Ga naar inhoud

Dany

Lid
 Bekijk profiel  Bekijk hun activiteit

  • Items

    24

  • Registratiedatum

  • Laatst bezocht

 Inhoudstype 

Berichten die geplaatst zijn door Dany

    e-cops besmetting

    in Archief Bestrijding malware & virussen

    Geplaatst: · aangepast door Dany

    Neen, krijg geen melding meer. Heb wel systeemherstel uitgevoerd maar wil zeker zijn dat er nergens iets achterblijft.

    Zal even MBAM downloaden en installeren.

    MBAM log,

    Malwarebytes Anti-Malware (-evaluatieversie-) 1.61.0.1400

    www.malwarebytes.org

    Databaseversie: v2012.05.18.03

    Windows 7 Service Pack 1 x64 NTFS

    Internet Explorer 9.0.8112.16421

    gebruiker :: LAPTOP-DANY [administrator]

    Realtime bescherming: Ingeschakeld

    18/05/2012 13:39:52

    mbam-log-2012-05-18 (13-39-52).txt

    Scantype: Snelle scan

    Ingeschakelde scanopties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM

    Uitgeschakelde scanopties: P2P

    Objecten gescand: 229522

    Verstreken tijd: 2 minuut/minuten, 42 seconde(n)

    Geheugenprocessen gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Geheugenmodulen gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Registersleutels gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Registerwaarden gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Registerdata gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Mappen gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Bestanden gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    (einde)

    e-cops besmetting

    in Archief Bestrijding malware & virussen

    Geplaatst:

    Kan er iemand mijn log van hijackthis nakijken, besmet geraakt met e-cops virus.

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 8:48:02, on 18/05/2012

    Platform: Windows 7 SP1 (WinNT 6.00.3505)

    MSIE: Internet Explorer v9.00 (9.00.8112.16421)

    Boot mode: Normal

    Running processes:

    C:\Program Files (x86)\Belgium Identity Card\beid35gui.exe

    C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe

    C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

    C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe

    C:\Windows\AsScrPro.exe

    C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe

    C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe

    C:\Program Files\AVAST Software\Avast\AvastUI.exe

    C:\Program Files (x86)\PowerISO\PWRISOVM.EXE

    C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe

    C:\Program Files (x86)\QuickTime\QTTask.exe

    C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe

    C:\PROGRA~2\OPENOF~1.ORG\program\soffice.exe

    C:\PROGRA~2\OPENOF~1.ORG\program\soffice.bin

    C:\Program Files (x86)\Mozilla Firefox\firefox.exe

    C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe

    C:\Users\gebruiker\Downloads\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Asus | MSN

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Asus | MSN

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

    F2 - REG:system.ini: UserInit=userinit.exe

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll

    O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll

    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

    O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll

    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

    O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

    O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe

    O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe

    O4 - HKLM\..\Run: [updateP2GoShortCut] "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"

    O4 - HKLM\..\Run: [updateLBPShortCut] "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"

    O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui

    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files (x86)\PowerISO\PWRISOVM.EXE

    O4 - HKCU\..\Run: [ManyCam] "C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe" /silent

    O4 - HKCU\..\Run: [sony PC Companion] "C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe" /Background

    O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

    O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

    O4 - HKUS\S-1-5-21-3725279878-425793931-1196370812-1000\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')

    O4 - HKUS\S-1-5-21-3725279878-425793931-1196370812-1000\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')

    O4 - Global Startup: AsusVibeLauncher.lnk = C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe

    O4 - Global Startup: FancyStart daemon.lnk = ?

    O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll

    O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll

    O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll

    O9 - Extra button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O9 - Extra 'Tools' menuitem: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

    O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

    O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

    O18 - Protocol: brx - {9C160F90-74D1-11D3-AB60-0060977C1F29} - C:\Program Files (x86)\Bricsys\Bricscad V12\BrxProtIE.dll

    O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

    O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll

    O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

    O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

    O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

    O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe

    O23 - Service: Atheros Bt&Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

    O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe

    O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe

    O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe

    O23 - Service: DirMngr - Unknown owner - C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe

    O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

    O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

    O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

    O23 - Service: NDAS Service (ndassvc) - XIMETA, Inc. - C:\Program Files\NDAS\System\ndassvc.exe

    O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)

    O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

    O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: Samsung AllShare PC (SamsungAllShareV2.0) - Samsung Electronics Co., Ltd. - C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe

