verodup

14 juni 2011

Beste ik weet niet als dat een oplossing is want op de tweede aangemaakte a

---------- Post toegevoegd om 21:53 ---------- Vorige post was om 21:53 ----------

Heb loopt alles nu ook vast computer reageert niet enz enz.

---------- Post toegevoegd om 21:54 ---------- Vorige post was om 21:53 ----------

windows explorer regeert niet enz. heeeeeeeeelp

---------- Post toegevoegd om 21:57 ---------- Vorige post was om 21:54 ----------

Ik krijg ook de melding geblokeerde opstartprogrammas weergeven of verwijderen

7 juni 2011

ok heb enkel c staan en daar staat 285GB op.

ik kan die dus kopieren naar een externe harde schijf en daarna bij de nieuwe acount plaatsen.

Kan u mij aub een stappenplan geven, ik weet voor een ander kan dit mischien makkelijk zijn maar ik ben een beginneling.

7 juni 2011

EUUHH ¨partities??????

6 juni 2011

neen, alles van bestanden blijft bij de eerste administrator staan.

---------- Post toegevoegd om 12:03 ---------- Vorige post was om 12:02 ----------

de pc gaat nu ook enorm traag.

5 juni 2011

met de cc cleaner lukt het niet.

als ik een nieuwe acount aanmaak lukt het wel mùaar dan kan ik niet maar aan mijn bestanden???????

5 juni 2011

1 de taakbalk van windows staat niet vergrendeld maar toch kan ik deze niet verplaatsen.

2 dit gaat over het bureaublad, ik kan geen bureauachtergrond meer weergeven enkel de kleur wijzigen.

3 gelijk welke map je open doet kan je bij beeld kiezen tussen lijst, details, tegels, extra grote , grote , normale pictogrammen. vroeger kon je extra grote of grote pictogrammen bekijken nu enkel nog de normale.

4 juni 2011

Wat met probleem 1 en probleem 2 en 3 zoals hierboven beschreven.

4 juni 2011

Voorlopig goed denk ik.

Ik heb tevens ook problemen met 1) de werkbalk die rechts staat en ik kan die via de normale manier niet naar onderen verplaatsen

2) bureaublad kan geen afbeelding erop plaatsen.

3) als ik afbeeldingen open komt het beeld op grote pictogrammen en die kan ik niet zien, ik moet dan bij beeld veranderen naar normale pictogrammen en dan lukt het wel.

4) IK GEBRUIK NU PANDA , maar er staan sporen op van avg en norton en advast wat doe ik hiermee

4 juni 2011

ComboFix 11-06-04.02 - verostef 04/06/2011 11:01:58.9.2 - x86

Gestart vanuit: c:\users\verostef\Downloads\ComboFix.exe

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\users\verostef\AppData\Roaming\Island

c:\users\verostef\AppData\Roaming\Island\space.rgt

c:\windows\msvbvm60.dll

c:\windows\usp10.dll

.

(((((((((((((((((((( Bestanden Gemaakt van 2011-05-04 to 2011-06-04 ))))))))))))))))))))))))))))))

.

2011-06-04 15:15 . 2011-06-04 15:15 -------- d-----w- c:\users\Public\AppData\Local\temp

2011-06-04 15:15 . 2011-06-04 15:15 -------- d-----w- c:\users\Default\AppData\Local\temp

2011-06-04 14:57 . 2011-06-04 14:57 60416 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\LocalCopy\{0A4F3EFC-580F-D44D-4C2C-5A67070889F8}-iexplore.exe

2011-06-04 10:22 . 2011-06-04 10:22 28752 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{BFCEFD06-45E5-4355-9B7A-6060160E6521}\MpKsl9d1acbe4.sys

2011-06-04 10:12 . 2011-06-04 10:21 105088 ----a-w- c:\windows\system32\drivers\av5flt.sys

