Ga naar inhoud

biological

Lid
  • Items

    77
  • Registratiedatum

  • Laatst bezocht

Berichten die geplaatst zijn door biological

  1. Dit is een mail die ik ontvangen heb van ebay, ik heb het dus aan ebay gerapporteerd en het enige wat zij doen is die persoon blokkeren meer niet. [TABLE]

    [TR]

    [TD]s.gif[/TD]

    [/TR]

    [/TABLE]

    Op 05-mei-2011 handelde u de melding met 2009wernerannie af en rapporteerde u het probleem aan het team Regels en veiligheid. U hebt verklaard dat uw problemen niet werden opgelost. [TABLE]

    [TR]

    [TD]s.gif[/TD]

    [/TR]

    [/TABLE]

    eBay neemt schendingen van het beleid ernstig. Ons team van Regels en veiligheid zal uw melding controleren en de nodige actie ondernemen als de verkoper het eBay-beleid omtrent verplichtingen van verkopers heeft overtreden.

    Onze maatregelen kunnen onder andere zijn:

    • Annulatie van aanbiedingen
    • Beperkingen van accountprivileges
    • Schorsing van de account
    • De standaardkosten op geannuleerde aanbiedingen niet terugbetalen
    • Onmiddellijke inning van alle verkoopkosten
    • De PowerSeller-status doen verliezen
    • Doorverwijzing naar de politie

    Omwille van privacy en wettelijke beperkingen mogen wij geen details geven van een actie die wij zouden kunnen ondernemen. Hou er ook rekening mee dat deze acties mogelijk niet kenbaar worden gemaakt aan andere leden.

    U kunt de afgehandelde melding steeds bekijken op de pagina Transactieproblemen oplossen.

    We stellen het op prijs dat u deze melding rapporteert.

    [TABLE]

    [TR]

    [TD=width: 100]260762788688.jpg[/TD]

    [TD=colspan: 2][TABLE]

    [TR]

    [TD=colspan: 2]sega master systeme[/TD]

    [/TR]

    [TR]

    [TD=width: 15%]Objectnr.:[/TD]

    [TD]260762788688[/TD]

    [/TR]

    [TR]

    [TD=width: 15%]Geopend geschil:[/TD]

    [TD]maandag, 25 apr 2011 16:20:59 CEST[/TD]

    [/TR]

    [TR]

    [TD=width: 15%]Afgehandeld geschil:[/TD]

    [TD]donderdag, 05 mei 2011 18:36:28 CEST[/TD]

    [/TR]

    [TR]

    [TD=colspan: 2]Aangekocht object bekijken[/TD]

    [/TR]

    [/TABLE]

    [/TD]

    [/TR]

    [/TABLE]

  2. Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 22:20:25, on 26/06/2011

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v8.00 (8.00.6001.18702)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\Ati2evxx.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\Ati2evxx.exe

    C:\Program Files\AVAST Software\Avast\AvastSvc.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\AVAST Software\Avast\avastUI.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\WINDOWS\eHome\ehRecvr.exe

    C:\WINDOWS\eHome\ehSched.exe

    C:\Program Files\Java\jre6\bin\jqs.exe

    C:\WINDOWS\system32\svchost.exe

    C:\PROGRA~1\Bandoo\Bandoo.exe

    C:\WINDOWS\system32\wuauclt.exe

    C:\WINDOWS\system32\dllhost.exe

    C:\Program Files\Windows Live\Messenger\msnmsgr.exe

    C:\PROGRA~1\Bandoo\BndCore.exe

    C:\Program Files\Windows Live\Contacts\wlcomm.exe

    C:\Program Files\Internet Explorer\IEXPLORE.EXE

    C:\Program Files\Internet Explorer\IEXPLORE.EXE

    C:\Program Files\Internet Explorer\IEXPLORE.EXE

    C:\WINDOWS\system32\msiexec.exe

    C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

    R3 - URLSearchHook: (no name) - {F08555B0-9CC3-11D2-AA8E-000000000567} - (no file)

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

    O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~1\WI9130~1\Datamngr\ToolBar\searchqudtx.dll

    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

    O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll

    O2 - BHO: Bandoo IE Plugin - {EB5CEE80-030A-4ED8-8E20-454E9C68380F} - C:\Program Files\Bandoo\Plugins\IE\ieplugin.dll