    O23 - Service: SimpleSlideShowServer - Samsung Electronics Co., Ltd. - C:\Program Files (x86)\Samsung\AllShare\AllShareSlideShowService.exe

    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

    O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe

    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

    O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

    O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

    O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

    O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

    --

    End of file - 13436 bytes

    bridgen router

    in Archief Internet & Netwerk

    Geplaatst:

    Ik zit hier met een vraag, onlangs telenet internet in huis gehaald. Zit hier nu dus met een D-link Airplus G 802.11G draadloos access point die reeds drie pc's/laptops van internet en netwerk voorziet. Ik heb nog 1 pc die nog niet verbonden is, alsook een netwerkschijf en Brother printer DCP 315 CN. Is het mogelijk om deze in het netwerk op te nemen d.m.v. een us robotics 5461 draadloze router, en zo ja hoe begin ik er aan?

    [OPGELOST] Bij aanmelden andere gebruiker herstart computer

    in Archief Bestrijding malware & virussen

    Geplaatst:

    Hier is dan de uitslag van combofix.

    ComboFix 08-03-30.3 - Dany 2008-03-31 18:48:08.1 - NTFSx86

    Microsoft Windows XP Professional 5.1.2600.2.1252.31.1043.18.501 [GMT 2:00]

    Gestart vanuit: C:\Documents and Settings\Dany\Bureaublad\ComboFix.exe

    * Nieuw herstelpunt werd aangemaakt

    WAARSCHUWING - DE RECOVERY CONSOLE IS NIET OP DIT SYSTEEM GEINSTALLEERD !!

    .

    (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    C:\Program Files\ADS Plugins

    C:\Program Files\ADS Plugins\ContextHelper.xpi

    .

    (((((((((((((((((((( Bestanden Gemaakt van 2008-02-28 to 2008-03-31 ))))))))))))))))))))))))))))))

    .

    2008-03-30 20:24 . 2008-03-30 20:24 <DIR> dr-h----- C:\Documents and Settings\Dany\Onlangs geopend

    2008-03-30 18:58 . 2008-03-30 18:58 <DIR> d-------- C:\Documents and Settings\Dany\Application Data\gtk-2.0

    2008-03-30 18:56 . 2008-03-30 18:56 <DIR> d-------- C:\Documents and Settings\Dany\.zenmap

    2008-03-30 18:55 . 2008-03-30 18:55 <DIR> d-------- C:\Program Files\WinPcap

    2008-03-30 18:55 . 2008-03-30 18:55 <DIR> d-------- C:\Program Files\Nmap

    2008-03-24 19:41 . 2008-03-24 19:41 <DIR> d-------- C:\Program Files\CCleaner

    2008-03-24 17:43 . 2008-03-24 17:43 <DIR> d-------- C:\Program Files\Ambient Design

    2008-03-23 17:31 . 2007-07-30 20:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll

    2008-03-23 17:31 . 2007-07-30 20:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll

    2008-03-23 17:31 . 2007-07-30 20:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui

    2008-03-22 19:12 . 2008-03-22 19:13 <DIR> d-------- C:\Program Files\Windows Live

    2008-03-22 19:12 . 2008-03-22 19:12 <DIR> d--hsc--- C:\Program Files\Common Files\WindowsLiveInstaller

    2008-03-22 19:11 . 2008-03-22 19:11 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller

    2008-03-16 19:33 . 2008-03-24 20:17 <DIR> d-------- C:\Documents and Settings\Dany\Application Data\Spamihilator

    2008-02-27 21:14 . 2008-02-27 21:14 <DIR> d-------- C:\Documents and Settings\Dany\Application Data\deskUNPDF

    2008-02-27 21:13 . 2008-02-27 21:13 3,336 --a------ C:\deskPDF.opt

    2008-02-27 20:14 . 2008-02-27 20:14 <DIR> d-------- C:\Program Files\Common Files\Adobe Systems Shared

    2008-02-27 20:14 . 2008-02-27 20:14 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Adobe Systems

    2008-02-27 20:06 . 2008-02-27 20:07 <DIR> d-------- C:\Documents and Settings\Dany\Application Data\SolidDocuments

    2008-02-27 20:05 . 2008-02-27 20:05 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\SolidDocuments

