johanell

4 september 2012

ik heb gisteren spyhunter 4 erop gezet en wat denk je alles is weer normaal

bij het downloaden gaf hij al een fout aan

daarna gescant en 57 spy gevonden

nu doet avg het ook weer

deze weer laten scannen niets meer gevonden

alle 99 toolkits weg echt top

dus bij deze bedankt voor jou advies wat ook wat geholpen heb om het 1 het ander te verwijderen

3 september 2012

ik heb ook dat politiebericht gehad en die van bumra

moet ik daar iets mee

combofix ofzo?

3 september 2012

tool werkte niet zelf handmatig gedaan en opnieuw geinstaleerd

geeft nog steeds aan niet beschermt kan nog steeds niet repareren

wel gescant

99 rootkits

[TABLE=width: 1200]

[TR]

[TD=width: 256, bgcolor: transparent, colspan: 4]Scan "Anti-Rootkitscan" is voltooid.[/TD]

[TD=width: 64, bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 3]Rootkits;"99";"0";"99"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 6]Scan is gestart:;"maandag 3 september 2012, 11:12:43"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8]Scan voltooid:;"maandag 3 september 2012, 11:21:03 (8 min. 19 seconde (n))"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 4]Totaal gescande objecten:;"269034"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 3]Gebruiker:;"SYSTEM"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent]Rootkits[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 4];"Bestand";"Infectie";"Resultaat"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #0C hook -> 0x02E7D880";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #12 hook -> 0x02E7DC40";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #10 hook -> 0x02E7DB80";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #0E hook -> 0x02E7DAC0";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #0C hook -> 0x02E7D880";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #0A hook -> 0x02E7D780";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #06 hook -> 0x02E7D580";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #04 hook -> 0x02E7D200";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #00 hook -> 0x02E7CF40";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #2E hook -> 0x02FAD170";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #12 hook -> 0x02E7DC40";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #10 hook -> 0x02E7DB80";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #0E hook -> 0x02E7DAC0";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #0C hook -> 0x02E7D880";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #0A hook -> 0x02E7D780";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #06 hook -> 0x02E7D580";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #04 hook -> 0x02E7D200";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #00 hook -> 0x02E7CF40";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #2E hook -> 0x02FAD170";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #12 hook -> 0x02E7DC40";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #10 hook -> 0x02E7DB80";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #0E hook -> 0x02E7DAC0";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #0C hook -> 0x02E7D880";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #0A hook -> 0x02E7D780";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #06 hook -> 0x02E7D580";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #04 hook -> 0x02E7D200";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #00 hook -> 0x02E7CF40";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #00 hook -> 0x02E7CF40";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #04 hook -> 0x02E7D200";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #06 hook -> 0x02E7D580";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #0A hook -> 0x02E7D780";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #0C hook -> 0x02E7D880";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #0E hook -> 0x02E7DAC0";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #10 hook -> 0x02E7DB80";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #12 hook -> 0x02E7DC40";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #2E hook -> 0x02FAD170";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #00 hook -> 0x02E7CF40";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #04 hook -> 0x02E7D200";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #06 hook -> 0x02E7D580";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #0A hook -> 0x02E7D780";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #0C hook -> 0x02E7D880";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #0E hook -> 0x02E7DAC0";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #10 hook -> 0x02E7DB80";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #12 hook -> 0x02E7DC40";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #2E