Trage laptop

• 

  Randy

  14-05-2010 16:23

  Hallo allemaal,

  Mijn laptop is al een tijdje traag en ik weet niet waar het aan ligt!

  Ik heb al een aantal keren gelezen over hijack this, maar iedereen heeft een eigen log, dus ik zou niet weten wat ik met de mijne moet doen.

  Logfile of Trend Micro HijackThis v2.0.4

  Scan saved at 16:22:36, on 14-5-2010

  Platform: Windows Vista SP1 (WinNT 6.00.1905)

  MSIE: Internet Explorer v8.00 (8.00.6001.18904)

  Boot mode: Normal

  Running processes:

  C:\Windows\system32\Dwm.exe

  C:\Windows\system32\taskeng.exe

  C:\Windows\Explorer.EXE

  C:\Program Files\Windows Defender\MSASCui.exe

  C:\Program Files\Toshiba\ConfigFree\NDSTray.exe

  C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe

  C:\Program Files\Toshiba\Toshiba Online Product Information\TOPI.exe

  C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent.exe

  C:\Program Files\Apoint2K\Apoint.exe

  C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe

  C:\Program Files\Toshiba\Power Saver\TPwrMain.exe

  C:\Program Files\Toshiba\SmoothView\SmoothView.exe

  C:\Program Files\Toshiba\FlashCards\TCrdMain.exe

  C:\Program Files\Toshiba\HDMICtrlMan\HDMICtrlMan.exe

  C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe

  C:\Windows\WindowsMobile\wmdSync.exe

  C:\Program Files\Common Files\Java\Java Update\jusched.exe

  C:\Program Files\iTunes\iTunesHelper.exe

  C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe

  C:\Windows\ehome\ehtray.exe

  C:\Program Files\Windows Live\Messenger\msnmsgr.exe

  C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

  C:\Program Files\YouSendIt\Express\YouSendIt.exe

  G:\DAEMON Tools Lite\daemon.exe

  C:\Program Files\McAfee Security Scan\1.0.150\SSScheduler.exe

  C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

  C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

  C:\Windows\ehome\ehmsas.exe

  C:\Program Files\Apoint2K\ApMsgFwd.exe

  C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe

  C:\Program Files\Toshiba\HDMICtrlMan\HCMSoundChanger.exe

  C:\Program Files\Apoint2K\Apntex.exe

  C:\Program Files\Apoint2K\HidFind.exe

  C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

  C:\Windows\system32\wuauclt.exe

  C:\Program Files\Mozilla Firefox\firefox.exe

  C:\Windows\system32\conime.exe

  C:\Program Files\Norton Internet Security\Engine\17.0.0.136\ccSvcHst.exe

  C:\Program Files\Windows Sidebar\sidebar.exe

  C:\Program Files\Windows Sidebar\sidebar.exe

  C:\Program Files\Windows Sidebar\sidebar.exe

  C:\Windows\system32\taskeng.exe

  C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe

  C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

  O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

  O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

  O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

  O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\17.0.0.136\coIEPlg.dll

  O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\17.0.0.136\IPSBHO.DLL

  O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll

  O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

  O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

  O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\17.0.0.136\coIEPlg.dll

  O4 - HKLM\..\Run: %ProgramFiles%\Windows Defender\MSASCui.exe -hide

  O4 - HKLM\..\Run: NDSTray.exe

  O4 - HKLM\..\Run: C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe

  O4 - HKLM\..\Run: C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup

  O4 - HKLM\..\Run: “C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe”

  O4 - HKLM\..\Run: C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent.exe

  O4 - HKLM\..\Run: C:\Program Files\Apoint2K\Apoint.exe

  O4 - HKLM\..\Run: “C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe” /start

  O4 - HKLM\..\Run: %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE

  O4 - HKLM\..\Run: %ProgramFiles%\TOSHIBA\TBS\HSON.exe

  O4 - HKLM\..\Run: %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe

  O4 - HKLM\..\Run: %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe

  O4 - HKLM\..\Run: C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe

  O4 - HKLM\..\Run: C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe

  O4 - HKLM\..\Run: %windir%\WindowsMobile\wmdSync.exe

  O4 - HKLM\..\Run: “C:\Program Files\Common Files\Java\Java Update\jusched.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe” -launchedbylogin

