Archief - logje - trage downloads

dev!lke · 8 jan 2013

Hey sinds enkele weken heb ik tragere downloads.
+ WMP start nu automatisch op als pc aangaat.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:40:17, on 8/01/2013
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Program Files\ASUS\Ai Suite\EnergySaving\PwSave.exe
C:\Program Files (x86)\ASUS\AASP\1.00.59\aaCenter.exe
C:\Program Files (x86)\Analog Devices\SoundMAX\SoundTray.exe
C:\Program Files\ASUS\Ai Suite\AiNap\AiNap.exe
C:\Program Files\ASUS\Ai Suite\AiGear3\CpuPowerMonitor.exe
C:\Program Files\ASUS\AI Remote\AiRc.exe
C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
C:\Program Files\ASUS\AI Remote\AiRemote.exe
C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\PROGRAM FILES (X86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\GrabIt\GrabIt.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\PROGRAM FILES (X86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/splitcam/{E3A2A40F-DB68-4589-8063-4D021EC9C37A}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN | Hotmail | Messenger | Nieuws, sport, entertainment, video, lifestyle, auto en nog veel meer, dat is MSN !
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/splitcam/{E3A2A40F-DB68-4589-8063-4D021EC9C37A}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: (no name) - {472734EA-242A-422b-ADF8-83D1E48CC825} - (no file)
R3 - URLSearchHook: IMVU Inc Toolbar - {90b49673-5506-483e-b92b-ca0265bd9ca8} - C:\Program Files (x86)\IMVU_Inc\prxtbIMVU.dll (file missing)
R3 - URLSearchHook: ToolbarURLSearchHook Class - {CA3EB689-8F09-4026-AA10-B9534C691CE0} - C:\Program Files (x86)\Freecorder 6\tbhelper.dll
F2 - REG

ystem.ini: UserInit=C:\Windows\SysWOW64\userinit.exe,
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files (x86)\Adobe\/Adobe Contribute CS3/contributeieplugin.dll (file missing)
O2 - BHO: SuggestMeYesBHO - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files (x86)\AutocompletePro\AutocompletePro.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: IMVU Inc - {90b49673-5506-483e-b92b-ca0265bd9ca8} - C:\Program Files (x86)\IMVU_Inc\prxtbIMVU.dll (file missing)
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: TBSB00808 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files (x86)\Freecorder 6\tbcore3.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\/Adobe Contribute CS3/contributeieplugin.dll (file missing)
O3 - Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: IMVU Inc Toolbar - {90b49673-5506-483e-b92b-ca0265bd9ca8} - C:\Program Files (x86)\IMVU_Inc\prxtbIMVU.dll (file missing)
O3 - Toolbar: Freecorder 6 - {6B34ACCF-1B63-4E1A-8633-461917C75544} - C:\Program Files (x86)\Freecorder 6\tbcore3.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O4 - HKLM\..\Run: [SoundTray] "C:\Program Files (x86)\Analog Devices\SoundMAX\SoundTray.exe"
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [Ai Nap] "C:\Program Files\ASUS\Ai Suite\AiNap\AiNap.exe"
O4 - HKLM\..\Run: [CPU Power Monitor] "C:\Program Files\ASUS\Ai Suite\AiGear3\CpuPowerMonitor.exe"
O4 - HKLM\..\Run: [Cpu Level Up help] C:\Program Files\ASUS\Ai Suite\CpuLevelUpHelp.exe
O4 - HKLM\..\Run: [Ai Remote Help] "C:\Program Files\ASUS\AI Remote\AiRc.exe" -r
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NSLauncher] C:\Program Files (x86)\Nokia\Nokia Software Launcher\NSLauncher.exe /startup
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [LWS] C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [SwitchBoard] "C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe"
O4 - HKLM\..\Run: [AdobeCS5.5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2260780799-622699324-668174190-1003\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User '?')
O4 - HKUS\S-1-5-21-2260780799-622699324-668174190-1004\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User '?')
O4 - HKUS\S-1-5-21-2260780799-622699324-668174190-1017\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'UpdatusUser')
O4 - HKUS\S-1-5-18\..\Run: [DAT62B9.tmp.exe] "C:\Windows\TEMP\DAT62B9.tmp.exe" /run (User 'SYSTEEM')
O4 - HKUS\.DEFAULT\..\Run: [DAT62B9.tmp.exe] "C:\Windows\TEMP\DAT62B9.tmp.exe" /run (User 'Default user')
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\user\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O13 - Gopher Prefix:
O16 - DPF: {1C11B948-582A-433F-A98D-A8C4D5CC64F2} (20-20 3D Viewer) - http://kitchenplanner.ikea.com/BE/Core/Player/2020PlayerAX_Win32.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Unknown owner - C:\Windows\system32\AEADISRV.EXE (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMService - Unknown owner - C:\Windows\TEMP\pxpn.tmp\setup.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files (x86)\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft Limited - C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: TVersityMediaServer - Unknown owner - C:\Users\user\AppData\Local\TVersity\Media Server\MediaServer.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: UMVPFSrv - Logitech Inc. - C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\Windows\system32\vmnetdhcp.exe
O23 - Service: VMware Virtual Mount Manager Extended (vmount2) - VMware, Inc. - C:\Program Files (x86)\Common Files\VMware\VMware Virtual Image Editing\vmount2.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\Windows\system32\vmnat.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: XobniService - Xobni Corporation - C:\Program Files (x86)\Xobni\XobniService.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe

--
End of file - 17380 bytes

Juisterr · 12 jan 2013

Hallo, we gaan de volgende tool inzetten. zoek.exe ®by smeenk

De scan kan een tijdje duren omdat je hele schijf afgezocht wordt naar recent geplaatste bestanden.

