Lisan

14 juli 2009

Dat zal ik is aan me vader voorleggen..

Norman was geloof ik de licentie van verlopen

maar me vader was bezig met een nieuwe krijgen maar dat lukt niet geloof ik..?

en die andere 2 zeggen mij niks...

14 juli 2009

Hij is foetsiej..

14 juli 2009

ComboFix 09-07-13.01 - Gea 14-07-2009 13:46.4.2 - NTFSx86

Microsoft Windows XP Home Edition 5.1.2600.3.1252.31.1043.18.511.140 [GMT 2:00]

Gestart vanuit: c:\documents and settings\Gea\Bureaublad\ComboFix.exe

gebruikte Opdracht switches :: c:\documents and settings\Gea\Bureaublad\CFScript.txt

AV: avast! antivirus 4.8.1335 [VPS 090713-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

AV: ESET NOD32 antivirus systeem 2.70 *On-access scanning disabled* (Outdated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}

AV: Norman Virus Control ver. 5.99 *On-access scanning disabled* (Outdated) {EB9EFB40-AE72-4C43-B204-0FCD0E92D5F1}

FILE ::

"c:\windows\system32\drivers\ctredr15.sys"

.

(((((((((((((((((((( Bestanden Gemaakt van 2009-06-14 to 2009-07-14 ))))))))))))))))))))))))))))))

.

2009-07-14 11:37 . 2009-07-14 11:37 410984 ----a-w- c:\windows\system32\deploytk.dll

2009-07-14 11:36 . 2009-07-14 11:36 -------- d-----w- c:\documents and settings\All Users\Application Data\McAfee

2009-07-13 18:21 . 2009-07-13 18:21 -------- d-----w- c:\program files\TomTom International B.V

2009-07-13 08:47 . 2009-07-13 08:47 -------- d-----w- c:\program files\Trend Micro

2009-07-12 16:17 . 2009-02-05 20:06 23152 ----a-w- c:\windows\system32\drivers\aswRdr.sys

2009-07-12 16:17 . 2009-02-05 20:06 51376 ----a-w- c:\windows\system32\drivers\aswTdi.sys

2009-07-12 16:17 . 2009-02-05 20:05 26944 ----a-w- c:\windows\system32\drivers\aavmker4.sys

2009-07-12 16:17 . 2009-02-05 20:04 97480 ----a-w- c:\windows\system32\AvastSS.scr

2009-07-12 16:17 . 2009-02-05 20:07 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys

2009-07-12 16:17 . 2009-02-05 20:07 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys

2009-07-12 16:17 . 2009-02-05 20:08 93296 ----a-w- c:\windows\system32\drivers\aswmon.sys

2009-07-12 16:17 . 2009-02-05 20:08 94032 ----a-w- c:\windows\system32\drivers\aswmon2.sys

2009-07-12 16:16 . 2009-02-05 20:11 1256296 ----a-w- c:\windows\system32\aswBoot.exe

2009-07-12 16:16 . 2009-07-12 16:16 -------- d-----w- c:\program files\Alwil Software

2009-07-12 15:20 . 2009-07-12 15:20 -------- d-----w- c:\windows\l2schemas

2009-07-12 15:20 . 2009-07-12 15:20 -------- d-----w- c:\windows\system32\nl

2009-07-12 15:20 . 2009-07-12 15:20 -------- d-----w- c:\windows\system32\bits

2009-07-12 12:33 . 2009-07-12 12:33 -------- d-----w- c:\documents and settings\Administrator\Application Data\Malwarebytes

2009-07-12 12:33 . 2009-06-17 09:27 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2009-07-12 12:33 . 2009-07-12 12:33 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2009-07-12 12:33 . 2009-07-12 12:33 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes

2009-07-12 12:33 . 2009-06-17 09:27 19096 ----a-w- c:\windows\system32\drivers\mbam.sys

2009-07-10 18:33 . 2009-07-10 18:33 -------- d-----w- c:\documents and settings\Dhr. J.J. van Dam\Local Settings\Application Data\Magentic

2009-07-08 19:03 . 2009-07-08 19:03 -------- d-----w- c:\documents and settings\Gea\Application Data\MSN6

2009-07-05 13:47 . 2009-07-05 13:52 -------- d-----w- c:\documents and settings\Gea\Local Settings\Application Data\Magentic

2009-07-03 17:16 . 2009-07-05 09:43 -------- d-----w- c:\documents and settings\Dhr. J.J. van Dam\Local Settings\Application Data\IM

2009-06-27 18:28 . 2009-07-09 13:50 -------- d-----w- c:\documents and settings\Gea\Local Settings\Application Data\IM

