Archief - Hoog processor en geheugen gebruikt

Zoals de titel al aangeeft heeft mijn laptop standaard een hoog processor en geheugen gebruik. Zou iemand kunnen checken of er wellicht wat op de achtergrond aan het draaien is wat niet zou moeten?

Alvast bedankt

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:15:54, on 8-1-2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe
C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\CrossriderWebApps\Crossrider.exe
C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe
C:\Users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10t_ActiveX.exe
C:\Program Files\ThinkPad\Bluetooth Software\BtStackServer.exe
C:\Program Files\Hewlett-Packard\Shared\hpqToaster.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = iGoogle
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN | Hotmail | Messenger | Nieuws, sport, entertainment, video, lifestyle, auto en nog veel meer, dat is MSN !
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN | Hotmail | Messenger | Nieuws, sport, entertainment, video, lifestyle, auto en nog veel meer, dat is MSN !
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: CrossRider - {A876E312-7D08-401a-B7A6-FAFC5DC2F292} - C:\Program Files\CrossriderWebApps\Crossrider.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: TBSB05541 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\Veehd Plugin\tbunsmAE0C.tmp\tbcore3.dll
O3 - Toolbar: Veehd Plugin - {32EA9CD0-5187-4FE3-B989-B4D1408D2802} - C:\Program Files\Veehd Plugin\tbunsmAE0C.tmp\tbcore3.dll
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [CDAServer] C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [HTC Sync Loader] "C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" -startup
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [Google Update] "C:\Users\***\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [CrossRiderPlugin] C:\Program Files\CrossriderWebApps\Crossrider.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Dropbox.lnk = ***\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Startup: MagicDisc.lnk = C:\Program Files\MagicDisc\MagicDisc.exe
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: VPN Client.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files\ThinkPad\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @C:\Program Files\ThinkPad\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://verkopen.marktplaats.nl/js/widgets/imageUploader/aurigma/5_7_24_0/ImageUploader5.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C37C7C8E-7C35-4D4B-B4B5-62570B652C9A}: NameServer = 192.168.1.254,192.168.2.254
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Andrea Electronics Corporation - C:\Windows\system32\AEADISRV.EXE
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard Company - C:\Windows\system32\Hpservice.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: NVIDIA Performance Driver Service - Unknown owner - C:\Program Files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 9925 bytes

Download ComboFix van één van deze locaties:

Link 1
Link 2


* BELANGRIJK !!! Sla ComboFix.exe op je Bureaublad op.
>>Hier<< kunt u lezen hoe u Combofix dient te gebruiken.





1. Schakel alle antivirus- en antispywareprogramma's uit, want anders kunnen ze misschien conflicteren met ComboFix.

* (hier of hier staat een handleiding over hoe je deze kan uitschakelen: )

2. Het kan voorkomen dat de computer meerdere malen opnieuw gestart moet worden, dit is normaal.
3. Dubbelklik op "Combofix.exe" om de tool te starten.
4. Klik niet in het scherm van Combofix als deze actief is, hierdoor kan de 'tool' vastlopen.

* Noot !!! Als er een error wordt getoond met de melding "Illegal operation attempted on a registery key that has been marked for deletion." herstart dan de computer.

5. Wanneer ComboFix klaar is, zal het het een logbestand voor je maken. Post de inhoud van dit logbestand (te vinden als C:\ComboFix.txt) in je volgende bericht.