    2008-02-27 19:56 . 2008-02-27 19:56 75 --a------ C:\WINDOWS\winDecrypt.INI

    2008-02-24 13:19 . 2008-03-29 17:16 <DIR> d-------- C:\Documents and Settings\NetworkService\Application Data\WTablet

    2008-02-23 19:31 . 2008-03-31 18:42 <DIR> d-------- C:\Documents and Settings\Dany\Application Data\WTablet

    2008-02-23 17:23 . 2007-03-30 17:51 2,659,888 --------- C:\WINDOWS\system32\PenTablet.cpl

    2008-02-23 17:23 . 2007-03-30 17:45 1,378,779 --------- C:\WINDOWS\system32\PenTablet.znc

    2008-02-23 17:23 . 2004-08-04 02:03 21,504 --a------ C:\WINDOWS\system32\hidserv.dll

    2008-02-23 17:23 . 2004-08-04 02:03 21,504 --a--c--- C:\WINDOWS\system32\dllcache\hidserv.dll

    2008-02-23 17:23 . 2004-08-04 01:57 14,848 --a------ C:\WINDOWS\system32\drivers\kbdhid.sys

    2008-02-23 17:23 . 2004-08-04 01:57 14,848 --a--c--- C:\WINDOWS\system32\dllcache\kbdhid.sys

    2008-02-23 17:23 . 2007-02-15 16:11 11,440 --a------ C:\WINDOWS\system32\drivers\WacomVKHid.sys

    2008-02-23 17:22 . 2008-02-23 17:22 <DIR> d-------- C:\WINDOWS\system32\WTablet

    2008-02-23 17:22 . 2008-02-23 17:23 <DIR> d-------- C:\Program Files\Tablet

    2008-02-23 17:22 . 2007-03-30 18:06 1,189,424 --------- C:\WINDOWS\system32\Tablet.exe

    2008-02-23 17:22 . 2007-03-30 17:38 124,464 --------- C:\WINDOWS\system32\Wintab32.dll

    2008-02-23 17:22 . 2007-02-16 10:30 12,848 --a------ C:\WINDOWS\system32\drivers\wacomvhid.sys

    2008-02-23 17:22 . 2007-02-16 11:12 11,312 --a------ C:\WINDOWS\system32\drivers\wacommousefilter.sys

    2008-02-22 20:05 . 2008-02-22 20:29 <DIR> d-------- C:\Documents and Settings\Dany\Application Data\beid-cache

    2008-02-22 20:04 . 2005-08-09 21:10 110,592 --a------ C:\WINDOWS\system32\usbr38.dll

    2008-02-22 20:04 . 2006-03-24 20:14 33,536 --a------ C:\WINDOWS\system32\drivers\a38usb.sys

    2008-02-22 20:01 . 2007-02-19 16:15 352,256 --a------ C:\WINDOWS\system32\eidlib.dll

    2008-02-22 20:01 . 2007-02-19 16:16 114,688 --a------ C:\WINDOWS\system32\EIDLibCtrl.dll

    2008-02-22 20:01 . 2006-05-29 15:32 77,905 --a------ C:\WINDOWS\system32\Belgium Identity Card PKCS11.dll

    2008-02-22 20:01 . 2007-02-19 16:16 40,960 --a------ C:\WINDOWS\system32\eidlibj.dll

    2008-02-22 20:00 . 2008-02-22 20:01 <DIR> d-------- C:\Program Files\Belgium Identity Card

    2008-02-19 20:23 . 2008-03-17 20:35 <DIR> d-------- C:\Program Files\Spybot - Search & Destroy

    2008-02-17 20:49 . 2008-02-17 20:50 <DIR> d-------- C:\Documents and Settings\Dany\.spamato4thunderbird

    2008-02-04 20:19 . 2008-03-30 19:34 <DIR> d-------- C:\Program Files\Ricochet Infinity

    .

    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2008-03-31 16:43 --------- d-----w C:\Program Files\Mozilla Thunderbird

    2008-03-26 18:24 --------- d-----w C:\Program Files\Yahoo!

