Robbe91

probleem lijkt opgelost! bedankt !

ComboFix 12-11-13.03 - thuis 16/11/2012 11:44:10.2.2 - x64 Microsoft Windows 7 Professional 6.1.7601.1.1252.32.1043.18.4095.2881 [GMT 1:00] Gestart vanuit: c:\users\thuis\Desktop\ComboFix.exe gebruikte Opdracht switches :: c:\users\thuis\Desktop\CFScript..txt AV: Norton AntiVirus *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF} SP: Norton AntiVirus *Disabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\program files (x86)\Free YouTube Downloader c:\program files (x86)\Free YouTube Downloader\ffmpeg.exe c:\programdata\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} c:\programdata\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}\{D3742F82-1C1A-4DCC-ABBD-0E831C0185CC}.msi c:\programdata\Babylon c:\windows\SysWow64\Extensions c:\windows\SysWow64\searchplugins . . (((((((((((((((((((( Bestanden Gemaakt van 2012-10-16 to 2012-11-16 )))))))))))))))))))))))))))))) . . 2012-11-16 10:48 . 2012-11-16 10:48 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-11-15 15:36 . 2012-11-15 15:36 -------- d-----w- c:\windows\system32\appmgmt 2012-11-15 15:28 . 2012-11-15 15:29 -------- d-----w- c:\programdata\TuneUp Software 2012-11-15 15:28 . 2012-11-15 15:28 -------- d--h--w- c:\programdata\Common Files 2012-11-14 21:10 . 2012-07-26 07:49 2560 ----a-w- c:\windows\system32\drivers\nl-NL\wdf01000.sys.mui 2012-11-14 21:10 . 2012-07-26 04:55 785512 ----a-w- c:\windows\system32\drivers\Wdf01000.sys 2012-11-14 21:10 . 2012-07-26 04:55 54376 ----a-w- c:\windows\system32\drivers\WdfLdr.sys 2012-11-14 21:10 . 2012-07-26 02:36 9728 ----a-w- c:\windows\system32\Wdfres.dll 2012-11-14 21:04 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys 2012-11-14 21:04 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys 2012-11-14 21:04 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll 2012-11-14 21:04 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll 2012-11-14 21:04 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe 2012-11-14 21:04 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll 2012-11-14 21:04 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll 2012-11-14 06:33 . 2012-09-25 22:47 78336 ----a-w- c:\windows\SysWow64\synceng.dll 2012-11-14 06:33 . 2012-09-25 22:46 95744 ----a-w- c:\windows\system32\synceng.dll 2012-11-13 12:04 . 2012-11-13 12:04 -------- d-----w- c:\program files (x86)\Western Digital 2012-11-13 12:04 . 2012-11-13 12:04 -------- d-----w- c:\program files (x86)\Common Files\Western Digital 2012-11-12 18:10 . 2012-11-12 18:10 -------- d-----w- c:\program files (x86)\uTorrent 2012-11-12 06:44 . 2012-11-12 16:51 -------- d-----w- c:\program files (x86)\Common Files\Isabel 2012-11-12 06:44 . 2012-11-12 16:51 -------- d-----w- c:\program files (x86)\Common Files\Isabel CSP 2012-11-12 06:43 . 2012-11-12 06:44 -------- d-----w- c:\programdata\Isabel Services 2012-11-11 21:41 . 2012-11-11 21:41 -------- d-----w- c:\program files (x86)\MSXML 4.0 2012-11-10 17:32 . 2012-11-10 17:32 -------- d-----w- c:\program files (x86)\Common Files\Adobe 2012-11-10 14:56 . 2012-11-10 14:56 -------- d-----w- c:\program files (x86)\Google 2012-11-10 02:58 . 2012-11-10 02:58 -------- d-----w- c:\windows\SysWow64\wbem\en-US 2012-11-10 02:58 . 2012-11-10 02:58 -------- d-----w- c:\windows\system32\wbem\en-US 2012-11-10 02:58 . 2012-11-10 02:58 -------- d-----w- c:\windows\SysWow64\Wat 2012-11-10 02:58 . 2012-11-10 02:58 -------- d-----w- c:\windows\system32\Wat 2012-11-10 02:10 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe 2012-11-10 02:02 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys 2012-11-10 02:02 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll 2012-11-10 02:02 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll 2012-11-10 02:02 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll 2012-11-10 02:02 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll 2012-11-09 07:37 . 2011-10-01 05:45 886784 ----a-w- c:\program files\Common Files\System\wab32.dll 2012-11-09 07:36 . 2011-03-12 12:08 1465344 ----a-w- c:\windows\system32\XpsPrint.dll 2012-11-09 07:35 . 2012-08-24 18:05 220160 ----a-w- c:\windows\system32\wintrust.dll 2012-11-09 07:34 . 2012-03-17 07:58 75120 ----a-w- c:\windows\system32\drivers\partmgr.sys 2012-11-09 07:33 . 2012-05-14 05:26 956928 ----a-w- c:\windows\system32\localspl.dll 2012-11-09 07:31 . 2011-11-19 14:58 77312 ----a-w- c:\windows\system32\packager.dll 2012-11-09 07:31 . 2011-11-19 14:01 67072 ----a-w- c:\windows\SysWow64\packager.dll 2012-11-08 19:37 . 2012-11-08 19:37 -------- d-----w- c:\program files (x86)\Common Files\Symantec Shared 2012-11-08 19:12 . 2012-11-08 19:12 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll 2012-11-08 19:12 . 2012-11-08 19:12 704136 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll 2012-11-08 18:56 . 2012-11-08 18:56 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2012-11-08 18:56 . 2012-11-08 18:56 697272 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2012-11-08 18:56 . 2012-11-08 18:56 -------- d-----w- c:\windows\SysWow64\Macromed 2012-11-08 18:56 . 2012-11-08 18:56 -------- d-----w- c:\windows\system32\Macromed 2012-11-08 18:48 . 2009-04-20 11:29 249856 ----a-w- c:\windows\system32\Spool\prtprocs\x64\hpfpp70w.dll 2012-11-08 18:47 . 2012-11-08 18:47 -------- d-----w- c:\program files (x86)\Common Files\HP 2012-11-08 18:47 . 2012-11-08 18:47 -------- d-----w- c:\program files (x86)\Common Files\Hewlett-Packard 2012-11-08 18:47 . 2012-11-08 18:47 -------- d-----w- c:\windows\hpoj4500g510g-m 2012-11-08 18:46 . 2009-04-20 11:29 136704 ----a-w- c:\windows\system32\hpf3l70w.dll 2012-11-08 18:46 . 2012-11-08 18:47 -------- d-----w- c:\program files (x86)\HP 2012-11-08 18:46 . 2012-11-08 18:46 -------- d-----w- c:\programdata\HP 2012-11-08 18:46 . 2009-08-17 18:26 979456 ----a-w- c:\windows\system32\hpwwiax6.dll 2012-11-08 18:46 . 