edpo

Ja dat van dat "victorie te kraaien" daar heb je gelijk in... zoëven terug de fout gehad. Raar is het dat de fout komt als Incredimail naar de server om zijn post geweest is... maar dat doet hij nu reeds jaren om de 20 min. ik zet even de tijd veel langer.

Ik ga niet te rap van stapel lopen..... maar ik heb de error tot nu toe niet gehad... Hopelijk blijft het zo....! Heb je eigenlijk een oorzaak gevonden ? In elk geval moet ik U reeds mijn dank overmaken voor het vele werk. mvg Eddy

Hier combofix.txt in een RAR file, hij is wat groot. ComboFix.rar

Ik kreeg volgende FOUT toen Combofix aan het werken was... c:\windows\pev.exe c:\windows\Mbr.exe c:\windows\sed.exe c:\windows\swreg.exe this files are part of Combofix this sfcript shall not be processed. Combofix.txt ComboFix 10-07-01.02 - Eddy 07/07/2010 10:44:18.6.2 - x86 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.32.1043.18.3071.1614 [GMT 2:00] Gestart vanuit: c:\users\Eddy\Desktop\scan.exe gebruikte Opdracht switches :: c:\users\Eddy\Desktop\cfscript.txt AV: Kaspersky Internet Security *On-access scanning enabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0} AV: Norton Internet Security *On-access scanning enabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8} AV: Windows Live OneCare *On-access scanning disabled* (Updated) {427ADFC3-B354-4A51-BE34-A9D4218E45C4} FW: Kaspersky Internet Security *enabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0} FW: Norton Internet Security *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220} FW: Windows Live OneCare - Firewall *disabled* {A3899D22-27E6-4A7E-AE4E-2C106646DAAB} SP: Kaspersky Internet Security *enabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0} SP: Norton Internet Security *enabled* (Updated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A} SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} SP: Windows Live OneCare *disabled* (Updated) {CC7E50BA-BA8C-4DDE-B5AC-EA53BC38D01B} * Nieuw herstelpunt werd aangemaakt * Aanwezig AV is actief . (((((((((((((((((((( Bestanden Gemaakt van 2010-06-07 to 2010-07-07 )))))))))))))))))))))))))))))) . 2010-07-07 09:05 . 2010-07-07 09:05 -------- d-----w- c:\users\Public\AppData\Local\temp 2010-07-07 09:05 . 2010-07-07 09:05 -------- d-----w- c:\users\Default\AppData\Local\temp 2010-07-07 08:20 . 2010-07-07 09:05 -------- d-----w- c:\users\Eddy\AppData\Local\temp 2010-07-07 05:40 . 2009-04-13 12:39 16384 ----a-w- C:\msimg32.dll 2010-07-05 17:37 . 2010-07-05 18:06 -------- d-----w- C:\scan1644s 2010-07-05 14:59 . 2010-07-05 15:11 -------- d-----w- c:\programdata\BitDefender 2010-07-05 14:59 . 2010-07-05 15:00 -------- d-----w- c:\users\Eddy\AppData\Roaming\BitDefender 2010-07-05 14:58 . 2010-07-05 15:00 -------- d-----w- c:\program files\Common Files\BitDefender 2010-07-05 14:51 . 2010-07-05 14:53 227024 ----a-w- C:\BdUninstallTool2010.07.05-04.51.03.reg 2010-07-05 14:28 . 2010-07-05 14:35 -------- d-----w- C:\scan21652s 2010-07-05 14:24 . 2010-07-05 14:25 -------- d-----w- C:\C-o-m-b-o-F-i-x 2010-07-05 14:20 . 2010-07-05 14:20 35 ----a-w- c:\users\Eddy\AppData\Roaming\SetValue.bat 2010-07-05 14:20 . 2010-07-05 14:23 -------- d-----w- C:\SmitfraudFix 2010-07-05 14:15 . 2009-09-13 09:10 1872472 ----a-w- C:\S-m-i-t-f-r-a-u-d-F-i-x.exe 2010-07-05 14:15 . 2010-07-05 14:25 3726382 ----a-r- C:\C-o-m-b-o-F-i-x.exe 2010-07-02 07:05 . 2010-07-02 07:22 -------- d-----w- C:\scan 2010-06-26 15:18 . 2010-06-26 15:20 305297 ----a-w- C:\BdUninstallTool2010.06.26-05.18.28.reg 2010-06-26 08:16 . 2010-06-26 08:16 -------- d-----w- c:\program files\IncrediMail 2010-06-25 13:19 . 2010-06-25 13:19 -------- d-----w- c:\program files\Common Files\Java 2010-06-25 10:18 . 2009-05-18 11:17 26600 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys 2010-06-25 10:18 . 2008-04-17 10:12 107368 ----a-w- c:\windows\system32\GEARAspi.dll 2010-06-25 10:17 . 2010-06-25 10:17 -------- d-----w- c:\program files\iPod 2010-06-25 10:17 . 2010-06-25 10:18 -------- d-----w- c:\programdata\{429CAD59-35B1-4DBC-BB6D-1DB246563521} 2010-06-25 10:17 . 2010-06-25 10:18 -------- d-----w- c:\program files\iTunes 2010-06-25 10:13 . 2010-06-25 10:13 -------- d-----w- c:\program files\Bonjour 2010-06-25 10:12 . 2010-06-25 10:12 72504 ----a-w- c:\programdata\Apple Computer\Installer Cache\iTunes 9.2.0.61\SetupAdmin.exe 2010-06-24 09:27 . 2010-06-24 09:27 -------- d-----w- c:\users\Eddy\AppData\Local\ReaJPEG 2010-06-24 08:45 . 2010-06-24 08:45 44544 ------w- c:\windows\AWuninstall.exe 2010-06-24 08:45 . 2010-06-24 08:45 -------- d-----w- c:\program files\Lokas 2010-06-24 07:29 . 2009-11-08 08:55 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll 2010-06-24 07:29 . 2009-11-08 08:55 49472 ----a-w- c:\windows\system32\netfxperf.dll 2010-06-24 07:29 . 2009-11-08 08:55 297808 ----a-w- c:\windows\system32\mscoree.dll 2010-06-24 07:29 . 2009-11-08 08:55 295264 ----a-w- c:\windows\system32\PresentationHost.exe 2010-06-24 07:29 . 2009-11-08 08:55 1130824 ----a-w- c:\windows\system32\dfshim.dll 2010-06-24 05:45 . 2010-04-16 16:43 28672 ----a-w- c:\windows\system32\Apphlpdm.dll 2010-06-24 05:45 . 2010-04-16 14:39 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll 2010-06-20 19:24 . 2010-06-20 19:24 -------- d-----w- c:\programdata\PhotoMail 2010-06-20 19:24 . 2010-06-20 19:24 -------- d-----w- c:\program files\PhotoMail Maker 2010-06-16 08:17 . 2010-06-16 08:17 -------- d-----w- c:\users\Eddy\AppData\Roaming\No Company Name 2010-06-16 07:56 . 2010-06-16 07:56 -------- d-----w- c:\programdata\eSellerate 2010-06-16 07:56 . 2010-06-16 13:55 -------- d-----w- c:\programdata\SmartSound Software Inc 2010-06-16 07:56 . 2010-06-16 07:56 -------- d-----w- c:\program files\SmartSound Software . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-07-06 12:49 . 2009-04-04 15:22 -------- d-----w- c:\users\Eddy\AppData\Roaming\uTorrent 2010-07-05 15:18 . 2009-10-19 15:04 72784 ----a-w- c:\windows\system32\drivers\BdfNdisf6.sys 2010-07-05 14:59 . 2010-04-12 07:46 -------- d-----w- c:\program files\BitDefender 2010-07-05 14:23 . 2009-05-14 10:53 -------- d-----w- c:\programdata\Zylom 2010-07-05 14:20 . 2010-07-05 14:20 691 ----a-w- c:\users\Eddy\AppData\Roaming\GetValue.vbs 2010-06-30 13:57 . 2009-12-03 09:16 -------- d-----w- c:\programdata\PrinterShare 2010-06-25 15:01 . 2009-06-12 16:01 -------- d-----w- c:\users\Eddy\AppData\Roaming\Apple Computer 2010-06-25 13:19 . 2010-05-11 06:47 411368 ----a-w- c:\windows\system32\deployJava1.dll 2010-06-25 10:17 . 2009-06-12 15:58 -------- d-----w- c:\program files\Common Files\Apple 2010-06-24 09:28 . 2010-04-24 13:24 -------- d-----w- c:\program files\WatermarkSoftware 2010-06-18 14:55 . 2006-11-02 16:11 735382 ----a-w- c:\windows\system32\perfh013.dat 2010-06-18 14:55 . 2006-11-02 16:11 152096 ----a-w- c:\windows\system32\perfc013.dat 2010-06-17 06:45 . 2007-12-06 07:16 -------- d--h--w- c:\program files\InstallShield Installation Information 2010-06-16 09:50 . 2009-07-05 14:42 -------- d-----w- c:\users\Eddy\AppData\Roaming\Download Manager 2010-06-16 08:45 . 2008-05-27 14:31 108712 ----a-w- c:\users\Eddy\AppData\Local\GDIPFONTCACHEV1.DAT 2010-06-16 08:17 . 2009-04-04 11:28 -------- d-----w- c:\programdata\FLEXnet 2010-06-16 07:54 . 2009-07-14 12:54 -------- d-----w- c:\program files\Common Files\PX Storage Engine 2010-06-16 07:54 . 2007-12-06 07:59 -------- d-----w- c:\program files\Common Files\Adobe 2010-06-09 08:17 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail 2010-06-09 07:31 . 2007-12-06 07:20 -------- d-----w- c:\programdata\Microsoft Help 2010-06-05 08:21 . 2010-06-05 08:21 -------- d-----w- c:\program files\Project1 2010-06-05 08:21 . 2010-06-05 08:05 249856 ------w- c:\windows\Setup1.exe 2010-06-05 08:21 . 2010-06-05 08:05 73216 ----a-w- c:\windows\ST6UNST.EXE 2010-06-05 08:09 . 2010-06-05 08:09 -------- d-----w- c:\program files\LottoPro 2009 2010-06-04 07:35 . 2010-03-17 16:58 -------- d-----w- c:\users\Eddy\AppData\Roaming\OxelonMC 2010-06-04 06:55 . 2008-05-28 09:18 -------- d-----w- c:\program files\Microsoft Silverlight 2010-06-04 06:38 . 2010-06-04 06:16 -------- d-----w- c:\program files\NVIDIA Corporation 2010-06-04 06:31 . 2010-06-04 06:31 34805 ----a-w- c:\programdata\nvModes.dat 2010-06-04 06:31 . 2007-12-06 07:12 -------- d-----w- c:\programdata\NVIDIA 2010-06-03 17:25 . 2010-06-03 17:25 -------- d-----w- c:\program files\Uniblue 2010-06-01 05:49 . 2010-06-01 05:49 4 ----a-w- c:\windows\system32\aspdict-en.dat 2010-06-01 05:49 . 2010-06-01 05:49 16 ----a-w- c:\windows\system32\asdict.dat 2010-05-29 09:40 . 2010-05-29 09:40 -------- d-----w- c:\users\Eddy\AppData\Roaming\JLC's Software 2010-05-29 09:39 . 2010-05-29 09:39 -------- d-----w- c:\program files\JLC's Software 2010-05-26 17:06 . 2010-06-09 05:44 34304 ----a-w- c:\windows\system32\atmlib.dll 2010-05-26 14:47 . 2010-06-09 05:44 289792 ----a-w- c:\windows\system32\atmfd.dll 2010-05-26 07:46 . 2009-04-04 09:27 -------- d-----w- c:\program files\Microsoft 2010-05-21 12:14 . 2010-04-11 13:37 221568 ------w- c:\windows\system32\MpSigStub.exe 2010-05-20 11:57 . 2009-05-24 08:57 -------- d-----w- c:\users\Eddy\AppData\Roaming\Test-A 2010-05-18 14:35 . 2010-05-18 14:35 91424 ----a-w- c:\windows\system32\dnssd.dll 2010-05-18 14:35 . 2010-05-18 14:35 197920 ----a-w- c:\windows\system32\dnssdX.dll 2010-05-18 14:35 . 2010-05-18 14:35 107808 ----a-w- c:\windows\system32\dns-sd.exe 2010-05-16 07:56 . 2009-04-13 11:10 -------- d-----w- c:\program files\Google 2010-05-11 06:47 . 2009-04-04 07:16 -------- d-----w- c:\program files\Java 2010-05-05 07:23 . 2010-05-05 07:23 -------- d-----w- c:\windows\Fonts\Fonts 2010-05-04 05:59 . 2010-06-09 05:44 916480 ----a-w- c:\windows\system32\wininet.dll 2010-05-04 05:55 . 2010-06-09 05:44 71680 ----a-w- c:\windows\system32\iesetup.dll 2010-05-04 05:55 . 2010-06-09 05:44 109056 ----a-w- c:\windows\system32\iesysprep.dll 2010-05-04 04:31 . 2010-06-09 05:44 133632 ----a-w- c:\windows\system32\ieUnatt.exe 2010-05-01 14:13 . 2010-06-09 05:44 2037248 ----a-w- c:\windows\system32\win32k.sys 2010-05-01 06:36 . 2010-02-22 10:45 7592 ----a-w- c:\users\Eddy\AppData\Local\d3d9caps.dat 2010-04-28 12:53 . 2010-04-28 12:55 3974440 ----a-w- c:\windows\system32\AdvrCntr3.dll 2010-04-27 09:40 . 2010-05-20 12:00 16384 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\MTPC-MTTG\Syncfusion.Tools.Base.dll 2010-04-26 14:39 . 2010-05-20 12:00 24576 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\SystemInfoLib.dll 2010-04-26 14:39 . 2010-05-20 12:00 20480 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\SystemInfo.exe 2010-04-26 14:39 . 2010-05-20 12:00 11264 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\PersonalCode.dll 2010-04-26 14:39 . 2010-05-20 12:00 61440 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\MultitaxUtilities.dll 2010-04-26 14:39 . 2010-05-20 12:00 40960 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\ITools.dll 2010-04-26 14:39 . 2010-05-20 12:00 24576 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\Updater.dll 2010-04-26 14:39 . 2010-05-20 12:00 1511424 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\MultitaxStarter.exe 2010-04-26 14:39 . 2010-05-20 12:00 36864 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\ITools.dll 2010-04-26 14:39 . 2010-05-20 12:00 217088 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\ICSharpCode.SharpZipLib.dll 2010-04-26 14:39 . 2010-05-20 12:00 24576 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\ExceptionHandler.dll 2010-04-23 14:13 . 2010-05-26 05:47 2048 ----a-w- c:\windows\system32\tzres.dll 2010-04-22 11:36 . 2010-04-22 11:36 283648 ----a-w- c:\windows\uninst.exe 2010-04-16 16:43 . 2010-06-24 05:45 173056 ----a-w- c:\windows\AppPatch\AcXtrnal.dll 2010-04-16 16:43 . 2010-06-24 05:45 458752 ----a-w- c:\windows\AppPatch\AcSpecfc.dll 2010-04-16 16:43 . 2010-06-24 05:45 542720 ----a-w- c:\windows\AppPatch\AcLayers.dll 2010-04-16 16:43 . 2010-06-24 05:45 2159616 ----a-w- c:\windows\AppPatch\AcGenral.dll . ((((((((((((((((((((((((((((( SnapShot_2010-07-05_17.58.52 ))))))))))))))))))))))))))))))))))))))))) . + 2007-12-06 07:12 . 2010-07-07 05:42 93472 c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin - 2006-11-02 13:05 . 2010-07-05 17:07 84424 c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin + 2006-11-02 13:05 . 2010-07-07 05:42 84424 c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin + 2008-05-27 14:32 . 2010-07-07 05:42 18856 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-786010562-3885121150-2963765948-1000_UserData.bin - 2008-05-27 14:28 . 2010-07-05 17:04 32768 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2008-05-27 14:28 . 2010-07-07 05:43 32768 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2008-05-27 14:28 . 2010-07-07 05:43 65536 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2008-05-27 14:28 . 2010-07-05 17:04 65536 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2008-05-27 14:28 . 2010-07-05 17:04 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2008-05-27 14:28 . 2010-07-07 05:43 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2009-05-03 06:43 . 2010-06-22 12:26 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2009-05-03 06:43 . 2010-07-06 07:15 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2009-05-03 06:43 . 2010-07-06 07:15 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2009-05-03 06:43 . 2010-06-22 12:26 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2009-05-03 06:43 . 2010-06-22 12:26 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2009-05-03 06:43 . 2010-07-06 07:15 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2009-07-05 08:24 . 2010-07-07 05:40 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2009-07-05 08:24 . 2010-07-05 17:04 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2008-05-27 15:16 . 2010-07-07 05:40 40960 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\rtdrvmon.exe - 2008-05-27 15:16 . 2010-07-05 17:05 40960 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\rtdrvmon.exe - 2009-07-05 08:24 . 2010-07-05 17:04 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2009-07-05 08:24 . 2010-07-07 05:40 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2009-07-05 08:24 . 2010-07-05 17:04 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2009-07-05 08:24 . 2010-07-07 05:40 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2010-07-05 17:04 . 2010-07-05 17:04 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2010-07-07 05:40 . 2010-07-07 05:40 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2010-07-07 05:40 . 2010-07-07 05:40 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat - 2010-07-05 17:04 . 2010-07-05 17:04 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat - 2009-05-01 17:33 . 2010-07-05 13:44 245760 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat + 2009-05-01 17:33 . 2010-07-05 18:12 245760 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat + 2009-06-03 15:38 . 2010-07-06 09:15 215650696 c:\windows\winsxs\ManifestCache\6.0.6002.18005_001c11ba_blobs.bin . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2009-04-13 12:47 121392 ----a-w- c:\acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-05-03 39408] "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952] "Google Update"="c:\users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe" [2009-04-18 133104] "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240] "CAHeadless"="c:\program files\Adobe\Elements Organizer 8.0\CAHeadless\ElementsAutoAnalyzer.exe" [2009-09-18 615808] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "lxbkbmgr.exe"="c:\program files\Lexmark X1100 Series\lxbkbmgr.exe" [2008-02-28 74408] "Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-19 1008184] "RtHDVCpl"="RtHDVCpl.exe" [2007-10-11 4702208] "NVRaidService"="c:\windows\system32\nvraidservice.exe" [2007-12-07 196128] "Lexmark X1100 Series"="c:\program files\Lexmark X1100 Series\lxbkbmgr.exe" [2008-02-28 74408] "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072] "eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe" [2009-04-13 526896] "AutoLockProcess"="c:\acer\Empowering Technology\eLock\autolockprocess\autolockprocess.exe" [2008-01-23 561152] "Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [2008-10-14 623992] "Acer Empowering Technology Monitor"="c:\acer\Empowering Technology\SysMonitor.exe" [2006-12-25 319488] "beid"="c:\program files\Belgium Identity Card\beid35gui.exe" [2009-02-02 2035712] "AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712] "Skytel"="Skytel.exe" [2007-10-11 1826816] "ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-03-18 207360] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832] "Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-03-29 1086856] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-06-15 141624] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040] "BDAgent"="c:\program files\BitDefender\BitDefender 2010\bdagent.exe" [2010-03-18 1123360] "BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2010\IEShow.exe" [2009-10-19 71152] c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2008-5-30 113664] Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe [2007-12-6 535336] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "NoResolveTrack"= 1 (0x1) "NoFileAssociate"= 0 (0x0) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend] @="Service" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "Google Update"="c:\users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe" /c [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc] "VistaSp2"=hex(:1c,90,67,b4,0b,44,ca,01 R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-05-16 136176] R2 LMIRescue_c37e8bc0-fee3-400a-803c-3b5fdbaa6ae3;LogMeIn Rescue (c37e8bc0-fee3-400a-803c-3b5fdbaa6ae3);c:\users\Eddy\AppData\Local\Temp\LMI986C.tmp\LMI_Rescue_srv.exe [x] R3 Arrakis3;BitDefender Arrakis-server;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe [2009-10-19 183880] R3 WSVD;WSVD;c:\windows\system32\drivers\WSVD.sys [2007-12-16 75776] R4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2008-07-11 47128] R4 RsFx0102;RsFx0102 Driver;c:\windows\system32\DRIVERS\RsFx0102.sys [2008-07-10 242712] R4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2008-07-11 369688] S0 eLock2BurnerLockDriver;Disk Performance Monitor Filter Driver;c:\windows\system32\DRIVERS\eLock2BurnerLockDriver.sys [2008-01-10 22048] S1 archlp;archlp;c:\windows\system32\drivers\archlp.sys [2008-01-29 11392] S1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver;c:\windows\system32\DRIVERS\BdfNdisf6.sys [2010-07-05 72784] S2 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7;c:\program files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe [2008-09-16 169312] S2 BDVEDISK;BDVEDISK;c:\program files\BitDefender\BitDefender 2010\bdvedisk.sys [2010-01-19 85128] S2 eLock2FSCTLDriver;eLock2FSCTLDriver;c:\windows\system32\DRIVERS\eLock2FSCTLDriver.sys [2008-01-23 86048] S2 lxbk_device;lxbk_device;c:\windows\system32\lxbkcoms.exe [2008-02-19 537256] S3 BDFM;BDFM;c:\windows\system32\DRIVERS\bdfm.sys [2010-02-03 153448] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache bdx REG_MULTI_SZ scan HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . Inhoud van de 'Gedeelde Taken' map 2010-07-07 c:\windows\Tasks\1-klik Onderhoud.job - c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2009-04-27 13:51] 2010-07-07 c:\windows\Tasks\Google Software Updater.job - c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-13 08:46] 2010-07-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-05-16 07:54] 2010-07-07 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-05-16 07:54] 2010-07-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-786010562-3885121150-2963765948-1000Core.job - c:\users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe [2009-04-18 14:49] 2010-07-07 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-786010562-3885121150-2963765948-1000UA.job - c:\users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe [2009-04-18 14:49] 2010-07-07 c:\windows\Tasks\User_Feed_Synchronization-{4D4AA6C7-C1FB-4CD5-83A3-F10056D36B3F}.job - c:\windows\system32\msfeedssync.exe [2010-06-09 04:30] . . ------- Bijkomende Scan ------- . uInternet Settings,ProxyOverride = *.local IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: Add to Windows &Live Favorites - Welcome to Windows Live IE: Append to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert link target to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert link target to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert selected links to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html IE: Convert selected links to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html IE: Convert selection to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert selection to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html . . ------- Bestandsassociaties ------- . .txt= . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2010-07-07 11:05 Windows 6.0.6002 Service Pack 2 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: 0 ************************************************************************** . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- [HKEY_USERS\S-1-5-21-786010562-3885121150-2963765948-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{BD04728F-9192-6B05-B051-4594A84D0BF9}*] "hakmfkdlbpeomjbn"=hex:6a,61,65,70,6c,66,6e,65,67,6e,6a,6a,69,64,62,63,6b,66, 63,6c,00,07 "iaincidjhffejbbbdd"=hex:6a,61,65,70,6c,66,6e,65,67,6e,6a,6a,69,64,62,63,6b,66, 63,6c,00,08 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . Voltooingstijd: 2010-07-07 11:14:14 ComboFix-quarantined-files.txt 2010-07-07 09:14 ComboFix2.txt 2010-07-05 18:06 ComboFix3.txt 2010-07-03 10:20 ComboFix4.txt 2010-07-02 07:22 ComboFix5.txt 2010-07-07 08:02 Pre-Run: 71.986.020.352 bytes beschikbaar Post-Run: 74.091.372.544 bytes beschikbaar - - End Of File - - DEC8E53CCC456A081D9D0D493C9E1840