2009-06-27 18:28 . 2009-06-27 18:28 -------- d-----w- c:\documents and settings\All Users\Application Data\IncrediMail

2009-06-25 17:39 . 2009-07-13 08:57 -------- d-----w- c:\program files\Microsoft Digital Image 2006

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-07-14 11:41 . 2005-05-19 17:23 -------- d-----w- c:\program files\Hitman Pro

2009-07-14 11:36 . 2004-10-07 19:12 -------- d-----w- c:\program files\Java

2009-07-14 11:00 . 2007-09-29 15:52 2560 ----a-w- c:\windows\system32\drivers\mchInjDrv.sys

2009-07-13 19:31 . 2008-07-04 15:55 -------- d-----w- c:\documents and settings\All Users\Application Data\Google Updater

2009-07-13 18:20 . 2008-02-10 11:27 -------- d-----w- c:\program files\TomTom HOME 2

2009-07-13 08:57 . 2007-07-21 15:45 -------- d-----w- c:\program files\Windows Media Connect 2

2009-07-13 08:57 . 2005-11-15 15:02 -------- d-----w- c:\program files\Easy Computing

2009-07-13 08:57 . 2008-04-25 07:20 -------- d-----w- c:\program files\Automation Anywhere 4.5

2009-07-13 08:57 . 2008-04-24 16:46 -------- d-----w- c:\program files\Albumprinter Pro Editor

2009-07-13 08:46 . 2006-08-16 19:17 -------- d-----w- c:\program files\Gamenext

2009-07-13 08:44 . 2005-10-10 18:36 -------- d-----w- c:\program files\Google

2009-07-13 08:38 . 2006-03-24 14:40 -------- d-----w- c:\program files\MSN Messenger

2009-07-12 16:01 . 2003-04-08 12:00 71130 ----a-w- c:\windows\system32\perfc013.dat

2009-07-12 16:01 . 2003-04-08 12:00 445316 ----a-w- c:\windows\system32\perfh013.dat

2009-07-12 15:23 . 2004-10-06 09:49 76487 ----a-w- c:\windows\PCHealth\HelpCtr\OfflineCache\index.dat

2009-07-05 09:41 . 2004-10-06 15:09 98576 ----a-w- c:\documents and settings\Dhr. J.J. van Dam\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2009-07-05 09:08 . 2004-10-07 18:41 98576 ----a-w- c:\documents and settings\Gea\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2009-06-29 20:02 . 2007-03-08 16:24 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP

2009-06-29 19:36 . 2008-02-17 20:14 -------- d-----w- c:\documents and settings\Gea\Application Data\ZoomBrowser EX

2009-06-29 19:36 . 2007-05-11 18:46 -------- d-----w- c:\documents and settings\All Users\Application Data\ZoomBrowser

2009-06-28 21:03 . 2008-05-18 16:01 -------- d-----w- c:\program files\Common Files\Symantec Shared

2009-06-28 21:00 . 2008-05-17 18:38 -------- d-----w- c:\program files\Norton Security Scan

2009-05-07 15:34 . 2003-04-08 12:00 347136 ----a-w- c:\windows\system32\localspl.dll

2009-04-29 04:46 . 2003-04-08 12:00 669696 ----a-w- c:\windows\system32\wininet.dll

2009-04-29 04:46 . 2004-10-06 15:00 81920 ------w- c:\windows\system32\ieencode.dll

2009-04-21 13:05 . 2009-04-21 13:05 86016 ----a-w- c:\documents and settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylom\fitnessdash\nl-NL\ZylomHost.exe

2009-04-21 13:05 . 2009-04-21 13:05 49152 ----a-w- c:\documents and settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylom\fitnessdash\nl-NL\ZylomAdapter.dll

2009-04-21 13:05 . 2009-04-21 13:05 2080768 ----a-w- c:\documents and settings\All Users\Application Data\Zylom\ZylomGamesPlayer\zylom\fitnessdash\nl-NL\fitnessdash.exe

2009-04-19 19:51 . 2003-04-08 12:00 1847296 ----a-w- c:\windows\system32\win32k.sys

2009-04-15 14:55 . 2003-04-08 12:00 585216 ----a-w- c:\windows\system32\rpcrt4.dll

.

((((((((((((((((((((((((((((( SnapShot@2009-07-13_10.14.46 )))))))))))))))))))))))))))))))))))))))))

.

