Logjes

• 

  fazantje

  25-02-2013 10:03

  Hoi Asteri,

  Start ADWcleaner en daar zie je “uninstal” staan.

  Klik daarop en ADW zal zichzelf verwijderen.

  Groetjes Huib;)

  

  Rapporteren
• 

  fazantje

  25-02-2013 10:20

  Hoi Asteri,

  Download zoek.exe hier en plaats het op jou bureaublad.

  Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe.

  Dubbelklik op Zoek.exe om de tool te starten.

  Kopieer nu onderstaande vet gedrukte en plak die in het grote invulvenster:

  emptyclsid;

  Klik op de button “Options” en vink nu de onderstaande opties aan.

  Standaard Search

  Auto Clean

  Empty All Temp

  System Restore Point

  Klik nu op de knop “Run script”.

  Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).

  Mocht na de herstart geen logje verschijnen, start zoek.exe dan opnieuw, de log verschijnt dan alsnog.

  Post nu de inhoud van het geopende logje in het volgende bericht, samen met een nieuw HijackThis logje.

  Succes,

  Huib;)

  

  Rapporteren
• 

  fazantje

  25-02-2013 10:30

  Hoi Asteri,

  Ik heb gelijk even de 2 topics samen gevoegd.

  Dat is voor ons handiger.

  Groetjes Huib;)

  

  Rapporteren
• 

  asteri

  25-02-2013 10:51

  Zoek.exe Version 4.0.0.2 Beta Updated 25-02-2013

  Tool run by Eigenaar on ma 25-02-2013 at 10:38:22,40.

  Microsoft Windows XP Home Edition 5.1.2600 Service Pack 3 x86

  Running in: Normal Mode Internet Access Detected

  ==== System Restore Info ======================

  25-2-2013 10:42:59 Zoek.exe System Restore Point Created Succesfully.

  ==== Deleting CLSID Registry Keys ======================

  HKEY_USERS\S-1-5-21-1644491937-1935655697-1417001333-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully

  HKEY_USERS\S-1-5-21-1644491937-1935655697-1417001333-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully

  HKEY_USERS\S-1-5-21-1644491937-1935655697-1417001333-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5C255C8A-E604-49b4-9D64-90988571CECB} deleted successfully

  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB} deleted successfully

  ==== Deleting CLSID Registry Values ======================

  HKEY_USERS\S-1-5-21-1644491937-1935655697-1417001333-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully

  ==== Running Processes ======================

  C:\WINDOWS\System32\smss.exe

  C:\WINDOWS\system32\csrss.exe

  C:\WINDOWS\system32\winlogon.exe

  C:\WINDOWS\system32\services.exe

  C:\WINDOWS\system32\lsass.exe

  C:\Program Files\Ahead\InCD\InCDsrv.exe

  C:\WINDOWS\Explorer.EXE

  C:\WINDOWS\system32\spoolsv.exe

  c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe

  C:\WINDOWS\System32\SCardSvr.exe

  C:\WINDOWS\RTHDCPL.EXE

  C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe

  C:\Program Files\Logitech\QuickCam10\QuickCam10.exe

  C:\Program Files\Ahead\InCD\InCD.exe

  C:\Program Files\Canon\MyPrinter\BJMyPrt.exe

  C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE

  C:\Program Files\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe

  C:\Program Files\AVG\AVG2013\avgui.exe

  C:\WINDOWS\system32\ctfmon.exe

  C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe

  C:\Program Files\Messenger\msmsgs.exe

  C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

  C:\Program Files\Skype\Phone\Skype.exe

  C:\Program Files\AVG\AVG2013\avgwdsvc.exe

  C:\Program Files\Common Files\LogiShrd\LComMgr\LVComSX.exe

  C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe

  C:\Program Files\Common Files\LightScribe\LSSrvc.exe

  C:\WINDOWS\system32\nvsvc32.exe

  C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe

  C:\WINDOWS\System32\alg.exe

  C:\WINDOWS\system32\wscntfy.exe

  C:\Documents and Settings\Eigenaar\Bureaublad\zoek.exe

  C:\WINDOWS\System32\svchost.exe -k netsvcs

  C:\WINDOWS\system32\svchost.exe -k NetworkService

  C:\WINDOWS\system32\svchost.exe -k LocalService

  C:\WINDOWS\system32\svchost.exe -k LocalService

  C:\WINDOWS\system32\svchost.exe -k imgsvc

  ==== System Specs ======================

  Windows: Windows XP Home Edition Service Pack 3 (Build 2600)