2009-08-17 18:26 642360 ----a-w- c:\windows\system32\hpzids40.dll 2012-11-08 18:46 . 2009-08-17 18:34 551424 ----a-w- c:\windows\system32\hppldcoi.dll 2012-11-08 18:46 . 2009-08-17 18:26 503296 ----a-w- c:\windows\system32\hpwvst01.dll 2012-11-08 18:46 . 2009-08-17 18:26 1418240 ----a-w- c:\windows\system32\hpwtiop5.dll 2012-11-08 12:38 . 2012-02-17 06:38 1031680 ----a-w- c:\windows\system32\rdpcore.dll 2012-11-08 12:38 . 2012-02-17 05:34 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll 2012-11-08 12:38 . 2012-02-17 04:57 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys 2012-11-08 12:35 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll 2012-11-08 12:35 . 2012-06-02 22:19 2428952 ----a-w- c:\windows\system32\wuaueng.dll 2012-11-08 12:35 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe 2012-11-08 12:35 . 2012-06-02 22:15 2622464 ----a-w- c:\windows\system32\wucltux.dll 2012-11-08 12:35 . 2012-06-02 22:19 38424 ----a-w- c:\windows\system32\wups.dll 2012-11-08 12:35 . 2012-06-02 22:19 701976 ----a-w- c:\windows\system32\wuapi.dll 2012-11-08 12:35 . 2012-06-02 22:15 99840 ----a-w- c:\windows\system32\wudriver.dll 2012-11-08 12:35 . 2012-06-02 14:19 186752 ----a-w- c:\windows\system32\wuwebv.dll 2012-11-08 12:35 . 2012-06-02 14:15 36864 ----a-w- c:\windows\system32\wuapp.exe 2012-11-08 12:20 . 2012-11-08 12:20 -------- d-----w- c:\program files\Symantec 2012-11-08 12:20 . 2012-11-08 12:20 175736 ----a-w- c:\windows\system32\drivers\SYMEVENT64x86.SYS 2012-11-08 12:20 . 2012-11-08 12:20 -------- d-----w- c:\program files\Common Files\Symantec Shared 2012-11-08 12:19 . 2012-11-09 07:20 -------- d-----w- c:\windows\system32\drivers\NAVx64 2012-11-08 12:19 . 2012-11-08 12:19 -------- d-----w- c:\program files (x86)\Norton AntiVirus 2012-11-08 12:19 . 2012-11-08 12:19 -------- d-----w- c:\programdata\Norton 2012-11-08 12:10 . 2012-11-08 12:10 -------- d-----w- c:\program files (x86)\NortonInstaller 2012-11-08 10:38 . 2012-11-08 10:38 -------- d-----w- c:\program files (x86)\Microsoft Works 2012-11-08 10:38 . 2012-11-11 09:43 -------- d-----w- c:\program files (x86)\Microsoft.NET 2012-11-08 10:38 . 2012-11-08 10:38 -------- d-----w- c:\windows\PCHEALTH 2012-11-08 10:37 . 2012-11-08 10:37 -------- d-----w- c:\program files\Microsoft Office 2012-11-08 10:37 . 2012-11-08 10:37 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8 2012-11-08 10:36 . 2012-11-08 10:43 -------- d-----w- c:\programdata\Microsoft Help 2012-11-08 10:36 . 2012-11-08 10:36 -------- d-----r- C:\MSOCache 2012-11-08 10:06 . 2012-11-08 10:07 -------- d-----w- c:\programdata\NVIDIA 2012-11-08 10:05 . 2012-11-08 10:05 -------- d-----w- C:\Intel 2012-11-08 10:04 . 2012-11-08 10:05 -------- d-----w- c:\program files (x86)\Intel 2012-11-08 10:04 . 2012-11-08 10:04 -------- d-----w- c:\programdata\InstallShield 2012-11-08 10:01 . 2009-06-22 13:56 32768 ----a-w- c:\windows\SysWow64\adidrm.dll 2012-11-08 10:01 . 2009-07-30 11:53 540192 ----a-w- c:\windows\system32\NVUNINST.EXE 2012-11-08 09:59 . 2012-11-08 10:00 -------- d-----w- c:\program files (x86)\Hewlett-Packard 2012-11-08 09:59 . 2008-05-14 14:11 58880 ----a-w- c:\windows\SysWow64\SFFXComm.dll 2012-11-08 09:58 . 2012-11-08 10:04 -------- d--h--w- c:\program files (x86)\InstallShield Installation Information 2012-11-08 09:58 . 2012-11-08 10:01 -------- d-----w- c:\program files (x86)\Analog Devices 2012-11-08 09:58 . 2012-11-08 10:01 -------- d-----w- c:\programdata\SonicFocus 2012-11-08 09:54 . 2009-07-01 11:46 98344 ----a-w- c:\windows\system32\drivers\btwaudio.sys 2012-11-08 09:54 . 2009-07-01 11:46 132648 ----a-w- c:\windows\system32\drivers\btwavdt.sys 2012-11-08 09:54 . 2009-07-01 11:46 21160 ----a-w- c:\windows\system32\drivers\btwrchid.sys 2012-11-08 09:54 . 2009-04-07 14:33 35104 ----a-w- c:\windows\system32\drivers\btwl2cap.sys 2012-11-08 09:54 . 2012-11-08 09:54 -------- d-----w- c:\program files\WIDCOMM 2012-11-08 09:53 . 2012-11-15 15:38 -------- d-sh--w- c:\windows\Installer 2012-11-08 09:47 . 2012-11-08 09:47 -------- d-----w- c:\users\thuis 2012-11-08 09:47 . 2012-11-08 09:47 -------- d-sh--we c:\users\Default\Sjablonen 2012-11-08 09:47 . 2012-11-08 09:47 -------- d-sh--we c:\users\Default\Netwerkprinteromgeving . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-09-06 09:46 . 2012-09-06 09:46 14464 ----a-w- c:\windows\system32\drivers\wdcsam64.sys 2012-08-20 17:38 . 2012-11-09 07:36 44032 ----a-w- c:\windows\apppatch\acwow64.dll . . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "uTorrent"="c:\program files (x86)\uTorrent\uTorrent.exe" [2012-11-12 968592] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "HP KEYBOARD"="c:\program files (x86)\Hewlett-Packard\HP KEYBOARD\HPKEYBOARD.EXE" [2009-09-25 696320] "Buttons & OSDs control application gen2"="c:\program files (x86)\Hewlett-Packard\Buttons & OSDs control application gen2\FastUserSwitching.exe" [2009-07-06 208896] "SoundMAXPnP"="c:\program files (x86)\Analog Devices\Core\smax4pnp.exe" [2009-06-22 1314816] "GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-09-23 926896] "IsaKbcCertUpdate"="c:\program files (x86)\Common Files\Isabel\isa_kbc_certupdate.exe" [2012-10-15 1085528] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-7-1 1079584] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] SecurityProviders credssp.dll, schannel.dll . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-21 71168] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232] R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2012-11-10 1255736] R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys [2012-09-06 14464] S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NAVx64\1309000.009\SYMDS64.SYS [2011-08-15 451192] S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NAVx64\1309000.009\SYMEFA64.SYS [2012-05-22 1129120] S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.5.0.145\Definitions\BASHDefs\20121106.001\BHDrvx64.sys [2012-10-23 1384608] S1 ccSet_NAV;Norton AntiVirus Settings Manager;c:\windows\system32\drivers\NAVx64\1309000.009\ccSetx64.sys [2012-06-07 167072] S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.5.0.145\Definitions\IPSDefs\20121115.001\IDSvia64.sys [2012-11-07 513184] S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NAVx64\1309000.009\Ironx64.SYS [2012-04-18 190072] S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NAVx64\1309000.009\SYMNETS.SYS [2012-04-18 405624] S2 NAV;Norton AntiVirus;c:\program files (x86)\Norton AntiVirus\Engine\19.9.0.9\ccSvcHst.exe [2012-06-16 138272] S2 WDDriveService;WD Drive Manager;c:\program files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [2012-09-06 248248] S3 AVerAVF2;AVerAVF2;c:\windows\system32\DRIVERS\AVerAVF2.sys [2009-10-29 1116928] S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 35104] S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2012-11-08 138912] S3 netr28x;Ralink 802.11n stuurprogramma voor draadloze netwerken voor Windows Vista;c:\windows\system32\DRIVERS\netr28x.sys [2009-06-10 620544] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2009-08-20 239616] . . Inhoud van de 'Gedeelde Taken' map . 2012-11-16 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-08 18:56] . 2012-11-16 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-11-10 14:56] . 2012-11-16 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-11-10 14:56] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-07-31 16336416] . ------- Bijkomende Scan ------- . uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm IE: Afbeelding verzenden naar &Bluetooth-apparaat... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000 IE: Pagina verzenden naar &Bluetooth-apparaat... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm Trusted Zone: cbc.be\cbc-pdf Trusted Zone: cbc.be\cbconline Trusted Zone: cbc.be\static Trusted Zone: cbc.be\www Trusted Zone: cbc.eu\ipa-a Trusted Zone: cbc.eu\ipa-f Trusted Zone: cbc.eu\www Trusted Zone: cbccorporate.be\secure Trusted Zone: cbccorporate.be\www Trusted Zone: csob.cz\www Trusted Zone: csob.sk\www Trusted Zone: fgov.be\*.minfin Trusted Zone: isabel.be Trusted Zone: isabel.be\*.IBS6 Trusted Zone: isabel.be\col Trusted Zone: isabel.be\gotoIBS6 Trusted Zone: isabel.be\my Trusted Zone: isabel.be\my.beta Trusted Zone: isabel.be\pki Trusted Zone: isabel.be\www Trusted Zone: isabel.be\www.beta Trusted Zone: isabel.eu\col Trusted Zone: isabel.eu\www Trusted Zone: isabel.eu\www.beta Trusted Zone: kbc.be Trusted Zone: kbc.be\kbc-pdf Trusted Zone: kbc.be\kbconline Trusted Zone: kbc.be\static Trusted Zone: kbc.be\www Trusted Zone: kbc.com\www Trusted Zone: kbc.eu\www Trusted Zone: kbcam.be\www Trusted Zone: kbcam.com\www Trusted Zone: kbcbankingforbusiness.com\www Trusted Zone: kbccorporates.com\secure Trusted Zone: kbccorporates.com\www Trusted Zone: kbcfi.com\secure Trusted Zone: kbcfi.com\www Trusted Zone: kbcgroup.eu Trusted Zone: kbcgroup.eu\multimediafiles Trusted Zone: kbcgroup.eu\www Trusted Zone: kbcmerchantbanking.com\secure Trusted Zone: kbcmerchantbanking.com\www Trusted Zone: kh.hu\www Trusted Zone: nbb.be\* Trusted Zone: socialsecurity.be\* Trusted Zone: wise-corporate-ebanking.com\www Trusted Zone: zoomit.be\* Trusted Zone: cbc.be\cbc-pdf Trusted Zone: cbc.be\cbconline Trusted Zone: cbc.be\static Trusted Zone: cbc.be\www Trusted Zone: cbc.eu\ipa-a Trusted Zone: cbc.eu\ipa-f Trusted Zone: cbc.eu\www Trusted Zone: cbccorporate.be\secure Trusted Zone: cbccorporate.be\www Trusted Zone: csob.cz\www Trusted Zone: csob.sk\www Trusted Zone: fgov.be\*.minfin Trusted Zone: isabel.be\*.IBS6 Trusted Zone: isabel.be\col Trusted Zone: isabel.be\gotoIBS6 Trusted Zone: isabel.be\my Trusted Zone: isabel.be\my.beta Trusted Zone: isabel.be\pki Trusted Zone: isabel.be\www Trusted Zone: isabel.be\www.beta Trusted Zone: isabel.eu\col Trusted Zone: isabel.eu\www Trusted Zone: isabel.eu\www.beta Trusted Zone: kbc.be\kbc-pdf Trusted Zone: kbc.be\kbconline Trusted Zone: kbc.be\static Trusted Zone: kbc.be\www Trusted Zone: kbc.com\www Trusted Zone: kbc.eu\www Trusted Zone: kbcam.be\www Trusted Zone: kbcam.com\www Trusted Zone: kbcbankingforbusiness.com\www Trusted Zone: kbccorporates.com\secure Trusted Zone: kbccorporates.com\www Trusted Zone: kbcfi.com\secure Trusted Zone: kbcfi.com\www Trusted Zone: kbcgroup.eu\multimediafiles Trusted Zone: kbcgroup.eu\www Trusted Zone: kbcmerchantbanking.com\secure Trusted Zone: kbcmerchantbanking.com\www Trusted Zone: kh.hu\www Trusted Zone: nbb.be\* Trusted Zone: socialsecurity.be\* Trusted Zone: wise-corporate-ebanking.com\www Trusted Zone: zoomit.be\* TCP: DhcpNameServer = 192.168.2.1 . - - - - ORPHANS VERWIJDERD - - - - . AddRemove-sp44407 - c:\hp\Softpaq\sp44407\sp44407.exe . . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NAV] "ImagePath"="\"c:\program files (x86)\Norton AntiVirus\Engine\19.9.0.9\ccSvcHst.exe\" /s \"NAV\" /m \"c:\program files (x86)\Norton AntiVirus\Engine\19.9.0.9\diMaster.dll\" /prefetch:1" . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_110_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_110_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_110_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_110_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_110.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_110.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_110.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_110.