hook -> 0x02FAD170";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #00 hook -> 0x02E7CF40";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #04 hook -> 0x02E7D200";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #06 hook -> 0x02E7D580";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #0A hook -> 0x02E7D780";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #2E hook -> 0x02FAD170";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #0E hook -> 0x02E7DAC0";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #10 hook -> 0x02E7DB80";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #12 hook -> 0x02E7DC40";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #2E hook -> 0x02FAD170";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #00 hook -> 0x02E7CF40";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #04 hook -> 0x02E7D200";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #06 hook -> 0x02E7D580";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #0A hook -> 0x02E7D780";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #0C hook -> 0x02E7D880";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #0E hook -> 0x02E7DAC0";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #10 hook -> 0x02E7DB80";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #12 hook -> 0x02E7DC40";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #2E hook -> 0x02FAD170";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #00 hook -> 0x02E7CF40";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #04 hook -> 0x02E7D200";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #06 hook -> 0x02E7D580";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #0A hook -> 0x02E7D780";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #0C hook -> 0x02E7D880";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #0E hook -> 0x02E7DAC0";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #10 hook -> 0x02E7DB80";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #12 hook -> 0x02E7DC40";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 8];"<unknown>";"IDT entry #2E hook -> 0x02FAD170";"Object is verborgen"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 22];"C:\Windows\system32\drivers\ataport.SYS";"IRP-koppelpunt, \Driver\atapi IRP_MJ_CREATE -> ataport.SYS +0x21880";"Object staat op de witte lijst (systeemkritisch bestand/systeembestand dat niet verwijderd moet worden)"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 22];"C:\Windows\system32\drivers\ataport.SYS";"IRP-koppelpunt, \Driver\atapi IRP_MJ_CLOSE -> ataport.SYS +0x21880";"Object staat op de witte lijst (systeemkritisch bestand/systeembestand dat niet verwijderd moet worden)"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 23];"C:\Windows\system32\drivers\ataport.SYS";"IRP-koppelpunt, \Driver\atapi IRP_MJ_DEVICE_CONTROL -> ataport.SYS +0x7500";"Object staat op de witte lijst (systeemkritisch bestand/systeembestand dat niet verwijderd moet worden)"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 24];"C:\Windows\system32\drivers\ataport.SYS";"IRP-koppelpunt, \Driver\atapi IRP_MJ_INTERNAL_DEVICE_CONTROL -> ataport.SYS +0x74D8";"Object staat op de witte lijst (systeemkritisch bestand/systeembestand dat niet verwijderd moet worden)"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 22];"C:\Windows\system32\drivers\ataport.SYS";"IRP-koppelpunt, \Driver\atapi IRP_MJ_POWER -> ataport.SYS +0x7528";"Object staat op de witte lijst (systeemkritisch bestand/systeembestand dat niet verwijderd moet worden)"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 23];"C:\Windows\system32\drivers\ataport.SYS";"IRP-koppelpunt, \Driver\atapi IRP_MJ_SYSTEM_CONTROL -> ataport.SYS +0x1C4E0";"Object staat op de witte lijst (systeemkritisch bestand/systeembestand dat niet verwijderd moet worden)"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 22];"C:\Windows\system32\drivers\ataport.SYS";"IRP-koppelpunt, \Driver\atapi IRP_MJ_PNP -> ataport.SYS +0x1C4AC";"Object staat op de witte lijst (systeemkritisch bestand/systeembestand dat niet verwijderd moet worden)"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 22];"C:\Windows\system32\drivers\CLASSPNP.SYS";"IRP-koppelpunt, \Driver\Disk IRP_MJ_CREATE -> CLASSPNP.SYS +0x19E0";"Object staat op de witte lijst (systeemkritisch bestand/systeembestand dat niet verwijderd moet worden)"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 22];"C:\Windows\system32\drivers\CLASSPNP.SYS";"IRP-koppelpunt, \Driver\Disk IRP_MJ_CLOSE -> CLASSPNP.SYS +0x19E0";"Object staat op de witte lijst (systeemkritisch bestand/systeembestand dat niet verwijderd moet worden)"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 22];"C:\Windows\system32\drivers\CLASSPNP.SYS";"IRP-koppelpunt, \Driver\Disk IRP_MJ_PNP -> CLASSPNP.SYS +0x19E0";"Object staat op de witte lijst (systeemkritisch bestand/systeembestand