Op deze website gebruiken we cookies om content en advertenties te personaliseren, om functies voor social media te bieden en om ons websiteverkeer te analyseren. Ook delen we informatie over uw gebruik van onze site met onze partners voor social media, adverteren en analyse. Deze partners kunnen deze gegevens combineren met andere informatie die u aan ze heeft verstrekt of die ze hebben verzameld op basis van uw gebruik van hun services. Meer informatie.

Akkoord

Vraag & Antwoord

Beveiliging & privacy

Windows XP doet raar.

None
9 antwoorden
  • Een goedendag. Ik gebruik al een hele tijd Windows XP SP3 op deze machine, maar sinds enige tijd gaat na dagenlang ingelogd zijn programma's raar doen. Het begint veelal met het hangen van tabbladen van de laatste firefox. Geleidelijk aan werken ook andere programma's niet meer of krijg ik hele rare meldingen. (Het begint altijd zo rond een dag of 10-12. Vervelend omdat ik veel vertaalwerk doe. Media Subtitler zegt ineens dat ik de file niet kan openen. Outlook opent niet meer en ga zo maar door. Hoe langer ik bezig ben, hoe meer foutmeldingen en tenslotte is de enige uitweg een harde reboot of word er door gedwongen vanwege een BSOD. Na opstarten is alles weer normaal. Het lijkt erop of dat ergens in in windows zelf na verloop van tijd iets de draad kwijt raakt. Geheugen leegmaken helpt niet. Register cleanen haalt ook niets uit, het blijft telkens terugkomen. Hieronder volgt een log, heb daar zelf weinig verstand van.

    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 6:24:24, on 17-10-2012
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Avira\AntiVir Desktop\sched.exe
    C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
    C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe
    C:\Program Files\Avira\AntiVir Desktop\avguard.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    C:\Program Files\BlueStacks\HD-LogRotatorService.exe
    C:\Program Files\Creative\Shared Files\CTDevSrv.exe
    C:\WINDOWS\system32\srvany.exe
    C:\WINDOWS\KMService.exe
    C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\WINDOWS\Mixer.exe
    C:\Program Files\Unlocker\UnlockerAssistant.exe
    C:\Program Files\Fighters\SPAMfighter\sfagent.exe
    C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe
    C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
    C:\WINDOWS\Twain_32\Samsung\CLX3180\Scan2pc.exe
    C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
    C:\Program Files\Cyberlink\Shared files\brs.exe
    C:\Program Files\Fighters\Tray\FightersTray.exe
    C:\PROGRA~1\CYBERL~1\INSTAN~1\Win2K\IBurn.exe
    C:\Program Files\Nero\Update\NASvc.exe
    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    C:\WINDOWS\system32\RunDll32.exe
    C:\Program Files\Common Files\Java\Java Update\jusched.exe
    C:\Program Files\Winamp\winampa.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\PSIService.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\CrossriderWebApps\Crossrider.exe
    C:\Program Files\Fighters\SPAMfighter\sfus.exe
    C:\Program Files\Fighters\FighterSuiteService.exe
    C:\Documents and Settings\R.Sweres\Menu Start\Programma's\Opstarten\HDDCoffee.exe
    C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe
    C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
    C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
    C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
    C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesApp32.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Mozilla Firefox\plugin-container.exe
    C:\Program Files\Java\jre7\bin\javaw.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
    C:\WINDOWS\System32\svchost.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL
    O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
    O2 - BHO: CrossRider - {A876E312-7D08-401a-B7A6-FAFC5DC2F292} - C:\Program Files\CrossriderWebApps\Crossrider.dll
    O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL
    O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
    O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
    O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
    O4 - HKLM\..\Run: [sfagent] C:\Program Files\Fighters\SPAMfighter\sfagent.exe
    O4 - HKLM\..\Run: [Samsung PanelMgr] C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe /autorun
    O4 - HKLM\..\Run: [CLX3180_Scan2Pc] C:\WINDOWS\Twain_32\Samsung\CLX3180\Scan2pc.exe
    O4 - HKLM\..\Run: [3180 Scan2PC] "C:\WINDOWS\Twain_32\Samsung\CLX3180\Scan2pc.exe"
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
    O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
    O4 - HKLM\..\Run: [BDRegion] C:\Program Files\Cyberlink\Shared files\brs.exe
    O4 - HKLM\..\Run: [CommonToolkitTray] C:\Program Files\Fighters\Tray\FightersTray.exe
    O4 - HKLM\..\Run: [InstantBurn] C:\PROGRA~1\CYBERL~1\INSTAN~1\Win2K\IBurn.exe
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [Cmaudio8788] RunDll32 cmicnfgp.cpl,CMICtrlWnd
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
    O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
    O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [RegistryBooster] "C:\Program Files\Uniblue\RegistryBooster\launcher.exe" delay 20000
    O4 - HKCU\..\Run: [CrossRiderPlugin] C:\Program Files\CrossriderWebApps\Crossrider.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Lokale service')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Netwerkservice')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Startup: HDDCoffee.exe
    O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~1\MICROS~3\Office14\ONBttnIE.dll/105
    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office14\EXCEL.EXE/3000
    O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
    O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
    O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1283457206468
    O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
    O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
    O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
    O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
    O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
    O23 - Service: Acronis Nonstop Backup service (afcdpsrv) - Acronis - C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe
    O23 - Service: Avira Mail Protection (AntiVirMailService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
    O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
    O23 - Service: Avira Realtime Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
    O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    O23 - Service: BlueStacks Android Service (BstHdAndroidSvc) - BlueStack Systems, Inc. - C:\Program Files\BlueStacks\HD-Service.exe
    O23 - Service: BlueStacks Log Rotator Service (BstHdLogRotatorSvc) - BlueStack Systems, Inc. - C:\Program Files\BlueStacks\HD-LogRotatorService.exe
    O23 - Service: CT Device Query service (CTDevice_Srv) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTDevSrv.exe
    O23 - Service: Creative Centrale Media Server (CTUPnPSv) - Creative Technology Ltd - C:\Program Files\Creative\Creative Centrale\CTUPnPSv.exe
    O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
    O23 - Service: KMService - Unknown owner - C:\WINDOWS\system32\srvany.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
    O23 - Service: Nero Update (NAUpdate) - Nero AG - C:\Program Files\Nero\Update\NASvc.exe
    O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
    O23 - Service: SPAMfighter Update Service - SPAMfighter ApS - C:\Program Files\Fighters\SPAMfighter\sfus.exe
    O23 - Service: Suite Service - SPAMfighter ApS - C:\Program Files\Fighters\FighterSuiteService.exe
    O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe


