Ga naar inhoud

NvBgm

Lid
 Bekijk profiel  Bekijk hun activiteit

  • Items

    5

  • Registratiedatum

  • Laatst bezocht

 Inhoudstype 

Berichten die geplaatst zijn door NvBgm

    Thunderbird accepteerd geen 2 maal zelfde e-mailadres in adresboek.

    in Archief E-mailprogramma's

    Geplaatst:

    Nu gebruik ik thunderbird email al jaren maar kom nu toch iets tegen waar ik geen oplossing voor heb gevonden tot nu toe. :(

    In mijn vriendenclub zijn er mensen die hetzelfde e-mail adres gebruiken en de binnengekomen e-mails filteren op naam zodat ze ieder hun eigen postvak hebben.

    Hoe dat in elkaar zit begrijp ik volkomen, maar hoe zet ik nu hun adressen in mijn adresboek. ????

     

    Dus 1 e-mail adres met 3 namen.

     

    In het adresboek kan ik dus geen twee verschillende namen opslaan met hetzelfde e-mail adres.  ??

     

     

    Virusprog G-date ondekt Malware Defense

    in Archief Bestrijding malware & virussen

    Geplaatst:

    Hallo Kape, Ik heb alles uitgevoerd zoals je hebt beschreven.

    Hieronder de logfiles.

    ComboFix 10-02-24.03 - Administrator 25-02-2010 12:43:32.5.1 - x86

    Microsoft Windows XP Professional 5.1.2600.3.1252.31.1043.18.767.519 [GMT 1:00]

    Gestart vanuit: c:\documents and settings\Administrator\Bureaublad\ComboFix.exe

    gebruikte Opdracht switches :: c:\documents and settings\Administrator\Bureaublad\CFScript.txt

    FILE ::

    "c:\windows\system32\drivers\beo7c6c.sys"

    "c:\windows\system32\drivers\tdpmqac.sys"

    .

    (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    c:\windows\box.exe

    c:\windows\system32\drivers\beo7c6c.sys

    .

    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    -------\Legacy_MNMSTEM

    -------\Service_beo7c6c

    -------\Service_mnmstem

    (((((((((((((((((((( Bestanden Gemaakt van 2010-01-25 to 2010-02-25 ))))))))))))))))))))))))))))))

    .

    2010-02-24 13:05 . 2010-02-24 13:05 -------- d-----w- c:\program files\Agics

    2010-02-23 21:35 . 2010-02-23 21:35 -------- d-----w- c:\documents and settings\Administrator\Application Data\ESET

    2010-02-23 21:34 . 2010-02-23 21:34 -------- d-----w- c:\documents and settings\All Users\Application Data\ESET

    2010-02-23 13:04 . 2010-02-23 13:04 5115823 ----a-w- c:\documents and settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe

    2010-02-23 13:03 . 2010-01-07 15:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys

    2010-02-23 13:03 . 2010-01-07 15:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

    2010-02-23 13:02 . 2010-02-23 13:04 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

    2010-02-22 18:41 . 2010-02-22 18:41 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\ESET

    2010-02-22 13:01 . 2010-02-22 13:01 -------- d-----w- c:\windows\l2schemas

    2010-02-22 13:01 . 2010-02-22 13:01 -------- d-----w- c:\windows\system32\nl

    2010-02-22 13:01 . 2010-02-22 13:01 -------- d-----w- c:\windows\system32\bits

    2010-02-22 12:37 . 2010-02-22 12:37 -------- d-----w- c:\documents and settings\All Users\Application Data\Office Genuine Advantage

    2010-02-22 12:08 . 2010-02-22 12:58 -------- d-----w- c:\windows\ServicePackFiles

    2010-02-22 11:50 . 2008-04-13 18:36 46464 ------w- c:\windows\system32\drivers\gagp30kx.sys

    2010-02-22 11:49 . 2008-04-14 17:02 53248 ------w- c:\windows\system32\tsgqec.dll

    2010-02-22 11:49 . 2008-04-14 17:02 50688 ------w- c:\windows\system32\tspkg.dll

    2010-02-22 11:49 . 2008-04-13 18:36 44672 ------w- c:\windows\system32\drivers\uagp35.sys

    2010-02-22 11:49 . 2008-04-14 17:02 11325 ------w- c:\windows\system32\drivers\vchnt5.dll

    2010-02-22 11:49 . 2008-04-13 18:56 12800 ------w- c:\windows\system32\drivers\usb8023x.sys

    2010-02-22 11:49 . 2008-04-13 18:46 121984 ------w- c:\windows\system32\drivers\usbvideo.sys

    2010-02-22 11:49 . 2008-04-13 18:45 30208 ------w- c:\windows\system32\drivers\usbehci.sys