2011-06-04 10:12 . 2011-06-04 10:12 28752 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{BFCEFD06-45E5-4355-9B7A-6060160E6521}\MpKsla31b49a9.sys

2011-06-03 19:25 . 2010-11-30 15:43 439632 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll

2011-06-03 19:23 . 2010-11-30 15:43 439632 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{436A4A28-ED3A-48A0-B680-754F59E9DB4F}\gapaengine.dll

2011-06-03 19:13 . 2011-05-24 23:12 6962000 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{BFCEFD06-45E5-4355-9B7A-6060160E6521}\mpengine.dll

2011-06-03 18:50 . 2011-06-03 18:50 -------- d-----w- c:\users\verostef\AppData\Local\Panda Security

2011-06-03 18:48 . 2011-06-03 18:48 -------- d-----w- c:\users\verostef\AppData\Roaming\Panda Security

2011-06-03 18:47 . 2011-06-03 18:48 -------- d-----w- c:\program files\Microsoft Security Client

2011-06-03 18:45 . 2011-06-03 18:45 -------- d-----w- c:\program files\Common Files\Panda Security

2011-06-03 18:45 . 2011-02-21 18:38 37448 ----a-w- c:\windows\system32\drivers\ShlDrv51.sys

2011-06-03 18:45 . 2010-05-06 21:11 163848 ----a-w- c:\windows\system32\drivers\PavProc.sys

2011-06-03 18:43 . 2010-04-05 20:00 221568 ----a-w- c:\windows\system32\drivers\netio.sys

2011-06-03 18:37 . 2011-05-24 23:12 6962000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{B2CBBC94-B80A-4C25-80D9-19C2C2D96B0A}\mpengine.dll

2011-06-03 16:06 . 2011-06-04 10:22 -------- d-----w- c:\windows\system32\wbem\repository

2011-06-02 16:24 . 2011-06-02 16:24 -------- d-----w- c:\users\verostef\AppData\Roaming\Gogii

2011-06-02 15:17 . 2011-06-02 15:22 -------- d-----w- c:\program files\Shop-N-Spree Family Fortune

2011-05-31 01:52 . 2011-05-31 01:52 -------- d-----w- c:\users\verostef\AppData\Roaming\Crown

2011-05-31 01:52 . 2011-05-31 01:52 -------- d-----w- c:\programdata\Crown

2011-05-31 00:22 . 2011-05-31 00:22 -------- d-----w- c:\programdata\Playrix Entertainment

2011-05-30 09:29 . 2011-06-03 14:56 -------- d-----w- c:\users\stafke

2011-05-28 21:48 . 2011-06-03 09:28 -------- d-----w- c:\users\verostef\AppData\Roaming\go

2011-05-28 21:48 . 2011-06-03 14:55 -------- d-----w- c:\programdata\Easybits GO

2011-05-25 01:54 . 2011-06-01 12:12 -------- d-----w- c:\programdata\Skype Extras

2011-05-25 01:54 . 2011-05-25 01:54 -------- d-----w- c:\program files\Common Files\Skype

2011-05-22 14:00 . 2011-05-22 14:00 -------- d-----w- c:\users\verostef\AppData\Roaming\Blackberry Desktop

2011-05-19 12:39 . 2011-05-19 12:39 -------- d-----w- c:\programdata\6111

2011-05-14 17:58 . 2011-05-14 17:58 -------- d-----w- c:\users\verostef\AppData\Roaming\Gamers Digital

2011-05-14 17:58 . 2011-05-14 17:58 -------- d-----w- c:\programdata\Gamers Digital

2011-05-14 17:06 . 2011-05-17 13:16 -------- d-----w- c:\users\verostef\AppData\Roaming\Nitro PDF

2011-05-14 17:04 . 2011-03-21 15:15 17728 ----a-w- c:\windows\system32\nitrolocalui.dll

