daddypaul

Ik weet niet exact wanneer het begon, mijn dochter heeft er niet opgelet. Nadat Defender pro verlopen was was er meer ellende. Sommige programma's doen het nu wel. alleen Wlan adaper krijg ik niet aan de praat. programma's zoals ipconfig onder "uitvoeren" reageert ook niet. Spydoctor trialversie ziet nog wel besmettingen, maar ik heb geen versie die ook kan verwijderen. Adware en wat andere spyprograma's zien niets Er is een herstelpunt van 25-3 , maar toen waren de problemen al aanwezig. en recovery (cd) herstelpunt. Dan is het laatste de enige optie.

in de veilige modus heb ik de volgende log; ComboFix 10-03-26.02 - Melinda 27-03-2010 14:58:59.6.2 - x86 MINIMAL Microsoft® Windows Vista™ Home Basic 6.0.6001.1.1252.31.1043.18.3002.2614 [GMT 1:00] Gestart vanuit: c:\users\Melinda\Desktop\Scan.exe SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} . (((((((((((((((((((( Bestanden Gemaakt van 2010-02-27 to 2010-03-27 )))))))))))))))))))))))))))))) . 2010-03-27 14:09 . 2010-03-27 14:10 -------- d-----w- c:\users\Melinda\AppData\Local\temp 2010-03-27 14:09 . 2010-03-27 14:09 -------- d-----w- c:\users\Default\AppData\Local\temp 2010-03-26 19:06 . 2010-03-26 20:29 -------- d-----w- C:\scan 2010-03-25 22:40 . 2010-03-25 22:40 388096 ----a-r- c:\users\Melinda\AppData\Roaming\Microsoft\Installer\{0761C9A8-8F3A-4216-B4A7-B7AFBF24A24A}\HiJackThis.exe 2010-03-25 22:40 . 2010-03-25 22:40 -------- d-----w- c:\program files\TrendMicro 2010-03-25 18:32 . 2010-03-25 18:32 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard 2010-03-25 18:24 . 2010-03-25 18:24 -------- d-----w- c:\users\Melinda\AppData\Roaming\Malwarebytes 2010-03-25 18:24 . 2010-01-07 15:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2010-03-25 18:24 . 2010-03-25 18:24 -------- d-----w- c:\programdata\Malwarebytes 2010-03-25 18:24 . 2010-01-07 15:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys 2010-03-25 18:24 . 2010-03-25 18:24 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2010-03-25 16:49 . 2010-03-25 16:49 -------- d-----w- c:\programdata\Office Genuine Advantage 2010-03-24 23:12 . 2010-03-24 23:12 -------- d-----w- c:\users\Melinda\AppData\Roaming\AVG9 2010-03-17 19:44 . 2010-03-17 19:44 74760 ----a-w- c:\programdata\avg9\update\backup\UniversalDD.sys 2010-03-17 19:44 . 2010-03-17 19:44 360584 ----a-w- c:\programdata\avg9\update\backup\avgtdix.sys 2010-03-17 19:44 . 2010-03-17 19:44 333192 ----a-w- c:\programdata\avg9\update\backup\avgldx86.sys 2010-03-17 19:44 . 2010-03-17 19:44 30216 ----a-w- c:\programdata\avg9\update\backup\AVGIDSFilter.sys 2010-03-17 19:44 . 2010-03-17 19:44 28424 ----a-w- c:\programdata\avg9\update\backup\avgmfx86.sys 2010-03-17 19:44 . 2010-03-17 19:44 27800 ----a-w- c:\programdata\avg9\update\backup\AVGIDSShim.sys 2010-03-16 19:09 . 2010-03-17 19:43 216200 ----a-w- c:\windows\system32\drivers\avgldx86.sys 2010-03-16 19:09 . 2010-03-23 20:18 -------- d-----w- c:\windows\system32\drivers\Avg 2010-03-16 19:09 . 2010-03-17 19:44 29512 ----a-w- c:\windows\system32\drivers\avgmfx86.sys 2010-03-16 19:06 . 2010-03-16 19:06 24856 ----a-w- c:\windows\system32\drivers\avgfwd6x.sys 2010-03-16 19:06 . 2010-03-16 19:06 -------- d-----w- c:\program files\AVG 2010-03-16 19:06 . 2010-03-16 19:06 -------- d-----w- c:\programdata\avg9 2010-03-16 18:41 . 2010-03-16 18:41 -------- d-----w- c:\programdata\Azureus 2010-03-16 18:41 . 2010-03-16 18:50 -------- d-----w- c:\users\Melinda\AppData\Roaming\Azureus 2010-03-09 15:46 . 2010-03-09 15:46 56 ---ha-w- c:\windows\system32\ezsidmv.dat 2010-03-08 12:43 . 