tjoeptje

ComboFix 09-01-31.02 - Joep 2009-02-01 12:31:34.1 - NTFSx86 Gestart vanuit: c:\users\Joep\Desktop\ComboFix.exe . (((((((((((((((((((( Bestanden Gemaakt van 2009-01-01 to 2009-02-01 )))))))))))))))))))))))))))))) . 2009-02-01 12:25 . 2009-02-01 12:25 104 --ah----- C:\aaw7boot.cmd 2009-01-27 00:41 . 2009-01-18 22:35 15,688 --a------ c:\windows\System32\lsdelete.exe 2009-01-26 20:36 . 2009-01-18 22:30 64,160 --a------ c:\windows\System32\drivers\Lbd.sys 2009-01-26 20:34 . 2009-01-26 20:36 <DIR> d-------- c:\users\All Users\Lavasoft 2009-01-26 20:34 . 2009-01-26 20:34 <DIR> d--h-c--- c:\users\All Users\{83C91755-2546-441D-AC40-9A6B4B860800} 2009-01-26 20:34 . 2009-01-26 20:36 <DIR> d-------- c:\programdata\Lavasoft 2009-01-26 20:34 . 2009-01-26 20:34 <DIR> d--h-c--- c:\programdata\{83C91755-2546-441D-AC40-9A6B4B860800} 2009-01-26 20:34 . 2009-01-26 20:34 <DIR> d-------- c:\program files\Lavasoft 2009-01-26 20:18 . 2009-01-26 20:18 <DIR> dr------- c:\windows\ServiceProfiles\NetworkService\Searches 2009-01-26 18:19 . 2009-01-27 22:32 <DIR> d-------- c:\users\All Users\Hitman Pro 3 2009-01-26 18:19 . 2009-01-26 18:33 <DIR> d-------- c:\users\All Users\Hitman Pro 2009-01-26 18:19 . 2009-01-27 22:32 <DIR> d-------- c:\programdata\Hitman Pro 3 2009-01-26 18:19 . 2009-01-26 18:33 <DIR> d-------- c:\programdata\Hitman Pro 2009-01-26 18:19 . 2009-01-26 18:19 <DIR> d-------- c:\program files\Hitman Pro 3 2009-01-26 01:06 . 2009-01-26 01:06 <DIR> d-------- C:\Nieuwe map 2009-01-18 16:00 . 2009-01-18 16:00 <DIR> d-------- c:\windows\Sun 2009-01-18 15:59 . 2009-01-18 15:58 410,984 --a------ c:\windows\System32\deploytk.dll 2009-01-14 12:44 . 2008-12-16 03:42 288,768 --a------ c:\windows\System32\drivers\srv.sys . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-02-01 11:43 --------- d-----w c:\users\Joep\AppData\Roaming\LimeWire 2009-02-01 08:23 --------- d-----w c:\programdata\avg8 2009-02-01 08:22 325,128 ----a-w c:\windows\system32\drivers\avgldx86.sys 2009-02-01 08:22 10,520 ----a-w c:\windows\System32\avgrsstx.dll 2009-01-25 20:02 --------- d-----w c:\program files\Common Files\Steam 2009-01-22 18:21 63,176 ----a-w c:\users\Joep\AppData\Roaming\nvModes.dat 2009-01-18 14:58 --------- d-----w c:\program files\Java 2009-01-15 07:11 --------- d-----w c:\programdata\Microsoft Help 2009-01-15 07:11 --------- d-----w c:\program files\Windows Mail 2009-01-11 16:46 --------- d-----w c:\users\Joep\AppData\Roaming\BSplayer 2009-01-05 10:54 --------- d-----w c:\program files\PKR 2008-12-22 18:12 --------- d-----w c:\program files\LimeWire 2008-12-22 17:57 --------- d-----w c:\program files\Windows Sidebar 2008-12-22 17:57 --------- d-----w c:\program files\Windows Defender 2008-12-19 17:53 --------- d-----w c:\programdata\Pinnacle 2008-12-19 17:53 --------- d-----w c:\program files\Pinnacle 2008-12-19 12:05 --------- d-----w c:\program files\LimeWire(13) 2008-11-04 12:29 323,584 ----a-w c:\windows\System32\AUDIOGENIE2.DLL 2008-11-01 03:44 541,696 ----a-w c:\windows\AppPatch\AcLayers.dll 2008-11-01 03:44 52,736 ----a-w c:\windows\AppPatch\iebrshim.dll 2008-11-01 03:44 460,288 ----a-w c:\windows\AppPatch\AcSpecfc.dll 2008-11-01 03:44 28,672 ----a-w c:\windows\System32\Apphlpdm.dll 2008-11-01 03:44 2,154,496 ----a-w c:\windows\AppPatch\AcGenral.dll 2008-11-01 03:44 173,056 ----a-w c:\windows\AppPatch\AcXtrnal.dll 2008-11-01 01:21 4,240,384 ----a-w c:\windows\System32\GameUXLegacyGDFs.dll 2008-10-01 07:58 174 --sha-w c:\program files\desktop.ini 2008-09-29 14:02 56 ---ha-w c:\users\All Users\ezsidmv.dat 2008-09-29 14:02 56 ---ha-w c:\programdata\ezsidmv.dat 2008-09-23 15:50 16,384 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat 2008-09-23 15:50 32,768 