jappie1976

Goedenavond, Ik heb sinds gisteren een probleem met mijn pc. Eerst heb ik het 'Totalsecurity virus' eraf kunnen krijgen, maar vervolgens kon ik geen programma's opstarten, omdat ik dan iedere keer een programma moest kiezen om te openen. Daarna heb ik CCleaner er overheen gegooid en de register scan uitgevoerd. Toen gaf hij wat problemen aan die ik uiteindelijk kon herstellen. Ik heb de computer toen opnieuw opgestart en toen ik een programma wilde openen gaf hij de foutmelding: 'er is voor deze bewerking geen programma aan het opgegeven bestand gekoppeld'. Ik begrijp niet hoe ik dit kan herstellen. Ik kan geen programma's openen, alleen internet explorer... Zou iemand me hiermee kunnen helpen? Alvast heel veel dank! Groeten, Jasper

ok, hij is er inderdaad af nu via het zoeken menu. Ik denk dat het probleem nu helemaal opgelost is. Heel erg bedankt voor je hulp en ik zal deze discussie afsluiten. Ik vind het heel fijn dat er mensen zijn die op deze manier kunnen helpen. Nog een mooie werkdag toegewenst en wie weet tot mails (hopelijk niet ;O) Groeten, Jasper

Goedemorgen! Er gebeurt exact hetzelfde als ik dat doe. Hij geeft opnieuw hetzelfde scherm als toen ik je met die printscreen stuurde. Vreemd... Ik heb Vista en kan 'uitvoeren' alleen vinden onder 'bureau accessoires'. Klopt dat? Ik zou niet weten hoe ik het programma op een andere manier moet verwijderen. Groeten, Jasper

ahhh ok bedankt bedankt!!....maarrrr....als ik dat doe, die spatie voor de slash, dan krijg ik iets over of ik het bestand combofix wil openen. Die begrijp ik niet helemaal, omdat ik dacht dat ik hem moest verwijderen. Zie printscreen Trouwens....de computer is er wel heeeeel erg op vooruit gegaan. Heel erg bedankt daarvoor. Ik kon het heel de tijd niet vinden, maar nu lijkt het toch echt opgelost. Ik ben je zeer dankbaar! Groeten, Jasper

Er staan nog een paar bestanden onder progdata die niet op de printscreen staan, maar die lijken in de verste verte niet op wat u mij stuurde: * Windows search * Yahoo! * _wdump Groeten, Jasper ---------- Post toegevoegd om 21:38 ---------- Vorige post was om 21:25 ---------- Als ik het document in uitvoeren zet van combofix, dan zegt mijn computer 'kan het bestand niet vinden'. Schrijf ik iets verkeerd? 'combofix/uninstall'.

Hier een printscreen

ok, maar ik zie daar niet zo'n bestand staan. Hoef ik er dan verder niets mee te doen??

Hoe moet ik c:\programdata\24F8DF5A8E.sys verwijderen?? Gewoon onder de C: schijf verwijderen?

