Computerbeveiliging
- Hoe je bad guys buiten de deur houdt
Avast 2016 User profile service
17-01-2016, 02:19 door Anoniem, 0 reacties
Avast free 2016
Het orange/blauw icoontje loopt vast,en volgens de windows logboeken/toepassing meld het volgende
User Profile Service
Uw registerbestand is nog steeds in gebruik door andere toepassingen of services. Het bestand wordt nu verwijderd. De toepassingen en services die het registerbestand nu gebruiken, werken achteraf mogelijk niet meer goed.
DETAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-74448935-1781249534-247506303-1000:
Process 1520 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastSvc.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000
DETAIL -
28 user registry handles leaked from \Registry\User\S-1-5-21-74448935-1781249534-247506303-1000:
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000
Process 1520 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastSvc.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000
Process 1520 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastSvc.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\SystemCertificates\TrustedPeople
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\Windows NT\CurrentVersion
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Policies\Microsoft\SystemCertificates
Process 1520 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastSvc.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Policies\Microsoft\SystemCertificates
Process 1520 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastSvc.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Policies\Microsoft\SystemCertificates
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\Windows\CurrentVersion\Explorer
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\SystemCertificates\My
Process 1520 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastSvc.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\SystemCertificates\CA
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\SystemCertificates\CA
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\SystemCertificates\Disallowed
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts
Process 1520 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastSvc.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\SystemCertificates\SmartCardRoot
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\SystemCertificates\SmartCardRoot
Process 1520 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastSvc.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\SystemCertificates\Root
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\SystemCertificates\Root
Process 1520 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastSvc.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\SystemCertificates\trust
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\SystemCertificates\trust
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\Internet Explorer\Main
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl
Is dit malware of een hack? na een reboot van de pc,werkt avast free weer normaal.
grt
Theo
Het orange/blauw icoontje loopt vast,en volgens de windows logboeken/toepassing meld het volgende
User Profile Service
Uw registerbestand is nog steeds in gebruik door andere toepassingen of services. Het bestand wordt nu verwijderd. De toepassingen en services die het registerbestand nu gebruiken, werken achteraf mogelijk niet meer goed.
DETAIL -
1 user registry handles leaked from \Registry\User\S-1-5-21-74448935-1781249534-247506303-1000:
Process 1520 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastSvc.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000
DETAIL -
28 user registry handles leaked from \Registry\User\S-1-5-21-74448935-1781249534-247506303-1000:
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000
Process 1520 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastSvc.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000
Process 1520 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastSvc.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\SystemCertificates\TrustedPeople
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\Windows NT\CurrentVersion
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Policies\Microsoft\SystemCertificates
Process 1520 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastSvc.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Policies\Microsoft\SystemCertificates
Process 1520 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastSvc.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Policies\Microsoft\SystemCertificates
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\Windows\CurrentVersion\Explorer
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\SystemCertificates\My
Process 1520 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastSvc.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\SystemCertificates\CA
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\SystemCertificates\CA
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\SystemCertificates\Disallowed
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts
Process 1520 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastSvc.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\SystemCertificates\SmartCardRoot
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\SystemCertificates\SmartCardRoot
Process 1520 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastSvc.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\SystemCertificates\Root
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\SystemCertificates\Root
Process 1520 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastSvc.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\SystemCertificates\trust
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\SystemCertificates\trust
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\Internet Explorer\Main
Process 3176 (\Device\HarddiskVolume2\Program Files\AVAST Software\Avast\AvastUI.exe) has opened key \REGISTRY\USER\S-1-5-21-74448935-1781249534-247506303-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl
Is dit malware of een hack? na een reboot van de pc,werkt avast free weer normaal.
grt
Theo
Nog geen reacties
Reageren
Deze posting is gelocked. Reageren is niet meer mogelijk.
Specialiseer je in Forensisch ICT
Online informatieavond 19 november
Wil jij je specialiseren in digitaal forensisch onderzoek? Je kennis verbreden en tech-nische vaardigheden ontwikkelen? Ontdek de cursus- en opleidingsmogelijkheden van Hogeschool Leiden:
- Bachelor Informatica Forensisch ICT (deeltijd)
- Master Digital Forensics (vol- en deeltijd)
- Module Mobile Forensics
- Module Data Analytics
Interesse? Meld je aan!
Chief Information Security Officer
Utrecht heeft jou nodig! Als Chief Information Security Officer speel jij een cruciale rol in de bescherming van de digitale informatie van de gemeente Utrecht. Als geen ander weet jij welke dreigingen er zijn en kun je deze vertalen naar risico's die de gemeente en haar inwoners lopen. Solliciteer nu!
Cybersecurity Trainer / Streamer
Toe aan een nieuwe nieuwe job waarmee je het verschil maakt? In de Certified Secure trainingen laat je deelnemers zien hoe actuele kwetsbaarheden structureel verholpen worden. Ook werk je actief mee aan de ontwikkeling van onze gamified security challenges. Bij het maken van challenges kom je telkens nieuwe technieken tegen, van Flutter tot GraphQL, van Elastic Search tot Kubernetes.
