Ga naar inhoud

Tom Struyven

Lid
 Bekijk profiel  Bekijk hun activiteit

  • Items

    3

  • Registratiedatum

  • Laatst bezocht

 Inhoudstype 

Berichten die geplaatst zijn door Tom Struyven

    computer traag, mbam ok, kan iemand hijackthis eens bekijken?

    in Archief Bestrijding malware & virussen

    Geplaatst:

    Combofix heeft zijn werk gehad, twee keer de computer heropgestart :hmmmm:

    hopelijk is het nu wat beter.

    Alvast bedankt voor de hulp bji deel 1

    Tom

    COMBOFIX LOG

    ComboFix 12-10-13.01 - Administrator 13/10/2012 21:17:56.1.1 - x86

    Microsoft Windows XP Professional 5.1.2600.3.1252.32.1043.18.2039.1670 [GMT 2:00]

    Gestart vanuit: c:\documents and settings\Administrator\Bureaublad\ComboFix.exe

    AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}

    .

    .

    (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    c:\documents and settings\Administrator\Application Data\inst.exe

    c:\documents and settings\Administrator\Application Data\vso_ts_preview.xml

    c:\documents and settings\Administrator\Local Settings\Application Data\.#

    c:\documents and settings\Administrator\WINDOWS

    c:\documents and settings\All Users\Application Data\TEMP

    c:\program files\Internet Explorer\SET73.tmp

    c:\program files\Internet Explorer\SET77.tmp

    c:\program files\Internet Explorer\SET78.tmp

    C:\Thumbs.db

    c:\windows\$NtUninstallKB60825$

    c:\windows\$NtUninstallKB60825$\1024659688

    c:\windows\$NtUninstallKB60825$\609760830\@

    c:\windows\$NtUninstallKB60825$\609760830\L\akygdmgo

    c:\windows\$NtUninstallKB60825$\609760830\loader.tlb

    c:\windows\$NtUninstallKB60825$\609760830\U\@00000001

    c:\windows\$NtUninstallKB60825$\609760830\U\@000000c0

    c:\windows\$NtUninstallKB60825$\609760830\U\@000000cb

    c:\windows\$NtUninstallKB60825$\609760830\U\@000000cf

    c:\windows\$NtUninstallKB60825$\609760830\U\@80000000

    c:\windows\$NtUninstallKB60825$\609760830\U\@800000c0

    c:\windows\$NtUninstallKB60825$\609760830\U\@800000cb

    c:\windows\$NtUninstallKB60825$\609760830\U\@800000cf

    c:\windows\IsUn0413.exe

    c:\windows\iun6002.exe

    c:\windows\pkunzip.pif

    c:\windows\pkzip.pif

    c:\windows\system32\

    c:\windows\system32\dllcache\dlimport.exe

    c:\windows\system32\dllcache\wmpvis.dll

    c:\windows\system32\SET8E.tmp

    c:\windows\system32\SET8F.tmp

    c:\windows\system32\SET90.tmp

    c:\windows\system32\SET91.tmp

    c:\windows\system32\SET92.tmp

    c:\windows\system32\SET93.tmp

    c:\windows\system32\SET94.tmp

    c:\windows\system32\SET95.tmp

    c:\windows\system32\SET96.tmp

    c:\windows\system32\SET99.tmp

    c:\windows\system32\SET9A.tmp

    c:\windows\system32\SET9B.tmp

    c:\windows\system32\SET9C.tmp

    c:\windows\system32\SET9D.tmp

    c:\windows\system32\SET9E.tmp

    c:\windows\system32\SETA0.tmp

    c:\windows\system32\SETA1.tmp

    c:\windows\system32\SETA2.tmp

    c:\windows\system32\SETA3.tmp

    c:\windows\system32\SETA4.tmp

    c:\windows\system32\SETA5.tmp

    c:\windows\system32\SETA6.tmp

    c:\windows\system32\SETA8.tmp

    c:\windows\system32\SETA9.tmp

    c:\windows\system32\SETAA.tmp

    c:\windows\system32\SETAB.tmp

    c:\windows\system32\SETAC.tmp

    c:\windows\system32\SETAD.tmp

    c:\windows\system32\SETAE.tmp

    c:\windows\system32\SETAF.tmp

    c:\windows\system32\SETB0.tmp

    c:\windows\system32\SETB1.tmp

    c:\windows\system32\SETB2.tmp

    c:\windows\system32\SETB3.tmp

    c:\windows\system32\SETB4.tmp

    c:\windows\system32\SETB5.tmp

    c:\windows\system32\SETB6.tmp

    c:\windows\system32\URTTemp

    c:\windows\system32\URTTemp\fusion.dll

    c:\windows\system32\URTTemp\mscoree.dll

    c:\windows\system32\URTTemp\mscoree.dll.local

    c:\windows\system32\URTTemp\mscorsn.dll

    c:\windows\system32\URTTemp\mscorwks.dll

    c:\windows\system32\URTTemp\msvcr71.dll

    c:\windows\system32\URTTemp\regtlib.exe

    I:\autorun.inf

    .