2011-05-14 17:04 . 2011-03-21 15:15 26432 ----a-w- c:\windows\system32\nitrolocalmon.dll

2011-05-14 17:04 . 2011-05-14 17:04 -------- d-----w- c:\programdata\Nitro PDF

2011-05-14 16:40 . 2011-05-14 16:40 -------- d-----w- c:\users\verostef\AppData\Roaming\Downloaded Installations

2011-05-14 16:16 . 2011-05-14 16:16 -------- d-----w- c:\users\verostef\AppData\Local\PDF24

2011-05-14 16:15 . 2011-05-18 11:14 -------- d-----w- c:\program files\PDF24

2011-05-14 16:02 . 2011-05-14 16:02 -------- d-----w- c:\programdata\PDF reDirect

2011-05-14 16:01 . 2011-05-18 11:14 -------- d-----w- c:\users\verostef\AppData\Roaming\PDF reDirect

2011-05-14 15:08 . 2011-05-14 15:08 -------- d-----w- c:\program files\PlotSoft

2011-05-12 15:25 . 2011-05-12 15:26 -------- d-----w- c:\users\verostef\AppData\Local\{28C84D65-C450-4DF5-854B-A24041247913}

2011-05-12 14:06 . 2011-05-12 14:06 -------- d-----w- c:\users\verostef\AppData\Local\{C2F91607-30C7-486E-A645-BD0341A343E3}

2011-05-11 12:24 . 2011-04-07 12:01 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat

2011-05-10 02:32 . 2011-05-10 02:32 -------- d-----w- c:\users\verostef\AppData\Local\{981C8EE5-577A-4AA7-B818-0BB6B1524356}

2011-05-09 22:09 . 2011-05-09 22:09 -------- d-----w- c:\program files\Common Files\Vbox

2011-05-09 22:07 . 1998-10-02 23:00 327168 ----a-w- c:\windows\IsUninst.exe

2011-05-09 22:04 . 2011-05-09 22:04 -------- d-----w- c:\users\verostef\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant

2011-05-09 22:04 . 2011-05-09 22:04 -------- d-----w- c:\program files\Adobe Download Assistant

2011-05-09 22:03 . 2011-05-09 22:03 -------- d-----w- c:\program files\Common Files\Adobe AIR

2011-05-09 20:54 . 2011-05-09 20:54 -------- d-----w- c:\users\verostef\AppData\Roaming\Summitsoft

2011-05-09 20:46 . 2011-05-11 12:37 -------- d-----w- c:\program files\Summitsoft

2011-05-09 20:46 . 2011-05-09 20:46 -------- d-----w- c:\windows\Logo Design Studio Trial

2011-05-09 18:48 . 2004-03-29 20:23 90112 ----a-w- c:\windows\unvise32.exe

2011-05-09 15:12 . 2011-05-09 15:12 -------- d-----w- c:\windows\system32\gs

2011-05-09 15:09 . 2010-09-27 20:16 3979680 ----a-w- c:\windows\system32\Flash10c.ocx

2011-05-09 15:09 . 2010-09-27 20:16 117507 ----a-w- c:\windows\system32\Msinet.ocx

2011-05-09 15:09 . 2010-09-27 20:16 109248 ----a-w- c:\windows\system32\Mswinsck.ocx

2011-05-09 15:09 . 2001-03-13 18:49 140288 ----a-w- c:\windows\system32\COMDLG32.OCX

2011-05-09 15:09 . 1998-04-24 04:00 368912 ----a-w- c:\windows\system32\vbar332.dll

2011-05-09 15:09 . 2011-05-18 11:20 -------- d-----w- C:\QuickLogoDesigner

2011-05-09 15:05 . 2011-05-09 15:05 -------- d-----w- c:\program files\Logo Cre8or

2011-05-09 14:49 . 2011-05-09 14:49 -------- d-----w- c:\users\verostef\AppData\Roaming\inkscape