    2010-02-22 11:49 . 2008-04-13 18:43 14208 ------w- c:\windows\system32\drivers\wacompen.sys

    2010-02-22 11:49 . 2008-04-13 18:36 42240 ------w- c:\windows\system32\drivers\viaagp.sys

    2010-02-22 11:49 . 2008-04-14 17:02 69120 ------w- c:\windows\system32\wlanapi.dll

    2010-02-22 11:33 . 2009-12-21 19:10 246272 -c----w- c:\windows\system32\dllcache\ieproxy.dll

    2010-02-22 11:33 . 2009-12-21 19:10 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll

    2010-02-22 11:32 . 2009-11-21 16:03 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll

    2010-02-22 11:31 . 2009-10-15 16:38 81920 -c----w- c:\windows\system32\dllcache\fontsub.dll

    2010-02-22 11:31 . 2009-10-15 16:38 119808 -c----w- c:\windows\system32\dllcache\t2embed.dll

    2010-02-22 11:29 . 2009-07-10 13:31 1315328 -c----w- c:\windows\system32\dllcache\msoe.dll

    2010-02-21 20:37 . 2001-09-06 18:04 12288 -c--a-w- c:\windows\system32\dllcache\mouhid.sys

    2010-02-21 20:37 . 2001-09-06 18:04 12288 ----a-w- c:\windows\system32\drivers\mouhid.sys

    2010-02-21 20:37 . 2008-04-13 18:45 10368 ----a-w- c:\windows\system32\drivers\hidusb.sys

    2010-02-21 20:32 . 2010-02-21 20:32 -------- d-----w- c:\windows\system32\wbem\Repository

    2010-02-21 19:37 . 2010-02-21 20:23 -------- d-----w- C:\RECYCLER(2)

    2010-02-20 18:09 . 2010-02-20 18:09 -------- d-----w- c:\program files\Common Files\iS3

    2010-02-20 12:31 . 2010-02-20 12:40 -------- d--h--w- c:\documents and settings\_gsdata_

    2010-02-20 12:29 . 2010-02-20 12:29 -------- d-----w- c:\documents and settings\All Users\Application Data\GoodSync

    2010-02-20 12:23 . 2010-02-20 12:23 -------- d-----w- c:\documents and settings\Administrator\Application Data\Malwarebytes

    2010-02-20 12:22 . 2010-02-20 12:22 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes

    2010-02-20 10:44 . 2010-02-20 10:44 50888 ----a-w- c:\windows\system32\drivers\GDTdiIcpt.sys

    2010-02-20 10:44 . 2010-02-20 10:44 32200 ----a-w- c:\windows\system32\drivers\HookCentre.sys

    2010-02-20 10:43 . 2010-02-21 20:08 -------- d-----w- c:\program files\Common Files\G DATA

    2010-02-20 10:11 . 2010-02-20 10:11 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\Downloaded Installations

    2010-02-20 09:38 . 2010-02-20 09:38 -------- d-----w- c:\program files\MSBuild

    2010-02-20 09:38 . 2010-02-20 10:00 -------- d-----w- c:\windows\system32\XPSViewer

    2010-02-20 09:38 . 2010-02-20 09:38 -------- d-----w- c:\program files\Reference Assemblies

    2010-02-20 09:37 . 2008-07-06 12:06 89088 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll

    2010-02-20 09:37 . 2006-06-29 12:07 14048 ------w- c:\windows\system32\spmsg2.dll

    2010-02-20 09:33 . 2010-02-20 09:33 -------- d-----w- c:\program files\MSXML 6.0

    2010-02-20 08:25 . 2010-02-20 08:25 -------- d-----w- C:\symbols

    2010-02-20 08:25 . 2010-02-20 08:25 -------- d-----w- c:\documents and settings\All Users\Application Data\dbg

    2010-02-19 23:12 . 2010-02-20 07:39 -------- d-----w- c:\documents and settings\Administrator\Application Data\Godlike

    2010-02-19 23:12 . 2010-02-19 23:12 -------- d-----w- c:\program files\WinTools Software

    2010-02-19 22:45 . 2010-02-24 13:08 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP

    2010-02-19 22:45 . 2010-02-20 11:03 -------- d-----w- c:\program files\Your Uninstaller 2010

    2010-02-19 22:40 . 2010-02-19 22:40 -------- d-----w- c:\windows\system32\config\systemprofile\Application Data\ESET

    2010-02-19 16:54 . 2010-02-19 16:54 3584 ----a-r- c:\documents and settings\Administrator\Application Data\Microsoft\Installer\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}\Icon386ED4E3.exe

    2010-02-19 16:54 . 2010-02-19 16:54 -------- d-----w- c:\program files\Windows Installer Clean Up

    2010-02-19 16:54 . 2010-02-19 16:54 -------- d-----w- c:\program files\MSECACHE

    2010-02-19 15:40 . 2010-02-20 16:23 -------- d-----w- c:\documents and settings\Administrator\Application Data\GoodSync

    2010-02-19 15:40 . 2010-02-19 15:40 -------- d-----w- c:\program files\Siber Systems

    2010-02-19 14:30 . 2010-02-19 14:30 -------- d-----w- c:\program files\Google

    2010-01-28 09:32 . 2010-02-19 14:16 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\Temp

    .

