henkjee

Het virus is nog niet geheel van mijn computer verwijderd volgens mij, want ik kreeg weer een paar keer een blauw scherm dat de computer werd afgesloten ter preventie tegen mogelijk een virus of iets dergelijks. En ook het internet verwijderen en nieuwe installeren heeft niet geholpen.

Misschien een heel domme vraag hoor. Maar als ik 'm verwijder kan ik hem dan nog wel opnieuw installeren of hoeft dat niet via internet?

De PC gedraagt zich nu al weer veel beter, maar alleen heb ik best vaak als ik Internet Explorer opstart dat hij vast loopt en dan afgesloten moet worden via taakbeheer, maar dat is niet altijd zo. Ook als ik via MSN op mijn mail klik opent hij soms internet explorer gewoon niet om naar mijn mail te gaan. Ik weet niet of dit er iets mee te maken heeft, maar dat had ik sinds ik dat virus op mijn computer had.

Ik had 'm gister na de scan afgesloten en vandaag hele dag gewerkt, dus ik zal binnenkort even bericht hoe m'n pc zich houdt!

Ja klopt! Zoals SweetIM kwam vanuit 't niets op mijn pc.. maar hier komen ze: ComboFix 10-12-21.01 - henk 21-12-2010 23:39:42.3.8 - x64 Microsoft Windows 7 Home Premium 6.1.7600.0.1252.31.1043.18.4084.2832 [GMT 1:00] Gestart vanuit: c:\users\henk\Desktop\ComboFix.exe gebruikte Opdracht switches :: c:\users\henk\Desktop\CFScript.txt AV: McAfee Antivirus en antispyware *Disabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637} FW: McAfee Firewall *Disabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C} SP: McAfee Antivirus en antispyware *Disabled/Updated* {3D54B793-665E-3129-9103-206115370C8A} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Nieuw herstelpunt werd aangemaakt . (((((((((((((((((((( Bestanden Gemaakt van 2010-11-21 to 2010-12-21 )))))))))))))))))))))))))))))) . 2010-12-21 22:44 . 2010-12-21 22:44 -------- d-----w- c:\users\Default\AppData\Local\temp 2010-12-21 16:52 . 2010-11-16 11:01 8199504 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2E6BC947-7E97-4090-9A0D-A9FDFC7C72D2}\mpengine.dll 2010-12-17 20:36 . 2010-12-17 20:36 -------- d-sh--w- c:\windows\SysWow64\%APPDATA% 2010-12-16 08:18 . 2010-11-04 06:37 696592 ----a-w- c:\program files\Internet Explorer\iexplore.exe 2010-12-08 18:48 . 2010-12-08 18:48 -------- d-----w- c:\programdata\Sunbelt 2010-12-08 18:46 . 2010-08-20 08:18 27472 ----a-w- c:\windows\system32\sbbd.exe 2010-12-08 18:46 . 2010-03-22 11:11 49752 ----a-w- c:\windows\system32\drivers\sbredrv.sys 2010-12-04 17:17 . 2010-12-04 17:17 -------- d-----w- c:\program files (x86)\ESET 2010-11-29 23:06 . 2010-11-29 23:06 -------- d-----w- c:\program files (x86)\Common Files\DivX Shared 2010-11-28 12:20 . 2010-11-28 13:02 -------- d-----w- c:\programdata\WinZip 2010-11-27 18:08 . 2010-11-28 12:59 -------- d-----w- c:\users\henk\DoctorWeb 2010-11-27 14:17 . 2010-12-21 19:31 -------- d-----w- c:\program files (x86)\Steam 2010-11-24 22:07 . 2010-11-24 22:19 -------- d-----w- c:\users\henk\AppData\Local\Deployment 2010-11-24 22:07 . 2010-11-24 22:07 -------- d-----w- c:\users\henk\AppData\Local\Apps 2010-11-24 13:14 . 2010-11-24 22:29 -------- d-----w- c:\users\henk\AppData\Local\ElevatedDiagnostics 2010-11-24 09:06 . 2010-10-19 08:47 7680 ----a-w- c:\program files\Internet Explorer\iecompat.dll 2010-11-24 09:06 . 2010-10-19 08:10 7680 ----a-w- c:\program files (x86)\Internet Explorer\iecompat.dll 2010-11-23 08:23 . 2010-11-23 08:23 -------- d-----w- c:\users\henk\AppData\Roaming\Malwarebytes 2010-11-23 08:23 . 2010-11-23 08:23 -------- d-----w- c:\programdata\Malwarebytes 2010-11-23 08:23 . 2010-04-29 14:39 24664 ----a-w- c:\windows\system32\drivers\mbam.sys 2010-11-22 17:16 . 2010-11-22 17:16 388096 ----a-r- c:\users\henk\AppData\Roaming\Microsoft\Installer\{0761C9A8-8F3A-4216-B4A7-B7AFBF24A24A}\HiJackThis.exe 2010-11-22 17:16 . 2010-11-22 17:16 -------- d-----w- c:\program files (x86)\TrendMicro . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-10-19 09:41 . 2010-11-19 23:01 270720 ------w- c:\windows\system32\MpSigStub.exe 2010-10-13 21:28 . 2010-09-16 15:16 9984 ----a-w- c:\windows\system32\drivers\mfeclnk.sys 2010-10-13 21:28 . 