ik heb de verkeerde log meegestuurd... hierbij is ook de attach file Attach.rar

Ik heb alles uitgevoerd zoals gevraagd. er was een Kaspersky map, de andere niet. DDS log DDS (Ver_10-03-17.01) - NTFSx86 Run by Eddy at 19:40:10,15 on di 06/07/2010 Internet Explorer: 8.0.6001.18928 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.32.1043.18.3071.1651 [GMT 2:00] AV: Kaspersky Internet Security *On-access scanning enabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0} AV: Windows Live OneCare *On-access scanning disabled* (Updated) {427ADFC3-B354-4A51-BE34-A9D4218E45C4} AV: Norton Internet Security *On-access scanning enabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8} SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} SP: Kaspersky Internet Security *enabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0} SP: Norton Internet Security *enabled* (Updated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A} SP: Windows Live OneCare *disabled* (Updated) {CC7E50BA-BA8C-4DDE-B5AC-EA53BC38D01B} FW: Norton Internet Security *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220} FW: Kaspersky Internet Security *enabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0} FW: Windows Live OneCare - Firewall *disabled* {A3899D22-27E6-4A7E-AE4E-2C106646DAAB} ============== Running Processes =============== C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\nvvsvc.exe C:\Windows\system32\svchost.exe -k rpcss C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\SLsvc.exe C:\Windows\system32\rundll32.exe C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\svchost.exe -k LocalService C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Windows\system32\taskeng.exe C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Program Files\Lexmark X1100 Series\LXBKbmgr.exe C:\Windows\RtHDVCpl.exe C:\Windows\System32\nvraidservice.exe C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe C:\Acer\Empowering Technology\eLock\autolockprocess\AutoLockProcess.exe C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe C:\Acer\Empowering Technology\SysMonitor.exe C:\Program Files\Belgium Identity Card\beid35gui.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Windows\ehome\ehtray.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Acer\Empowering Technology\eDataSecurity\x86\eDSDTS.exe C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe C:\Users\Eddy\AppData\Local\Google\Update\1.2.183.29\GoogleCrashHandler.exe C:\Acer\Empowering Technology\eDataSecurity\x86\MsnVane.exe C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\Windows\system32\lxbkcoms.exe C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Program Files\CyberLink\Shared Files\RichVideo.exe C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\System32\TUProgSt.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE C:\Windows\system32\SearchIndexer.exe C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\IncrediMail\Bin\ImApp.exe C:\Program Files\IncrediMail\Bin\IncMail.exe C:\Windows\system32\conime.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\servicing\TrustedInstaller.exe C:\Windows\system32\SearchProtocolHost.exe C:\Windows\system32\SearchFilterHost.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\DllHost.exe C:\Users\Eddy\Desktop\dds.scr ============== Pseudo HJT Report =============== uInternet Settings,ProxyOverride = *.local mURLSearchHooks: H - No File BHO: Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn\yt.dll BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll BHO: ShowBarObj Class: {83a2f9b1-01a2-4aa5-87d1-45b6b8505e96} - c:\acer\empowering technology\edatasecurity\x86\ActiveToolBand.dll BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.4.4525.1752\swg.dll BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll TB: Acer eDataSecurity Management: {5cbe3b7c-1e47-477e-a7dd-396db0476e29} - c:\acer\empowering technology\edatasecurity\x86\eDStoolbar.dll TB: &Egis Option Pack: {312105c4-2e13-4e10-af72-f9d79ba077e6} - c:\acer\empowering technology\edatasecurity\x86\eDsWebmailtb.dll TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll TB: BitDefender Toolbar: {381ffde8-2394-4f90-b10d-fc6124a40f8c} - c:\program files\bitdefender\bitdefender 2010\IEToolbar.dll TB: {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - No File TB: {472734EA-242A-422B-ADF8-83D1E48CC825} - No File TB: {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No File uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe" uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe uRun: [Google Update] "c:\users\eddy\appdata\local\google\update\GoogleUpdate.exe" /c uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe uRun: [CAHeadless] c:\program files\adobe\elements organizer 8.0\caheadless\ElementsAutoAnalyzer.exe mRun: [lxbkbmgr.exe] "c:\program files\lexmark x1100 series\lxbkbmgr.exe" mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide mRun: [RtHDVCpl] RtHDVCpl.exe mRun: [NVRaidService] c:\windows\system32\nvraidservice.exe mRun: [Lexmark X1100 Series] "c:\program files\lexmark x1100 series\lxbkbmgr.exe" mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe" mRun: [eDataSecurity Loader] c:\acer\empowering technology\edatasecurity\x86\eDSloader.exe mRun: [AutoLockProcess] c:\acer\empowering technology\elock\autolockprocess\autolockprocess.exe mRun: [Acrobat Assistant 8.0] "c:\program files\adobe\acrobat 8.0\acrobat\Acrotray.exe" mRun: [Acer Empowering Technology Monitor] c:\acer\empowering technology\SysMonitor.exe mRun: [beid] "c:\program files\belgium identity card\beid35gui.exe" /startup mRun: [AdobeCS4ServiceManager] "c:\program files\common files\adobe\cs4servicemanager\CS4ServiceManager.exe" -launchedbylogin mRun: [skytel] Skytel.exe mRun: [ArcSoft Connection Service] c:\program files\common files\arcsoft\connection service\bin\ACDaemon.exe mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe" mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe" mRun: [Malwarebytes Anti-Malware (reboot)] "c:\program files\malwarebytes' anti-malware\mbam.exe" /runcleanupscript mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe" mRun: [sunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" mRun: [bDAgent] "c:\program files\bitdefender\bitdefender 2010\bdagent.exe" mRun: [bitDefender Antiphishing Helper] "c:\program files\bitdefender\bitdefender 2010\IEShow.exe" StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\empowe~1.lnk - c:\acer\empowering technology\eAPLauncher.exe mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0) mPolicies-explorer: NoResolveTrack = 1 (0x1) mPolicies-explorer: NoFileAssociate = 0 (0x0) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: Add to Windows &Live Favorites - Welcome to Windows Live IE: Append to existing PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert link target to Adobe PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert link target to existing PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert selected links to Adobe PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html IE: Convert selected links to existing PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html IE: Convert selection to Adobe PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert selection to existing PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert to Adobe PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: E&xporteren naar Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - f:\program files\office11\REFIEBAR.DLL DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} - hxxp://download.microsoft.com/download/E/3/9/E39C664F-A8E3-4F69-A109-1AE9849204EE/OGAControl.cab DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} - hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.6.cab DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll ============= SERVICES / DRIVERS =============== R0 eLock2BurnerLockDriver;Disk Performance Monitor Filter Driver;c:\windows\system32\drivers\eLock2burnerlockdriver.sys [2009-4-10 22048] R1 archlp;archlp;c:\windows\system32\drivers\archlp.sys [2009-9-19 11392] R1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver;c:\windows\system32\drivers\BdfNdisf6.sys [2009-10-19 72784] R2 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7;c:\program files\adobe\photoshop elements 7.0\PhotoshopElementsFileAgent.exe [2008-9-16 169312] R2 BDVEDISK;BDVEDISK;c:\program files\bitdefender\bitdefender 2010\bdvedisk.sys [2010-1-19 85128] R2 eLock2FSCTLDriver;eLock2FSCTLDriver;c:\windows\system32\drivers\eLock2FSCTLDriver.sys [2009-4-10 86048] R2 lxbk_device;lxbk_device;c:\windows\system32\lxbkcoms.exe -service --> c:\windows\system32\lxbkcoms.exe -service [?] R3 BDFM;BDFM;c:\windows\system32\drivers\bdfm.sys [2010-2-3 153448] S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-5-16 136176] S2 LMIRescue_c37e8bc0-fee3-400a-803c-3b5fdbaa6ae3;LogMeIn Rescue (c37e8bc0-fee3-400a-803c-3b5fdbaa6ae3);"c:\users\eddy\appdata\local\temp\lmi986c.tmp\lmi_rescue_srv.exe" -service -sid c37e8bc0-fee3-400a-803c-3b5fdbaa6ae3 --> c:\users\eddy\appdata\local\temp\lmi986c.tmp\LMI_Rescue_srv.exe [?] S3 Arrakis3;BitDefender Arrakis-server;c:\program files\common files\bitdefender\bitdefender arrakis server\bin\arrakis3.exe [2009-10-19 183880] S3 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2009-7-31 21504] S3 WSVD;WSVD;c:\windows\system32\drivers\WSVD.sys [2008-5-30 75776] S4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\microsoft sql server\100\shared\sqladhlp.exe [2008-7-11 47128] S4 RsFx0102;RsFx0102 Driver;c:\windows\system32\drivers\RsFx0102.sys [2008-7-10 242712] S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\microsoft sql server\mssql10.sqlexpress\mssql\binn\SQLAGENT.EXE [2008-7-11 369688] ============== File Associations =============== .txt= =============== Created Last 30 ================ 2010-07-06 11:50:06 16384 ----a-w- C:\msimg32.dll 2010-07-05 18:03:22 0 d-sh--w- C:\$RECYCLE.BIN 2010-07-05 17:37:01 0 d-----w- C:\scan1644s 2010-07-05 14:59:55 0 d-----w- c:\users\eddy\appdata\roaming\BitDefender 2010-07-05 14:59:55 0 d-----w- c:\programdata\BitDefender 2010-07-05 14:58:19 0 d-----w- c:\program files\common files\BitDefender 2010-07-05 14:51:05 227024 ----a-w- C:\BdUninstallTool2010.07.05-04.51.03.reg 2010-07-05 14:28:42 0 d-----w- C:\scan21652s 2010-07-05 14:24:55 0 d-----w- C:\C-o-m-b-o-F-i-x 2010-07-05 14:20:43 691 ----a-w- c:\users\eddy\appdata\roaming\GetValue.vbs 2010-07-05 14:20:43 35 ----a-w- c:\users\eddy\appdata\roaming\SetValue.bat 2010-07-05 14:20:17 0 d-----w- C:\SmitfraudFix 2010-07-05 14:15:54 1872472 ----a-w- C:\S-m-i-t-f-r-a-u-d-F-i-x.exe 2010-07-05 14:15:34 3726382 ----a-r- C:\C-o-m-b-o-F-i-x.exe 2010-07-03 10:06:36 98816 ----a-w- c:\windows\sed.exe 2010-07-03 10:06:36 77312 ----a-w- c:\windows\MBR.exe 2010-07-03 10:06:36 256512 ----a-w- c:\windows\PEV.exe 2010-07-03 10:06:36 161792 ----a-w- c:\windows\SWREG.exe 2010-07-02 07:05:44 0 d-----w- C:\scan 2010-06-26 15:18:28 305297 ----a-w- C:\BdUninstallTool2010.06.26-05.18.28.reg 2010-06-26 08:16:43 0 d-----w- c:\program files\IncrediMail 2010-06-25 10:18:16 26600 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys 2010-06-25 10:18:16 107368 ----a-w- c:\windows\system32\GEARAspi.dll 2010-06-25 10:17:19 0 d-----w- c:\program files\iPod 2010-06-25 10:17:15 0 d-----w- c:\programdata\{429CAD59-35B1-4DBC-BB6D-1DB246563521} 2010-06-25 10:17:15 0 d-----w- c:\program files\iTunes 2010-06-25 10:13:28 0 d-----w- c:\program files\Bonjour 2010-06-24 08:45:12 44544 ------w- c:\windows\AWuninstall.exe 2010-06-24 08:45:12 0 d-----w- c:\program files\Lokas 2010-06-24 07:29:24 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll 2010-06-24 07:29:24 49472 ----a-w- c:\windows\system32\netfxperf.dll 2010-06-24 07:29:24 297808 ----a-w- c:\windows\system32\mscoree.dll 2010-06-24 07:29:24 295264 ----a-w- c:\windows\system32\PresentationHost.exe 2010-06-24 07:29:24 1130824 ----a-w- c:\windows\system32\dfshim.dll 2010-06-24 05:45:39 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll 2010-06-24 05:45:39 28672 ----a-w- c:\windows\system32\Apphlpdm.dll 2010-06-20 19:24:34 0 d-----w- c:\programdata\PhotoMail 2010-06-20 19:24:34 0 d-----w- c:\program files\PhotoMail Maker 2010-06-16 08:17:10 0 d-----w- c:\users\eddy\appdata\roaming\No Company Name 2010-06-16 07:56:19 0 d-----w- c:\programdata\eSellerate 2010-06-16 07:56:18 0 d-----w- c:\programdata\SmartSound Software Inc 2010-06-16 07:56:12 0 d-----w- c:\program files\SmartSound Software ==================== Find3M ==================== 2010-07-05 15:18:52 72784 ----a-w- c:\windows\system32\drivers\BdfNdisf6.sys 2010-07-05 15:01:04 86016 ----a-w- c:\windows\inf\infstor.dat 2010-07-05 15:01:04 51200 ----a-w- c:\windows\inf\infpub.dat 2010-07-05 15:01:04 143360 ----a-w- c:\windows\inf\infstrng.dat 2010-06-25 13:19:05 411368 ----a-w- c:\windows\system32\deployJava1.dll 2010-06-18 14:55:25 735382 ----a-w- c:\windows\system32\perfh013.dat 2010-06-18 14:55:25 152096 ----a-w- c:\windows\system32\perfc013.dat 2010-06-05 08:21:03 73216 ----a-w- c:\windows\ST6UNST.EXE 2010-06-05 08:21:03 249856 ------w- c:\windows\Setup1.exe 2010-06-04 06:31:56 34805 ----a-w- c:\programdata\nvModes.dat 2010-05-26 17:06:41 34304 ----a-w- c:\windows\system32\atmlib.dll 2010-05-26 14:47:41 289792 ----a-w- c:\windows\system32\atmfd.dll 2010-05-21 12:14:28 221568 ------w- c:\windows\system32\MpSigStub.exe 2010-05-18 14:35:16 91424 ----a-w- c:\windows\system32\dnssd.dll 2010-05-18 14:35:16 197920 ----a-w- c:\windows\system32\dnssdX.dll 2010-05-18 14:35:16 107808 ----a-w- c:\windows\system32\dns-sd.exe 2010-05-04 05:59:21 916480 ----a-w- c:\windows\system32\wininet.dll 2010-05-04 05:55:42 71680 ----a-w- c:\windows\system32\iesetup.dll 2010-05-04 05:55:42 109056 ----a-w- c:\windows\system32\iesysprep.dll 2010-05-04 04:31:05 133632 ----a-w- c:\windows\system32\ieUnatt.exe 2010-05-01 14:13:48 2037248 ----a-w- c:\windows\system32\win32k.sys 2010-04-28 12:53:37 3974440 ----a-w- c:\windows\system32\AdvrCntr3.dll 2010-04-23 14:13:55 2048 ----a-w- c:\windows\system32\tzres.dll 2010-04-22 11:36:34 283648 ----a-w- c:\windows\uninst.exe 2009-11-18 13:21:24 665600 ----a-w- c:\windows\inf\drvindex.dat 2009-08-02 18:21:42 174 --sha-w- c:\program files\desktop.ini 2006-11-02 16:08:26 41976 ----a-w- c:\windows\inf\perflib\0413\perfd.dat 2006-11-02 16:08:26 41976 ----a-w- c:\windows\inf\perflib\0413\perfc.dat 2006-11-02 16:08:26 336440 ----a-w- c:\windows\inf\perflib\0413\perfi.dat 2006-11-02 16:08:26 336440 ----a-w- c:\windows\inf\perflib\0413\perfh.dat 2006-11-02 09:20:21 287440 ----a-w- c:\windows\inf\perflib\0000\perfi.dat 2006-11-02 09:20:21 287440 ----a-w- c:\windows\inf\perflib\0000\perfh.dat 2006-11-02 09:20:19 30674 ----a-w- c:\windows\inf\perflib\0000\perfd.dat 2006-11-02 09:20:19 30674 ----a-w- c:\windows\inf\perflib\0000\perfc.dat 2010-02-08 12:04:27 16384 --sha-w- c:\windows\serviceprofiles\localservice\appdata\local\temp\cookies\index.dat 2010-02-08 12:04:27 16384 --sha-w- c:\windows\serviceprofiles\localservice\appdata\local\temp\history\history.ie5\index.dat 2010-02-08 12:04:27 32768 --sha-w- c:\windows\serviceprofiles\localservice\appdata\local\temp\temporary internet files\content.ie5\index.dat 2010-04-02 05:50:15 245760 --sha-w- c:\windows\serviceprofiles\localservice\appdata\roaming\microsoft\windows\ietldcache\index.dat 2009-10-19 09:43:30 245760 --sha-w- c:\windows\serviceprofiles\networkservice\appdata\roaming\microsoft\windows\ietldcache\index.dat ============= FINISH: 19:40:54,25 =============== HijachThis log Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:42:58, on 6/07/2010 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.18928) Boot mode: Normal Running processes: C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Program Files\Lexmark X1100 Series\LXBKbmgr.exe C:\Windows\RtHDVCpl.exe C:\Windows\System32\nvraidservice.exe C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe C:\Acer\Empowering Technology\eLock\autolockprocess\AutoLockProcess.exe C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe C:\Acer\Empowering Technology\SysMonitor.exe C:\Program Files\Belgium Identity Card\beid35gui.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Windows\ehome\ehtray.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Acer\Empowering Technology\eDataSecurity\x86\eDSDTS.exe C:\Users\Eddy\AppData\Local\Google\Update\1.2.183.29\GoogleCrashHandler.exe C:\Acer\Empowering Technology\eDataSecurity\x86\MsnVane.exe C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\IncrediMail\Bin\ImApp.exe C:\Program Files\IncrediMail\Bin\IncMail.exe C:\Windows\system32\conime.exe F:\virusprog\HijackThis.exe C:\Program Files\IncrediMail\Bin\ImNotfy.exe O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: BitDefender Desktop-updateservice (LIVESRV) - BitDefender S.R.L. - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe O23 - Service: LogMeIn Rescue (c37e8bc0-fee3-400a-803c-3b5fdbaa6ae3) (LMIRescue_c37e8bc0-fee3-400a-803c-3b5fdbaa6ae3) - Unknown owner - C:\Users\Eddy\AppData\Local\Temp\LMI986C.tmp\LMI_Rescue_srv.exe (file missing) O23 - Service: lxbk_device - - C:\Windows\system32\lxbkcoms.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe -- End of file - 4077 bytes