2010-03-08 12:43 -------- d-----w- c:\users\Melinda\AppData\Roaming\PC Suite 2010-03-08 12:43 . 2010-03-08 12:43 -------- d-----w- c:\programdata\PC Suite 2010-03-08 12:41 . 2010-03-08 12:41 1792000 ----a-w- c:\users\Melinda\AppData\Roaming\Samsung\New PC Studio\LiveUpdate\Setup_For_Full_Update_IH2_7.exe 2010-03-08 12:38 . 2007-05-02 15:31 90624 ----a-w- c:\windows\system32\nmwcdcls.dll 2010-03-08 12:38 . 2010-03-08 12:38 -------- d-----w- c:\program files\DIFX 2010-03-08 12:38 . 2007-09-17 14:53 21632 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys 2010-03-08 12:38 . 2009-03-20 09:01 90112 ----a-w- c:\windows\system32\drivers\ss_bbus.sys 2010-03-08 12:27 . 2010-03-08 12:30 -------- d-----w- c:\users\Melinda\AppData\Local\Downloaded Installations . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-03-25 18:25 . 2008-11-08 08:41 667352 ----a-w- c:\windows\system32\perfh013.dat 2010-03-25 18:25 . 2008-11-08 08:41 126854 ----a-w- c:\windows\system32\perfc013.dat 2010-03-17 19:44 . 2010-03-17 19:44 25608 ----a-w- c:\programdata\avg9\update\backup\AVGIDSvx.sys 2010-03-17 19:44 . 2010-03-17 19:44 161800 ----a-w- c:\programdata\avg9\update\backup\avgrkx86.sys 2010-03-17 19:44 . 2010-03-17 19:44 122376 ----a-w- c:\programdata\avg9\update\backup\AVGIDSDriver.sys 2010-03-17 19:44 . 2010-03-16 19:09 242696 ----a-w- c:\windows\system32\drivers\avgtdix.sys 2010-03-17 19:44 . 2010-03-17 19:44 12464 ----a-w- c:\windows\system32\avgrsstx.dll 2010-03-17 19:43 . 2010-03-16 19:10 25096 ----a-w- c:\windows\system32\drivers\AVGIDSvx.sys 2010-03-17 19:43 . 2010-03-16 19:09 52872 ----a-w- c:\windows\system32\drivers\avgrkx86.sys 2010-03-16 21:55 . 2008-11-08 00:35 -------- d-----w- c:\programdata\Norton 2010-03-16 19:15 . 2010-01-26 09:49 5972 ----a-w- c:\users\Melinda\AppData\Local\d3d9caps.dat 2010-03-16 19:09 . 2010-03-17 19:42 800536 ----a-w- c:\programdata\avg9\update\backup\avginet.dll 2010-03-16 19:09 . 2010-03-17 19:42 613656 ----a-w- c:\programdata\avg9\update\backup\avgiproxy.exe 2010-03-16 19:09 . 2010-03-17 19:42 1658136 ----a-w- c:\programdata\avg9\update\backup\avgupd.dll 2010-03-16 19:09 . 2010-03-17 19:42 1007896 ----a-w- c:\programdata\avg9\update\backup\avgupd.exe 2010-03-16 18:10 . 2009-04-13 19:55 -------- d-----w- c:\users\Melinda\AppData\Roaming\LimeWire 2010-03-12 07:46 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail 2010-03-12 07:46 . 2009-04-09 13:23 -------- d-----w- c:\programdata\Microsoft Help 2010-03-08 12:38 . 2010-03-08 12:32 -------- d-----w- c:\program files\Samsung 2010-03-08 12:38 . 2010-03-08 12:33 -------- d-----w- c:\program files\PC Connectivity Solution 2010-03-08 12:34 . 2010-03-08 12:34 -------- d-----w- c:\users\Melinda\AppData\Roaming\Samsung 2010-03-08 12:33 . 2008-11-08 00:33 -------- d--h--w- c:\program files\InstallShield Installation Information 2010-03-08 12:33 . 2010-03-08 12:33 -------- d-----w- c:\program files\MarkAny 2010-03-08 12:26 . 2009-04-09 13:22 -------- d-----w- c:\program files\Common Files\Adobe 2010-03-02 09:46 . 2008-11-08 01:48 588472 ----a-w- c:\windows\system32\ezsvc7x.dll 2010-02-26 07:39 . 2009-04-09 13:33 75832 ----a-w- c:\users\Melinda\AppData\Local\GDIPFONTCACHEV1.DAT 2010-02-19 23:47 . 2010-02-19 23:47 3604480 ----a-w- c:\windows\system32\GPhotos.scr 2010-01-25 12:48 . 2010-02-24 09:05 472576 ----a-w- c:\windows\system32\secproc_isv.dll 2010-01-25 12:48 . 2010-02-24 09:05 151040 ----a-w- c:\windows\system32\secproc_ssp_isv.dll 2010-01-25 12:48 . 2010-02-24 09:05 151040 ----a-w- c:\windows\system32\secproc_ssp.dll 2010-01-25 12:48 . 