    O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll

    O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

    O3 - Toolbar: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~1\WI9130~1\Datamngr\ToolBar\searchqudtx.dll

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

    O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

    O4 - Global Startup: Microsoft Office.lnk = D:\Microsoft Office\Office10\OSA.EXE

    O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~1\MICROS~3\Office14\ONBttnIE.dll/105

    O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\MICROS~1\Office10\EXCEL.EXE/3000

    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office14\EXCEL.EXE/3000

    O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Plugin Control) - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab

    O16 - DPF: {2D72C39D-53F6-4AEA-A9DB-1298429DA974} (3DVista Viewer Control) - http://www.3dvista.com/downloads/viewer3dv.cab

    O16 - DPF: {B60CEFE7-2DD0-4B78-951A-509D951DB1F0} (ExtraFilm Uploader Control) - http://www.extrafilm.be/ExtraFilmUploader6.cab

    O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game.zylom.com/activex/zylomgamesplayer.cab

    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

    O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab

    O20 - AppInit_DLLs: c:\progra~1\wi9130~1\datamngr\datamngr.dll c:\progra~1\bandoo\bndhook.dll

    O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

    O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

    O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe

    O23 - Service: Bandoo Coordinator - Bandoo Media Inc. - C:\PROGRA~1\Bandoo\Bandoo.exe

    O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

    O23 - Service: KMService - Unknown owner - C:\WINDOWS\system32\srvany.exe

    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe

    --

    End of file - 8171 bytes

  3. Hallo,

    Als ik op internet geweest ben of mail gelezen of wat dan ook, en ik wil dan het venster sluiten door op kruisje te klikken verdwijnt wel het balkje onderaan scherm waaraan ik zie dat de pagina gesloten is maar het beeld blijft op mijn scherm staan, en waar ik dan ook op klik de pc reageert niet meer het enige wat het dan nog doet is via start iets opstarten en anders enige oplossing om bureaublad terug te krijgen is afmelden of pc uitzetten.

    Weet iemand raad?

    Badenkt.

  4. Hallo,

    Ik had via ebay een aankoop gedaan maar heb het artikel nooit ontvangen (wel betaald) en krijg ook geen antwoord meer van die persoon.Het is al aangegeven via ebay maar die kunnen niet veel doen. Zou ik dit het beste aangeven bij politie om zo misschien mijn geld terug te krijgen of heeft dit geen zin? Weet iemand dit?

    Alvast bedankt

  5. Hallo,

    Ik heb 2 vragen:

    1: Als je de pc uitzet en na aantal uur weer aan staat de klok nog steeds op uur en datum van het moment dat je pc uit gezet hebt, hoe komt dit?

    2: Ik kreeg laatst het volgende op mijn scherm toen ik pc aanzette:

    American

    Megatrends

    AmiBios © 2005 American Megatrends, Inc.

    Release 11/07/2006

    Cpu: Intel ® pentium ® D Cpu 2.80GHZ

    Speed: 2.80GHZ

    Press F12 if you want to boot from the network

    Press F8 for BBs popup

    Press F11 to boot from the restore partition

    2048 MB Ok (256 MB shared memory size used)

    Auto-Detecting Pri master..ATAPI CDROM

    Auto-Detecting 3rd Master..IDE Hard DIsk

    Pri Master: Philips DVD 8801 NW02

    Ultra DMA Mode-2

    3rd Master: ST3160212AS 3.AAE

    Ultra DMA Mode-6,S.M.A.R.T.Capable and status ok

    CMOS Settings wrong (of) CMOS battery low

    CMOS Date/Time not set

    Press F1 to run setup

    Terwijl dit op het scherm kwam maakte de pc een hels lawaai en mijn klok en datum stonden terug op een dag in 2006.

    Weet iemand hoe dit komt?

    Alvast bedankt.

  6. Heb zapmessenger gebruikt. De messenger staat nog steeds op pc als ik nu wil aanmelden zegt hij dat service tijdelijk onbeschikbaar is.

    En als ik de nieuwe messenger wil downloaden krijg ik volgende melding: C:\Documents and settings\mariella\local settings\temporary internet files\content.IE5\YXJQ627F\wlsetup-web[1].exe is geen geldig win32 toepassing.

    Wat nu?