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 20:08:06, on 5/07/2010 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.18928) Boot mode: Normal Running processes: C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe C:\Windows\system32\Dwm.exe C:\Windows\system32\taskeng.exe C:\Program Files\Lexmark X1100 Series\LXBKbmgr.exe C:\Windows\RtHDVCpl.exe C:\Windows\System32\nvraidservice.exe C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe C:\Acer\Empowering Technology\eLock\autolockprocess\AutoLockProcess.exe C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe C:\Acer\Empowering Technology\SysMonitor.exe C:\Program Files\Belgium Identity Card\beid35gui.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Windows\ehome\ehmsas.exe C:\Acer\Empowering Technology\eDataSecurity\x86\eDSDTS.exe C:\Users\Eddy\AppData\Local\Google\Update\1.2.183.29\GoogleCrashHandler.exe C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE C:\Acer\Empowering Technology\eDataSecurity\x86\MsnVane.exe C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe C:\Windows\system32\wbem\unsecapp.exe C:\Windows\system32\conime.exe C:\Windows\Explorer.exe C:\Windows\system32\SearchFilterHost.exe C:\Program Files\Avant Browser\avant.exe F:\virusprog\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll O3 - Toolbar: &Egis Option Pack - {312105C4-2E13-4E10-AF72-F9D79BA077E6} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDsWebmailtb.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2010\IEToolbar.dll O4 - HKLM\..\Run: [lxbkbmgr.exe] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe" O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [NVRaidService] C:\Windows\system32\nvraidservice.exe O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe" O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe O4 - HKLM\..\Run: [AutoLockProcess] C:\Acer\Empowering Technology\eLock\autolockprocess\autolockprocess.exe O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe O4 - HKLM\..\Run: [beid] "C:\Program Files\Belgium Identity Card\beid35gui.exe" /startup O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin O4 - HKLM\..\Run: [skytel] Skytel.exe O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [bDAgent] "C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe" O4 - HKLM\..\Run: [bitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2010\IEShow.exe" O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [Google Update] "C:\Users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKCU\..\Run: [CAHeadless] C:\Program Files\Adobe\Elements Organizer 8.0\CAHeadless\ElementsAutoAnalyzer.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Empowering Technology Launcher.lnk = C:\Acer\Empowering Technology\eAPLauncher.exe O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O8 - Extra context menu item: Add to Windows &Live Favorites - Welcome to Windows Live O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing) O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing) O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\Program Files\OFFICE11\REFIEBAR.DLL O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.6.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe O23 - Service: Adobe Active File Monitor V7 (AdobeActiveFileMonitor7.0) - Adobe Systems Incorporated - C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: BitDefender Arrakis-server (Arrakis3) - BitDefender S.R.L. Antivirus software - BitDefender - The future of security now! - C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: BitDefender Desktop-updateservice (LIVESRV) - BitDefender S.R.L. - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe O23 - Service: LogMeIn Rescue (c37e8bc0-fee3-400a-803c-3b5fdbaa6ae3) (LMIRescue_c37e8bc0-fee3-400a-803c-3b5fdbaa6ae3) - Unknown owner - C:\Users\Eddy\AppData\Local\Temp\LMI986C.tmp\LMI_Rescue_srv.exe (file missing) O23 - Service: lxbk_device - - C:\Windows\system32\lxbkcoms.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe -- End of file - 13057 bytes COMBOFIX log ComboFix 10-07-01.02 - Eddy 05/07/2010 19:41:30.4.2 - x86 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.32.1043.18.3071.1697 [GMT 2:00] Gestart vanuit: c:\users\Eddy\Desktop\scan.exe gebruikte Opdracht switches :: f:\virusprog\cfscript.txt AV: Kaspersky Internet Security *On-access scanning enabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0} AV: Norton Internet Security *On-access scanning enabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8} AV: Windows Live OneCare *On-access scanning disabled* (Updated) {427ADFC3-B354-4A51-BE34-A9D4218E45C4} FW: Kaspersky Internet Security *enabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0} FW: Norton Internet Security *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220} FW: Windows Live OneCare - Firewall *disabled* {A3899D22-27E6-4A7E-AE4E-2C106646DAAB} SP: Kaspersky Internet Security *enabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0} SP: Norton Internet Security *enabled* (Updated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A} SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} SP: Windows Live OneCare *disabled* (Updated) {CC7E50BA-BA8C-4DDE-B5AC-EA53BC38D01B} * Aanwezig AV is actief . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\program files\a-squared Free c:\program files\a-squared Free\a2mor.dll c:\program files\a-squared Free\license_de.rtf c:\program files\a-squared Free\license_en.rtf c:\program files\a-squared Free\Logs\a-squared.db3 c:\program files\a-squared Free\Signatures\T3sigs.vdb c:\program files\a-squared Free\t3.dll c:\program files\a-squared Free\vdbupdate.dll c:\program files\Common Files\Symantec Shared c:\program files\Common Files\Symantec Shared\CCPD-LC\ez_log.html c:\program files\Common Files\Symantec Shared\CCPD-LC\symlcrst.dll c:\program files\Common Files\Symantec Shared\COH\coh.cache c:\program files\Common Files\Symantec Shared\COH\COH32.exe c:\program files\Common Files\Symantec Shared\COH\COH64.exe c:\program files\Common Files\Symantec Shared\COH\COHClean.dll c:\program files\Common Files\Symantec Shared\COH\sH0003.dll c:\program files\Common Files\Symantec Shared\COH\sH0007.dll . ---- Voorgaande Run ------- . c:\users\Eddy\AppData\Local\Temp\LMI986C.tmp\LMIRhook.000.dll c:\users\Eddy\AppData\Local\Temp\LMI986C.tmp\rahook.dll c:\windows\system32\tmp.reg . (((((((((((((((((((( Bestanden Gemaakt van 2010-06-05 to 2010-07-05 )))))))))))))))))))))))))))))) . 2010-07-05 17:57 . 2010-07-05 17:57 -------- d-----w- c:\users\Public\AppData\Local\temp 2010-07-05 17:57 . 2010-07-05 17:57 -------- d-----w- c:\users\Default\AppData\Local\temp 2010-07-05 17:04 . 2009-04-13 12:39 16384 ----a-w- C:\msimg32.dll 2010-07-05 14:59 . 2010-07-05 15:11 -------- d-----w- c:\programdata\BitDefender 2010-07-05 14:59 . 2010-07-05 15:00 -------- d-----w- c:\users\Eddy\AppData\Roaming\BitDefender 2010-07-05 14:58 . 2010-07-05 15:00 -------- d-----w- c:\program files\Common Files\BitDefender 2010-07-05 14:51 . 2010-07-05 14:53 227024 ----a-w- C:\BdUninstallTool2010.07.05-04.51.03.reg 2010-07-05 14:35 . 2010-07-05 17:58 -------- d-----w- c:\users\Eddy\AppData\Local\temp 2010-07-05 14:28 . 2010-07-05 14:35 -------- d-----w- C:\scan21652s 2010-07-05 14:24 . 2010-07-05 14:25 -------- d-----w- C:\C-o-m-b-o-F-i-x 2010-07-05 14:20 . 2010-07-05 14:20 35 ----a-w- c:\users\Eddy\AppData\Roaming\SetValue.bat 2010-07-05 14:20 . 2010-07-05 14:23 -------- d-----w- C:\SmitfraudFix 2010-07-05 14:15 . 2009-09-13 09:10 1872472 ----a-w- C:\S-m-i-t-f-r-a-u-d-F-i-x.exe 2010-07-05 14:15 . 2010-07-05 14:25 3726382 ----a-r- C:\C-o-m-b-o-F-i-x.exe 2010-07-02 07:05 . 2010-07-02 07:22 -------- d-----w- C:\scan 2010-06-26 15:18 . 2010-06-26 15:20 305297 ----a-w- C:\BdUninstallTool2010.06.26-05.18.28.reg 2010-06-26 08:16 . 2010-06-26 08:16 -------- d-----w- c:\program files\IncrediMail 2010-06-25 13:19 . 2010-06-25 13:19 -------- d-----w- c:\program files\Common Files\Java 2010-06-25 10:18 . 2009-05-18 11:17 26600 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys 2010-06-25 10:18 . 2008-04-17 10:12 107368 ----a-w- c:\windows\system32\GEARAspi.dll 2010-06-25 10:17 . 2010-06-25 10:17 -------- d-----w- c:\program files\iPod 2010-06-25 10:17 . 2010-06-25 10:18 -------- d-----w- c:\programdata\{429CAD59-35B1-4DBC-BB6D-1DB246563521} 2010-06-25 10:17 . 2010-06-25 10:18 -------- d-----w- c:\program files\iTunes 2010-06-25 10:13 . 2010-06-25 10:13 -------- d-----w- c:\program files\Bonjour 2010-06-25 10:12 . 2010-06-25 10:12 72504 ----a-w- c:\programdata\Apple Computer\Installer Cache\iTunes 9.2.0.61\SetupAdmin.exe 2010-06-24 09:27 . 2010-06-24 09:27 -------- d-----w- c:\users\Eddy\AppData\Local\ReaJPEG 2010-06-24 08:45 . 2010-06-24 08:45 44544 ------w- c:\windows\AWuninstall.exe 2010-06-24 08:45 . 2010-06-24 08:45 -------- d-----w- c:\program files\Lokas 2010-06-24 07:29 . 2009-11-08 08:55 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll 2010-06-24 07:29 . 2009-11-08 08:55 49472 ----a-w- c:\windows\system32\netfxperf.dll 2010-06-24 07:29 . 2009-11-08 08:55 297808 ----a-w- c:\windows\system32\mscoree.dll 2010-06-24 07:29 . 2009-11-08 08:55 295264 ----a-w- c:\windows\system32\PresentationHost.exe 2010-06-24 07:29 . 2009-11-08 08:55 1130824 ----a-w- c:\windows\system32\dfshim.dll 2010-06-24 05:45 . 2010-04-16 16:43 28672 ----a-w- c:\windows\system32\Apphlpdm.dll 2010-06-24 05:45 . 2010-04-16 14:39 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll 2010-06-20 19:24 . 2010-06-20 19:24 -------- d-----w- c:\programdata\PhotoMail 2010-06-20 19:24 . 2010-06-20 19:24 -------- d-----w- c:\program files\PhotoMail Maker 2010-06-16 08:17 . 2010-06-16 08:17 -------- d-----w- c:\users\Eddy\AppData\Roaming\No Company Name 2010-06-16 07:56 . 2010-06-16 07:56 -------- d-----w- c:\programdata\eSellerate 2010-06-16 07:56 . 2010-06-16 13:55 -------- d-----w- c:\programdata\SmartSound Software Inc 2010-06-16 07:56 . 2010-06-16 07:56 -------- d-----w- c:\program files\SmartSound Software . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-07-05 15:18 . 2009-10-19 15:04 72784 ----a-w- c:\windows\system32\drivers\BdfNdisf6.sys 2010-07-05 14:59 . 2010-04-12 07:46 -------- d-----w- c:\program files\BitDefender 2010-07-05 14:23 . 2009-05-14 10:53 -------- d-----w- c:\programdata\Zylom 2010-07-05 14:20 . 2010-07-05 14:20 691 ----a-w- c:\users\Eddy\AppData\Roaming\GetValue.vbs 2010-06-30 13:57 . 2009-12-03 09:16 -------- d-----w- c:\programdata\PrinterShare 2010-06-25 15:01 . 2009-06-12 16:01 -------- d-----w- c:\users\Eddy\AppData\Roaming\Apple Computer 2010-06-25 13:19 . 2010-05-11 06:47 411368 ----a-w- c:\windows\system32\deployJava1.dll 2010-06-25 10:17 . 2009-06-12 15:58 -------- d-----w- c:\program files\Common Files\Apple 2010-06-24 09:28 . 2010-04-24 13:24 -------- d-----w- c:\program files\WatermarkSoftware 2010-06-18 14:55 . 2006-11-02 16:11 735382 ----a-w- c:\windows\system32\perfh013.dat 2010-06-18 14:55 . 2006-11-02 16:11 152096 ----a-w- c:\windows\system32\perfc013.dat 2010-06-17 06:45 . 2007-12-06 07:16 -------- d--h--w- c:\program files\InstallShield Installation Information 2010-06-16 09:50 . 2009-07-05 14:42 -------- d-----w- c:\users\Eddy\AppData\Roaming\Download Manager 2010-06-16 08:45 . 2008-05-27 14:31 108712 ----a-w- c:\users\Eddy\AppData\Local\GDIPFONTCACHEV1.DAT 2010-06-16 08:17 . 2009-04-04 11:28 -------- d-----w- c:\programdata\FLEXnet 2010-06-16 07:54 . 2009-07-14 12:54 -------- d-----w- c:\program files\Common Files\PX Storage Engine 2010-06-16 07:54 . 2007-12-06 07:59 -------- d-----w- c:\program files\Common Files\Adobe 2010-06-09 08:17 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail 2010-06-09 07:31 . 2007-12-06 07:20 -------- d-----w- c:\programdata\Microsoft Help 2010-06-05 08:21 . 2010-06-05 08:21 -------- d-----w- c:\program files\Project1 2010-06-05 08:21 . 2010-06-05 08:05 249856 ------w- c:\windows\Setup1.exe 2010-06-05 08:21 . 2010-06-05 08:05 73216 ----a-w- c:\windows\ST6UNST.EXE 2010-06-05 08:09 . 2010-06-05 08:09 -------- d-----w- c:\program files\LottoPro 2009 2010-06-04 07:35 . 2010-03-17 16:58 -------- d-----w- c:\users\Eddy\AppData\Roaming\OxelonMC 2010-06-04 06:55 . 2008-05-28 09:18 -------- d-----w- c:\program files\Microsoft Silverlight 2010-06-04 06:38 . 2010-06-04 06:16 -------- d-----w- c:\program files\NVIDIA Corporation 2010-06-04 06:31 . 2010-06-04 06:31 34805 ----a-w- c:\programdata\nvModes.dat 2010-06-04 06:31 . 2007-12-06 07:12 -------- d-----w- c:\programdata\NVIDIA 2010-06-03 17:25 . 2010-06-03 17:25 -------- d-----w- c:\program files\Uniblue 2010-06-01 05:49 . 2010-06-01 05:49 4 ----a-w- c:\windows\system32\aspdict-en.dat 2010-06-01 05:49 . 2010-06-01 05:49 16 ----a-w- c:\windows\system32\asdict.dat 2010-05-29 09:40 . 2010-05-29 09:40 -------- d-----w- c:\users\Eddy\AppData\Roaming\JLC's Software 2010-05-29 09:39 . 2010-05-29 09:39 -------- d-----w- c:\program files\JLC's Software 2010-05-26 17:06 . 2010-06-09 05:44 34304 ----a-w- c:\windows\system32\atmlib.dll 2010-05-26 14:47 . 2010-06-09 05:44 289792 ----a-w- c:\windows\system32\atmfd.dll 2010-05-26 07:46 . 2009-04-04 09:27 -------- d-----w- c:\program files\Microsoft 2010-05-21 12:14 . 2010-04-11 13:37 221568 ------w- c:\windows\system32\MpSigStub.exe 2010-05-20 11:57 . 2009-05-24 08:57 -------- d-----w- c:\users\Eddy\AppData\Roaming\Test-A 2010-05-18 14:35 . 2010-05-18 14:35 91424 ----a-w- c:\windows\system32\dnssd.dll 2010-05-18 14:35 . 2010-05-18 14:35 197920 ----a-w- c:\windows\system32\dnssdX.dll 2010-05-18 14:35 . 2010-05-18 14:35 107808 ----a-w- c:\windows\system32\dns-sd.exe 2010-05-16 07:56 . 2009-04-13 11:10 -------- d-----w- c:\program files\Google 2010-05-11 06:47 . 2009-04-04 07:16 -------- d-----w- c:\program files\Java 2010-05-05 07:23 . 2010-05-05 07:23 -------- d-----w- c:\windows\Fonts\Fonts 2010-05-04 05:59 . 2010-06-09 05:44 916480 ----a-w- c:\windows\system32\wininet.dll 2010-05-04 05:55 . 2010-06-09 05:44 71680 ----a-w- c:\windows\system32\iesetup.dll 2010-05-04 05:55 . 2010-06-09 05:44 109056 ----a-w- c:\windows\system32\iesysprep.dll 2010-05-04 04:31 . 2010-06-09 05:44 133632 ----a-w- c:\windows\system32\ieUnatt.exe 2010-05-01 14:13 . 2010-06-09 05:44 2037248 ----a-w- c:\windows\system32\win32k.sys 2010-05-01 06:36 . 2010-02-22 10:45 7592 ----a-w- c:\users\Eddy\AppData\Local\d3d9caps.dat 2010-04-28 12:53 . 2010-04-28 12:55 3974440 ----a-w- c:\windows\system32\AdvrCntr3.dll 2010-04-27 09:40 . 