2011-05-09 14:43 . 2011-05-11 12:43 -------- d-----w- c:\program files\Inkscape

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2011-05-29 13:11 . 2011-01-25 09:37 39984 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2011-05-29 13:11 . 2011-01-25 09:37 22712 ----a-w- c:\windows\system32\drivers\mbam.sys

2011-04-18 09:44 . 2011-04-18 09:44 161792 ----a-w- c:\windows\system32\msls31.dll

2011-04-18 09:44 . 2011-04-18 09:44 1126912 ----a-w- c:\windows\system32\wininet.dll

2011-04-18 09:44 . 2011-04-18 09:44 86528 ----a-w- c:\windows\system32\iesysprep.dll

2011-04-18 09:44 . 2011-04-18 09:44 76800 ----a-w- c:\windows\system32\SetIEInstalledDate.exe

2011-04-18 09:44 . 2011-04-18 09:44 74752 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe

2011-04-18 09:44 . 2011-04-18 09:44 63488 ----a-w- c:\windows\system32\tdc.ocx

2011-04-18 09:44 . 2011-04-18 09:44 48640 ----a-w- c:\windows\system32\mshtmler.dll

2011-04-18 09:44 . 2011-04-18 09:44 367104 ----a-w- c:\windows\system32\html.iec

2011-04-18 09:44 . 2011-04-18 09:44 74752 ----a-w- c:\windows\system32\iesetup.dll

2011-04-18 09:44 . 2011-04-18 09:44 23552 ----a-w- c:\windows\system32\licmgr10.dll

2011-04-18 09:44 . 2011-04-18 09:44 152064 ----a-w- c:\windows\system32\wextract.exe

2011-04-18 09:44 . 2011-04-18 09:44 1427456 ----a-w- c:\windows\system32\inetcpl.cpl

2011-04-18 09:44 . 2011-04-18 09:44 420864 ----a-w- c:\windows\system32\vbscript.dll

2011-04-18 09:44 . 2011-04-18 09:44 2382848 ----a-w- c:\windows\system32\mshtml.tlb

2011-04-18 09:44 . 2011-04-18 09:44 150528 ----a-w- c:\windows\system32\iexpress.exe

2011-04-18 09:44 . 2011-04-18 09:44 142848 ----a-w- c:\windows\system32\ieUnatt.exe

2011-04-18 09:44 . 2011-04-18 09:44 11776 ----a-w- c:\windows\system32\mshta.exe

2011-04-18 09:44 . 2011-04-18 09:44 101888 ----a-w- c:\windows\system32\admparse.dll

2011-04-18 09:44 . 2011-04-18 09:44 35840 ----a-w- c:\windows\system32\imgutil.dll

2011-04-18 09:44 . 2011-04-18 09:44 1797632 ----a-w- c:\windows\system32\jscript9.dll

2011-04-18 09:44 . 2011-04-18 09:44 110592 ----a-w- c:\windows\system32\IEAdvpack.dll

2011-03-21 15:17 . 2011-03-21 15:17 68928 ----a-w- c:\windows\system32\NLSSRV32.EXE

2011-03-12 21:55 . 2011-04-27 11:16 876032 ----a-w- c:\windows\system32\XpsPrint.dll

2011-03-10 17:03 . 2011-04-15 02:47 1162240 ----a-w- c:\windows\system32\mfc42u.dll

2011-03-10 17:03 . 2011-04-15 02:47 1136640 ----a-w- c:\windows\system32\mfc42.dll

2011-03-09 18:13 . 2010-06-24 15:33 18328 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{474597C5-AB09-49d6-A4D5-2E8D7341384E}]

2011-02-08 15:47 721288 ----a-w- c:\progra~1\IMESHA~1\MediaBar\Datamngr\IEBHO.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SmpcSys"="c:\program files\PACKARD BELL\SetUpMyPC\SmpSys.exe" [2008-07-07 1038136]