    2008-03-25 18:20 --------- d-----w C:\Documents and Settings\Dany\Application Data\AVG7

    2008-03-25 18:19 --------- d-----w C:\Program Files\Uniblue

    2008-03-25 17:54 --------- d-----w C:\Documents and Settings\Dany\Application Data\Uniblue

    2008-03-18 17:59 --------- d-----w C:\Program Files\Zattoo

    2008-03-17 18:55 3,506 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys

    2008-03-17 18:55 --------- d-----w C:\Documents and Settings\Dany\Application Data\Corel

    2008-03-17 18:35 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy

    2008-03-17 17:23 --------- d--h--w C:\Program Files\InstallShield Installation Information

    2008-03-17 17:22 --------- d-----w C:\Program Files\Common Files\Acronis

    2008-03-16 19:15 --------- d-----w C:\Documents and Settings\All Users\Application Data\BVRP Software

    2008-03-16 19:14 --------- d-----w C:\Program Files\DjToneXpress

    2008-03-16 19:12 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard

    2008-03-16 18:45 --------- d-----w C:\Program Files\TuneUp Utilities 2007

    2008-02-27 18:46 --------- d-----w C:\Program Files\Investintech.com Inc

    2008-02-27 18:20 --------- d-----w C:\Program Files\Common Files\Adobe

    2008-02-25 18:30 --------- d-----w C:\Program Files\Mio Technology

    2008-02-25 18:29 --------- d-----w C:\Program Files\Nuria

    2008-02-25 18:29 --------- d-----w C:\Program Files\MioMapBMP

    2008-02-25 18:28 --------- d-----w C:\Program Files\MioContact

    2008-02-17 15:06 --------- d-----w C:\Program Files\eSnips

    2008-01-31 16:52 --------- d-----w C:\Documents and Settings\All Users\Application Data\Kaspersky Lab

    2008-01-31 16:51 --------- d-----w C:\Documents and Settings\Dany\Application Data\LimeWire

    2008-01-30 18:32 --------- d-----w C:\Program Files\LimeWire

    2008-01-10 18:40 253,116 ----a-w C:\WINDOWS\PDFCreator_Toolbar_Uninstaller_6187.exe

    2008-01-10 18:40 14,960 ----a-w C:\Program Files\settings.dat

    2007-12-25 17:57 20 ---h--w C:\Documents and Settings\All Users\Application Data\PKP_DLds.DAT

    2007-12-07 02:18 824,832 ----a-w C:\WINDOWS\system32\wininet.dll

    2007-12-04 18:42 550,912 ----a-w C:\WINDOWS\system32\oleaut32.dll

    2007-12-04 01:33 823,296 ----a-w C:\WINDOWS\system32\divx_xx0c.dll

    2007-12-04 01:33 823,296 ----a-w C:\WINDOWS\system32\divx_xx07.dll

    2007-12-04 01:33 802,816 ----a-w C:\WINDOWS\system32\divx_xx11.dll

    2007-12-04 01:33 682,496 ----a-w C:\WINDOWS\system32\DivX.dll

    2007-08-22 17:49 627 ----a-w C:\Program Files\Miomap3.2.txt

    2007-07-18 10:47 142 ----a-w C:\Program Files\Nero.txt

    2007-04-21 09:54 472,656 ----a-w C:\Documents and Settings\All Users\Application Data\pswi_preloaded.exe

    2006-05-04 19:53 14,006 ----a-w C:\Program Files\Config.cfg

    2006-04-01 06:23 7,433 ----a-w C:\Program Files\Readme.txt

    2006-04-01 06:06 6,322 ----a-w C:\Program Files\LICENSE.TXT

    2005-04-03 15:16 126,976 ----a-w C:\Program Files\Setup.exe

    2002-10-01 10:00 2,916,352 ----a-w C:\Documents and Settings\DfW5\Dfw.exe

    2002-09-20 10:00 557,056 ----a-w C:\Documents and Settings\DfW5\DfW5Lang.dll

    2002-07-26 15:02 153,088 ----a-w C:\Documents and Settings\DfW5\undfw.exe

    2001-05-04 18:05 431,376 ----a-w C:\Program Files\RICHED20.DLL

    2001-05-04 18:05 290,869 ----a-w C:\Program Files\MSVCRT.DLL

    2000-08-16 08:45 135,680 ----a-w C:\Documents and Settings\DfW5\Rcg32.dll

    2000-06-08 23:00 995,383 ----a-w C:\Program Files\Mfc42.dll

    1999-12-07 18:00 3,856 ----a-w C:\Program Files\RICHED32.DLL

    1999-12-07 18:00 253,952 ----a-w C:\Program Files\MSVCRT20.DLL

    .