2010-05-20 12:00 16384 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\MTPC-MTTG\Syncfusion.Tools.Base.dll 2010-04-26 14:39 . 2010-05-20 12:00 24576 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\SystemInfoLib.dll 2010-04-26 14:39 . 2010-05-20 12:00 20480 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\SystemInfo.exe 2010-04-26 14:39 . 2010-05-20 12:00 11264 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\PersonalCode.dll 2010-04-26 14:39 . 2010-05-20 12:00 61440 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\MultitaxUtilities.dll 2010-04-26 14:39 . 2010-05-20 12:00 40960 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\ITools.dll 2010-04-26 14:39 . 2010-05-20 12:00 24576 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\Updater.dll 2010-04-26 14:39 . 2010-05-20 12:00 1511424 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\MultitaxStarter.exe 2010-04-26 14:39 . 2010-05-20 12:00 36864 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\ITools.dll 2010-04-26 14:39 . 2010-05-20 12:00 217088 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\ICSharpCode.SharpZipLib.dll 2010-04-26 14:39 . 2010-05-20 12:00 24576 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\ExceptionHandler.dll 2010-04-23 14:13 . 2010-05-26 05:47 2048 ----a-w- c:\windows\system32\tzres.dll 2010-04-22 11:36 . 2010-04-22 11:36 283648 ----a-w- c:\windows\uninst.exe 2010-04-16 16:43 . 2010-06-24 05:45 173056 ----a-w- c:\windows\AppPatch\AcXtrnal.dll 2010-04-16 16:43 . 2010-06-24 05:45 458752 ----a-w- c:\windows\AppPatch\AcSpecfc.dll 2010-04-16 16:43 . 2010-06-24 05:45 542720 ----a-w- c:\windows\AppPatch\AcLayers.dll 2010-04-16 16:43 . 2010-06-24 05:45 2159616 ----a-w- c:\windows\AppPatch\AcGenral.dll . ((((((((((((((((((((((((((((( SnapShot@2010-07-02_07.18.28 ))))))))))))))))))))))))))))))))))))))))) . + 2007-12-06 07:12 . 2010-07-05 17:06 93314 c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin + 2006-11-02 13:05 . 2010-07-05 17:07 84424 c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin + 2008-05-27 14:32 . 2010-07-05 17:07 18840 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-786010562-3885121150-2963765948-1000_UserData.bin - 2009-10-19 14:04 . 2009-10-19 14:04 72200 c:\windows\System32\DriverStore\FileRepository\netlwf.inf_6ec54ecb\BdfNdisf6.sys + 2009-10-19 15:04 . 2009-10-19 15:04 72200 c:\windows\System32\DriverStore\FileRepository\netlwf.inf_6ec54ecb\BdfNdisf6.sys + 2010-01-19 17:32 . 2010-01-19 17:32 85128 c:\windows\System32\drivers\BDVEDISK.sys + 2010-02-10 13:26 . 2010-07-05 12:30 16384 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\Low\index.dat - 2010-02-10 13:26 . 2010-06-28 09:33 16384 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\Low\index.dat + 2008-05-27 14:28 . 2010-07-05 17:04 32768 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2008-05-27 14:28 . 2010-07-02 06:29 32768 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2010-02-10 13:26 . 2010-07-05 12:30 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\index.dat - 2010-02-10 13:26 . 2010-06-28 09:33 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\index.dat + 2008-05-27 14:28 . 2010-07-05 17:04 65536 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2008-05-27 14:28 . 2010-07-02 06:29 65536 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2010-02-10 13:26 . 2010-06-28 09:33 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\Low\History.IE5\index.dat + 2010-02-10 13:26 . 2010-07-05 12:30 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\Low\History.IE5\index.dat + 2008-05-27 14:28 . 2010-07-05 17:04 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2008-05-27 14:28 . 2010-07-02 06:29 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2009-07-05 08:24 . 2010-07-02 05:23 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2009-07-05 08:24 . 2010-07-05 17:04 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2008-05-27 15:16 . 2010-07-05 17:05 40960 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\rtdrvmon.exe - 2008-05-27 15:16 . 2010-07-02 05:24 40960 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\rtdrvmon.exe + 2009-07-05 08:24 . 2010-07-05 17:04 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2009-07-05 08:24 . 2010-07-02 05:23 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2009-07-05 08:24 . 2010-07-05 17:04 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2009-07-05 08:24 . 2010-07-02 05:23 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2010-07-05 15:01 . 2010-07-05 15:01 57344 c:\windows\Installer\{0DFF6117-CBBC-4F5C-9C57-6936644F10D4}\texticon.exe + 2010-07-05 15:01 . 2010-07-05 15:01 32768 c:\windows\Installer\{0DFF6117-CBBC-4F5C-9C57-6936644F10D4}\maintenance_icon.exe + 2010-07-05 15:01 . 2010-07-05 15:01 61440 c:\windows\Installer\{0DFF6117-CBBC-4F5C-9C57-6936644F10D4}\helpicon.exe - 2006-11-02 10:25 . 2010-06-26 16:17 86016 c:\windows\inf\infstor.dat + 2006-11-02 10:25 . 2010-07-05 15:01 86016 c:\windows\inf\infstor.dat + 2006-11-02 10:25 . 2010-07-05 15:01 51200 c:\windows\inf\infpub.dat - 2006-11-02 10:25 . 2010-06-26 16:17 51200 c:\windows\inf\infpub.dat + 2010-07-05 17:04 . 2010-07-05 17:04 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat - 2010-07-02 05:23 . 2010-07-02 05:23 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat - 2010-07-02 05:23 . 2010-07-02 05:23 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2010-07-05 17:04 . 2010-07-05 17:04 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat - 2007-01-31 11:50 . 2007-01-31 11:50 913408 c:\windows\System32\xreglib.dll + 2007-01-31 12:50 . 2007-01-31 12:50 913408 c:\windows\System32\xreglib.dll - 2009-01-15 10:45 . 2009-01-15 10:45 181248 c:\windows\System32\txmlutil.dll + 2009-01-15 11:45 . 2009-01-15 11:45 181248 c:\windows\System32\txmlutil.dll - 2010-02-03 10:56 . 2010-02-03 10:56 106464 c:\windows\System32\drivers\bdhv.sys + 2010-02-03 11:56 . 2010-02-03 11:56 106464 c:\windows\System32\drivers\bdhv.sys - 2009-07-24 09:26 . 2010-06-26 16:25 291352 c:\windows\System32\drivers\bdfsfltr.sys + 2010-02-22 12:58 . 2010-02-22 12:58 291352 c:\windows\System32\drivers\bdfsfltr.sys - 2010-02-03 10:57 . 2010-02-03 10:57 153448 c:\windows\System32\drivers\bdfm.sys + 2010-02-03 11:57 . 2010-02-03 11:57 153448 c:\windows\System32\drivers\bdfm.sys - 2009-05-01 17:33 . 2010-06-30 14:08 245760 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat + 2009-05-01 17:33 . 2010-07-05 13:44 245760 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat + 2007-04-11 09:11 . 2007-04-11 09:11 511328 c:\windows\System32\capicom.dll - 2007-04-11 08:11 . 2007-04-11 08:11 511328 c:\windows\System32\capicom.dll + 2010-07-05 15:01 . 2010-07-05 15:01 336782 c:\windows\Installer\{0DFF6117-CBBC-4F5C-9C57-6936644F10D4}\register_icon.exe - 2006-11-02 10:25 . 2010-06-26 16:17 143360 c:\windows\inf\infstrng.dat + 2006-11-02 10:25 . 2010-07-05 15:01 143360 c:\windows\inf\infstrng.dat + 2010-07-05 15:01 . 2010-07-05 15:01 14780416 c:\windows\Installer\4a26a.msi . -- Snapshot teruggezet naar huidige datum -- . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2009-04-13 12:47 121392 ----a-w- c:\acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-05-03 39408] "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952] "Google Update"="c:\users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe" [2009-04-18 133104] "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240] "CAHeadless"="c:\program files\Adobe\Elements Organizer 8.0\CAHeadless\ElementsAutoAnalyzer.exe" [2009-09-18 615808] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "lxbkbmgr.exe"="c:\program files\Lexmark X1100 Series\lxbkbmgr.exe" [2008-02-28 74408] "Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-19 1008184] "RtHDVCpl"="RtHDVCpl.exe" [2007-10-11 4702208] "NVRaidService"="c:\windows\system32\nvraidservice.exe" [2007-12-07 196128] "Lexmark X1100 Series"="c:\program files\Lexmark X1100 Series\lxbkbmgr.exe" [2008-02-28 74408] "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072] "eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe" [2009-04-13 526896] "AutoLockProcess"="c:\acer\Empowering Technology\eLock\autolockprocess\autolockprocess.exe" [2008-01-23 561152] "Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [2008-10-14 623992] "Acer Empowering Technology Monitor"="c:\acer\Empowering Technology\SysMonitor.exe" [2006-12-25 319488] "beid"="c:\program files\Belgium Identity Card\beid35gui.exe" [2009-02-02 2035712] "AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712] "Skytel"="Skytel.exe" [2007-10-11 1826816] "ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-03-18 207360] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832] "Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-03-29 1086856] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-06-15 141624] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040] "BDAgent"="c:\program files\BitDefender\BitDefender 2010\bdagent.exe" [2010-03-18 1123360] "BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2010\IEShow.exe" [2009-10-19 71152] c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2008-5-30 113664] Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe [2007-12-6 535336] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "NoResolveTrack"= 1 (0x1) "NoFileAssociate"= 0 (0x0) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend] @="Service" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "Google Update"="c:\users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe" /c [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc] "VistaSp2"=hex(:1c,90,67,b4,0b,44,ca,01 R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-05-16 136176] R2 LMIRescue_c37e8bc0-fee3-400a-803c-3b5fdbaa6ae3;LogMeIn Rescue (c37e8bc0-fee3-400a-803c-3b5fdbaa6ae3);c:\users\Eddy\AppData\Local\Temp\LMI986C.tmp\LMI_Rescue_srv.exe [x] R3 Arrakis3;BitDefender Arrakis-server;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe [2009-10-19 183880] R3 WSVD;WSVD;c:\windows\system32\drivers\WSVD.sys [2007-12-16 75776] R4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2008-07-11 47128] R4 RsFx0102;RsFx0102 Driver;c:\windows\system32\DRIVERS\RsFx0102.sys [2008-07-10 242712] R4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2008-07-11 369688] S0 eLock2BurnerLockDriver;Disk Performance Monitor Filter Driver;c:\windows\system32\DRIVERS\eLock2BurnerLockDriver.sys [2008-01-10 22048] S1 archlp;archlp;c:\windows\system32\drivers\archlp.sys [2008-01-29 11392] S1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver;c:\windows\system32\DRIVERS\BdfNdisf6.sys [2010-07-05 72784] S2 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7;c:\program files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe [2008-09-16 169312] S2 BDVEDISK;BDVEDISK;c:\program files\BitDefender\BitDefender 2010\bdvedisk.sys [2010-01-19 85128] S2 eLock2FSCTLDriver;eLock2FSCTLDriver;c:\windows\system32\DRIVERS\eLock2FSCTLDriver.sys [2008-01-23 86048] S2 lxbk_device;lxbk_device;c:\windows\system32\lxbkcoms.exe [2008-02-19 537256] S3 BDFM;BDFM;c:\windows\system32\DRIVERS\bdfm.sys [2010-02-03 153448] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache bdx REG_MULTI_SZ scan HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . Inhoud van de 'Gedeelde Taken' map 2010-07-05 c:\windows\Tasks\1-klik Onderhoud.job - c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2009-04-27 13:51] 2010-07-05 c:\windows\Tasks\Google Software Updater.job - c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-13 08:46] 2010-07-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-05-16 07:54] 2010-07-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-05-16 07:54] 2010-07-05 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-786010562-3885121150-2963765948-1000Core.job - c:\users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe [2009-04-18 14:49] 2010-07-05 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-786010562-3885121150-2963765948-1000UA.job - c:\users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe [2009-04-18 14:49] 2010-07-05 c:\windows\Tasks\User_Feed_Synchronization-{4D4AA6C7-C1FB-4CD5-83A3-F10056D36B3F}.job - c:\windows\system32\msfeedssync.exe [2010-06-09 04:30] . . ------- Bijkomende Scan ------- . uInternet Settings,ProxyOverride = *.local IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: Add to Windows &Live Favorites - Welcome to Windows Live IE: Append to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert link target to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert link target to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert selected links to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html IE: Convert selected links to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html IE: Convert selection to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert selection to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2010-07-05 19:57 Windows 6.0.6002 Service Pack 2 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: 0 ************************************************************************** . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- [HKEY_USERS\S-1-5-21-786010562-3885121150-2963765948-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{BD04728F-9192-6B05-B051-4594A84D0BF9}*] "hakmfkdlbpeomjbn"=hex:6a,61,65,70,6c,66,6e,65,67,6e,6a,6a,69,64,62,63,6b,66, 63,6c,00,07 "iaincidjhffejbbbdd"=hex:6a,61,65,70,6c,66,6e,65,67,6e,6a,6a,69,64,62,63,6b,66, 63,6c,00,08 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . --------------------- DLLs Geladen Onder Lopende Processen --------------------- - - - - - - - > 'Explorer.exe'(2884) c:\acer\Empowering Technology\eDataSecurity\x86\eDSWinMailHook.dll c:\acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll c:\acer\Empowering Technology\eDataSecurity\x86\sysenv.dll c:\windows\System32\netshell.dll c:\windows\System32\npmproxy.dll c:\windows\system32\Wlanapi.dll c:\windows\system32\OneX.DLL c:\windows\system32\eappcfg.dll c:\windows\system32\mssprxy.dll . Voltooingstijd: 2010-07-05 20:06:26 ComboFix-quarantined-files.txt 2010-07-05 18:06 ComboFix2.txt 2010-07-03 10:20 ComboFix3.txt 2010-07-02 07:22 ComboFix4.txt 2010-04-29 15:42 Pre-Run: 72.725.180.416 bytes beschikbaar Post-Run: 72.599.023.616 bytes beschikbaar - - End Of File - - 5DAC0198F7993C22C93E68D0B76CC1D9