  Internet Explorer: 8.0.6001.18702

  Memory (RAM): 896 MB

  CPU Info: AMD Sempron™ Processor 3400+

  CPU Speed: 1808,1 MHz

  Sound Card: Realtek HD Audio output |

  Display Adapters: NVIDIA GeForce 6150SE | NetMeeting driver | RDPDD Chained DD

  Monitors: 1x; Plug en Play-monitor |

  Screen Resolution: 1920 X 1080 - 32 bit

  Network: Network Present

  Network Adapters: NVIDIA nForce Networking Controller - Pakketplanner-minipoort

  CD / DVD Drives: 2x (E: | F: | ) E: TSSTcorpDVD-ROM SH-D162D | F: TSSTcorpCDDVDW SH-S203D

  Ports: COM1 LPT1

  Mouse: 3 Button Wheel Mouse Present

  Hard Disks: C: 29,3GB | D: 268,8GB

  Hard Disks - Free: C: 13,9GB | D: 214,9GB

  Manufacturer *: American Megatrends Inc.

  BIOS Info: AT/AT COMPATIBLE | 07/10/07 | A_M_I_ - 7000710

  Time Zone: West-Europa (standaardtijd)

  Motherboard *: ASUSTeK Computer INC. M2N-MX SE

  Sun Java version: 1.7.0_05

  Country: Nederland

  Language: NLD

  ==== Files Recently Created / Modified ======================

  ====== C:\WINDOWS ====

  ====== C:\DOCUME~1\Eigenaar\LOCALS~1\Temp ====

  2013-02-23 16:07:54 73F84010494B1B9E4B478790BBD3D71A 275552 –s—r- C:\DOCUME~1\Eigenaar\LOCALS~1\Temp\Tsu10749DD9.dll

  ====== C:\WINDOWS\system32 =====

  ====== C:\WINDOWS\system32\drivers =====

  ====== C:\WINDOWS\Tasks ======

  ====== C:\WINDOWS\Temp ======

  ======= C:\Program Files =====

  ======= C: =====

  ====== C:\Documents and Settings\Eigenaar\Application Data ======

  ====== C:\Documents and Settings\Eigenaar ======

  2013-02-24 12:56:21 ——– d–h–r- C:\Documents and Settings\Eigenaar\Onlangs geopend

  ====== C: exe-files ==

  2013-02-24 13:38:53 789E2E45C6651767DCA56B3445D3EC6F 2347384 —-a-w- C:\RECYCLER\S-1-5-21-1644491937-1935655697-1417001333-1003\Dc3.exe

  2013-02-23 16:09:06 38F61D046E575971ED83C4F71ACCD132 1531108 —-a-w- C:\Documents and Settings\Eigenaar\Local Settings\Temp\{711A3FEC-A21F-4CB5-AE5E-EA3DAAF91D1A}\Addons\web_assistant_v4.exe

  2013-02-23 16:07:58 98B03BEF5A2808C5EFA2A0D2430144DE 15968 –s—r- C:\Documents and Settings\Eigenaar\Local Settings\Temp\{711A3FEC-A21F-4CB5-AE5E-EA3DAAF91D1A}\Setup.exe

  2013-02-21 15:35:24 73BE2813C0517F625CAF29F8124A5E39 4260472 —-a-w- C:\Program Files\AVG\AVG2013\avgcremx.exe

  === C: other files ==

  2013-02-23 16:07:57 0AD1232207E8613D779F41B6F80BA7D1 59904 –s—r- C:\Documents and Settings\Eigenaar\Local Settings\Temp\{711A3FEC-A21F-4CB5-AE5E-EA3DAAF91D1A}\Custom.dll

  2013-02-23 16:07:54 73F84010494B1B9E4B478790BBD3D71A 275552 –s—r- C:\Documents and Settings\Eigenaar\Local Settings\Temp\Tsu10749DD9.dll

  2013-02-21 15:35:20 43D8779059D848BB26D725D4E6C3350C 6182520 —-a-w- C:\Program Files\AVG\AVG2013\avgcorex.dll