2010-02-24 09:05 472064 ----a-w- c:\windows\system32\secproc.dll 2010-01-25 12:45 . 2010-02-24 09:05 329216 ----a-w- c:\windows\system32\msdrm.dll 2010-01-25 08:35 . 2010-02-24 09:05 346624 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe 2010-01-25 08:35 . 2010-02-24 09:05 523776 ----a-w- c:\windows\system32\RMActivate_isv.exe 2010-01-25 08:34 . 2010-02-24 09:05 511488 ----a-w- c:\windows\system32\RMActivate.exe 2010-01-25 08:34 . 2010-02-24 09:05 347136 ----a-w- c:\windows\system32\RMActivate_ssp.exe 2010-01-23 09:44 . 2010-02-24 09:05 2048 ----a-w- c:\windows\system32\tzres.dll 2009-12-28 12:35 . 2010-02-10 18:44 11776 ----a-w- c:\windows\system32\tsbyuv.dll 2009-12-28 12:35 . 2010-02-10 18:44 1314816 ----a-w- c:\windows\system32\quartz.dll 2009-12-28 12:32 . 2010-02-10 18:44 22528 ----a-w- c:\windows\system32\msyuv.dll 2009-12-28 12:32 . 2010-02-10 18:44 31744 ----a-w- c:\windows\system32\msvidc32.dll 2009-12-28 12:32 . 2010-02-10 18:44 123904 ----a-w- c:\windows\system32\msvfw32.dll 2009-12-28 12:32 . 2010-02-10 18:44 13312 ----a-w- c:\windows\system32\msrle32.dll 2009-12-28 12:31 . 2010-02-10 18:44 82944 ----a-w- c:\windows\system32\mciavi32.dll 2009-12-28 12:31 . 2010-02-10 18:44 50176 ----a-w- c:\windows\system32\iyuv_32.dll 2009-12-28 12:28 . 2010-02-10 18:44 65024 ----a-w- c:\windows\system32\avicap32.dll 2009-12-28 12:28 . 2010-02-10 18:44 91136 ----a-w- c:\windows\system32\avifil32.dll 2008-11-08 08:56 . 2008-11-08 08:42 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2008-06-09 2363392] "AutoStartNPSAgent"="c:\program files\Samsung\Samsung New PC Studio\NPSAgent.exe" [2009-04-02 102400] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-04-17 1049896] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-07-10 150040] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-07-10 170520] "Persistence"="c:\windows\system32\igfxpers.exe" [2008-07-10 145944] "QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2008-09-23 468264] "UpdateLBPShortCut"="c:\program files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" [2008-06-13 210216] "UpdatePSTShortCut"="c:\program files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" [2008-10-06 210216] "UCam_Menu"="c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" [2007-12-24 222504] "QlbCtrl.exe"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2008-08-01 202032] "UpdateP2GoShortCut"="c:\program files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2008-06-13 210216] "UpdatePDIRShortCut"="c:\program files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" [2008-06-13 210216] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-06-10 148888] "HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2008-10-09 75008] "hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2008-04-15 488752] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-01-05 413696] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-04-02 342312] "HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] "GrpConv"="grpconv -o" [X] c:\users\Melinda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OneNote 2007 Schermopname en Snel starten.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2008-10-25 98696] c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE [1999-2-17 65588] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=c:\windows\System32\avgrsstx.