@ Maxstar,
Hier is die dan:
protection-log-2011-05-05 en 2011-05-06:
19:05:37 user MESSAGE Protection started successfully
19:05:45 user MESSAGE IP Protection started successfully
19:07:26 user IP-BLOCK 208.73.210.29
20:41:41 user MESSAGE Protection started successfully
20:41:45 user MESSAGE IP Protection started successfully
20:52:18 user MESSAGE Protection started successfully
20:52:24 user MESSAGE IP Protection started successfully
21:18:33 user MESSAGE Protection started successfully
21:18:40 user MESSAGE IP Protection started successfully
21:30:49 user MESSAGE Protection started successfully
21:30:55 user MESSAGE IP Protection started successfully
21:52:59 user IP-BLOCK 208.73.210.29
21:53:23 user IP-BLOCK 208.73.210.29
00:03:39 user IP-BLOCK 208.73.210.29
00:03:47 user IP-BLOCK 208.73.210.29
00:44:03 user MESSAGE Protection started successfully
00:44:08 user MESSAGE IP Protection started successfully
00:54:54 user MESSAGE Protection started successfully
00:54:58 user MESSAGE IP Protection started successfully
01:00:10 user IP-BLOCK 208.73.210.29
01:00:10 user IP-BLOCK 208.73.210.29
16:11:28 user MESSAGE Protection started successfully
16:11:33 user MESSAGE IP Protection started successfully
17:22:28 user IP-BLOCK 208.73.210.29
17:27:34 user IP-BLOCK 208.73.210.29
17:27:34 user IP-BLOCK 208.73.210.29
17:27:42 user IP-BLOCK 208.73.210.29
17:27:50 user IP-BLOCK 208.73.210.29
20:03:33 user MESSAGE IP Protection stopped
20:03:36 user MESSAGE IP Protection started successfully
20:05:01 user MESSAGE IP Protection stopped
20:05:03 user MESSAGE IP Protection started successfully
20:13:44 user MESSAGE Protection started successfully
20:13:50 user MESSAGE IP Protection started successfully
MBAM heeft net een volledige scan uitgevoerd:
Malwarebytes' Anti-Malware 1.46
http://www.malwarebytes.org" onclick="window.open(this.href);return false;
Databaseversie: 5162
Windows 6.1.7601 Service Pack 1
Internet Explorer 9.0.8112.16421
6-5-2011 19:34:58
mbam-log-2011-05-06 (19-34-58).txt
Scantype: Volledige scan (C:\|D:\|)
Objecten gescand: 373269
Verstreken tijd: 2 uur/uren, 22 minuut/minuten, 14 seconde(n)
Geheugenprocessen geïnfecteerd: 0
Geheugenmodulen geïnfecteerd: 0
Registersleutels geïnfecteerd: 0
Registerwaarden geïnfecteerd: 0
Registerdata geïnfecteerd: 0
Mappen geïnfecteerd: 0
Bestanden geïnfecteerd: 0
Geheugenprocessen geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)
Geheugenmodulen geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)
Registersleutels geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)
Registerwaarden geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)
Registerdata geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)
Mappen geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)
Bestanden geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)
[misschien overbodig] ik heb een
'verzamel document' van de volledige scan via MBAM gemaakt:
Malwarebytes' Anti-Malware 1.46
DB: 5162
IE: Internet Explorer 9.0.8112.16421
OS: Windows 6.1.7601 Service Pack 1
EX: C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam
DB: C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
U: user
W: C:\Windows
S: C:\Windows\system32
RD: C:
PF: C:\Program Files
PF: C:\Program Files (x86)
CF: C:\Program Files (x86)\Common Files
CF: C:\Program Files\Common Files
DAS: C:\Users
D: C:\Users\user\Desktop
D: C:\Users\Classic .NET AppPool\Desktop
D: C:\Users\Default\Desktop
D: C:\Users\DefaultAppPool\Desktop
D: C:\Users\Public\Desktop
D: C:\Users\UpdatusUser\Desktop
D: C:\Windows\ServiceProfiles\LocalService\Desktop
D: C:\Windows\ServiceProfiles\NetworkService\Desktop
SM: C:\ProgramData\Microsoft\Windows\Start Menu
SM: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu
SM: C:\Users\Classic .NET AppPool\AppData\Roaming\Microsoft\Windows\Start Menu
SM: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu
SM: C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu
SM: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu
SM: C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu
SM: C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu
UR: C:\Users\Administrator
UR: C:\Users\user
UR: C:\Users\AppData
UR: C:\Users\Classic .NET AppPool
UR: C:\Users\Default
UR: C:\Users\DefaultAppPool
UR: C:\Users\Public
UR: C:\Users\UpdatusUser
UR: C:\Windows\ServiceProfiles\LocalService
UR: C:\Windows\ServiceProfiles\NetworkService
UR: C:\Windows\system32\config\systemprofile
F: C:\Users\user\Favorites
F: C:\Users\Classic .NET AppPool\Favorites
F: C:\Users\Default\Favorites
F: C:\Users\DefaultAppPool\Favorites
F: C:\Users\UpdatusUser\Favorites
F: C:\Windows\ServiceProfiles\LocalService\Favorites
F: C:\Windows\ServiceProfiles\NetworkService\Favorites
AD: C:\ProgramData
AD: C:\Users\user\AppData\Roaming
AD: C:\Users\Classic .NET AppPool\AppData\Roaming
AD: C:\Users\Default\AppData\Roaming
AD: C:\Users\DefaultAppPool\AppData\Roaming
AD: C:\Users\UpdatusUser\AppData\Roaming
AD: C:\Windows\ServiceProfiles\LocalService\AppData\Roaming
AD: C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming
AD: C:\Windows\system32\config\systemprofile\AppData\Roaming
QL: C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch
QL: C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch
QL: C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch
QL: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch
QL: C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch
QL: C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch
TF: C:\Users\user\AppData\Local\Temp
TF: C:\Users\Classic .NET AppPool\AppData\Local\Temp
TF: C:\Users\Default\AppData\Local\Temp
TF: C:\Users\DefaultAppPool\AppData\Local\Temp
TF: C:\Users\UpdatusUser\AppData\Local\Temp
TF: C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp
TF: C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp
TF: C:\Windows\Temp
P: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
P: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
P: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
P: C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
P: C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
P: C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
P: C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
S: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
S: C:\Users\Angela\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StartUp
D: C:\Users\user\Documents
D: C:\Users\Classic .NET AppPool\Documents
D: C:\Users\Default\Documents
D: C:\Users\DefaultAppPool\Documents
D: C:\Users\Public\Documents
D: C:\Users\UpdatusUser\Documents
D: C:\Windows\ServiceProfiles\LocalService\Documents
D: C:\Windows\ServiceProfiles\NetworkService\Documents
ter informatie, met excuus gisteren avond, was vroeg in de ochtend geworden, ik had niet ver-terug [in dagen] gekeken:
. tot en met 28april: geen meldingen.
. 29april t/m 02mei: meldingen IP-BLOCK 208.94.233.125
. 03 mei: geen meldingen
. 04 mei tot heden: IP-BLOCK 208.73.210.29
. Als de laptop aan is en géén internet verbinding, dan komt er geen meldingen.