martinha

excuus, dacht dat ik dat al had gedaan. nog heel erg bedankt voor jullie hulp

Microsoft Windows XP Home Edition 5.1.2600.3.1252.31.1043.18.1014.595 [GMT 2:00] Gestart vanuit: c:\documents and settings\Debby Bakker\Bureaublad\ComboFix.exe AV: Trend Micro Internet Security Pro *Enabled/Updated* {7D2296BC-32CC-4519-917E-52E652474AF5} FW: Trend Micro Personal Firewall *Enabled* {3E790E9E-6A5D-4303-A7F9-185EC20F3EB6} . . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\documents and settings\Debby Bakker\Local Settings\Application Data\{273dfab5-1ab7-6771-5ca5-1e08ee31a024} c:\documents and settings\Debby Bakker\Local Settings\Application Data\{273dfab5-1ab7-6771-5ca5-1e08ee31a024}\@ c:\documents and settings\Debby Bakker\Local Settings\Application Data\{273dfab5-1ab7-6771-5ca5-1e08ee31a024}\n c:\windows\Installer\{273dfab5-1ab7-6771-5ca5-1e08ee31a024} . ---- Voorgaande Run ------- . c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\burnlib.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\CddbLangNL.dll c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\dsp_sps.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\enc_aacplus.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\enc_flac.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\enc_flake.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\enc_lame.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\enc_vorbis.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\enc_wav.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\enc_wma.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\gen_crasher.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\gen_dropbox.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\gen_ff.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\gen_hotkeys.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\gen_ml.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\gen_orgler.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\gen_tray.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\gen_undo.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_avi.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_cdda.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_dshow.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_flac.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_flv.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_linein.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_midi.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_mkv.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_mod.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_mp3.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_mp4.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_nsv.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_swf.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_vorbis.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_wav.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_wave.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_wm.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_wv.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_addons.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_autotag.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_bookmarks.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_dash.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_disc.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_history.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_impex.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_local.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_nowplaying.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_online.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_orb.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_playlists.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_plg.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_pmp.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_rg.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_transcode.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_wire.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ombrowser.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\out_disk.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\out_ds.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\out_wave.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\playlist.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\pmp_activesync.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\pmp_ipod.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\pmp_njb.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\pmp_p4s.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\pmp_usb.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\tagz.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\vis_avs.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\winamp.lng c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\winampa.lng C:\ipconfig.txt c:\windows\system32\drivers\etc\hosts.ics . . (((((((((((((((((((( Bestanden Gemaakt van 2012-05-20 to 2012-06-20 )))))))))))))))))))))))))))))) . . 2012-06-19 12:47 . 2012-06-19 12:47 40776 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2012-06-19 12:42 . 2012-06-19 12:42 -------- d-----w- c:\windows\system32\wbem\Repository 2012-06-19 12:41 . 2012-06-19 12:51 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2012-06-19 12:39 . 2012-06-20 17:51 -------- d--h--r- c:\documents and settings\Debby Bakker\Onlangs geopend 2012-06-19 12:38 . 2012-06-19 12:38 -------- d-----w- c:\program files\Microsoft Silverlight 2012-06-19 12:38 . 