  O4 - HKLM\..\Run: “C:\Program Files\QuickTime\QTTask.exe” -atboottime

  O4 - HKLM\..\Run: “C:\Program Files\iTunes\iTunesHelper.exe”

  O4 - HKLM\..\Run: C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe

  O4 - HKCU\..\Run: C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

  O4 - HKCU\..\Run: rundll32.exe oobefldr.dll,ShowWelcomeCenter

  O4 - HKCU\..\Run: C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe

  O4 - HKCU\..\Run: C:\Windows\ehome\ehTray.exe

  O4 - HKCU\..\Run: “C:\Program Files\Windows Live\Messenger\msnmsgr.exe” /background

  O4 - HKCU\..\Run: “C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe”

  O4 - HKCU\..\Run: C:\Program Files\YouSendIt\Express\YouSendIt.exe -ui none

  O4 - HKCU\..\Run: “G:\DAEMON Tools Lite\daemon.exe”

  O4 - HKCU\..\Run: C:\Users\bajb\AppData\Roaming\Microsoft\svchost.exe

  O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files\Toshiba\TRDCReminder\TRDCReminder.exe (User ‘Default user’)

  O4 - Startup: iPhoneRingToneMaker.lnk = G:\iPhoneRingToneMaker\iPhoneRingToneMaker.exe

  O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

  O4 - Global Startup: McAfee Security Scan.lnk = ?

  O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000

  O8 - Extra context menu item: Google Sidewiki… - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html

  O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

  O9 - Extra ‘Tools’ menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

  O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

  O9 - Extra ‘Tools’ menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

  O9 - Extra button: eBay - {76577871-04EC-495E-A12B-91F7C3600AFA} - http://www.webtip.ch/cgi-bin/toshiba/tracker_url2.pl?NL (file missing)

  O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

  O9 - Extra button: Amazon.co.uk - {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.co.uk/exec/obidos/redirect-home?tag=Toshibaukbholink-21&site=home (file missing)

  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL

  O16 - DPF: {4D2D3A17-9B46-483C-A5F4-1DC471080009} (Cisco NAC Web Agent Control) - https://cas-securelogin2.rocleeuwenborgh.nl/auth/taweb.cab

  O16 - DPF: {C9D7D239-B502-48B3-BA25-9DF8C7264073} (CCAWebLogin Control) - https://cas-securelogin2.rocleeuwenborgh.nl/auth/CCALogin.CAB

  O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

  O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

  O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

  O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GoogleDesktopNetwork3.dll

  O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

  O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - D:\Photoshop Elements 6\PhotoshopElementsFileAgent.exe (file missing)

  O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

  O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe

  O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

  O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe

  O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

  O23 - Service: Google Desktop Manager 5.7.802.22438 (GoogleDesktopManager-022208-143751) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

  O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

  O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

  O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

  O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files\Norton Internet Security\Engine\17.0.0.136\ccSvcHst.exe

  O23 - Service: O2Micro Flash Memory Card Service (o2flash) - O2Micro International - C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe

  O23 - Service: SmartFaceVWatchSrv - Toshiba - C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatchSrv.exe

  O23 - Service: Notebook Performance Tuning Service (TempoMonitoringService) - Toshiba Europe GmbH - C:\Program Files\Toshiba TEMPRO\TempoSVC.exe

  O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe

  O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe

  O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe

  O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

  O23 - Service: TOSHIBA SMART Log Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe

  O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

  O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

  –

  End of file - 12652 bytes

  Alvast bedankt voor al jullie hulp.

  Groetjes Randy

  Rapporteren
• 

  fazantje

  14-05-2010 16:48

  Hoi Randy,

  Je schreef:

  >>>Ik heb al een aantal keren gelezen over hijack this, maar iedereen heeft een eigen log, dus ik zou niet weten wat ik met de mijne moet doen.<<<

  Nog niets voor dat wij het zeggen;)

  Je mag/moet wel even alle stappen van de volgende link uitvoeren, want je hebt een besmetting op jou computer:

  http://antivirus.startpagina.nl/prikbord/4625317/voer-dit-eerst-uit-voordat-je-de-logjes-plaatst!!#msg-4625317

  Plaats hierna de 2 gevraagde logjes.