2010-01-05 23:04 94864 ----a-w- c:\windows\system32\drivers\mferkdet.sys 2010-10-13 21:28 . 2010-01-05 23:04 75032 ----a-w- c:\windows\system32\drivers\mfenlfk.sys 2010-10-13 21:28 . 2010-01-05 23:04 62800 ----a-w- c:\windows\system32\drivers\cfwids.sys 2010-10-13 21:28 . 2010-01-05 23:04 529128 ----a-w- c:\windows\system32\drivers\mfehidk.sys 2010-10-13 21:28 . 2010-01-05 23:04 441328 ----a-w- c:\windows\system32\drivers\mfefirek.sys 2010-10-13 21:28 . 2010-01-05 23:04 283360 ----a-w- c:\windows\system32\drivers\mfewfpk.sys 2010-10-13 21:28 . 2010-01-05 23:04 190136 ----a-w- c:\windows\system32\drivers\mfeavfk.sys 2010-10-13 21:28 . 2010-01-05 23:04 121248 ----a-w- c:\windows\system32\drivers\mfeapfk.sys 2010-09-22 23:47 . 2010-09-22 23:47 49016 ----a-w- c:\windows\SysWow64\sirenacm.dll . <pre> c:\program files (x86)\Windows Live\Messenger\msnmsgr .exe </pre> ((((((((((((((((((((((((((((( SnapShot_2010-12-21_19.51.04 ))))))))))))))))))))))))))))))))))))))))) . - 2010-09-21 11:39 . 2010-12-21 19:30 49152 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2010-09-21 11:39 . 2010-12-21 22:09 49152 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2010-09-21 11:39 . 2010-12-21 22:09 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2010-09-21 11:39 . 2010-12-21 19:30 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2009-07-14 04:54 . 2010-12-21 22:09 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2009-07-14 04:54 . 2010-12-21 19:30 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2010-09-21 16:03 . 2010-12-21 22:08 239748 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S3.bin . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072] "msnmsgr"="c:\program files (x86)\Windows Live\Messenger\msnmsgr.exe" [2010-09-22 4240760] "Steam"="c:\program files (x86)\Steam\Steam.exe" [2010-11-27 1242448] [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2010-09-30 1484856] "dellsupportcenter"="c:\program files (x86)\Dell Support Center\bin\sprtcmd.exe" [N/A] "DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2010-09-01 1164584] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288] [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce] "Launcher"="c:\program files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe" [2010-07-21 165184] c:\users\henk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OneNote 2007 Schermopname en Snel starten.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc] @="" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] @="" R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [2010-10-13 94864] R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184] R3 TurboBoost;TurboBoost;c:\program files\Intel\TurboBoost\TurboBoost.exe [2009-11-02 126352] R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-09-23 1255736] R4 McOobeSv;McAfee OOBE Service;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe [2010-03-10 355440] S0 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys [2010-10-13 283360] S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2010-08-12 55856] S1 mfenlfk;McAfee NDIS Light Filter;c:\windows\system32\DRIVERS\mfenlfk.sys [2010-10-13 75032] S1 SBRE;SBRE;c:\windows\system32\drivers\SBREdrv.sys [2010-03-22 49752] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904] S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_0057cbec48a2d7cf\AESTSr64.exe [2009-03-02 89600] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-04-12 202752] S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-02-28 821664] S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2010-03-10 355440] S2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2010-03-10 355440] S2 McNaiAnn;McAfee VirusScan Announcer;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe [2010-03-10 355440] S2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe [2010-10-13 245352] S2 mfevtp;McAfee Validation Trust Protection Service;c:\program files\Common Files\McAfee\SystemCore\mfevtps.exe [2010-10-13 149032] S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2010-04-23 483688] S2 SftService;SoftThinks Agent