vogeltjeM

3 maart 2013

dat had ik al geprobeerd, maar dan zeg ie: kan geen verbinding maken met een betrouwbare bron.

wat moet ik daar nou weer mee?

groetjes,

Merel

3 maart 2013

Hoi,

Ik heb een acer aspire one gekocht en ik krijg de flash player niet geinstalleerd. Hij zegt dan iets van: kan geen verbinding maken met een betrouwbare bron.

Ik heb al geprobeerd om een oudere versie te installeren, maar die krijg ik dan weer niet geopend.

Wie kan mij helpen?

groetjes,

Merel

11 oktober 2012

Ik krijg Avast niet op gang, er komt dan een melding van: File System Shield provider not found.

Wie weet wat ik nu moet doen om dit weer te activeren?

Verder heb ik er Lavasoft Ad-watch live op staan, heeft iemand daar ervaring mee, of kan ik die er beter afgooien en er een andere opzetten?

Alvast bedankt,

groetjes,

Merel

29 september 2012

ComboFix 12-09-27.03 - Merel 28-09-2012 23:11:01.2.2 - x86

Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.31.1043.18.2038.971 [GMT 2:00]

Gestart vanuit: d:\gebruikers\Merel\Bureaublad\ComboFix.exe

gebruikte Opdracht switches :: d:\gebruikers\Merel\Bureaublad\CFScript.txt

AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}

AV: Lavasoft Ad-Watch Live! Antivirus *Disabled/Updated* {9FF26384-70D4-CE6B-3ECB-E759A6A40116}

SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}

SP: Lavasoft Ad-Watch Live! *Disabled/Updated* {24938260-56EE-C1E5-047B-DC2BDD234BAB}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

FILE ::

"C:\user.js"

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\program files\Claro LTD

c:\program files\Claro LTD\claro\1.6.4.1\claroApp.dll

c:\program files\Claro LTD\claro\1.6.4.1\claroEng.dll

c:\program files\Claro LTD\claro\1.6.4.1\clarosrv.exe

c:\program files\Claro LTD\claro\1.6.4.1\claroTlbr.dll

c:\program files\Claro LTD\claro\1.6.4.1\escortShld.dll

c:\program files\Claro LTD\claro\1.6.4.1\uninstall.exe

c:\program files\Claro LTD\claro\ClaroTB.xpi

c:\program files\Conduit

c:\program files\Conduit\Community Alerts\Alert.dll

c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1

c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1\x86\DIFxInstallLog.txt

c:\programdata\Babylon

c:\programdata\PC Performer Manager

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\FirefoxExtension\chrome.manifest

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\FirefoxExtension\components\bprotector-10.0.2.dll

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\FirefoxExtension\components\bprotector-11.0.dll

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\FirefoxExtension\components\bprotector-12.0.dll

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\FirefoxExtension\components\bprotector-13.0.dll

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\FirefoxExtension\components\bprotector-14.0.1.dll

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\FirefoxExtension\components\bprotector-3.6.dll

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\FirefoxExtension\components\bprotector-3.6.xpt

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\FirefoxExtension\components\bprotector-5.0.dll

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\FirefoxExtension\components\bprotector-6.0.2.dll

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\FirefoxExtension\components\bprotector-7.0.1.dll

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\FirefoxExtension\components\bprotector-8.0.1.dll

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\FirefoxExtension\components\bprotector-9.0.1.dll

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\FirefoxExtension\content\bprotector.js

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\FirefoxExtension\content\overlay.xul

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\FirefoxExtension\install.rdf

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\pcpmngr.dll

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\pcpmngr.exe

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\pcpmngr.settings

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\traking_settings\00

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\traking_settings\01

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\traking_settings\02

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\traking_settings\10

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\traking_settings\11

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\traking_settings\12

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\traking_settings\20

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\traking_settings\21

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\traking_settings\22

c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\Uninstall PC Performer Manager.exe