+ 2009-07-14 11:37 . 2009-07-14 11:37 16384 c:\windows\Temp\Perflib_Perfdata_9d0.dat

+ 2009-07-14 10:58 . 2009-07-14 10:58 16384 c:\windows\Temp\Perflib_Perfdata_5dc.dat

- 2003-04-08 12:00 . 2008-04-14 17:02 90112 c:\windows\system32\wshext.dll

+ 2003-04-08 12:00 . 2008-05-09 10:56 90112 c:\windows\system32\wshext.dll

- 2007-07-21 15:46 . 2007-11-30 11:19 18808 c:\windows\system32\spmsg.dll

+ 2007-07-21 15:46 . 2007-11-30 12:39 18808 c:\windows\system32\spmsg.dll

+ 2008-05-09 10:56 . 2008-05-09 10:56 90112 c:\windows\system32\dllcache\wshext.dll

+ 2003-04-08 12:00 . 2008-05-08 11:24 155648 c:\windows\system32\wscript.exe

- 2003-04-08 12:00 . 2008-04-14 17:03 155648 c:\windows\system32\wscript.exe

+ 2003-04-08 12:00 . 2008-05-09 10:56 430080 c:\windows\system32\vbscript.dll

- 2003-04-08 12:00 . 2008-04-14 17:02 172032 c:\windows\system32\scrrun.dll

+ 2003-04-08 12:00 . 2008-05-09 10:56 172032 c:\windows\system32\scrrun.dll

- 2003-04-08 12:00 . 2008-04-14 17:02 180224 c:\windows\system32\scrobj.dll

+ 2003-04-08 12:00 . 2008-05-09 10:56 180224 c:\windows\system32\scrobj.dll

+ 2003-04-08 12:00 . 2008-05-09 10:56 512000 c:\windows\system32\jscript.dll

- 2003-04-08 12:00 . 2008-04-14 17:02 512000 c:\windows\system32\jscript.dll

+ 2009-07-14 11:37 . 2009-07-14 11:37 148888 c:\windows\system32\javaws.exe

+ 2009-07-14 11:37 . 2009-07-14 11:37 144792 c:\windows\system32\javaw.exe

+ 2009-07-14 11:37 . 2009-07-14 11:37 144792 c:\windows\system32\java.exe

+ 2008-05-08 11:24 . 2008-05-08 11:24 155648 c:\windows\system32\dllcache\wscript.exe

+ 2008-05-09 10:56 . 2008-05-09 10:56 430080 c:\windows\system32\dllcache\vbscript.dll

+ 2008-05-09 10:56 . 2008-05-09 10:56 172032 c:\windows\system32\dllcache\scrrun.dll

+ 2008-05-09 10:56 . 2008-05-09 10:56 180224 c:\windows\system32\dllcache\scrobj.dll

+ 2008-05-09 10:56 . 2008-05-09 10:56 512000 c:\windows\system32\dllcache\jscript.dll

+ 2008-05-07 09:07 . 2008-05-07 09:07 135168 c:\windows\system32\dllcache\cscript.exe

+ 2003-04-08 12:00 . 2008-05-07 09:07 135168 c:\windows\system32\cscript.exe

+ 2009-07-14 11:36 . 2009-07-14 11:36 536576 c:\windows\Installer\2355dd.msi

+ 2009-07-13 18:21 . 2009-07-13 18:21 146944 c:\windows\Installer\1c5e71e.msi

+ 2008-09-19 19:01 . 2008-09-10 01:16 1307648 c:\windows\system32\msxml6.dll

+ 2008-09-19 19:01 . 2008-09-10 01:16 1307648 c:\windows\system32\dllcache\msxml6.dll

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]

"LDM"="c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" [2007-02-13 67128]

"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-05-19 68856]

"RoboForm"="c:\program files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" [2008-10-19 160592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"HP Software Update"="c:\program files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe" [2005-05-11 49152]

"Norman ZANDA"="c:\norman\Npm\bin\ZLH.EXE" [2008-06-02 273520]

"VX1000"="c:\windows\vVX1000.exe" [2006-10-13 707376]

"Hitman Pro Expiration Helper"="c:\program files\Hitman Pro\xphelper.exe" [2007-01-30 596760]

"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-14 148888]

"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-01-05 413696]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-04-02 342312]

"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-02-05 81000]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\

Adobe Reader Snelle start.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696]

Automation Anywhere Event Monitor.lnk - c:\program files\Automation Anywhere 4.5\AAEventMonitor.exe [2007-4-27 57344]

Automation Anywhere Hotkeys.lnk - c:\program files\Automation Anywhere 4.5\AAHotkeys.exe [2008-2-6 106496]

WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2008-2-8 394856]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]