  Dus ook een nieuw HijackThis logje;)

  Succes,

  Huib:)

  

  Rapporteren
• 

  Randy

  15-05-2010 14:58

  Bij deze de 2 logjes!

  Logfile of Trend Micro HijackThis v2.0.4

  Scan saved at 14:56:22, on 15-5-2010

  Platform: Windows Vista SP1 (WinNT 6.00.1905)

  MSIE: Internet Explorer v8.00 (8.00.6001.18904)

  Boot mode: Normal

  Running processes:

  C:\Windows\system32\Dwm.exe

  C:\Windows\system32\taskeng.exe

  C:\Windows\Explorer.EXE

  C:\Program Files\Windows Defender\MSASCui.exe

  C:\Program Files\Toshiba\ConfigFree\NDSTray.exe

  C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe

  C:\Program Files\Toshiba\Toshiba Online Product Information\TOPI.exe

  C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent.exe

  C:\Program Files\Apoint2K\Apoint.exe

  C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe

  C:\Program Files\Toshiba\Power Saver\TPwrMain.exe

  C:\Program Files\Toshiba\SmoothView\SmoothView.exe

  C:\Program Files\Toshiba\FlashCards\TCrdMain.exe

  C:\Program Files\Toshiba\HDMICtrlMan\HDMICtrlMan.exe

  C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe

  C:\Windows\WindowsMobile\wmdSync.exe

  C:\Program Files\Common Files\Java\Java Update\jusched.exe

  C:\Program Files\iTunes\iTunesHelper.exe

  C:\Program Files\Toshiba\TOSCDSPD\TOSCDSPD.exe

  C:\Windows\ehome\ehtray.exe

  C:\Program Files\Windows Live\Messenger\msnmsgr.exe

  C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

  C:\Program Files\YouSendIt\Express\YouSendIt.exe

  G:\DAEMON Tools Lite\daemon.exe

  C:\Program Files\Windows Media Player\wmpnscfg.exe

  C:\Program Files\McAfee Security Scan\1.0.150\SSScheduler.exe

  C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

  C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

  C:\Windows\ehome\ehmsas.exe

  C:\Program Files\Apoint2K\ApMsgFwd.exe

  C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe

  C:\Program Files\Apoint2K\HidFind.exe

  C:\Program Files\Toshiba\HDMICtrlMan\HCMSoundChanger.exe

  C:\Program Files\Apoint2K\Apntex.exe

  C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

  C:\Program Files\Mozilla Firefox\firefox.exe

  C:\Windows\system32\conime.exe

  C:\Program Files\Norton Internet Security\Engine\17.0.0.136\ccSvcHst.exe

  C:\Program Files\Windows Sidebar\sidebar.exe

  C:\Program Files\Windows Sidebar\sidebar.exe

  C:\Program Files\Windows Sidebar\sidebar.exe

  C:\Windows\system32\taskeng.exe

  C:\Program Files\Windows Media Player\wmplayer.exe

  C:\Windows\system32\NOTEPAD.EXE

  C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

  O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

  O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

  O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

  O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\17.0.0.136\coIEPlg.dll

  O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\17.0.0.136\IPSBHO.DLL

  O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll

  O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

  O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

  O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\17.0.0.136\coIEPlg.dll

  O4 - HKLM\..\Run: %ProgramFiles%\Windows Defender\MSASCui.exe -hide

  O4 - HKLM\..\Run: NDSTray.exe

  O4 - HKLM\..\Run: C:\Program Files\Toshiba TEMPRO\Toshiba.Tempo.UI.TrayApplication.exe

  O4 - HKLM\..\Run: C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup

  O4 - HKLM\..\Run: “C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe”

  O4 - HKLM\..\Run: C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent.exe

  O4 - HKLM\..\Run: C:\Program Files\Apoint2K\Apoint.exe

  O4 - HKLM\..\Run: “C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe” /start