Hallo, Ik heb het weer opnieuw uitgevoerd en heb de volgende log gekregen: ComboFix 10-03-01.04 - Jasper 02-03-2010 20:25:39.1.4 - x86 Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.31.1043.18.3070.1950 [GMT 1:00] Gestart vanuit: c:\users\Jasper\Desktop\ComboFix.exe SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\users\Jasper\AppData\Local\Microsoft\Windows\Temporary Internet Files\0P8504.jpg c:\users\Jasper\AppData\Local\Microsoft\Windows\Temporary Internet Files\l7pjB.jpg c:\users\Jasper\AppData\Local\Microsoft\Windows\Temporary Internet Files\l832kJy7.jpg c:\users\Jasper\AppData\Local\Microsoft\Windows\Temporary Internet Files\P5o56J1.jpg c:\users\Jasper\AppData\Roaming\inst.exe . (((((((((((((((((((( Bestanden Gemaakt van 2010-02-02 to 2010-03-02 )))))))))))))))))))))))))))))) . 2010-03-02 19:44 . 2010-03-02 19:44 -------- d-----w- c:\users\Default\AppData\Local\temp 2010-03-02 18:10 . 2010-03-02 18:10 -------- d-----w- c:\users\Jasper\AppData\Roaming\Malwarebytes 2010-03-02 18:10 . 2010-01-07 15:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2010-03-02 18:10 . 2010-03-02 18:10 -------- d-----w- c:\programdata\Malwarebytes 2010-03-02 18:10 . 2010-03-02 18:10 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2010-03-02 18:10 . 2010-01-07 15:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys 2010-03-02 12:19 . 2010-03-02 12:19 -------- d-----w- c:\program files\TrendMicro 2010-03-01 15:18 . 2010-01-02 06:32 71680 ----a-w- c:\windows\system32\iesetup.dll 2010-03-01 15:15 . 2009-12-04 16:12 212992 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys 2010-03-01 15:15 . 2009-12-04 16:12 105472 ----a-w- c:\windows\system32\drivers\mrxsmb.sys 2010-02-18 16:18 . 2010-02-18 16:18 -------- d-----w- c:\programdata\KONAMI 2010-02-18 16:14 . 2010-02-18 16:14 -------- d-----w- c:\program files\KONAMI 2010-02-18 15:31 . 2010-02-18 15:31 107888 ----a-w- c:\windows\system32\CmdLineExt.dll 2010-02-18 15:16 . 2010-02-18 15:16 -------- d-----w- c:\program files\EA Sports 2010-02-18 14:01 . 2010-02-11 18:42 162512 ----a-w- c:\windows\system32\drivers\aswSP.sys 2010-02-18 14:01 . 2010-02-11 18:38 19024 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys 2010-02-18 14:01 . 2010-02-11 18:39 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys 2010-02-18 14:01 . 2010-02-11 18:42 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys 2010-02-18 14:01 . 2010-02-11 18:38 51792 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys 2010-02-18 14:01 . 2010-02-11 18:53 38848 ----a-w- c:\windows\system32\avastSS.scr 2010-02-18 14:01 . 2010-02-11 18:53 153184 ----a-w- c:\windows\system32\aswBoot.exe 2010-02-18 14:01 . 2010-02-18 14:01 -------- d-----w- c:\programdata\Alwil Software 2010-02-18 14:01 . 2010-02-18 14:01 -------- d-----w- c:\program files\Alwil Software 2010-02-18 13:28 . 2009-09-24 07:55 97208 ----a-w- c:\windows\system32\drivers\pctwfpfilter.sys 2010-02-18 13:28 . 2009-09-24 07:55 229304 ----a-w- c:\windows\system32\drivers\pctgntdi.sys 2010-02-18 13:28 . 2009-10-06 15:31 87784 ----a-w- c:\windows\system32\drivers\PCTAppEvent.sys 2010-02-18 13:28 . 2009-09-23 15:10 207280 ----a-w- c:\windows\system32\drivers\PCTCore.sys 2010-02-18 13:28 . 2009-09-03 08:45 70408 ----a-w- c:\windows\system32\drivers\pctplsg.sys 2010-02-18 13:28 . 2010-02-18 13:29 -------- d-----w- c:\program files\Common Files\PC Tools 2010-02-18 13:28 . 2010-02-18 13:28 -------- d-----w- c:\users\Jasper\AppData\Roaming\PC Tools 2010-02-18 13:28 . 2010-02-18 13:28 -------- d-----w- c:\programdata\PC Tools 2010-02-17 14:28 . 2010-02-17 14:28 -------- d-----w- c:\users\Jasper\AppData\Local\Threat Expert 2010-02-17 14:20 . 2010-03-02 19:44 -------- d-----w- c:\program files\Spyware Doctor 2010-02-08 12:20 . 2010-02-08 12:20 -------- d-----w- c:\program files\Windows Installer Clean Up 2010-02-08 12:19 . 