Hoe kom ik van seaport af?

• 

  Ben

  24-08-2011 13:19

  Hallo sipke,

  Verwijder eerst Ask toolbar.

  verwijderen middels configuratiescherm-software-Askm toolbar

  vervolgens de map askSBar verwijderen (c>program files>askSBar)

  Het eerste logje van mbam kan je terug vinden bij logbestanden (open mbam>open logbestanden0

  Mog hij daar staan plaats hem dan toch nog even?

  Start pc opnieuw en plaats daarna een nieuw Hijack this logje samen met het eerste mbam logje.

  http://2.bp.blogspot.com/_NAn8-ZItaHE/Scq3w6FaicI/AAAAAAAACVY/QqPkGy7EU7U/s320/school69.gif

  Ben

  Rapporteren
• 

  sipke

  25-08-2011 09:20

  Hier het logje maar je hebt er niets aan. Er is kennelijk op het moment dat mam klaar was een ander progje geweest die de laptob opnieuw op deed starten net voor mam zijn werk op kon slaan.

  23:37:49 sipke MESSAGE Protection started successfully

  23:37:59 sipke MESSAGE IP Protection started successfully

  23:39:01 sipke MESSAGE IP Protection stopped

  23:39:01 sipke MESSAGE Scheduled update executed successfully

  23:39:09 sipke MESSAGE Database updated successfully

  23:39:20 sipke MESSAGE IP Protection started successfully

  Overigens vond ik die shit van bing en seaport in programma's van configureatiescherm en heb het daar verwijderd, heb dat kennelijk eerder over het hoofd gezien. Ook die google update blijft al enige tijd achterwege zodat die problemen opgelost lijken.

  ask had ik al verwijderd en in program files kan ik geen resten vinden.

  Hieronder de recente hijack maar ik neem aan dat die voor 99% gelijk is aan de vorige.

  Logfile of Trend Micro HijackThis v2.0.4

  Scan saved at 9:19:34, on 25-8-2011

  Platform: Windows XP SP3 (WinNT 5.01.2600)

  MSIE: Internet Explorer v7.00 (7.00.6000.17099)

  Boot mode: Normal

  Running processes:

  C:\WINDOWS\System32\smss.exe

  C:\PROGRA~1\AVG\AVG10\avgchsvx.exe

  C:\WINDOWS\system32\winlogon.exe

  C:\WINDOWS\system32\services.exe

  C:\WINDOWS\system32\lsass.exe

  C:\WINDOWS\system32\svchost.exe

  C:\WINDOWS\System32\svchost.exe

  C:\Program Files\Sygate\SPF\smc.exe

  C:\WINDOWS\Explorer.EXE

  C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe

  C:\WINDOWS\system32\spoolsv.exe

  C:\Program Files\AVG\AVG10\avgwdsvc.exe

  C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE

  C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

  C:\Program Files\CyberLink\Shared Files\RichVideo.exe

  C:\Program Files\AVG\AVG10\avgnsx.exe

  C:\Program Files\AVG\AVG10\avgemcx.exe

  C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe

  C:\WINDOWS\RTHDCPL.EXE

  C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe

  C:\Program Files\Spamihilator\spamihilator.exe

  C:\WINDOWS\System32\DLA\DLACTRLW.EXE

  C:\Program Files\AVG\AVG10\avgtray.exe

  C:\Program Files\Canon\MyPrinter\BJMyPrt.exe

  C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE

  C:\Program Files\T-Mobile\T-Mobile Internet Manager\DataCardMonitor.exe

  C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

  C:\WINDOWS\system32\ctfmon.exe

  C:\Program Files\CyberLink\Power2Go\Power2GoExpress.exe

  C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe

  C:\Program Files\Microsoft Office\Office\OSA.EXE

  C:\Program Files\PCzapper\MediaManager\pbMediaCenter.exe

  C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe

  C:\WINDOWS\system32\svchost.exe

  C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe

  C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe

  C:\Program Files\OpenOffice.org 3\program\soffice.exe

  C:\Program Files\OpenOffice.org 3\program\soffice.bin

  C:\PROGRA~1\AVG\AVG10\avgrsx.exe

  C:\Program Files\AVG\AVG10\avgcsrvx.exe

  C:\Program Files\AVG\AVG10\avgscanx.exe

  C:\Program Files\AVG\AVG10\avgcsrvx.exe

  C:\Program Files\Internet Explorer\iexplore.exe

  C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ijshockey.com/

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

  R3 - URLSearchHook: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)

