 9:50:59)

                          02 - Reset File Permissions: Cleanup
                          Repairing Restricted Folders Permissions To Avoid Infinite Loops
                          Start (20-8-2014 9:50:59)
                          Running Repair Under Current User Account
                          Running Repair Under System Account
                          Done (20-8-2014 9:51:11)

                          03 - Reset Service Permissions
                          Start (20-8-2014 9:51:11)
                          Running Repair Under System Account
                          Done (20-8-2014 9:51:26)

                          05 - Repair WMI
                          Start (20-8-2014 9:51:26)

                          Starting Security Center So We Can Export The Security Info.

                          Exporting Antivirus Info...
                          AVG AntiVirus Free Edition 2014 Exported.

                          Exporting AntiSpyware Info...
                          Windows Defender Exported.
                          AVG AntiVirus Free Edition 2014 Exported.

                          Exporting 3rd Party Firewall Info...
                          No Firewall Products Reported.

                          Running Repair Under Current User Account
                          Done (20-8-2014 9:54:53)

                          06 - Repair Windows Firewall
                          Start (20-8-2014 9:54:53)
                          Running Repair Under Current User Account
                          Running Repair Under System Account
                          Done (20-8-2014 9:56:13)

                          07 - Repair Internet Explorer
                          Start (20-8-2014 9:56:13)
                          Running Repair Under Current User Account
                          Running Repair Under System Account
                          Done (20-8-2014 9:58:07)

                          09 - Repair Hosts File
                          Start (20-8-2014 9:58:07)
                          Running Repair Under System Account
                          Done (20-8-2014 9:58:08)

                          10 - Remove Policies Set By Infections
                          Start (20-8-2014 9:58:08)
                          Running Repair Under Current User Account
                          Running Repair Under System Account
                          Done (20-8-2014 9:58:10)

                          14 - Remove Temp Files
                          Start (20-8-2014 9:58:10)
                          Running Repair Under System Account
                          Done (20-8-2014 9:58:13)

                          15 - Repair Proxy Settings
                          Start (20-8-2014 9:58:13)
                          Running Repair Under Current User Account
                          Running Repair Under System Account
                          Done (20-8-2014 9:58:15)

                          17 - Repair Windows Updates
                          Start (20-8-2014 9:58:15)
                          Running Repair Under Current User Account
                          Running Repair Under System Account
                          Setting Windows Updates Files That Are In Use To Be Removed At Next Boot.
                          Done (20-8-2014 9:59:30)

                          21 - Repair MSI (Windows Installer)
                          Start (20-8-2014 9:59:30)
                          Running Repair Under Current User Account
                          Running Repair Under System Account
                          Done (20-8-2014 9:59:51)

                          26 - Restore Important Windows Services
                          Start (20-8-2014 9:59:51)
                          Running Repair Under Current User Account
                          Running Repair Under System Account
                          Done (20-8-2014 10:00:41)

                          Cleaning up empty logs...

                          All Selected Repairs Done.
                          Done at (20-8-2014 10:00:41)
                          Total Repair Time: 00:49:24


                          ...YOU MUST RESTART YOUR SYSTEM...
                          Running Repair Under Current User Account
                          Bijgevoegde Bestanden

                          Comment


                          • #14
                            Heb je je pc herstart ?
                            Malware Research [email protected] (MBAM) ..... ASAP & Unite Member
                            E Dev * McAfee verwijderen. * Ccleaner * E-Peek

                            Comment


                            • #15
                              Ja, Windows Updater toont nog steeds SP1 niet, hij start wel inmiddels met normale snelheid op.

                              Comment

                              Sorry, you are not authorized to view this page
                              Working...
                              X