    End of file - 10835 bytes


    Als iemand mij kan helpen, mijn dank is groot.
  • waarheen verplaatst?
  • Doe het volgende:

  • Bedankt voor uw tools. Heb ze allebei gebruikt, hieronder volgen de twee logs.

    [b:b03b5c681a]Adwarecleaner[/b:b03b5c681a]

    # AdwCleaner v2.005 - Verslag gemaakt op 18/10/2012 om 14:18:13
    # Geactualiseerd op 14/10/2012 door Xplode
    # Besturingssysteem : Microsoft Windows XP Service Pack 3 (32 bits)
    # Gebruiker : R.Sweres - X-EWCUFK0Z2S3XP
    # Opstarten Modus : Normale modus
    # Gelanceerd vanaf : C:\Documents and Settings\R.Sweres\Bureaublad\adwcleaner(1).exe
    # Optie [Verwijderen]


    ***** [Diensten] *****


    ***** [Files / Mappen] *****

    File Verwijdert : C:\Documents and Settings\R.Sweres\Bureaublad\Babylon.lnk
    File Verwijdert : C:\Program Files\Mozilla Firefox\plugins
    pdnu.dll
    File Verwijdert : C:\Program Files\Mozilla Firefox\plugins
    pdnu.xpt
    File Verwijdert : C:\Program Files\Mozilla Firefox\plugins
    pdnupdater2.dll
    File Verwijdert : C:\Program Files\Mozilla Firefox\plugins
    pdnupdater2.xpt
    File Verwijdert : C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml
    File Verwijdert : C:\user.js
    Map Verwijdert : C:\DOCUME~1\RF473~1.SWE\LOCALS~1\Temp\Babylon
    Map Verwijdert : C:\Documents and Settings\All Users\Application Data\Babylon
    Map Verwijdert : C:\Documents and Settings\All Users\Application Data\InstallMate
    Map Verwijdert : C:\Documents and Settings\All Users\Application Data\Premium
    Map Verwijdert : C:\Documents and Settings\All Users\Application Data\Trymedia
    Map Verwijdert : C:\Documents and Settings\All Users\Menu Start\Programma's\Babylon
    Map Verwijdert : C:\Documents and Settings\R.Sweres\Application Data\Babylon
    Map Verwijdert : C:\Documents and Settings\R.Sweres\Application Data\BabylonToolbar
    Map Verwijdert : C:\Documents and Settings\R.Sweres\Application Data\Mozilla\Firefox\Profiles\kzmrgbuw.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
    Map Verwijdert : C:\Documents and Settings\R.Sweres\Application Data\Mozilla\Firefox\Profiles\kzmrgbuw.default\WinampToolbarData
    Map Verwijdert : C:\Documents and Settings\R.Sweres\Local Settings\Application Data\AskToolbar
    Map Verwijdert : C:\Documents and Settings\R.Sweres\Local Settings\Application Data\Babylon
    Map Verwijdert : C:\Program Files\Babylon
    Map Verwijdert : C:\Program Files\BabylonToolbar
    Map Verwijdert : C:\Program Files\Common Files\Software Update Utility
    Map Verwijdert : C:\Program Files\Smartdl
    Map Verwijdert : C:\WINDOWS\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

    ***** [Register] *****

    Sleutel Verwijdert : HKCU\Software\AppDataLow\AskToolbarInfo
    Sleutel Verwijdert : HKCU\Software\Ask.com
    Sleutel Verwijdert : HKCU\Software\AskToolbar
    Sleutel Verwijdert : HKCU\Software\Babylon
    Sleutel Verwijdert : HKCU\Software\BabylonToolbar
    Sleutel Verwijdert : HKCU\Software\Conduit
    Sleutel Verwijdert : HKCU\Software\Crossrider
    Sleutel Verwijdert : HKCU\Software\IM
    Sleutel Verwijdert : HKCU\Software\ImInstaller
    Sleutel Verwijdert : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
    Sleutel Verwijdert : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
    Sleutel Verwijdert : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5}
    Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
    Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{336D0C35-8A85-403a-B9D2-65C292C39087}
    Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
    Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}
    Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
    Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F72841F0-4EF1-4DF5-BCE5-B3AC8ACF5478}
    Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
    Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Winamp Toolbar
    Sleutel Verwijdert : HKCU\Software\Softonic
    Sleutel Verwijdert : HKCU\Software\Web Assistant
    Sleutel Verwijdert : HKLM\Software\Babylon
    Sleutel Verwijdert : HKLM\Software\BabylonToolbar
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{6C259840-5BA8-46E6-8ED1-EF3BA47D8BA1}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{AD25754E-D76C-42B3-A335-2F81478B722F}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{B16632F1-24E0-4D99-A68D-70BFB6447C48}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\BabylonIEPI.DLL
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\dnu.EXE
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\BabyDict
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\BabyGloss
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Babylon.dskBnd
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\BabylonIEPI.BabylonIEBho
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\BabylonIEPI.BabylonIEBho.1
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\BabylonOfficeAddin.OfficeAddin
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\BabylonOfficeAddin.OfficeAddin.1
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\BabyOptFile
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\bbylnApp.appCore
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{6AC0BB10-C922-45e2-857D-2A368FE749E5}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\dnUpdate
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser.1
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController.1
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{5F339F0B-716F-408F-A627-DEEB5DEB4020}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{6427058B-217C-4C7F-A6CE-C7934C0BDCEB}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{78888F8B-D5E4-43CE-89F5-C8C18223AF64}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{8B8558F6-DC26-4F39-8417-34B8934AA459}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{A3A2A5C0-1306-4D1A-A093-9CECA4230002}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{EFDCAF05-D29C-4D4D-9836-8CDCD606A6B2}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{92380354-381A-471F-BE2E-DD9ACD9777EA}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{A1489C85-4F6F-48C4-AC9E-18B63AF4703E}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{AD25754E-D76C-42B3-A335-2F81478B722F}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
    Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{F310F027-15CB-4A7F-B10D-3A4AFB5013A5}
    Sleutel Verwijdert : HKLM\Software\Conduit
    Sleutel Verwijdert : HKLM\SOFTWARE\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb
    Sleutel Verwijdert : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
    Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
    Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\BabylonToolbar
    Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
    Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Babylon
    Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BabylonToolbar
    Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Crossrider
    Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SoftwareUpdUtility
    Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Babylon.exe
    Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96}
    Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
    Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Babylon
    Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar
    Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Crossrider
    Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdUtility
    Sleutel Verwijdert : HKLM\Software\Web Assistant
    Waarde Verwijdert : HKCU\Software\Microsoft\Internet Explorer\Extensions\CmdMapping [{F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478}]
    Waarde Verwijdert : HKCU\Software\Microsoft\Internet Explorer\New Windows\Allow [*.crossrider.com]
    Waarde Verwijdert : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]