    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2010-02-24 13:15 . 2007-01-25 17:23 -------- d-----w- c:\program files\iTunes

    2010-02-24 13:13 . 2005-08-31 18:09 -------- d-----w- c:\program files\MSN Messenger

    2010-02-24 13:13 . 2005-10-04 17:42 -------- d-----w- c:\program files\BitComet

    2010-02-22 13:32 . 2005-08-31 19:01 401336 ----a-w- c:\documents and settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

    2010-02-22 13:04 . 2005-08-29 20:07 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat

    2010-02-21 20:35 . 2010-02-21 20:35 280 ----a-w- c:\windows\system32\drivers\kgpcpy.cfg

    2010-02-20 09:36 . 2002-12-31 12:00 67664 ----a-w- c:\windows\system32\perfc013.dat

    2010-02-20 09:36 . 2002-12-31 12:00 436450 ----a-w- c:\windows\system32\perfh013.dat

    2010-02-19 22:45 . 2005-08-31 17:45 -------- d-----w- c:\documents and settings\Administrator\Application Data\URSoft

    2010-02-19 15:57 . 2007-03-01 12:06 -------- d-----w- c:\program files\EI

    2010-01-21 13:39 . 2005-12-05 20:52 -------- d-----w- c:\documents and settings\Administrator\Application Data\Lavasoft

    2010-01-20 15:11 . 2010-01-20 15:11 -------- d-----w- c:\documents and settings\All Users\Application Data\HPSSUPPLY

    2010-01-06 13:58 . 2005-10-01 14:20 -------- d-----w- c:\program files\Java

    2010-01-06 13:57 . 2010-01-06 13:57 152576 ----a-w- c:\documents and settings\Administrator\Application Data\Sun\Java\jre1.6.0_17\lzma.dll

    2010-01-06 13:57 . 2010-01-06 13:57 79488 ----a-w- c:\documents and settings\Administrator\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll

    2009-12-31 16:50 . 2002-12-31 12:00 353792 ----a-w- c:\windows\system32\drivers\srv.sys

    2009-12-21 19:10 . 2002-12-31 12:00 916480 ------w- c:\windows\system32\wininet.dll

    2009-12-17 07:42 . 2005-08-29 20:03 345600 ----a-w- c:\windows\system32\mspaint.exe

    2009-12-14 07:10 . 2002-12-31 12:00 33280 ----a-w- c:\windows\system32\csrsrv.dll

    2009-12-09 10:11 . 2004-08-04 00:58 2070400 ------w- c:\windows\system32\ntkrnlpa.exe

    2009-12-09 10:11 . 2002-12-31 12:00 2193536 ------w- c:\windows\system32\ntoskrnl.exe

    2009-12-04 18:22 . 2002-12-31 12:00 455424 ----a-w- c:\windows\system32\drivers\mrxsmb.sys

    2009-11-27 17:14 . 2002-12-31 12:00 1295872 ----a-w- c:\windows\system32\quartz.dll

    2009-11-27 17:14 . 2004-08-04 01:03 17920 ----a-w- c:\windows\system32\msyuv.dll

    2009-11-27 16:10 . 2004-08-04 01:03 48128 ----a-w- c:\windows\system32\iyuv_32.dll

    2009-11-27 16:10 . 2002-12-31 12:00 85504 ----a-w- c:\windows\system32\avifil32.dll

    2009-11-27 16:10 . 2002-12-31 12:00 28672 ----a-w- c:\windows\system32\msvidc32.dll

    2009-11-27 16:10 . 2002-12-31 12:00 11264 ----a-w- c:\windows\system32\msrle32.dll

    2009-11-27 16:10 . 2001-09-06 21:27 8704 ----a-w- c:\windows\system32\tsbyuv.dll

    .