  O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

  O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

  O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll

  O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

  O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL

  O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

  O4 - HKLM\..\Run: Rundll32.exe SiSPower.dll,ModeAgent

  O4 - HKLM\..\Run: RTHDCPL.EXE

  O4 - HKLM\..\Run: SkyTel.EXE

  O4 - HKLM\..\Run: ALCMTR.EXE

  O4 - HKLM\..\Run: “C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe”

  O4 - HKLM\..\Run: “C:\Program Files\CyberLink\PowerDVD\Language\Language.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Spamihilator\spamihilator.exe”

  O4 - HKLM\..\Run: “C:\Program Files\QuickTime\qttask.exe” -atboottime

  O4 - HKLM\..\Run: C:\Program Files\Memorex Button Manager\MmrBtnMgr.exe

  O4 - HKLM\..\Run: C:\PROGRA~1\Sygate\SPF\smc.exe -startgui

  O4 - HKLM\..\Run: C:\WINDOWS\System32\DLA\DLACTRLW.EXE

  O4 - HKLM\..\Run: “C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe”

  O4 - HKLM\..\Run: C:\Program Files\AVG\AVG10\avgtray.exe

  O4 - HKLM\..\Run: C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon

  O4 - HKLM\..\Run: C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE /logon

  O4 - HKLM\..\Run: C:\Program Files\T-Mobile\T-Mobile Internet Manager\DataCardMonitor.exe

  O4 - HKLM\..\Run: “C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe” /starttray

  O4 - HKCU\..\Run: C:\WINDOWS\system32\ctfmon.exe

  O4 - HKCU\..\Run: “C:\Program Files\CyberLink\Power2Go\Power2GoExpress.exe” /Startup

  O4 - HKCU\..\Run: “C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe” /background

  O4 - HKUS\S-1-5-19\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘Lokale service’)

  O4 - HKUS\S-1-5-20\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘Netwerkservice’)

  O4 - HKUS\S-1-5-18\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘SYSTEM’)

  O4 - HKUS\S-1-5-18\..\RunOnce: C:\Program Files\Lavasoft\Ad-Aware\AutoLaunch.exe monthly (User ‘SYSTEM’)

  O4 - HKUS\.DEFAULT\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘Default user’)

  O4 - HKUS\.DEFAULT\..\RunOnce: C:\Program Files\Lavasoft\Ad-Aware\AutoLaunch.exe monthly (User ‘Default user’)

  O4 - Startup: Adobe Media Player.lnk = C:\Program Files\Adobe Media Player\Adobe Media Player.exe

  O4 - Startup: Mediacontrole PMB.lnk = C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe

  O4 - Startup: OpenOffice.org 2.3 .lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe

  O4 - Startup: OpenOffice.org 3.0 .lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe

  O4 - Global Startup: Microsoft Office Snelzoeken.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE

  O4 - Global Startup: Office Opstarten.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE

  O4 - Global Startup: PCzapper Media Manager.lnk = C:\Program Files\PCzapper\MediaManager\pbMediaCenter.exe

  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

  O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

  O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

  O9 - Extra ‘Tools’ menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

  O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

  O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

  O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

  O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1163687096046

  O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

  O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll

  O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

  O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

  O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

  O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe

  O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\avgwdsvc.exe

  O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

  O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

  O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE

  O23 - Service: Lavasoft Ad-Aware Service - Lavasoft Limited - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe

  O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

  O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

  O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

  –

  End of file - 10117 bytes

  Rapporteren
• 

  sipke

  25-08-2011 09:25

  Deze blijkt er nog wel te zijn.

  Rapporteren
• 

  fazantje

  25-08-2011 09:47

  Hoi Sipke,

  Verwijder eerst Ad-aware via configuratiescherm - software. Zet wel eerst Ad Watch rechts onderin jou taakbalk uit, anders lukt het niet.