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat 2008-09-23 15:50 16,384 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Picasa Media Detector"="c:\program files\Picasa2\PicasaMediaDetector.exe" [2007-09-12 443968] "NSUFloatingUI"="c:\program files\Sony\Network Utility\LANUtil.exe" [2007-11-26 253952] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952] "MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184] "OM2_Monitor"="c:\program files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" [2007-09-04 95536] "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Apoint"="c:\program files\Apoint\Apoint.exe" [2007-06-10 118784] "ISBMgr.exe"="c:\program files\Sony\ISB Utility\ISBMgr.exe" [2007-09-19 311296] "Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2007-11-29 1838592] "MarketingTools"="c:\program files\Sony\Marketing Tools\MarketingTools.exe" [2007-11-29 36864] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-01-18 136600] "Symantec PIF AlertEng"="c:\program files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2008-01-29 583048] "VMonitorVMUVC"="c:\program files\Vimicro Corporation\VMUVC\VMonitor.exe" [2008-06-16 135168] "NvSvc"="c:\windows\system32\nvsvc.dll" [2007-11-16 86016] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-11-16 8497696] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-11-16 81920] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2006-09-01 282624] "OM2_Monitor"="c:\program files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe" [2007-09-04 54576] "AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-02-01 1601304] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792] "HitmanPro3"="c:\program files\Hitman Pro 3\hitmanpro3.exe" [2009-01-26 4590200] "Ad-Watch"="c:\program files\Lavasoft\Ad-Aware\AAWTray.exe" [2009-01-18 506712] "RtHDVCpl"="RtHDVCpl.exe" [2007-08-25 c:\windows\RtHDVCpl.exe] "Skytel"="Skytel.exe" [2007-08-25 c:\windows\SkyTel.exe] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon] 2007-08-14 20:05 98304 c:\windows\System32\VESWinlogon.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=G G [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.dvsd"= c:\program files\Common Files\Sony Shared\VideoLib\sonydv.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service] @="Service" [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules] "{5ABF1E18-85C3-431B-A574-379043C96F2C}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook "{2CEA85B6-5D3D-494B-B4D6-3C9DE8AB972D}"= UDP:c:\program files\Google\Google Talk\googletalk.exe:Google Talk "{13DE2B6E-1348-4A78-A9A6-D61304A861F7}"= TCP:c:\program files\Google\Google Talk\googletalk.exe:Google Talk "{60B10D82-AFCD-4AB4-9589-F70DF4AF78E5}"= Disabled:UDP:c:\program files\Sony\VAIO Media 6.0\Vc.exe:[VAIO Media] VAIO Media "{301FF735-6EF7-4148-9DC5-16F5159F275B}"= Disabled:TCP:c:\program files\Sony\VAIO Media 6.0\Vc.exe:[VAIO Media] VAIO Media "{64EB4EBF-F938-43AF-B281-E1C1FF69A448}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote "{49F92AAA-F9B9-428B-8E00-3173CDA969B2}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote "{E4B4565B-E25F-4B3F-8715-271D43FD533C}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone) "{CDA06B9D-A5AE-4CAE-84B5-921B326EF7CD}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone) "{B4A577A2-A014-40D4-A5B6-1D9F402C751F}"= c:\program files\Skype\Phone\Skype.exe:Skype "{2F5FF67C-7031-4A25-B6DB-C8731605DB70}"= c:\program files\AVG\AVG8\avgupd.exe:avgupd.exe "TCP Query User{E2EFE245-FD49-48EC-906B-6C9C95CD866C}c:\\program files\\limewire\\limewire.exe"= UDP:c:\program files\limewire\limewire.exe:LimeWire "UDP Query User{4418707B-C39C-451C-8B5E-39E961EABCF1}c:\\program files\\limewire\\limewire.exe"= TCP:c:\program