    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    REGEDIT4

    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 14:00 15360]

    "H/PC Connection Agent"="C:\Program Files\Microsoft ActiveSync\wcescomm.exe" [2006-11-13 18:34 1289000]

    "Uniblue RegistryBooster 2"="C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe" [2007-12-05 16:51 1885464]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "AVG7_CC"="C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe" [2007-12-20 19:41 579072]

    "Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2006-11-03 19:20 866584]

    "USRobotics Wireless Manager UI"="C:\WINDOWS\system32\WLTRAY.exe" [2006-10-12 16:28 1290240]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

    "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 14:00 15360]

    "AVG7_Run"="C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe" [2007-10-24 19:49 219136]

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]

    "H/PC Connection Agent"="C:\Program Files\Microsoft ActiveSync\wcescomm.exe"

    "ASUS SmartDoctor"=C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe /start

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]

    "Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions

    "ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay

    "SetDefPrt"=C:\Program Files\Brother\Brmfl05a\BrStDvPt.exe

    "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

    "ControlCenter2.0"=C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun

    "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"

    "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" -atboottime

    "ASUS Probe"=C:\Program Files\ASUS\Probe\AsusProb.exe

    "eSnips"="C:\PROGRA~1\eSnips\ClientGW.exe"

    "beidsystemtray"=C:\Program Files\Belgium Identity Card\beidsystemtray.exe

    "Acrobat Assistant 7.0"="C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

    "%windir%\\system32\\sessmgr.exe"=

    "C:\\Program Files\\Grisoft\\AVG Free\\avginet.exe"=

    "C:\\Program Files\\Grisoft\\AVG Free\\avgamsvr.exe"=

    "C:\\Program Files\\Grisoft\\AVG Free\\avgcc.exe"=

    "C:\\Program Files\\Grisoft\\AVG Free\\avgemc.exe"=

    "C:\\Program Files\\Messenger\\msmsgs.exe"=

    "C:\\Program Files\\ASUS\\GameLiveShow\\SBS.exe"=

    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=

    "C:\\Program Files\\Sony Ericsson\\Update Service\\ma3platform.exe"=

    "C:\\Program Files\\Mozilla Thunderbird\\thunderbird.exe"=

    "C:\\Program Files\\Mozilla Firefox\\firefox.exe"=

    "C:\\WINDOWS\\system32\\mmc.exe"=

    "C:\\Program Files\\ASUS\\AsusUpdate\\Update.exe"=

    "C:\\WINDOWS\\system32\\java.exe"=

    "C:\Program Files\Microsoft ActiveSync\rapimgr.exe"= C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager

    "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"= C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager

    "C:\Program Files\Microsoft ActiveSync\WCESMgr.exe"= C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application

    "C:\\Program Files\\Windows Mobile Developer Power Toys\\ActiveSync_Remote_Display\\ASRDisp.exe"=

    "C:\\Program Files\\Zattoo\\zattood.exe"=

    "C:\\Program Files\\Zattoo\\Zattoo2.exe"=

    "C:\\Program Files\\LimeWire\\LimeWire.exe"=

    "C:\\Program Files\\Java\\jre1.6.0_02\\bin\\java-rmi.exe"=

    "C:\\Program Files\\Java\\jre1.6.0_02\\bin\\java.exe"=

    "C:\\Program Files\\Java\\jre1.5.0_10\\bin\\java.exe"=

    "C:\\Program Files\\Zattoo\\Zattoo.exe"=

    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

    "65525:TCP"= 65525:TCP:BT++

    "65525:UDP"= 65525:UDP:BT++

    "26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service

    "6757:TCP"= 6757:TCP:limewire

    R0 lpx;LPX Protocol;C:\WINDOWS\system32\DRIVERS\lpx.sys [2005-03-31 02:02]

    R1 hwinterface;hwinterface;C:\WINDOWS\system32\Drivers\hwinterface.sys [2008-01-03 20:59]

    R1 lfsfilt;Lean File Sharing;C:\WINDOWS\system32\DRIVERS\lfsfilt.sys [2005-03-31 02:03]

    R2 eID CRL Service;eID CRL Service;C:\WINDOWS\system32\beidservicecrl.exe [2007-02-19 16:16]

    R2 UxTuneUp;TuneUp Thema-uitbreiding;C:\WINDOWS\System32\svchost.exe [2004-08-04 14:00]