ComboFix 12-01-07.03 - *** 08-01-2012 18:05:12.1.2 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1252.31.1033.18.2031.1303 [GMT 1:00]
Gestart vanuit: c:\users\***\Desktop\ComboFix.exe
AV: AntiVir Desktop *Disabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: AntiVir Desktop *Disabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Nieuw herstelpunt werd aangemaakt
.
.
(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Veehd Plugin\tbunsmAE0C.tmp\tbHElper.dll
F:\Autorun.inf
.
.
(((((((((((((((((((( Bestanden Gemaakt van 2011-12-08 to 2012-01-08 ))))))))))))))))))))))))))))))
.
.
2012-01-08 17:14 . 2012-01-08 17:17 -------- d-----w- c:\users\***\AppData\Local\temp
2012-01-08 17:14 . 2012-01-08 17:14 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-01-08 10:14 . 2012-01-08 10:14 -------- d-----w- c:\program files\Common Files\Deterministic Networks
2012-01-08 10:14 . 2012-01-08 10:14 -------- d-----w- c:\program files\Cisco Systems
2012-01-05 21:53 . 2012-01-05 21:53 -------- d-----w- c:\program files\BOS
2011-12-21 22:32 . 2011-12-21 22:34 -------- d-----w- c:\windows\rescache
2011-12-16 11:51 . 2011-12-16 11:52 -------- d-----w- c:\program files\GameSpy Arcade
2011-12-15 12:22 . 2011-11-24 04:25 2342912 ----a-w- c:\windows\system32\win32k.sys
2011-12-15 12:22 . 2011-11-05 04:26 2048 ----a-w- c:\windows\system32\tzres.dll
2011-12-15 12:22 . 2011-10-26 04:28 38912 ----a-w- c:\windows\system32\csrsrv.dll
2011-12-15 12:22 . 2011-10-15 05:38 534528 ----a-w- c:\windows\system32\EncDec.dll
2011-12-15 12:22 . 2011-10-26 04:47 3912560 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-12-15 12:22 . 2011-10-26 04:47 3967856 ----a-w- c:\windows\system32\ntkrnlpa.exe
.
.
.
((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-12-10 14:24 . 2011-02-23 20:20 20464 ----a-w- c:\windows\system32\drivers\mbam.sys
.
.
((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{32EA9CD0-5187-4FE3-B989-B4D1408D2802}"= "c:\program files\Veehd Plugin\tbunsmAE0C.tmp\tbcore3.dll" [2011-04-19 2636800]
.
[HKEY_CLASSES_ROOT\clsid\{32ea9cd0-5187-4fe3-b989-b4d1408d2802}]
[HKEY_CLASSES_ROOT\TBSB05541.TBSB05541.3]
[HKEY_CLASSES_ROOT\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}]
[HKEY_CLASSES_ROOT\TBSB05541.TBSB05541]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{32EA9CD0-5187-4FE3-B989-B4D1408D2802}"= "c:\program files\Veehd Plugin\tbunsmAE0C.tmp\tbcore3.dll" [2011-04-19 2636800]
.
[HKEY_CLASSES_ROOT\clsid\{32ea9cd0-5187-4fe3-b989-b4d1408d2802}]
[HKEY_CLASSES_ROOT\TBSB05541.TBSB05541.3]
[HKEY_CLASSES_ROOT\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}]
[HKEY_CLASSES_ROOT\TBSB05541.TBSB05541]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 ----a-w- c:\users\***\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 ----a-w- c:\users\***\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2011-02-18 05:12 94208 ----a-w- c:\users\***\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CrossRiderPlugin"="c:\program files\CrossriderWebApps\Crossrider.exe" [2011-05-15 478720]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2010-11-08 281768]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2010-06-04 1791272]
"QlbCtrl.exe"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2009-11-11 287800]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-06-08 37296]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2007-02-21 1183744]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2010-11-04 1753192]