"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-04-28 1828136]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]

"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]

"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-11-13 68856]

"Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-04-18 15146376]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RtHDVCpl"="RtHDVCpl.exe" [2008-08-04 6265376]

"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-06-08 894512]

"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2010-10-22 30192]

"SmpcSys"="c:\program files\Packard Bell\SetupMyPC\SmpSys.exe" [2008-07-07 1038136]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-08-12 150040]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-08-12 170520]

"Persistence"="c:\windows\system32\igfxpers.exe" [2008-08-12 145944]

"Skytel"="Skytel.exe" [2008-08-04 1833504]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]

"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2009-10-19 1983816]

"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2009-09-04 767312]

"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-27 207424]

"ArcSoft MediaImpression Monitor"="c:\program files\Kodak\MediaImpression\ArcMonitor.exe" [2010-07-20 80384]

"Monitor"="c:\program files\LeapFrog\LeapFrog Connect\Monitor.exe" [2010-11-19 193880]

"Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe" [2007-03-09 63712]

"WinampAgent"="c:\program files\Winamp\winampa.exe" [2010-12-09 74752]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-10-29 249064]

"Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2011-05-29 1047656]

"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2010-11-30 997408]

"APVXDWIN"="c:\program files\Panda Security\Panda Antivirus Pro 2012\APVXDWIN.EXE" [2011-03-23 1000768]

"SCANINICIO"="c:\program files\Panda Security\Panda Antivirus Pro 2012\Inicio.exe" [2011-02-02 70464]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableUIADesktopToggle"= 0 (0x0)

"HideFastUserSwitching"= 0 (0x0)

.

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avldr]

2010-03-24 16:55 55552 ----a-w- c:\windows\System32\avldr.dll

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]

BootExecute REG_MULTI_SZ autocheck autochk *\0aswBoot.exe /A:* /L:1043 /heur:80 /RA:ask /pup /archives /IA:0 /KBD:2 /dir:C:\Program

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

@="Service"

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PskSvcRetail]

@="Service"

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SymEFA.sys]

@="FSFilter Activity Monitor"

.

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

R2 gupdate1ca646c3ec5c78c;Google Updateservice (gupdate1ca646c3ec5c78c);c:\program files\Google\Update\GoogleUpdate.exe [2009-11-13 133104]

R3 CFcatchme;CFcatchme;c:\users\verostef\AppData\Local\Temp\CFcatchme.sys [x]

R3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.SYS [2009-03-31 36608]

R3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2010-10-22 30192]

R3 gupdatem;Google Update-service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2009-11-13 133104]

R3 Leapfrog-USBLAN;Leapfrog-USBLAN;c:\windows\system32\DRIVERS\btblan.sys [2010-01-20 33792]

R3 NETw5v32;Stuurprogramma voor Intel® Wireless WiFi Link Adapter onder Windows Vista 32 Bit;c:\windows\system32\DRIVERS\NETw5v32.sys [2008-04-27 3658752]

R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]

R4 ArcUdfs;ArcUdfs FileSystem Driver Service; [x]

R4 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\AVG\AVG9\Toolbar\ToolbarBroker.exe [x]

R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]

S0 pavboot;Panda boot driver;c:\windows\system32\Drivers\pavboot.sys [2010-06-22 26696]

S1 MpKsl9d1acbe4;MpKsl9d1acbe4;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{BFCEFD06-45E5-4355-9B7A-6060160E6521}\MpKsl9d1acbe4.sys [2011-06-04 28752]

S1 ShldDrv;Panda File Shield Driver;c:\windows\system32\DRIVERS\ShlDrv51.sys [2011-02-21 37448]

S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2008-01-21 21504]

S2 AmFSM;AmFSM;c:\windows\system32\DRIVERS\amm8660.sys [2010-05-21 54344]

S2 ETService;Empowering Technology Service;c:\program files\Packard Bell\Packard Bell Recovery Management\Service\ETService.exe [2008-07-16 24576]