Service;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE [2010-08-20 689472] S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [2009-11-02 13784] S3 Acceler;Accelerometer Service;c:\windows\system32\DRIVERS\Acceler.sys [2009-09-17 23912] S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atipmdag.sys [2010-04-12 6405120] S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2010-04-12 188928] S3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [2010-10-13 62800] S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys [2009-06-15 172704] S3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [2010-10-13 441328] S3 O2MDGRDR;O2MDGRDR;c:\windows\system32\DRIVERS\o2mdgx64.sys [2009-11-13 74272] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2009-05-22 215040] S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2010-04-23 721768] S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2010-04-23 269672] S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2010-04-23 25960] S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2010-04-23 22376] S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2010-04-23 209768] --- Andere Services/Drivers In Geheugen --- *Deregistered* - mfeavfk01 . --------- x86-64 ----------- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe" [N/A] "SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2010-01-20 487424] "Broadcom Wireless Manager UI"="c:\program files\Dell\Dell Wireless WLAN Card\WLTRAY.exe" [2009-07-17 4968960] "AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208] "SBRegRebootCleaner"="c:\program files (x86)\Sunbelt Software\VIPRE\SBRC.exe" [N/A] . ------- Bijkomende Scan ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://hyves.nl/ mLocal Page = c:\windows\SysWOW64\blank.htm IE: E&xporteren naar Microsoft Excel - c:\progra~2\MIF5BA~1\Office12\EXCEL.EXE/3000 . - - - - ORPHANS VERWIJDERD - - - - Toolbar-Locked - (no file) WebBrowser-{BA14329E-9550-4989-B3F2-9732E92D17CC} - (no file) WebBrowser-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file) WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file) . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences] @Denied: (2) (LocalSystem) "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,57,91,02,75,a6,18,50,49,b0,09,db,\ "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,57,91,02,75,a6,18,50,49,b0,09,db,\ [HKEY_USERS\S-1-5-21-3246235719-1228998758-3747656504-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLiveMail.Email.1" [HKEY_USERS\S-1-5-21-3246235719-1228998758-3747656504-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLiveMail.VCard.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe,-101" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx" "ThreadingModel"="Apartment" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx, 1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx" "ThreadingModel"="Apartment" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx, 1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee] "SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\ [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Voltooingstijd: 2010-12-21 23:47:04 ComboFix-quarantined-files.txt 2010-12-21 22:47 ComboFix2.txt 2010-12-21 19:53 ComboFix3.txt 2010-12-13 23:18 Pre-Run: 450.063.802.368 bytes beschikbaar Post-Run: 450.022.952.960 bytes beschikbaar - - End Of File - - ED17AEB9FFC958EE9B02A73900488904 Logfile of Trend Micro HijackThis v2.0.3 (BETA) Scan saved at 23:50:11, on 21-12-2010 Platform: Unknown Windows (WinNT 6.01.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16700) Boot mode: Normal Running processes: C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe C:\Program Files (x86)\Steam\Steam.exe C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SCServer\SCServer.exe C:\Program Files (x86)\TrendMicro\HiJackThis\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Hyves.nl: always in touch with your friends R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\progra~2\mcafee\sitead~1\mcieplg.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\progra~1\mcafee\msk\mskapbho.