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Voltooingstijd: 2012-11-16 11:50:16 ComboFix-quarantined-files.txt 2012-11-16 10:50 ComboFix2.txt 2012-11-15 16:59 . Pre-Run: 465.905.029.120 bytes beschikbaar Post-Run: 465.844.629.504 bytes beschikbaar . - - End Of File - - 030113D3C98120B9B69A6143C40BFE47 - - - Updated - - - # AdwCleaner v2.007 - Verslag gemaakt op 16/11/2012 om 11:53:00 # Geactualiseerd op 06/11/2012 door Xplode # Besturingssysteem : Windows 7 Professional Service Pack 1 (64 bits) # Gebruiker : thuis - THUIS-PC # Opstarten Modus : Normale modus # Gelanceerd vanaf : C:\Users\thuis\Desktop\adwcleaner.exe # Optie [Verwijderen] ***** [Diensten] ***** ***** [Files / Mappen] ***** Map Verwijdert : C:\Users\thuis\AppData\Roaming\Babylon Map Verwijdert : C:\Users\thuis\AppData\Roaming\OpenCandy ***** [Register] ***** Sleutel Verwijdert : HKCU\Software\DataMngr_Toolbar Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC} Sleutel Verwijdert : HKLM\Software\Babylon Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Prod.cap Sleutel Verwijdert : HKLM\Software\DataMngr Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohd****efph ***** [browsers] ***** -\\ Internet Explorer v9.0.8112.16421 [OK] Het register bevat geen enkele ongeoorloofde invoer. -\\ Google Chrome v [Onmogelijk de versie te verkrijgen] File : C:\Users\thuis\AppData\Local\Google\Chrome\User Data\Default\Preferences Verwijdert [l.8] : homepage = "hxxp://www.claro-search.com/?affID=117423&tt=4612_7&babsrc=HP_ss&mntrId=4c764aca000000000000002186e682d7", Verwijdert [l.12] : urls_to_restore_on_startup = [ "hxxp://www.claro-search.com/?affID=117423&tt=4612_7&babsrc=HP_ss&mntrId=4c764aca000000000000002186e682d7" ] Verwijdert [l.1499] : homepage = "hxxp://www.claro-search.com/?affID=117423&tt=4612_7&babsrc=HP_ss&mntrId=4c764aca000000000000002186e682d7", Verwijdert [l.1629] : urls_to_restore_on_startup = [ "hxxp://www.claro-search.com/?affID=117423&tt=4612_7&babsrc=HP_ss&mntrId=4c764aca000000000000002186e682d7" ] ************************* AdwCleaner[s1].txt - [1959 octets] - [16/11/2012 11:53:00] ########## EOF - C:\AdwCleaner[s1].txt - [2019 octets] ##########

ComboFix 12-11-13.03 - thuis 15/11/2012 17:50:14.1.2 - x64 Microsoft Windows 7 Professional 6.1.7601.1.1252.32.1043.18.4095.2694 [GMT 1:00] Gestart vanuit: c:\users\thuis\Desktop\ComboFix.exe AV: Norton AntiVirus *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF} SP: Norton AntiVirus *Disabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . . . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . . -------\Service_ACPIService . . (((((((((((((((((((( Bestanden Gemaakt van 2012-10-15 to 2012-11-15 )))))))))))))))))))))))))))))) . . 2012-11-15 16:54 . 2012-11-15 16:54 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-11-15 15:36 . 2012-11-15 15:36 -------- d-----w- c:\windows\system32\appmgmt 2012-11-15 15:34 . 2012-11-15 15:34 -------- d-----w- c:\windows\SysWow64\searchplugins 2012-11-15 15:34 . 2012-11-15 15:34 -------- d-----w- c:\windows\SysWow64\Extensions 2012-11-15 15:34 . 2012-11-15 15:34 -------- d-----w- c:\programdata\Babylon 2012-11-15 15:28 . 2012-11-15 15:29 -------- d-----w- c:\programdata\TuneUp Software 2012-11-15 15:28 . 2012-11-15 15:28 -------- d-sh--w- c:\programdata\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} 2012-11-15 15:28 . 2012-11-15 15:28 -------- d--h--w- c:\programdata\Common Files 2012-11-15 15:28 . 2012-11-15 15:36 -------- d-----w- c:\program files (x86)\Free YouTube Downloader 2012-11-14 21:10 . 2012-07-26 07:49 2560 ----a-w- c:\windows\system32\drivers\nl-NL\wdf01000.sys.mui 2012-11-14 21:10 . 2012-07-26 04:55 785512 ----a-w- c:\windows\system32\drivers\Wdf01000.sys 2012-11-14 21:10 . 2012-07-26 04:55 54376 ----a-w- c:\windows\system32\drivers\WdfLdr.sys 2012-11-14 21:10 . 2012-07-26 02:36 9728 ----a-w- c:\windows\system32\Wdfres.dll 2012-11-14 21:04 . 2012-07-26 02:26 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys 2012-11-14 21:04 . 2012-07-26 02:26 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys 2012-11-14 21:04 . 2012-07-26 03:08 84992 ----a-w- c:\windows\system32\WUDFSvc.dll 2012-11-14 21:04 . 2012-07-26 03:08 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll 2012-11-14 21:04 . 2012-07-26 03:08 229888 ----a-w- c:\windows\system32\WUDFHost.exe 2012-11-14 21:04 . 2012-07-26 03:08 744448 ----a-w- c:\windows\system32\WUDFx.dll 2012-11-14 21:04 . 2012-07-26 03:08 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll 2012-11-14 06:33 . 2012-09-25 22:47 78336 ----a-w- c:\windows\SysWow64\synceng.dll 2012-11-14 06:33 . 2012-09-25 22:46 95744 ----a-w- c:\windows\system32\synceng.dll 2012-11-13 12:04 . 2012-11-13 12:04 -------- d-----w- c:\program files (x86)\Western Digital 2012-11-13 12:04 . 2012-11-13 12:04 -------- d-----w- c:\program files (x86)\Common Files\Western Digital 2012-11-12 18:10 . 2012-11-12 18:10 -------- d-----w- c:\program files (x86)\uTorrent 2012-11-12 06:44 . 2012-11-12 16:51 -------- d-----w- c:\program files (x86)\Common Files\Isabel 2012-11-12 06:44 . 2012-11-12 16:51 -------- d-----w- c:\program files (x86)\Common Files\Isabel CSP 2012-11-12 06:43 . 2012-11-12 06:44 -------- d-----w- c:\programdata\Isabel Services 2012-11-11 21:41 . 2012-11-11 21:41 -------- d-----w- c:\program files (x86)\MSXML 4.0 2012-11-10 17:32 . 2012-11-10 17:32 -------- d-----w- c:\program files (x86)\Common Files\Adobe 2012-11-10 14:56 . 2012-11-10 14:56 -------- d-----w- c:\program files (x86)\Google 2012-11-10 02:58 . 2012-11-10 02:58 -------- d-----w- c:\windows\SysWow64\wbem\en-US 2012-11-10 02:58 . 2012-11-10 02:58 -------- d-----w- c:\windows\system32\wbem\en-US 2012-11-10 02:58 . 2012-11-10 02:58 -------- d-----w- c:\windows\SysWow64\Wat 2012-11-10 02:58 . 2012-11-10 02:58 -------- d-----w- c:\windows\system32\Wat 2012-11-10 02:10 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe 2012-11-10 02:02 . 2012-03-01 06:46 23408 ----a-w- c:\windows\system32\drivers\fs_rec.sys 2012-11-10 02:02 . 2012-03-01 06:33 81408 ----a-w- c:\windows\system32\imagehlp.dll 2012-11-10 02:02 . 2012-03-01 06:28 5120 ----a-w- c:\windows\system32\wmi.dll 2012-11-10 02:02 . 2012-03-01 05:33 159232 ----a-w- c:\windows\SysWow64\imagehlp.dll 2012-11-10 02:02 . 2012-03-01 05:29 5120 ----a-w- c:\windows\SysWow64\wmi.dll 2012-11-09 07:37 . 