BootExecute REG_MULTI_SZ autocheck autochk *\0SsiEfr.e

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^HP Digital Imaging Monitor.lnk]

path=c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\HP Digital Imaging Monitor.lnk

backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^Logitech Desktop Messenger.lnk]

path=c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\Logitech Desktop Messenger.lnk

backup=c:\windows\pss\Logitech Desktop Messenger.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^Logitech SetPoint.lnk]

path=c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\Logitech SetPoint.lnk

backup=c:\windows\pss\Logitech SetPoint.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^Snelstart HP Image Zone.lnk]

path=c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\Snelstart HP Image Zone.lnk

backup=c:\windows\pss\Snelstart HP Image Zone.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Dhr. J.J. van Dam^Menu Start^Programma's^Opstarten^Microsoft Office Snelzoeken.lnk]

path=c:\documents and settings\Dhr. J.J. van Dam\Menu Start\Programma's\Opstarten\Microsoft Office Snelzoeken.lnk

backup=c:\windows\pss\Microsoft Office Snelzoeken.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Dhr. J.J. van Dam^Menu Start^Programma's^Opstarten^Office Opstarten.lnk]

path=c:\documents and settings\Dhr. J.J. van Dam\Menu Start\Programma's\Opstarten\Office Opstarten.lnk

backup=c:\windows\pss\Office Opstarten.lnkStartup

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"c:\\Program Files\\NoNameScript\\mirc.exe"=

"c:\\Program Files\\WS_FTP\\WS_FTP95.exe"=

"c:\\Program Files\\ASUS\\WL-520g&WL-500G-X Wireless Router Utilities\\Discovery520g.exe"=

"c:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqste08.exe"=

"c:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpofxm08.exe"=

"c:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hposfx08.exe"=

"c:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hposid01.exe"=

"c:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqscnvw.exe"=

"c:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqkygrp.exe"=

"c:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqCopy.exe"=

"c:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpfccopy.exe"=

"c:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpzwiz01.exe"=

"c:\\Program Files\\Hewlett-Packard\\Digital Imaging\\Unload\\HpqPhUnl.exe"=

"c:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpoews01.exe"=

"c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=

"c:\\Program Files\\Messenger\\msmsgs.exe"=

"c:\\Program Files\\utorrent\\utorrent.exe"=

"c:\\Program Files\\iMesh Applications\\iMesh\\iMesh.exe"=

"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=

"c:\\Program Files\\iTunes\\iTunes.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=

"c:\\Program Files\\MSN Messenger\\livecall.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

"9722:TCP"= 9722:TCP:BitComet 9722 TCP

"9722:UDP"= 9722:UDP:BitComet 9722 UDP

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [12-7-2009 18:17 114768]

R1 mchInjDrv;madCodeHook DLL injection driver;c:\windows\system32\drivers\mchInjDrv.sys [29-9-2007 17:52 2560]

R1 NGS;Norman General Security Driver;c:\norman\NVC\BIN\ngs.sys [27-3-2009 22:54 22712]

R1 nod32drv;nod32drv;c:\windows\system32\drivers\nod32drv.sys [28-6-2008 10:23 15424]

R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [12-7-2009 18:17 20560]

R2 Automation Anywhere Service 4.5;Automation Anywhere Service 4.5;c:\program files\Automation Anywhere 4.5\Automation Anywhere Service.exe [9-1-2008 20:31 20480]

R2 Ndiskio;Ndiskio;c:\norman\Nse\bin\Ndiskio.sys [17-1-2005 19:30 20448]

R2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [8-4-2009 12:38 92008]

R3 nsesvc;Norman Scanner Engine Service;c:\norman\Nse\bin\Nsesvc.exe [5-2-2009 23:16 183352]

R3 NvcMFlt;NvcMFlt;c:\windows\system32\drivers\nvcw32mf.sys [5-5-2007 21:29 19512]

R3 nvcoas;Norman Virus Control on-access component;c:\norman\NVC\BIN\Nvcoas.exe [23-2-2009 20:21 183352]

R3 NVCScheduler;Norman Virus Control Scheduler;c:\norman\NVC\BIN\Nvcsched.exe [13-7-2007 18:49 146488]

S1 ctredr15.sys;ctredr15.sys;\??\c:\windows\system32\drivers\ctredr15.sys --> c:\windows\system32\drivers\ctredr15.sys [?]