    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

    REGEDIT4

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2010-01-07 429392]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

    "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]

    "NoStartMenuSubFolders"= 0 (0x0)

    "NoCommonGroups"= 0 (0x0)

    "NoPrinters"= 0 (0x0)

    "NoRecentDocsNetHood"= 0 (0x0)

    "NoChangeAnimation"= 0 (0x0)

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]

    "AVKWCtl"=2 (0x2)

    "AVKService"=2 (0x2)

    "AVKProxy"=2 (0x2)

    "NOD32FiXTemDono"=2 (0x2)

    "mnmsrvc"=3 (0x3)

    "helpsvc"=2 (0x2)

    "FontCache3.0.0.0"=3 (0x3)

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]

    "C-Media Mixer"=Mixer.exe /startup

    "NeroFilterCheck"=c:\windows\system32\NeroCheck.exe

    "HP Software Update"=c:\program files\HP\HP Software Update\HPWuSchd2.exe

    "QuickTime Task"="c:\program files\QuickTime\qttask.exe" -atboottime

    "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe"

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

    "DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

    "%windir%\\system32\\sessmgr.exe"=

    "c:\\Program Files\\totalcmd\\TOTALCMD.EXE"=

    "c:\\WINDOWS\\system\\W3DBSMGR.EXE"=

    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=

    R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [23-2-2010 14:03 236368]

    R3 ham50;Creatix V.90 HAM Data Fax Modem;c:\windows\system32\drivers\CTXH51.sys [31-8-2005 17:17 454815]

    R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [23-2-2010 14:03 19160]

    S4 NOD32FiXTemDono;Eset Nod32 Boot;c:\windows\system32\regedt32.exe [31-12-2002 13:00 3584]

    .

    Inhoud van de 'Gedeelde Taken' map

    2010-01-27 c:\windows\Tasks\AppleSoftwareUpdate.job

    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2006-10-10 16:13]

    2010-02-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1275210071-583907252-1417001333-500Core.job

    - c:\documents and settings\Administrator\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-01-21 13:27]

    2010-02-24 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1275210071-583907252-1417001333-500UA.job

    - c:\documents and settings\Administrator\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-01-21 13:27]

    2010-02-25 c:\windows\Tasks\OGALogon.job

    - c:\windows\system32\OGAEXEC.exe [2009-08-03 14:07]

    2010-02-25 c:\windows\Tasks\User_Feed_Synchronization-{2EC35DD9-7ED5-4781-A3D0-E0AC482795F2}.job

    - c:\windows\system32\msfeedssync.exe [2007-08-13 02:31]

    .

    .

    ------- Bijkomende Scan -------

    .

    uSearchMigratedDefaultURL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}

    uStart Page = hxxp://www.google.nl/

    IE: {{20CCCFEC-D26F-4ffe-996B-388B39C8CCCA} - {20CCCFEC-D26F-4ffe-996B-388B39C8CCCA} - c:\windows\system32\mscoree.DLL

    .

    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

    Rootkit scan 2010-02-25 12:51

    Windows 5.1.2600 Service Pack 3 NTFS

    scannen van verborgen processen ...

    scannen van verborgen autostart items ...

    scannen van verborgen bestanden ...

    Scan succesvol afgerond

    verborgen bestanden: 0

    **************************************************************************

    .

    --------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

    [HKEY_USERS\S-1-5-21-1275210071-583907252-1417001333-500\Software\Microsoft\Internet Explorer\User Preferences]

    @Denied: (2) (Administrator)

    "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,

    d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,53,00,2a,43,b7,6e,79,40,a1,09,a4,\

    "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,

    d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,53,00,2a,43,b7,6e,79,40,a1,09,a4,\

    "6256FFB019F8FDFBD36745B06F4540E9AEAF222A25"=hex:01,00,00,00,d0,8c,9d,df,01,15,

    d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,53,00,2a,43,b7,6e,79,40,a1,09,a4,\

    [HKEY_LOCAL_MACHINE\software\Microsoft\Internet Explorer\User Preferences]

    @Denied: (2) (Administrator)

    "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,

    d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,53,00,2a,43,b7,6e,79,40,a1,09,a4,\

    "6256FFB019F8FDFBD36745B06F4540E9AEAF222A25"=hex:01,00,00,00,d0,8c,9d,df,01,15,

    d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,53,00,2a,43,b7,6e,79,40,a1,09,a4,\

    .

    --------------------- DLLs Geladen Onder Lopende Processen ---------------------

    - - - - - - - > 'explorer.exe'(1924)

    c:\windows\system32\webcheck.dll

    .

    ------------------------ Andere Aktieve Processen ------------------------

    .

    c:\program files\Java\jre6\bin\jqs.exe

    c:\windows\system32\HPZipm12.exe

    c:\windows\system32\wscntfy.exe

    .

    **************************************************************************

    .