2011-10-01 05:45 886784 ----a-w- c:\program files\Common Files\System\wab32.dll 2012-11-09 07:36 . 2011-03-12 12:08 1465344 ----a-w- c:\windows\system32\XpsPrint.dll 2012-11-09 07:35 . 2012-08-24 18:05 220160 ----a-w- c:\windows\system32\wintrust.dll 2012-11-09 07:34 . 2012-03-17 07:58 75120 ----a-w- c:\windows\system32\drivers\partmgr.sys 2012-11-09 07:33 . 2012-05-14 05:26 956928 ----a-w- c:\windows\system32\localspl.dll 2012-11-09 07:31 . 2011-11-19 14:58 77312 ----a-w- c:\windows\system32\packager.dll 2012-11-09 07:31 . 2011-11-19 14:01 67072 ----a-w- c:\windows\SysWow64\packager.dll 2012-11-08 19:37 . 2012-11-08 19:37 -------- d-----w- c:\program files (x86)\Common Files\Symantec Shared 2012-11-08 19:12 . 2012-11-08 19:12 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll 2012-11-08 19:12 . 2012-11-08 19:12 704136 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll 2012-11-08 18:56 . 2012-11-08 18:56 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2012-11-08 18:56 . 2012-11-08 18:56 697272 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2012-11-08 18:56 . 2012-11-08 18:56 -------- d-----w- c:\windows\SysWow64\Macromed 2012-11-08 18:56 . 2012-11-08 18:56 -------- d-----w- c:\windows\system32\Macromed 2012-11-08 18:48 . 2009-04-20 11:29 249856 ----a-w- c:\windows\system32\Spool\prtprocs\x64\hpfpp70w.dll 2012-11-08 18:47 . 2012-11-08 18:47 -------- d-----w- c:\program files (x86)\Common Files\HP 2012-11-08 18:47 . 2012-11-08 18:47 -------- d-----w- c:\program files (x86)\Common Files\Hewlett-Packard 2012-11-08 18:47 . 2012-11-08 18:47 -------- d-----w- c:\windows\hpoj4500g510g-m 2012-11-08 18:46 . 2009-04-20 11:29 136704 ----a-w- c:\windows\system32\hpf3l70w.dll 2012-11-08 18:46 . 2012-11-08 18:47 -------- d-----w- c:\program files (x86)\HP 2012-11-08 18:46 . 2012-11-08 18:46 -------- d-----w- c:\programdata\HP 2012-11-08 18:46 . 2009-08-17 18:26 979456 ----a-w- c:\windows\system32\hpwwiax6.dll 2012-11-08 18:46 . 2009-08-17 18:26 642360 ----a-w- c:\windows\system32\hpzids40.dll 2012-11-08 18:46 . 2009-08-17 18:34 551424 ----a-w- c:\windows\system32\hppldcoi.dll 2012-11-08 18:46 . 2009-08-17 18:26 503296 ----a-w- c:\windows\system32\hpwvst01.dll 2012-11-08 18:46 . 2009-08-17 18:26 1418240 ----a-w- c:\windows\system32\hpwtiop5.dll 2012-11-08 12:38 . 2012-02-17 06:38 1031680 ----a-w- c:\windows\system32\rdpcore.dll 2012-11-08 12:38 . 2012-02-17 05:34 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll 2012-11-08 12:38 . 2012-02-17 04:57 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys 2012-11-08 12:35 . 2012-06-02 22:19 44056 ----a-w- c:\windows\system32\wups2.dll 2012-11-08 12:35 . 2012-06-02 22:19 2428952 ----a-w- c:\windows\system32\wuaueng.dll 2012-11-08 12:35 . 2012-06-02 22:19 57880 ----a-w- c:\windows\system32\wuauclt.exe 2012-11-08 12:35 . 2012-06-02 22:15 2622464 ----a-w- c:\windows\system32\wucltux.dll 2012-11-08 12:35 . 2012-06-02 22:19 38424 ----a-w- c:\windows\system32\wups.dll 2012-11-08 12:35 . 2012-06-02 22:19 701976 ----a-w- c:\windows\system32\wuapi.dll 2012-11-08 12:35 . 2012-06-02 22:15 99840 ----a-w- c:\windows\system32\wudriver.dll 2012-11-08 12:35 . 2012-06-02 14:19 186752 ----a-w- c:\windows\system32\wuwebv.dll 2012-11-08 12:35 . 2012-06-02 14:15 36864 ----a-w- c:\windows\system32\wuapp.exe 2012-11-08 12:20 . 2012-11-08 12:20 -------- d-----w- c:\program files\Symantec 2012-11-08 12:20 . 2012-11-08 12:20 175736 ----a-w- c:\windows\system32\drivers\SYMEVENT64x86.SYS 2012-11-08 12:20 . 2012-11-08 12:20 -------- d-----w- c:\program files\Common Files\Symantec Shared 2012-11-08 12:19 . 2012-11-09 07:20 -------- d-----w- c:\windows\system32\drivers\NAVx64 2012-11-08 12:19 . 2012-11-08 12:19 -------- d-----w- c:\program files (x86)\Norton AntiVirus 2012-11-08 12:19 . 2012-11-08 12:19 -------- d-----w- c:\programdata\Norton 2012-11-08 12:10 . 2012-11-08 12:10 -------- d-----w- c:\program files (x86)\NortonInstaller 2012-11-08 10:38 . 2012-11-08 10:38 -------- d-----w- c:\program files (x86)\Microsoft Works 2012-11-08 10:38 . 2012-11-11 09:43 -------- d-----w- c:\program files (x86)\Microsoft.NET 2012-11-08 10:38 . 2012-11-08 10:38 -------- d-----w- c:\windows\PCHEALTH 2012-11-08 10:37 . 2012-11-08 10:37 -------- d-----w- c:\program files\Microsoft Office 2012-11-08 10:37 . 2012-11-08 10:37 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8 2012-11-08 10:36 . 2012-11-08 10:43 -------- d-----w- c:\programdata\Microsoft Help 2012-11-08 10:36 . 2012-11-08 10:36 -------- d-----r- C:\MSOCache 2012-11-08 10:06 . 2012-11-08 10:07 -------- d-----w- c:\programdata\NVIDIA 2012-11-08 10:05 . 2012-11-08 10:05 -------- d-----w- C:\Intel 2012-11-08 10:04 . 2012-11-08 10:05 -------- d-----w- c:\program files (x86)\Intel 2012-11-08 10:04 . 2012-11-08 10:04 -------- d-----w- c:\programdata\InstallShield 2012-11-08 10:01 . 2009-06-22 13:56 32768 ----a-w- c:\windows\SysWow64\adidrm.dll 2012-11-08 10:01 . 2009-07-30 11:53 540192 ----a-w- c:\windows\system32\NVUNINST.EXE 2012-11-08 09:59 . 2012-11-08 10:00 -------- d-----w- c:\program files (x86)\Hewlett-Packard 2012-11-08 09:59 . 2008-05-14 14:11 58880 ----a-w- c:\windows\SysWow64\SFFXComm.dll 2012-11-08 09:58 . 2012-11-08 10:04 -------- d--h--w- c:\program files (x86)\InstallShield Installation Information 2012-11-08 09:58 . 2012-11-08 10:01 -------- d-----w- c:\program files (x86)\Analog Devices 2012-11-08 09:58 . 2012-11-08 10:01 -------- d-----w- c:\programdata\SonicFocus 2012-11-08 09:54 . 2009-07-01 11:46 98344 ----a-w- c:\windows\system32\drivers\btwaudio.sys 2012-11-08 09:54 . 2009-07-01 11:46 132648 ----a-w- c:\windows\system32\drivers\btwavdt.sys 2012-11-08 09:54 . 2009-07-01 11:46 21160 ----a-w- c:\windows\system32\drivers\btwrchid.sys 2012-11-08 09:54 . 2009-04-07 14:33 35104 ----a-w- c:\windows\system32\drivers\btwl2cap.sys 2012-11-08 09:54 . 2012-11-08 09:54 -------- d-----w- c:\program files\WIDCOMM 2012-11-08 09:53 . 