S2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe [2008-01-21 21504]

S2 nlsX86cc;NLS Service;c:\windows\system32\NLSSRV32.EXE [2011-03-21 68928]

S2 PavProc;Panda Process Protection Driver;c:\windows\system32\DRIVERS\PavProc.sys [2010-05-06 163848]

S2 PskSvcRetail;Panda PSK service;c:\program files\Panda Security\Panda Antivirus Pro 2012\PskSvc.exe [2010-08-16 28992]

S3 ArcCD;ArcCD Filter Driver Service; [x]

S3 AvFlt;Antivirus Filter Driver;c:\windows\system32\drivers\av5flt.sys [2011-06-04 105088]

S3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\DRIVERS\MpNWMon.sys [2010-10-25 43392]

S3 netr28;Ralink 802.11n Wireless Driver for Windows Vista;c:\windows\system32\DRIVERS\netr28.sys [2008-07-29 418816]

S3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2010-10-25 54144]

S3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\Antimalware\NisSrv.exe [2010-11-11 206360]

S3 PavSRK.sys;PavSRK.sys;c:\windows\system32\PavSRK.sys [x]

S3 PavTPK.sys;PavTPK.sys;c:\windows\system32\PavTPK.sys [x]

.

--- Andere Services/Drivers In Geheugen ---

.

*NewlyCreated* - MPKSL9D1ACBE4

*Deregistered* - ArcRec

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12

Akamai REG_MULTI_SZ Akamai

.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs

ezSharedSvc

.

Inhoud van de 'Gedeelde Taken' map

.

2011-06-04 c:\windows\Tasks\Google Software Updater.job

- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-11-13 19:25]

.

2011-06-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2009-11-13 14:18]

.

2011-06-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2009-11-13 14:18]

.

------- Bijkomende Scan -------

.

uStart Page = hxxp://search.imesh.com/

uSearch Page =

uSearch Bar =

mStart Page = hxxp://search.thechatphone.com

uSearchURL,(Default) = hxxp://www.google.com/search/?q=%s

mSearchAssistant =

IE: &Winamp Search - c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html

IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html

TCP: DhcpNameServer = 209.59.69.2 69.57.245.74

DPF: {69731714-6886-4587-A9AA-D80C2763884D} - hxxp://dl.google.com/dl/desktop/nv/GoogleGadgetPluginIEWin.cab

DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game.zylom.com/activex/zylomgamesplayer.cab

.

------- Bestandsassociaties -------

.

JSEFile=c:\progra~1\PANDAS~1\PANDAA~1\PavScrip.exe "%1" %*

.

**************************************************************************

.

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2011-06-04 11:15

Windows 6.0.6002 Service Pack 2 NTFS

.

detected NTDLL code modification:

ZwEnumerateKey, ZwClose, ZwEnumerateValueKey, ZwQueryValueKey, ZwOpenFile

.

scannen van verborgen processen ...

.

[0] 0x89F0458B

[0] 0x042444C7

scannen van verborgen autostart items ...

.

scannen van verborgen bestanden ...

.

Scan succesvol afgerond

verborgen bestanden: 0

.

**************************************************************************

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

.

[HKEY_USERS\S-1-5-21-537095699-1290289719-2418992811-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{A48041E4-EEC0-5F8A-3AA0-5404A3B4887A}*]

"iadfhjjehjcffacdkc"=hex:62,61,6f,6b,00,f9

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

Voltooingstijd: 2011-06-04 11:21:10

ComboFix-quarantined-files.txt 2011-06-04 15:21

ComboFix2.txt 2011-03-14 17:21

ComboFix3.txt 2011-03-12 12:51

ComboFix4.txt 2011-03-12 10:33

ComboFix5.txt 2011-06-04 14:58

.

Pre-Run: 175.130.718.208 bytes beschikbaar

Post-Run: 175.198.666.752 bytes beschikbaar

.