dat niet verwijderd moet worden)"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 23];"C:\Windows\system32\drivers\CLASSPNP.SYS";"IRP-koppelpunt, \Driver\Disk IRP_MJ_SYSTEM_CONTROL -> CLASSPNP.SYS +0x19E0";"Object staat op de witte lijst (systeemkritisch bestand/systeembestand dat niet verwijderd moet worden)"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 22];"C:\Windows\system32\drivers\CLASSPNP.SYS";"IRP-koppelpunt, \Driver\Disk IRP_MJ_POWER -> CLASSPNP.SYS +0x19E0";"Object staat op de witte lijst (systeemkritisch bestand/systeembestand dat niet verwijderd moet worden)"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 23];"C:\Windows\system32\drivers\CLASSPNP.SYS";"IRP-koppelpunt, \Driver\Disk IRP_MJ_SHUTDOWN -> CLASSPNP.SYS +0x19E0";"Object staat op de witte lijst (systeemkritisch bestand/systeembestand dat niet verwijderd moet worden)"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 24];"C:\Windows\system32\drivers\CLASSPNP.SYS";"IRP-koppelpunt, \Driver\Disk IRP_MJ_INTERNAL_DEVICE_CONTROL -> CLASSPNP.SYS +0x19E0";"Object staat op de witte lijst (systeemkritisch bestand/systeembestand dat niet verwijderd moet worden)"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 23];"C:\Windows\system32\drivers\CLASSPNP.SYS";"IRP-koppelpunt, \Driver\Disk IRP_MJ_DEVICE_CONTROL -> CLASSPNP.SYS +0x19E0";"Object staat op de witte lijst (systeemkritisch bestand/systeembestand dat niet verwijderd moet worden)"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 23];"C:\Windows\system32\drivers\CLASSPNP.SYS";"IRP-koppelpunt, \Driver\Disk IRP_MJ_FLUSH_BUFFERS -> CLASSPNP.SYS +0x19E0";"Object staat op de witte lijst (systeemkritisch bestand/systeembestand dat niet verwijderd moet worden)"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 22];"C:\Windows\system32\drivers\CLASSPNP.SYS";"IRP-koppelpunt, \Driver\Disk IRP_MJ_WRITE -> CLASSPNP.SYS +0x19E0";"Object staat op de witte lijst (systeemkritisch bestand/systeembestand dat niet verwijderd moet worden)"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 22];"C:\Windows\system32\drivers\CLASSPNP.SYS";"IRP-koppelpunt, \Driver\Disk IRP_MJ_READ -> CLASSPNP.SYS +0x19E0";"Object staat op de witte lijst (systeemkritisch bestand/systeembestand dat niet verwijderd moet worden)"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 23];"C:\Windows\system32\drivers\HIDCLASS.SYS";"IRP-koppelpunt, \Driver\HidUsb IRP_MJ_CREATE -> HIDCLASS.SYS +0x2710";"Object staat op de witte lijst (systeemkritisch bestand/systeembestand dat niet verwijderd moet worden)"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 23];"C:\Windows\system32\drivers\HIDCLASS.SYS";"IRP-koppelpunt, \Driver\HidUsb IRP_MJ_CLOSE -> HIDCLASS.SYS +0x2710";"Object staat op de witte lijst (systeemkritisch bestand/systeembestand dat niet verwijderd moet worden)"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 22];"C:\Windows\system32\drivers\HIDCLASS.SYS";"IRP-koppelpunt, \Driver\HidUsb IRP_MJ_READ -> HIDCLASS.SYS +0x2710";"Object staat op de witte lijst (systeemkritisch bestand/systeembestand dat niet verwijderd moet worden)"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 23];"C:\Windows\system32\drivers\HIDCLASS.SYS";"IRP-koppelpunt, \Driver\HidUsb IRP_MJ_WRITE -> HIDCLASS.SYS +0x2710";"Object staat op de witte lijst (systeemkritisch bestand/systeembestand dat niet verwijderd moet worden)"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 24];"C:\Windows\system32\drivers\HIDCLASS.SYS";"IRP-koppelpunt, \Driver\HidUsb IRP_MJ_DEVICE_CONTROL -> HIDCLASS.SYS +0x2710";"Object staat op de witte lijst (systeemkritisch bestand/systeembestand dat niet verwijderd moet worden)"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 25];"C:\Windows\system32\drivers\HIDCLASS.SYS";"IRP-koppelpunt, \Driver\HidUsb IRP_MJ_INTERNAL_DEVICE_CONTROL -> HIDCLASS.SYS +0x2710";"Object staat op de witte lijst (systeemkritisch bestand/systeembestand dat niet verwijderd moet worden)"[/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 23];"C:\Windows\system32\drivers\HIDCLASS.SYS";"IRP-koppelpunt, \Driver\HidUsb IRP_MJ_POWER -> HIDCLASS.SYS +0x2710";"Object staat op de witte lijst (systeemkritisch bestand/systeembestand dat niet verwijderd moet worden)"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 24];"C:\Windows\system32\drivers\HIDCLASS.SYS";"IRP-koppelpunt, \Driver\HidUsb IRP_MJ_SYSTEM_CONTROL -> HIDCLASS.SYS +0x2710";"Object staat op de witte lijst (systeemkritisch bestand/systeembestand dat niet verwijderd moet worden)"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent, colspan: 22];"C:\Windows\system32\drivers\HIDCLASS.SYS";"IRP-koppelpunt, \Driver\HidUsb IRP_MJ_PNP -> HIDCLASS.SYS +0x2710";"Object staat op de witte lijst (systeemkritisch bestand/systeembestand dat niet verwijderd moet worden)"[/TD]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent][/TD]