  7. Hallo, Ik kan niet meer op mijn messenger, hij zegt dat er een nieuwe versie is en dat ik moet updaten maar als ik dat doe dan begint het allemaal goed en op het laatste staat er dat hij het niet heeft kunnen installeren.

    Er is een netwerkfout opgetreden bij het lezen van bestand c:\WINDOWS\Installer\Messenger.msi.

    Sluit alle onderstaande programma's (alles is gesloten) en probeer het opnieuw. Waarschijnlijk verstoort een ander programma de werking van het installatieprogramma. hr:0x80070643

    Heeft iemand enig idee hoe ik messenger er toch op zou krijgen.

    Alvast bedankt.

  8. Hallo,

    Ik kan sinds kort mijn mails niet meer openen via het knopje in messenger.Als ik erop klik gaat mijn office frontpage open en als ik deze verwijder en het dan opnieuw probeer dan gaat het afdruk venstertje open, maar niet de pagina van mijn mails van hotmail.Kan wel gewoon via de site hotmail.com gaan en dan zo kijken maar niet via messenger.

    Kan iemand mij helpen?

    Dank u.

  9. Ok heb alles gedaan wat u mij gezegd heeft. als de pc al een tijdje aan is valt de snelheid nu mee. Als hij pas opgestart is gaat het de eerste minuten nog wa langzaam maar daar kan ik mee leven.

    u bent zeer badnkt voor de hulp. Hier mag een slotje op.

  10. Voor ik dit gedaan had ging het na het opstarten van pc in het begin nog langzaam, moet nu opnieuw opstarten om eens te zien naar snelheid.

    Hier de gevraagde inhoud:

    ComboFix 10-08-12.03 - mariella 13/08/2010 23:56:42.2.2 - x86

    Microsoft Windows XP Professional 5.1.2600.3.1252.32.1043.18.767.573 [GMT 2:00]

    Gestart vanuit: c:\documents and settings\mariella\Bureaublad\ComboFix.exe

    gebruikte Opdracht switches :: c:\documents and settings\mariella\Bureaublad\CFScript.txt..txt

    AV: avast! antivirus 4.8.1368 [VPS 100813-1] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

    .

    (((((((((((((((((((( Bestanden Gemaakt van 2010-07-13 to 2010-08-13 ))))))))))))))))))))))))))))))

    .

    2010-08-13 10:03 . 2010-08-13 10:03 -------- d-----w- c:\documents and settings\mariella\Application Data\Malwarebytes

    2010-08-13 10:02 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

    2010-08-13 10:02 . 2010-08-13 10:02 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes

    2010-08-13 10:02 . 2010-08-13 10:02 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

    2010-08-13 10:02 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys

    2010-08-13 09:40 . 2010-08-13 09:40 388096 ----a-r- c:\documents and settings\mariella\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

    2010-08-13 09:40 . 2010-08-13 09:40 -------- d-----w- c:\program files\Trend Micro

    2010-08-04 18:31 . 2010-08-04 18:31 -------- d-----w- c:\windows\system32\wbem\Repository

    2010-07-30 20:51 . 2010-07-30 20:51 95024 ----a-w- c:\windows\system32\drivers\SBREDrv.sys

    2010-07-30 20:12 . 2010-07-30 20:12 -------- d-----w- c:\documents and settings\mariella\Local Settings\Application Data\Sunbelt Software

    2010-07-30 20:02 . 2010-08-13 21:51 -------- d--h--r- c:\documents and settings\mariella\Onlangs geopend

    2010-07-19 17:24 . 2010-07-19 17:24 -------- d-----w- c:\program files\MSECache

    .

    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2010-08-13 11:46 . 2010-01-20 02:22 12 ----a-w- c:\windows\bthservsdp.dat

    2010-08-10 21:33 . 2004-10-08 14:43 90586 ----a-w- c:\windows\system32\perfc013.dat

    2010-08-10 21:33 . 2004-10-08 14:43 508910 ----a-w- c:\windows\system32\perfh013.dat

    2010-08-04 18:29 . 2009-08-31 17:37 -------- d--h--w- c:\program files\InstallShield Installation Information

    2010-07-30 21:48 . 2009-09-02 21:30 -------- d-----w- c:\documents and settings\mariella\Application Data\vlc

    2010-07-30 20:08 . 2010-03-01 19:23 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft

    2010-07-30 19:59 . 2010-06-02 10:38 -------- d-----w- c:\program files\Zylom Games