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend] @="Service" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender] 2008-01-21 02:33 1008184 ----a-w- c:\program files\Windows Defender\MSASCui.exe R1 Avgfwfd;AVG network filter service;c:\windows\system32\DRIVERS\avgfwd6x.sys [2010-03-16 24856] R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\System32\Drivers\avgldx86.sys [2010-03-17 216200] R1 AvgTdiX;AVG Network Redirector;c:\windows\System32\Drivers\avgtdix.sys [2010-03-17 242696] R2 avg9emc;AVG E-mail Scanner;c:\program files\AVG\AVG9\avgemc.exe [2010-03-17 916760] R2 avg9wd;AVG WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [2010-03-17 308064] R2 avgfws9;AVG Firewall;c:\program files\AVG\AVG9\avgfws9.exe [2010-03-17 2325816] R2 AVGIDSAgent;AVG9IDSAgent;c:\program files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe AVGIDSAgent [x] R2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe [2008-01-21 21504] R2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [2009-03-31 233472] R2 Recovery Service for Windows;Recovery Service for Windows;c:\program files\SMINST\BLService.exe [2008-10-06 365952] R3 AVGIDSDrivervtx;AVG9IDSDriver;c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_Vista\AVGIDSDriver.sys [2010-03-17 122376] R3 AVGIDSFiltervtx;AVG9IDSFilter;c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_Vista\AVGIDSFilter.sys [2010-03-17 30216] R3 AVGIDSShimvtx;AVG9IDSShim;c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_Vista\AVGIDSShim.sys [2010-03-17 27144] R3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2008-04-03 193840] R3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.SYS [2009-03-31 36608] R3 IntcHdmiAddService;Intel® High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [2008-06-29 112128] R3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\DRIVERS\ss_bbus.sys [2009-03-20 90112] R3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\DRIVERS\ss_bmdfl.sys [2009-03-20 14976] R3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\DRIVERS\ss_bmdm.sys [2009-03-20 121856] S0 AVGIDSErHrvtx;AVG9IDSErHr;c:\windows\System32\Drivers\AVGIDSvx.sys [2010-03-17 25096] S0 AvgRkx86;avgrkx86.sys;c:\windows\System32\Drivers\avgrkx86.sys [2010-03-17 52872] --- Andere Services/Drivers In Geheugen --- *NewlyCreated* - ECACHE [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs ezSharedSvc [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] 2008-06-09 09:14 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe . . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.hyves.nl/?&pageid=5148KUL0DNCW8SOO4 uDefault_Search_URL = hxxp://www.google.com/ie mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=nl_nl&c=91&bd=Presario&pf=cnnb uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://www.google.com/search?q=%s IE: &AOL-werkbalk Zoeken - c:\programdata\AOL\ieToolbar\resources\nl-NL\local\search.html IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 DPF: {3D3B42C2-11BF-4732-A304-A01384B70D68} - hxxp://picasaweb.google.com/s/v/59.15/uploader2.cab . - - - - ORPHANS VERWIJDERD - - - - HKLM-Run-NPSStartup - (no file) HKLM-RunOnce-<NO NAME> - (no file) ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2010-03-27 15:10 Windows 6.0.6001 Service Pack 1 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: 0 ************************************************************************** . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . Voltooingstijd: 2010-03-27 15:11:45 ComboFix-quarantined-files.txt 2010-03-27 14:11 Pre-Run: 171.845.058.560 bytes beschikbaar Post-Run: 171.745.308.672 bytes beschikbaar - - End Of File - - 6F6B7A4900F65CC94E218BC8E71004FE Ik ben benieuwd ...