2010-02-08 12:19 -------- d-----w- c:\program files\MSECACHE 2010-02-03 11:40 . 2010-02-18 13:45 -------- d-----w- C:\TV Series 2010-02-02 20:16 . 2010-02-02 20:16 -------- d-----w- c:\users\Jasper\AppData\Roaming\MyMoza 2010-02-02 20:16 . 2010-02-02 20:16 -------- d-----w- c:\program files\MyMoza . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-03-02 18:19 . 2009-06-24 19:17 12 ----a-w- c:\windows\bthservsdp.dat 2010-03-02 11:16 . 2009-06-22 21:20 -------- d-----w- c:\users\Jasper\AppData\Roaming\Skype 2010-03-02 10:07 . 2009-06-22 21:22 -------- d-----w- c:\users\Jasper\AppData\Roaming\skypePM 2010-03-01 15:34 . 2009-06-19 12:55 85992 ----a-w- c:\users\Jasper\AppData\Local\GDIPFONTCACHEV1.DAT 2010-03-01 15:23 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail 2010-03-01 15:19 . 2010-03-01 15:19 -------- d-----w- c:\program files\MSXML 4.0 2010-03-01 14:50 . 2009-06-20 10:27 -------- d-----w- c:\users\Jasper\AppData\Roaming\uTorrent 2010-02-25 21:54 . 2008-01-21 06:47 670018 ----a-w- c:\windows\system32\perfh013.dat 2010-02-25 21:54 . 2008-01-21 06:47 127492 ----a-w- c:\windows\system32\perfc013.dat 2010-02-08 12:45 . 2009-06-19 20:50 -------- d-----w- c:\program files\Microsoft Silverlight 2010-02-07 14:26 . 2009-10-11 08:45 -------- d-----w- c:\users\Jasper\AppData\Roaming\dvdcss 2010-02-03 09:31 . 2009-09-14 17:43 -------- d-----w- c:\program files\Yahoo! 2010-01-30 14:01 . 2010-01-24 13:42 47360 ----a-w- c:\users\Jasper\AppData\Roaming\pcouffin.sys 2010-01-30 14:01 . 2010-01-24 13:42 -------- d-----w- c:\users\Jasper\AppData\Roaming\Vso 2010-01-30 13:59 . 2010-01-30 13:48 2516 --sha-w- c:\programdata\KGyGaAvL.sys 2010-01-30 13:58 . 2010-01-30 13:48 88 --sh--r- c:\programdata\24F8DF5A8E.sys 2010-01-30 13:48 . 2010-01-30 13:48 -------- d-----w- c:\users\Jasper\AppData\Roaming\Corel 2010-01-28 19:16 . 2010-01-28 19:15 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE 2010-01-28 19:03 . 2010-01-28 19:03 -------- d-----w- c:\program files\SEGA 2010-01-28 19:03 . 2009-06-19 14:05 -------- d--h--w- c:\program files\InstallShield Installation Information 2010-01-25 12:48 . 2010-03-01 15:18 472576 ----a-w- c:\windows\system32\secproc_isv.dll 2010-01-25 12:48 . 2010-03-01 15:18 151040 ----a-w- c:\windows\system32\secproc_ssp_isv.dll 2010-01-25 12:48 . 2010-03-01 15:18 151040 ----a-w- c:\windows\system32\secproc_ssp.dll 2010-01-25 12:48 . 2010-03-01 15:18 472064 ----a-w- c:\windows\system32\secproc.dll 2010-01-25 12:45 . 2010-03-01 15:18 329216 ----a-w- c:\windows\system32\msdrm.dll 2010-01-25 08:35 . 2010-03-01 15:18 346624 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe 2010-01-25 08:35 . 2010-03-01 15:18 523776 ----a-w- c:\windows\system32\RMActivate_isv.exe 2010-01-25 08:34 . 2010-03-01 15:18 511488 ----a-w- c:\windows\system32\RMActivate.exe 2010-01-25 08:34 . 2010-03-01 15:18 347136 ----a-w- c:\windows\system32\RMActivate_ssp.exe 2010-01-24 13:42 . 2010-01-24 13:42 47360 ----a-w- c:\windows\system32\drivers\pcouffin.sys 2010-01-23 09:44 . 2010-03-01 15:18 2048 ----a-w- c:\windows\system32\tzres.dll 2010-01-21 23:50 . 2009-10-30 12:17 -------- d-----w- c:\program files\PokerStars.NET 2010-01-14 10:12 . 2009-10-03 11:02 181120 ------w- c:\windows\system32\MpSigStub.exe 2010-01-02 06:38 . 2010-03-01 15:19 916480 ----a-w- c:\windows\system32\wininet.dll 2010-01-02 06:32 . 2010-03-01 15:19 109056 ----a-w- c:\windows\system32\iesysprep.dll 2010-01-02 04:57 . 2010-03-01 15:19 133632 ----a-w- c:\windows\system32\ieUnatt.exe 2009-12-28 12:35 . 2010-03-01 15:18 11776 ----a-w- c:\windows\system32\tsbyuv.dll 2009-12-28 12:35 . 2010-03-01 15:18 1314816 ----a-w- c:\windows\system32\quartz.dll 2009-12-28 12:32 . 2010-03-01 15:18 22528 ----a-w- c:\windows\system32\msyuv.dll 2009-12-28 12:32 . 2010-03-01 15:18 31744 ----a-w- c:\windows\system32\msvidc32.dll 2009-12-28 12:32 . 2010-03-01 15:18 123904 ----a-w- c:\windows\system32\msvfw32.dll 2009-12-28 12:32 . 