  O4 - HKLM\..\Run: %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE

  O4 - HKLM\..\Run: %ProgramFiles%\TOSHIBA\TBS\HSON.exe

  O4 - HKLM\..\Run: %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe

  O4 - HKLM\..\Run: %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe

  O4 - HKLM\..\Run: C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe

  O4 - HKLM\..\Run: C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe

  O4 - HKLM\..\Run: %windir%\WindowsMobile\wmdSync.exe

  O4 - HKLM\..\Run: “C:\Program Files\Common Files\Java\Java Update\jusched.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe” -launchedbylogin

  O4 - HKLM\..\Run: “C:\Program Files\QuickTime\QTTask.exe” -atboottime

  O4 - HKLM\..\Run: “C:\Program Files\iTunes\iTunesHelper.exe”

  O4 - HKLM\..\Run: C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe

  O4 - HKLM\..\Run: “C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe” /runcleanupscript

  O4 - HKCU\..\Run: C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

  O4 - HKCU\..\Run: rundll32.exe oobefldr.dll,ShowWelcomeCenter

  O4 - HKCU\..\Run: C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe

  O4 - HKCU\..\Run: C:\Windows\ehome\ehTray.exe

  O4 - HKCU\..\Run: “C:\Program Files\Windows Live\Messenger\msnmsgr.exe” /background

  O4 - HKCU\..\Run: “C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe”

  O4 - HKCU\..\Run: C:\Program Files\YouSendIt\Express\YouSendIt.exe -ui none

  O4 - HKCU\..\Run: “G:\DAEMON Tools Lite\daemon.exe”

  O4 - HKCU\..\Run: C:\Program Files\Windows Media Player\WMPNSCFG.exe

  O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files\Toshiba\TRDCReminder\TRDCReminder.exe (User ‘Default user’)

  O4 - Startup: iPhoneRingToneMaker.lnk = G:\iPhoneRingToneMaker\iPhoneRingToneMaker.exe

  O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

  O4 - Global Startup: McAfee Security Scan.lnk = ?

  O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000

  O8 - Extra context menu item: Google Sidewiki… - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html

  O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

  O9 - Extra ‘Tools’ menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

  O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

  O9 - Extra ‘Tools’ menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

  O9 - Extra button: eBay - {76577871-04EC-495E-A12B-91F7C3600AFA} - http://www.webtip.ch/cgi-bin/toshiba/tracker_url2.pl?NL (file missing)

  O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

  O9 - Extra button: Amazon.co.uk - {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.co.uk/exec/obidos/redirect-home?tag=Toshibaukbholink-21&site=home (file missing)

  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL

  O16 - DPF: {4D2D3A17-9B46-483C-A5F4-1DC471080009} (Cisco NAC Web Agent Control) - https://cas-securelogin2.rocleeuwenborgh.nl/auth/taweb.cab

  O16 - DPF: {C9D7D239-B502-48B3-BA25-9DF8C7264073} (CCAWebLogin Control) - https://cas-securelogin2.rocleeuwenborgh.nl/auth/CCALogin.CAB

  O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

  O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

  O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

  O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GoogleDesktopNetwork3.dll

  O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

  O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - D:\Photoshop Elements 6\PhotoshopElementsFileAgent.exe (file missing)

  O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

  O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe

  O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

  O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe

  O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

  O23 - Service: Google Desktop Manager 5.7.802.22438 (GoogleDesktopManager-022208-143751) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

  O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

  O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

  O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

  O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files\Norton Internet Security\Engine\17.0.0.136\ccSvcHst.exe

  O23 - Service: O2Micro Flash Memory Card Service (o2flash) - O2Micro International - C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe

  O23 - Service: SmartFaceVWatchSrv - Toshiba - C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatchSrv.exe

  O23 - Service: Notebook Performance Tuning Service (TempoMonitoringService) - Toshiba Europe GmbH - C:\Program Files\Toshiba TEMPRO\TempoSVC.exe

  O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe

  O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe

  O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe

  O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

  O23 - Service: TOSHIBA SMART Log Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe

  O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

  O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

  –

  End of file - 12825 bytes

  Malwarebytes' Anti-Malware 1.46

  www.malwarebytes.org

  Databaseversie: 4103

  Windows 6.0.6001 Service Pack 1

  Internet Explorer 8.0.6001.18904

  15-5-2010 14:54:16

  mbam-log-2010-05-15 (14-54-16).txt

  Scantype: Snelle scan

  Objecten gescand: 125611

  Verstreken tijd: 20 minuut/minuten, 56 seconde(n)