[/TR]

[TR]

[TD=bgcolor: transparent][/TD]

[/TR]

[/TABLE]

3 september 2012

als ik hem met avg rootkitscan scan dan staan er nog 90 op dat ik niet kan verwijderen

als ik deze wil verwijderen staat er dat mij gebruikersaccountbeheer van windows vista zijn uit geschakeld

hoe krijg ik deze weer aan

ook zet een virus alle antiscanners uit zoals avg fireware en ook maleware er staat u bent niet beschermd repareren gaat niet

ik krijg deze niet meer aan

hitman geeft aan boot configuratie date staat niet ondertekende stuurprogramma's toe

veder desktop.ini c windows assembly gac-64 trojan

desktop.ini c windows assembly gac 32 malware

c windows system32 drivers verdacht

veder een hele rij met tracking cookie's

ik kan deze niet weghalen omdat dit een gratis versie was en verlopen is

wat moet ik er allemaal mee?????

3 september 2012

als ik hem hertstart dan gaat hij niet meer automatich scannen

als ik hem weer zelf opnieuw scan staan er nog 5 op van de 6

3 september 2012

hier zijn mij logs

Malwarebytes Anti-Malware (-evaluatieversie-) 1.62.0.1300

www.malwarebytes.org

Databaseversie: v2012.09.03.03

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 8.0.7601.17514

johan :: JOHAN-VAIO [administrator]

Realtime bescherming: Uitgeschakeld

3-9-2012 8:47:21

mbam-log-2012-09-03 (08-47-21).txt

Scantype: Snelle scan

Uitgeschakelde scanopties: P2P

Objecten gescand: 238859

Verstreken tijd: 4 minuut/minuten, 35 seconde(n)

Geheugenprocessen gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

Geheugenmodulen gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

Registersleutels gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

Registerwaarden gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

Registerdata gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

Mappen gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

Bestanden gedetecteerd: 6

c:\windows\syshost.exe (Trojan.Downloader) -> Zal worden verwijderd tijdens het herstarten.

c:\users\johan\appdata\local\temp\syshost.exe (Spyware.Agent) -> Zal worden verwijderd tijdens het herstarten.

c:\windows\serviceprofiles\localservice\appdata\local\temp\syshost.exe (Spyware.Agent) -> Zal worden verwijderd tijdens het herstarten.

c:\windows\serviceprofiles\networkservice\appdata\local\temp\syshost.exe (Spyware.Agent) -> Zal worden verwijderd tijdens het herstarten.

c:\windows\system32\config\systemprofile\appdata\local\temp\syshost.exe (Spyware.Agent) -> Zal worden verwijderd tijdens het herstarten.

c:\windows\temp\syshost.exe (Spyware.Agent) -> Zal worden verwijderd tijdens het herstarten.