Ik gebruik alleen Bitdefender.... Norton is van mijn systeem weg, ik gebruikte dit vroeger. van die andere, kapersky heb ik nog nooit gebruikt.ASquared, heb ik ooit eens gebruikt om een scan te doen maar is ook niet meer op mijn systeem.

vervolgverhaal.... COMBOFIX LOG ComboFix 10-07-01.02 - Eddy 03/07/2010 12:07:21.3.2 - x86 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.32.1043.18.3071.1596 [GMT 2:00] Gestart vanuit: c:\users\Eddy\Desktop\scan.exe AV: Kaspersky Internet Security *On-access scanning enabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0} AV: Norton Internet Security *On-access scanning enabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8} AV: Windows Live OneCare *On-access scanning disabled* (Updated) {427ADFC3-B354-4A51-BE34-A9D4218E45C4} FW: Kaspersky Internet Security *enabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0} FW: Norton Internet Security *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220} FW: Windows Live OneCare - Firewall *disabled* {A3899D22-27E6-4A7E-AE4E-2C106646DAAB} SP: Kaspersky Internet Security *enabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0} SP: Norton Internet Security *enabled* (Updated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A} SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} SP: Windows Live OneCare *disabled* (Updated) {CC7E50BA-BA8C-4DDE-B5AC-EA53BC38D01B} . (((((((((((((((((((( Bestanden Gemaakt van 2010-06-03 to 2010-07-03 )))))))))))))))))))))))))))))) . 2010-07-03 10:16 . 2010-07-03 10:16 -------- d-----w- c:\users\Eddy\AppData\Local\temp 2010-07-03 10:16 . 2010-07-03 10:16 -------- d-----w- c:\users\Public\AppData\Local\temp 2010-07-03 10:16 . 2010-07-03 10:16 -------- d-----w- c:\users\Default\AppData\Local\temp 2010-06-29 19:50 . 2010-06-29 19:50 -------- d-----w- c:\program files\ESET 2010-06-26 15:33 . 2010-06-26 16:16 -------- d-----w- c:\programdata\BitDefender 2010-06-26 15:33 . 2010-06-26 15:34 -------- d-----w- c:\users\Eddy\AppData\Roaming\BitDefender 2010-06-26 15:20 . 2010-06-26 16:16 -------- d-----w- c:\program files\Common Files\BitDefender 2010-06-26 15:18 . 2010-06-26 15:20 305297 ----a-w- C:\BdUninstallTool2010.06.26-05.18.28.reg 2010-06-26 08:16 . 2010-06-26 08:16 -------- d-----w- c:\program files\IncrediMail 2010-06-25 13:19 . 2010-06-25 13:19 -------- d-----w- c:\program files\Common Files\Java 2010-06-25 10:18 . 2009-05-18 11:17 26600 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys 2010-06-25 10:18 . 2008-04-17 10:12 107368 ----a-w- c:\windows\system32\GEARAspi.dll 2010-06-25 10:17 . 2010-06-25 10:17 -------- d-----w- c:\program files\iPod 2010-06-25 10:17 . 2010-06-25 10:18 -------- d-----w- c:\programdata\{429CAD59-35B1-4DBC-BB6D-1DB246563521} 2010-06-25 10:17 . 2010-06-25 10:18 -------- d-----w- c:\program files\iTunes 2010-06-25 10:13 . 2010-06-25 10:13 -------- d-----w- c:\program files\Bonjour 2010-06-25 10:12 . 2010-06-25 10:12 72504 ----a-w- c:\programdata\Apple Computer\Installer Cache\iTunes 9.2.0.61\SetupAdmin.exe 2010-06-24 09:27 . 2010-06-24 09:27 -------- d-----w- c:\users\Eddy\AppData\Local\ReaJPEG 2010-06-24 08:45 . 2010-06-24 08:45 44544 ------w- c:\windows\AWuninstall.exe 2010-06-24 08:45 . 2010-06-24 08:45 -------- d-----w- c:\program files\Lokas 2010-06-24 07:29 . 2009-11-08 08:55 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll 2010-06-24 07:29 . 2009-11-08 08:55 49472 ----a-w- c:\windows\system32\netfxperf.dll 2010-06-24 07:29 . 2009-11-08 08:55 297808 ----a-w- c:\windows\system32\mscoree.dll 2010-06-24 07:29 . 2009-11-08 08:55 295264 ----a-w- c:\windows\system32\PresentationHost.exe 2010-06-24 07:29 . 2009-11-08 08:55 1130824 ----a-w- c:\windows\system32\dfshim.dll 2010-06-24 05:45 . 2010-04-16 16:43 28672 ----a-w- c:\windows\system32\Apphlpdm.dll 2010-06-24 05:45 . 2010-04-16 14:39 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll 2010-06-20 19:24 . 2010-06-20 19:24 -------- d-----w- c:\programdata\PhotoMail 2010-06-20 19:24 . 2010-06-20 19:24 -------- d-----w- c:\program files\PhotoMail Maker 2010-06-18 13:03 . 2010-06-18 13:03 -------- d-----w- c:\program files\Xiph.Org 2010-06-16 08:17 . 2010-06-16 08:17 -------- d-----w- c:\users\Eddy\AppData\Roaming\No Company Name 2010-06-16 07:56 . 2010-06-16 07:56 -------- d-----w- c:\programdata\eSellerate 2010-06-16 07:56 . 2010-06-16 13:55 -------- d-----w- c:\programdata\SmartSound Software Inc 2010-06-16 07:56 . 2010-06-16 07:56 -------- d-----w- c:\program files\SmartSound Software 2010-06-05 08:21 . 2010-06-05 08:21 -------- d-----w- c:\program files\Project1 2010-06-05 08:09 . 2010-06-05 08:09 -------- d-----w- c:\program files\LottoPro 2009 2010-06-05 08:05 . 2010-06-05 08:21 249856 ------w- c:\windows\Setup1.exe 2010-06-05 08:05 . 2010-06-05 08:21 73216 ----a-w- c:\windows\ST6UNST.EXE 2010-06-05 06:29 . 2010-06-05 06:29 -------- d-----w- c:\users\Eddy\AppData\Local\EgisTec IPS 2010-06-04 06:16 . 2010-06-04 06:38 -------- d-----w- c:\program files\NVIDIA Corporation 2010-06-03 17:25 . 2010-06-03 17:25 -------- d-----w- c:\program files\Uniblue . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-07-03 09:49 . 2007-12-06 07:50 -------- d-----w- c:\program files\Common Files\Symantec Shared 2010-07-03 09:49 . 2009-04-06 09:11 -------- d-----w- c:\program files\a-squared Free 2010-06-30 13:57 . 2009-12-03 09:16 -------- d-----w- c:\programdata\PrinterShare 2010-06-26 16:25 . 2009-07-24 09:26 291352 ----a-w- c:\windows\system32\drivers\bdfsfltr.sys 2010-06-26 16:24 . 2009-10-19 14:04 72784 ----a-w- c:\windows\system32\drivers\BdfNdisf6.sys 2010-06-25 15:01 . 2009-06-12 16:01 -------- d-----w- c:\users\Eddy\AppData\Roaming\Apple Computer 2010-06-25 13:19 . 2010-05-11 06:47 411368 ----a-w- c:\windows\system32\deployJava1.dll 2010-06-25 10:17 . 2009-06-12 15:58 -------- d-----w- c:\program files\Common Files\Apple 2010-06-24 09:28 . 2010-04-24 13:24 -------- d-----w- c:\program files\WatermarkSoftware 2010-06-18 14:55 . 2006-11-02 16:11 735382 ----a-w- c:\windows\system32\perfh013.dat 2010-06-18 14:55 . 2006-11-02 16:11 152096 ----a-w- c:\windows\system32\perfc013.dat 2010-06-17 06:45 . 2007-12-06 07:16 -------- d--h--w- c:\program files\InstallShield Installation Information 2010-06-16 09:50 . 2009-07-05 14:42 -------- d-----w- c:\users\Eddy\AppData\Roaming\Download Manager 2010-06-16 08:45 . 2008-05-27 14:31 108712 ----a-w- c:\users\Eddy\AppData\Local\GDIPFONTCACHEV1.DAT 2010-06-16 08:17 . 2009-04-04 11:28 -------- d-----w- c:\programdata\FLEXnet 2010-06-16 07:54 . 2009-07-14 12:54 -------- d-----w- c:\program files\Common Files\PX Storage Engine 2010-06-16 07:54 . 2007-12-06 07:59 -------- d-----w- c:\program files\Common Files\Adobe 2010-06-09 08:17 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail 2010-06-09 07:31 . 2007-12-06 07:20 -------- d-----w- c:\programdata\Microsoft Help 2010-06-04 07:35 . 2010-03-17 16:58 -------- d-----w- c:\users\Eddy\AppData\Roaming\OxelonMC 2010-06-04 06:55 . 2008-05-28 09:18 -------- d-----w- c:\program files\Microsoft Silverlight 2010-06-04 06:31 . 2010-06-04 06:31 34805 ----a-w- c:\programdata\nvModes.dat 2010-06-04 06:31 . 2007-12-06 07:12 -------- d-----w- c:\programdata\NVIDIA 2010-06-01 05:49 . 2010-06-01 05:49 4 ----a-w- c:\windows\system32\aspdict-en.dat 2010-06-01 05:49 . 2010-06-01 05:49 16 ----a-w- c:\windows\system32\asdict.dat 2010-05-29 09:40 . 2010-05-29 09:40 -------- d-----w- c:\users\Eddy\AppData\Roaming\JLC's Software 2010-05-29 09:39 . 2010-05-29 09:39 -------- d-----w- c:\program files\JLC's Software 2010-05-26 17:06 . 2010-06-09 05:44 34304 ----a-w- c:\windows\system32\atmlib.dll 2010-05-26 14:47 . 2010-06-09 05:44 289792 ----a-w- c:\windows\system32\atmfd.dll 2010-05-26 07:46 . 2009-04-04 09:27 -------- d-----w- c:\program files\Microsoft 2010-05-20 11:57 . 2009-05-24 08:57 -------- d-----w- c:\users\Eddy\AppData\Roaming\Test-A 2010-05-18 14:35 . 2010-05-18 14:35 91424 ----a-w- c:\windows\system32\dnssd.dll 2010-05-18 14:35 . 2010-05-18 14:35 197920 ----a-w- c:\windows\system32\dnssdX.dll 2010-05-18 14:35 . 2010-05-18 14:35 107808 ----a-w- c:\windows\system32\dns-sd.exe 2010-05-16 07:56 . 2009-04-13 11:10 -------- d-----w- c:\program files\Google 2010-05-11 06:47 . 2009-04-04 07:16 -------- d-----w- c:\program files\Java 2010-05-05 07:23 . 2010-05-05 07:23 -------- d-----w- c:\windows\Fonts\Fonts 2010-05-05 07:03 . 2009-04-04 15:22 -------- d-----w- c:\users\Eddy\AppData\Roaming\uTorrent 2010-05-04 05:59 . 2010-06-09 05:44 916480 ----a-w- c:\windows\system32\wininet.dll 2010-05-04 05:55 . 2010-06-09 05:44 71680 ----a-w- c:\windows\system32\iesetup.dll 2010-05-04 05:55 . 2010-06-09 05:44 109056 ----a-w- c:\windows\system32\iesysprep.dll 2010-05-04 04:31 . 2010-06-09 05:44 133632 ----a-w- c:\windows\system32\ieUnatt.exe 2010-05-01 14:13 . 2010-06-09 05:44 2037248 ----a-w- c:\windows\system32\win32k.sys 2010-05-01 06:36 . 2010-02-22 10:45 7592 ----a-w- c:\users\Eddy\AppData\Local\d3d9caps.dat 2010-04-28 12:53 . 2010-04-28 12:55 3974440 ----a-w- c:\windows\system32\AdvrCntr3.dll 2010-04-27 09:40 . 2010-05-20 12:00 16384 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\MTPC-MTTG\Syncfusion.Tools.Base.dll 2010-04-26 14:39 . 2010-05-20 12:00 24576 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\SystemInfoLib.dll 2010-04-26 14:39 . 2010-05-20 12:00 20480 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\SystemInfo.exe 2010-04-26 14:39 . 2010-05-20 12:00 11264 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\PersonalCode.dll 2010-04-26 14:39 . 2010-05-20 12:00 61440 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\MultitaxUtilities.dll 2010-04-26 14:39 . 2010-05-20 12:00 40960 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\ITools.dll 2010-04-26 14:39 . 2010-05-20 12:00 24576 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\Updater.dll 2010-04-26 14:39 . 2010-05-20 12:00 1511424 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\MultitaxStarter.exe 2010-04-26 14:39 . 2010-05-20 12:00 36864 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\ITools.dll 2010-04-26 14:39 . 2010-05-20 12:00 217088 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\ICSharpCode.SharpZipLib.dll 2010-04-26 14:39 . 2010-05-20 12:00 24576 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\ExceptionHandler.dll 2010-04-23 14:13 . 2010-05-26 05:47 2048 ----a-w- c:\windows\system32\tzres.dll 2010-04-22 11:36 . 2010-04-22 11:36 283648 ----a-w- c:\windows\uninst.exe 2010-04-16 16:43 . 2010-06-24 05:45 173056 ----a-w- c:\windows\AppPatch\AcXtrnal.dll 2010-04-16 16:43 . 2010-06-24 05:45 458752 ----a-w- c:\windows\AppPatch\AcSpecfc.dll 2010-04-16 16:43 . 2010-06-24 05:45 542720 ----a-w- c:\windows\AppPatch\AcLayers.dll 2010-04-16 16:43 . 2010-06-24 05:45 2159616 ----a-w- c:\windows\AppPatch\AcGenral.dll 2010-04-05 17:01 . 2010-06-09 05:44 67072 ----a-w- c:\windows\system32\asycfilt.dll . ((((((((((((((((((((((((((((( SnapShot@2010-07-02_07.18.28 ))))))))))))))))))))))))))))))))))))))))) . + 2007-12-06 07:12 . 2010-07-03 06:36 92240 c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin - 2006-11-02 13:05 . 2010-07-02 05:26 84168 c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin + 2006-11-02 13:05 . 2010-07-03 06:36 84168 c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin - 2008-05-27 14:32 . 2010-07-02 05:26 18792 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-786010562-3885121150-2963765948-1000_UserData.bin + 2008-05-27 14:32 . 2010-07-03 06:36 18792 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-786010562-3885121150-2963765948-1000_UserData.bin - 2008-05-27 14:28 . 2010-07-02 06:29 32768 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2008-05-27 14:28 . 2010-07-03 09:40 32768 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2008-05-27 14:28 . 2010-07-02 06:29 65536 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2008-05-27 14:28 . 2010-07-03 09:40 65536 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2008-05-27 14:28 . 2010-07-02 06:29 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2008-05-27 14:28 . 2010-07-03 09:40 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2009-07-05 08:24 . 2010-07-02 05:23 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2009-07-05 08:24 . 2010-07-03 06:33 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2008-05-27 15:16 . 2010-07-03 06:34 40960 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\rtdrvmon.exe - 2008-05-27 15:16 . 2010-07-02 05:24 40960 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\rtdrvmon.exe + 2009-07-05 08:24 . 2010-07-03 06:33 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2009-07-05 08:24 . 2010-07-02 05:23 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2009-07-05 08:24 . 2010-07-03 06:33 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2009-07-05 08:24 . 2010-07-02 05:23 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2010-07-03 06:33 . 2010-07-03 06:33 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat - 2010-07-02 05:23 . 2010-07-02 05:23 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat - 2010-07-02 05:23 . 2010-07-02 05:23 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2010-07-03 06:33 . 2010-07-03 06:33 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat - 2009-05-01 17:33 . 2010-06-30 14:08 245760 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat + 2009-05-01 17:33 . 2010-07-02 07:52 245760 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2009-04-13 12:47 121392 ----a-w- c:\acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-05-03 39408] "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952] "Google Update"="c:\users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe" [2009-04-18 133104] "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240] "CAHeadless"="c:\program files\Adobe\Elements Organizer 8.0\CAHeadless\ElementsAutoAnalyzer.exe" [2009-09-18 615808] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "lxbkbmgr.exe"="c:\program files\Lexmark X1100 Series\lxbkbmgr.exe" [2008-02-28 74408] "Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-19 1008184] "RtHDVCpl"="RtHDVCpl.exe" [2007-10-11 4702208] "NVRaidService"="c:\windows\system32\nvraidservice.exe" [2007-12-07 196128] "Lexmark X1100 Series"="c:\program files\Lexmark X1100 Series\lxbkbmgr.exe" [2008-02-28 74408] "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072] "eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe" [2009-04-13 526896] "AutoLockProcess"="c:\acer\Empowering Technology\eLock\autolockprocess\autolockprocess.exe" [2008-01-23 561152] "Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [2008-10-14 623992] "Acer Empowering Technology Monitor"="c:\acer\Empowering Technology\SysMonitor.exe" [2006-12-25 319488] "beid"="c:\program files\Belgium Identity Card\beid35gui.exe" [2009-02-02 2035712] "AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712] "Skytel"="Skytel.exe" [2007-10-11 1826816] "ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-03-18 207360] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832] "Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-03-29 1086856] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-03-17 421888] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-06-15 141624] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040] "BDAgent"="c:\program files\BitDefender\BitDefender 2010\bdagent.exe" [2010-06-26 1123360] "BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2010\IEShow.exe" [2009-10-19 71152] c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2008-5-30 113664] Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe [2007-12-6 535336] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "NoResolveTrack"= 1 (0x1) "NoFileAssociate"= 0 (0x0) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend] @="Service" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "Google Update"="c:\users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe" /c [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc] "VistaSp2"=hex(:1c,90,67,b4,0b,44,ca,01 R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-05-16 136176] R3 Arrakis3;BitDefender Arrakis-server;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe [2009-10-19 183880] R3 WSVD;WSVD;c:\windows\system32\drivers\WSVD.sys [2007-12-16 75776] R4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2008-07-11 47128] R4 RsFx0102;RsFx0102 Driver;c:\windows\system32\DRIVERS\RsFx0102.sys [2008-07-10 242712] R4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2008-07-11 369688] S0 eLock2BurnerLockDriver;Disk Performance Monitor Filter Driver;c:\windows\system32\DRIVERS\eLock2BurnerLockDriver.sys [2008-01-10 22048] S1 archlp;archlp;c:\windows\system32\drivers\archlp.sys [2008-01-29 11392] S1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver;c:\windows\system32\DRIVERS\BdfNdisf6.sys [2010-06-26 72784] S2 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7;c:\program files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe [2008-09-16 169312] S2 BDVEDISK;BDVEDISK;c:\program files\BitDefender\BitDefender 2010\bdvedisk.sys [2010-06-26 85128] S2 eLock2FSCTLDriver;eLock2FSCTLDriver;c:\windows\system32\DRIVERS\eLock2FSCTLDriver.sys [2008-01-23 86048] S2 lxbk_device;lxbk_device;c:\windows\system32\lxbkcoms.exe [2008-02-19 537256] S3 BDFM;BDFM;c:\windows\system32\DRIVERS\bdfm.sys [2010-02-03 153448] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache bdx REG_MULTI_SZ scan HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . Inhoud van de 'Gedeelde Taken' map 2010-07-03 c:\windows\Tasks\1-klik Onderhoud.job - c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2009-04-27 13:51] 2010-07-03 c:\windows\Tasks\Google Software Updater.job - c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-13 08:46] 2010-07-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-05-16 07:54] 2010-07-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-05-16 07:54] 2010-07-02 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-786010562-3885121150-2963765948-1000Core.job - c:\users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe [2009-04-18 14:49] 2010-07-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-786010562-3885121150-2963765948-1000UA.job - c:\users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe [2009-04-18 14:49] 2010-07-03 c:\windows\Tasks\User_Feed_Synchronization-{4D4AA6C7-C1FB-4CD5-83A3-F10056D36B3F}.job - c:\windows\system32\msfeedssync.exe [2010-06-09 04:30] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://mystart.incredimail.com/ uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7 uDefault_Search_URL = hxxp://www.google.com/ie mStart Page = hxxp://nl.intl.acer.yahoo.com uInternet Settings,ProxyOverride = *.local uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://www.google.com/search?q=%s IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: Add to Windows &Live Favorites - Welcome to Windows Live IE: Append to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert link target to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert link target to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert selected links to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html IE: Convert selected links to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html IE: Convert selection to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert selection to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html DPF: {254AA86E-5655-4518-AA87-185D7CC41801} - hxxps://secure.logmeinrescue.com/NL/TechConsole/x86/RescueControl.cab DPF: {3D3B42C2-11BF-4732-A304-A01384B70D68} - hxxp://picasaweb.google.be/s/v/59.20/uploader2.cab DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game09.zylom.com/activex/zylomgamesplayer.cab . . ------- Bestandsassociaties ------- . .txt= . - - - - ORPHANS VERWIJDERD - - - - AddRemove-ToggleDU Toolbar - c:\progra~1\ToggleDU\UNWISE.EXE ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2010-07-03 12:16 Windows 6.0.6002 Service Pack 2 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: 0 ************************************************************************** . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- [HKEY_USERS\S-1-5-21-786010562-3885121150-2963765948-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{BD04728F-9192-6B05-B051-4594A84D0BF9}*] "hakmfkdlbpeomjbn"=hex:6a,61,65,70,6c,66,6e,65,67,6e,6a,6a,69,64,62,63,6b,66, 63,6c,00,07 "iaincidjhffejbbbdd"=hex:6a,61,65,70,6c,66,6e,65,67,6e,6a,6a,69,64,62,63,6b,66, 63,6c,00,08 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . Voltooingstijd: 2010-07-03 12:20:40 ComboFix-quarantined-files.txt 2010-07-03 10:20 ComboFix2.txt 2010-07-02 07:22 ComboFix3.txt 2010-04-29 15:42 Pre-Run: 70.894.981.120 bytes beschikbaar Post-Run: 70.853.234.688 bytes beschikbaar - - End Of File - - 1ECC772D03A3781D9B6E9BA8D421FC8A Hijackthis log Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:59:45, on 3/07/2010 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.18928) Boot mode: Normal Running processes: C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe C:\Windows\system32\Dwm.exe C:\Windows\system32\taskeng.exe C:\Program Files\Lexmark X1100 Series\LXBKbmgr.exe C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe C:\Windows\RtHDVCpl.exe C:\Windows\System32\nvraidservice.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe C:\Acer\Empowering Technology\eLock\autolockprocess\AutoLockProcess.exe C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe C:\Acer\Empowering Technology\SysMonitor.exe C:\Program Files\Belgium Identity Card\beid35gui.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Acer\Empowering Technology\eDataSecurity\x86\eDSDTS.exe C:\Windows\ehome\ehtray.exe C:\Windows\ehome\ehmsas.exe C:\Users\Eddy\AppData\Local\Google\Update\1.2.183.29\GoogleCrashHandler.exe C:\Acer\Empowering Technology\eDataSecurity\x86\MsnVane.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\IncrediMail\Bin\IncMail.exe C:\Program Files\IncrediMail\Bin\ImApp.exe C:\Windows\system32\conime.exe C:\Windows\Explorer.exe C:\Windows\system32\SearchFilterHost.exe C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe F:\virusprog\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MyStart by IncrediMail.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo! UK & Ireland R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll O3 - Toolbar: &Egis Option Pack - {312105C4-2E13-4E10-AF72-F9D79BA077E6} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDsWebmailtb.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2010\IEToolbar.dll O4 - HKLM\..\Run: [lxbkbmgr.exe] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe" O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [NVRaidService] C:\Windows\system32\nvraidservice.exe O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe" O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe O4 - HKLM\..\Run: [AutoLockProcess] C:\Acer\Empowering Technology\eLock\autolockprocess\autolockprocess.exe O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe O4 - HKLM\..\Run: [beid] "C:\Program Files\Belgium Identity Card\beid35gui.exe" /startup O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin O4 - HKLM\..\Run: [skytel] Skytel.exe O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [bDAgent] "C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe" O4 - HKLM\..\Run: [bitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2010\IEShow.exe" O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [Google Update] "C:\Users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKCU\..\Run: [CAHeadless] C:\Program Files\Adobe\Elements Organizer 8.0\CAHeadless\ElementsAutoAnalyzer.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Empowering Technology Launcher.lnk = C:\Acer\Empowering Technology\eAPLauncher.exe O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O8 - Extra context menu item: Add to Windows &Live Favorites - Welcome to Windows Live O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\Program Files\OFFICE11\REFIEBAR.DLL O16 - DPF: {254AA86E-5655-4518-AA87-185D7CC41801} (LogMeIn Rescue Technician Console) - https://secure.logmeinrescue.com/NL/TechConsole/x86/RescueControl.cab O16 - DPF: {3D3B42C2-11BF-4732-A304-A01384B70D68} (UploadListView Class) - http://picasaweb.google.be/s/v/59.20/uploader2.cab O16 - DPF: {44990B00-3C9D-426D-81DF-AAB636FA4345} - https://www-secure.symantec.com/techsupp/asa/ss/sa/sa_cabs/tgctlcm.cab O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.6.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab O16 - DPF: {82774781-8F4E-11D1-AB1C-0000F8773BF0} (DLC Class) - https://transfers.ds.microsoft.com/FTM/TransferSource/grTransferCtrl.cab O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game09.zylom.com/activex/zylomgamesplayer.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe O23 - Service: Adobe Active File Monitor V7 (AdobeActiveFileMonitor7.0) - Adobe Systems Incorporated - C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: BitDefender Arrakis-server (Arrakis3) - BitDefender S.R.L. Antivirus software - BitDefender - The future of security now! - C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: BitDefender Desktop-updateservice (LIVESRV) - BitDefender S.R.L. - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe O23 - Service: lxbk_device - - C:\Windows\system32\lxbkcoms.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe -- End of file - 14102 bytes op naar het vervolg....