2010-03-01 15:18 13312 ----a-w- c:\windows\system32\msrle32.dll 2009-12-28 12:31 . 2010-03-01 15:18 82944 ----a-w- c:\windows\system32\mciavi32.dll 2009-12-28 12:31 . 2010-03-01 15:18 50176 ----a-w- c:\windows\system32\iyuv_32.dll 2009-12-28 12:28 . 2010-03-01 15:18 91136 ----a-w- c:\windows\system32\avifil32.dll 2009-12-28 12:28 . 2010-03-01 15:18 65024 ----a-w- c:\windows\system32\avicap32.dll 2009-12-11 12:07 . 2010-03-01 15:18 301568 ----a-w- c:\windows\system32\drivers\srv.sys 2009-12-11 12:07 . 2010-03-01 15:18 98304 ----a-w- c:\windows\system32\drivers\srvnet.sys 2009-12-08 20:52 . 2010-03-01 15:18 897624 ----a-w- c:\windows\system32\drivers\tcpip.sys . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-21 1233920] "SmileboxTray"="c:\users\Jasper\AppData\Roaming\Smilebox\SmileboxTray.exe" [2009-07-31 266888] "PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2009-06-12 1414144] "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856] "Messenger (Yahoo!)"="c:\program files\Yahoo!\Messenger\YahooMessenger.exe" [2009-05-26 4351216] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952] "Google Update"="c:\users\Jasper\AppData\Local\Google\Update\GoogleUpdate.exe" [2009-10-29 135664] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="RtHDVCpl.exe" [2008-05-07 5369856] "Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184] "USBToolTip"="c:\progra~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe" [2007-02-20 199752] "UnlockerAssistant"="c:\program files\Unlocker\UnlockerAssistant.exe" [2008-05-02 15872] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-07-15 148888] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-05-26 413696] "PWRISOVM.EXE"="c:\program files\PowerISO\PWRISOVM.EXE" [2009-03-15 180224] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-09-17 92704] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-09-17 13580832] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-07-13 292128] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696] "avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-02-11 2756488] "ISTray"="c:\program files\Spyware Doctor\pctsTray.exe" [2009-09-22 1243088] c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2009-8-16 110592] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend] @="Service" [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-2201375780-3717989005-3553682316-1000] "EnableNotificationsRef"=dword:00000001 R0 PCTCore;PCTools KDS;c:\windows\System32\drivers\PCTCore.sys [18-2-2010 14:28 207280] R1 aswSP;aswSP;c:\windows\System32\drivers\aswSP.sys [18-2-2010 15:01 162512] R1 ehdrv;ehdrv;c:\windows\System32\drivers\ehdrv.sys [11-9-2009 7:23 108792] R2 aswFsBlk;aswFsBlk;c:\windows\System32\drivers\aswFsBlk.sys [18-2-2010 15:01 19024] R2 aswMonFlt;aswMonFlt;c:\windows\System32\drivers\aswMonFlt.sys [18-2-2010 15:01 51792] R2 sdAuxService;PC Tools Auxiliary Service;c:\program files\Spyware Doctor\pctsAuxs.exe [18-2-2010 14:28 358600] S2 gupdate1c9f37f4015a3f0;Google Updateservice (gupdate1c9f37f4015a3f0);c:\program files\Google\Update\GoogleUpdate.exe [22-6-2009 22:20 133104] S4 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [11-9-2009 7:24 735960] --- Andere Services/Drivers In Geheugen --- *Deregistered* - PCTSDInjDriver32 [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] bthsvcs REG_MULTI_SZ BthServ . Inhoud van de 'Gedeelde Taken' map 2010-03-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2009-06-22 21:20] 2010-03-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2009-06-22 21:20] 2010-03-01 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2201375780-3717989005-3553682316-1000Core.job - c:\users\Jasper\AppData\Local\Google\Update\GoogleUpdate.exe [2010-02-25 17:14] 2010-03-02 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2201375780-3717989005-3553682316-1000UA.job - c:\users\Jasper\AppData\Local\Google\Update\GoogleUpdate.exe [2010-02-25 17:14] 2010-03-02 c:\windows\Tasks\User_Feed_Synchronization-{B100218E-2109-4CB3-A473-21C670F2BC94}.job - c:\windows\system32\msfeedssync.exe [2010-03-01 04:56] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.google.com/ uDefault_Search_URL = hxxp://www.google.com/ie mStart Page = hxxp://www.yahoo.com/ mSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*Yahoo! SearchBar Home Page uInternet Settings,ProxyOverride = *.local uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*Yahoo! IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~4\OFFICE11\EXCEL.EXE/3000 IE: {{FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - c:\program files\PokerStars.NET\PokerStarsUpdate.exe Trusted Zone: plaxo.com\www FF - ProfilePath - c:\users\Jasper\AppData\Roaming\Mozilla\Firefox\Profiles\crjtbung.default\ FF - prefs.js: browser.search.defaulturl - hxxp://search.yahoo.com/search?fr=ffsp1&p= FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.com/ FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=ffds1&p= FF - component: c:\program files\Nokia\Nokia PC Suite 7\bkmrksync\components\BkMrkExt.dll FF - plugin: c:\program files\Google\Picasa3\npPicasa3.dll FF - plugin: c:\program files\Google\Update\1.2.183.17\npGoogleOneClick8.dll FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll FF - plugin: c:\users\Jasper\AppData\Local\Google\Update\1.2.183.17\npGoogleOneClick8.dll FF - plugin: c:\users\Jasper\AppData\LocalLow\PowerChallenge\nppowerloader.dll FF - plugin: c:\users\Jasper\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll ---- FIREFOX POLICIES ---- FF - user.js: yahoo.homepage.dontask - true. - - - - ORPHANS VERWIJDERD - - - - WebBrowser-{604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - (no file) AddRemove-Aangifte voor buitenlandse belastingplichtigen 2008 - c:\program files\Belastingdienst\Aangifte voor buitenlandse belastingplichtigen\2008\ca2008u.exe ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2010-03-02 20:45 Windows 6.0.6001 Service Pack 1 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: 0 ************************************************************************** . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . Voltooingstijd: 2010-03-02 20:54:03 ComboFix-quarantined-files.txt 2010-03-02 19:53 Pre-Run: 276.873.564.160 bytes beschikbaar Post-Run: 280.869.187.584 bytes beschikbaar Current=1 Default=1 Failed=5 LastKnownGood=4 Sets=1,2,3,4,5 - - End Of File - - F306CE5757AB21D69D2BAE37379703DB Ik hoop dat u hier iets mee kan en wederom hartelijk dank!! Vriendelijke groet, Jasper

Hoi, Heel erg bedankt voor uw hulp. Ik heb de stappen, die u hierboven beschreven heeft, opgevolgd en zal hieronder de desbetreffende logs weergeven: Eerst van Malwarebytes: Malwarebytes' Anti-Malware 1.44 Database versie: 3815 Windows 6.0.6001 Service Pack 1 Internet Explorer 8.0.6001.18882 2-3-2010 19:18:37 mbam-log-2010-03-02 (19-18-37).txt Scan type: Snelle Scan Objecten gescand: 107345 Verstreken tijd: 6 minute(s), 26 second(s) Geheugenprocessen geïnfecteerd: 0 Geheugenmodulen geïnfecteerd: 0 Registersleutels geïnfecteerd: 0 Registerwaarden geïnfecteerd: 0 Registerdata bestanden geïnfecteerd: 1 Mappen geïnfecteerd: 0 Bestanden geïnfecteerd: 0 Geheugenprocessen geïnfecteerd: (Geen kwaadaardige items gevonden) Geheugenmodulen geïnfecteerd: (Geen kwaadaardige items gevonden) Registersleutels geïnfecteerd: (Geen kwaadaardige items gevonden) Registerwaarden geïnfecteerd: (Geen kwaadaardige items gevonden) Registerdata bestanden geïnfecteerd: HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: ("regedit.exe" "%1") Good: (regedit.exe "%1") -> Quarantined and deleted successfully. Mappen geïnfecteerd: (Geen kwaadaardige items gevonden) Bestanden geïnfecteerd: (Geen kwaadaardige items gevonden) Nu de Hijack this log: Logfile of Trend Micro HijackThis v2.0.3 (BETA) Scan