    Voltooingstijd: 2010-02-25 12:56:26 - machine werd herstart

    ComboFix-quarantined-files.txt 2010-02-25 11:56

    ComboFix2.txt 2010-02-23 21:23

    ComboFix3.txt 2010-02-22 18:50

    Pre-Run: 11.640.225.792 bytes beschikbaar

    Post-Run: 11.567.116.288 bytes beschikbaar

    Current=3 Default=3 Failed=2 LastKnownGood=5 Sets=1,2,3,5

    - - End Of File - - C87B3713E3C48FDED97D2C7ABFD70DBA

    Logfile of Trend Micro HijackThis v2.0.2

    Scan saved at 12:59:54, on 25-2-2010

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v8.00 (8.00.6001.18702)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\Java\jre6\bin\jqs.exe

    C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

    C:\WINDOWS\system32\HPZipm12.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\wscntfy.exe

    C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

    C:\WINDOWS\system32\wuauclt.exe

    C:\WINDOWS\explorer.exe

    C:\Documents and Settings\Administrator\Bureaublad\HiJackThis_v202.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

    O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

    O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray

    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

    O9 - Extra button: (no name) - {20CCCFEC-D26F-4ffe-996B-388B39C8CCCA} - C:\WINDOWS\system32\mscoree.DLL

    O9 - Extra 'Tools' menuitem: Tri&xie Options... - {20CCCFEC-D26F-4ffe-996B-388B39C8CCCA} - C:\WINDOWS\system32\mscoree.DLL

    O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1266651938953

    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1266651931687

    O16 - DPF: {6F7864F9-DB33-11D3-8166-0060B0F885E6} (VSPTA Class) - https://www.vecozo.nl/VSApps/vspta3.cab

    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

    O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

    --

    End of file - 4145 bytes

    Malwarebytes' Anti-Malware 1.44

    Database versie: 3788

    Windows 5.1.2600 Service Pack 3

    Internet Explorer 8.0.6001.18702

    25-2-2010 13:11:04

    mbam-log-2010-02-25 (13-11-04).txt

    Scan type: Snelle Scan

    Objecten gescand: 118696

    Verstreken tijd: 7 minute(s), 44 second(s)

    Geheugenprocessen geïnfecteerd: 0

    Geheugenmodulen geïnfecteerd: 0

    Registersleutels geïnfecteerd: 0

    Registerwaarden geïnfecteerd: 0

    Registerdata bestanden geïnfecteerd: 0

    Mappen geïnfecteerd: 0

    Bestanden geïnfecteerd: 0

    Geheugenprocessen geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Geheugenmodulen geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Registersleutels geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Registerwaarden geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Registerdata bestanden geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Mappen geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Bestanden geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Zal opnieuw de scanner instaleren hoop dat alles werkt.

    Laat het hier nog even weten.

    Virusprog G-date ondekt Malware Defense

    in Archief Bestrijding malware & virussen

    Geplaatst:

    Hallo,

    Als nieuweling heb ik de laatste dagen al veel informatie van dit forum mogen opnemen en daarmee al behoorlijk wat problemen opgelost.

    Maar ik blijf met 1 probleem zitten en zou willen vragen of iemand hier een oplossing voor weet.

    Op mijn pc met windows xp geinstaleerd had ik een probleem met het connecten van internet. Via FTP ging prima maar met HTTP lukte niet. Door het opschonen van spy en malware is dit weer helemaal goed. Nu wil ik een virus scanner instaleren.

    Als eerste heb ik Nod32 geprobeerd maar deze gaf keer op keer foutmeldingen met updaten en bepaalde beveiligingen werden uitgeschakeld.

    Na een grondig verwijderen van Nod32 heb ik G-date willen instaleren.

    Tot op zekere hoogte ging dit prima tot ik een venster kreeg waarin mij gemeld werd dat er een virus of malware scanner gevonden was op mijn pc en deze eerst moest verwijderen. De gevonden virus of malware scanner was "Malware Defense" niet een onbekende boosdoener maar wat nu blijkt wel een lastige.

    Ik heb een paar logfile gemaakt misschien weet iemand daar een oplossing uit te halen.

    Logfile of Trend Micro HijackThis v2.0.2

    Scan saved at 20:37:16, on 21-2-2010

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v8.00 (8.00.6001.18702)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\Java\jre6\bin\jqs.exe

    C:\WINDOWS\system32\HPZipm12.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\wscntfy.exe

    C:\WINDOWS\explorer.exe

    C:\WINDOWS\system32\wuauclt.exe

    C:\Program Files\totalcmd\TOTALCMD.EXE

    C:\WINDOWS\system32\wuauclt.exe

    I:\!!Installatie prg!!\!! Stand Alone prg !!\HiJackThis_v202.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

    O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Trixie.Bho - {B0744341-96E0-4341-9ED2-8BC36CE0CCD0} - mscoree.dll (file missing)

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

    O9 - Extra button: (no name) - {20CCCFEC-D26F-4ffe-996B-388B39C8CCCA} - C:\WINDOWS\system32\mscoree.DLL

    O9 - Extra 'Tools' menuitem: Tri&xie Options... - {20CCCFEC-D26F-4ffe-996B-388B39C8CCCA} - C:\WINDOWS\system32\mscoree.DLL

    O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

    O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll

    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1266651938953

    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1266651931687

    O16 - DPF: {6F7864F9-DB33-11D3-8166-0060B0F885E6} (VSPTA Class) - https://www.vecozo.nl/VSApps/vspta3.cab

    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

    O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

    --

    End of file - 3758 bytes

    ComboFix 10-02-20.04 - Administrator 21-02-2010 20:19:08.1.1 - x86

    Microsoft Windows XP Professional 5.1.2600.2.1252.31.1043.18.767.550 [GMT 1:00]

    Gestart vanuit: i:\!!installatie prg!!\!! Stand Alone prg !!\ComboFix.exe

    .