2012-11-15 15:38 -------- d-sh--w- c:\windows\Installer 2012-11-08 09:47 . 2012-11-08 09:47 -------- d-----w- c:\users\thuis 2012-11-08 09:47 . 2012-11-08 09:47 -------- d-sh--we c:\users\Default\Sjablonen 2012-11-08 09:47 . 2012-11-08 09:47 -------- d-sh--we c:\users\Default\Netwerkprinteromgeving . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-09-06 09:46 . 2012-09-06 09:46 14464 ----a-w- c:\windows\system32\drivers\wdcsam64.sys 2012-08-20 17:38 . 2012-11-09 07:36 44032 ----a-w- c:\windows\apppatch\acwow64.dll . . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "uTorrent"="c:\program files (x86)\uTorrent\uTorrent.exe" [2012-11-12 968592] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "HP KEYBOARD"="c:\program files (x86)\Hewlett-Packard\HP KEYBOARD\HPKEYBOARD.EXE" [2009-09-25 696320] "Buttons & OSDs control application gen2"="c:\program files (x86)\Hewlett-Packard\Buttons & OSDs control application gen2\FastUserSwitching.exe" [2009-07-06 208896] "SoundMAXPnP"="c:\program files (x86)\Analog Devices\Core\smax4pnp.exe" [2009-06-22 1314816] "GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-09-23 926896] "IsaKbcCertUpdate"="c:\program files (x86)\Common Files\Isabel\isa_kbc_certupdate.exe" [2012-10-15 1085528] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-7-1 1079584] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] SecurityProviders credssp.dll, schannel.dll . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-21 71168] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232] R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2012-11-10 1255736] R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys [2012-09-06 14464] S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NAVx64\1309000.009\SYMDS64.SYS [2011-08-15 451192] S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NAVx64\1309000.009\SYMEFA64.SYS [2012-05-22 1129120] S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.5.0.145\Definitions\BASHDefs\20121106.001\BHDrvx64.sys [2012-10-23 1384608] S1 ccSet_NAV;Norton AntiVirus Settings Manager;c:\windows\system32\drivers\NAVx64\1309000.009\ccSetx64.sys [2012-06-07 167072] S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.5.0.145\Definitions\IPSDefs\20121114.001\IDSvia64.sys [2012-11-07 513184] S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NAVx64\1309000.009\Ironx64.SYS [2012-04-18 190072] S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NAVx64\1309000.009\SYMNETS.SYS [2012-04-18 405624] S2 NAV;Norton AntiVirus;c:\program files (x86)\Norton AntiVirus\Engine\19.9.0.9\ccSvcHst.exe [2012-06-16 138272] S2 WDDriveService;WD Drive Manager;c:\program files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [2012-09-06 248248] S3 AVerAVF2;AVerAVF2;c:\windows\system32\DRIVERS\AVerAVF2.sys [2009-10-29 1116928] S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 35104] S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2012-11-08 138912] S3 netr28x;Ralink 802.11n stuurprogramma voor draadloze netwerken voor Windows Vista;c:\windows\system32\DRIVERS\netr28x.sys [2009-06-10 620544] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2009-08-20 239616] . . --- Andere Services/Drivers In Geheugen --- . *NewlyCreated* - WS2IFSL . Inhoud van de 'Gedeelde Taken' map . 2012-11-15 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-08 18:56] . 2012-11-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-11-10 14:56] . 2012-11-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-11-10 14:56] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-07-31 16336416] . ------- Bijkomende Scan ------- . uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm IE: Afbeelding verzenden naar &Bluetooth-apparaat... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000 IE: Pagina verzenden naar &Bluetooth-apparaat... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm Trusted Zone: cbc.be\cbc-pdf Trusted Zone: cbc.be\cbconline Trusted Zone: cbc.be\static Trusted Zone: cbc.be\www Trusted Zone: cbc.eu\ipa-a Trusted Zone: cbc.eu\ipa-f Trusted Zone: cbc.eu\www Trusted Zone: cbccorporate.be\secure Trusted Zone: cbccorporate.be\www Trusted Zone: csob.cz\www Trusted Zone: csob.sk\www Trusted Zone: fgov.be\*.minfin Trusted Zone: isabel.be Trusted Zone: isabel.be\*.IBS6 Trusted Zone: isabel.be\col Trusted Zone: isabel.be\gotoIBS6 Trusted Zone: isabel.be\my Trusted Zone: isabel.be\my.beta Trusted Zone: isabel.be\pki Trusted Zone: isabel.be\www Trusted Zone: isabel.be\www.beta Trusted Zone: isabel.eu\col Trusted Zone: isabel.eu\www Trusted Zone: isabel.eu\www.beta Trusted Zone: kbc.be Trusted Zone: kbc.be\kbc-pdf Trusted Zone: kbc.be\kbconline Trusted Zone: kbc.be\static Trusted Zone: kbc.be\www Trusted Zone: kbc.com\www Trusted Zone: kbc.eu\www Trusted Zone: kbcam.be\www Trusted Zone: kbcam.com\www Trusted Zone: kbcbankingforbusiness.com\www Trusted Zone: kbccorporates.com\secure Trusted Zone: kbccorporates.com\www Trusted Zone: kbcfi.com\secure Trusted Zone: kbcfi.com\www Trusted Zone: kbcgroup.eu Trusted Zone: kbcgroup.eu\multimediafiles Trusted Zone: kbcgroup.eu\www Trusted Zone: kbcmerchantbanking.com\secure Trusted Zone: kbcmerchantbanking.com\www Trusted Zone: kh.hu\www Trusted Zone: nbb.be\* Trusted Zone: socialsecurity.be\* Trusted Zone: wise-corporate-ebanking.com\www Trusted Zone: zoomit.be\* Trusted Zone: cbc.be\cbc-pdf Trusted Zone: cbc.be\cbconline Trusted Zone: cbc.be\static Trusted Zone: cbc.be\www Trusted Zone: cbc.eu\ipa-a Trusted Zone: cbc.eu\ipa-f Trusted Zone: cbc.eu\www Trusted Zone: cbccorporate.be\secure Trusted Zone: cbccorporate.be\www Trusted Zone: csob.cz\www Trusted Zone: csob.sk\www Trusted Zone: fgov.be\*.minfin Trusted Zone: isabel.be\*.IBS6 Trusted Zone: isabel.be\col Trusted Zone: isabel.be\gotoIBS6 Trusted Zone: isabel.be\my Trusted Zone: isabel.be\my.beta Trusted Zone: isabel.be\pki Trusted Zone: isabel.be\www Trusted Zone: isabel.be\www.beta