"CDAServer"="c:\program files\Common Files\Common Desktop Agent\CDASrv.exe" [2010-12-17 332288]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"HTC Sync Loader"="c:\program files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" [2011-11-01 593920]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-12-24 460872]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-12-24 460872]
.
c:\users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\***\AppData\Roaming\Dropbox\bin\Dropbox.exe [2011-12-5 24242056]
MagicDisc.lnk - c:\program files\MagicDisc\MagicDisc.exe [2010-9-8 576000]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\ThinkPad\Bluetooth Software\BTTray.exe [2009-10-2 795936]
VPN Client.lnk - c:\windows\Installer\{B0BF7057-6869-4E4B-920C-EA2A58DA07F0}\Icon3E5562ED7.ico [2012-1-8 6144]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-12-02 29472]
R3 HTCAND32;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [2009-10-26 25088]
R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys [2010-06-23 23040]
R3 RICOH SmartCard Reader;RICOH SmartCard Reader;c:\windows\system32\DRIVERS\rismc32.sys [2009-07-20 49152]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-13 207360]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-13 980992]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-13 661504]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-09-08 1343400]
S2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [2011-04-30 136360]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [2011-05-13 26168]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2011-12-24 652872]
S2 NVIDIA Performance Driver Service;NVIDIA Performance Driver Service;c:\program files\NVIDIA Corporation\Performance Drivers\nvPDsvc.exe [2009-12-08 5241448]
S2 PassThru Service;Internet Pass-Through Service;c:\program files\HTC\Internet Pass-Through\PassThruSvr.exe [2011-08-12 87040]
S2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys [2010-12-23 5120]
S3 ATSwpWDF;AuthenTec TruePrint USB WBF WDF Driver;c:\windows\system32\Drivers\ATSwpWDF.sys [2009-12-03 625224]
S3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-12-10 20464]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
S3 rismc32;RICOH Smart Card Reader;c:\windows\system32\DRIVERS\rismc32.sys [2009-07-20 49152]
.
.
--- Andere Services/Drivers In Geheugen ---
.
*NewlyCreated* - MBAMPROTECTOR
.
Inhoud van de 'Gedeelde Taken' map
.
2012-01-08 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3040087075-4078440031-536258611-1000Core.job
- c:\users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2010-09-08 12:43]
.
2012-01-08 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3040087075-4078440031-536258611-1000UA.job
- c:\users\***\AppData\Local\Google\Update\GoogleUpdate.exe [2010-09-08 12:43]
.
.
------- Bijkomende Scan -------
.
uStart Page = hxxp://www.google.nl/ig?hl=nl&source=iglk
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Send image to &Bluetooth Device... - c:\program files\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\ThinkPad\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.1.254 195.241.77.55 195.241.77.58
TCP: Interfaces\{C37C7C8E-7C35-4D4B-B4B5-62570B652C9A}: NameServer = 192.168.1.254,192.168.2.254
.
- - - - ORPHANS VERWIJDERD - - - -
.
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
.
.
.
--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Voltooingstijd: 2012-01-08 18:19:01
ComboFix-quarantined-files.txt 2012-01-08 17:19
ComboFix2.txt 2010-04-14 11:24
.
Pre-Run: 2.816.942.080 bytes free
Post-Run: 3.482.079.232 bytes free
.
- - End Of File - - F3333D7BB5D3DD802510FAF990BD6C9D