    2010-06-30 12:33 . 2004-10-08 14:42 149504 ----a-w- c:\windows\system32\schannel.dll

    2010-06-29 17:03 . 2009-08-31 18:45 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP

    2010-06-29 17:03 . 2010-02-19 12:18 -------- d-----w- c:\program files\I-Droid01

    2010-06-29 17:03 . 2010-01-19 19:26 -------- d-----w- c:\program files\I-QBot

    2010-06-24 12:27 . 2004-10-08 14:42 916480 ----a-w- c:\windows\system32\wininet.dll

    2010-06-24 09:02 . 2004-10-08 14:42 1852032 ----a-w- c:\windows\system32\win32k.sys

    2010-06-23 19:53 . 2010-06-23 19:53 501936 ----a-w- c:\documents and settings\All Users\Application Data\Google\Google Toolbar\Update\gtb6.tmp.exe

    2010-06-21 15:27 . 2004-10-08 14:42 354304 ----a-w- c:\windows\system32\drivers\srv.sys

    2010-06-20 13:37 . 2009-08-31 18:45 -------- d-----w- c:\documents and settings\mariella\Application Data\uTorrent

    2010-06-17 14:03 . 2004-10-08 14:41 80384 ----a-w- c:\windows\system32\iccvid.dll

    2010-06-15 20:01 . 2010-06-15 20:01 -------- d-----w- c:\documents and settings\All Users\Application Data\McAfee

    2010-06-14 14:31 . 2004-10-08 15:01 744448 ----a-w- c:\windows\pchealth\helpctr\binaries\helpsvc.exe

    2010-06-14 07:43 . 2004-10-08 14:42 1172480 ----a-w- c:\windows\system32\msxml3.dll

    2010-05-27 21:04 . 2010-05-27 21:04 61440 ----a-w- c:\documents and settings\mariella\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-746b2cc5-n\decora-sse.dll

    2010-05-27 21:04 . 2010-05-27 21:04 12800 ----a-w- c:\documents and settings\mariella\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-746b2cc5-n\decora-d3d.dll

    2010-05-27 21:04 . 2010-05-27 21:04 503808 ----a-w- c:\documents and settings\mariella\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-15473d5b-n\msvcp71.dll

    2010-05-27 21:04 . 2010-05-27 21:04 499712 ----a-w- c:\documents and settings\mariella\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-15473d5b-n\jmc.dll

    2010-05-27 21:04 . 2010-05-27 21:04 348160 ----a-w- c:\documents and settings\mariella\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-15473d5b-n\msvcr71.dll

    2010-05-20 22:22 . 2010-04-15 14:53 664 ----a-w- c:\windows\system32\d3d9caps.dat

    2010-05-17 23:40 . 2010-05-17 23:40 58 ----a-w- c:\documents and settings\mariella\Local Settings\Application Data\GLF20.tmp

    .

    ((((((((((((((((((((((((((((( SnapShot@2010-08-13_11.32.43 )))))))))))))))))))))))))))))))))))))))))

    .

    + 2010-08-13 21:44 . 2010-08-13 21:44 16384 c:\windows\Temp\Perflib_Perfdata_554.dat

    + 2010-08-13 21:44 . 2010-08-13 21:44 16384 c:\windows\Temp\Perflib_Perfdata_4e0.dat

    .

    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-08-31 39408]

    "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "avast!"="d:\avast\ashDisp.exe" [2009-11-24 81000]

    "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2010-04-09 417792]

    "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760]

    "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

    "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

    [HKEY_LOCAL_MACHINE\software\microsoft\security center]

    "AntiVirusOverride"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

    "%windir%\\system32\\sessmgr.exe"=

    "d:\\utorrent\\uTorrent.exe"=

    "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=

    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

    "d:\\Shareaza\\Shareaza.exe"=

    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=

    "c:\\WINDOWS\\system32\\javaw.exe"=

    R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [31/08/2009 20:25 114768]

    R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [31/08/2009 20:25 20560]

    S2 gupdate;Google Updateservice (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2/02/2010 13:53 135664]

    .

    Inhoud van de 'Gedeelde Taken' map

    2010-08-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

    - c:\program files\Google\Update\GoogleUpdate.exe [2010-02-02 11:53]

    2010-08-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

    - c:\program files\Google\Update\GoogleUpdate.exe [2010-02-02 11:53]

    .