"zoek.exe" gebruiken:

Schakel je antivirus- en antispywareprogramma's uit, zoek.exe wordt tijdens het downloaden of tijdens het gebruik soms als trojan aangezien.
(hier of hier) kan je lezen hoe je dat doet.
Download daarna zoek.exe naar het bureaublad.
Start de tool middels dubbelklik op "zoek.exe".
Vervolgens zal er na een tijdje een venster geopend worden.
Met je muis selecteer je nu de volgende keuze "Combined fix"(rechts onderaan)
Kopieer nu onderstaande code en plak die in het grote invulvenster:

Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkwaardig probleem.
Code:
```
autoclean;
filesrcm;
startupall;
firefoxlook;
chromelook;
emptyclsid;
```
Sluit nu eerst alle overige nog openstaande programmavensters!
Klik daarna op de knop "Run script".
Wacht nu geduldig af tot er een logje opent(dit kan na een herstart zijn)
Mocht na de herstart geen logje verschijnen, start zoek.exe dan opnieuw, de log verschijnt dan alsnog.
Post nu de inhoud van het geopende logje in het volgende bericht.

dev!lke · 12 jan 2013

sorry da het 2posts zijn ma tekst was te lang
voila:

Code:

Zoek.exe Version 3.0.0.4 Updated 11-January-2013
Tool run by user on za 12/01/2013 at 12:19:55,68.
Microsoft® Windows Vista™ Ultimate  6.0.6002 Service Pack 2 x64
Running in: Normal Mode Internet Access Detected

==== Creating Sample_20131201_1226.zip ======================
 
Process firefox.exe killed
Copied file C:\Users\user\AppData\Roaming\inst.exe to sample
sample\inst.exe renamed to 16E53BFC96CE14021C0E07EB1C198478

C:\Users\Public\Desktop\sample_20131201_1226.zip created successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e} deleted successfully
HKEY_USERS\S-1-5-21-2260780799-622699324-668174190-1000\Software\Microsoft\Internet Explorer\SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e} deleted successfully
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{517BDDE4-E3A7-4570-B21E-2B52B6139FC7} deleted successfully
HKEY_USERS\S-1-5-21-2260780799-622699324-668174190-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{517BDDE4-E3A7-4570-B21E-2B52B6139FC7} deleted successfully
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{517BDDE4-E3A7-4570-B21E-2B52B6139FC7} deleted successfully
HKEY_USERS\S-1-5-21-2260780799-622699324-668174190-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{517BDDE4-E3A7-4570-B21E-2B52B6139FC7} deleted successfully
HKEY_USERS\S-1-5-21-2260780799-622699324-668174190-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88} deleted successfully
HKEY_USERS\S-1-5-21-2260780799-622699324-668174190-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88} deleted successfully
HKEY_USERS\S-1-5-21-2260780799-622699324-668174190-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{90b49673-5506-483e-b92b-ca0265bd9ca8} deleted successfully
HKEY_USERS\S-1-5-21-2260780799-622699324-668174190-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{90b49673-5506-483e-b92b-ca0265bd9ca8} deleted successfully
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{074C1DC5-9320-4A9A-947D-C042949C6216} deleted successfully
HKEY_USERS\S-1-5-21-2260780799-622699324-668174190-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{074C1DC5-9320-4A9A-947D-C042949C6216} deleted successfully
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{074C1DC5-9320-4A9A-947D-C042949C6216} deleted successfully
HKEY_USERS\S-1-5-21-2260780799-622699324-668174190-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{074C1DC5-9320-4A9A-947D-C042949C6216} deleted successfully
HKEY_USERS\S-1-5-21-2260780799-622699324-668174190-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4efb-9B51-7695ECA05670} deleted successfully
HKEY_USERS\S-1-5-21-2260780799-622699324-668174190-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4efb-9B51-7695ECA05670} deleted successfully
HKEY_USERS\S-1-5-21-2260780799-622699324-668174190-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} deleted successfully
HKEY_USERS\S-1-5-21-2260780799-622699324-668174190-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} deleted successfully
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{47833539-D0C5-4125-9FA8-0819E2EAAC93} deleted successfully
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{47833539-D0C5-4125-9FA8-0819E2EAAC93} deleted successfully
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{21FA44EF-376D-4D53-9B0F-8A89D3229068} deleted successfully
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{21FA44EF-376D-4D53-9B0F-8A89D3229068} deleted successfully
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully
HKEY_USERS\S-1-5-21-2260780799-622699324-668174190-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{472734EA-242A-422b-ADF8-83D1E48CC825} deleted successfully
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} deleted successfully
HKEY_USERS\S-1-5-21-2260780799-622699324-668174190-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} deleted successfully
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} deleted successfully
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AA58ED58-01DD-4d91-8333-CF10577473F7} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{517BDDE4-E3A7-4570-B21E-2B52B6139FC7} deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{90b49673-5506-483e-b92b-ca0265bd9ca8} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{90b49673-5506-483e-b92b-ca0265bd9ca8} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{074C1DC5-9320-4A9A-947D-C042949C6216} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{074C1DC5-9320-4A9A-947D-C042949C6216} deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4efb-9B51-7695ECA05670} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-2260780799-622699324-668174190-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{90b49673-5506-483e-b92b-ca0265bd9ca8} deleted successfully
HKEY_USERS\S-1-5-21-2260780799-622699324-668174190-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\{90b49673-5506-483e-b92b-ca0265bd9ca8} deleted successfully
HKEY_USERS\S-1-5-21-2260780799-622699324-668174190-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} deleted successfully
HKEY_USERS\S-1-5-21-2260780799-622699324-668174190-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{47833539-D0C5-4125-9FA8-0819E2EAAC93} deleted successfully
HKEY_USERS\S-1-5-21-2260780799-622699324-668174190-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{47833539-D0C5-4125-9FA8-0819E2EAAC93} deleted successfully
HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{21FA44EF-376D-4D53-9B0F-8A89D3229068} deleted successfully
HKEY_USERS\S-1-5-21-2260780799-622699324-668174190-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{21FA44EF-376D-4D53-9B0F-8A89D3229068} deleted successfully
HKEY_USERS\S-1-5-21-2260780799-622699324-668174190-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully
HKEY_USERS\S-1-5-21-2260780799-622699324-668174190-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\{472734EA-242A-422b-ADF8-83D1E48CC825} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{517BDDE4-E3A7-4570-B21E-2B52B6139FC7} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{EF99BD32-C1FB-11D2-892F-0090271D4F88} deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\urlsearchhooks\{90b49673-5506-483e-b92b-ca0265bd9ca8} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{90b49673-5506-483e-b92b-ca0265bd9ca8} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully

==== FireFox Fix ======================

ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\7owil1fc.default

---- Lines CT2438727 removed from prefs.js ----

user_pref("CT2438727.AboutPrivacyUrl", "http://www.conduit.com/privacy/Default.aspx");
user_pref("CT2438727.CTID", "CT2438727");
user_pref("CT2438727.CurrentServerDate", "10-4-2010");
user_pref("CT2438727.DialogsAlignMode", "LTR");
user_pref("CT2438727.FirstServerDate", "10-4-2010");
user_pref("CT2438727.FirstTime", true);
user_pref("CT2438727.FirstTimeFF3", true);
user_pref("CT2438727.GroupingServerCheckInterval", 1440);
user_pref("CT2438727.GroupingServiceUrl", "http://grouping.services.conduit.com/");
user_pref("CT2438727.Initialize", true);
user_pref("CT2438727.InitializeCommonPrefs", true);
user_pref("CT2438727.InstalledDate", "Sat Apr 10 2010 18:12:09 GMT+0200 (Romance (zomertijd))");
user_pref("CT2438727.IsGrouping", false);
user_pref("CT2438727.IsMulticommunity", false);
user_pref("CT2438727.IsOpenThankYouPage", true);
user_pref("CT2438727.IsOpenUninstallPage", true);
user_pref("CT2438727.LanguagePackLastCheckTime", "Sat Apr 10 2010 18:12:09 GMT+0200 (Romance (zomertijd))");
user_pref("CT2438727.LanguagePackReloadIntervalMM", 1440);
user_pref("CT2438727.LanguagePackServiceUrl", "http://translation.users.conduit.com/Translation.ashx");
user_pref("CT2438727.LastLogin_2.5.8.6", "Sat Apr 10 2010 18:12:13 GMT+0200 (Romance (zomertijd))");
user_pref("CT2438727.LatestVersion", "2.1.0.18");
user_pref("CT2438727.Locale", "en");
user_pref("CT2438727.LoginCache", 4);
user_pref("CT2438727.MCDetectTooltipHeight", "83");
user_pref("CT2438727.MCDetectTooltipUrl", "http://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
user_pref("CT2438727.MCDetectTooltipWidth", "295");
user_pref("CT2438727.SHRINK_TOOLBAR", 1);
user_pref("CT2438727.SearchEngine", "Search||http://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2438727&octid=EB_ORIGINAL_CTID");
user_pref("CT2438727.SearchFromAddressBarIsInit", true);
user_pref("CT2438727.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2438727&q=");
user_pref("CT2438727.SearchInNewTabEnabled", true);
user_pref("CT2438727.SearchInNewTabIntervalMM", 1440);
user_pref("CT2438727.SearchInNewTabLastCheckTime", "Sat Apr 10 2010 18:12:14 GMT+0200 (Romance (zomertijd))");
user_pref("CT2438727.SearchInNewTabServiceUrl", "http://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
user_pref("CT2438727.SearchInNewTabUsageUrl", "http://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
user_pref("CT2438727.SettingsCheckIntervalMin", 120);
user_pref("CT2438727.SettingsLastCheckTime", "Sat Apr 10 2010 18:12:07 GMT+0200 (Romance (zomertijd))");
user_pref("CT2438727.SettingsLastUpdate", "1269281492");
user_pref("CT2438727.ThirdPartyComponentsInterval", 504);
user_pref("CT2438727.ThirdPartyComponentsLastCheck", "Sat Apr 10 2010 18:12:07 GMT+0200 (Romance (zomertijd))");
user_pref("CT2438727.ThirdPartyComponentsLastUpdate", "1269281492");
user_pref("CT2438727.TrusteLinkUrl", "http://www.truste.org/pvr.php?page=validate&softwareProgramId=101&sealid=112");
user_pref("CT2438727.UserID", "UN25347894341477340");
user_pref("CT2438727.alertChannelId", "832836");
user_pref("CT2438727.clientLogIsEnabled", true);
user_pref("CT2438727.clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT2438727.myStuffEnabled", true);
user_pref("CT2438727.myStuffPublihserMinWidth", 400);
user_pref("CT2438727.myStuffSearchUrl", "http://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=2&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
user_pref("CT2438727.myStuffServiceIntervalMM", 1440);
user_pref("CT2438727.myStuffServiceUrl", "http://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
user_pref("CT2438727.uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CommunityToolbar.ToolbarsList", "CT2438727,CT2612669");
user_pref("CommunityToolbar.ToolbarsList2", "CT2438727,CT2612669");