na verschillende keer herproberen is combofix gestart en geupdated.. hier de log van combofix ComboFix 10-07-01.02 - Eddy 02/07/2010 9:08.2.2 - x86 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.32.1043.18.3071.1888 [GMT 2:00] Gestart vanuit: c:\users\Eddy\Desktop\scan.exe AV: Kaspersky Internet Security *On-access scanning enabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0} AV: Norton Internet Security *On-access scanning enabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8} AV: Windows Live OneCare *On-access scanning disabled* (Updated) {427ADFC3-B354-4A51-BE34-A9D4218E45C4} FW: Kaspersky Internet Security *enabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0} FW: Norton Internet Security *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220} FW: Windows Live OneCare - Firewall *disabled* {A3899D22-27E6-4A7E-AE4E-2C106646DAAB} SP: Kaspersky Internet Security *enabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0} SP: Norton Internet Security *enabled* (Updated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A} SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} SP: Windows Live OneCare *disabled* (Updated) {CC7E50BA-BA8C-4DDE-B5AC-EA53BC38D01B} . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\windows\system32\OggDSuninst.exe . (((((((((((((((((((( Bestanden Gemaakt van 2010-06-02 to 2010-07-02 )))))))))))))))))))))))))))))) . 2010-07-02 07:18 . 2010-07-02 07:18 -------- d-----w- c:\users\Public\AppData\Local\temp 2010-07-02 07:18 . 2010-07-02 07:18 -------- d-----w- c:\users\Eddy\AppData\Local\temp 2010-07-02 07:18 . 2010-07-02 07:18 -------- d-----w- c:\users\Default\AppData\Local\temp 2010-07-02 06:58 . 2010-07-02 07:04 -------- d-----w- C:\ComboFix 2010-07-02 05:24 . 2009-04-13 12:39 16384 ----a-w- C:\msimg32.dll 2010-06-29 19:50 . 2010-06-29 19:50 -------- d-----w- c:\program files\ESET 2010-06-26 15:33 . 2010-06-26 16:16 -------- d-----w- c:\programdata\BitDefender 2010-06-26 15:33 . 2010-06-26 15:34 -------- d-----w- c:\users\Eddy\AppData\Roaming\BitDefender 2010-06-26 15:20 . 2010-06-26 16:16 -------- d-----w- c:\program files\Common Files\BitDefender 2010-06-26 15:18 . 2010-06-26 15:20 305297 ----a-w- C:\BdUninstallTool2010.06.26-05.18.28.reg 2010-06-26 08:16 . 2010-06-26 08:16 -------- d-----w- c:\program files\IncrediMail 2010-06-25 13:19 . 2010-06-25 13:19 -------- d-----w- c:\program files\Common Files\Java 2010-06-25 10:18 . 2009-05-18 11:17 26600 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys 2010-06-25 10:18 . 2008-04-17 10:12 107368 ----a-w- c:\windows\system32\GEARAspi.dll 2010-06-25 10:17 . 2010-06-25 10:17 -------- d-----w- c:\program files\iPod 2010-06-25 10:17 . 2010-06-25 10:18 -------- d-----w- c:\programdata\{429CAD59-35B1-4DBC-BB6D-1DB246563521} 2010-06-25 10:17 . 2010-06-25 10:18 -------- d-----w- c:\program files\iTunes 2010-06-25 10:13 . 2010-06-25 10:13 -------- d-----w- c:\program files\Bonjour 2010-06-25 10:12 . 2010-06-25 10:12 72504 ----a-w- c:\programdata\Apple Computer\Installer Cache\iTunes 9.2.0.61\SetupAdmin.exe 2010-06-24 09:27 . 2010-06-24 09:27 -------- d-----w- c:\users\Eddy\AppData\Local\ReaJPEG 2010-06-24 08:45 . 2010-06-24 08:45 44544 ------w- c:\windows\AWuninstall.exe 2010-06-24 08:45 . 2010-06-24 08:45 -------- d-----w- c:\program files\Lokas 2010-06-24 07:29 . 2009-11-08 08:55 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll 2010-06-24 07:29 . 2009-11-08 08:55 49472 ----a-w- c:\windows\system32\netfxperf.dll 2010-06-24 07:29 . 2009-11-08 08:55 297808 ----a-w- c:\windows\system32\mscoree.dll 2010-06-24 07:29 . 2009-11-08 08:55 295264 ----a-w- c:\windows\system32\PresentationHost.exe 2010-06-24 07:29 . 2009-11-08 08:55 1130824 ----a-w- c:\windows\system32\dfshim.dll 2010-06-24 05:45 . 2010-04-16 16:43 28672 ----a-w- c:\windows\system32\Apphlpdm.dll 2010-06-24 05:45 . 2010-04-16 14:39 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll 2010-06-20 19:24 . 2010-06-20 19:24 -------- d-----w- c:\programdata\PhotoMail 2010-06-20 19:24 . 2010-06-20 19:24 -------- d-----w- c:\program files\PhotoMail Maker 2010-06-18 13:03 . 2010-06-18 13:03 -------- d-----w- c:\program files\Xiph.Org 2010-06-16 08:17 . 2010-06-16 08:17 -------- d-----w- c:\users\Eddy\AppData\Roaming\No Company Name 2010-06-16 07:56 . 2010-06-16 07:56 -------- d-----w- c:\programdata\eSellerate 2010-06-16 07:56 . 2010-06-16 13:55 -------- d-----w- c:\programdata\SmartSound Software Inc 2010-06-16 07:56 . 2010-06-16 07:56 -------- d-----w- c:\program files\SmartSound Software 2010-06-05 08:21 . 2010-06-05 08:21 -------- d-----w- c:\program files\Project1 2010-06-05 08:09 . 2010-06-05 08:09 -------- d-----w- c:\program files\LottoPro 2009 2010-06-05 08:05 . 2010-06-05 08:21 249856 ------w- c:\windows\Setup1.exe 2010-06-05 08:05 . 2010-06-05 08:21 73216 ----a-w- c:\windows\ST6UNST.EXE 2010-06-05 06:29 . 2010-06-05 06:29 -------- d-----w- c:\users\Eddy\AppData\Local\EgisTec IPS 2010-06-04 06:16 . 2010-06-04 06:38 -------- d-----w- c:\program files\NVIDIA Corporation 2010-06-03 17:25 . 2010-06-03 17:25 -------- d-----w- c:\program files\Uniblue . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-06-30 13:57 . 2009-12-03 09:16 -------- d-----w- c:\programdata\PrinterShare 2010-06-26 16:25 . 2009-07-24 09:26 291352 ----a-w- c:\windows\system32\drivers\bdfsfltr.sys 2010-06-26 16:24 . 2009-10-19 14:04 72784 ----a-w- c:\windows\system32\drivers\BdfNdisf6.sys 2010-06-25 15:01 . 2009-06-12 16:01 -------- d-----w- c:\users\Eddy\AppData\Roaming\Apple Computer 2010-06-25 13:19 . 2010-05-11 06:47 411368 ----a-w- c:\windows\system32\deployJava1.dll 2010-06-25 10:17 . 2009-06-12 15:58 -------- d-----w- c:\program files\Common Files\Apple 2010-06-24 09:28 . 2010-04-24 13:24 -------- d-----w- c:\program files\WatermarkSoftware 2010-06-24 06:18 . 2010-05-03 10:23 -------- d-----w- c:\program files\ToggleDU 2010-06-18 14:55 . 2006-11-02 16:11 735382 ----a-w- c:\windows\system32\perfh013.dat 2010-06-18 14:55 . 2006-11-02 16:11 152096 ----a-w- c:\windows\system32\perfc013.dat 2010-06-17 15:05 . 2009-04-06 09:11 -------- d-----w- c:\program files\a-squared Free 2010-06-17 06:45 . 2007-12-06 07:16 -------- d--h--w- c:\program files\InstallShield Installation Information 2010-06-16 09:50 . 2009-07-05 14:42 -------- d-----w- c:\users\Eddy\AppData\Roaming\Download Manager 2010-06-16 08:45 . 2008-05-27 14:31 108712 ----a-w- c:\users\Eddy\AppData\Local\GDIPFONTCACHEV1.DAT 2010-06-16 08:17 . 2009-04-04 11:28 -------- d-----w- c:\programdata\FLEXnet 2010-06-16 07:54 . 2009-07-14 12:54 -------- d-----w- c:\program files\Common Files\PX Storage Engine 2010-06-16 07:54 . 2007-12-06 07:59 -------- d-----w- c:\program files\Common Files\Adobe 2010-06-09 08:17 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail 2010-06-09 07:31 . 2007-12-06 07:20 -------- d-----w- c:\programdata\Microsoft Help 2010-06-04 07:35 . 2010-03-17 16:58 -------- d-----w- c:\users\Eddy\AppData\Roaming\OxelonMC 2010-06-04 06:55 . 2008-05-28 09:18 -------- d-----w- c:\program files\Microsoft Silverlight 2010-06-04 06:31 . 2010-06-04 06:31 34805 ----a-w- c:\programdata\nvModes.dat 2010-06-04 06:31 . 2007-12-06 07:12 -------- d-----w- c:\programdata\NVIDIA 2010-06-01 05:49 . 2010-06-01 05:49 4 ----a-w- c:\windows\system32\aspdict-en.dat 2010-06-01 05:49 . 2010-06-01 05:49 16 ----a-w- c:\windows\system32\asdict.dat 2010-05-29 09:40 . 2010-05-29 09:40 -------- d-----w- c:\users\Eddy\AppData\Roaming\JLC's Software 2010-05-29 09:39 . 2010-05-29 09:39 -------- d-----w- c:\program files\JLC's Software 2010-05-26 17:06 . 2010-06-09 05:44 34304 ----a-w- c:\windows\system32\atmlib.dll 2010-05-26 14:47 . 2010-06-09 05:44 289792 ----a-w- c:\windows\system32\atmfd.dll 2010-05-26 07:46 . 2009-04-04 09:27 -------- d-----w- c:\program files\Microsoft 2010-05-20 11:57 . 2009-05-24 08:57 -------- d-----w- c:\users\Eddy\AppData\Roaming\Test-A 2010-05-18 14:35 . 2010-05-18 14:35 91424 ----a-w- c:\windows\system32\dnssd.dll 2010-05-18 14:35 . 2010-05-18 14:35 197920 ----a-w- c:\windows\system32\dnssdX.dll 2010-05-18 14:35 . 2010-05-18 14:35 107808 ----a-w- c:\windows\system32\dns-sd.exe 2010-05-16 07:56 . 2009-04-13 11:10 -------- d-----w- c:\program files\Google 2010-05-11 06:47 . 2009-04-04 07:16 -------- d-----w- c:\program files\Java 2010-05-05 07:23 . 2010-05-05 07:23 -------- d-----w- c:\windows\Fonts\Fonts 2010-05-05 07:03 . 2009-04-04 15:22 -------- d-----w- c:\users\Eddy\AppData\Roaming\uTorrent 2010-05-04 05:59 . 2010-06-09 05:44 916480 ----a-w- c:\windows\system32\wininet.dll 2010-05-04 05:55 . 2010-06-09 05:44 71680 ----a-w- c:\windows\system32\iesetup.dll 2010-05-04 05:55 . 2010-06-09 05:44 109056 ----a-w- c:\windows\system32\iesysprep.dll 2010-05-04 04:31 . 2010-06-09 05:44 133632 ----a-w- c:\windows\system32\ieUnatt.exe 2010-05-03 10:23 . 2010-05-03 10:23 -------- d-----w- c:\program files\Conduit 2010-05-01 14:13 . 2010-06-09 05:44 2037248 ----a-w- c:\windows\system32\win32k.sys 2010-05-01 06:36 . 2010-02-22 10:45 7592 ----a-w- c:\users\Eddy\AppData\Local\d3d9caps.dat 2010-04-28 12:53 . 2010-04-28 12:55 3974440 ----a-w- c:\windows\system32\AdvrCntr3.dll 2010-04-27 09:40 . 2010-05-20 12:00 16384 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\MTPC-MTTG\Syncfusion.Tools.Base.dll 2010-04-26 14:39 . 2010-05-20 12:00 24576 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\SystemInfoLib.dll 2010-04-26 14:39 . 2010-05-20 12:00 20480 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\SystemInfo.exe 2010-04-26 14:39 . 2010-05-20 12:00 11264 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\PersonalCode.dll 2010-04-26 14:39 . 2010-05-20 12:00 61440 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\MultitaxUtilities.dll 2010-04-26 14:39 . 2010-05-20 12:00 40960 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\ITools.dll 2010-04-26 14:39 . 2010-05-20 12:00 24576 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\Updater.dll 2010-04-26 14:39 . 2010-05-20 12:00 1511424 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\MultitaxStarter.exe 2010-04-26 14:39 . 2010-05-20 12:00 36864 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\ITools.dll 2010-04-26 14:39 . 2010-05-20 12:00 217088 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\ICSharpCode.SharpZipLib.dll 2010-04-26 14:39 . 2010-05-20 12:00 24576 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\ExceptionHandler.dll 2010-04-23 14:13 . 2010-05-26 05:47 2048 ----a-w- c:\windows\system32\tzres.dll 2010-04-22 11:36 . 2010-04-22 11:36 283648 ----a-w- c:\windows\uninst.exe 2010-04-16 16:43 . 2010-06-24 05:45 173056 ----a-w- c:\windows\AppPatch\AcXtrnal.dll 2010-04-16 16:43 . 2010-06-24 05:45 458752 ----a-w- c:\windows\AppPatch\AcSpecfc.dll 2010-04-16 16:43 . 2010-06-24 05:45 542720 ----a-w- c:\windows\AppPatch\AcLayers.dll 2010-04-16 16:43 . 2010-06-24 05:45 2159616 ----a-w- c:\windows\AppPatch\AcGenral.dll 2010-04-05 17:01 . 2010-06-09 05:44 67072 ----a-w- c:\windows\system32\asycfilt.dll . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2009-04-13 12:47 121392 ----a-w- c:\acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-05-03 39408] "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952] "Google Update"="c:\users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe" [2009-04-18 133104] "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240] "CAHeadless"="c:\program files\Adobe\Elements Organizer 8.0\CAHeadless\ElementsAutoAnalyzer.exe" [2009-09-18 615808] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "lxbkbmgr.exe"="c:\program files\Lexmark X1100 Series\lxbkbmgr.exe" [2008-02-28 74408] "Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-19 1008184] "RtHDVCpl"="RtHDVCpl.exe" [2007-10-11 4702208] "NVRaidService"="c:\windows\system32\nvraidservice.exe" [2007-12-07 196128] "Lexmark X1100 Series"="c:\program files\Lexmark X1100 Series\lxbkbmgr.exe" [2008-02-28 74408] "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072] "eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe" [2009-04-13 526896] "AutoLockProcess"="c:\acer\Empowering Technology\eLock\autolockprocess\autolockprocess.exe" [2008-01-23 561152] "Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [2008-10-14 623992] "Acer Empowering Technology Monitor"="c:\acer\Empowering Technology\SysMonitor.exe" [2006-12-25 319488] "beid"="c:\program files\Belgium Identity Card\beid35gui.exe" [2009-02-02 2035712] "AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712] "Skytel"="Skytel.exe" [2007-10-11 1826816] "ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-03-18 207360] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832] "Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-03-29 1086856] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-03-17 421888] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-06-15 141624] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040] "BDAgent"="c:\program files\BitDefender\BitDefender 2010\bdagent.exe" [2010-06-26 1123360] "BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2010\IEShow.exe" [2009-10-19 71152] c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2008-5-30 113664] Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe [2007-12-6 535336] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "NoResolveTrack"= 1 (0x1) "NoFileAssociate"= 0 (0x0) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend] @="Service" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "Google Update"="c:\users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe" /c [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc] "VistaSp2"=hex(:1c,90,67,b4,0b,44,ca,01 R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-05-16 136176] R3 Arrakis3;BitDefender Arrakis-server;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe [2009-10-19 183880] R3 WSVD;WSVD;c:\windows\system32\drivers\WSVD.sys [2007-12-16 75776] R4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2008-07-11 47128] R4 RsFx0102;RsFx0102 Driver;c:\windows\system32\DRIVERS\RsFx0102.sys [2008-07-10 242712] R4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2008-07-11 369688] S0 eLock2BurnerLockDriver;Disk Performance Monitor Filter Driver;c:\windows\system32\DRIVERS\eLock2BurnerLockDriver.sys [2008-01-10 22048] S1 archlp;archlp;c:\windows\system32\drivers\archlp.sys [2008-01-29 11392] S1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver;c:\windows\system32\DRIVERS\BdfNdisf6.sys [2010-06-26 72784] S2 a2free;a-squared Free Service;c:\program files\a-squared Free\a2service.exe [2010-06-17 1872320] S2 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7;c:\program files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe [2008-09-16 169312] S2 BDVEDISK;BDVEDISK;c:\program files\BitDefender\BitDefender 2010\bdvedisk.sys [2010-06-26 85128] S2 eLock2FSCTLDriver;eLock2FSCTLDriver;c:\windows\system32\DRIVERS\eLock2FSCTLDriver.sys [2008-01-23 86048] S2 lxbk_device;lxbk_device;c:\windows\system32\lxbkcoms.exe [2008-02-19 537256] S3 BDFM;BDFM;c:\windows\system32\DRIVERS\bdfm.sys [2010-02-03 153448] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache bdx REG_MULTI_SZ scan HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . Inhoud van de 'Gedeelde Taken' map 2010-07-02 c:\windows\Tasks\1-klik Onderhoud.job - c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2009-04-27 13:51] 2010-07-02 c:\windows\Tasks\Google Software Updater.job - c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-13 08:46] 2010-07-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-05-16 07:54] 2010-07-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-05-16 07:54] 2010-06-30 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-786010562-3885121150-2963765948-1000Core.job - c:\users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe [2009-04-18 14:49] 2010-07-02 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-786010562-3885121150-2963765948-1000UA.job - c:\users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe [2009-04-18 14:49] 2010-07-02 c:\windows\Tasks\User_Feed_Synchronization-{4D4AA6C7-C1FB-4CD5-83A3-F10056D36B3F}.job - c:\windows\system32\msfeedssync.exe [2010-06-09 04:30] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://mystart.incredimail.com/ uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7 uDefault_Search_URL = hxxp://www.google.com/ie mStart Page = hxxp://nl.intl.acer.yahoo.com uInternet Settings,ProxyOverride = *.local uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://www.google.com/search?q=%s IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: Add to Windows &Live Favorites - Welcome to Windows Live IE: Append to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert link target to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert link target to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert selected links to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html IE: Convert selected links to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html IE: Convert selection to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert selection to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html DPF: {254AA86E-5655-4518-AA87-185D7CC41801} - hxxps://secure.logmeinrescue.com/NL/TechConsole/x86/RescueControl.cab DPF: {3D3B42C2-11BF-4732-A304-A01384B70D68} - hxxp://picasaweb.google.be/s/v/59.20/uploader2.cab DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game09.zylom.com/activex/zylomgamesplayer.cab . . ------- Bestandsassociaties ------- . .txt= . - - - - ORPHANS VERWIJDERD - - - - WebBrowser-{3AD798D0-4642-4C55-BC14-CFE7DD19E0D1} - (no file) AddRemove-3D Shadow by Lokas Software - c:\windows\AWuninstall.exe Software\Lokas Ltd\3D Shadow AddRemove-OggDS - c:\windows\system32\OggDSuninst.exe ************************************************************************** scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: ************************************************************************** . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- [HKEY_USERS\S-1-5-21-786010562-3885121150-2963765948-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{BD04728F-9192-6B05-B051-4594A84D0BF9}*] "hakmfkdlbpeomjbn"=hex:6a,61,65,70,6c,66,6e,65,67,6e,6a,6a,69,64,62,63,6b,66, 63,6c,00,07 "iaincidjhffejbbbdd"=hex:6a,61,65,70,6c,66,6e,65,67,6e,6a,6a,69,64,62,63,6b,66, 63,6c,00,08 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . Voltooingstijd: 2010-07-02 09:22:47 ComboFix-quarantined-files.txt 2010-07-02 07:22 ComboFix2.txt 2010-04-29 15:42 Pre-Run: 72.367.013.888 bytes beschikbaar Post-Run: 72.130.285.568 bytes beschikbaar - - End Of File - - B5D0C053A227EE23E29FC45E15F6DE5A De log van Hijjackthis Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 9:23:26, on 2/07/2010 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.18928) Boot mode: Normal Running processes: C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe C:\Windows\system32\Dwm.exe C:\Windows\system32\taskeng.exe C:\Program Files\Lexmark X1100 Series\LXBKbmgr.exe C:\Windows\RtHDVCpl.exe C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe C:\Windows\System32\nvraidservice.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe C:\Acer\Empowering Technology\eLock\autolockprocess\AutoLockProcess.exe C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe C:\Acer\Empowering Technology\SysMonitor.exe C:\Program Files\Belgium Identity Card\beid35gui.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Windows\ehome\ehmsas.exe C:\Users\Eddy\AppData\Local\Google\Update\1.2.183.29\GoogleCrashHandler.exe C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE C:\Acer\Empowering Technology\eDataSecurity\x86\MsnVane.exe C:\Acer\Empowering Technology\eDataSecurity\x86\eDSDTS.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\IncrediMail\Bin\IncMail.exe C:\Program Files\IncrediMail\Bin\ImApp.exe C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe C:\Windows\system32\conime.exe C:\scan\CF18810.cfxxe C:\scan\mbr.cfxxe C:\Windows\system32\SearchFilterHost.exe C:\Windows\explorer.exe F:\virusprog\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MyStart by IncrediMail.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo! UK & Ireland R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll O3 - Toolbar: &Egis Option Pack - {312105C4-2E13-4E10-AF72-F9D79BA077E6} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDsWebmailtb.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2010\IEToolbar.dll O4 - HKLM\..\Run: [lxbkbmgr.exe] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe" O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [NVRaidService] C:\Windows\system32\nvraidservice.exe O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe" O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe O4 - HKLM\..\Run: [AutoLockProcess] C:\Acer\Empowering Technology\eLock\autolockprocess\autolockprocess.exe O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe O4 - HKLM\..\Run: [beid] "C:\Program Files\Belgium Identity Card\beid35gui.exe" /startup O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin O4 - HKLM\..\Run: [skytel] Skytel.exe O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [bDAgent] "C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe" O4 - HKLM\..\Run: [bitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2010\IEShow.exe" O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [Google Update] "C:\Users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKCU\..\Run: [CAHeadless] C:\Program Files\Adobe\Elements Organizer 8.0\CAHeadless\ElementsAutoAnalyzer.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Empowering Technology Launcher.lnk = C:\Acer\Empowering Technology\eAPLauncher.exe O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O8 - Extra context menu item: Add to Windows &Live Favorites - Welcome to Windows Live O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\Program Files\OFFICE11\REFIEBAR.DLL O16 - DPF: {254AA86E-5655-4518-AA87-185D7CC41801} (LogMeIn Rescue Technician Console) - https://secure.logmeinrescue.com/NL/TechConsole/x86/RescueControl.cab O16 - DPF: {3D3B42C2-11BF-4732-A304-A01384B70D68} (UploadListView Class) - http://picasaweb.google.be/s/v/59.20/uploader2.cab O16 - DPF: {44990B00-3C9D-426D-81DF-AAB636FA4345} - https://www-secure.symantec.com/techsupp/asa/ss/sa/sa_cabs/tgctlcm.cab O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.6.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab O16 - DPF: {82774781-8F4E-11D1-AB1C-0000F8773BF0} (DLC Class) - https://transfers.ds.microsoft.com/FTM/TransferSource/grTransferCtrl.cab O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game09.zylom.com/activex/zylomgamesplayer.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe O23 - Service: Adobe Active File Monitor V7 (AdobeActiveFileMonitor7.0) - Adobe Systems Incorporated - C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: BitDefender Arrakis-server (Arrakis3) - BitDefender S.R.L. Antivirus software - BitDefender - The future of security now! - C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: BitDefender Desktop-updateservice (LIVESRV) - BitDefender S.R.L. - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE O23 - Service: lxbk_device - - C:\Windows\system32\lxbkcoms.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: Planner voor Automatische LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: Symantec RemoteAssist - Symantec, Inc. - C:\Program Files\Common Files\Symantec Shared\Support Controls\ssrc.exe O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe -- End of file - 14619 bytes Hopelijk komt er iets te voorschijn ??? Eddy