    .

    ------- Bijkomende Scan -------

    .

    uStart Page = hxxp://www.google.be/webhp?sourceid=navclient&hl=nl&ie=UTF-8

    IE: E&xport to Microsoft Excel - d:\micros~1\Office10\EXCEL.EXE/3000

    IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html

    DPF: {2D72C39D-53F6-4AEA-A9DB-1298429DA974} - hxxp://www.3dvista.com/downloads/viewer3dv.cab

    DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game.zylom.com/activex/zylomgamesplayer.cab

    .

    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

    Rootkit scan 2010-08-14 00:01

    Windows 5.1.2600 Service Pack 3 NTFS

    scannen van verborgen processen ...

    scannen van verborgen autostart items ...

    scannen van verborgen bestanden ...

    Scan succesvol afgerond

    verborgen bestanden: 0

    **************************************************************************

    .

    --------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

    @Denied: (A 2) (Everyone)

    @="FlashBroker"

    "LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101"

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

    "Enabled"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

    @="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe"

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

    @Denied: (A 2) (Everyone)

    @="IFlashBroker4"

    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

    @="{00020424-0000-0000-C000-000000000046}"

    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

    "Version"="1.0"

    .

    --------------------- DLLs Geladen Onder Lopende Processen ---------------------

    - - - - - - - > 'winlogon.exe'(588)

    c:\windows\system32\Ati2evxx.dll

    - - - - - - - > 'explorer.exe'(1484)

    c:\windows\system32\webcheck.dll

    .

    Voltooingstijd: 2010-08-14 00:02:41

    ComboFix-quarantined-files.txt 2010-08-13 22:02

    ComboFix2.txt 2010-08-13 11:36

    Pre-Run: 6.459.072.512 bytes beschikbaar

    Post-Run: 6.444.515.328 bytes beschikbaar

    Current=2 Default=2 Failed=1 LastKnownGood=4 Sets=1,2,3,4

    - - End Of File - - A047C7654373D94C665C137FBC97D27F

    ---------- Post toegevoegd om 22:09 ---------- Vorige post was om 22:05 ----------

    Bedankt voor de hulp. mijn pc gaat nu weer wat sneller, het is nog niet zoals het zou moeten maar het is toch al beter.

    Nog 1 vraagje: wat kan ik nu het beste doen om dit zo te houden?

  11. Hier het logbestand van combofix:

    ComboFix 10-08-12.03 - mariella 13/08/2010 13:27:19.1.2 - x86

    Microsoft Windows XP Professional 5.1.2600.3.1252.32.1043.18.767.469 [GMT 2:00]

    Gestart vanuit: c:\documents and settings\mariella\Bureaublad\ComboFix.exe

    AV: avast! antivirus 4.8.1368 [VPS 100812-1] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

    .

    (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    c:\documents and settings\mariella\Application Data\inst.exe

    c:\windows\system32\Thumbs.db

    .

    (((((((((((((((((((( Bestanden Gemaakt van 2010-07-13 to 2010-08-13 ))))))))))))))))))))))))))))))

    .

    2010-08-13 10:03 . 2010-08-13 10:03 -------- d-----w- c:\documents and settings\mariella\Application Data\Malwarebytes

    2010-08-13 10:02 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

    2010-08-13 10:02 . 2010-08-13 10:02 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes

    2010-08-13 10:02 . 2010-08-13 10:02 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

    2010-08-13 10:02 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys

    2010-08-13 09:40 . 2010-08-13 09:40 388096 ----a-r- c:\documents and settings\mariella\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

    2010-08-13 09:40 . 2010-08-13 09:40 -------- d-----w- c:\program files\Trend Micro

    2010-08-04 18:31 . 2010-08-04 18:31 -------- d-----w- c:\windows\system32\wbem\Repository

    2010-07-30 20:51 . 2010-07-30 20:51 95024 ----a-w- c:\windows\system32\drivers\SBREDrv.sys

    2010-07-30 20:12 . 2010-07-30 20:12 -------- d-----w- c:\documents and settings\mariella\Local Settings\Application Data\Sunbelt Software

    2010-07-30 20:02 . 2010-08-10 15:00 -------- d--h--r- c:\documents and settings\mariella\Onlangs geopend

    2010-07-19 17:24 . 2010-07-19 17:24 -------- d-----w- c:\program files\MSECache

    2010-07-14 20:54 . 2010-07-14 20:54 -------- d-----w- c:\documents and settings\mariella\Local Settings\Application Data\Temp

    2010-07-14 16:59 . 2010-06-14 14:31 744448 ------w- c:\windows\system32\dllcache\helpsvc.exe

    .