    (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    c:\documents and settings\All Users\Application Data\96538896.ini

    c:\documents and settings\All Users\Menu Start\HP Image Zone .lnk

    c:\program files\WinPCap

    c:\program files\WinPCap\rpcapd.exe

    c:\windows\system32\drivers\npf.sys

    c:\windows\system32\Packet.dll

    c:\windows\system32\pthreadVC.dll

    c:\windows\system32\WanPacket.dll

    c:\windows\system32\wpcap.dll

    c:\windows\system32\msgsvc.dll . . . is geïnfecteerd!!

    .

    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    -------\Legacy_npf

    (((((((((((((((((((( Bestanden Gemaakt van 2010-01-21 to 2010-02-21 ))))))))))))))))))))))))))))))

    .

    2010-02-21 19:06 . 2001-09-06 18:04 12288 -c--a-w- c:\windows\system32\dllcache\mouhid.sys

    2010-02-21 19:06 . 2001-09-06 18:04 12288 ----a-w- c:\windows\system32\drivers\mouhid.sys

    2010-02-21 19:06 . 2001-08-17 21:02 9600 -c--a-w- c:\windows\system32\dllcache\hidusb.sys

    2010-02-21 19:06 . 2001-08-17 21:02 9600 ----a-w- c:\windows\system32\drivers\hidusb.sys

    2010-02-20 18:10 . 2010-02-20 18:10 -------- d-----w- c:\documents and settings\All Users\Application Data\SITEguard

    2010-02-20 18:09 . 2010-02-20 18:09 -------- d-----w- c:\program files\Common Files\iS3

    2010-02-20 18:09 . 2010-02-20 18:15 -------- d-----w- c:\documents and settings\All Users\Application Data\STOPzilla!

    2010-02-20 15:02 . 2010-02-20 15:02 -------- d-----w- c:\documents and settings\All Users\Application Data\ESET

    2010-02-20 12:31 . 2010-02-20 12:40 -------- d--h--w- c:\documents and settings\_gsdata_

    2010-02-20 12:29 . 2010-02-20 12:29 -------- d-----w- c:\documents and settings\All Users\Application Data\GoodSync

    2010-02-20 12:23 . 2010-02-20 12:23 -------- d-----w- c:\documents and settings\Administrator\Application Data\Malwarebytes

    2010-02-20 12:22 . 2010-02-20 12:22 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes

    2010-02-20 10:44 . 2010-02-20 10:44 50888 ----a-w- c:\windows\system32\drivers\GDTdiIcpt.sys

    2010-02-20 10:44 . 2010-02-20 10:44 32200 ----a-w- c:\windows\system32\drivers\HookCentre.sys

    2010-02-20 10:44 . 2010-02-20 10:44 -------- d-----w- c:\documents and settings\All Users\Application Data\G DATA

    2010-02-20 10:43 . 2010-02-20 15:02 -------- d-----w- c:\program files\Common Files\G DATA

    2010-02-20 10:11 . 2010-02-20 10:11 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\Downloaded Installations

    2010-02-20 09:38 . 2010-02-20 09:38 -------- d-----w- c:\program files\MSBuild

    2010-02-20 09:38 . 2010-02-20 10:00 -------- d-----w- c:\windows\system32\XPSViewer

    2010-02-20 09:38 . 2010-02-20 09:38 -------- d-----w- c:\program files\Reference Assemblies

    2010-02-20 09:37 . 2008-07-06 12:06 89088 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll

    2010-02-20 09:37 . 2006-06-29 12:07 14048 ------w- c:\windows\system32\spmsg2.dll

    2010-02-20 09:33 . 2010-02-20 09:33 -------- d-----w- c:\program files\MSXML 6.0

    2010-02-20 08:25 . 2010-02-20 08:25 -------- d-----w- C:\symbols

    2010-02-20 08:25 . 2010-02-20 08:25 -------- d-----w- c:\documents and settings\All Users\Application Data\dbg

    2010-02-19 23:12 . 2010-02-20 07:39 -------- d-----w- c:\documents and settings\Administrator\Application Data\Godlike

    2010-02-19 23:12 . 2010-02-19 23:12 -------- d-----w- c:\program files\WinTools Software