- - End Of File - - 286939CACE4ED603883EA80B88211B2E

Logfile of Trend Micro HijackThis v2.0.3 (BETA)

Scan saved at 11:25:05, on 4/06/2011

Platform: Windows Vista SP2 (WinNT 6.00.1906)

MSIE: Internet Explorer v9.00 (9.00.8112.16421)

Boot mode: Normal

Running processes:

C:\PROGRAM FILES\PANDA SECURITY\PANDA ANTIVIRUS PRO 2012\WebProxy.exe

C:\Windows\system32\Dwm.exe

C:\Windows\system32\taskeng.exe

C:\Windows\RtHDVCpl.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Windows\system32\conime.exe

C:\Windows\system32\notepad.exe

C:\Windows\explorer.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe

C:\Program Files\TrendMicro\HiJackThis\HiJackThis.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Windows\system32\DllHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Search

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = TheChatPhone enhanced by Google- Search Results

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll

O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll

O2 - BHO: UrlHelper Class - {474597C5-AB09-49d6-A4D5-2E8D7341384E} - C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\IEBHO.dll

O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\16.8.0.41\coIEPlg.dll

O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\16.8.0.41\IPSBHO.DLL

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (file missing)

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.6209.1142\swg.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe

O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup

O4 - HKLM\..\Run: [smpcSys] C:\Program Files\Packard Bell\SetupMyPC\SmpSys.exe

O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe

O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe

O4 - HKLM\..\Run: [skytel] Skytel.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon

O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon

O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe

O4 - HKLM\..\Run: [ArcSoft MediaImpression Monitor] C:\Program Files\Kodak\MediaImpression\ArcMonitor.exe

O4 - HKLM\..\Run: [Monitor] "C:\Program Files\LeapFrog\LeapFrog Connect\Monitor.exe"

O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"

O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript

O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Security\Panda Antivirus Pro 2012\APVXDWIN.EXE" /s

O4 - HKLM\..\Run: [sCANINICIO] "C:\Program Files\Panda Security\Panda Antivirus Pro 2012\Inicio.exe"

O4 - HKCU\..\Run: [smpcSys] C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe

O4 - HKCU\..\Run: [indxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe

O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized

O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html

O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll

O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O16 - DPF: {40F576AD-8680-4F9E-9490-99D069CD665F} (System Requirements Lab Class) - http://srtest-cdn.systemrequirementslab.com.s3.amazonaws.com/bin/sysreqlabdetect.cab

O16 - DPF: {69731714-6886-4587-A9AA-D80C2763884D} (Google Gadget Control) - http://dl.google.com/dl/desktop/nv/GoogleGadgetPluginIEWin.cab

O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab

O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab

O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - http://game.zylom.com/activex/zylomgamesplayer.cab

O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} (WRC Class) - http://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework//microsoft/wrc32.ocx

O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - http://www.popcap.com/webgames/popcaploader_v10.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O18 - Protocol: symres - {AA1061FE-6C41-421F-9344-69640C9732AB} - C:\Program Files\Norton Internet Security\Engine\16.8.0.41\coIEPlg.dll

O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe

O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe

O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Packard Bell\Packard Bell Recovery Management\Service\ETService.exe

O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

O23 - Service: Google Updateservice (gupdate1ca646c3ec5c78c) (gupdate1ca646c3ec5c78c) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE

O23 - Service: LeapFrog Connect Device Service - LeapFrog Enterprises, Inc. - C:\Program Files\LeapFrog\LeapFrog Connect\CommandService.exe

O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

O23 - Service: NLS Service (nlsX86cc) - Nalpeiron Ltd. - C:\Windows\system32\NLSSRV32.EXE

O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe

O23 - Service: Panda Software Controller - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2012\PsCtrls.exe