c:\programdata\Tarma Installer

c:\programdata\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setup.dll

c:\programdata\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.dat

c:\programdata\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.exe

c:\programdata\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.ico

c:\users\Merel\{9ee84b2d-806d-449e-b224-7946cfd4290e}

c:\users\Merel\{9ee84b2d-806d-449e-b224-7946cfd4290e}\USBAAPL.CAT

c:\users\Merel\{9ee84b2d-806d-449e-b224-7946cfd4290e}\usbaapl.inf

c:\users\Merel\{9ee84b2d-806d-449e-b224-7946cfd4290e}\usbaapl.sys

c:\users\Merel\{9ee84b2d-806d-449e-b224-7946cfd4290e}\usbaaplrc.dll

c:\users\Merel\AppData\Local\Conduit

c:\users\Merel\AppData\Local\Conduit\CT2865317\uTorrentBar_NLAutoUpdateHelper.exe

c:\users\Merel\AppData\Roaming\Babylon

c:\users\Merel\AppData\Roaming\Babylon\log_file.txt

.

(((((((((((((((((((( Bestanden Gemaakt van 2012-08-28 to 2012-09-29 ))))))))))))))))))))))))))))))

.

2012-09-28 21:24 . 2012-09-29 08:05 -------- d-----w- c:\users\Merel\AppData\Local\temp

2012-09-28 21:24 . 2012-09-28 21:24 -------- d-----w- c:\users\Kinderen\AppData\Local\temp

2012-09-28 21:24 . 2012-09-28 21:24 -------- d-----w- c:\users\Default\AppData\Local\temp

2012-09-28 07:02 . 2012-08-30 08:17 6980552 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{55D3263F-661E-41C5-89FA-37200D00AE9D}\mpengine.dll

2012-09-26 18:22 . 2012-09-26 18:22 -------- d-----w- c:\program files\Sony

2012-09-26 18:22 . 2012-09-26 18:22 -------- d-----w- c:\program files\Common Files\Sony Shared

2012-09-25 20:01 . 2012-09-25 20:01 -------- d-----w- c:\programdata\kinoma

2012-09-25 20:00 . 2012-09-25 20:00 -------- d-----w- c:\users\Merel\AppData\Local\kinoma

2012-09-25 19:58 . 2012-09-26 18:22 -------- d-----w- c:\users\Merel\AppData\Local\Sony Corporation

2012-09-25 19:55 . 2012-09-25 19:55 -------- d-----w- c:\users\Merel\AppData\Roaming\Sony Corporation

2012-09-25 19:55 . 2012-09-25 19:55 -------- d-----w- c:\programdata\Sony Corporation

2012-09-24 10:51 . 2012-09-07 15:04 22856 ----a-w- c:\windows\system32\drivers\mbam.sys

2012-09-24 06:58 . 2012-09-24 06:58 388096 ----a-r- c:\users\Merel\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

2012-09-24 06:57 . 2012-09-24 06:57 -------- d-----w- c:\program files\Trend Micro

2012-09-24 06:18 . 2012-09-24 06:24 -------- d-----w- c:\users\Kinderen\AppData\Roaming\PerformerSoft

2012-09-20 10:03 . 2012-09-20 10:03 -------- d-----w- c:\program files\iPod(115)

2012-09-20 10:03 . 2012-09-20 10:05 -------- d-----w- c:\program files\iTunes(116)

2012-09-10 11:07 . 2012-09-06 01:24 73696 ----a-w- c:\program files\Mozilla Firefox\breakpadinjector.dll

2012-09-10 11:06 . 2012-09-10 11:06 98 ----a-w- C:\user.js

2012-09-10 11:05 . 2012-09-10 11:05 -------- d-----w- c:\users\Merel\AppData\Local\CRE

2012-09-10 11:04 . 2012-09-24 06:35 -------- d-----w- c:\users\Merel\AppData\Roaming\PerformerSoft

2012-09-10 11:04 . 2012-09-10 11:04 -------- d-----w- c:\programdata\IBUpdaterService

2012-09-10 11:01 . 2012-09-18 09:48 -------- d-----w- c:\users\Merel\AppData\Roaming\uTorrent

2012-09-05 00:29 . 2012-09-05 00:29 887888 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-09-21 06:47 . 2012-05-05 20:48 696240 ----a-w- c:\windows\system32\FlashPlayerApp.exe

2012-09-21 06:47 . 2011-05-22 14:03 73136 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2012-08-28 19:40 . 2009-12-23 18:08 8892928 ----a-w- c:\programdata\atscie.msi