  ==== Startup Registry Enabled ======================

  “CTFMON.EXE”=“C:\WINDOWS\system32\CTFMON.EXE”

  “CTFMON.EXE”=“C:\WINDOWS\system32\CTFMON.EXE”

  “CTFMON.EXE”=“C:\WINDOWS\system32\CTFMON.EXE”

  “CTFMON.EXE”=“C:\WINDOWS\system32\ctfmon.exe”

  “LightScribe Control Panel”=“C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden”

  “MSMSGS”=“C:\Program Files\Messenger\msmsgs.exe /background”

  “SUPERAntiSpyware”=“C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe”

  “Facebook Update”=“C:\Documents and Settings\Eigenaar\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe /c /nocrashserver”

  “Skype”=“C:\Program Files\Skype\Phone\Skype.exe /minimized /regrun”

  “CTFMON.EXE”=“C:\WINDOWS\system32\CTFMON.EXE”

  “_nltide_2”=“regsvr32 /s /n /i:U shell32”

  “_nltide_2”=“regsvr32 /s /n /i:U shell32”

  “_nltide_2”=“regsvr32 /s /n /i:U shell32”

  “_nltide_2”=“regsvr32 /s /n /i:U shell32”

  “RTHDCPL”=“RTHDCPL.EXE”

  “SkyTel”=“SkyTel.EXE”

  “Alcmtr”=“ALCMTR.EXE”

  “NvCplDaemon”=“RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup”

  “nwiz”=“nwiz.exe /install”

  “NvMediaCenter”=“RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit”

  “LogitechCommunicationsManager”=“C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe”

  “LogitechQuickCamRibbon”=“C:\Program Files\Logitech\QuickCam10\QuickCam10.exe /hide”

  “NeroFilterCheck”=“C:\WINDOWS\system32\NeroCheck.exe”

  “InCD”=“C:\Program Files\Ahead\InCD\InCD.exe”

  “CanonMyPrinter”=“C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon”

  “CanonSolutionMenuEx”=“C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE /logon”

  “Reader Application Helper”=“C:\Program Files\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe”

  “Adobe ARM”=“C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe”

  “AVG_UI”=“C:\Program Files\AVG\AVG2013\avgui.exe /TRAYONLY”

  “CTFMON.EXE”=“C:\WINDOWS\system32\ctfmon.exe”

  “LightScribe Control Panel”=“C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden”

  “MSMSGS”=“C:\Program Files\Messenger\msmsgs.exe /background”

  “SUPERAntiSpyware”=“C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe”

  “Facebook Update”=“C:\Documents and Settings\Eigenaar\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe /c /nocrashserver”

  “Skype”=“C:\Program Files\Skype\Phone\Skype.exe /minimized /regrun”

  ==== Task Scheduler Jobs ======================

  C:\WINDOWS\tasks\Adobe Flash Player Updater.job –a—— C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

  C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-1644491937-1935655697-1417001333-1003Core.job –a—— C:\Documents and Settings\Eigenaar\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe

  C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-1644491937-1935655697-1417001333-1003UA.job –a—— C:\Documents and Settings\Eigenaar\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe

  C:\WINDOWS\tasks\HP Photo Creations Communicator.job –a—— C:\Documents and Settings\All Users\Application Data\HP Photo Creations\MessageCheck.exe

  ==== Firefox Extensions ======================

  ProfilePath: C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\gnmysq9g.default

  - United States English Spellchecker - %ProfilePath%\extensions\en-US@dictionaries.addons.mozilla.org

  AppDir: C:\Program Files\Mozilla Firefox

  - Default - %AppDir%\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

  ==== Firefox Plugins ======================

  Profilepath: C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\gnmysq9g.default

  F647D0BEA553C1D0C251CE07DA6A5511 - C:\Program Files\Adobe\Reader 10.0\Reader\browser\nppdf32.dll - Adobe Acrobat

  DB988B4550DB9BCE86F9199D961057FC - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll - Adobe Acrobat

  F733C59712465B0BD2130BB7C1A6D6E3 - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_149.dll - Shockwave Flash