(einde)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 9:04:29, on 3-9-2012

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v8.00 (8.00.7601.17514)

Boot mode: Normal

Running processes:

C:\Program Files\Sony\VAIO Care\VCSpt.exe

C:\Users\johan\AppData\Local\PanelClix Software\PanelClix Software.exe

C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe

C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe

C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files (x86)\AVG\AVG2012\avgtray.exe

C:\Program Files (x86)\AVG Secure Search\vprot.exe

C:\Windows\SysWOW64\RunDll32.exe

C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe

C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = ${URL_SEARCHPAGE}

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = This message is from the Microsoft Safety & Security Center

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

F2 - REG:system.ini: UserInit=userinit.exe,

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll

O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\12.2.0.5\AVG Secure Search_toolbar.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.7529.1424\swg.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\12.2.0.5\AVG Secure Search_toolbar.dll

O4 - HKLM\..\Run: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

O4 - HKLM\..\Run: [iSBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe"

O4 - HKLM\..\Run: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED

O4 - HKLM\..\Run: [PMBVolumeWatcher] c:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe

O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Windows\system32\NeroCheck.exe

O4 - HKLM\..\Run: [sHTtray.exe] C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"

O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe"

O4 - HKLM\..\Run: [ROC_roc_ssl_v12] "C:\Program Files (x86)\AVG Secure Search\ROC_roc_ssl_v12.exe" / /PROMPT /CMPID=roc_ssl_v12

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKCU\..\Run: [PanelClix Software] C:\Users\johan\AppData\Local\PanelClix Software\PanelClix Software.exe

O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O4 - Global Startup: Bluetooth.lnk = ?

O8 - Extra context menu item: Add to &Evernote - res://c:\Program Files (x86)\Evernote\Evernote3.5\enbar.dll/2000

O8 - Extra context menu item: Afbeelding verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

O8 - Extra context menu item: Pagina verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll

O9 - Extra button: Verzenden naar Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O9 - Extra 'Tools' menuitem: Verzenden naar &Bluetooth-apparaat... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O9 - Extra button: Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - c:\Program Files (x86)\Evernote\Evernote3.5\enbar.dll

O9 - Extra 'Tools' menuitem: Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E92528A6} - c:\Program Files (x86)\Evernote\Evernote3.5\enbar.dll

O9 - Extra button: Golden Tiger Casino - {143E7E01-9B70-4C10-B298-8A81A57A2855} - C:\Microgaming\Casino\GoldenTiger\casinogame.exe (HKCU)

O9 - Extra button: Jackpot City Online Casino - {FE66F3C7-58E6-425E-8341-753EA5C44E64} - C:\Microgaming\Casino\JackpotCity\casinogame.exe (HKCU)

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://www.velsen.nl/webcamstadhuis/activex/AxisCamControl.cab

O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL

O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\12.2.0\ViProtocol.dll

O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgidsagent.exe

O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe

O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: HitmanPro Scheduler (HitmanProScheduler) - SurfRight B.V. - C:\Program Files\HitmanPro\hmpsched.exe

O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

O23 - Service: IviRegMgr - InterVideo - C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)

O23 - Service: PMBDeviceInfoProvider - Sony Corporation - c:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe

O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel® Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

O23 - Service: Roxio UPnP Renderer 10 - Sonic Solutions - C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe

O23 - Service: Roxio Upnp Server 10 - Sonic Solutions - C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: Intel® Sample Collector (SampleCollector) - Sony of America Corporation - C:\Program Files\Sony\VAIO Care\collsvc.exe

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: VAIO Media plus Content Importer (SOHCImp) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe

O23 - Service: VAIO Media plus Digital Media Server (SOHDms) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe

O23 - Service: VAIO Media plus Device Searcher (SOHDs) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe

O23 - Service: VAIO Entertainment Common Service (SpfService) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService.exe

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: CamMonitor (uCamMonitor) - ArcSoft, Inc. - C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe

O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe

O23 - Service: VAIO Power Management - Sony Corporation - C:\Program Files\Sony\VAIO Power Management\SPMService.exe

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: VAIO Content Folder Watcher (VCFw) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe

O23 - Service: VAIO Content Metadata Intelligent Analyzing Manager (VcmIAlzMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe

O23 - Service: VAIO Content Metadata Intelligent Network Service Manager (VcmINSMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe

O23 - Service: VAIO Content Metadata XML Interface (VcmXmlIfHelper) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: VSNService - Sony Corporation - C:\Program Files\Sony\VAIO Smart Network\VSNService.exe

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: vToolbarUpdater12.2.0 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\12.2.0\ToolbarUpdater.exe

O23 - Service: VUAgent - Sony Corporation - C:\Program Files\Sony\VAIO Update 5\VUAgent.exe

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

O23 - Service: ZiggyTV Toolbar Helper - Unknown owner - C:\Program Files (x86)\Ziggy TV Toolbar\ZiggyTVSvc.exe

--

End of file - 15766 bytes

2 september 2012

kun je mij helpen om de rootkits van mij computer te krijgen .ik heb al een scan gemaakt

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 22:16:07, on 2-9-2012

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v8.00 (8.00.7601.17514)

Boot mode: Normal

Running processes:

C:\Program Files\Sony\VAIO Care\VCSpt.exe

C:\Users\johan\AppData\Local\PanelClix Software\PanelClix Software.exe

C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe

C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe

C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Users\johan\AppData\Roaming\BrowserCompanion\tcbhn.exe

C:\Windows\SysWOW64\RunDll32.exe

C:\Program Files (x86)\AVG\AVG2012\avgtray.exe

C:\Program Files (x86)\AVG Secure Search\vprot.exe

C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe

C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

C:\Program Files (x86)\Internet Explorer\iexplore.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = ${URL_SEARCHPAGE}

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = ${URL_SEARCHPAGE}

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = This message is from the Microsoft Safety & Security Center

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R3 - URLSearchHook: TV Bar 1.1 Toolbar - {a386d4b0-fddb-4e1c-ae61-4f014013cd9b} - (no file)

R3 - URLSearchHook: uTorrentBar_NL Toolbar - {87775fdb-6972-41f9-ae51-8326e38cb206} - C:\Program Files (x86)\uTorrentBar_NL\prxtbuTor.dll

F2 - REG:system.ini: UserInit=userinit.exe,

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files (x86)\AVG\AVG2012\avgdtiex.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll

O2 - BHO: uTorrentBar_NL - {87775fdb-6972-41f9-ae51-8326e38cb206} - C:\Program Files (x86)\uTorrentBar_NL\prxtbuTor.dll

O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\12.2.0.5\AVG Secure Search_toolbar.dll

O2 - BHO: TV Bar 1.1 Toolbar - {a386d4b0-fddb-4e1c-ae61-4f014013cd9b} - (no file)

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.7529.1424\swg.dll

O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

O2 - BHO: WakoopaBHOClass Class - {FB4D29C1-82DE-4b80-8BB0-A7CDDDCD2773} - C:\Users\johan\AppData\Local\Wakoopa Shared\WakoopaBHO.dll

O3 - Toolbar: ZiggyTV Toolbar - {4C350B19-6CA1-4569-B14C-296D8D65300C} - (no file)

O3 - Toolbar: TV Bar 1.1 Toolbar - {a386d4b0-fddb-4e1c-ae61-4f014013cd9b} - (no file)

O3 - Toolbar: Nero Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll

O3 - Toolbar: uTorrentBar_NL Toolbar - {87775fdb-6972-41f9-ae51-8326e38cb206} - C:\Program Files (x86)\uTorrentBar_NL\prxtbuTor.dll