    .

    (((((((((((((((((((( Bestanden Gemaakt van 2012-09-13 to 2012-10-13 ))))))))))))))))))))))))))))))

    .

    .

    2012-10-11 14:14 . 2012-10-11 14:14 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe

    2012-09-30 09:37 . 2012-09-30 09:37 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

    2012-09-30 09:37 . 2012-09-07 15:04 22856 ----a-w- c:\windows\system32\drivers\mbam.sys

    2012-09-25 14:46 . 2012-10-13 18:30 -------- d--h--r- c:\documents and settings\Administrator\Onlangs geopend

    2012-09-21 06:53 . 2012-09-21 06:53 813536 ----a-w- c:\program files\Mozilla Firefox\mozsqlite3.dll

    .

    .

    .

    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2012-10-11 14:14 . 2011-12-06 09:11 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

    2012-08-28 15:17 . 2001-09-07 12:00 916992 ----a-w- c:\windows\system32\wininet.dll

    2012-08-28 15:17 . 2001-09-07 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll

    2012-08-28 15:17 . 2001-09-07 12:00 1469440 ------w- c:\windows\system32\inetcpl.cpl

    2012-08-28 12:07 . 2004-08-04 07:55 385024 ----a-w- c:\windows\system32\html.iec

    2012-08-21 09:13 . 2011-11-13 20:03 355632 ----a-w- c:\windows\system32\drivers\aswSP.sys

    2012-08-21 09:13 . 2011-11-13 20:03 54232 ----a-w- c:\windows\system32\drivers\aswTdi.sys

    2012-08-21 09:13 . 2011-11-13 20:03 729752 ----a-w- c:\windows\system32\drivers\aswSnx.sys

    2012-08-21 09:13 . 2011-11-13 20:03 35928 ----a-w- c:\windows\system32\drivers\aswRdr.sys

    2012-08-21 09:13 . 2011-11-13 20:02 97608 ----a-w- c:\windows\system32\drivers\aswmon2.sys

    2012-08-21 09:13 . 2011-11-13 20:02 89624 ----a-w- c:\windows\system32\drivers\aswmon.sys

    2012-08-21 09:13 . 2011-11-13 20:03 21256 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys

    2012-08-21 09:13 . 2011-11-13 20:02 25256 ----a-w- c:\windows\system32\drivers\aavmker4.sys

    2012-08-21 09:12 . 2011-11-13 20:02 41224 ----a-w- c:\windows\avastSS.scr

    2012-08-21 09:12 . 2011-11-13 20:02 227648 ----a-w- c:\windows\system32\aswBoot.exe

    2007-03-12 17:59 . 2007-03-12 17:59 299008 ----a-w- c:\program files\navigram_register.exe

    2012-09-21 06:54 . 2012-09-21 06:54 266720 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll

    .

    .

    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

    REGEDIT4

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]

    @="{472083B0-C522-11CF-8763-00608CC02F24}"

    [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]

    2012-08-21 09:12 121528 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll

    .

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2012-10-09 4780928]

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-08-21 4282728]

    .

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

    "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

    .

    [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]

    "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-07-19 113024]

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

    @=""

    HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck

    HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBJ

    HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]

    2009-10-11 03:17 149280 -c--a-w- c:\program files\Java\jre6\bin\jusched.exe

    .

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

    "%windir%\\system32\\sessmgr.exe"=

    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=

    "c:\\Program Files\\Mozilla Thunderbird\\thunderbird.exe"=

    "c:\\Program Files\\Mozilla Firefox\\firefox.exe"=

    "c:\\Program Files\\BitComet\\BitComet.exe"=

    "c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=

    "\\??\\c:\\WINDOWS\\system32\\winlogon.exe"=

    .

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

    "3389:TCP"= 3389:TCP:*:Disabled:@xpsp2res.dll,-22009

    "7918:TCP"= 7918:TCP:BitComet 7918 TCP

    "7918:UDP"= 7918:UDP:BitComet 7918 UDP

    .