---- Lines CT2438727 modified from prefs.js ----


---- Lines CT2438727 removed from user.js ----


---- Lines CT2612669 removed from prefs.js ----

user_pref("CommunityToolbar.ETag.http://appsmetadata.toolbar.conduit-services.com/?ctid=ct2612669", "\"1311982473\"");
user_pref("CommunityToolbar.ETag.http://appsmetadata.toolbar.conduit-services.com/?ctid=CT2612669", "\"1311982473\"");
user_pref("CommunityToolbar.ETag.http://servicemap.conduit-services.com/Toolbar/?ownerId=CT2612669", "\"634501322816130000\"");
user_pref("CommunityToolbar.ETag.http://settings.toolbar.conduit-services.com/?ctid=CT2612669&octid=CT2612669", "\"1314737372\"");
user_pref("CommunityToolbar.ETag.http://settings.toolbar.conduit-services.com/?ctid=ct2612669&octid=CT2612669", "\"1314737372\"");
user_pref("CommunityToolbar.ToolbarsList4", "CT2612669");
user_pref("CT2612669..clientLogIsEnabled", true);
user_pref("CT2612669..clientLogServiceUrl", "http://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT2612669..uninstallLogServiceUrl", "http://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CT2612669.AboutPrivacyUrl", "http://www.conduit.com/privacy/Default.aspx");
user_pref("CT2612669.alertChannelId", "1005466");
user_pref("CT2612669.AppTrackingLastCheckTime", "Wed Aug 31 2011 11:23:51 GMT+0200 (Romance (zomertijd))");
user_pref("CT2612669.BrowserCompStateIsOpen_129482420034282070", true);
user_pref("CT2612669.BrowserCompStateIsOpen_129564502120544861", true);
user_pref("CT2612669.BrowserCompStateIsOpen_129564560723477699", true);
user_pref("CT2612669.ct2612669.AppTrackingLastCheckTime", "Wed Aug 31 2011 11:23:52 GMT+0200 (Romance (zomertijd))");
user_pref("CT2612669.ct2612669.DialogsAlignMode", "LTR");
user_pref("CT2612669.ct2612669.FeedLastCount129206864782289142", 20);
user_pref("CT2612669.ct2612669.globalFirstTimeInfoLastCheckTime", "Wed Aug 31 2011 11:23:42 GMT+0200 (Romance (zomertijd))");
user_pref("CT2612669.ct2612669.LanguagePackLastCheckTime", "Wed Aug 31 2011 11:23:42 GMT+0200 (Romance (zomertijd))");
user_pref("CT2612669.ct2612669.Locale", "en");
user_pref("CT2612669.ct2612669.SearchInNewTabLastCheckTime", "Wed Aug 31 2011 11:23:42 GMT+0200 (Romance (zomertijd))");
user_pref("CT2612669.ct2612669.SettingsLastCheckTime", "Wed Aug 31 2011 11:23:40 GMT+0200 (Romance (zomertijd))");
user_pref("CT2612669.ct2612669.SettingsLastUpdate", "1314737372");
user_pref("CT2612669.ct2612669.ThirdPartyComponentsLastCheck", "Wed Aug 31 2011 11:23:40 GMT+0200 (Romance (zomertijd))");
user_pref("CT2612669.ct2612669.ThirdPartyComponentsLastUpdate", "1246786978");
user_pref("CT2612669.ct2612669.toolbarAppMetaDataLastCheckTime", "Wed Aug 31 2011 11:23:42 GMT+0200 (Romance (zomertijd))");
user_pref("CT2612669.ct2612669.toolbarContextMenuLastCheckTime", "Wed Aug 31 2011 11:23:42 GMT+0200 (Romance (zomertijd))");
user_pref("CT2612669.CTID", "ct2612669");
user_pref("CT2612669.CurrentServerDate", "31-8-2011");
user_pref("CT2612669.DialogsAlignMode", "LTR");
user_pref("CT2612669.DialogsGetterLastCheckTime", "Wed Aug 31 2011 11:23:42 GMT+0200 (Romance (zomertijd))");
user_pref("CT2612669.DownloadReferralCookieData", "");
user_pref("CT2612669.FeedPollDate129206864782914144", "Wed Aug 31 2011 14:28:41 GMT+0200 (Romance (zomertijd))");
user_pref("CT2612669.FeedTTL129206864782914144", 40);
user_pref("CT2612669.FirstServerDate", "31-8-2011");
user_pref("CT2612669.FirstTime", true);
user_pref("CT2612669.FirstTimeFF3", true);
user_pref("CT2612669.FixPageNotFoundErrors", true);
user_pref("CT2612669.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"http://appdownload.conduit.com/\",\"RevertSettingsEnabled\":\"FALSE\"}");
user_pref("CT2612669.globalFirstTimeInfoLastCheckTime", "Wed Aug 31 2011 11:23:41 GMT+0200 (Romance (zomertijd))");
user_pref("CT2612669.GroupingServerCheckInterval", 1440);
user_pref("CT2612669.GroupingServiceUrl", "http://grouping.services.conduit.com/");
user_pref("CT2612669.HasUserGlobalKeys", true);