  Start HijackThis, klik op scan en vink (indien nog aanwezig) de volgende regels aan:

  R3 - URLSearchHook: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)

  O4 - HKLM\..\Run: ALCMTR.EXE

  O4 - HKUS\S-1-5-18\..\RunOnce: C:\Program Files\Lavasoft\Ad-Aware\AutoLaunch.exe monthly (User ‘SYSTEM’)

  O4 - HKUS\.DEFAULT\..\RunOnce: C:\Program Files\Lavasoft\Ad-Aware\AutoLaunch.exe monthly (User ‘Default user’)

  O23 - Service: Lavasoft Ad-Aware Service - Lavasoft Limited - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe

  Sluit alle vensters, behalve HijackThis en klik op fix checked.

  Doe ook het volgende:

  Klik op HijackThis - klik op Main menu - klik op open the misc tool section - klik op open uninstal manager - klik op save list.

  Sla nu op en plaats deze lijst hier, samen met een nieuw HijackThis logje.

  Ik zie ook nog een firewall van Sygate, waarom niet gewoon de windows firewall:S

  Succes,

  Huib;)

  

  Rapporteren
• 

  sipke

  25-08-2011 10:59

  Is het verwijderen van adaware tijdelijk of kan dat er later weer op?

  Hier het logje zoals het eruit ziet na verwijderen adaware en de genoemde regels. Overigens kwam die google update eerst minstens elke 2 a 3 minuten, nu is het er heel af en toe.

  Logfile of Trend Micro HijackThis v2.0.4

  Scan saved at 10:57:47, on 25-8-2011

  Platform: Windows XP SP3 (WinNT 5.01.2600)

  MSIE: Internet Explorer v7.00 (7.00.6000.17099)

  Boot mode: Normal

  Running processes:

  C:\WINDOWS\System32\smss.exe

  C:\PROGRA~1\AVG\AVG10\avgchsvx.exe

  C:\WINDOWS\system32\winlogon.exe

  C:\WINDOWS\system32\services.exe

  C:\WINDOWS\system32\lsass.exe

  C:\WINDOWS\system32\svchost.exe

  C:\WINDOWS\System32\svchost.exe

  C:\Program Files\Sygate\SPF\smc.exe

  C:\WINDOWS\Explorer.EXE

  C:\WINDOWS\system32\spoolsv.exe

  C:\Program Files\AVG\AVG10\avgwdsvc.exe

  C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE

  C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

  C:\Program Files\CyberLink\Shared Files\RichVideo.exe

  C:\Program Files\AVG\AVG10\avgnsx.exe

  C:\Program Files\AVG\AVG10\avgemcx.exe

  C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe

  C:\WINDOWS\RTHDCPL.EXE

  C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe

  C:\Program Files\Spamihilator\spamihilator.exe

  C:\WINDOWS\System32\DLA\DLACTRLW.EXE

  C:\Program Files\AVG\AVG10\avgtray.exe

  C:\Program Files\Canon\MyPrinter\BJMyPrt.exe

  C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE

  C:\Program Files\T-Mobile\T-Mobile Internet Manager\DataCardMonitor.exe

  C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

  C:\WINDOWS\system32\ctfmon.exe

  C:\Program Files\CyberLink\Power2Go\Power2GoExpress.exe

  C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe

  C:\Program Files\Microsoft Office\Office\OSA.EXE

  C:\Program Files\PCzapper\MediaManager\pbMediaCenter.exe

  C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe

  C:\WINDOWS\system32\svchost.exe

  C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe

  C:\Program Files\OpenOffice.org 3\program\soffice.exe

  C:\Program Files\OpenOffice.org 3\program\soffice.bin

  C:\PROGRA~1\AVG\AVG10\avgrsx.exe

  C:\Program Files\AVG\AVG10\avgcsrvx.exe

  C:\WINDOWS\system32\msiexec.exe

  C:\Program Files\Internet Explorer\iexplore.exe

  C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ijshockey.com/

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

  O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

  O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

  O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll

  O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

  O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL

  O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

  O4 - HKLM\..\Run: Rundll32.exe SiSPower.dll,ModeAgent

  O4 - HKLM\..\Run: RTHDCPL.EXE

  O4 - HKLM\..\Run: SkyTel.EXE

  O4 - HKLM\..\Run: “C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe”