Gaat het goed. ?

Cpu is nu beter, geheugen is nog steeds 40% (van 2gb) met alleen msn, avira, drop box en een print manager op de achtergrond. Vind dat nog steeds behoorlijk aan de hoge kant)

Download de Emsisoft Emergency Kit naar het bureaublad en pak het ZIP bestand uit.

• Open de map "EmsisoftEmergencyKit" en dubbelklik op "Start.exe"
• Klik nu op "Emergency Kit Scanner" u krijg nu een melding dat het is aanbevolen om eerst te updaten sta dit toe door te klikken op "Ja"
  
  
• Als de update gereed is en de melding "Update process is succesvol afgerond" verschijnt klikt u op "menu" en dan op "Scan PC"
• Selecteer de optie "Diep" als deze niet standaard al zo is ingesteld.
• Klik Nu op de knop "Scan" en doe verder niets op de computer tijdens het scannen, deze scan kan een geruime tijd in beslag nemen dus wacht dit geduldig af.
• Het venster met de waarschuwing over een verhoogd risico kunt u sluiten als de scan gereed is.
  
  Opmerking:
  
  Als u deze melding ziet.
  
  C:\Documents and Settings\username\Bureaublad\ComboFix.exe/$0\List.bat Verwijderd Virus.Win32.HTML!IK
  
  Wanneer het bestand in het venster met scanresultaten staat kun je rechtsklikken op die detectie en kiezen voor "Versturen als vals alarm (False Positive)".
  
  
• Zorg ervoor dat alle gevonden items zijn aangevinkt en druk dan op de knop "verwijder geselecteerde" u zal nu de volgende melding krijgen maar klik hier op "Ja"
  
  
• Als het verwijderen gereed is klikt u op de knop "View report" en selecteert u het tekstbestand van deze scan met de naam zoals: a2scan_110730-111615.txt
• Plaats de inhoud van dit LOG bestand straks in uw volgende bericht.
• Herstart nu de computer.

Bij deze de log, ik zal morgen even melden hoe m'n pc zich nu gedraagd.

Emsisoft Emergency Kit - Versie 1.0
Laatste Update: 17-1-2012 17:51:00

Scaninstellingen:

Scantype: Diepe Scan
Objecten: Geheugen, Sporen, Cookies, C:\, D:\, F:\, G:\
Scan archieven: Aan
Heuristieken: Uit
ADS Scan: Aan