user_pref("CT2612669.homepageProtectorEnableByLogin", true);
user_pref("CT2612669.initDone", true);
user_pref("CT2612669.Initialize", true);
user_pref("CT2612669.InitializeCommonPrefs", true);
user_pref("CT2612669.InstallationAndCookieDataSentCount", 2);
user_pref("CT2612669.InstallationType", "UnknownIntegration");
user_pref("CT2612669.InstalledDate", "Wed Aug 31 2011 11:23:40 GMT+0200 (Romance (zomertijd))");
user_pref("CT2612669.isAppTrackingManagerOn", true);
user_pref("CT2612669.IsGrouping", false);
user_pref("CT2612669.IsInitSetupIni", true);
user_pref("CT2612669.IsMulticommunity", false);
user_pref("CT2612669.IsOpenThankYouPage", true);
user_pref("CT2612669.IsOpenUninstallPage", true);
user_pref("CT2612669.LanguagePackLastCheckTime", "Wed Aug 31 2011 11:23:42 GMT+0200 (Romance (zomertijd))");
user_pref("CT2612669.LanguagePackReloadIntervalMM", 1440);
user_pref("CT2612669.LanguagePackServiceUrl", "http://translation.users.conduit.com/Translation.ashx");
user_pref("CT2612669.LastLogin_3.6.0.10", "Wed Aug 31 2011 11:23:42 GMT+0200 (Romance (zomertijd))");
user_pref("CT2612669.LatestVersion", "3.6.0.10");
user_pref("CT2612669.Locale", "en");
user_pref("CT2612669.MCDetectTooltipHeight", "83");
user_pref("CT2612669.MCDetectTooltipUrl", "http://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
user_pref("CT2612669.MCDetectTooltipWidth", "295");
user_pref("CT2612669.myStuffEnabled", true);
user_pref("CT2612669.MyStuffEnabledAtInstallation", true);
user_pref("CT2612669.myStuffPublihserMinWidth", 400);
user_pref("CT2612669.myStuffSearchUrl", "http://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
user_pref("CT2612669.myStuffServiceIntervalMM", 1440);
user_pref("CT2612669.myStuffServiceUrl", "http://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
user_pref("CT2612669.OriginalFirstVersion", "3.6.0.10");
user_pref("CT2612669.SearchFromAddressBarIsInit", true);
user_pref("CT2612669.SearchFromAddressBarUrl", "http://search.conduit.com/ResultsExt.aspx?ctid=CT2612669&SearchSource=2&q=");
user_pref("CT2612669.SearchInNewTabEnabled", true);
user_pref("CT2612669.SearchInNewTabIntervalMM", 1440);
user_pref("CT2612669.SearchInNewTabServiceUrl", "http://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
user_pref("CT2612669.SearchInNewTabUsageUrl", "http://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
user_pref("CT2612669.searchProtectorDialogDelayInSec", 10);
user_pref("CT2612669.searchProtectorEnableByLogin", true);
user_pref("CT2612669.ServiceMapLastCheckTime", "Wed Aug 31 2011 11:23:39 GMT+0200 (Romance (zomertijd))");
user_pref("CT2612669.SettingsLastCheckTime", "Wed Aug 31 2011 11:23:39 GMT+0200 (Romance (zomertijd))");
user_pref("CT2612669.SettingsLastUpdate", "1314737372");
user_pref("CT2612669.testingCtid", "");
user_pref("CT2612669.ThirdPartyComponentsInterval", 504);
user_pref("CT2612669.ThirdPartyComponentsLastCheck", "Wed Aug 31 2011 11:23:39 GMT+0200 (Romance (zomertijd))");
user_pref("CT2612669.ThirdPartyComponentsLastUpdate", "1246786978");
user_pref("CT2612669.toolbarAppMetaDataLastCheckTime", "Wed Aug 31 2011 11:23:40 GMT+0200 (Romance (zomertijd))");
user_pref("CT2612669.toolbarContextMenuLastCheckTime", "Wed Aug 31 2011 11:23:42 GMT+0200 (Romance (zomertijd))");
user_pref("CT2612669.ToolbarShrinkedFromSetup", false);
user_pref("CT2612669.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCityToolbar.com,MyCollegeToolbar.com,MyFamilyToolbar.com,MyForumToolbar.com,MyLibraryToolbar.com,MyRadioToolbar.com,MyStoreToolbar.com,MyTownToolbar.com,MyUniversityToolbar.com,OurChurchToolbar.com,MyXangaToolbar.com,Media-Toolbar.com,LoyaltyToolbar.com,MyTeamToolbar.com,GreatToolbars.com,OurOrganizationToolbar.com,OurBusinessToolbar.com,Toolbar.fm");
user_pref("CT2612669.TrusteLinkUrl", "http://trust.conduit.com/CT2612669");
user_pref("CT2612669.usagesFlag", 2);
user_pref("CT2612669.UserID", "UN71583423184063541");
user_pref("CT2612669.ValidationData_Toolbar", 0);