Trusted Zone: isabel.eu\col Trusted Zone: isabel.eu\www Trusted Zone: isabel.eu\www.beta Trusted Zone: kbc.be\kbc-pdf Trusted Zone: kbc.be\kbconline Trusted Zone: kbc.be\static Trusted Zone: kbc.be\www Trusted Zone: kbc.com\www Trusted Zone: kbc.eu\www Trusted Zone: kbcam.be\www Trusted Zone: kbcam.com\www Trusted Zone: kbcbankingforbusiness.com\www Trusted Zone: kbccorporates.com\secure Trusted Zone: kbccorporates.com\www Trusted Zone: kbcfi.com\secure Trusted Zone: kbcfi.com\www Trusted Zone: kbcgroup.eu\multimediafiles Trusted Zone: kbcgroup.eu\www Trusted Zone: kbcmerchantbanking.com\secure Trusted Zone: kbcmerchantbanking.com\www Trusted Zone: kh.hu\www Trusted Zone: nbb.be\* Trusted Zone: socialsecurity.be\* Trusted Zone: wise-corporate-ebanking.com\www Trusted Zone: zoomit.be\* TCP: DhcpNameServer = 192.168.2.1 . - - - - ORPHANS VERWIJDERD - - - - . AddRemove-sp44407 - c:\hp\Softpaq\sp44407\sp44407.exe . . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NAV] "ImagePath"="\"c:\program files (x86)\Norton AntiVirus\Engine\19.9.0.9\ccSvcHst.exe\" /s \"NAV\" /m \"c:\program files (x86)\Norton AntiVirus\Engine\19.9.0.9\diMaster.dll\" /prefetch:1" . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_110_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_110_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_110_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_110_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_110.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_110.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_110.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_110.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Andere Aktieve Processen ------------------------ . c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe c:\program files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe . ************************************************************************** . Voltooingstijd: 2012-11-15 17:59:53 - machine werd herstart ComboFix-quarantined-files.txt 2012-11-15 16:59 . Pre-Run: 467.157.172.224 bytes beschikbaar Post-Run: 467.088.269.312 bytes beschikbaar . - - End Of File - - 0FD292A0856EF05B7B73A2149A4518D1

Beste, Ik ben ook besmet met claro search Hier een logje: (hopelijk kunnen jullie me helpen!) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 17:08:34, on 15/11/2012 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v9.00 (9.00.8112.16455)a Boot mode: Normal Running processes: C:\Program Files (x86)\Norton AntiVirus\Engine\19.9.0.9\ccSvcHst.exe C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe C:\Program Files (x86)\Analog Devices\SoundMAX\SoundMAX.exe C:\Program Files (x86)\uTorrent\uTorrent.exe C:\Program Files (x86)\Hewlett-Packard\HP KEYBOARD\HPKEYBOARD.EXE C:\Program Files (x86)\Hewlett-Packard\Buttons & OSDs control application gen2\FastUserSwitching.exe C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe C:\Program Files (x86)\Hewlett-Packard\Buttons & OSDs control application gen2\HWManager.exe C:\Program Files (x86)\Common Files\Isabel\isa_kbc_certupdate.exe C:\Program Files (x86)\Hewlett-Packard\Buttons & OSDs control application gen2\OSDForm.exe C:\Program Files (x86)\Hewlett-Packard\HP KEYBOARD\Keystatus.exe C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe C:\Program Files (x86)\Free YouTube Downloader\ffmpeg.exe C:\Windows\SysWOW64\schtasks.exe C:\Program Files (x86)\Windows Media Player\wmplayer.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_5_502_110_ActiveX.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Users\thuis\Downloads\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton AntiVirus\Engine\19.9.0.9\IPS\IPSBHO.DLL O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL O4 - HKLM\..\Run: [HP KEYBOARD] "C:\Program Files (x86)\Hewlett-Packard\HP KEYBOARD\HPKEYBOARD.EXE" O4 - HKLM\..\Run: [buttons & OSDs control application gen2] C:\Program Files (x86)\Hewlett-Packard\Buttons & OSDs control application gen2\FastUserSwitching.exe O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [isaKbcCertUpdate] C:\Program Files (x86)\Common Files\Isabel\isa_kbc_certupdate.exe O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Global Startup: Bluetooth.lnk = ? O8 - Extra context menu item: Afbeelding verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Pagina verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL O9 - Extra button: Verzenden naar Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: Verzenden naar &Bluetooth-apparaat... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O15 - Trusted Zone: http://cbc-pdf.cbc.be O15 - Trusted Zone: CBC O15 - Trusted Zone: http://www.cbccorporate.be O15 - Trusted Zone: http://www.csob.cz O15 - Trusted Zone: http://www.csob.sk O15 - Trusted Zone: Welcome to Isabel O15 - Trusted Zone: Welcome to Isabel O15 - Trusted Zone: Welcome to Isabel O15 - Trusted Zone: *.isabel.be O15 - Trusted Zone: Welcome to Isabel O15 - Trusted Zone: Welcome to Isabel O15 - Trusted Zone: Welcome to Isabel O15 - Trusted Zone: http://kbc-pdf.kbc.be O15 - Trusted Zone: KBC O15 - Trusted Zone: *.kbc.be O15 - Trusted Zone: KBC Asset Management O15 - Trusted Zone: http://www.kbcam.com O15 - Trusted Zone: http://www.kbcbankingforbusiness.com O15 - Trusted Zone: http://www.kbccorporates.com O15 - Trusted Zone: http://www.kbcfi.com O15 - Trusted Zone: *.kbcgroup.eu O15 - Trusted Zone: http://www.kbcmerchantbanking.com O15 - Trusted Zone: http://www.kh.hu O15 - Trusted Zone: http://cbc-pdf.cbc.be (HKLM) O15 - Trusted Zone: CBC (HKLM) O15 - Trusted Zone: http://www.cbccorporate.be (HKLM) O15 - Trusted Zone: http://www.csob.cz (HKLM) O15 - Trusted Zone: http://www.csob.sk (HKLM) O15 - Trusted Zone: Welcome to Isabel (HKLM) O15 - Trusted Zone: Welcome to Isabel (HKLM) O15 - Trusted Zone: Welcome to Isabel (HKLM) O15 - Trusted Zone: Welcome to Isabel (HKLM) O15 - Trusted Zone: Welcome to Isabel (HKLM) O15 - Trusted Zone: Welcome to Isabel (HKLM) O15 - Trusted Zone: http://kbc-pdf.kbc.be (HKLM) O15 - Trusted Zone: KBC (HKLM) O15 - Trusted Zone: KBC Asset Management (HKLM) O15 - Trusted Zone: http://www.kbcam.com (HKLM) O15 - Trusted Zone: http://www.kbcbankingforbusiness.com (HKLM) O15 - Trusted Zone: http://www.kbccorporates.com (HKLM) O15 - Trusted Zone: http://www.kbcfi.com (HKLM) O15 - Trusted Zone: http://www.kbcmerchantbanking.com (HKLM) O15 - Trusted Zone: http://www.kh.hu (HKLM) O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL O20 - AppInit_DLLs: c:\progra~3\browse~1\23796~1.11\{16cdf~1\browse~1.