    2010-02-19 22:45 . 2010-02-20 18:35 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP

    2010-02-19 22:45 . 2010-02-20 11:03 -------- d-----w- c:\program files\Your Uninstaller 2010

    2010-02-19 22:40 . 2010-02-19 22:40 -------- d-----w- c:\windows\system32\config\systemprofile\Application Data\ESET

    2010-02-19 16:54 . 2010-02-19 16:54 3584 ----a-r- c:\documents and settings\Administrator\Application Data\Microsoft\Installer\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}\Icon386ED4E3.exe

    2010-02-19 16:54 . 2010-02-19 16:54 -------- d-----w- c:\program files\Windows Installer Clean Up

    2010-02-19 16:54 . 2010-02-19 16:54 -------- d-----w- c:\program files\MSECACHE

    2010-02-19 15:40 . 2010-02-20 16:23 -------- d-----w- c:\documents and settings\Administrator\Application Data\GoodSync

    2010-02-19 15:40 . 2010-02-19 15:40 -------- d-----w- c:\program files\Siber Systems

    2010-02-19 14:30 . 2010-02-19 14:30 -------- d-----w- c:\program files\Google

    2010-01-28 09:32 . 2010-02-19 14:16 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\Temp

    .

    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2010-02-20 18:13 . 2010-02-20 18:13 280 ----a-w- c:\windows\system32\drivers\kgpcpy.cfg

    2010-02-20 10:14 . 2005-08-31 19:01 401336 ----a-w- c:\documents and settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

    2010-02-20 09:36 . 2002-12-31 12:00 67664 ----a-w- c:\windows\system32\perfc013.dat

    2010-02-20 09:36 . 2002-12-31 12:00 436450 ----a-w- c:\windows\system32\perfh013.dat

    2010-02-19 22:45 . 2005-08-31 17:45 -------- d-----w- c:\documents and settings\Administrator\Application Data\URSoft

    2010-02-19 15:57 . 2007-03-01 12:06 -------- d-----w- c:\program files\EI

    2010-01-21 13:39 . 2005-12-05 20:52 -------- d-----w- c:\documents and settings\Administrator\Application Data\Lavasoft

    2010-01-20 15:11 . 2010-01-20 15:11 -------- d-----w- c:\documents and settings\All Users\Application Data\HPSSUPPLY

    2010-01-06 13:58 . 2005-10-01 14:20 -------- d-----w- c:\program files\Java

    2010-01-06 13:57 . 2010-01-06 13:57 152576 ----a-w- c:\documents and settings\Administrator\Application Data\Sun\Java\jre1.6.0_17\lzma.dll

    2010-01-06 13:57 . 2010-01-06 13:57 79488 ----a-w- c:\documents and settings\Administrator\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll

    2010-01-06 13:35 . 2005-12-05 20:37 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy

    .

    ------- Sigcheck -------

    [-] 2008-04-14 . E0AEF86A594C9990D6321C5CA239C5B7 . 297472 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\822ceb2331d0360bde8948c432c9beec\termsrv.dll

    [-] 2002-12-31 . A77219A971029DC2FB683E8513713803 . 215552 . . [5.1.2600.2055] . . c:\windows\system32\termsrv.dll

    .

    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

    REGEDIT4

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

    "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2002-12-31 15360]

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]

    "NoStartMenuSubFolders"= 0 (0x0)

    "NoCommonGroups"= 0 (0x0)

    "NoPrinters"= 0 (0x0)

    "NoRecentDocsNetHood"= 0 (0x0)

    "NoChangeAnimation"= 0 (0x0)

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]

    "AVKWCtl"=2 (0x2)

    "AVKService"=2 (0x2)

    "AVKProxy"=2 (0x2)

    "NOD32FiXTemDono"=2 (0x2)

    "mnmsrvc"=3 (0x3)

    "helpsvc"=2 (0x2)

    "FontCache3.0.0.0"=3 (0x3)

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]

    "C-Media Mixer"=Mixer.exe /startup

    "NeroFilterCheck"=c:\windows\system32\NeroCheck.exe

    "HP Software Update"=c:\program files\HP\HP Software Update\HPWuSchd2.exe

    "QuickTime Task"="c:\program files\QuickTime\qttask.exe" -atboottime

    "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe"

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

    "%windir%\\system32\\sessmgr.exe"=

    "c:\\Program Files\\totalcmd\\TOTALCMD.EXE"=

    "c:\\WINDOWS\\system\\W3DBSMGR.EXE"=

    R3 ham50;Creatix V.90 HAM Data Fax Modem;c:\windows\system32\drivers\CTXH51.sys [31-8-2005 17:17 454815]

    S1 beo7c6c;beo7c6c;c:\windows\system32\drivers\beo7c6c.sys [8-6-2009 17:39 33888]

    S1 mnmstem;mnmstem;\??\c:\windows\system32\drivers\tdpmqac.sys --> c:\windows\system32\drivers\tdpmqac.sys [?]