Scan gestart: 17-1-2012 17:52:06

c:\program files\GameSpy Arcade Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\AddIns Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\cstrike Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\cstrike\frontline Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\halflife Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\halflife\action Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\halflife\cstrike Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\halflife\firearms Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\halflife\frontline Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\halflife\gearbox Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\halflife\tfc Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake2 Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake2\aq2 Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake2\battle Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake2\chaosdm Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake2\duel Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake2\freeze Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake2\gloom Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake2\gxmod Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake2\holywars Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake2\jail Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake2\kots Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake2\lfiredm Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake2\lithium2 Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake2\LMCTF Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake2\pball Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake2\q2comp Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake2\QPong Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake2\ra2 Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake2\requiem Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake2\sconfig Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake2\tourney Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake2\wf Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake2\wod Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake3 Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake3\alliance Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake3\beryllium Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake3\excessive Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake3\instagib Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake3\jailbreak Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake3\matchmod Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake3\osp Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake3\q3comp Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake3\q3f Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake3\q3ut2 Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake3\requiem Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake3\rocketarena3 Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\quake3\wfa Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\tribes Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\tribes\Arena Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\tribes\ch Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\tribes\CTF Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\tribes\CTFb Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\tribes\CTFplus Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\tribes\DD Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\tribes\DM Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\tribes\Duel Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\tribes\Fr Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\tribes\MT Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\tribes\Open Cal Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\tribes\RPG Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\tribes\TAC Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\ut Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\ut\Excessive Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\ut\RocketArena Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Custom\ut\Swat Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Images Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Images\icons Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Images\portraits Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Profiles Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Profiles\(default) Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Services Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Services\_common Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Services\_demospy Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Services\_fplanet Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Services\_gnews Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Services\_gspyder Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Services\_news Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Services\_support Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Skins Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Sounds Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Sounds\(default) Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Sounds\classic Ontdekt: Trace.Directory.GameSpy Arcade!A2
c:\users\***\appdata\roaming\microsoft\windows\start menu\programs\GameSpy Arcade Ontdekt: Trace.Directory.GameSpy Arcade!A2
Value: HKEY_CLASSES_ROOT\AppID\TVUAx.DLL --> AppID Ontdekt: Trace.Registry.dl.tvunetworks.com!A2
Value: HKEY_CLASSES_ROOT\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} --> AppID Ontdekt: Trace.Registry.dl.tvunetworks.com!A2
Value: HKEY_CLASSES_ROOT\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0}\InprocServer32 --> ThreadingModel Ontdekt: Trace.Registry.dl.tvunetworks.com!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\TVUAx.DLL --> AppID Ontdekt: Trace.Registry.dl.tvunetworks.com!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} --> AppID Ontdekt: Trace.Registry.dl.tvunetworks.com!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0}\InprocServer32 --> ThreadingModel Ontdekt: Trace.Registry.dl.tvunetworks.com!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TVUPlayer --> NSIS:Language Ontdekt: Trace.Registry.dl.tvunetworks.com!A2