  0B31B0F8FA99CFD009C8FBEA9E20C9DE - C:\Documents and Settings\Eigenaar\Local Settings\Application Data\Facebook\Video\Skype\npFacebookVideoCalling.dll - Facebook Video Calling Plugin

  8FE7BA502945BE735D09D5703BD76FDA - C:\WINDOWS\system32\Adobe\Director\np32dsw_1165635.dll - Shockwave for Director / Shockwave for Director

  7A1E2AF50DDCDD49C114C1099DBEF6E1 - C:\WINDOWS\system32\npDeployJava1.dll - Java Deployment Toolkit 7.0.50.255

  D0DA6B2FB50A0667CF4BACC2AEFEA009 - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll - Java(TM) Platform SE 7 U5

  1A2FCE8326C9849083263DA3DE3C0756 - C:\Program Files\Sony\ReaderDesktop\npreaderdetectmoz.dll - Reader Application Detector

  F556A64AB2DB1BD834E7C89CE211516B - C:\WINDOWS\system32\Adobe\Director\np32dsw.dll - Shockwave for Director / Shockwave for Director

  CE252B04FB9F4F773A7DB5338BFEEA5B - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL - CANON iMAGE GATEWAY Album Plugin Utility

  AB87EEFFD18F2BAAFC274E7075EA6C67 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation

  901DF887DBDF87FA3C659239F68F3228 - C:\Program Files\Windows Media Player\npdrmv2.dll - Microsoft® DRM

  0F9DEA5814D22F83FED5F427E263DED0 - C:\Program Files\Windows Media Player\npdsplay.dll - Windows Media Player Plug-in Dynamic Link Library

  F89E6BBD6A080D8C714DFB6F30678288 - C:\Program Files\Windows Media Player\npwmsdrm.dll - Microsoft® DRM

  3EA079023D32054BFD73D08E77C72609 - C:\WINDOWS\system32\npptools.dll - Besturingssysteem Microsoft® Windows®

  ==== Set IE to Default ======================

  Old Values:

  “Start Page”=“http://www.google.nl/”

  No DefaultScope Set For HKCU

  New Values:

  “Start Page”=“http://www.google.nl/”

  “DefaultScope”=“{6A1806CD-94D4-4689-BA73-E35EA1EA9990}”

  ==== All HKCU SearchScopes ======================

  HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

  {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url=“http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC”

  {1AA184D6-5D46-4195-8323-2FEBF12332BD} Google Url=“http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7ADFA_nl”

  {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url=“http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}”

  ==== Deleting Registry Keys ======================

  HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\linkscanner deleted successfully

  ==== HijackThis Entries ======================

  O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

  O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll

  O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll

  O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

  O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll

  O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll

  O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000

  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL

  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

  O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

  O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

  O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

  O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

  O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

  O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

  O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

  O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

  O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

  O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgidsagent.exe

  O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgwdsvc.exe

  O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe

  O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe

  O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

  O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe

  O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe

  O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

  O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

  O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

  O23 - Service: Sony SCSI Helper Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe

  ==== Empty IE Cache ======================

  C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

  C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5 emptied successfully

  C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

  C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

  C:\Documents and Settings\Eigenaar\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

  C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

  ==== Empty FireFox Cache ======================

  No FireFox Cache found

  ==== Empty Chrome Cache ======================

  No Chrome User Data found

  ==== Empty All Flash Cache ======================

  Flash Cache Emptied Successfully

  ==== Empty All Java Cache ======================

  Java Cache cleared successfully

  After Reboot

  ==== Empty Temp Folders ======================

  C:\WINDOWS\Temp successfully emptied

  C:\DOCUME~1\Eigenaar\LOCALS~1\Temp successfully emptied

  ==== Empty Recycle Bin ======================

  C:\RECYCLER successfully emptied

  ==== Deleting Files / Folders ======================

  “C:\Documents and Settings\Eigenaar\Local Settings\Temporary Internet Files\Content.IE5\index.dat” not deleted

  “C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat” not found

  Logfile of Trend Micro HijackThis v2.0.4

  Scan saved at 10:51:22, on 25-2-2013

  Platform: Windows XP SP3 (WinNT 5.01.2600)

  MSIE: Internet Explorer v8.00 (8.00.6001.18702)

  Boot mode: Normal

  Running processes:

  C:\WINDOWS\System32\smss.exe

  C:\PROGRA~1\AVG\AVG2013\avgrsx.exe

  C:\Program Files\AVG\AVG2013\avgcsrvx.exe

  C:\WINDOWS\system32\winlogon.exe

  C:\WINDOWS\system32\services.exe

  C:\WINDOWS\system32\lsass.exe

  C:\WINDOWS\system32\svchost.exe

  C:\WINDOWS\System32\svchost.exe

  C:\Program Files\Ahead\InCD\InCDsrv.exe

  C:\WINDOWS\Explorer.EXE

  C:\WINDOWS\system32\spoolsv.exe

  c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe

  C:\WINDOWS\system32\notepad.exe

  C:\WINDOWS\RTHDCPL.EXE

  C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe

  C:\Program Files\Logitech\QuickCam10\QuickCam10.exe

  C:\Program Files\AVG\AVG2013\avgidsagent.exe

  C:\Program Files\Ahead\InCD\InCD.exe

  C:\Program Files\Canon\MyPrinter\BJMyPrt.exe

  C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE

  C:\Program Files\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe

  C:\Program Files\AVG\AVG2013\avgui.exe

  C:\Program Files\AVG\AVG2013\avgwdsvc.exe

  C:\WINDOWS\system32\ctfmon.exe

  C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe

  C:\Program Files\Messenger\msmsgs.exe

  C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

  C:\Program Files\Skype\Phone\Skype.exe

  C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe

  C:\Program Files\Common Files\LightScribe\LSSrvc.exe

  C:\Program Files\Common Files\LogiShrd\LComMgr\LVComSX.exe

  C:\WINDOWS\system32\nvsvc32.exe

  C:\WINDOWS\system32\svchost.exe

  C:\Program Files\AVG\AVG2013\avgnsx.exe

  C:\Program Files\AVG\AVG2013\avgemcx.exe

  C:\WINDOWS\system32\wuauclt.exe

  C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe

  C:\Program Files\Mozilla Firefox\firefox.exe

  C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl/

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

  O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

  O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll

  O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll

  O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

  O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll

  O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll

  O4 - HKLM\..\Run: RTHDCPL.EXE

  O4 - HKLM\..\Run: SkyTel.EXE

  O4 - HKLM\..\Run: ALCMTR.EXE

  O4 - HKLM\..\Run: RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

  O4 - HKLM\..\Run: nwiz.exe /install

  O4 - HKLM\..\Run: RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

  O4 - HKLM\..\Run: “C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Logitech\QuickCam10\QuickCam10.exe” /hide

  O4 - HKLM\..\Run: C:\WINDOWS\system32\NeroCheck.exe

  O4 - HKLM\..\Run: C:\Program Files\Ahead\InCD\InCD.exe

  O4 - HKLM\..\Run: C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon

  O4 - HKLM\..\Run: C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE /logon

  O4 - HKLM\..\Run: C:\Program Files\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe

  O4 - HKLM\..\Run: “C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe”

  O4 - HKLM\..\Run: “C:\Program Files\AVG\AVG2013\avgui.exe” /TRAYONLY

  O4 - HKCU\..\Run: C:\WINDOWS\system32\ctfmon.exe

  O4 - HKCU\..\Run: C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden

  O4 - HKCU\..\Run: “C:\Program Files\Messenger\msmsgs.exe” /background

  O4 - HKCU\..\Run: C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

  O4 - HKCU\..\Run: “C:\Documents and Settings\Eigenaar\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe” /c /nocrashserver

  O4 - HKCU\..\Run: “C:\Program Files\Skype\Phone\Skype.exe” /minimized /regrun

  O4 - HKUS\S-1-5-19\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘Lokale service’)

  O4 - HKUS\S-1-5-19\..\RunOnce: regsvr32 /s /n /i:U shell32 (User ‘Lokale service’)

  O4 - HKUS\S-1-5-20\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘Netwerkservice’)

  O4 - HKUS\S-1-5-20\..\RunOnce: regsvr32 /s /n /i:U shell32 (User ‘Netwerkservice’)

  O4 - HKUS\S-1-5-18\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘SYSTEM’)

  O4 - HKUS\S-1-5-18\..\RunOnce: regsvr32 /s /n /i:U shell32 (User ‘SYSTEM’)