  Geheugenprocessen geïnfecteerd: 0

  Geheugenmodulen geïnfecteerd: 0

  Registersleutels geïnfecteerd: 0

  Registerwaarden geïnfecteerd: 1

  Registerdata geïnfecteerd: 0

  Mappen geïnfecteerd: 0

  Bestanden geïnfecteerd: 1

  Geheugenprocessen geïnfecteerd:

  (Geen kwaadaardige objecten gedetecteerd)

  Geheugenmodulen geïnfecteerd:

  (Geen kwaadaardige objecten gedetecteerd)

  Registersleutels geïnfecteerd:

  (Geen kwaadaardige objecten gedetecteerd)

  Registerwaarden geïnfecteerd:

  HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\svchost.exe (Trojan.Agent) -> Quarantined and deleted successfully.

  Registerdata geïnfecteerd:

  (Geen kwaadaardige objecten gedetecteerd)

  Mappen geïnfecteerd:

  (Geen kwaadaardige objecten gedetecteerd)

  Bestanden geïnfecteerd:

  C:\Windows\Prefetch\SYSTEM.EXE (Trojan.Agent) -> Quarantined and deleted successfully.

  Rapporteren
• 

  fazantje

  15-05-2010 20:26

  Hoi Randy,

  Start HijackThis op en klik op “Do a scan only” en vink de volgende regels aan:

  O9 - Extra button: eBay - {76577871-04EC-495E-A12B-91F7C3600AFA} - (file missing)

  O9 - Extra button: Amazon.co.uk - {8A918C1D-E123-4E36-B562-5C1519E434CE} - (file missing)

  Sluit alle vensters, behalve HijackThis en klik op Fix Checked.

  Start je computer opnieuw op en vertel hoe het met de traagheid is.

  Je hebt Norton op jou laptop, deze werkt ook zeer vertragend.

  Voer ook het schoonmaakplan eens uit:

  http://www.virushelp.nl/onderhoud.htm

  Succes,

  Huib:)

  

  Rapporteren
• 

  Jos H

  15-05-2010 20:47

  Hoeveel geheugen heeft je laptop en is de traagheid opgetreden na de update naar IE8.?

  Rapporteren
• 

  fazantje

  15-05-2010 21:01

  (tu) Had ik ff nog niet aan gedacht.

  Ook een optie is om Firefox te nemen i.p.v. IE8:

  http://www.mozilla-europe.org/nl/firefox/

  Groetjes Huib:)

  

  Rapporteren
• 

  Piet

  15-05-2010 21:14

  SP1 waarom geen update??

  Ook office eff updaten

  Rapporteren
• 

  Randy

  16-05-2010 22:43

  Hallo allen,

  Ten eerste bedankt voor jullie hulp.

  Verder wou ik melden dat ik van het weekend niet thuis geweest ben.

  Ik zal alles morgen uitvoeren.

  Ik gebruik internet explorer zoiezo niet dus ik zal deze verwijderen, ik gebruik firefox.

  Dan de volgende vraag: Heb ik Norton niet nodig dan?

  Alvast bedankt voor jullie antwoord.

  Groetjes Randy

  Rapporteren
• 

  fazantje

  16-05-2010 23:25

  Hoi Randy,

  Verwijder internet explorer niet!!!

  Norton is jou antivirusscanner, dus als dit een koop versie is, dan laten staan.

  Norton vergt wel veel van het geheugen.

  Als je toch besluit om norton te verwijderen, download en installeer dan wel een andere (gratis) virusscanner:

  http://www.avastav.nl/avast_antivirus_producten/avast_Free_Antivirus

  We zien je morgen wel weer.

  Succes,

  Huib:)

  

  Rapporteren
• 

  Randy

  17-05-2010 18:23

  Halloooo,

  Nou we hebben Norton bij de aanschaf van de laptop erbij gekregen.

  Dan heb ik nog 1 laatste vraag: Mijn internet is best traag, ligt dit aan de laptop of ligt dit aan de provider (Bij ons Ziggo).

  Alvast bedankt en zoiezo bedankt voor de hulp tot nu!

  Groetjes Randy

  Rapporteren