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20101107160942.dll O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\progra~2\mcafee\sitead~1\mcieplg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\progra~2\mcafee\sitead~1\mcieplg.dll O4 - HKLM\..\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey O4 - HKLM\..\Run: [dellsupportcenter] "C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe" /P dellsupportcenter O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\RunOnce: [Launcher] C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MIF5BA~1\Office12\EXCEL.EXE/3000 O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MIF5BA~1\Office12\REFIEBAR.DLL O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~2\mcafee\sitead~1\mcieplg.dll O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~2\mcafee\sitead~1\mcieplg.dll O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_0057cbec48a2d7cf\AESTSr64.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe O23 - Service: McAfee Personal Firewall Service (McMPFSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\Program Files\mcafee\VirusScan\mcods.exe O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe O23 - Service: McShield - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: O2FLASH - Unknown owner - C:\Windows\system32\DRIVERS\o2flash.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks SAS - C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: SupportSoft Sprocket Service (DellSupportCenter) (sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_0057cbec48a2d7cf\STacSV64.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe O23 - Service: TurboBoost - Intel® Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 11400 bytes

ComboFix 10-12-21.01 - henk 21-12-2010 20:45:14.2.8 - x64 Microsoft Windows 7 Home Premium 6.1.7600.0.1252.31.1043.18.4084.2896 [GMT 1:00] Gestart vanuit: c:\users\henk\Desktop\ComboFix.exe gebruikte Opdracht switches :: c:\users\henk\Desktop\CFScript.txt AV: McAfee Antivirus en antispyware *Disabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637} FW: McAfee Firewall *Disabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C} SP: McAfee Antivirus en antispyware *Disabled/Updated* {3D54B793-665E-3129-9103-206115370C8A} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Nieuw herstelpunt werd aangemaakt . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\users\henk\Desktop\Internet Explorer.lnk c:\windows\hexdump.exe c:\windows\iexplarer.exe c:\windows\mdm.exe c:\windows\system32\csbdll.dll c:\windows\SysWow64\csbdll.dll c:\windows\SysWow64\f9ezm7os.dll c:\windows\SysWow64\mredzo.dll c:\windows\TEMP\nvsvc32.exe c:\windows\wininst.exe . (((((((((((((((((((( Bestanden Gemaakt van 2010-11-21 to 2010-12-21 )))))))))))))))))))))))))))))) . 2010-12-21 19:50 . 2010-12-21 19:50 -------- d-----w- c:\users\Default\AppData\Local\temp 2010-12-21 16:52 . 2010-11-16 11:01 8199504 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2E6BC947-7E97-4090-9A0D-A9FDFC7C72D2}\mpengine.dll 2010-12-17 20:36 . 2010-12-17 20:36 -------- d-sh--w- c:\windows\SysWow64\%APPDATA% 2010-12-16 08:18 . 2010-11-04 06:37 696592 ----a-w- c:\program files\Internet Explorer\iexplore.exe 2010-12-08 18:48 . 2010-12-08 18:48 -------- d-----w- c:\programdata\Sunbelt 2010-12-08 18:46 . 2010-08-20 08:18 27472 ----a-w- c:\windows\system32\sbbd.exe 2010-12-08 18:46 . 2010-03-22 11:11 49752 ----a-w- c:\windows\system32\drivers\sbredrv.sys 2010-12-04 17:17 . 2010-12-04 17:17 -------- d-----w- c:\program files (x86)\ESET 2010-11-29 23:06 . 2010-11-29 23:06 -------- d-----w- c:\program files (x86)\Common Files\DivX Shared 2010-11-28 12:20 . 2010-11-28 13:02 -------- d-----w- c:\programdata\WinZip 2010-11-27 18:08 . 2010-11-28 12:59 -------- d-----w- c:\users\henk\DoctorWeb 2010-11-27 14:17 . 2010-12-21 19:31 -------- d-----w- c:\program files (x86)\Steam 2010-11-24 22:07 . 2010-11-24 22:19 -------- d-----w- c:\users\henk\AppData\Local\Deployment 2010-11-24 22:07 . 2010-11-24 22:07 -------- d-----w- c:\users\henk\AppData\Local\Apps 2010-11-24 13:14 . 2010-11-24 22:29 -------- d-----w- c:\users\henk\AppData\Local\ElevatedDiagnostics 2010-11-24 09:06 . 