saved at 19:30:41, on 2-3-2010 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v8.00 (8.00.6001.18882) Boot mode: Normal Running processes: C:\Windows\System32\smss.exe C:\Windows\system32\csrss.exe C:\Windows\system32\wininit.exe C:\Windows\system32\csrss.exe C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe C:\Windows\system32\winlogon.exe C:\Windows\system32\svchost.exe C:\Windows\system32\nvvsvc.exe C:\Windows\system32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\system32\svchost.exe C:\Windows\system32\svchost.exe C:\Windows\system32\SLsvc.exe C:\Windows\system32\svchost.exe C:\Windows\system32\rundll32.exe C:\Windows\system32\svchost.exe C:\Program Files\Alwil Software\Avast5\AvastSvc.exe C:\Windows\system32\taskeng.exe C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\RtHDVCpl.exe C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe C:\Program Files\Unlocker\UnlockerAssistant.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\PowerISO\PWRISOVM.EXE C:\Windows\System32\rundll32.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Alwil Software\Avast5\AvastUI.exe C:\Program Files\Spyware Doctor\pctsTray.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Windows\system32\svchost.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\system32\svchost.exe C:\Program Files\Spyware Doctor\pctsAuxs.exe C:\Program Files\Spyware Doctor\pctsSvc.exe C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\Windows\system32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\system32\SearchIndexer.exe C:\Windows\system32\WUDFHost.exe C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Windows\ehome\ehtray.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\PC Connectivity Solution\ServiceLayer.exe C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Java\jre6\bin\jucheck.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Windows Live\Toolbar\wltuser.exe C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe C:\Program Files\TrendMicro\HiJackThis\HiJackThis.exe C:\Windows\system32\NOTEPAD.EXE C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\system32\wuauclt.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Yahoo! SearchBar Home Page R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Yahoo! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Yahoo! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Yahoo! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = Yahoo! SearchBar Home Page R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Yahoo! R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo! R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Yahoo! R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local O1 - Hosts: ::1 localhost O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Windows Live Aplicación auxiliar de inicio de sesión - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [uSBToolTip] C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe O4 - HKLM\..\Run: [unlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui O4 - HKLM\..\Run: [iSTray] "C:\Program Files\Spyware Doctor\pctsTray.exe" O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [smileboxTray] "C:\Users\Jasper\AppData\Roaming\Smilebox\SmileboxTray.exe" O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [Google Update] "C:\Users\Jasper\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Agregar entrada - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Agregar entrada en Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL O9 - Extra button: PokerStars.net - {FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - C:\Program Files\PokerStars.NET\PokerStarsUpdate.exe O13 - Gopher Prefix: O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: Google Updateservice (gupdate1c9f37f4015a3f0) (gupdate1c9f37f4015a3f0) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- End of file - 10184 bytes Dit is alles wat ik moest doen. Ik hoop dat u kunt zien of alles nu weer goed is. Nogmaals vriendelijk bedankt voor uw hulp. Groeten, Jasper