2012-06-19 12:38 -------- d-----w- c:\program files\Mozilla Maintenance Service 2012-06-19 12:33 . 2012-06-19 12:33 -------- d-----w- c:\windows\kdefense 2012-06-19 12:33 . 2012-06-19 12:36 -------- d-----w- c:\documents and settings\Debby Bakker\Local Settings\Application Data\Trend Micro 2012-06-19 12:33 . 2012-06-19 12:33 -------- d-----w- c:\documents and settings\All Users\Application Data\Trend Micro 2012-06-15 12:35 . 2012-06-15 12:35 -------- d-----w- c:\program files\Broadcom 2012-06-12 15:29 . 2012-04-04 13:56 22344 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-06-12 13:47 . 2012-06-19 12:42 -------- d-----w- c:\documents and settings\Administrator 2012-06-11 19:15 . 2012-06-11 19:15 -------- d-----w- c:\documents and settings\Debby Bakker\Local Settings\Application Data\Deployment . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-05-31 13:22 . 2006-05-31 07:19 602624 ----a-w- c:\windows\system32\crypt32.dll 2012-05-05 15:08 . 2012-04-03 11:35 419488 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2012-05-05 15:08 . 2011-06-05 10:25 70304 -c--a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2012-04-11 13:55 . 2004-08-04 00:58 2031104 ----a-w- c:\windows\system32\ntkrnlpa.exe 2012-04-11 13:55 . 2006-05-31 07:19 2152960 ----a-w- c:\windows\system32\ntoskrnl.exe 2012-04-11 13:55 . 2006-05-31 07:19 1862400 ----a-w- c:\windows\system32\win32k.sys 2012-05-03 20:10 . 2011-06-05 11:57 97208 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll . . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "UfSeAgnt.exe"="c:\program files\Trend Micro\Internet Security\UfSeAgnt.exe" [2008-02-15 1398024] "WinampAgent"="c:\program files\Winamp\winampa.exe" [2010-01-13 37888] "CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2007-05-14 644696] "CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2007-04-03 1603152] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-03-27 37296] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712] . [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusOverride"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\TrendAntiVirus] "DisableMonitoring"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\TrendFirewall] "DisableMonitoring"=dword:00000001 . [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= . R2 tdudf;TOSHIBA UDF File System Driver;c:\windows\system32\drivers\tdudf.sys [18-4-2006 15:12 98816] R2 tmevtmgr;tmevtmgr;c:\windows\system32\drivers\tmevtmgr.sys [3-8-2008 20:46 52240] R2 tmpreflt;tmpreflt;c:\windows\system32\drivers\tmpreflt.sys [16-2-2008 1:01 36368] R3 tmcfw;Trend Micro Common Firewall Service;c:\windows\system32\drivers\TM_CFW.sys [16-2-2008 1:01 333328] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [3-4-2012 13:35 257696] S3 dump_wmimmc;dump_wmimmc;\??\c:\documents and settings\BO\Bureaublad\9Dragons\GameGuard\dump_wmimmc.sys --> c:\documents and settings\BO\Bureaublad\9Dragons\GameGuard\dump_wmimmc.sys [?] S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [19-6-2012 14:47 40776] S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [3-5-2012 22:10 129976] S3 TmPfw;Trend Micro Personal Firewall;c:\progra~1\TRENDM~1\INTERN~1\TmPfw.exe [3-8-2008 20:46 488768] S3 tmproxy;Trend Micro Proxy Service;c:\program files\Trend Micro\Internet Security\TmProxy.exe [3-8-2008 20:46 648456] S3 WinDefend;Windows Defender;c:\windows\System32\svchost.exe -k secsvcs [31-5-2006 9:19 14336] . Inhoud van de 'Gedeelde Taken' map . 2012-06-20 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-03 15:08] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.google.com/ uInternet Settings,ProxyServer = 80.126.64.123:3128 uInternet Settings,ProxyOverride = <local> TCP: DhcpNameServer = 192.168.1.254 FF - ProfilePath - c:\documents and settings\Debby Bakker\Application Data\Mozilla\Firefox\Profiles\sfqql9om.default\ FF - prefs.js: browser.startup.homepage - hxxp://tc4.travian.nl/dorf1.php|SOLID vs CRAP/BAZEN(LOSERS) - Pagina 26 . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2012-06-20 20:05 Windows 5.1.2600 Service Pack 3 NTFS . scannen van verborgen processen ... . scannen van verborgen autostart items ... . scannen van verborgen bestanden ... . . c:\windows\explorer(2).exe:userini.exe 22528 bytes executable c:\windows\explorer(3).exe:userini.exe 22528 bytes executable c:\windows\explorer(4).exe:userini.exe 22528 bytes executable c:\windows\explorer(5).exe:userini.exe 22528 bytes executable . Scan succesvol afgerond verborgen bestanden: 4 . ************************************************************************** . --------------------- DLLs Geladen Onder Lopende Processen --------------------- . - - - - - - - > 'explorer.exe'(2068) c:\windows\system32\webcheck.dll . ------------------------ Andere Aktieve Processen ------------------------ . c:\program files\Intel\Wireless\Bin\EvtEng.exe c:\program files\Intel\Wireless\Bin\S24EvMon.exe c:\program files\TOSHIBA\ConfigFree\CFSvcs.exe c:\program files\Java\jre6\bin\jqs.exe c:\program files\Intel\Wireless\Bin\RegSrvc.exe c:\windows\system32\TODDSrv.exe c:\windows\system32\wdfmgr.exe c:\program files\Trend Micro\BM\TMBMSRV.exe . ************************************************************************** . Voltooingstijd: 2012-06-20 20:10:27 - machine werd herstart ComboFix-quarantined-files.txt 2012-06-20 18:10 ComboFix2.txt 2012-06-12 18:27 . Pre-Run: 25.970.401.280 bytes beschikbaar Post-Run: 25.973.223.424 bytes beschikbaar . - - End Of File - - 6C3C3F39CDAB921F808A19692C1FC0A4 ennnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn internet werkt weer ) verder nog tips of kan ik jullie opnieuw bedanken en de knop opgelost aanklikken ?