c:\program files\GameSpy Arcade\4dca9208.dat Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Aphex.exe Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\ArcRes.dll Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\dat.bmp Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\def_banner.gif Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\def_banner.html Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\def_bannerbg.jpg Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\def_loading.gif Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\def_logo.jpg Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\def_news.html Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\fpupdate.exe Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\GameSpy Arcade - Debug.lnk Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\GameSpy Arcade Help.url Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\GameSpy Arcade Website.url Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\GameSpy Arcade.lnk Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\GameSpy.com Gaming's Homepage.url Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\GSAPak.exe Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\gslan.dll Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\gsws.dll Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\INSTALL.LOG Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\pw32.dll Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\readme.html Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Register GameSpy Arcade.url Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\RptCrash.exe Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Services\_news\rsrc.dir Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Services\_news\service_tab.psd Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Services\_news\service_tab+.tga Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Services\_support\rsrc.dir Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Services\_support\service_tab.psd Ontdekt: Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\ws_default.html Ontdekt: Trace.File.GameSpy Arcade!A2
Value: HKEY_CURRENT_USER\Software\GameSpy\GameSpy Arcade --> InstDir Ontdekt: Trace.Registry.GameSpy Arcade!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GameSpy Arcade --> DisplayName Ontdekt: Trace.Registry.GameSpy Arcade!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GameSpy Arcade --> UninstallString Ontdekt: Trace.Registry.GameSpy Arcade!A2
Value: HKEY_CLASSES_ROOT\CLSID\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}\InprocServer32 --> ThreadingModel Ontdekt: Trace.Registry.Widomaker Toolbar!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}\InprocServer32 --> ThreadingModel Ontdekt: Trace.Registry.Widomaker Toolbar!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@247realmedia[1].txt Ontdekt: Trace.TrackingCookie.247realmedia!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@adtech[2].txt Ontdekt: Trace.TrackingCookie.adtech!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@bluestreak[1].txt Ontdekt: Trace.TrackingCookie.bluestreak!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@bravenet[2].txt Ontdekt: Trace.TrackingCookie.bravenet!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@bs.serving-sys[2].txt Ontdekt: Trace.TrackingCookie.bs.serving-sys!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@clickbank[1].txt Ontdekt: Trace.TrackingCookie.clickbank!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@com[1].txt Ontdekt: Trace.TrackingCookie.com!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@ehg-techtarget.hitbox[2].txt Ontdekt: Trace.TrackingCookie.ehg-techtarget.hitbox!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@hitbox[2].txt Ontdekt: Trace.TrackingCookie.hitbox!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@pointroll[2].txt Ontdekt: Trace.TrackingCookie.pointroll!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@realmedia[1].txt Ontdekt: Trace.TrackingCookie.realmedia!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@revenue[2].txt Ontdekt: Trace.TrackingCookie.revenue!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@specificclick[2].txt Ontdekt: Trace.TrackingCookie.specificclick!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@stat.dealtime[2].txt Ontdekt: Trace.TrackingCookie.stat.dealtime!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@tradedoubler[1].txt Ontdekt: Trace.TrackingCookie.tradedoubler!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@trafficmp[2].txt Ontdekt: Trace.TrackingCookie.trafficmp!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@web4.realtracker[1].txt Ontdekt: Trace.TrackingCookie.web4.realtracker!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@www.wired[1].txt Ontdekt: Trace.TrackingCookie.www.wired!A2
C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\69310b98-5bac106e/bpac\a$1.class Ontdekt: Java.Trojan-Downloader.OpenConnection!IK
C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\69310b98-5bac106e/bpac\a.class Ontdekt: Trojan-Downloader.Java.OpenConnection!IK
C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\69310b98-5bac106e/bpac\b.class Ontdekt: Trojan.Java.Agent!IK
C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\69310b98-5bac106e/bpac\KAVS.class Ontdekt: Trojan-Downloader.Java.OpenConnection!IK
C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\5735396a-3f172b5c/array\element.class Ontdekt: Trojan-Downloader.Java.OpenConnection!IK
C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\5735396a-3f172b5c/array\list.class Ontdekt: Java.Trojan-Downloader.OpenConnection!IK
C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\5735396a-3f172b5c/array\queue.class Ontdekt: Java.Trojan-Downloader.OpenConnection!IK
C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\5735396a-3f172b5c/array\stack.class Ontdekt: Java.Trojan-Downloader.OpenConnection!IK
C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\5735396a-3f172b5c/check\circle.class Ontdekt: Trojan-Downloader.Java.OpenConnection!IK
C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\5735396a-3f172b5c/check\thas.class Ontdekt: Trojan-Downloader.Java.OpenConnection!IK
C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63\76fbb83f-7580cae8/AppletX.class Ontdekt: JAVA.Agent!IK