2012-07-04 14:02 . 2012-08-17 01:07 2047488 ----a-w- c:\windows\system32\win32k.sys

2012-09-06 01:26 . 2011-05-10 17:12 266720 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]

@="{472083B0-C522-11CF-8763-00608CC02F24}"

[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]

2011-11-28 18:01 122512 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]

"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]

"KiesHelper"="c:\program files\Samsung\Kies\KiesHelper.exe" [2011-08-22 958352]

"KiesPDLR"="c:\program files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2011-08-22 20880]

"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]

"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-02-05 39408]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2006-10-09 729088]

"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-01-13 827392]

"RtHDVCpl"="RtHDVCpl.exe" [2007-03-09 4390912]

"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2007-02-12 174872]

"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2007-04-23 176128]

"HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2007-03-12 50696]

"hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-03-01 472776]

"WAWifiMessage"="c:\program files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe" [2007-01-10 317128]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]

"WPCUMI"="c:\windows\system32\WpcUmi.exe" [2006-11-02 176128]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-01-02 141848]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-01-02 166424]

"Persistence"="c:\windows\system32\igfxpers.exe" [2008-01-02 133656]

"Symantec PIF AlertEng"="c:\program files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2007-03-12 517768]

"Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Elements 5.0\apdproxy.exe" [2006-09-14 61440]

"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-12-10 49152]

"Windows Mobile-based device management"="c:\windows\WindowsMobile\wmdcBase.exe" [2007-05-31 648072]

"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]

"KiesHelper"="c:\program files\Samsung\Kies\KiesHelper.exe" [2011-08-22 958352]

"KiesTrayAgent"="c:\program files\Samsung\Kies\KiesTrayAgent.exe" [2011-08-22 3507088]

"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-08-27 59280]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2011-08-31 40368]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-29 937920]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2012-04-18 421888]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2012-06-07 421776]

"nmctxth"="c:\program files\Common Files\Pure Networks Shared\Platform\nmctxth.exe" [2009-07-07 647216]

"nmapp"="c:\program files\Pure Networks\nmapp.exe" [2009-07-08 472112]

"Reader Application Helper"="c:\program files\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe" [2012-07-12 892928]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]

"Launcher"="c:\windows\SMINST\launcher.exe" [2006-11-07 44128]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Google Calendar Sync.lnk - c:\program files\Google\Google Calendar Sync\GoogleCalendarSync.exe [2011-4-8 542264]

HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2008-3-25 214360]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

@="Service"

.

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]

"DisableMonitoring"=dword:00000001

.

R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12

hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

WindowsMobile REG_MULTI_SZ wcescomm rapimgr

LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr

.

Inhoud van de 'Gedeelde Taken' map

.

2012-09-28 c:\windows\Tasks\Ad-Aware Update (Weekly).job

- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2010-12-03 07:40]

.

2012-09-29 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-05 06:47]

.

2012-09-28 c:\windows\Tasks\Google Software Updater.job

- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-03-04 08:08]

.

2012-09-29 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2009-02-05 17:59]

.

2012-09-29 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2009-02-05 17:59]

.

------- Bijkomende Scan -------

.

mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=NL_NL&c=73&bd=PRESARIO&pf=laptop

uInternet Settings,ProxyOverride = *.local

IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000

LSP: c:\windows\system32\wpclsp.dll

TCP: DhcpNameServer = 213.46.228.196 62.179.104.196

Handler: CDS300 - {AD43AA67-6860-4531-AC8A-0E68F9CF023E} -

FF - ProfilePath - c:\users\Merel\AppData\Roaming\Mozilla\Firefox\Profiles\5i8ipts3.default-1348471062428\

FF - prefs.js: browser.search.selectedEngine - Claro Search

FF - prefs.js: browser.startup.homepage - ^hxxp://www\\.claro-search\\.com/\\?affID=114506.*

FF - prefs.js: keyword.URL - ^hxxp://www\\.claro-search\\.com/\\?affID=114506.*&q=

.

- - - - ORPHANS VERWIJDERD - - - -

.