    R3 ndasbus;NDAS Bus Driver;C:\WINDOWS\system32\DRIVERS\ndasbus.sys [2005-03-31 02:02]

    R3 Video3D;ASUS Video3D Service;C:\WINDOWS\system32\Drivers\Video3D32.sys [2005-09-27 11:02]

    R3 wacommousefilter;Wacom Mouse Filter Driver;C:\WINDOWS\system32\DRIVERS\wacommousefilter.sys [2007-02-16 11:12]

    R3 wacomvhid;Wacom Virtual Hid Driver;C:\WINDOWS\system32\DRIVERS\wacomvhid.sys [2007-02-16 10:30]

    R3 WacomVKHid;Virtual Keyboard Driver;C:\WINDOWS\system32\DRIVERS\WacomVKHid.sys [2007-02-15 16:11]

    S1 asusgsb;ASUS Virtual Video Capture Device Driver;C:\WINDOWS\system32\drivers\asusgsb32.sys [2005-10-20 17:25]

    S3 ACSSCR;ACR38 Smart Card Reader;C:\WINDOWS\system32\DRIVERS\a38usb.sys [2006-03-24 20:14]

    S3 atidgllk;atidgllk;C:\Program Files\ASUS\SmartDoctor\atidgllk.sys [2005-10-20 08:29]

    S3 BrScnUsb;Brother USB Still Image driver;C:\WINDOWS\system32\Drivers\BrScnUsb.sys [2004-10-15 05:50]

    S3 eID Privacy Service;eID Privacy Service;C:\WINDOWS\system32\beidservicepcsc.exe [2007-02-19 16:16]

    S3 k510bus;Sony Ericsson K510 Driver driver (WDM);C:\WINDOWS\system32\DRIVERS\k510bus.sys [2006-12-26 21:06]

    S3 k510mdfl;Sony Ericsson K510 USB WMC Modem Filter;C:\WINDOWS\system32\DRIVERS\k510mdfl.sys [2006-12-26 21:06]

    S3 k510mdm;Sony Ericsson K510 USB WMC Modem Driver;C:\WINDOWS\system32\DRIVERS\k510mdm.sys [2006-12-26 21:06]

    S3 k510mgmt;Sony Ericsson K510 USB WMC Device Management Drivers (WDM);C:\WINDOWS\system32\DRIVERS\k510mgmt.sys [2006-12-26 21:06]

    S3 k510obex;Sony Ericsson K510 USB WMC OBEX Interface;C:\WINDOWS\system32\DRIVERS\k510obex.sys [2006-12-26 21:06]

    S3 ndasscsi;NDAS SCSI Miniport Driver;C:\WINDOWS\system32\DRIVERS\ndasscsi.sys [2005-03-31 02:02]

    S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\WINDOWS\system32\Drivers\PCASp50.sys [2004-09-07 16:42]

    S3 usbprint;Microsoft USB PRINTER Class;C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 23:01]

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs

    UxTuneUp

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\##LIVING#LIVING (D)]

    \Shell\AutoRun\command - Y:\setup.exe

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\F]

    \Shell\AutoRun\command - F:\LaunchU3.exe -a

    .

    Inhoud van de 'Gedeelde Taken' map

    "2008-03-28 18:20:00 C:\WINDOWS\Tasks\1-Click Maintenance.job"

    - C:\Program Files\TuneUp Utilities 2007\SystemOptimizer.exe

    "2007-12-04 15:43:02 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"

    - C:\Program Files\Apple Software Update\SoftwareUpdate.exe

    "2008-03-31 14:52:34 C:\WINDOWS\Tasks\MP Scheduled Scan.job"

    - C:\Program Files\Windows Defender\MpCmdRun.exe

    .

    **************************************************************************

    catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

    Rootkit scan 2008-03-31 18:51:06

    Windows 5.1.2600 Service Pack 2 NTFS

    scannen van verborgen processen ...

    scannen van verborgen autostart items ...

    scannen van verborgen bestanden ...

    Scan succesvol afgerond

    verborgen bestanden: 0

    **************************************************************************

    .

    Voltooingstijd: 2008-03-31 18:52:03

    ComboFix-quarantined-files.txt 2008-03-31 16:51:42

    Pre-Run: 45,905,948,672 bytes beschikbaar

    Post-Run: 45,890,830,336 bytes beschikbaar

    .