S3 nvcfsr;nvcfsr;c:\norman\NVC\BIN\Nvcfsr.sys [6-10-2004 17:26 6712]

S3 nvcoafl51;nvcoafl51;c:\norman\NVC\BIN\Nvcoafl51.sys [6-10-2004 17:26 30264]

S3 nvcoaft51;nvcoaft51;c:\norman\NVC\BIN\Nvcoaft51.sys [6-10-2004 17:26 129848]

S3 nvcoarc51;nvcoarc51;c:\norman\NVC\BIN\Nvcoarc51.sys [6-10-2004 17:26 23224]

--- Andere Services/Drivers In Geheugen ---

*NewlyCreated* - JAVAQUICKSTARTERSERVICE

.

Inhoud van de 'Gedeelde Taken' map

2009-07-09 c:\windows\Tasks\AppleSoftwareUpdate.job

- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]

2009-07-14 c:\windows\Tasks\Google Software Updater.job

- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-04-24 15:26]

2009-06-29 c:\windows\Tasks\Norton Security Scan for Gea.job

- c:\program files\Norton Security Scan\Nss.exe [2008-09-19 19:20]

.

------- Bijkomende Scan -------

.

uStart Page = hxxp://www.prijsvragenplaza.nl/

uSearch Page = hxxp://www.google.com

uDefault_Search_URL = hxxp://ie.search.msn.com

uSearch Bar = hxxp://www.google.com/ie

uInternet Connection Wizard,ShellNext = "c:\program files\Outlook Express\msimn.exe"

uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

IE: Formulieren opslaan - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComSavePass.html

IE: Invul Formulieren - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComFillForms.html

IE: Menu aanpassen - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html

IE: RoboForm Werkbalk - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html

Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll

DPF: {34DC6011-88B5-4EA9-BA7A-DC7B4F4437FE} - hxxp://foto.hema.nl/ips-opdata/layout/hema/objects/jordan.cab

DPF: {63D6DD13-C913-466D-9444-9357561E4D94} - hxxp://www.mijnalbum.nl/v3/skinsrc/core/system/mauploader/uploadtoepassing.cab

DPF: {7CCAD6DD-DD0B-440B-91FF-7670F5AADC21} - hxxp://www.gamenext.nl/online/online2/mahjong_escape_ancient_japan/SpinTopGamesLauncher.cab

DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game12.zylomgames.com/activex/zylomgamesplayer.cab

DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} - hxxp://62.45.27.98/activex/AMC.cab

DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} - hxxp://as.photoprintit.de/ips-opdata/74914090/activex/IPSUploader.cab

.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2009-07-14 14:00

Windows 5.1.2600 Service Pack 3 NTFS

scannen van verborgen processen ...

scannen van verborgen autostart items ...

scannen van verborgen bestanden ...

Scan succesvol afgerond

verborgen bestanden: 0

**************************************************************************

.

--------------------- DLLs Geladen Onder Lopende Processen ---------------------

- - - - - - - > 'explorer.exe'(3808)

c:\norman\nvc\bin\Niphk.dll

c:\windows\system32\WPDShServiceObj.dll

c:\windows\system32\PortableDeviceTypes.dll

c:\windows\system32\PortableDeviceApi.dll

- - - - - - - > 'explorer.exe'(212)

c:\norman\nvc\bin\Niphk.dll

c:\progra~1\WINDOW~2\wmpband.dll

c:\windows\system32\WPDShServiceObj.dll

c:\windows\system32\PortableDeviceTypes.dll

c:\windows\system32\PortableDeviceApi.dll

.

Voltooingstijd: 2009-07-14 14:11

ComboFix-quarantined-files.txt 2009-07-14 12:11

ComboFix2.txt 2009-07-13 10:20

Pre-Run: 22.404.780.032 bytes beschikbaar

Post-Run: 22.577.995.776 bytes beschikbaar

261 --- E O F --- 2009-07-13 20:45

13 juli 2009

Combofix Log:

ComboFix 09-07-12.03 - Gea 13-07-2009 11:50.3.2 - NTFSx86

Microsoft Windows XP Home Edition 5.1.2600.3.1252.31.1043.18.511.127 [GMT 2:00]

Gestart vanuit: c:\documents and settings\Gea\Bureaublad\ComboFix.exe

AV: avast! antivirus 4.8.1335 [VPS 090712-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

AV: ESET NOD32 antivirus systeem 2.70 *On-access scanning disabled* (Outdated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}

AV: Norman Virus Control ver. 5.99 *On-access scanning enabled* (Outdated) {EB9EFB40-AE72-4C43-B204-0FCD0E92D5F1}

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

-------\Legacy_NETSIK

(((((((((((((((((((( Bestanden Gemaakt van 2009-06-13 to 2009-07-13 ))))))))))))))))))))))))))))))