    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2010-08-13 10:20 . 2010-01-20 02:22 12 ----a-w- c:\windows\bthservsdp.dat

    2010-08-10 21:33 . 2004-10-08 14:43 90586 ----a-w- c:\windows\system32\perfc013.dat

    2010-08-10 21:33 . 2004-10-08 14:43 508910 ----a-w- c:\windows\system32\perfh013.dat

    2010-08-04 18:29 . 2009-08-31 17:37 -------- d--h--w- c:\program files\InstallShield Installation Information

    2010-07-30 21:48 . 2009-09-02 21:30 -------- d-----w- c:\documents and settings\mariella\Application Data\vlc

    2010-07-30 20:08 . 2010-03-01 19:23 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft

    2010-07-30 19:59 . 2010-06-02 10:38 -------- d-----w- c:\program files\Zylom Games

    2010-06-30 12:33 . 2004-10-08 14:42 149504 ----a-w- c:\windows\system32\schannel.dll

    2010-06-29 17:03 . 2009-08-31 18:45 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP

    2010-06-29 17:03 . 2010-02-19 12:18 -------- d-----w- c:\program files\I-Droid01

    2010-06-29 17:03 . 2010-01-19 19:26 -------- d-----w- c:\program files\I-QBot

    2010-06-24 12:27 . 2004-10-08 14:42 916480 ----a-w- c:\windows\system32\wininet.dll

    2010-06-24 09:02 . 2004-10-08 14:42 1852032 ----a-w- c:\windows\system32\win32k.sys

    2010-06-23 19:53 . 2010-06-23 19:53 501936 ----a-w- c:\documents and settings\All Users\Application Data\Google\Google Toolbar\Update\gtb6.tmp.exe

    2010-06-21 15:27 . 2004-10-08 14:42 354304 ----a-w- c:\windows\system32\drivers\srv.sys

    2010-06-20 13:37 . 2009-08-31 18:45 -------- d-----w- c:\documents and settings\mariella\Application Data\uTorrent

    2010-06-17 14:03 . 2004-10-08 14:41 80384 ----a-w- c:\windows\system32\iccvid.dll

    2010-06-15 20:01 . 2010-06-15 20:01 -------- d-----w- c:\documents and settings\All Users\Application Data\McAfee

    2010-06-14 14:31 . 2004-10-08 15:01 744448 ----a-w- c:\windows\pchealth\helpctr\binaries\helpsvc.exe

    2010-06-14 07:43 . 2004-10-08 14:42 1172480 ----a-w- c:\windows\system32\msxml3.dll

    2010-05-27 21:04 . 2010-05-27 21:04 61440 ----a-w- c:\documents and settings\mariella\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-746b2cc5-n\decora-sse.dll

    2010-05-27 21:04 . 2010-05-27 21:04 12800 ----a-w- c:\documents and settings\mariella\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-746b2cc5-n\decora-d3d.dll

    2010-05-27 21:04 . 2010-05-27 21:04 503808 ----a-w- c:\documents and settings\mariella\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-15473d5b-n\msvcp71.dll

    2010-05-27 21:04 . 2010-05-27 21:04 499712 ----a-w- c:\documents and settings\mariella\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-15473d5b-n\jmc.dll

    2010-05-27 21:04 . 2010-05-27 21:04 348160 ----a-w- c:\documents and settings\mariella\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-15473d5b-n\msvcr71.dll

    2010-05-20 22:22 . 2010-04-15 14:53 664 ----a-w- c:\windows\system32\d3d9caps.dat

    2010-05-17 23:40 . 2010-05-17 23:40 58 ----a-w- c:\documents and settings\mariella\Local Settings\Application Data\GLF20.tmp

    .