    2008-03-28 16:03:56 --- E O F ---

    [OPGELOST] Bij aanmelden andere gebruiker herstart computer

    in Archief Bestrijding malware & virussen

    Geplaatst:

    Yannick, zie hier mijn logfile;

    Logfile of Trend Micro HijackThis v2.0.2

    Scan saved at 18:43:54, on 30/03/2008

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v7.00 (7.00.6000.16608)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\Ati2evxx.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\Windows Defender\MsMpEng.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\System32\WLTRYSVC.EXE

    C:\WINDOWS\System32\bcmwltry.exe

    C:\WINDOWS\system32\brsvc01a.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\WINDOWS\system32\brss01a.exe

    C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe

    C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe

    C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe

    C:\WINDOWS\system32\cisvc.exe

    C:\WINDOWS\system32\CTsvcCDA.exe

    C:\WINDOWS\system32\beidservicecrl.exe

    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

    C:\Program Files\NDAS\System\ndassvc.exe

    C:\WINDOWS\system32\PSIService.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\Tablet.exe

    C:\Program Files\UPHClean\uphclean.exe

    C:\WINDOWS\System32\dmadmin.exe

    C:\Program Files\Windows Live\Messenger\usnsvc.exe

    C:\WINDOWS\system32\cidaemon.exe

    C:\WINDOWS\system32\Ati2evxx.exe

    C:\WINDOWS\Explorer.EXE

    C:\WINDOWS\system32\Tablet.exe

    C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe

    C:\Program Files\Windows Defender\MSASCui.exe

    C:\WINDOWS\system32\WLTRAY.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe

    C:\PROGRA~1\MI3AA1~1\rapimgr.exe

    C:\WINDOWS\system32\WTablet\TabUserW.exe

    C:\Program Files\Microsoft ActiveSync\wcescomm.exe

    C:\Program Files\Mozilla Thunderbird\thunderbird.exe

    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

    O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll

    O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll

    O3 - Toolbar: eSnips - {ED1184DA-E57E-4480-99D0-A16809037F54} - C:\PROGRA~1\eSnips\SnipBar.dll

    O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll

    O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll

    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP

    O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide

    O4 - HKLM\..\Run: [uSRobotics Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"

    O4 - HKCU\..\Run: [uniblue RegistryBooster 2] C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe /S

    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service')

    O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'Lokale service')

    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')

    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

    O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

    O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

    O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

    O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

    O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

    O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

    O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

    O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

    O8 - Extra context menu item: Snip to my eSnips account - C:\Program Files\eSnips\res\SnipIt.htm

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

    O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll

    O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll

    O9 - Extra 'Tools' menuitem: Mobiele favorieten maken... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll

    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe

    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe

    O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.nl/scanforvirus-en/kavwebscan_unicode.cab

    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

    O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab

    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll

    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab

    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab

    O17 - HKLM\System\CCS\Services\Tcpip\..\{F2D5D386-499A-4D8F-8C5D-CD7182D41062}: NameServer = 192.168.2.1

    O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Unknown owner - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe (file missing)

    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

    O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe

    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe

    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe

    O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe

    O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe

    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe

    O23 - Service: eID CRL Service - Zetes - C:\WINDOWS\system32\beidservicecrl.exe

    O23 - Service: eID Privacy Service - Zetes - C:\WINDOWS\system32\beidservicepcsc.exe

    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

    O23 - Service: NDAS Service (ndassvc) - XIMETA, Inc. - C:\Program Files\NDAS\System\ndassvc.exe

    O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe

    O23 - Service: TabletService - Wacom Technology, Corp. - C:\WINDOWS\system32\Tablet.exe

    O23 - Service: Broadcom Wireless LAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

    --

    End of file - 10222 bytes

    Hardware

    in Archief Hardware algemeen

    Geplaatst:

    Zou kunnen dat je grafische kaart naar de eeuwige jachtvelden is.

    Vindt het toch niet normaal dat sony daar geld voor durft te vragen terwijl het toestel nog in garantie is?

    Zou er toch maar op hameren dat toestel wereldwijde garantie heeft.

Logo

OVER ONS

PC Helpforum helpt GRATIS computergebruikers sinds juli 2006. Ons team geeft via het forum professioneel antwoord op uw vragen en probeert uw pc problemen zo snel mogelijk op te lossen. Word lid vandaag, plaats je vraag online en het PC Helpforum-team helpt u graag verder!

SITEMAP

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.