    ***** [Browsers] *****

    -\\ Internet Explorer v6.0.2900.5512

    Vervangen : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://search.babylon.com/?babsrc=NT_ss&mntrId=f8079aa5000000000000001e8ccf44eb&tlver=1.4.23.10&affID=100607 –> hxxp://www.google.com

    -\\ Mozilla Firefox v16.0.1 (nl)

    Profielnaam : default
    File : C:\Documents and Settings\R.Sweres\Application Data\Mozilla\Firefox\Profiles\kzmrgbuw.default\prefs.js

    C:\Documents and Settings\R.Sweres\Application Data\Mozilla\Firefox\Profiles\kzmrgbuw.default\user.js … Verwijdert !

    Verwijdert : user_pref("aol_toolbar.surf.date", "83";);
    Verwijdert : user_pref("aol_toolbar.surf.lastDate", "18";);
    Verwijdert : user_pref("aol_toolbar.surf.lastMonth", "9";);
    Verwijdert : user_pref("aol_toolbar.surf.lastYear", "2012";);
    Verwijdert : user_pref("aol_toolbar.surf.month", "1021";);
    Verwijdert : user_pref("aol_toolbar.surf.prevMonth", "0";);
    Verwijdert : user_pref("aol_toolbar.surf.total", "1025";);
    Verwijdert : user_pref("aol_toolbar.surf.week", "1021";);
    Verwijdert : user_pref("aol_toolbar.surf.year", "1021";);
    Verwijdert : user_pref("browser.search.defaulturl", "hxxp://search.babylon.com/web/{searchTerms}?babsrc=browserse[…]
    Verwijdert : user_pref("browser.search.order.1", "Search the web";);
    Verwijdert : user_pref("extensions.BabylonToolbar.bbDpng", 19);
    Verwijdert : user_pref("extensions.BabylonToolbar.cntry", "NL";);
    Verwijdert : user_pref("extensions.BabylonToolbar.firstRun", false);
    Verwijdert : user_pref("extensions.BabylonToolbar.hdrMd5", "72E9BB0E3B43D184267C05E500FF5522";);
    Verwijdert : user_pref("extensions.BabylonToolbar.id", "9b7245e8b469464393f9bddfdb96c2d7";);
    Verwijdert : user_pref("extensions.BabylonToolbar.instlDay", "15199";);
    Verwijdert : user_pref("extensions.BabylonToolbar.lastActv", "19";);
    Verwijdert : user_pref("extensions.BabylonToolbar.lastDP", 19);
    Verwijdert : user_pref("extensions.BabylonToolbar.newTab", true);
    Verwijdert : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_bb";);
    Verwijdert : user_pref("extensions.BabylonToolbar.ptch_0717", true);
    Verwijdert : user_pref("extensions.BabylonToolbar.sid", "9b7245e8b469464393f9bddfdb96c2d7";);
    Verwijdert : user_pref("extensions.asktb.cbid", "UG";);
    Verwijdert : user_pref("extensions.asktb.default-channel-url-mask", "hxxp://www.ask.com/web?q={query}&o={o}&l={l}[…]
    Verwijdert : user_pref("extensions.asktb.dtid", "YYYYYYYYNL";);
    Verwijdert : user_pref("extensions.asktb.first-launch-url", "hxxp://www.spamfighter.com/Component/WebLogin.asp?Lo[…]
    Verwijdert : user_pref("extensions.asktb.fresh-install", false);
    Verwijdert : user_pref("extensions.asktb.l", "dis";);
    Verwijdert : user_pref("extensions.asktb.last-config-req", "1283467702199";);
    Verwijdert : user_pref("extensions.asktb.locale", "nl_NL";);
    Verwijdert : user_pref("extensions.asktb.o", "15158";);
    Verwijdert : user_pref("extensions.asktb.overlay-reloaded-using-restart", true);
    Verwijdert : user_pref("extensions.asktb.qsrc", "2871";);
    Verwijdert : user_pref("extensions.asktb.r", "5";);
    Verwijdert : user_pref("extensions.asktb.search-suggestions-enabled", true);
    Verwijdert : user_pref("extensions.incredibar.admin", false);
    Verwijdert : user_pref("extensions.incredibar.aflt", "orgnl";);
    Verwijdert : user_pref("extensions.incredibar.cntry", "NL";);
    Verwijdert : user_pref("extensions.incredibar.dfltLng", "";);
    Verwijdert : user_pref("extensions.incredibar.dfltSrch", false);
    Verwijdert : user_pref("extensions.incredibar.did", "10643";);
    Verwijdert : user_pref("extensions.incredibar.envrmnt", "production";);
    Verwijdert : user_pref("extensions.incredibar.excTlbr", false);
    Verwijdert : user_pref("extensions.incredibar.hdrMd5", "F8BED275B3B2EA681CD2037DCB7A156C";);
    Verwijdert : user_pref("extensions.incredibar.hmpg", false);
    Verwijdert : user_pref("extensions.incredibar.id", "f8079aa5000000000000001e8ccf44eb";);
    Verwijdert : user_pref("extensions.incredibar.installerproductid", "26";);
    Verwijdert : user_pref("extensions.incredibar.instlDay", "15602";);
    Verwijdert : user_pref("extensions.incredibar.instlRef", "";);
    Verwijdert : user_pref("extensions.incredibar.isDcmntCmplt", true);
    Verwijdert : user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.141:38:39";);
    Verwijdert : user_pref("extensions.incredibar.mntrvrsn", "1.2.0";);
    Verwijdert : user_pref("extensions.incredibar.newTab", false);
    Verwijdert : user_pref("extensions.incredibar.noFFXTlbr", false);
    Verwijdert : user_pref("extensions.incredibar.ppd", "1";);
    Verwijdert : user_pref("extensions.incredibar.prdct", "incredibar";);
    Verwijdert : user_pref("extensions.incredibar.productid", "26";);
    Verwijdert : user_pref("extensions.incredibar.prtnrId", "Incredibar";);
    Verwijdert : user_pref("extensions.incredibar.sg", "none";);
    Verwijdert : user_pref("extensions.incredibar.smplGrp", "none";);
    Verwijdert : user_pref("extensions.incredibar.tlbrId", "base";);
    Verwijdert : user_pref("extensions.incredibar.upn2", "6PQKaeAWk7";);
    Verwijdert : user_pref("extensions.incredibar.upn2n", "92543610809771719";);
    Verwijdert : user_pref("extensions.incredibar.vrsn", "1.5.11.14";);
    Verwijdert : user_pref("extensions.incredibar.vrsnTs", "1.5.11.141:38:39";);
    Verwijdert : user_pref("extensions.incredibar.vrsni", "1.5.11.14";);
    Verwijdert : user_pref("extensions.incredibar_i.aflt", "orgnl";);
    Verwijdert : user_pref("extensions.incredibar_i.dfltLng", "";);