    R0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore.sys [12/11/2011 0:45 331880]

    R0 pctDS;PC Tools Data Store;c:\windows\system32\drivers\pctDS.sys [12/11/2011 0:46 341656]

    R0 pctEFA;PC Tools Extended File Attributes;c:\windows\system32\drivers\pctEFA.sys [12/11/2011 0:46 660992]

    R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [13/11/2011 22:03 729752]

    R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [13/11/2011 22:03 355632]

    R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [22/07/2011 18:27 12880]

    R1 SAS***IL;SAS***IL;c:\program files\SUPERAntiSpyware\SAS***IL.SYS [12/07/2011 23:55 67664]

    R2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE.EXE [28/12/2011 1:22 116608]

    R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [13/11/2011 22:03 21256]

    R2 UMVPFSrv;UMVPFSrv;c:\program files\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe [18/01/2012 8:44 450848]

    R3 ndisrd;WinpkFilter Service;c:\windows\system32\drivers\ndisrd.sys [20/07/2010 13:33 20480]

    S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [21/09/2012 8:54 115168]

    S3 pcouffin;VSO Software pcouffin;c:\windows\system32\drivers\pcouffin.sys [26/09/2009 16:34 47360]

    S3 RHDISK;RHDISK;\??\f:\_rohos\RHDISK.SYS --> f:\_rohos\RHDISK.SYS [?]

    .

    Inhoud van de 'Gedeelde Taken' map

    .

    2012-10-13 c:\windows\Tasks\avast! Emergency Update.job

    - c:\program files\AVAST Software\Avast\AvastEmUpdate.exe [2012-08-26 09:12]

    .

    2012-10-04 c:\windows\Tasks\SwitchReminder.job

    - c:\program files\NCH Software\Switch\switch.exe [2012-05-31 14:54]

    .

    .

    ------- Bijkomende Scan -------

    .

    uStart Page = hxxp://www.one.com/nl/

    uLocal Page =

    uInternet Settings,ProxyOverride = <local>

    IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

    IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html

    TCP: DhcpNameServer = 192.168.1.1

    DPF: {19D6A3D5-EA50-4C3B-88F0-79627C325570} - hxxp://iloapp.tarte-a-la-kat.be/gallery/executable/IlosoftMultipleImageUpload.dll

    FF - ProfilePath - c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\kyhmdkd4.default\

    FF - prefs.js: browser.search.selectedEngine - Google

    FF - prefs.js: browser.startup.homepage - hxxp://www.google.be/

    FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=966134&p=

    FF - prefs.js: network.proxy.type - 4

    .

    - - - - ORPHANS VERWIJDERD - - - -

    .

    WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)

    SafeBoot-klmdb.sys

    MSConfigStartUp-CTFMON - (no file)

    MSConfigStartUp-Srowobawutil - c:\windows\Impsln.dll

    AddRemove-Comical_is1 - g:\tompie\Comical\unins000.exe

    .

    .

    .

    **************************************************************************

    .

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

    Rootkit scan 2012-10-13 21:41

    Windows 5.1.2600 Service Pack 3 NTFS

    .

    scannen van verborgen processen ...

    .

    scannen van verborgen autostart items ...

    .

    scannen van verborgen bestanden ...

    .

    Scan succesvol afgerond

    verborgen bestanden: 0

    .

    **************************************************************************

    .

    --------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

    .

    [HKEY_USERS\S-1-5-21-3340924325-1491940686-993924795-500\Software\Microsoft\Internet Explorer\User Preferences]

    @Denied: (2) (Administrator)

    "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,

    d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,57,4d,1d,52,d9,a0,df,46,94,e4,bb,\

    "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,

    d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,57,4d,1d,52,d9,a0,df,46,94,e4,bb,\

    .

    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\h–€|ÿÿÿÿ¤•€|ù•9~*]

    "3140110900063D11C8EF10054038389C"="C?\\WINDOWS\\System32\\FM20ENU.DLL"

    .

    --------------------- DLLs Geladen Onder Lopende Processen ---------------------

    .

    - - - - - - - > 'explorer.exe'(3048)

    c:\windows\system32\msi.dll

    c:\windows\system32\webcheck.dll

    c:\windows\system32\WPDShServiceObj.dll

    c:\windows\system32\PortableDeviceTypes.dll

    c:\windows\system32\PortableDeviceApi.dll

    .

    ------------------------ Andere Aktieve Processen ------------------------

    .

    c:\program files\AVAST Software\Avast\AvastSvc.exe

    .

    **************************************************************************

    .

    Voltooingstijd: 2012-10-13 21:51:35 - machine werd herstart

    ComboFix-quarantined-files.txt 2012-10-13 19:51

    .

    Pre-Run: 1.524.649.984 bytes beschikbaar

    Post-Run: 1.542.692.864 bytes beschikbaar

    .