    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-08-31 39408]

    "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "avast!"="d:\avast\ashDisp.exe" [2009-11-24 81000]

    "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2010-04-09 417792]

    "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760]

    "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

    "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

    [HKEY_LOCAL_MACHINE\software\microsoft\security center]

    "AntiVirusOverride"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

    "%windir%\\system32\\sessmgr.exe"=

    "d:\\utorrent\\uTorrent.exe"=

    "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=

    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

    "d:\\Shareaza\\Shareaza.exe"=

    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=

    "c:\\WINDOWS\\system32\\javaw.exe"=

    R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [31/08/2009 20:25 114768]

    R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [31/08/2009 20:25 20560]

    S2 gupdate;Google Updateservice (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2/02/2010 13:53 135664]

    .

    Inhoud van de 'Gedeelde Taken' map

    2010-08-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

    - c:\program files\Google\Update\GoogleUpdate.exe [2010-02-02 11:53]

    2010-08-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

    - c:\program files\Google\Update\GoogleUpdate.exe [2010-02-02 11:53]

    .

    .

    ------- Bijkomende Scan -------

    .

    uStart Page = hxxp://www.google.be/webhp?sourceid=navclient&hl=nl&ie=UTF-8

    IE: E&xport to Microsoft Excel - d:\micros~1\Office10\EXCEL.EXE/3000

    IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html

    DPF: {2D72C39D-53F6-4AEA-A9DB-1298429DA974} - hxxp://www.3dvista.com/downloads/viewer3dv.cab

    DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game.zylom.com/activex/zylomgamesplayer.cab

    FF - ProfilePath - c:\documents and settings\mariella\Application Data\Mozilla\Firefox\Profiles\cxwkuakl.default\

    FF - prefs.js: browser.search.selectedEngine - Web Search

    FF - prefs.js: browser.startup.homepage - hxxp://www.searchqu.com/

    FF - prefs.js: keyword.URL - hxxp://www.searchqu.com/web?src=ffb&q=

    FF - plugin: c:\documents and settings\mariella\Application Data\Mozilla\plugins\np-mswmp.dll

    FF - plugin: c:\program files\Google\Update\1.2.183.23\npGoogleOneClick8.dll

    FF - plugin: d:\firefox\plugins\npdeployJava1.dll

    FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

    ---- FIREFOX POLICIES ----

    d:\firefox\greprefs\all.js - pref("ui.use_native_colors", true);

    d:\firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);

    d:\firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);

    d:\firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);

    d:\firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);

    d:\firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);

    d:\firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);

    d:\firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);

    d:\firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);

    d:\firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);

    d:\firefox\greprefs\all.js - pref("network.proxy.type", 5);

    d:\firefox\greprefs\all.js - pref("network.buffer.cache.count", 24);

    d:\firefox\greprefs\all.js - pref("network.buffer.cache.size", 4096);

    d:\firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);

    d:\firefox\greprefs\all.js - pref("svg.smil.enabled", false);

    d:\firefox\greprefs\all.js - pref("accelerometer.enabled", true);

    d:\firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);

    d:\firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");

    d:\firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);

    d:\firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);

    d:\firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");

    d:\firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");

    d:\firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);

    d:\firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);

    d:\firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);

    d:\firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);

    d:\firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);

    d:\firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);

    .

    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

    Rootkit scan 2010-08-13 13:32

    Windows 5.1.2600 Service Pack 3 NTFS

    scannen van verborgen processen ...

    scannen van verborgen autostart items ...

    scannen van verborgen bestanden ...

    Scan succesvol afgerond

    verborgen bestanden: 0

    **************************************************************************

    .

    --------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

    @Denied: (A 2) (Everyone)

    @="FlashBroker"

    "LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101"

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

    "Enabled"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

    @="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe"

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

    @Denied: (A 2) (Everyone)

    @="IFlashBroker4"

    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

    @="{00020424-0000-0000-C000-000000000046}"

    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

    "Version"="1.0"

    .

    --------------------- DLLs Geladen Onder Lopende Processen ---------------------

    - - - - - - - > 'winlogon.exe'(572)

    c:\windows\system32\Ati2evxx.dll

    .