---- Lines CT2612669 modified from prefs.js ----


---- Lines CT2612669 removed from user.js ----


---- Lines conduit removed from prefs.js ----

user_pref("CommunityToolbar.alert.clientsServerUrl", "http://alert.client.conduit.com");
user_pref("CommunityToolbar.alert.servicesServerUrl", "http://alert.services.conduit.com");
user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en", "wVmmvqqOMqrv5xct1cJIHg==");
user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en", "0uSPYx+Kl2jpu8sJZMeHjw==");
user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en", "Dclc8oo4TTv7+mAkSlUSWg==");
user_pref("CommunityToolbar.ETag.http://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en", "K4Vqu91uAzWURlxJRdXJOg==");
user_pref("CommunityToolbar.ETag.http://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"07879643d3acc1:0\"");
user_pref("CommunityToolbar.ETag.http://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.0.10", "\"80ee9485875dcc1:0\"");
user_pref("CommunityToolbar.ETag.http://translation.toolbar.conduit-services.com/?locale=en", "\"634492029952000000\"");
user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\user\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\7owil1fc.default\\conduitCommon\\modules\\3.6.0.10");
user_pref("CommunityToolbar.notifications.clientsServerUrl", "http://alert.client.conduit.com");
user_pref("CommunityToolbar.notifications.servicesServerUrl", "http://alert.services.conduit.com");

dev!lke · 12 jan 2013

Code:

---- Lines conduit modified from prefs.js ----


---- Lines conduit removed from user.js ----


---- Lines asktb removed from prefs.js ----

user_pref("extensions.snipit.askTbInstalled", true);

---- Lines asktb modified from prefs.js ----


---- Lines asktb removed from user.js ----


---- Lines CommunityToolbar removed from prefs.js ----

user_pref("CommunityToolbar.alert.alertInfoInterval", 60);
user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sat Apr 10 2010 18:12:08 GMT+0200 (Romance (zomertijd))");
user_pref("CommunityToolbar.alert.locale", "en");
user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sat Apr 10 2010 18:12:07 GMT+0200 (Romance (zomertijd))");
user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1234796400");
user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
user_pref("CommunityToolbar.alert.showTrayIcon", false);
user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
user_pref("CommunityToolbar.alert.userId", "{4e4f6bf7-8e49-41e6-a783-1be7261b08b9}");
user_pref("CommunityToolbar.ETag.http://twitter.com/users/show/20566976.xml", "\"be6fa634ec7e45adf02f0a2381b9c034\"-gzip");
user_pref("CommunityToolbar.globalUserId", "f8fd5c22-7f57-47b6-960c-fb0c0dd5e586");
user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.6.0.10");
user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Wed Aug 31 2011 11:23:42 GMT+0200 (Romance (zomertijd))");
user_pref("CommunityToolbar.notifications.locale", "en");
user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Wed Aug 31 2011 11:23:40 GMT+0200 (Romance (zomertijd))");
user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
user_pref("CommunityToolbar.notifications.showTrayIcon", false);
user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
user_pref("CommunityToolbar.notifications.userId", "5c1628ff-4b97-49f3-9ff3-666d62a87e87");
user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");
user_pref("CommunityToolbar.twitter.user_20566976.LastCheckTime", "Wed Aug 31 2011 14:24:42 GMT+0200 (Romance (zomertijd))");

---- Lines CommunityToolbar modified from prefs.js ----


---- Lines CommunityToolbar removed from user.js ----


---- Lines {90b49673-5506-483e-b92b-ca0265bd9ca8} removed from prefs.js ----


---- Lines {90b49673-5506-483e-b92b-ca0265bd9ca8} modified from prefs.js ----

user_pref("extensions.enabledItems", "{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}:6.0.10,{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11,{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13,{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}:6.0.15,{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17,{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20,{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21,{20a82645-c095-46ed-80e3-08825760534b}:1.2.1,{B13721C7-F507-4982-B2E5-502A71474FED}:2.2.0.102,{7b13ec3e-999a-4b70-b9cb-2617b8323822}:2.5.8.6,{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22,[email protected]:1.11,{75656794-AB59-4712-BFBC-5D816D56F3BC}:1.1.7,{66E978CD-981F-47DF-AC42-E3CF417C1467}:0.4.2,{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24,{90b49673-5506-483e-b92b-ca0265bd9ca8}:3.6.0.10,{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}:6.0.29,{972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.24");

---- Lines {90b49673-5506-483e-b92b-ca0265bd9ca8} removed from user.js ----


---- FireFox user.js and prefs.js backups ---- 

user_20131201_1230_.backup
prefs_20131201_1230_.backup

==== Deleting Files \ Folders ======================

"C:\END" deleted
"C:\Users\user\AppData\Roaming\inst.exe" deleted
"C:\Program Files (x86)\AutocompletePro" deleted
"C:\Program Files (x86)\Conduit" deleted
"C:\ProgramData\Trymedia" deleted
"C:\Users\user\AppData\Local\Conduit" deleted
"C:\Users\user\AppData\LocalLow\Conduit" deleted
"C:\Users\user\AppData\LocalLow\Toolbar4" deleted
"C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\7owil1fc.default\CT2438727" deleted
"C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\7owil1fc.default\CT2612669" deleted
"C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\7owil1fc.default\CT2438727" deleted
"C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\7owil1fc.default\CT2612669" deleted
"C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\7owil1fc.default\conduit" deleted
"C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\7owil1fc.default\conduitCommon" deleted