AddRemove-claro - c:\program files\Claro LTD\claro\1.6.4.1\uninstall.exe

AddRemove-{15D2D75C-9CB2-4efd-BAD7-B9B4CB4BC693} - c:\programdata\PC Performer Manager\2.2.587.187\{61d8b74e-8d89-46ff-afa6-33382c54ac73}\Uninstall PC Performer Manager.exe

.

**************************************************************************

.

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2012-09-29 10:05

Windows 6.0.6002 Service Pack 2 NTFS

.

scannen van verborgen processen ...

.

scannen van verborgen autostart items ...

.

scannen van verborgen bestanden ...

.

Scan succesvol afgerond

verborgen bestanden: 0

.

**************************************************************************

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

"MSCurrentCountry"=dword:000000b5

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

--------------------- DLLs Geladen Onder Lopende Processen ---------------------

.

- - - - - - - > 'Explorer.exe'(2896)

c:\program files\Pure Networks\nmrsrc.dll

c:\program files\FileZilla FTP Client\fzshellext.dll

.

------------------------ Andere Aktieve Processen ------------------------

.

c:\program files\Lavasoft\Ad-Aware\AAWService.exe

c:\program files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe

c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

c:\windows\system32\atashost.exe

c:\program files\Bonjour\mDNSResponder.exe

c:\windows\system32\crypserv.exe

c:\program files\Intel\Intel Matrix Storage Manager\IAANTMon.exe

c:\program files\Common Files\LightScribe\LSSrvc.exe

c:\program files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

c:\program files\PSTStation Corporate\PSTStationServiceCorporate.exe

c:\program files\Hewlett-Packard\Shared\hpqwmiex.exe

c:\program files\Common Files\Pure Networks Shared\Platform\nmsrvc.exe

c:\windows\system32\WUDFHost.exe

c:\windows\system32\wbem\unsecapp.exe

c:\program files\Hewlett-Packard\HP Health Check\hphc_service.exe

c:\program files\Lavasoft\Ad-Aware\AAWTray.exe

c:\windows\system32\conime.exe

c:\windows\system32\wbem\unsecapp.exe

c:\program files\Windows Media Player\wmpnetwk.exe

.

**************************************************************************

.

Voltooingstijd: 2012-09-29 10:10:20 - machine werd herstart

ComboFix-quarantined-files.txt 2012-09-29 08:09

ComboFix2.txt 2012-09-28 15:36

.

Pre-Run: 9.981.521.920 bytes beschikbaar

Post-Run: 9.688.567.808 bytes beschikbaar

.

- - End Of File - - 274B6480C7F4554FCACDA090036AA696

28 september 2012

Hoera,

Toch een log:

ComboFix 12-09-27.03 - Merel 28-09-2012 14:05:54.1.2 - x86

Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.31.1043.18.2038.357 [GMT 2:00]

Gestart vanuit: d:\gebruikers\Merel\Bureaublad\ComboFix.exe

AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}

AV: Lavasoft Ad-Watch Live! Antivirus *Enabled/Updated* {9FF26384-70D4-CE6B-3ECB-E759A6A40116}

SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}

SP: Lavasoft Ad-Watch Live! *Enabled/Updated* {24938260-56EE-C1E5-047B-DC2BDD234BAB}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

C:\DFR42E8.tmp

c:\users\Merel\AppData\Local\Temp\3dcf2df1-2a83-477c-a7dd-858967792357\CliSecureRT.dll

c:\windows\IsUn0413.exe

c:\windows\pi.exe

c:\windows\system32\drivers\etc\hosts.ics

c:\windows\system32\muzapp.exe

c:\windows\system32\roboot.exe

c:\windows\system32\SPCC1011.ocx

c:\windows\system32\System32\MASetupCleaner.exe

c:\windows\system32\System32\muzapp.exe

c:\windows\unin0413.exe

.

(((((((((((((((((((( Bestanden Gemaakt van 2012-08-28 to 2012-09-28 ))))))))))))))))))))))))))))))

.

2012-09-28 15:10 . 2012-09-28 15:10 -------- d-----w- c:\users\Default\AppData\Local\temp

2012-09-28 15:10 . 2012-09-28 15:10 -------- d-----w- c:\users\Kinderen\AppData\Local\temp