Goedemiddag, Ik heb de laatste tijd problemen met mijn computer. Onlangs had ik het Vista Guardian virus op mijn computer. Ik heb toen gelezen dat je het beste spywaredoctor kon gebruiken om dit te verwijderen. Dit heb ik dan ook gedaan. Daarna ook de gratis antivirusscanner Avast geinstalleerd. Uiteindelijk lijkt dit virus van mijn computer af te zijn, want ik kan alles weer gebruiken. Maar sinds een paar dagen start de computer trager op. Als hij eenmaal opgestart is, werkt hij ok, maar na wat langer op internet gezeten te hebben, gaat de computer steeds slomer werken en lijkt hij het allemaal niet aan te kunnen. Pagina's openen traag en hij reageert vrijwel niet meer of heel traag op commando's. Hieronder heb ik een hijack this logje geplaatst. Ik hoop dat iemand mij kan helpen. In ieder geval alvast hartelijk bedankt! Logfile of Trend Micro HijackThis v2.0.3 (BETA) Scan saved at 13:21:39, on 2-3-2010 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v8.00 (8.00.6001.18882) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\RtHDVCpl.exe C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe C:\Program Files\Unlocker\UnlockerAssistant.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\PowerISO\PWRISOVM.EXE C:\Windows\System32\rundll32.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe C:\Program Files\Alwil Software\Avast5\AvastUI.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Users\Jasper\AppData\Roaming\Smilebox\SmileboxTray.exe C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Windows\ehome\ehtray.exe C:\Windows\system32\taskeng.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Windows\system32\SearchFilterHost.exe C:\Windows\system32\wuauclt.exe C:\Program Files\TrendMicro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Yahoo! SearchBar Home Page R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Yahoo! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Yahoo! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Yahoo! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = Yahoo! SearchBar Home Page R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Yahoo! R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo! R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Yahoo! R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file) O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Windows Live Aplicación auxiliar de inicio de sesión - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [uSBToolTip] C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe O4 - HKLM\..\Run: [unlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [smileboxTray] "C:\Users\Jasper\AppData\Roaming\Smilebox\SmileboxTray.exe" O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [Google Update] "C:\Users\Jasper\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\RunOnce: [shockwave Updater] C:\Windows\system32\Adobe\Shockwave 11\SwHelper_1150600.exe -Update -1150600 -"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; Trident/4.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.5.30729; .NET CLR 3.0.30618; OfficeLiveConnector.1.3; OfficeLivePatch.0.0)" -"http://www.miniclip.com/games/motocross-fever/en/" O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Agregar entrada - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Agregar entrada en Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL O9 - Extra button: PokerStars.net - {FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - C:\Program Files\PokerStars.NET\PokerStarsUpdate.exe O13 - Gopher Prefix: O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: Google Updateservice (gupdate1c9f37f4015a3f0) (gupdate1c9f37f4015a3f0) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- End of file - 9208 bytes