files\limewire\limewire.exe:LimeWire "TCP Query User{D0355F7C-1333-44A2-954F-9ED831D9976F}c:\\program files\\valve\\steam\\steamapps\\doublerr\\counter-strike source\\hl2.exe"= UDP:c:\program files\valve\steam\steamapps\doublerr\counter-strike source\hl2.exe:hl2 "UDP Query User{FF4559D3-BBDB-4165-94B2-28889EFF23D6}c:\\program files\\valve\\steam\\steamapps\\doublerr\\counter-strike source\\hl2.exe"= TCP:c:\program files\valve\steam\steamapps\doublerr\counter-strike source\hl2.exe:hl2 "TCP Query User{FA5328ED-3129-4604-99A2-1625642BB345}c:\\program files\\limewire\\limewire.exe"= UDP:c:\program files\limewire\limewire.exe:LimeWire "UDP Query User{8E110CE1-887F-488D-AF12-38248060F14E}c:\\program files\\limewire\\limewire.exe"= TCP:c:\program files\limewire\limewire.exe:LimeWire "TCP Query User{CBDF9283-56A9-47F4-BADC-4C6B5988993A}c:\\program files\\valve\\steam\\steamapps\\doublerr\\counter-strike source\\hl2.exe"= UDP:c:\program files\valve\steam\steamapps\doublerr\counter-strike source\hl2.exe:hl2 "UDP Query User{573E3D30-3E73-4C44-9DB0-490A7DCB9E03}c:\\program files\\valve\\steam\\steamapps\\doublerr\\counter-strike source\\hl2.exe"= TCP:c:\program files\valve\steam\steamapps\doublerr\counter-strike source\hl2.exe:hl2 R3 hitmanpro3;Hitman Pro 3 Support Driver; [x] R3 MSSQL$MSSMLBIZ;SQL Server (MSSMLBIZ);c:\program files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2008-02-26 29183504] R3 VAIOMediaPlatform-UCLS-AppServer;VAIO Media Content Collection;c:\program files\Sony\VAIO Media Integrated Server\UCLS.exe [2007-01-10 745472] R3 VAIOMediaPlatform-UCLS-HTTP;VAIO Media Content Collection (HTTP);c:\program files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe [2007-06-20 397312] R3 VAIOMediaPlatform-UCLS-UPnP;VAIO Media Content Collection (UPnP);c:\program files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe [2007-06-20 1089536] R3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2007-09-28 292128] R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe [2007-09-20 79136] R3 VMUVC;Vimicro Camera Service VMUVC;c:\windows\system32\Drivers\VMUVC.sys [2008-06-16 250240] R3 vvftUVC;Vimicro Camera Filter Service VMUVC;c:\windows\system32\drivers\vvftUVC.sys [2008-06-16 476160] S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys [2009-01-18 64160] S1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\System32\Drivers\avgldx86.sys [2009-02-01 325128] S2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2009-02-01 298264] S2 BcmSqlStartupSvc;Opstartservice voor SQL Server voor Business Contact Manager;c:\program files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe [2008-01-16 30312] S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2009-01-18 921936] S2 NSUService;NSUService;c:\program files\Sony\Network Utility\NSUService.exe [2007-11-26 204800] S2 regi;regi;c:\windows\system32\drivers\regi.sys [2007-04-17 11032] S2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys [2006-11-22 5120] S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\DRIVERS\SFEP.sys [2007-08-29 9344] S3 ti21sony;ti21sony;c:\windows\system32\drivers\ti21sony.sys [2007-06-06 812544] --- Andere Services/Drivers In Geheugen --- *Deregistered* - AFD *Deregistered* - AvgLdx86 *Deregistered* - AvgMfx86 *Deregistered* - Beep *Deregistered* - bowser *Deregistered* - cdfs *Deregistered* - CLFS *Deregistered* - Compbatt *Deregistered* - crcdisk *Deregistered* - DfsC *Deregistered* - DMICall *Deregistered* - DXGKrnl *Deregistered* - FileInfo *Deregistered* - FltMgr *Deregistered* - HTTP *Deregistered* - iaStorV *Deregistered* - iScsiPrt *Deregistered* - KSecDD *Deregistered* - Lbd *Deregistered* - lltdio *Deregistered* - luafv *Deregistered* - MountMgr *Deregistered* - mpsdrv *Deregistered* - MRxDAV *Deregistered* - mrxsmb *Deregistered* - mrxsmb10 *Deregistered* - mrxsmb20 *Deregistered* - Msfs *Deregistered* - msisadrv *Deregistered* - mssmbios *Deregistered* - Mup *Deregistered* - NativeWifiP *Deregistered* - NDIS *Deregistered* - Ndisuio *Deregistered* - NdisWan *Deregistered* - NDProxy *Deregistered* - NetBIOS *Deregistered* - netbt *Deregistered* - Npfs *Deregistered* - nsiproxy *Deregistered* - Ntfs *Deregistered* - Null *Deregistered* - PEAUTH *Deregistered* - PptpMiniport *Deregistered* - PSched *Deregistered* - RasAcd *Deregistered* - Rasl2tp *Deregistered* - RasPppoe *Deregistered* - RasSstp *Deregistered* - rdbss *Deregistered* - RDPCDD *Deregistered* - RDPENCDD *Deregistered* - regi *Deregistered* - rspndr *Deregistered* - secdrv *Deregistered* - Smb *Deregistered* - spldr *Deregistered* - srv *Deregistered* - srv2 *Deregistered* - srvnet *Deregistered* - SSPORT *Deregistered* - swenum *Deregistered* - Tcpip *Deregistered* - tcpipreg *Deregistered* - tdx *Deregistered* - TermDD *Deregistered* - tunmp *Deregistered* - tunnel *Deregistered* - umbus *Deregistered* - VgaSave *Deregistered* - volmgr *Deregistered* - volmgrx *Deregistered* - volsnap *Deregistered* - Wanarpv6 *Deregistered* - Wdf01000 *Deregistered* - XAudio . Inhoud van de 'Gedeelde Taken' map 2009-01-26 c:\windows\Tasks\Ad-Aware Update (Weekly).job - c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-01-18 22:34] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://infonet.hz.nl/DN2_Infonet/Webpages/Secure/login.aspx?ReturnUrl=%2fDN2_Infonet%2fDefault.aspx IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 FF - ProfilePath - c:\users\Joep\AppData\Roaming\Mozilla\Firefox\Profiles\hu58w2le.default\ FF - prefs.js: browser.startup.homepage - hxxp://infonet.hz.nl/DN2_Infonet/Webpages/Secure/login.aspx?ReturnUrl=%2fDN2_Infonet%2fDefault.aspx FF - component: c:\program files\AVG\AVG8\Firefox\components\avgssff.dll . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-02-01 12:43:12 Windows 6.0.6001 Service Pack 1 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: 0 ************************************************************************** . --------------------- DLLs Geladen Onder Lopende Processen --------------------- - - - - - - - > 'winlogon.exe'(804) c:\windows\system32\avgrsstx.dll - - - - - - - > 'lsass.exe'(760) c:\windows\system32\avgrsstx.dll . Voltooingstijd: 2009-02-01 12:44:24 ComboFix-quarantined-files.txt 2009-02-01 11:44:22 Pre-Run: 143.613.710.336 bytes beschikbaar Post-Run: 143,686,238,208 bytes beschikbaar 256 --- E O F --- 2009-01-25 20:10:37

hallo, ik heb sinds ongeveer een half jaar een nieuwe laptop van sony vaio, stuurprogramma windows vista. heb er eigenlijk zeer weinig problemen mee, en over algemeen ben ik er zeer tevreden over. Maar laatst wel op en vrij irritant probleem gestoten. Op een gegeven moment herkent hij geen enkele van mijn twee externe harde schijven meer, hij geeft ze wel weer in 'computer' (deze computer in vorige versies van windows) maar hij noemt ze nu gewoon 'lokale schijf H' en 'lokale schijf G' in de plaats van 'homie H' en 'big momma G' ook mijn fototoestel herkent hij niet meer, hij geeft hem ook weer als lokaal station. Nog even vermelden dat net voor deze problemen zich voordeden, dat ik eerst mijn schijven niet meer gewoon kon 'openen' maar dat ik ze moest openen a.d.h.v. 'verkennen'. Ik heb ook al even gecheckt in schijfbeheer, en daar kan hij wel zien hoe groot het volume is, maar niet hoeveel erop staat. Aan de harde schijven zelf is niets mis, want op andere pc's heb ik helemaal geen problemen om ze te openen, is er iemand die mij kan helpen? alvast bedankt!