  O4 - HKLM\..\Run: “C:\Program Files\CyberLink\PowerDVD\Language\Language.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Spamihilator\spamihilator.exe”

  O4 - HKLM\..\Run: “C:\Program Files\QuickTime\qttask.exe” -atboottime

  O4 - HKLM\..\Run: C:\Program Files\Memorex Button Manager\MmrBtnMgr.exe

  O4 - HKLM\..\Run: C:\PROGRA~1\Sygate\SPF\smc.exe -startgui

  O4 - HKLM\..\Run: C:\WINDOWS\System32\DLA\DLACTRLW.EXE

  O4 - HKLM\..\Run: “C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe”

  O4 - HKLM\..\Run: C:\Program Files\AVG\AVG10\avgtray.exe

  O4 - HKLM\..\Run: C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon

  O4 - HKLM\..\Run: C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE /logon

  O4 - HKLM\..\Run: C:\Program Files\T-Mobile\T-Mobile Internet Manager\DataCardMonitor.exe

  O4 - HKLM\..\Run: “C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe” /starttray

  O4 - HKCU\..\Run: C:\WINDOWS\system32\ctfmon.exe

  O4 - HKCU\..\Run: “C:\Program Files\CyberLink\Power2Go\Power2GoExpress.exe” /Startup

  O4 - HKCU\..\Run: “C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe” /background

  O4 - HKUS\S-1-5-19\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘Lokale service’)

  O4 - HKUS\S-1-5-20\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘Netwerkservice’)

  O4 - HKUS\S-1-5-18\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘SYSTEM’)

  O4 - HKUS\.DEFAULT\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘Default user’)

  O4 - Startup: Adobe Media Player.lnk = C:\Program Files\Adobe Media Player\Adobe Media Player.exe

  O4 - Startup: Mediacontrole PMB.lnk = C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe

  O4 - Startup: OpenOffice.org 2.3 .lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe

  O4 - Startup: OpenOffice.org 3.0 .lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe

  O4 - Global Startup: Microsoft Office Snelzoeken.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE

  O4 - Global Startup: Office Opstarten.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE

  O4 - Global Startup: PCzapper Media Manager.lnk = C:\Program Files\PCzapper\MediaManager\pbMediaCenter.exe

  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

  O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

  O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

  O9 - Extra ‘Tools’ menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

  O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

  O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

  O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

  O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1163687096046

  O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

  O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll

  O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

  O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

  O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

  O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe

  O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\avgwdsvc.exe

  O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

  O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

  O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE

  O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

  O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

  O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

  –

  End of file - 9490 bytes

  Rapporteren
• 

  fazantje

  25-08-2011 11:33

  Hoi Sipke,

  Je bent nog wat vergeten, zie mijn vorige bericht over misctool.

  Adaware zou ik niet meer nemen, deze kan zeer vertragend werken.

  Een goeie virusscanner i.c.m. je windows firewall en spywareblaster heb je voldoende aan.

  Daarnaast nog een wekelijkse snelle scan met MBAM en de schoonmaak met Ccleaner.

  Verantwoord surfen is nog het aller belangrijkst!!

  Niet zomaar op alles klikken, zelfs de mail niet.

  Weet wat je opent.

  Groetjes Huib;)

  

  Rapporteren
• 

  Ben

  25-08-2011 13:54

  Hallo sipke,

  Probeer google update uit te zetten;

  Ga naar start >> run >> type “msconfig” >> startup services

  Verwijder het vinkje bij google updater >> klik op ok en herstart de computer..

  Update je adobe en java ook nog even!!

  Suc6 Ben

  http://2.bp.blogspot.com/_NAn8-ZItaHE/Scq3w6FaicI/AAAAAAAACVY/QqPkGy7EU7U/s320/school69.gif

  Rapporteren