    S4 NOD32FiXTemDono;Eset Nod32 Boot;c:\windows\system32\regedt32.exe [31-12-2002 13:00 3584]

    .

    Inhoud van de 'Gedeelde Taken' map

    2010-01-27 c:\windows\Tasks\AppleSoftwareUpdate.job

    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2006-10-10 16:13]

    2010-01-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1275210071-583907252-1417001333-500Core.job

    - c:\documents and settings\Administrator\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-01-21 13:27]

    2010-02-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1275210071-583907252-1417001333-500UA.job

    - c:\documents and settings\Administrator\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-01-21 13:27]

    2010-02-21 c:\windows\Tasks\User_Feed_Synchronization-{2EC35DD9-7ED5-4781-A3D0-E0AC482795F2}.job

    - c:\windows\system32\msfeedssync.exe [2007-08-13 02:31]

    .

    .

    ------- Bijkomende Scan -------

    .

    uSearchMigratedDefaultURL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}

    uStart Page = hxxp://www.google.nl/

    IE: {{20CCCFEC-D26F-4ffe-996B-388B39C8CCCA} - {20CCCFEC-D26F-4ffe-996B-388B39C8CCCA} - c:\windows\system32\mscoree.DLL

    .

    - - - - ORPHANS VERWIJDERD - - - -

    Toolbar-Locked - (no file)

    AddRemove-HijackThis - e:\!!! instalatiebestanden !!!\!! Stand Alone prg !!\HijackThis.exe

    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

    Rootkit scan 2010-02-21 20:25

    Windows 5.1.2600 Service Pack 2 NTFS

    scannen van verborgen processen ...

    scannen van verborgen autostart items ...

    scannen van verborgen bestanden ...

    Scan succesvol afgerond

    verborgen bestanden: 0

    **************************************************************************

    .

    --------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

    [HKEY_USERS\S-1-5-21-1275210071-583907252-1417001333-500\Software\Microsoft\Internet Explorer\User Preferences]

    @Denied: (2) (Administrator)

    "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,

    d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,53,00,2a,43,b7,6e,79,40,a1,09,a4,\

    "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,

    d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,53,00,2a,43,b7,6e,79,40,a1,09,a4,\

    "6256FFB019F8FDFBD36745B06F4540E9AEAF222A25"=hex:01,00,00,00,d0,8c,9d,df,01,15,

    d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,53,00,2a,43,b7,6e,79,40,a1,09,a4,\

    [HKEY_LOCAL_MACHINE\software\Microsoft\Internet Explorer\User Preferences]

    @Denied: (2) (Administrator)

    "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,

    d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,53,00,2a,43,b7,6e,79,40,a1,09,a4,\

    "6256FFB019F8FDFBD36745B06F4540E9AEAF222A25"=hex:01,00,00,00,d0,8c,9d,df,01,15,

    d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,53,00,2a,43,b7,6e,79,40,a1,09,a4,\

    .

    --------------------- DLLs Geladen Onder Lopende Processen ---------------------

    - - - - - - - > 'winlogon.exe'(564)

    c:\windows\system32\sfc_os.dll

    - - - - - - - > 'explorer.exe'(1060)

    c:\windows\system32\ieframe.dll

    c:\windows\system32\webcheck.dll

    .

    ------------------------ Andere Aktieve Processen ------------------------

    .

    c:\program files\Java\jre6\bin\jqs.exe

    c:\windows\system32\HPZipm12.exe

    c:\windows\system32\wscntfy.exe

    .

    **************************************************************************

    .

    Voltooingstijd: 2010-02-21 20:31:55 - machine werd herstart

    ComboFix-quarantined-files.txt 2010-02-21 19:31

    Pre-Run: 14.830.817.280 bytes beschikbaar

    Post-Run: 14.931.795.968 bytes beschikbaar

    WindowsXP-KB310994-SP2-Pro-BootDisk-NLD.exe

    [boot loader]

    timeout=2

    default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS

    [operating systems]

    c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

    multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

    Current=3 Default=3 Failed=2 LastKnownGood=4 Sets=1,2,3,4

    - - End Of File - - A6EDC495139BF1555CD3A8F5B604A154

    Graag zou ik willen weten hoe van de melding tijdens het instaleren van G-date af te komen.

Logo

OVER ONS

PC Helpforum helpt GRATIS computergebruikers sinds juli 2006. Ons team geeft via het forum professioneel antwoord op uw vragen en probeert uw pc problemen zo snel mogelijk op te lossen. Word lid vandaag, plaats je vraag online en het PC Helpforum-team helpt u graag verder!

SITEMAP

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.