combifix doorloopt alle tests tot voltooid deel_50 maar er komt geen combifix.txt zelfs na een uur Het blijft in een modus log aanmaken en er staat iets over find3fm dat van die console heb ik nog niet gezien heb nu 4x gedraaid en nu gebeurd er niets meer na deel_50 en zag bij het begin van de scan toegang geweigerd drives00 doe ik iets niet goed?

Bedankt. Explorer werkt niet , dus zal met een stick combofix op de laptop zetten Ik zal vanavond proberen. thanks

Hallo Mijn dochter is student en heeft een Compaq notebook van bijna een jaar oud met Windows vista Home edit. Sinds een week melding dat defender Pro verlopen was en update noodzakelijk, gelijktig pop ups met een hele reeks virusmeldingen. AVG vond slechts 1 trojan horse. Alleen nog maar toegang tot de defender update site en MSN deed het nog. - defender getracht uit te zetten om hitman pro/AVG te kunnen gebruiken. Nu een week later start nagenoeg geen enkele applicatie meer. melding van geen koppelingen/toegang en .exe kunnen niet uitgevoerd worden. geen internet meer. Heb al malware programma gedraaid. niets gevonden. Met Hijack het volgende log; Logfile of Trend Micro HijackThis v2.0.3 (BETA) Scan saved at 23:48:26, on 25-3-2010 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v7.00 (7.00.6001.18385) Boot mode: Normal Running processes: C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\TrendMicro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = mijnAOL | Compaq R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Hyves.nl: always in touch with your friends R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = mijnAOL | Compaq R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = mijnAOL | Compaq R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe" O4 - HKLM\..\Run: [updateLBPShortCut] "C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5" O4 - HKLM\..\Run: [updatePSTShortCut] "C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\DVD Suite" UpdateWithCreateOnce "Software\CyberLink\PowerStarter" O4 - HKLM\..\Run: [uCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\2.0" O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start O4 - HKLM\..\Run: [updateP2GoShortCut] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0" O4 - HKLM\..\Run: [updatePDIRShortCut] "C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\PowerDirector" UpdateWithCreateOnce "SOFTWARE\CyberLink\PowerDirector\7.0" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden O4 - HKCU\..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O8 - Extra context menu item: &AOL-werkbalk Zoeken - C:\ProgramData\AOL\ieToolbar\resources\nl-NL\local\search.html O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O13 - Gopher Prefix: O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab O16 - DPF: {3D3B42C2-11BF-4732-A304-A01384B70D68} (UploadListView Class) - http://picasaweb.google.com/s/v/59.15/uploader2.cab O16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} (UploadListView Class) - http://picasaweb.google.nl/s/v/49.12/uploader2.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/VistaMSNPUpldnl-nl.cab O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://verkopen.marktplaats.nl/js/widgets/imageUploader/aurigma/5_7_24_0/ImageUploader5.cab O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/VistaMSNPUpldnl-nl.cab O16 - DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} (Image Uploader Control) - http://cache.hyves-static.net/statics/Aurigma/ImageUploader4.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll O20 - AppInit_DLLs: avgrsstx.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: AVG E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe O23 - Service: AVG WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe O23 - Service: AVG Firewall (avgfws9) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgfws9.exe O23 - Service: AVG9IDSAgent (AVGIDSAgent) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: Recovery Service for Windows - Unknown owner - C:\Program Files\SMINST\BLService.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe -- End of file - 10600 bytes Wie kan mij verder helpen?