2010-10-19 08:47 7680 ----a-w- c:\program files\Internet Explorer\iecompat.dll 2010-11-24 09:06 . 2010-10-19 08:10 7680 ----a-w- c:\program files (x86)\Internet Explorer\iecompat.dll 2010-11-23 08:23 . 2010-11-23 08:23 -------- d-----w- c:\users\henk\AppData\Roaming\Malwarebytes 2010-11-23 08:23 . 2010-11-23 08:23 -------- d-----w- c:\programdata\Malwarebytes 2010-11-23 08:23 . 2010-04-29 14:39 24664 ----a-w- c:\windows\system32\drivers\mbam.sys 2010-11-22 17:16 . 2010-11-22 17:16 388096 ----a-r- c:\users\henk\AppData\Roaming\Microsoft\Installer\{0761C9A8-8F3A-4216-B4A7-B7AFBF24A24A}\HiJackThis.exe 2010-11-22 17:16 . 2010-11-22 17:16 -------- d-----w- c:\program files (x86)\TrendMicro . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-10-19 09:41 . 2010-11-19 23:01 270720 ------w- c:\windows\system32\MpSigStub.exe 2010-10-13 21:28 . 2010-09-16 15:16 9984 ----a-w- c:\windows\system32\drivers\mfeclnk.sys 2010-10-13 21:28 . 2010-01-05 23:04 94864 ----a-w- c:\windows\system32\drivers\mferkdet.sys 2010-10-13 21:28 . 2010-01-05 23:04 75032 ----a-w- c:\windows\system32\drivers\mfenlfk.sys 2010-10-13 21:28 . 2010-01-05 23:04 62800 ----a-w- c:\windows\system32\drivers\cfwids.sys 2010-10-13 21:28 . 2010-01-05 23:04 529128 ----a-w- c:\windows\system32\drivers\mfehidk.sys 2010-10-13 21:28 . 2010-01-05 23:04 441328 ----a-w- c:\windows\system32\drivers\mfefirek.sys 2010-10-13 21:28 . 2010-01-05 23:04 283360 ----a-w- c:\windows\system32\drivers\mfewfpk.sys 2010-10-13 21:28 . 2010-01-05 23:04 190136 ----a-w- c:\windows\system32\drivers\mfeavfk.sys 2010-10-13 21:28 . 2010-01-05 23:04 121248 ----a-w- c:\windows\system32\drivers\mfeapfk.sys 2010-09-22 23:47 . 2010-09-22 23:47 49016 ----a-w- c:\windows\SysWow64\sirenacm.dll . <pre> c:\program files (x86)\Windows Live\Messenger\msnmsgr .exe </pre> ((((((((((((((((((((((((((((( SnapShot@2010-12-13_23.13.43 ))))))))))))))))))))))))))))))))))))))))) . + 2010-12-16 08:18 . 2010-11-04 05:49 67072 c:\windows\SysWOW64\mshtmled.dll - 2010-10-13 10:32 . 2010-09-08 04:28 67072 c:\windows\SysWOW64\mshtmled.dll + 2010-12-16 08:18 . 2010-11-04 05:46 12800 c:\windows\SysWOW64\msfeedssync.exe - 2010-10-13 10:32 . 2010-09-08 04:25 12800 c:\windows\SysWOW64\msfeedssync.exe - 2010-10-13 10:32 . 2010-09-08 04:28 64512 c:\windows\SysWOW64\msfeedsbs.dll + 2010-12-16 08:18 . 2010-11-04 05:49 64512 c:\windows\SysWOW64\msfeedsbs.dll - 2010-10-13 10:32 . 2010-09-08 04:30 68608 c:\windows\SysWOW64\migration\WininetPlugin.dll + 2010-12-16 08:18 . 2010-11-04 05:52 68608 c:\windows\SysWOW64\migration\WininetPlugin.dll + 2010-12-16 08:18 . 2010-11-04 05:48 44544 c:\windows\SysWOW64\licmgr10.dll - 2010-10-13 10:32 . 2010-09-08 04:28 44544 c:\windows\SysWOW64\licmgr10.dll + 2010-12-16 08:18 . 2010-11-04 05:48 48128 c:\windows\SysWOW64\jsproxy.dll - 2010-10-13 10:32 . 2010-09-08 04:28 48128 c:\windows\SysWOW64\jsproxy.dll + 2010-12-20 19:36 . 2010-12-20 19:36 13585 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\SoftGrid Client\Icon Cache\icon_ex.dat - 2010-12-13 00:10 . 2010-12-13 00:10 13585 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\SoftGrid Client\Icon Cache\icon_ex.dat + 2010-12-17 20:37 . 2010-12-17 20:51 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\Low\index.dat - 2009-07-14 04:54 . 2010-12-13 14:35 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2009-07-14 04:54 . 2010-12-21 19:32 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2010-12-17 20:37 . 2010-12-17 20:51 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\index.dat + 2010-12-17 20:37 . 2010-12-17 20:51 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\Low\History.IE5\index.dat + 2010-12-17 20:36 . 2010-12-17 20:35 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012010121720101218\index.dat - 2009-07-14 04:54 . 2010-12-13 14:35 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2009-07-14 04:54 . 2010-12-21 19:32 49152 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2010-12-16 08:19 . 2010-10-20 04:54 34304 c:\windows\SysWOW64\atmlib.dll - 2010-09-16 17:36 . 