O23 - Service: Panda Function Service (PAVFNSVR) - Unknown owner - C:\Program Files\Panda Security\Panda Antivirus Pro 2012\PavFnSvr.exe

O23 - Service: Panda Process Protection Service (PavPrSrv) - Unknown owner - C:\Program Files\Common Files\Panda Security\PavShld\pavprsrv.exe

O23 - Service: Panda On-Access Anti-Malware Service (PAVSRV) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2012\pavsrvx86.exe

O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe

O23 - Service: Panda IManager Service (PSIMSVC) - Panda Security S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2012\PsImSvc.exe

O23 - Service: Panda PSK service (PskSvcRetail) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2012\PskSvc.exe

O23 - Service: Panda TPSrv (TPSrv) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2012\TPSrv.exe

--

End of file - 12954 bytes

4 juni 2011

Ik heb tevens ook problemen met 1)de werkbalk die rechts staat en ik kan die via de normale manier niet naar onderen verplaatsen

2)bureaublad kan geen afbeelding erop plaatsen.

3) als ik afbeeldingen open komt het beeld op grote pictogrammen en die kan ik niet zien, ik moet dan bij beeld veranderen naar normale pictogrammen en dan lukt het wel.

4 juni 2011

Beste ,

Ik heb indertijd Norton gebruikt, dan avg en dan advast, voor het ogenblik panda wat is de beste want daar zit het probleem geloof ik, nu ja ik ken er bitter weinig van vandaar dat ik het u vraag, .

Heb na het sturen van mijn help panda eropgezet.

ik heb de hijackthis in veilige modus gedaan het vraagt niet om te openen als administrator.

Malwarebytes' Anti-Malware 1.51.0.1200

Malwarebytes : Free anti-malware, anti-virus and spyware removal download

Databaseversie: 6763

Windows 6.0.6002 Service Pack 2

Internet Explorer 9.0.8112.16421

4/06/2011 6:36:57

mbam-log-2011-06-04 (06-36-57).txt

Scantype: Snelle scan

Objecten gescand: 168159

Verstreken tijd: 11 minuut/minuten, 58 seconde(n)

Geheugenprocessen geïnfecteerd: 0

Geheugenmodulen geïnfecteerd: 0

Registersleutels geïnfecteerd: 0

Registerwaarden geïnfecteerd: 0

Registerdata geïnfecteerd: 0

Mappen geïnfecteerd: 0

Bestanden geïnfecteerd: 0

Geheugenprocessen geïnfecteerd:

(Geen kwaadaardige objecten gedetecteerd)

Geheugenmodulen geïnfecteerd:

(Geen kwaadaardige objecten gedetecteerd)

Registersleutels geïnfecteerd:

(Geen kwaadaardige objecten gedetecteerd)

Registerwaarden geïnfecteerd:

(Geen kwaadaardige objecten gedetecteerd)

Registerdata geïnfecteerd:

(Geen kwaadaardige objecten gedetecteerd)

Mappen geïnfecteerd:

(Geen kwaadaardige objecten gedetecteerd)

Bestanden geïnfecteerd:

(Geen kwaadaardige objecten gedetecteerd)

Dit logje is normale modus gedaan (zonder administrator????)

Logfile of Trend Micro HijackThis v2.0.3 (BETA)

Scan saved at 6:48:32, on 4/06/2011

Platform: Windows Vista SP2 (WinNT 6.00.1906)

MSIE: Internet Explorer v9.00 (9.00.8112.16421)

Boot mode: Normal

Running processes:

C:\PROGRAM FILES\PANDA SECURITY\PANDA ANTIVIRUS PRO 2012\WebProxy.exe

C:\Windows\system32\Dwm.exe

C:\Windows\system32\taskeng.exe

C:\Windows\RtHDVCpl.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Windows\Explorer.EXE

C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Program Files\TrendMicro\HiJackThis\HiJackThis.exe

C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Search

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = iGoogle Redirect