ben nu maar voor zekerheid al me belangrijke bestanden en foto's eraf aan het halen. maar dat duurt nog wel even. zodra dat af is zal ik weer verder proberen.

andere idee ?

laptop maar deformateren?

removal tools mist een paar files/kan niet instaleren. verschillende malen herstart + opnieuw gedownload, maar blijft niet correct werken.

ik had housecall.trendmicro.pro . om de ucash virus te verwijderen heb ik HIJachThis gebruikt en MBAM (Malwarebytes Anti-Malware) en ook nog ComboFix, deze heb ik nadat alles opgelost leek verwijderd zoals gevraagd in de topic http://www.pc-helpforum.be/f163/nogmaals-de-ucash-virus-45411/#post308980 als ook trendmicro pro. Nu staat enkel de standaart window firewall er nog op maar daar heb ik ondertussen alles van uitgezet cta plugin is niet geinstaleerd krijg ik als melding, zou dat het kunnen zijn ?

ik heb alleen nog windowns firewall alles wat ik eerder had heb ik verwijdert. na het verwijderen van het ukash virus is het gekomen, maar de virus scanners om die te verwijderen is al van de laptop af.

---------- Post toegevoegd om 03:08 ---------- Vorige post was om 03:04 ---------- ---------- Post toegevoegd om 03:15 ---------- Vorige post was om 03:08 ---------- Windows IP-configuratie Host-naam . . . . . . . . . . . .: DEBAAS Primair DNS-achtervoegsel. . . . .: Knooppunttype . . . . . . . . . . : hybride IP-routering ingeschakeld. . . . .: nee WINS-proxy ingeschakeld . . . . . : nee Ethernet-adapter LAN-verbinding: Status van medium . . . . . . . . : medium ontkoppeld Beschrijving . . . . . . . . . . .: Realtek RTL8139/810x Family Fast Ethernet NIC Fysiek adres. . . . . . . . . . . : 00-16-D4-2B-DB-11 Ethernet-adapter Draadloze netwerkverbinding: Status van medium . . . . . . . . : medium ontkoppeld Beschrijving . . . . . . . . . . .: Intel® PRO/Wireless 3945ABG Network Connection Fysiek adres. . . . . . . . . . . : 00-18-DE-2D-38-41 Tunnel-adapter Teredo Tunneling Pseudo-Interface: Verbindingsspec. DNS-achtervoegsel: Beschrijving . . . . . . . . . . .: Teredo Tunneling Pseudo-Interface Fysiek adres. . . . . . . . . . . : FF-FF-FF-FF-FF-FF-FF-FF DHCP ingeschakeld:. . . . . . . . : nee IP-adres. . . . . . . . . . . . . : fe80::ffff:ffff:fffd%6 Standaardgateway. . . . . . . . . : NetBIOS over TCPIP. . . . . . . . : uitgeschakeld

de vreemde netwerken had ik al verwijderd (waren van hotels) gedaan wat je vroeg maar "geen verbinding of beperkte mogenlijkheden" nog steeds

nee dan ook niet, heb paar keer geprobeert

heb hem geinstaleerd maar zie hem daarna niet als extra of als nieuwe draadloze netwerk verschijnen

gedownload en geinstaleerd maar geen idee waar hij nu staat

als ik handmatig de draadloze verbinding wil verbreken krijg ik de melding dat het niet mogenlijk is omdat de verbinding een of meer protocollen zonder plug en play ondersteuning gebruikt, of door een andere gebruiker of de systeemacc is geinitialseerd geen idee als je daarmee iets kan maar meld het maar ---------- Post toegevoegd om 14:50 ---------- Vorige post was om 14:49 ---------- okee ga ik doen

hoop dat je deze bedoelde