    WindowsXP-KB310994-SP2-Pro-BootDisk-NLD.exe

    [boot loader]

    timeout=2

    default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS

    [operating systems]

    c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

    UnsupportedDebug="do not select this" /debug

    multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn

    .

    - - End Of File - - 8735102A1317B395F3E4B2AC112A3D03

    HIJACKTHIS LOGJE

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 22:00:35, on 13/10/2012

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v8.00 (8.00.6001.18702)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\Program Files\AVAST Software\Avast\AvastSvc.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe

    C:\Program Files\SUPERAntiSpyware\SASCORE.EXE

    C:\WINDOWS\System32\svchost.exe

    C:\Program Files\AVAST Software\Avast\avastUI.exe

    C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

    C:\WINDOWS\system32\wuauclt.exe

    C:\WINDOWS\explorer.exe

    C:\Documents and Settings\Administrator\Mijn documenten\Downloads\HijackThis(1).exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Webruimte bij One.com - Registreer domeinen - Webhosting | One.com

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

    O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui

    O4 - HKCU\..\Run: [sUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

    O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html

    O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O16 - DPF: {19D6A3D5-EA50-4C3B-88F0-79627C325570} (IlosoftMultipleImageCtrl Class) - http://iloapp.tarte-a-la-kat.be/gallery/executable/IlosoftMultipleImageUpload.dll

    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1227402629717

    O16 - DPF: {6E718D87-6909-4FCE-92D4-EDCB2F725727} (Navigram Control) - http://navigram.com/engine/v1120/Navigram.cab

    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

    O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

    O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll

    O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll

    O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE

    O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe

    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

    O23 - Service: UMVPFSrv - Logitech Inc. - C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe

    --

    End of file - 5413 bytes

    computer traag, mbam ok, kan iemand hijackthis eens bekijken?

    in Archief Bestrijding malware & virussen

    Geplaatst:

    Internet maar ook de gewone computer werkt traag, soms zeer traag, ik heb al geprobeerd wat minder programma's te laten starten, malware weg, coockies weg... niks lijkt te helpen.

    Ken iemand het logje eens bekijken?

    ik ben geen groentje met computers maar verre van een expert xD

    Bedankt,

    Tom

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 14:48:17, on 11/10/2012

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v8.00 (8.00.6001.18702)

    Boot mode: NormalWgV9nMug

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\Program Files\AVAST Software\Avast\AvastSvc.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe

    C:\Program Files\SUPERAntiSpyware\SASCORE.EXE

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\AVAST Software\Avast\avastUI.exe

    C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\WINDOWS\system32\wuauclt.exe

    C:\Program Files\FinePixViewer\QuickDCF.exe

    C:\WINDOWS\System32\svchost.exe

    C:\Program Files\Mozilla Thunderbird\thunderbird.exe

    C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

    C:\Program Files\BitComet\bitcomet.exe

    C:\Program Files\Windows Media Player\wmplayer.exe

    C:\Program Files\Mozilla Firefox\firefox.exe

    C:\Program Files\Mozilla Firefox\plugin-container.exe

    C:\Documents and Settings\Administrator\Mijn documenten\Downloads\HijackThis(1).exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Webruimte bij One.com - Registreer domeinen - Webhosting | One.com

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

    R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

    O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)

    O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui

    O4 - HKCU\..\Run: [sUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\system32\Macromed\Flash\FlashUtil11e_Plugin.exe -update plugin

    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Lokale service')

    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Netwerkservice')

    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

    O4 - Global Startup: Exif Launcher.lnk = ?

    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

    O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html

    O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - (no file)

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - (no file)

    O16 - DPF: {19D6A3D5-EA50-4C3B-88F0-79627C325570} (IlosoftMultipleImageCtrl Class) - http://iloapp.tarte-a-la-kat.be/gallery/executable/IlosoftMultipleImageUpload.dll

    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1227402629717

    O16 - DPF: {6E718D87-6909-4FCE-92D4-EDCB2F725727} (Navigram Control) - http://navigram.com/engine/v1120/Navigram.cab

    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

    O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

    O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll

    O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll

    O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE

    O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe

    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

    O23 - Service: UMVPFSrv - Logitech Inc. - C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe

    --

    End of file - 6590 bytes

Logo

OVER ONS

PC Helpforum helpt GRATIS computergebruikers sinds juli 2006. Ons team geeft via het forum professioneel antwoord op uw vragen en probeert uw pc problemen zo snel mogelijk op te lossen. Word lid vandaag, plaats je vraag online en het PC Helpforum-team helpt u graag verder!

SITEMAP

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.