Niet te geloven.... combofix weigert te openen...! Zie bijgevoegde knipsels

niets te vinden met bovenstaande scanner....

Bovenstaande win32.worm.downadup.gen wil alvast niet worden aangesproken.... verdacht. Hier de Logfile... Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 15:32:53, on 29/06/2010 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.18928) Boot mode: Normal Running processes: C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Program Files\Lexmark X1100 Series\LXBKbmgr.exe C:\Windows\RtHDVCpl.exe C:\Windows\System32\nvraidservice.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe C:\Acer\Empowering Technology\eLock\autolockprocess\AutoLockProcess.exe C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe C:\Acer\Empowering Technology\SysMonitor.exe C:\Program Files\Belgium Identity Card\beid35gui.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Windows\ehome\ehmsas.exe C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE C:\Acer\Empowering Technology\eDataSecurity\x86\MsnVane.exe C:\Users\Eddy\AppData\Local\Google\Update\1.2.183.29\GoogleCrashHandler.exe C:\Acer\Empowering Technology\eDataSecurity\x86\eDSDTS.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\IncrediMail\Bin\IncMail.exe C:\Program Files\IncrediMail\Bin\ImApp.exe C:\Program Files\Avant Browser\avant.exe C:\Windows\system32\taskeng.exe F:\virusprog\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MyStart by IncrediMail.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo! UK & Ireland R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local O1 - Hosts: ::1 localhost O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll O3 - Toolbar: &Egis Option Pack - {312105C4-2E13-4E10-AF72-F9D79BA077E6} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDsWebmailtb.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2010\IEToolbar.dll O4 - HKLM\..\Run: [lxbkbmgr.exe] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe" O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [NVRaidService] C:\Windows\system32\nvraidservice.exe O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe" O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe O4 - HKLM\..\Run: [AutoLockProcess] C:\Acer\Empowering Technology\eLock\autolockprocess\autolockprocess.exe O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe O4 - HKLM\..\Run: [beid] "C:\Program Files\Belgium Identity Card\beid35gui.exe" /startup O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin O4 - HKLM\..\Run: [skytel] Skytel.exe O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [bDAgent] "C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe" O4 - HKLM\..\Run: [bitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2010\IEShow.exe" O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [PrinterShare] C:\Program Files\PrinterShare\paConsole.exe -minimized O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [Google Update] "C:\Users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKCU\..\Run: [CAHeadless] C:\Program Files\Adobe\Elements Organizer 8.0\CAHeadless\ElementsAutoAnalyzer.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Empowering Technology Launcher.lnk = C:\Acer\Empowering Technology\eAPLauncher.exe O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O8 - Extra context menu item: Add to Windows &Live Favorites - Welcome to Windows Live O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\Program Files\OFFICE11\REFIEBAR.DLL O16 - DPF: {254AA86E-5655-4518-AA87-185D7CC41801} (LogMeIn Rescue Technician Console) - https://secure.logmeinrescue.com/NL/TechConsole/x86/RescueControl.cab O16 - DPF: {3D3B42C2-11BF-4732-A304-A01384B70D68} (UploadListView Class) - http://picasaweb.google.be/s/v/59.20/uploader2.cab O16 - DPF: {44990B00-3C9D-426D-81DF-AAB636FA4345} - https://www-secure.symantec.com/techsupp/asa/ss/sa/sa_cabs/tgctlcm.cab O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.6.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab O16 - DPF: {82774781-8F4E-11D1-AB1C-0000F8773BF0} (DLC Class) - https://transfers.ds.microsoft.com/FTM/TransferSource/grTransferCtrl.cab O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game09.zylom.com/activex/zylomgamesplayer.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe O23 - Service: Adobe Active File Monitor V7 (AdobeActiveFileMonitor7.0) - Adobe Systems Incorporated - C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: BitDefender Arrakis-server (Arrakis3) - BitDefender S.R.L. Antivirus software - BitDefender - The future of security now! - C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: BitDefender Desktop-updateservice (LIVESRV) - BitDefender S.R.L. - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE O23 - Service: lxbk_device - - C:\Windows\system32\lxbkcoms.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: Planner voor Automatische LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: Symantec RemoteAssist - Symantec, Inc. - C:\Program Files\Common Files\Symantec Shared\Support Controls\ssrc.exe O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe -- End of file - 14660 bytes deze logfile is gemaakt terwijl het fenemeen zich voordoet op dit eigenste ogenblik... nu moet ik mijn pc resetten om verder te kunnen werken met incredimail. Bitdefender wil nog altijd geen updates maken.

Ik denk dat er iets anders mis gaat..... ik kan nu geen updates meer binnenhalen van Bitdefender.... zou er een virusje met mijn voeten spelen ?

die melding komt onverwacht... ik denk dat het er komt als er om de zoveel tijd om post gegaan word, maar ook niet altijd want som kan het 1 dag duren voor ik het krijg terwijl er om de 60 min om post gegaan is. Het is een onvoorspelbaar fenomeen.

De foutmelding is er terug......

Tot NU toe nog niets gezien....afwachten.

Hierbij de gevraagde log's Malwarebytes' Anti-Malware 1.45 www.malwarebytes.org Databaseversie: 4011 Windows 6.0.6002 Service Pack 2 Internet Explorer 8.0.6001.18928 24/06/2010 8:30:35 mbam-log-2010-06-24 (08-30-35).txt Scantype: Snelle scan Objecten gescand: 112366 Verstreken tijd: 5 minuut/minuten, 57 seconde(n) Geheugenprocessen geïnfecteerd: 0 Geheugenmodulen geïnfecteerd: 0 Registersleutels geïnfecteerd: 0 Registerwaarden geïnfecteerd: 0 Registerdata geïnfecteerd: 0 Mappen geïnfecteerd: 0 Bestanden geïnfecteerd: 0 Geheugenprocessen geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Geheugenmodulen geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Registersleutels geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Registerwaarden geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Registerdata geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Mappen geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Bestanden geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 8:18:48, on 24/06/2010 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.18928) Boot mode: Normal Running processes: C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Program Files\Lexmark X1100 Series\LXBKbmgr.exe C:\Windows\RtHDVCpl.exe C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe C:\Windows\System32\nvraidservice.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe C:\Acer\Empowering Technology\eLock\autolockprocess\AutoLockProcess.exe C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe C:\Acer\Empowering Technology\SysMonitor.exe C:\Program Files\Belgium Identity Card\beid35gui.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Windows\ehome\ehtray.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\IncrediMail\bin\IncMail.exe C:\Users\Eddy\AppData\Local\Google\Update\1.2.183.29\GoogleCrashHandler.exe C:\Acer\Empowering Technology\eDataSecurity\x86\MsnVane.exe C:\Program Files\PIXELA\Everio MediaBrowser\MBCameraMonitor.exe C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE C:\Program Files\IncrediMail\Bin\ImApp.exe C:\Acer\Empowering Technology\eDataSecurity\x86\eDSDTS.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Windows\system32\wuauclt.exe C:\Windows\system32\SearchFilterHost.exe F:\virusprog\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MyStart by IncrediMail.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo! UK & Ireland R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local O1 - Hosts: ::1 localhost O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll O3 - Toolbar: &Egis Option Pack - {312105C4-2E13-4E10-AF72-F9D79BA077E6} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDsWebmailtb.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2010\IEToolbar.dll O4 - HKLM\..\Run: [lxbkbmgr.exe] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe" O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [NVRaidService] C:\Windows\system32\nvraidservice.exe O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe" O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe O4 - HKLM\..\Run: [AutoLockProcess] C:\Acer\Empowering Technology\eLock\autolockprocess\autolockprocess.exe O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe O4 - HKLM\..\Run: [beid] "C:\Program Files\Belgium Identity Card\beid35gui.exe" /startup O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin O4 - HKLM\..\Run: [skytel] Skytel.exe O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [bDAgent] "C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe" O4 - HKLM\..\Run: [bitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2010\IEShow.exe" O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [PrinterShare] C:\Program Files\PrinterShare\paConsole.exe -minimized O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [Google Update] "C:\Users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKCU\..\Run: [incrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c O4 - HKCU\..\Run: [CAHeadless] C:\Program Files\Adobe\Elements Organizer 8.0\CAHeadless\ElementsAutoAnalyzer.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Empowering Technology Launcher.lnk = C:\Acer\Empowering Technology\eAPLauncher.exe O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O8 - Extra context menu item: Add to Windows &Live Favorites - Welcome to Windows Live O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\Program Files\OFFICE11\REFIEBAR.DLL O16 - DPF: {254AA86E-5655-4518-AA87-185D7CC41801} (LogMeIn Rescue Technician Console) - https://secure.logmeinrescue.com/NL/TechConsole/x86/RescueControl.cab O16 - DPF: {3D3B42C2-11BF-4732-A304-A01384B70D68} (UploadListView Class) - http://picasaweb.google.be/s/v/59.20/uploader2.cab O16 - DPF: {44990B00-3C9D-426D-81DF-AAB636FA4345} - https://www-secure.symantec.com/techsupp/asa/ss/sa/sa_cabs/tgctlcm.cab O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.6.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab O16 - DPF: {82774781-8F4E-11D1-AB1C-0000F8773BF0} (DLC Class) - https://transfers.ds.microsoft.com/FTM/TransferSource/grTransferCtrl.cab O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game09.zylom.com/activex/zylomgamesplayer.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe O23 - Service: Adobe Active File Monitor V7 (AdobeActiveFileMonitor7.0) - Adobe Systems Incorporated - C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: BitDefender Arrakis-server (Arrakis3) - BitDefender S.R.L. Antivirus software - BitDefender - The future of security now! - C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: BitDefender Desktop-updateservice (LIVESRV) - BitDefender S.R.L. - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE O23 - Service: lxbk_device - - C:\Windows\system32\lxbkcoms.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: Planner voor Automatische LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: Symantec RemoteAssist - Symantec, Inc. - C:\Program Files\Common Files\Symantec Shared\Support Controls\ssrc.exe O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe -- End of file - 14650 bytes Alvast mijn dank

Ik krijg reeds een paar dagen een foutmelding als in Incredimail gebruik... zie bijgevoegde voorbeelden. Onderaan krijg ik een icoon , eveneens bijgevoegd. weet iemand daar raad mee ? ik heb ook maar een hijackthis log bijgevoegd. Eddy hijackthislog.txt

De oplossing gekregen van NERO zelf Advrcntr3.dll normally occurs if Nero 8 has not been removed correctly from the system.Please delete all Nero entries manually to solve the issue: 1. Delete Nero from the directory "Programs", if applicable. 2. Delete Nero from the directory "Common files", if applicable. 3. Delete the files stored in the folder "Temp" in the directory "Local settings". 4. Delete Nero from the registry, if applicable. 5. Reboot your computer. 1. Delete Nero from the directory "Programs" Right-click the "Start" button in the Windows start menu and select the entry "Explorer". -> The Windows Explorer will open. In the drop-down menu select the menu item "System (C:)" and click the folder "Programs". Can you see the folder "Nero" in this directory? If that is the case, please right-click the folder "Nero" and select the entry "Delete" in the menu. -> The window "Confirm the folder deletion" will open. Confirm this by clicking the "Yes" button. If the deletion of single subfolders is not possible, follow the path "C:\Programs\Nero\Nero 8" and delete the subfolders individually by right-clicking the respective folder and selecting the entry "Delete" in the menu. -> The window "Confirm the folder deletion" will open. Confirm this by clicking the "Yes" button. Folders and files that cannot be deleted may remain in the respective directory. Please let us know which files and folders these are and what the error message tells you during the deletion. 2. Delete Nero from the directory "Common files" Right-click the "Start" button in the Windows start menu and select the entry "Explorer". -> The Windows Explorer will open. In the drop-down menu select the menu item "System (C:)" and subsequently click the folders "Programs" and "Common files". Can you see the folder "Nero" in that folder? If that is the case, right-click the folder "Nero" and select the entry "Delete" in the menu. -> The window "Confirm the folder deletion" will open. Confirm this by clicking the "Yes" button. If the deletion of single subfolders is not possible, follow the path "C:\Programs\Common files\Nero" and delete the subfolders individually by right-clicking the respective folder and selecting the entry "Delete" in the menu. -> The window "Confirm the folder deletion" will open. Confirm this by clicking the "Yes" button. Folders and files that cannot be deleted may remain in the respective directory. Please let us know which files and folders these are and what the error message tells you during the deletion. 3. Delete the files stored in the folder "Temp" in the directory "Local settings" Right-click the "Start" button in the Windows start menu and select the entry "Explorer". -> The Windows Explorer will open. Please open the follwing directory: under Windows Vista: c:\User\<your username>\AppData\Local under Windows XP: C:\Dokuments and Settings\<your username>\Local Settings You will find the subfolder "Temp" in this location. Open this folder an delete all the files in this folder. Please note that some files might not be deleted as they are still used by a certain program. These files can be ignored. If the folder "Local settings" is not displayed in this directory, check the following settings in Windows: In the menu bar of Windows Explorer select the "Tools" menu. Select "Folder Options", go to the "View" tab, and in the navigation tree under "Hidden files and folders" select the option "Show hidden files and folders". Confirm this change by clicking the "Apply" and "OK" buttons. 4. Delete Nero from the registry Click "Start" in the Windows start menu. Click the "Run" command. -> The window "Run" will open. Enter "regedit" in the "Open" text field and click the "OK" button. -> The registry window will open. First check if there is still the entry "Ahead" in the navigation tree on the left side of the window under the path HKEY_LOCAL_MACHINE\Software\. If that is the case, right-click the folder "Ahead" and select the entry "Delete" in the menu. -> The window "Confirm the key deletion" will open. Confirm this by clicking the "Yes" button. Then check if there is still the entry "Nero" in the navigation tree on the left side of the window under the path HKEY_LOCAL_MACHINE\Software\. If that is the case, right-click the folder "Nero" and select the entry "Delete" in the menu. -> The window "Confirm the key deletion" will open. Confirm this by clicking the "Yes" button. Now check if there is still the entry "Ahead" in the navigation tree on the left side of the window under the path HKEY_CURRENT_USER\Software\. If that is the case, right-click the folder "Ahead" and select the entry "Delete" in the menu. -> The window "Confirm the key deletion" will open. Confirm this by clicking the "Yes" button Finally check if there is still the entry "Nero" in the navigation tree on the left side of the window under the path HKEY_CURRENT_USER\Software\. If that is the case, right-click the folder "Nero" and select the entry "Delete" in the menu. -> The window "Confirm the key deletion" will open. Confirm this by clicking the "Yes" button. 5. Reboot your computer Close all open windows and reboot your computer

Ik heb een email naar NERO gestuurt en een oplossing gekregen... als je wil zet ik hem hier in dit forum.

ik ben eens in Directory's gaan zoeken.... In Common files staat er nog een NERO Dir met een subdir DSFILTER met de 3 volgende files in... NEMP4SPLITTER.AX, NESPLITTER.AX en NEVIDEO.AX deze DIR en SubDir met zijn files kan ik niet wegkrijgen, ik heb er geen machtiging toe... Ik heb NERO wel reeds geUNinstalled...!