==== Files Recently Created / Modified ======================

====== C:\Windows ====
====== C:\Users\user\AppData\Local\Temp ====
====== C:\Windows\SysWOW64 =====
2013-01-10 18:40:51	13CC59C1B04E9F20A87987C68CD4BE3F	204288	----a-w-	C:\Windows\SysWOW64\ncrypt.dll
2013-01-10 18:40:37	0296DAEB5555A248E8ABF7E5012A37A6	1400832	----a-w-	C:\Windows\SysWOW64\msxml6.dll
2013-01-10 18:40:36	B5BACDED609EAF588A47CB4621C7E038	1248768	----a-w-	C:\Windows\SysWOW64\msxml3.dll
2013-01-10 18:40:35	420B075CD71AB9E58D15DD258958FBA3	353280	----a-w-	C:\Windows\SysWOW64\shlwapi.dll
====== C:\Windows\SysWOW64\drivers =====
====== C:\Windows\Sysnative =====
2013-01-10 18:40:51	FD51DED28EEC823940432D05BACE2490	253952	----a-w-	C:\Windows\Sysnative\ncrypt.dll
2013-01-10 18:40:38	553875DDFE111FACA013045E08C01AFA	2770432	----a-w-	C:\Windows\Sysnative\win32k.sys
2013-01-10 18:40:37	8B517F63A5B87F8FFAC2145F0673498A	1794560	----a-w-	C:\Windows\Sysnative\msxml6.dll
2013-01-10 18:40:37	19BDFEDD205E79B89809813A510033FA	1869824	----a-w-	C:\Windows\Sysnative\msxml3.dll
2013-01-10 18:40:35	604384D4459F4A68FF88E7C212C43F61	456192	----a-w-	C:\Windows\Sysnative\shlwapi.dll
====== C:\Windows\Sysnative\drivers =====
2012-12-14 18:06:28	933222B19FF3E7EA5F65517EA1F7D57E	3	----a-w-	C:\Windows\Sysnative\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2012-12-14 18:06:28	933222B19FF3E7EA5F65517EA1F7D57E	3	----a-w-	C:\Windows\Sysnative\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2012-12-14 18:06:25	AEA0A67275CFBA0E463E00C6E9A1DDAE	54376	----a-w-	C:\Windows\Sysnative\drivers\WdfLdr.sys
2012-12-14 18:06:18	DDA4CAF29D8C0A297F886BFE561E6659	198656	----a-w-	C:\Windows\Sysnative\drivers\WUDFRd.sys
2012-12-14 18:06:18	AB886378EEB55C6C75B4F2D14B6C869F	87040	----a-w-	C:\Windows\Sysnative\drivers\WUDFPf.sys
2012-12-14 18:06:16	442783E2CB0DA19873B7A63833FF4CB4	785512	----a-w-	C:\Windows\Sysnative\drivers\Wdf01000.sys
2012-12-13 17:37:33	582F710097B46140F5A89A19A6573D4B	267648	----a-w-	C:\Windows\Sysnative\drivers\volsnap.sys
====== C:\Windows\Tasks ======
====== C:\Windows\Temp ======
======= C:\Program Files =====
2013-01-08 19:35:59	--------	d-----w-	C:\Program Files\HitmanPro
======= C:\Program Files (x86) =====
======= C: =====
====== C:\Users\user\AppData\Roaming ======
2012-12-17 20:32:23	--------	d-----w-	C:\users\user\AppData\Roaming\PlayFirst
2012-12-17 20:28:32	--------	d-----w-	C:\users\user\AppData\Roaming\Zylom
2012-12-17 20:27:59	--------	d-----w-	C:\users\user\AppData\Local\Zylom Games
====== C:\Users\user ======
2013-01-08 19:35:25	--------	d-----w-	C:\ProgramData\HitmanPro
2012-12-17 20:32:23	--------	d-----w-	C:\ProgramData\PlayFirst

====== C: exe-files ==
2013-01-10 16:51:08	422E0A3CEE0801D1F478271F3D8E878E	544	----a-w-	C:\$Recycle.Bin\S-1-5-21-2260780799-622699324-668174190-1000\$IUUTTRZ.exe
=== C: other files ==

==== Startup Registry Enabled ======================

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"DAT62B9.tmp.exe"="C:\Windows\TEMP\DAT62B9.tmp.exe /run"

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]
"WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter"
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]
"WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter"
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem"

[HKEY_USERS\S-1-5-21-2260780799-622699324-668174190-1000\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun"
"ehTray.exe"="C:\Windows\ehome\ehTray.exe"
"msnmsgr"="C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe /background"

[HKEY_USERS\S-1-5-21-2260780799-622699324-668174190-1017\Software\Microsoft\Windows\CurrentVersion\Run]
"WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter"
"ooVoo"="C\ooVoo.exe /minimized"
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem"