    Verwijdert : user_pref("extensions.incredibar_i.did", "10643";);
    Verwijdert : user_pref("extensions.incredibar_i.excTlbr", false);
    Verwijdert : user_pref("extensions.incredibar_i.id", "f8079aa5000000000000001e8ccf44eb";);
    Verwijdert : user_pref("extensions.incredibar_i.installerproductid", "26";);
    Verwijdert : user_pref("extensions.incredibar_i.instlDay", "15602";);
    Verwijdert : user_pref("extensions.incredibar_i.instlRef", "";);
    Verwijdert : user_pref("extensions.incredibar_i.ms_url_id", "";);
    Verwijdert : user_pref("extensions.incredibar_i.newTab", false);
    Verwijdert : user_pref("extensions.incredibar_i.ppd", "1";);
    Verwijdert : user_pref("extensions.incredibar_i.prdct", "incredibar";);
    Verwijdert : user_pref("extensions.incredibar_i.productid", "26";);
    Verwijdert : user_pref("extensions.incredibar_i.prtnrId", "Incredibar";);
    Verwijdert : user_pref("extensions.incredibar_i.smplGrp", "none";);
    Verwijdert : user_pref("extensions.incredibar_i.tlbrId", "base";);
    Verwijdert : user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6PQKaeAWk7&loc=IB[…]
    Verwijdert : user_pref("extensions.incredibar_i.upn2", "6PQKaeAWk7";);
    Verwijdert : user_pref("extensions.incredibar_i.upn2n", "92543610809771719";);
    Verwijdert : user_pref("extensions.incredibar_i.vrsn", "1.5.11.14";);
    Verwijdert : user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.141:38:39";);
    Verwijdert : user_pref("extensions.incredibar_i.vrsni", "1.5.11.14";);
    Verwijdert : user_pref("winamp_toolbar.buttons.layout", "post_to_twitter_33500;";);
    Verwijdert : user_pref("winamp_toolbar.default.homepage.check", false);
    Verwijdert : user_pref("winamp_toolbar.default.search.check", false);
    Verwijdert : user_pref("winamp_toolbar.firsttime.showwindow", false);
    Verwijdert : user_pref("winamp_toolbar.guid", "{12D36AB8-3486-324B-FD82-13E7233CBED3}";);
    Verwijdert : user_pref("winamp_toolbar.install.distroid", "winamp";);
    Verwijdert : user_pref("winamp_toolbar.install.lastTbVersion", "5.6.20.8620";);
    Verwijdert : user_pref("winamp_toolbar.install.lid", "";);
    Verwijdert : user_pref("winamp_toolbar.install.mtmhp", "";);
    Verwijdert : user_pref("winamp_toolbar.install.ncid", "";);
    Verwijdert : user_pref("winamp_toolbar.metrics.activestampdate", "18";);
    Verwijdert : user_pref("winamp_toolbar.metrics.activestampmonth", "9";);
    Verwijdert : user_pref("winamp_toolbar.metrics.activestampyear", "2012";);
    Verwijdert : user_pref("winamp_toolbar.metrics.originalDate", "14";);
    Verwijdert : user_pref("winamp_toolbar.metrics.originalHours", "14";);
    Verwijdert : user_pref("winamp_toolbar.metrics.originalMinutes", "8";);
    Verwijdert : user_pref("winamp_toolbar.metrics.originalMonth", "10";);
    Verwijdert : user_pref("winamp_toolbar.metrics.originalSeconds", "11";);
    Verwijdert : user_pref("winamp_toolbar.metrics.originalYear", "2012";);
    Verwijdert : user_pref("winamp_toolbar.relatednews.active", true);
    Verwijdert : user_pref("winamp_toolbar.relatednews.enabled", false);
    Verwijdert : user_pref("winamp_toolbar.rtw.active", false);
    Verwijdert : user_pref("winamp_toolbar.search.button", true);
    Verwijdert : user_pref("winamp_toolbar.search.cid", "14-10-2012";);
    Verwijdert : user_pref("winamp_toolbar.search.focusnewtab", true);
    Verwijdert : user_pref("winamp_toolbar.search.instd", "20121014140744968";);
    Verwijdert : user_pref("winamp_toolbar.search.newtab", true);
    Verwijdert : user_pref("winamp_toolbar.search.oid", "14-10-2012";);
    Verwijdert : user_pref("winamp_toolbar.search.placement", "left";);
    Verwijdert : user_pref("winamp_toolbar.search.populateoncomplete", false);
    Verwijdert : user_pref("winamp_toolbar.search.savehistory", false);
    Verwijdert : user_pref("winamp_toolbar.search.searchtype", "web";);
    Verwijdert : user_pref("winamp_toolbar.search.source", "tb50-ff-winamp";);
    Verwijdert : user_pref("winamp_toolbar.skin.custom", true);
    Verwijdert : user_pref("winamp_toolbar.surf.show", true);
    Verwijdert : user_pref("winamp_toolbar.ticker.active", false);
    Verwijdert : user_pref("winamp_toolbar.upgrade.showwindow", false);
    Verwijdert : user_pref("winamp_toolbar.weather.degc", "11";);
    Verwijdert : user_pref("winamp_toolbar.weather.degf", "51";);
    Verwijdert : user_pref("winamp_toolbar.weather.image", "chrome://winamptoolbar/skin/weather/34.png";);
    Verwijdert : user_pref("winamp_toolbar.weather.locationid", "USNY0996";);
    Verwijdert : user_pref("winamp_toolbar.weather.metric", true);
    Verwijdert : user_pref("winamp_toolbar.weather.tooltip", "New York , NY : Mostly Sunny";);
    Verwijdert : user_pref("winamp_toolbar.weather.update", "1350561872923";);
    Verwijdert : user_pref("winamp_toolbar.winamp.artist", "";);
    Verwijdert : user_pref("winamp_toolbar.winamp.button.focus", true);
    Verwijdert : user_pref("winamp_toolbar.winamp.button.forward", true);
    Verwijdert : user_pref("winamp_toolbar.winamp.button.open", true);
    Verwijdert : user_pref("winamp_toolbar.winamp.button.pause", true);
    Verwijdert : user_pref("winamp_toolbar.winamp.button.play", true);
    Verwijdert : user_pref("winamp_toolbar.winamp.button.rewind", true);
    Verwijdert : user_pref("winamp_toolbar.winamp.button.stop", false);
    Verwijdert : user_pref("winamp_toolbar.winamp.button.volume", true);
    Verwijdert : user_pref("winamp_toolbar.winamp.ticker.show", true);
    Verwijdert : user_pref("winamp_toolbar.winamp.title", "-999999";);
    Verwijdert : user_pref("winamp_toolbar.winamp.volume", "";);