Je gelooft het of niet... 'tis er nog...!

ComboFix 10-04-28.08 - Eddy 29/04/2010 17:17:12.1.2 - x86 Microsoft Windows Vista Home Premium 6.0.6002.2.1252.32.1043.18.3071.1602 [GMT 2:00] Gestart vanuit: c:\users\Eddy\Desktop\ComboFix.exe AV: Kaspersky Internet Security *On-access scanning enabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0} AV: Norton Internet Security *On-access scanning enabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8} AV: Windows Live OneCare *On-access scanning disabled* (Updated) {427ADFC3-B354-4A51-BE34-A9D4218E45C4} FW: Kaspersky Internet Security *enabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0} FW: Norton Internet Security *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220} FW: Windows Live OneCare - Firewall *disabled* {A3899D22-27E6-4A7E-AE4E-2C106646DAAB} SP: Kaspersky Internet Security *enabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0} SP: Norton Internet Security *enabled* (Updated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A} SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} SP: Windows Live OneCare *disabled* (Updated) {CC7E50BA-BA8C-4DDE-B5AC-EA53BC38D01B} * Aanwezig AV is actief . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\windows\Downloaded Program Files\x64 c:\windows\Downloaded Program Files\x64\racodec.ax c:\windows\Downloaded Program Files\x86 c:\windows\Downloaded Program Files\x86\racodec.ax F:\Autorun.inf . (((((((((((((((((((( Bestanden Gemaakt van 2010-03-28 to 2010-04-29 )))))))))))))))))))))))))))))) . 2010-04-29 15:32 . 2010-04-29 15:32 -------- d-----w- c:\users\Default\AppData\Local\temp 2010-04-29 13:41 . 2009-04-13 12:39 16384 ----a-w- C:\msimg32.dll 2010-04-29 13:06 . 2010-04-29 13:32 -------- d-----w- c:\programdata\RegCure 2010-04-29 13:06 . 2010-04-29 13:09 -------- d-----w- c:\program files\RegCure 2010-04-29 09:11 . 2010-04-29 09:11 -------- d-----w- c:\program files\CCleaner 2010-04-29 08:50 . 2010-04-29 08:50 -------- d-----w- c:\program files\VS Revo Group 2010-04-28 15:27 . 2010-04-28 15:27 -------- d-----w- c:\program files\Uniblue 2010-04-28 13:22 . 2010-04-28 13:22 4 ----a-w- c:\windows\system32\aspdict-en.dat 2010-04-28 13:22 . 2010-04-28 13:22 16 ----a-w- c:\windows\system32\asdict.dat 2010-04-28 12:55 . 2010-04-28 12:53 3974440 ----a-w- c:\windows\system32\AdvrCntr3.dll 2010-04-28 12:31 . 2010-04-28 12:31 -------- d-----w- c:\program files\Ashampoo 2010-04-24 13:24 . 2010-04-24 13:24 -------- d-----w- c:\program files\WatermarkSoftware 2010-04-23 16:02 . 2010-04-23 16:02 -------- d-----w- c:\users\Eddy\AppData\Roaming\FastStone 2010-04-23 16:02 . 2010-04-23 16:02 -------- d-----w- c:\program files\FastStone Photo Resizer 2010-04-23 15:53 . 2010-04-23 15:54 -------- d-----w- c:\program files\QuickTime 2010-04-23 12:24 . 2010-04-23 12:32 -------- d-----w- c:\users\Eddy\AppData\Roaming\DeepBurner 2010-04-23 12:23 . 2010-04-23 12:23 -------- d-----w- c:\program files\Astonsoft 2010-04-22 11:36 . 2010-04-22 11:36 283648 ----a-w- c:\windows\uninst.exe 2010-04-14 05:48 . 2010-02-23 11:10 212992 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys 2010-04-14 05:48 . 2010-02-23 11:10 79360 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys 2010-04-14 05:48 . 2010-02-23 11:10 106496 ----a-w- c:\windows\system32\drivers\mrxsmb.sys 2010-04-14 05:48 . 2010-02-18 14:07 3600776 ----a-w- c:\windows\system32\ntkrnlpa.exe 2010-04-14 05:48 . 2010-02-18 14:07 3548040 ----a-w- c:\windows\system32\ntoskrnl.exe 2010-04-14 05:47 . 2010-03-05 14:01 420352 ----a-w- c:\windows\system32\vbscript.dll 2010-04-14 05:47 . 2010-02-18 14:07 904576 ----a-w- c:\windows\system32\drivers\tcpip.sys 2010-04-14 05:47 . 2010-02-18 13:30 200704 ----a-w- c:\windows\system32\iphlpsvc.dll 2010-04-14 05:47 . 2010-02-18 11:28 25088 ----a-w- c:\windows\system32\drivers\tunnel.sys 2010-04-14 05:44 . 2009-12-23 11:33 172032 ----a-w- c:\windows\system32\wintrust.dll 2010-04-14 05:44 . 2010-01-13 17:34 98304 ----a-w- c:\windows\system32\cabview.dll 2010-04-12 12:17 . 2010-02-12 10:32 293376 ----a-w- c:\windows\system32\browserchoice.exe 2010-04-12 07:46 . 2010-04-12 07:50 -------- d-----w- c:\programdata\BitDefender 2010-04-12 07:46 . 2010-04-12 07:47 -------- d-----w- c:\users\Eddy\AppData\Roaming\BitDefender 2010-04-12 07:46 . 2010-04-12 07:46 -------- d-----w- c:\program files\BitDefender 2010-04-11 13:37 . 2010-02-24 08:16 181632 ------w- c:\windows\system32\MpSigStub.exe 2010-04-02 09:13 . 2010-04-02 09:13 1078 ----a-r- c:\users\Eddy\AppData\Roaming\Microsoft\Installer\{FA7695C9-D957-4EC8-89BA-5AB4CCC026E1}\_18be6784.exe 2010-04-01 15:05 . 2010-04-01 15:05 -------- d-----w- c:\windows\BDOSCAN8 2010-04-01 07:54 . 2010-04-01 07:54 -------- d-----w- c:\program files\Common Files\Java 2010-03-31 14:50 . 2010-04-12 07:46 -------- d-----w- c:\program files\Common Files\BitDefender . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-04-29 09:35 . 2009-12-06 09:29 -------- d-----w- c:\program files\Common Files\Nero 2010-04-29 09:34 . 2010-03-13 10:46 -------- d-----w- c:\programdata\Nero 2010-04-29 09:34 . 2010-03-13 12:39 -------- d-----w- c:\program files\Nero 2010-04-29 06:26 . 2010-02-22 10:45 7592 ----a-w- c:\users\Eddy\AppData\Local\d3d9caps.dat 2010-04-28 12:27 . 2009-04-09 11:04 -------- d-----w- c:\users\Eddy\AppData\Roaming\Uniblue 2010-04-28 06:13 . 2008-05-30 10:46 -------- d-----w- c:\program files\IncrediMail 2010-04-23 15:53 . 2009-06-12 15:56 -------- d-----w- c:\programdata\Apple Computer 2010-04-20 12:06 . 2009-04-06 15:11 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2010-04-20 07:32 . 2006-11-02 16:11 735382 ----a-w- c:\windows\system32\perfh013.dat 2010-04-20 07:32 . 2006-11-02 16:11 152096 ----a-w- c:\windows\system32\perfc013.dat 2010-04-19 09:19 . 2009-04-06 16:35 -------- d-----w- c:\program files\UseNeXT 2010-04-14 10:15 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail 2010-04-14 08:15 . 2007-12-06 07:20 -------- d-----w- c:\programdata\Microsoft Help 2010-04-12 12:22 . 2009-07-24 09:26 291352 ----a-w- c:\windows\system32\drivers\bdfsfltr.sys 2010-04-12 07:41 . 2009-04-10 11:27 -------- d-----w- c:\programdata\Norton 2010-04-12 07:40 . 2007-12-06 07:50 -------- d-----w- c:\program files\Common Files\Symantec Shared 2010-04-12 07:40 . 2009-04-07 14:35 -------- d-----w- c:\program files\Symantec 2010-04-02 16:26 . 2007-12-06 07:16 -------- d--h--w- c:\program files\InstallShield Installation Information 2010-04-01 07:44 . 2009-04-04 07:16 -------- d-----w- c:\program files\Java 2010-03-31 14:53 . 2007-12-06 07:50 -------- d-----w- c:\programdata\Symantec 2010-03-29 22:46 . 2009-04-06 15:11 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2010-03-29 22:45 . 2009-04-06 15:11 20824 ----a-w- c:\windows\system32\drivers\mbam.sys 2010-03-28 07:08 . 2009-09-20 08:22 2485883 ----a-w- c:\programdata\ArcSoft\Global Deploy\CheckUpdate\ArcConnect.exe 2010-03-25 16:41 . 2009-04-04 07:08 -------- d-----w- c:\users\Eddy\AppData\Roaming\Ashampoo 2010-03-25 16:40 . 2010-03-25 16:40 -------- d-----w- c:\programdata\ashampoo 2010-03-23 18:04 . 2010-03-23 18:04 658696 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll 2010-03-21 18:00 . 2009-07-24 10:36 -------- d-----w- c:\users\Eddy\AppData\Roaming\myphotobook 2010-03-20 16:14 . 2010-03-20 15:56 -------- d-----w- c:\program files\Dia 2010-03-20 16:08 . 2010-03-20 16:08 -------- d-----w- c:\users\Eddy\AppData\Roaming\gtk-2.0 2010-03-17 17:00 . 2010-03-17 16:58 -------- d-----w- c:\users\Eddy\AppData\Roaming\OxelonMC 2010-03-16 07:44 . 2010-03-16 07:44 -------- d-----w- c:\program files\PIXresizer 2010-03-15 15:03 . 2009-06-12 15:58 -------- d-----w- c:\program files\Common Files\Apple 2010-03-15 11:52 . 2008-05-27 14:31 106416 ----a-w- c:\users\Eddy\AppData\Local\GDIPFONTCACHEV1.DAT 2010-03-15 07:42 . 2010-02-26 14:26 -------- d-----w- c:\program files\a-squared Anti-Malware 2010-03-13 15:21 . 2009-04-04 15:22 -------- d-----w- c:\users\Eddy\AppData\Roaming\uTorrent 2010-03-13 10:50 . 2009-12-06 09:31 -------- d-----w- c:\users\Eddy\AppData\Roaming\Nero 2010-03-13 09:01 . 2009-07-14 12:54 -------- d-----w- c:\programdata\Google Updater 2010-03-09 02:28 . 2009-04-04 07:16 411368 ----a-w- c:\windows\system32\deploytk.dll 2010-03-08 15:56 . 2009-04-03 13:32 -------- d-----w- c:\program files\Avant Browser 2010-03-04 09:28 . 2009-07-14 12:54 -------- d-----w- c:\program files\Common Files\PX Storage Engine 2010-03-04 08:51 . 2010-03-04 08:48 -------- d-----w- c:\programdata\SuperMP3Download 2010-03-04 08:48 . 2010-03-04 08:48 -------- d-----w- c:\users\Eddy\AppData\Roaming\SuperMP3Download 2010-02-23 06:39 . 2010-03-31 05:56 916480 ----a-w- c:\windows\system32\wininet.dll 2010-02-23 06:33 . 2010-03-31 05:56 109056 ----a-w- c:\windows\system32\iesysprep.dll 2010-02-23 06:33 . 2010-03-31 05:56 71680 ----a-w- c:\windows\system32\iesetup.dll 2010-02-23 04:55 . 2010-03-31 05:56 133632 ----a-w- c:\windows\system32\ieUnatt.exe 2010-02-20 23:06 . 2010-03-11 07:08 24064 ----a-w- c:\windows\system32\nshhttp.dll 2010-02-20 23:05 . 2010-03-11 07:08 30720 ----a-w- c:\windows\system32\httpapi.dll 2010-02-20 20:53 . 2010-03-11 07:08 411648 ----a-w- c:\windows\system32\drivers\http.sys 2010-02-19 23:47 . 2010-02-19 23:47 3604480 ----a-w- c:\windows\system32\GPhotos.scr 2010-02-14 08:29 . 2010-02-14 08:29 975360 ----a-w- c:\programdata\PrinterShare\PrinterShare2103.exe 2010-02-03 10:57 . 2010-02-03 10:57 153448 ----a-w- c:\windows\system32\drivers\bdfm.sys 2010-02-03 10:56 . 2010-02-03 10:56 106464 ----a-w- c:\windows\system32\drivers\bdhv.sys . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2009-04-13 12:47 121392 ----a-w- c:\acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-05-03 39408] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920] "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856] "PrinterShare"="c:\program files\PrinterShare\paConsole.exe" [2010-02-09 1069056] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952] "Google Update"="c:\users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe" [2009-04-18 133104] "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240] "IncrediMail"="c:\program files\IncrediMail\bin\IncMail.exe" [2010-04-28 353736] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "lxbkbmgr.exe"="c:\program files\Lexmark X1100 Series\lxbkbmgr.exe" [2008-02-28 74408] "Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-19 1008184] "RtHDVCpl"="RtHDVCpl.exe" [2007-10-11 4702208] "NVRaidService"="c:\windows\system32\nvraidservice.exe" [2007-12-07 196128] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-09-17 92704] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-09-17 13580832] "Lexmark X1100 Series"="c:\program files\Lexmark X1100 Series\lxbkbmgr.exe" [2008-02-28 74408] "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072] "eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe" [2009-04-13 526896] "AutoLockProcess"="c:\acer\Empowering Technology\eLock\autolockprocess\autolockprocess.exe" [2008-01-23 561152] "Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [2008-10-14 623992] "Acer Empowering Technology Monitor"="c:\acer\Empowering Technology\SysMonitor.exe" [2006-12-25 319488] "beid"="c:\program files\Belgium Identity Card\beid35gui.exe" [2009-02-02 2035712] "AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712] "Skytel"="Skytel.exe" [2007-10-11 1826816] "ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-03-18 207360] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-04-04 36272] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-03-24 952768] "BDAgent"="c:\program files\BitDefender\BitDefender 2010\bdagent.exe" [2010-04-12 1123360] "BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2010\IEShow.exe" [2009-10-19 71152] "Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-03-29 1086856] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-03-17 421888] c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2008-5-30 113664] Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe [2007-12-6 535336] MBCameraMonitor.lnk - c:\program files\PIXELA\Everio MediaBrowser\MBCameraMonitor.exe [2010-2-8 541976] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "NoResolveTrack"= 1 (0x1) "NoFileAssociate"= 0 (0x0) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend] @="Service" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "Google Update"="c:\users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe" /c [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc] "VistaSp2"=hex(:1c,90,67,b4,0b,44,ca,01 R3 Arrakis3;BitDefender Arrakis-server;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe [2009-10-19 183880] R3 WSVD;WSVD;c:\windows\system32\drivers\WSVD.sys [2007-12-16 75776] R4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2008-07-11 47128] R4 RsFx0102;RsFx0102 Driver;c:\windows\system32\DRIVERS\RsFx0102.sys [2008-07-10 242712] R4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2008-07-11 369688] S0 eLock2BurnerLockDriver;Disk Performance Monitor Filter Driver;c:\windows\system32\DRIVERS\eLock2BurnerLockDriver.sys [2008-01-10 22048] S1 archlp;archlp;c:\windows\system32\drivers\archlp.sys [2008-01-29 11392] S1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver;c:\windows\system32\DRIVERS\BdfNdisf6.sys [2009-10-19 72200] S2 a2free;a-squared Free Service;c:\program files\a-squared Free\a2service.exe [2010-02-26 1858144] S2 BDVEDISK;BDVEDISK;c:\program files\BitDefender\BitDefender 2010\bdvedisk.sys [2009-09-22 83208] S2 eLock2FSCTLDriver;eLock2FSCTLDriver;c:\windows\system32\DRIVERS\eLock2FSCTLDriver.sys [2008-01-23 86048] S2 lxbk_device;lxbk_device;c:\windows\system32\lxbkcoms.exe [2008-02-19 537256] S3 BDFM;BDFM;c:\windows\system32\DRIVERS\bdfm.sys [2010-02-03 153448] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache bdx REG_MULTI_SZ scan HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . Inhoud van de 'Gedeelde Taken' map 2010-04-29 c:\windows\Tasks\1-klik Onderhoud.job - c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2009-04-27 13:51] 2010-04-29 c:\windows\Tasks\Google Software Updater.job - c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-13 08:46] 2010-04-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-786010562-3885121150-2963765948-1000Core.job - c:\users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe [2009-04-18 14:49] 2010-04-29 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-786010562-3885121150-2963765948-1000UA.job - c:\users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe [2009-04-18 14:49] 2010-04-29 c:\windows\Tasks\RegCure Program Check.job - c:\program files\RegCure\RegCure.exe [2010-02-23 23:20] 2010-04-29 c:\windows\Tasks\RegCure.job - c:\program files\RegCure\RegCure.exe [2010-02-23 23:20] 2010-04-29 c:\windows\Tasks\User_Feed_Synchronization-{4D4AA6C7-C1FB-4CD5-83A3-F10056D36B3F}.job - c:\windows\system32\msfeedssync.exe [2010-03-31 04:54] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://mystart.incredimail.com/ uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7 uDefault_Search_URL = hxxp://www.google.com/ie mStart Page = hxxp://nl.intl.acer.yahoo.com uInternet Settings,ProxyOverride = *.local uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://www.google.com/search?q=%s IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: Add to Windows &Live Favorites - Welcome to Windows Live IE: Append to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert link target to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert link target to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert selected links to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html IE: Convert selected links to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html IE: Convert selection to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: Convert selection to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html IE: Convert to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html DPF: {254AA86E-5655-4518-AA87-185D7CC41801} - hxxps://secure.logmeinrescue.com/NL/TechConsole/x86/RescueControl.cab DPF: {3D3B42C2-11BF-4732-A304-A01384B70D68} - hxxp://picasaweb.google.be/s/v/59.20/uploader2.cab DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game09.zylom.com/activex/zylomgamesplayer.cab . . ------- Bestandsassociaties ------- . .txt= . - - - - ORPHANS VERWIJDERD - - - - WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) HKU-Default-Run-Acer Tour Reminder - c:\acer\AcerTour\Reminder.exe HKU-Default-Run-IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} - c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2010-04-29 17:33 Windows 6.0.6002 Service Pack 2 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: 0 ************************************************************************** . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . Voltooingstijd: 2010-04-29 17:42:36 ComboFix-quarantined-files.txt 2010-04-29 15:42 Pre-Run: 81.881.501.696 bytes beschikbaar Post-Run: 82.404.917.248 bytes beschikbaar Current=2 Default=2 Failed=1 LastKnownGood=4 Sets=1,2,3,4,8,9,10,11 - - End Of File - - E3008B3E2733BD08452E3F33ED656518

Na dit alles.... niet opgelost....! help.....