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run]
"DAT62B9.tmp.exe"="C:\Windows\TEMP\DAT62B9.tmp.exe /run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundTray"="C:\Program Files (x86)\Analog Devices\SoundMAX\SoundTray.exe"
"JMB36X IDE Setup"="C:\Windows\RaidTool\xInsIDE.exe"
"Ai Nap"="C:\Program Files\ASUS\Ai Suite\AiNap\AiNap.exe"
"CPU Power Monitor"="C:\Program Files\ASUS\Ai Suite\AiGear3\CpuPowerMonitor.exe"
"Cpu Level Up help"="C:\Program Files\ASUS\Ai Suite\CpuLevelUpHelp.exe"
"Ai Remote Help"="C:\Program Files\ASUS\AI Remote\AiRc.exe -r"
"GrooveMonitor"="C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
"QuickTime Task"="C:\Program Files (x86)\QuickTime\qttask.exe -atboottime"
"NSLauncher"="C:\Program Files (x86)\Nokia\Nokia Software Launcher\NSLauncher.exe /startup"
"SoundMAXPnP"="C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe"
"LWS"="C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide"
"avast5"="C:\Program Files\Alwil Software\Avast5\avastUI.exe /nogui"
"SwitchBoard"="C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe"
"AdobeCS5.5ServiceManager"="C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe -launchedbylogin"
"AdobeCS6ServiceManager"="C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe -launchedbylogin"
"Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun"
"ehTray.exe"="C:\Windows\ehome\ehTray.exe"
"msnmsgr"="C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe /background"

==== Task Scheduler Jobs ======================

C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [10/01/2013 21:00]

==== Firefox Extensions ======================

ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\7owil1fc.default
- =TimeLineRemove.Com - %ProfilePath%\extensions\jid0-YxzrUsJ0WOiOaU89TngAzLcIs18@jetpack
- Microsoft .NET Framework Assistant - %ProfilePath%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
- DownloadHelper - %ProfilePath%\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\7owil1fc.default
9AC863FD5976316C29D4CB5E4C9EFD9C	- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_146.dll -	Shockwave Flash
AB87C54CA19675880B0CAE65B8AF140C	- C:\Windows\SysWOW64\npDeployJava1.dll -	Java Deployment Toolkit 7.0.70.11
9317118077072C08CD84597D2925249A	- C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll -	Shockwave for Director / Shockwave for Director
AB87EEFFD18F2BAAFC274E7075EA6C67	- C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll -	Windows Presentation Foundation / Windows Presentation Foundation
EDF220A1DCDB2CB01DCEA8E80B1435C5	- C:\Windows\SysWOW64\NPSWF32.dll -	Shockwave Flash
DFCAB29E8FD38F95650CC1E203E8D318	- C:\Windows\SysWOW64\npmproxy.dll -	Microsoft® Windows® Operating System


==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
defdhglnppeioeflggkmglipcecffkhk - C:\Program Files (x86)\AutocompletePro\chrome\autocompleteprochrome.crx[]

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.bigseekpro.com/splitcam/{E3A2A40F-DB68-4589-8063-4D021EC9C37A}"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.bigseekpro.com/splitcam/{E3A2A40F-DB68-4589-8063-4D021EC9C37A}"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.bigseekpro.com/splitcam/{E3A2A40F-DB68-4589-8063-4D021EC9C37A}"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKCU\*\SearchScopes "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"
HKCU\*\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
HKCU\*\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} Unknown  Url="Not_Found"
HKCU\*\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google  Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0} deleted successfully
HKEY_USERS\S-1-5-21-2260780799-622699324-668174190-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0} deleted successfully
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0} deleted successfully
HKEY_USERS\S-1-5-21-2260780799-622699324-668174190-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0} deleted successfully
HKEY_USERS\S-1-5-21-2260780799-622699324-668174190-1000\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\linkscanner deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\defdhglnppeioeflggkmglipcecffkhk deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

C:\users\user\AppData\Local\Mozilla\Firefox\Profiles\7owil1fc.default\Cache emptied successfully

==== Empty Chrome Cache ======================

No Chrome User Data found

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

After Reboot

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\user\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted

Juisterr · 16 jan 2013

Dat ruimt lekker op, hoe staat het met de problemen?

dev!lke · 17 jan 2013

wmp start nog altijd op. en trage downloads ligt aan Telenet (speedtest.telenet is normaal ma via andere wegen is het gecapped).

Juisterr · 18 jan 2013

Als je msconfig in uitvoeren zet dan kan je WMPNetworkSvc uitzetten bij services. Dan start hij niet meer auto op.

dev!lke · 19 jan 2013

Juisterr zei:
Als je msconfig in uitvoeren zet dan kan je WMPNetworkSvc uitzetten bij services. Dan start hij niet meer auto op.

staat niet in de lijst + in WMP zelf staat het ook niet aangevinkt.

Juisterr · 20 jan 2013

dev!lke zei:
staat niet in de lijst + in WMP zelf staat het ook niet aangevinkt.

Vreemd verhaal, vraag het eens bij de windows afdeling.

Archief - logje - trage downloads

dev!lke

Legacy Member

Juisterr

Legacy Member

dev!lke

Legacy Member

dev!lke

Legacy Member

Juisterr

Legacy Member

dev!lke

Legacy Member

Juisterr

Legacy Member

dev!lke

Legacy Member

Juisterr

Legacy Member