    *************************

    AdwCleaner[S1].txt - [23374 octets] - [18/10/2012 14:18:13]

    ########## EOF - C:\AdwCleaner[S1].txt - [23435 octets] ##########



    [b:b03b5c681a]Combofix[/b:b03b5c681a]

    ComboFix 12-10-18.03 - R.Sweres 18-10-2012 14:32:02.1.4 - x86
    Microsoft Windows XP Professional 5.1.2600.3.1252.31.1043.18.3583.2925 [GMT 2:00]
    Gestart vanuit: c:\documents and settings\R.Sweres\Bureaublad\ComboFix.exe
    AV: Avira Desktop *Disabled/Updated* {C19476D9-52BC-4E93-8AF3-CCF59F7AE8FE}
    .
    .
    (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    C:\DFR27EF.tmp
    C:\DFR5D0.tmp
    C:\DFR8D5.tmp
    c:\documents and settings\All Users\Application Data\TEMP
    c:\documents and settings\All Users\Application Data\TEMP\{7FAAB350-2014-4862-AE66-CBAEE20B6AFF}\PostBuild.exe
    c:\documents and settings\All Users\Application Data\TEMP\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}\PostBuild.exe
    c:\documents and settings\All Users\Application Data\TEMP\{E3739848-5329-48E3-8D28-5BBD6E8BE384}\PostBuild.exe
    c:\documents and settings\All Users\Application Data\TEMP\{F232C87C-6E92-4775-8210-DFE90B7777D9}\PostBuild.exe
    c:\documents and settings\All Users\Application Data\TEMP\{F232C87C-6E92-4775-8210-DFE90B7777D9}\Setup.ilg
    c:\documents and settings\R.Sweres\Application Data\inst.exe
    c:\documents and settings\R.Sweres\Application Data\vso_ts_preview.xml
    c:\program files\Java\svchost.exe
    c:\windows\isRS-000.tmp
    c:\windows\system32\AutoRun.inf
    c:\windows\system32\dllcache\dlimport.exe
    c:\windows\system32\dllcache\wmpvis.dll
    c:\windows\system32\msstdfmt.dll
    c:\windows\system32\SETB3.tmp
    c:\windows\system32\SETB5.tmp
    c:\windows\system32\SETBA.tmp
    c:\windows\system32\SETC1.tmp
    c:\windows\system32\SETC3.tmp
    c:\windows\Twain_32\Samsung\CLX3180\Scan2pc.exe
    c:\windows\XSxS
    D:\resycled
    M:\autorun.inf
    N:\Autorun.inf
    .
    .
    (((((((((((((((((((( Bestanden Gemaakt van 2012-09-18 to 2012-10-18 ))))))))))))))))))))))))))))))
    .
    .
    2012-10-15 14:50 . 2012-10-15 14:50 ——– d—–w- c:\documents and settings\R.Sweres\Application Data\DVDFab
    2012-10-15 00:08 . 2012-10-17 10:49 ——– d—–w- c:\documents and settings\R.Sweres\Application Data\Winamp
    2012-10-14 13:57 . 2012-10-14 13:57 96224 —-a-w- c:\program files\Mozilla Firefox\webapprt-stub.exe
    2012-10-14 13:57 . 2012-10-14 13:57 157272 —-a-w- c:\program files\Mozilla Firefox\webapp-uninstaller.exe
    2012-10-13 13:34 . 2012-10-15 00:08 ——– d—–w- c:\program files\Winamp Detect
    2012-10-06 23:08 . 2012-10-06 23:08 ——– d—–w- c:\windows\system32\wbem\Repository
    2012-10-06 23:07 . 2012-10-06 23:07 ——– d—–w- c:\program files\Common Files\Adobe
    2012-10-03 08:25 . 2012-10-03 08:25 2292736 —-a-w- c:\windows\system32\TUKernel.exe
    2012-10-01 07:32 . 2012-10-01 07:32 ——– d—–w- c:\program files\iPod
    2012-10-01 07:32 . 2012-10-01 07:33 ——– d—–w- c:\program files\iTunes
    2012-10-01 07:32 . 2012-10-01 07:33 ——– d—–w- c:\documents and settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1
    2012-09-25 00:56 . 2012-10-18 08:20 ——– d—–w- C:\autotwpro
    2012-09-24 16:28 . 2012-05-29 15:27 29024 —-a-w- c:\windows\system32\uxtuneup.dll
    2012-09-24 16:11 . 2012-05-29 15:27 31584 —-a-w- c:\windows\system32\TURegOpt.exe
    2012-09-24 16:11 . 2012-10-03 16:42 ——– d—–w- c:\program files\TuneUp Utilities 2012
    2012-09-24 04:13 . 2008-04-14 17:02 219136 —-a-w- c:\windows\system32\UxTheme.dll.backup
    2012-09-22 16:31 . 2012-09-22 16:31 ——– d—–w- c:\program files\FDRLab
    .
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2012-10-09 19:19 . 2012-07-02 22:26 73656 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
    2012-10-09 19:19 . 2012-07-02 22:26 696760 —-a-w- c:\windows\system32\FlashPlayerApp.exe
    2012-09-24 04:13 . 2002-09-11 12:00 219136 —-a-w- c:\windows\system32\UxTheme.dll
    2012-09-14 18:57 . 2012-09-14 18:57 182695 —-a-w- C:\torrent.exe
    2012-09-07 23:28 . 2012-09-07 23:29 93672 —-a-w- c:\windows\system32\WindowsAccessBridge.dll
    2012-09-07 23:28 . 2012-06-16 15:57 821736 —-a-w- c:\windows\system32
    pdeployJava1.dll
    2012-09-07 23:28 . 2010-10-03 09:23 746984 —-a-w- c:\windows\system32\deployJava1.dll
    2012-09-07 23:28 . 2010-10-03 09:23 143872 —-a-w- c:\windows\system32\javacpl.cpl
    2012-09-07 15:04 . 2012-02-17 00:56 22856 —-a-w- c:\windows\system32\drivers\mbam.sys