    Voltooingstijd: 2010-08-13 13:36:13

    ComboFix-quarantined-files.txt 2010-08-13 11:36

    Pre-Run: 6.043.107.328 bytes beschikbaar

    Post-Run: 6.346.649.600 bytes beschikbaar

    Current=2 Default=2 Failed=1 LastKnownGood=4 Sets=1,2,3,4

    - - End Of File - - C6FD800FBD0066DC5F21B194D021BD88

    Bedankt

  12. Hier eerst het logje van malewarebytes

    Databaseversie: 4424

    Windows 5.1.2600 Service Pack 3

    Internet Explorer 8.0.6001.18702

    13/08/2010 12:19:00

    mbam-log-2010-08-13 (12-19-00).txt

    Scantype: Snelle scan

    Objecten gescand: 148248

    Verstreken tijd: 15 minuut/minuten, 0 seconde(n)

    Geheugenprocessen geïnfecteerd: 0

    Geheugenmodulen geïnfecteerd: 0

    Registersleutels geïnfecteerd: 0

    Registerwaarden geïnfecteerd: 0

    Registerdata geïnfecteerd: 0

    Mappen geïnfecteerd: 0

    Bestanden geïnfecteerd: 9

    Geheugenprocessen geïnfecteerd:

    (Geen kwaadaardige objecten gedetecteerd)

    Geheugenmodulen geïnfecteerd:

    (Geen kwaadaardige objecten gedetecteerd)

    Registersleutels geïnfecteerd:

    (Geen kwaadaardige objecten gedetecteerd)

    Registerwaarden geïnfecteerd:

    (Geen kwaadaardige objecten gedetecteerd)

    Registerdata geïnfecteerd:

    (Geen kwaadaardige objecten gedetecteerd)

    Mappen geïnfecteerd:

    (Geen kwaadaardige objecten gedetecteerd)

    Bestanden geïnfecteerd:

    C:\WINDOWS\bill103.exe (Worm.KoobFace) -> Quarantined and deleted successfully.

    C:\WINDOWS\010112010146111103.xxe (KoobFace.Trace) -> Quarantined and deleted successfully.

    C:\WINDOWS\010112010146114101.xxe (KoobFace.Trace) -> Quarantined and deleted successfully.

    C:\WINDOWS\01011201014650115.xxe (KoobFace.Trace) -> Quarantined and deleted successfully.

    C:\WINDOWS\bk20856.dat (KoobFace.Trace) -> Quarantined and deleted successfully.

    C:\WINDOWS\bk23567.dat (KoobFace.Trace) -> Quarantined and deleted successfully.

    C:\WINDOWS\fdgg34353edfgdfdf (KoobFace.Trace) -> Quarantined and deleted successfully.

    C:\WINDOWS\lgo (Koobface.Trace) -> Quarantined and deleted successfully.

    C:\WINDOWS\ligh (Koobface.Trace) -> Quarantined and deleted successfully.

    En van de hijackthis

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 12:25:10, on 13/08/2010

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v8.00 (8.00.6001.18702)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\Ati2evxx.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\Ati2evxx.exe

    D:\avast\aswUpdSv.exe

    D:\avast\ashServ.exe

    C:\WINDOWS\Explorer.EXE

    D:\avast\ashDisp.exe

    C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe

    C:\Program Files\Windows Live\Messenger\msnmsgr.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\WINDOWS\eHome\ehRecvr.exe

    C:\WINDOWS\eHome\ehSched.exe

    C:\Program Files\Java\jre6\bin\jqs.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\wuauclt.exe

    D:\avast\ashMaiSv.exe

    D:\avast\ashWebSv.exe

    C:\WINDOWS\system32\dllhost.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

    O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll

    O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll

    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

    O4 - HKLM\..\Run: [avast!] D:\avast\ashDisp.exe

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service')

    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')

    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

    O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\MICROS~1\Office10\EXCEL.EXE/3000

    O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Plugin Control) - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab

    O16 - DPF: {2D72C39D-53F6-4AEA-A9DB-1298429DA974} (3DVista Viewer Control) - http://www.3dvista.com/downloads/viewer3dv.cab

    O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game.zylom.com/activex/zylomgamesplayer.cab

    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

    O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab

    O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

    O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - D:\avast\aswUpdSv.exe

    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

    O23 - Service: avast! Antivirus - ALWIL Software - D:\avast\ashServ.exe

    O23 - Service: avast! Mail Scanner - ALWIL Software - D:\avast\ashMaiSv.exe

    O23 - Service: avast! Web Scanner - ALWIL Software - D:\avast\ashWebSv.exe

    O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe

    --

    End of file - 6871 bytes

    Alvast bedankt voor de hulp.

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.