Gescand

Bestanden: 430117
Sporen: 403649
Cookies: 7590
Processen: 65

Gevonden

Bestanden: 11
Sporen: 127
Cookies: 18
Processen: 0
Registersleutels: 0

Scan Geëindigd: 17-1-2012 23:10:54
Scantijd: 5:18:48

C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63\76fbb83f-7580cae8/AppletX.class Verwijderd JAVA.Agent!IK
C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\69310b98-5bac106e/bpac\b.class Verwijderd Trojan.Java.Agent!IK
C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\69310b98-5bac106e/bpac\a.class Verwijderd Trojan-Downloader.Java.OpenConnection!IK
C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\69310b98-5bac106e/bpac\KAVS.class Verwijderd Trojan-Downloader.Java.OpenConnection!IK
C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\5735396a-3f172b5c/array\element.class Verwijderd Trojan-Downloader.Java.OpenConnection!IK
C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\5735396a-3f172b5c/check\circle.class Verwijderd Trojan-Downloader.Java.OpenConnection!IK
C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\5735396a-3f172b5c/check\thas.class Verwijderd Trojan-Downloader.Java.OpenConnection!IK
C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\69310b98-5bac106e/bpac\a$1.class Verwijderd Java.Trojan-Downloader.OpenConnection!IK
C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\5735396a-3f172b5c/array\list.class Verwijderd Java.Trojan-Downloader.OpenConnection!IK
C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\5735396a-3f172b5c/array\queue.class Verwijderd Java.Trojan-Downloader.OpenConnection!IK
C:\Users\***\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\5735396a-3f172b5c/array\stack.class Verwijderd Java.Trojan-Downloader.OpenConnection!IK
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@www.wired[1].txt Verwijderd Trace.TrackingCookie.www.wired!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@web4.realtracker[1].txt Verwijderd Trace.TrackingCookie.web4.realtracker!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@trafficmp[2].txt Verwijderd Trace.TrackingCookie.trafficmp!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@tradedoubler[1].txt Verwijderd Trace.TrackingCookie.tradedoubler!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@stat.dealtime[2].txt Verwijderd Trace.TrackingCookie.stat.dealtime!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@specificclick[2].txt Verwijderd Trace.TrackingCookie.specificclick!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@revenue[2].txt Verwijderd Trace.TrackingCookie.revenue!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@realmedia[1].txt Verwijderd Trace.TrackingCookie.realmedia!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@pointroll[2].txt Verwijderd Trace.TrackingCookie.pointroll!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@hitbox[2].txt Verwijderd Trace.TrackingCookie.hitbox!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@ehg-techtarget.hitbox[2].txt Verwijderd Trace.TrackingCookie.ehg-techtarget.hitbox!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@com[1].txt Verwijderd Trace.TrackingCookie.com!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@clickbank[1].txt Verwijderd Trace.TrackingCookie.clickbank!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@bs.serving-sys[2].txt Verwijderd Trace.TrackingCookie.bs.serving-sys!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@bravenet[2].txt Verwijderd Trace.TrackingCookie.bravenet!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@bluestreak[1].txt Verwijderd Trace.TrackingCookie.bluestreak!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@adtech[2].txt Verwijderd Trace.TrackingCookie.adtech!A2
C:\Users\***\AppData\Roaming\Microsoft\Windows\Cookies\Low\***_***@247realmedia[1].txt Verwijderd Trace.TrackingCookie.247realmedia!A2
Value: HKEY_CLASSES_ROOT\CLSID\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}\InprocServer32 --> ThreadingModel Verwijderd Trace.Registry.Widomaker Toolbar!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}\InprocServer32 --> ThreadingModel Verwijderd Trace.Registry.Widomaker Toolbar!A2
Value: HKEY_CURRENT_USER\Software\GameSpy\GameSpy Arcade --> InstDir Verwijderd Trace.Registry.GameSpy Arcade!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GameSpy Arcade --> DisplayName Verwijderd Trace.Registry.GameSpy Arcade!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GameSpy Arcade --> UninstallString Verwijderd Trace.Registry.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\4dca9208.dat Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Aphex.exe Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\ArcRes.dll Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\dat.bmp Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\def_banner.gif Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\def_banner.html Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\def_bannerbg.jpg Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\def_loading.gif Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\def_logo.jpg Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\def_news.html Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\fpupdate.exe Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\GameSpy Arcade - Debug.lnk Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\GameSpy Arcade Help.url Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\GameSpy Arcade Website.url Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\GameSpy Arcade.lnk Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\GameSpy.com Gaming's Homepage.url Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\GSAPak.exe Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\gslan.dll Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\gsws.dll Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\INSTALL.LOG Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\pw32.dll Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\readme.html Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Register GameSpy Arcade.url Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\RptCrash.exe Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Services\_news\rsrc.dir Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Services\_news\service_tab.psd Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Services\_news\service_tab+.tga Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Services\_support\rsrc.dir Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\Services\_support\service_tab.psd Verwijderd Trace.File.GameSpy Arcade!A2
c:\program files\GameSpy Arcade\ws_default.html Verwijderd Trace.File.GameSpy Arcade!A2
Value: HKEY_CLASSES_ROOT\AppID\TVUAx.DLL --> AppID Verwijderd Trace.Registry.dl.tvunetworks.com!A2
Value: HKEY_CLASSES_ROOT\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} --> AppID Verwijderd Trace.Registry.dl.tvunetworks.com!A2
Value: HKEY_CLASSES_ROOT\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0}\InprocServer32 --> ThreadingModel Verwijderd Trace.Registry.dl.tvunetworks.com!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\TVUAx.DLL --> AppID Verwijderd Trace.Registry.dl.tvunetworks.com!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} --> AppID Verwijderd Trace.Registry.dl.tvunetworks.com!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0}\InprocServer32 --> ThreadingModel Verwijderd Trace.Registry.dl.tvunetworks.com!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TVUPlayer --> NSIS:Language Verwijderd Trace.Registry.dl.tvunetworks.com!A2
c:\program files\GameSpy Arcade Verwijderd Trace.Directory.GameSpy Arcade!A2
c:\users\***\appdata\roaming\microsoft\windows\start menu\programs\GameSpy Arcade Verwijderd Trace.Directory.GameSpy Arcade!A2

Verwijderd

Bestanden: 11
Sporen: 127
Cookies: 18

En hoe gaat het nu.