    2012-08-21 11:01 . 2012-02-17 10:08 26840 —-a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
    2012-08-21 11:01 . 2012-02-17 10:08 106928 —-a-w- c:\windows\system32\GEARAspi.dll
    2012-08-02 16:32 . 2010-09-03 00:35 249856 ——w- c:\windows\Setup1.exe
    2012-08-02 16:32 . 2010-09-03 00:35 73216 —-a-w- c:\windows\ST6UNST.EXE
    2012-10-14 13:57 . 2012-09-07 20:12 261600 —-a-w- c:\program files\mozilla firefox\components\browsercomps.dll
    .
    .
    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
    REGEDIT4
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "RegistryBooster"="c:\program files\Uniblue\RegistryBooster\launcher.exe" [2012-07-08 68000]
    "CrossRiderPlugin"="c:\program files\CrossriderWebApps\Crossrider.exe" [2011-05-15 478720]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "C-Media Mixer"="Mixer.exe" [2002-10-15 1818624]
    "UnlockerAssistant"="c:\program files\Unlocker\UnlockerAssistant.exe" [2010-07-04 17408]
    "sfagent"="c:\program files\Fighters\SPAMfighter\sfagent.exe" [2012-04-24 1197704]
    "Samsung PanelMgr"="c:\windows\Samsung\PanelMgr\SSMMgr.exe" [2010-06-07 618496]
    "avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2012-08-01 348664]
    "BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
    "BDRegion"="c:\program files\Cyberlink\Shared files\brs.exe" [2010-11-17 75048]
    "CommonToolkitTray"="c:\program files\Fighters\Tray\FightersTray.exe" [2012-08-13 1454184]
    "InstantBurn"="c:\progra~1\CYBERL~1\INSTAN~1\Win2K\IBurn.exe" [2007-06-04 599600]
    "RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2007-10-28 72736]
    "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
    "APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-08-27 59280]
    "WinampAgent"="c:\program files\Winamp\winampa.exe" [2012-06-28 74752]
    .
    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]
    .
    c:\documents and settings\R.Sweres\Menu Start\Programma's\Opstarten\
    HDDCoffee.exe [2010-1-3 201216]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "EnableLinkedConnections"= 1 (0x1)
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
    "UIHost"="c:\documents and settings\All Users\Application Data\TuneUp Software\TuneUp Utilities 2012\WinStyler\tu_logonui.exe"
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\xlkfs.sys]
    @="Driver"
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CrossRiderPlugin]
    2011-05-15 22:01 478720 —-a-w- c:\program files\CrossriderWebApps\Crossrider.exe
    .
    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
    "BlueStacks Agent"=c:\program files\BlueStacks\HD-Agent.exe
    "AnyDVD"=c:\program files\SlySoft\AnyDVD\AnyDVDtray.exe
    "LightScribe Control Panel"=c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
    "SoftAuto.exe"="c:\program files\Creative\Software Update 3\SoftAuto.exe"
    "CTFMON.EXE"=c:\windows\system32\ctfmon.exe
    "CrossRiderPlugin"=c:\program files\CrossriderWebApps\Crossrider.exe
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
    "APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
    "NBAgent"="c:\program files\Nero\Nero 11\Nero BackItUp\NBAgent.exe" /WinStart
    "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
    "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe"
    .
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "c:\\Program Files\\uTorrent\\uTorrent.exe"=
    "c:\\Program Files\\WinMX\\WinMX.exe"=
    "c:\documents and settings\R.Sweres\Mijn documenten\Downloads\FLVConverterSetup.exe"= InstallCore™
    "c:\\Program Files\\FDRLab\\save2pc\\save2pc.exe"=
    "c:\\WINDOWS\\twain_32\\Samsung\\ScanMgr.exe"=
    "c:\\WINDOWS\\twain_32\\Samsung\\CLX3180\\Sscan2io.exe"=
    "c:\\Program Files\\Scan Assistant\\USDAgent.exe"=
    "c:\\Program Files\\Microsoft Office\\Office14\\GROOVE.EXE"=
    "c:\\Program Files\\Microsoft Office\\Office14\\ONENOTE.EXE"=
    "c:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE"=
    "c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
    "c:\\Program Files\\Calibre2\\calibre.exe"=
    "c:\\Program Files\\VirtualDJ\\virtualdj_pro.exe"=
    "c:\\Program Files\\DVDFab Media Player\\FabStreamer.exe"=
    "c:\\Program Files\\Philips\\Wi-Fi MediaConnect\\Wi-Fi MediaConnect.exe"=
    "c:\\Documents and Settings\\R.Sweres\\Bureaublad\\hfs.exe"=
    "c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
    "c:\\Program Files\\iTunes\\iTunes.exe"=
    "c:\\Program Files\\Winamp\\winamp.exe"=