  O4 - HKUS\.DEFAULT\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘Default user’)

  O4 - HKUS\.DEFAULT\..\RunOnce: regsvr32 /s /n /i:U shell32 (User ‘Default user’)

  O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000

  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL

  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

  O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

  O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

  O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

  O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

  O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

  O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

  O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

  O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

  O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

  O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgidsagent.exe

  O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgwdsvc.exe

  O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe

  O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe

  O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

  O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe

  O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe

  O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

  O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

  O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

  O23 - Service: Sony SCSI Helper Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe

  –

  End of file - 9206 bytes

  Rapporteren
• 

  fazantje

  25-02-2013 11:13

  Hoi Asteri,

  De logjes zien er weer goed uit.

  ADWcleaner weet je hoe je die kunt verwijderen.

  Zoek exe verwijder je door met jou rechtermuisknop op het icoontje te kilkken en kies dan voor verwijderen.

  Het logje van zoek exe staat in: C:/

  Ook deze mag je met rechtermuisknop verwijderen.

  Hoe staat het nu met de traagheid:S

  Bedenk wel dat je al een wat oudere computer hebt met XP en maar weinig geheugen.

  Update jou Internet Explorer, je hebt nog IE8.

  Groetjes Huib;)

  

  Rapporteren
• 

  asteri

  25-02-2013 12:58

  Hoi Fazantje,

  allereerst hartelijk dank, blij dat alles weer schoon is.

  IE gebruik ik eigenlijk niet meer nu ik Firefox heb.

  En ja, een nieuwe pc staat op het programma, heeft het zin om mijn pc nog op te daten met meer geheugen en andere windows?? Of is dat de moeite niet meer waard . Hij loopt trouwens nu wel weer beter

  dank en nog een fijne dag!!

  asteri

  Rapporteren
• 

  fazantje

  25-02-2013 13:42

  Hoi Asteri,

  Als je toch van plan bent om een nieuwe te kopen, zou ik aan de oude geen geld meer spenderen.

  Als je die computer nog wel blijft gebruiken, dan gewoon lekker opruimen, programma's die je niet meer gebruikt verwijderen.

  Vooral het office pakket zou ik dan weg doen en daarvoor in de plaats office aangepast installeren, met bijv. alleen Word - powerpoint en exel, afhankelijk wat je nog gebruikt.

  Laat StartUpLite eens draaien, dan kun je zien wat er allemaal wel of niet gelijk opgestart hoeft te worden.

  StartUpLite kun je hier downloaden.

  StartUpLite geeft alle onnodige programma's aan, die worden opgestart met Windows.

  De keuze is aan jouw welke je wel nodig vindt om op te starten met je Windows, kies in dat geval No action.

  Via Start Programma's kan je ze altijd handmatig laten opstarten.

  Let op snelkoppelingen op het bureaublad leiden ook tot vertraging.

  Gebruik in StartUpLite niet de optie “Remove” !!!

  Dan wordt het uit het register verwijderd en veranderingen kunnen dan niet meer ongedaan worden gemaakt.

  Selecteer alleen de “Remove” optie indien je zeker bent dat je in de toekomst dit programma nooit meer wilt laten opstarten met Windows!!

  Voer ook regelmatig ons schoonmaakplan uit.

  Groetjes Huib;)

  

  Rapporteren
• 

  asteri

  25-02-2013 14:02

  Hoi Fazantje,

  dank voor je adviezen, ik laat mijn gedachten e eens over gaan.

  Voor nu ben ik blij dat het weer draait.

  aster

  Rapporteren
• 

  fazantje

  25-02-2013 14:11

  Hoi Asteri,

  Dan doe ik het slotje erop.

  Ook namens Jan,

  Graag gedaan(tu)

  Groetjes Huib;)

  

  Rapporteren
• 

  fazantje

  25-02-2013 14:13

  Omdat dit topic is opgelost word het gesloten.

  Wilt U Uw topic als nog weer openen, stuur dan een privé bericht naar Ben of Huib (fazantje).

  Zij zullen dan het “slotje” er van af halen en het topic is weer geopend.

  Het AV team.

  Rapporteren

Dit topic is gesloten, er kunnen geen reacties meer worden geplaatst.