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Unknown owner - C:\Windows\system32\AEADISRV.EXE (file missing) O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: Norton AntiVirus (NAV) - Symantec Corporation - C:\Program Files (x86)\Norton AntiVirus\Engine\19.9.0.9\ccSvcHst.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: WD Drive Manager (WDDriveService) - Western Digital - C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 11570 bytes

Beste, Ik ben ook besmet met claro search Hier een logje: (hopelijk kunnen jullie me helpen!) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 17:08:34, on 15/11/2012 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v9.00 (9.00.8112.16455) Boot mode: Normal Running processes: C:\Program Files (x86)\Norton AntiVirus\Engine\19.9.0.9\ccSvcHst.exe C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe C:\Program Files (x86)\Analog Devices\SoundMAX\SoundMAX.exe C:\Program Files (x86)\uTorrent\uTorrent.exe C:\Program Files (x86)\Hewlett-Packard\HP KEYBOARD\HPKEYBOARD.EXE C:\Program Files (x86)\Hewlett-Packard\Buttons & OSDs control application gen2\FastUserSwitching.exe C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe C:\Program Files (x86)\Hewlett-Packard\Buttons & OSDs control application gen2\HWManager.exe C:\Program Files (x86)\Common Files\Isabel\isa_kbc_certupdate.exe C:\Program Files (x86)\Hewlett-Packard\Buttons & OSDs control application gen2\OSDForm.exe C:\Program Files (x86)\Hewlett-Packard\HP KEYBOARD\Keystatus.exe C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe C:\Program Files (x86)\Free YouTube Downloader\ffmpeg.exe C:\Windows\SysWOW64\schtasks.exe C:\Program Files (x86)\Windows Media Player\wmplayer.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_5_502_110_ActiveX.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Users\thuis\Downloads\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton AntiVirus\Engine\19.9.0.9\IPS\IPSBHO.DLL O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL O4 - HKLM\..\Run: [HP KEYBOARD] "C:\Program Files (x86)\Hewlett-Packard\HP KEYBOARD\HPKEYBOARD.EXE" O4 - HKLM\..\Run: [buttons & OSDs control application gen2] C:\Program Files (x86)\Hewlett-Packard\Buttons & OSDs control application gen2\FastUserSwitching.exe O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [isaKbcCertUpdate] C:\Program Files (x86)\Common Files\Isabel\isa_kbc_certupdate.exe O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Global Startup: Bluetooth.lnk = ? O8 - Extra context menu item: Afbeelding verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Pagina verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL O9 - Extra button: Verzenden naar Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: Verzenden naar &Bluetooth-apparaat... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O15 - Trusted Zone: http://cbc-pdf.cbc.be O15 - Trusted Zone: CBC O15 - Trusted Zone: http://www.cbccorporate.be O15 - Trusted Zone: http://www.csob.cz O15 - Trusted Zone: http://www.csob.sk O15 - Trusted Zone: Welcome to Isabel O15 - Trusted Zone: Welcome to Isabel O15 - Trusted Zone: Welcome to Isabel O15 - Trusted Zone: *.isabel.be O15 - Trusted Zone: Welcome to Isabel O15 - Trusted Zone: Welcome to Isabel O15 - Trusted Zone: Welcome to Isabel O15 - Trusted Zone: http://kbc-pdf.kbc.be O15 - Trusted Zone: KBC O15 - Trusted Zone: *.kbc.be O15 - Trusted Zone: KBC Asset Management O15 - Trusted Zone: http://www.kbcam.com O15 - Trusted Zone: http://www.kbcbankingforbusiness.com O15 - Trusted Zone: http://www.kbccorporates.com O15 - Trusted Zone: http://www.kbcfi.com O15 - Trusted Zone: *.kbcgroup.eu O15 - Trusted Zone: http://www.kbcmerchantbanking.com O15 - Trusted Zone: http://www.kh.hu O15 - Trusted Zone: http://cbc-pdf.cbc.be (HKLM) O15 - Trusted Zone: CBC (HKLM) O15 - Trusted Zone: http://www.cbccorporate.be (HKLM) O15 - Trusted Zone: http://www.csob.cz (HKLM) O15 - Trusted Zone: http://www.csob.sk (HKLM) O15 - Trusted Zone: Welcome to Isabel (HKLM) O15 - Trusted Zone: Welcome to Isabel (HKLM) O15 - Trusted Zone: Welcome to Isabel (HKLM) O15 - Trusted Zone: Welcome to Isabel (HKLM) O15 - Trusted Zone: Welcome to Isabel (HKLM) O15 - Trusted Zone: Welcome to Isabel (HKLM) O15 - Trusted Zone: http://kbc-pdf.kbc.be (HKLM) O15 - Trusted Zone: KBC (HKLM) O15 - Trusted Zone: KBC Asset Management (HKLM) O15 - Trusted Zone: http://www.kbcam.com (HKLM) O15 - Trusted Zone: http://www.kbcbankingforbusiness.com (HKLM) O15 - Trusted Zone: http://www.kbccorporates.com (HKLM) O15 - Trusted Zone: http://www.kbcfi.com (HKLM) O15 - Trusted Zone: http://www.kbcmerchantbanking.com (HKLM) O15 - Trusted Zone: http://www.kh.hu (HKLM) O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL O20 - AppInit_DLLs: c:\progra~3\browse~1\23796~1.11\{16cdf~1\browse~1.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Unknown owner - C:\Windows\system32\AEADISRV.EXE (file missing) O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: Norton AntiVirus (NAV) - Symantec Corporation - C:\Program Files (x86)\Norton AntiVirus\Engine\19.9.0.9\ccSvcHst.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: WD Drive Manager (WDDriveService) - Western Digital - C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 11570 bytes