    .
    R0 NBVol;Nero Backup Volume Filter Driver;c:\windows\system32\drivers\NBVol.sys [21-12-2011 0:31 56496]
    R0 NBVolUp;Nero Backup Volume Upper Filter Driver;c:\windows\system32\drivers\NBVolUp.sys [21-12-2011 0:31 12464]
    R0 tdrpman258;Acronis Try&Decide and Restore Points filter (build 258);c:\windows\system32\drivers\tdrpm258.sys [5-9-2010 17:11 911680]
    R1 avkmgr;avkmgr;c:\windows\system32\drivers\avkmgr.sys [19-1-2012 20:43 36000]
    R1 CLBStor;InstantBurn Storage Helper Driver;c:\windows\system32\drivers\CLBStor.sys [3-9-2010 0:10 16048]
    R1 xlkfs;xlkfs;c:\windows\system32\drivers\xlkfs.sys [4-9-2008 4:31 18176]
    R2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC};Power Control [2012/04/01 20:43];c:\program files\CyberLink\PowerDVD10\NavFilter\000.fcl [28-6-2010 22:50 87536]
    R2 afcdpsrv;Acronis Nonstop Backup service;c:\program files\Common Files\Acronis\CDP\afcdpsrv.exe [5-9-2010 17:11 2480048]
    R2 AntiVirMailService;Avira Mail Protection;c:\program files\Avira\AntiVir Desktop\avmailc.exe [19-1-2012 20:43 375760]
    R2 AntiVirSchedulerService;Avira Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [19-1-2012 20:43 86224]
    R2 AntiVirWebService;Avira Web Protection;c:\program files\Avira\AntiVir Desktop\avwebgrd.exe [19-1-2012 20:43 465360]
    R2 BstHdDrv;BlueStacks Hypervisor;c:\program files\BlueStacks\HD-Hypervisor-x86.sys [23-11-2011 1:46 62816]
    R2 BstHdLogRotatorSvc;BlueStacks Log Rotator Service;c:\program files\BlueStacks\HD-LogRotatorService.exe [23-11-2011 1:45 94560]
    R2 CLBUDF;CyberLink InstantBurn UDF Filesystem;c:\windows\system32\drivers\CLBUDF.sys [3-9-2010 0:10 162096]
    R2 KMService;KMService;c:\windows\system32\srvany.exe [17-2-2012 10:28 8192]
    R2 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe [17-10-2012 7:41 399432]
    R2 NAUpdate;Nero Update;c:\program files\Nero\Update\NASvc.exe [25-11-2011 17:32 687400]
    R2 SPAMfighter Update Service;SPAMfighter Update Service;c:\program files\Fighters\SPAMfighter\sfus.exe [24-4-2012 12:53 215688]
    R2 Suite Service;Suite Service;c:\program files\Fighters\FighterSuiteService.exe [23-8-2012 13:09 1270376]
    R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe [29-5-2012 17:27 1528672]
    R3 afcdp;afcdp;c:\windows\system32\drivers\afcdp.sys [5-9-2010 17:12 160704]
    R3 cmudaxp;Auzen X-Meridian 7.1 2G Audio Interface;c:\windows\system32\drivers\cmudaxp.sys [26-5-2012 19:27 1495552]
    R3 NinjaUSB;Freecom Turbo USB 2.0;c:\windows\system32\drivers\NinjaUSB.sys [21-10-2010 20:32 24704]
    R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers
    vhda32.sys [8-5-2012 19:18 119656]
    R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2012\TuneUpUtilitiesDriver32.sys [29-3-2012 16:32 10064]
    R3 WFMC_VAD;WFMC Virtual Audio Device (WDM);c:\windows\system32\drivers\wfmcvad.sys [21-7-2012 10:29 19328]
    S2 BstHdAndroidSvc;BlueStacks Android Service;c:\program files\BlueStacks\HD-Service.exe [23-11-2011 1:45 110944]
    S2 gupdate;Google Update-service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [13-9-2012 3:48 116648]
    S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [17-2-2012 2:56 676936]
    S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [6-4-2012 14:19 250808]
    S3 CTUPnPSv;Creative Centrale Media Server;c:\program files\Creative\Creative Centrale\CTUPnPSv.exe [21-5-2008 13:42 64000]
    S3 gupdatem;Google Update-service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [13-9-2012 3:48 116648]
    S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [17-2-2012 2:56 22856]
    S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [12-6-2011 12:15 31125880]
    S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [6-5-2012 12:07 115168]
    S3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [9-1-2010 22:37 4640000]
    S3 pcouffin;VSO Software pcouffin;c:\windows\system32\drivers\pcouffin.sys [3-9-2010 0:25 47360]
    .
    — Andere Services/Drivers In Geheugen —
    .
    *NewlyCreated* - MBAMSCHEDULER
    *Deregistered* - MBAMSwissArmy
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
    hpdevmgmt REG_MULTI_SZ hpqcxs08
    .
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
    UxTuneUp
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
    2011-03-04 11:29 451872 —-a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
    .
    Inhoud van de 'Gedeelde Taken' map
    .
    2012-10-18 c:\windows\Tasks\Adobe Flash Player Updater.job
    - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-06 19:19]
    .
    2012-10-15 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 16:57]
    .
    2012-10-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2012-09-13 01:48]
    .
    2012-10-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2012-09-13 01:48]
    .
    2012-10-18 c:\windows\Tasks\RegistryBooster.job
    - c:\program files\Uniblue\RegistryBooster\rbmonitor.exe [2012-04-24 12:39]
    .
    .
    ——- Bijkomende Scan ——-
    .
    uInternet Settings,ProxyOverride = *.local
    IE: &Verzenden naar OneNote - c:\progra~1\MICROS~3\Office14\ONBttnIE.dll/105
    IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~3\Office14\EXCEL.EXE/3000
    LSP: c:\program files\Avira\AntiVir Desktop\avsda.dll
    TCP: DhcpNameServer = 212.54.40.25 212.54.35.25
    DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
    DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
    FF - ProfilePath - c:\documents and settings\R.Sweres\Application Data\Mozilla\Firefox\Profiles\kzmrgbuw.default\
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.nl/ig?hl=nl
    FF - prefs.js: network.proxy.type - 0
    FF - ExtSQL: 2012-08-31 12:26; {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}; c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
    .
    - - - - ORPHANS VERWIJDERD - - - -
    .
    HKLM-Run-CLX3180_Scan2Pc - c:\windows\Twain_32\Samsung\CLX3180\Scan2pc.exe
    HKLM-Run-3180 Scan2PC - c:\windows\Twain_32\Samsung\CLX3180\Scan2pc.exe
    HKLM-Run-Cmaudio8788 - cmicnfgp.cpl
    .
    .
    .
    **************************************************************************
    .
    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2012-10-18 14:35
    Windows 5.1.2600 Service Pack 3 NTFS
    .
    scannen van verborgen processen …
    .
    scannen van verborgen autostart items …
    .
    scannen van verborgen bestanden …
    .
    Scan succesvol afgerond
    verborgen bestanden: 0
    .
    **************************************************************************
    .
    [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\{1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC}]
    "ImagePath"="\??\c:\program files\CyberLink\PowerDVD10\NavFilter\000.fcl"
    .
    [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\{95808DC4-FA4A-4C74-92FE-5B863F82066B}]
    "ImagePath"="\??\c:\program files\CyberLink\PowerDVD\000.fcl"
    .
    ——————— VERGRENDELDE REGISTER SLEUTELS ———————
    .
    [HKEY_USERS\S-1-5-21-73586283-507921405-839522115-1003\Software\Microsoft\SystemCertificates\AddressBook*]
    @Allowed: (Read) (RestrictedCode)
    @Allowed: (Read) (RestrictedCode)
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe,-101"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
    "Enabled"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
    @="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker5"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"
    .
    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"
    .
    ——————— DLLs Geladen Onder Lopende Processen ———————
    .
    - - - - - - - > 'lsass.exe'(436)
    c:\program files\Avira\AntiVir Desktop\avsda.dll
    .
    Voltooingstijd: 2012-10-18 14:37:01
    ComboFix-quarantined-files.txt 2012-10-18 12:36
    .
    Pre-Run: 57.620.697.088 bytes beschikbaar
    Post-Run: 57.668.698.112 bytes beschikbaar
    .
    WindowsXP-KB310994-SP2-Pro-BootDisk-NLD.exe
    [boot loader]
    timeout=2
    default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
    [operating systems]
    c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
    UnsupportedDebug="do not select this" /debug
    multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn /TUTag=BE5K3C /Kernel=TUKernel.exe
    multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional (TuneUp Backup)" /fastdetect /NoExecute=OptIn /TUTag=BE5K3C-BAK
    .
    - - End Of File - - D0ADE3C01D0C8BCA7669CB3E6E4A1599





  • Dat was al een behoorlijke schoonmaak!
    We gaan door:

    [b:16bb5d1088]Welk programma[/b:16bb5d1088]:
  • Vriendelijk bedankt, ben pas net thuis gekomen. Dat laatste programma ga ik morgen naar kijken. 8)
  • Wil het lukken?
  • p.c. verkocht of zo?
  • [quote:251afe435e="f.j.stols"]p.c. verkocht of zo?[/quote:251afe435e]

    Dat vind ik ook een leuke en originele vraag.

Beantwoord deze vraag

Dit is een gearchiveerde pagina. Antwoorden is niet meer mogelijk.