2010-09-16 17:36 34304 c:\windows\SysWOW64\atmlib.dll + 2010-12-17 20:36 . 2010-12-17 20:36 16384 c:\windows\SysWOW64\%APPDATA%\Microsoft\Windows\IETldCache\index.dat + 2009-07-14 05:10 . 2010-12-21 19:32 37310 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin + 2010-09-21 15:30 . 2010-12-21 19:32 11312 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3246235719-1228998758-3747656504-1001_UserData.bin + 2010-12-16 08:18 . 2010-11-04 06:32 97280 c:\windows\system32\mshtmled.dll - 2010-10-13 10:32 . 2010-09-08 05:35 97280 c:\windows\system32\mshtmled.dll + 2010-12-16 08:18 . 2010-11-04 06:28 12288 c:\windows\system32\msfeedssync.exe - 2010-10-13 10:32 . 2010-09-08 05:31 12288 c:\windows\system32\msfeedssync.exe - 2010-10-13 10:32 . 2010-09-08 05:35 82944 c:\windows\system32\msfeedsbs.dll + 2010-12-16 08:18 . 2010-11-04 06:32 82944 c:\windows\system32\msfeedsbs.dll - 2010-10-13 10:32 . 2010-09-08 05:36 95232 c:\windows\system32\migration\WininetPlugin.dll + 2010-12-16 08:18 . 2010-11-04 06:35 95232 c:\windows\system32\migration\WininetPlugin.dll + 2010-12-16 08:18 . 2010-11-04 06:31 57856 c:\windows\system32\licmgr10.dll - 2010-10-13 10:32 . 2010-09-08 05:34 57856 c:\windows\system32\licmgr10.dll + 2010-12-16 08:18 . 2010-11-04 06:31 64512 c:\windows\system32\jsproxy.dll - 2010-10-13 10:32 . 2010-09-08 05:34 64512 c:\windows\system32\jsproxy.dll - 2010-09-21 11:39 . 2010-12-13 14:34 49152 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2010-09-21 11:39 . 2010-12-21 19:30 49152 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2010-09-21 11:39 . 2010-12-21 19:30 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2010-09-21 11:39 . 2010-12-13 14:34 32768 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2009-07-14 04:54 . 2010-12-21 19:30 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2009-07-14 04:54 . 2010-12-13 14:34 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2010-12-16 08:19 . 2010-10-20 05:20 46080 c:\windows\system32\atmlib.dll - 2010-09-16 17:36 . 2010-09-16 17:36 46080 c:\windows\system32\atmlib.dll + 2010-09-21 15:36 . 2010-12-21 19:31 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2010-09-21 15:36 . 2010-12-13 14:35 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2009-07-14 04:46 . 2010-12-20 20:00 78720 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat - 2009-07-14 04:46 . 2010-12-13 09:10 78720 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat - 2010-09-21 15:36 . 2010-12-13 14:35 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2010-09-21 15:36 . 2010-12-21 19:31 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2010-09-21 15:36 . 2010-12-21 19:31 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2010-09-21 15:36 . 2010-12-13 14:35 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2010-09-21 15:35 . 2010-12-13 14:34 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2010-09-21 15:35 . 2010-12-21 19:30 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat - 2010-09-21 15:35 . 2010-12-13 14:34 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2010-09-21 15:35 . 2010-12-21 19:30 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2010-11-14 18:58 . 2010-12-16 23:26 35088 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\oisicon.exe - 2010-11-14 18:58 . 2010-11-17 02:04 35088 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\oisicon.exe - 2010-11-14 18:58 . 2010-11-17 02:04 18704 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\mspicons.exe + 2010-11-14 18:58 . 2010-12-16 23:26 18704 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\mspicons.exe + 2010-11-14 18:58 . 2010-12-16 23:26 20240 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\cagicon.exe - 2010-11-14 18:58 . 2010-11-17 02:04 20240 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\cagicon.exe + 2010-12-16 08:19 . 2010-10-27 04:32 2048 c:\windows\SysWOW64\tzres.dll - 2010-09-29 13:24 . 2010-06-19 06:15 2048 c:\windows\SysWOW64\tzres.dll + 2010-12-17 20:36 . 2010-12-17 20:36 3584 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{5A12355E-0A1D-11E0-8D89-5C260A008B29}.dat + 2010-12-17 20:36 . 2010-12-17 20:36 4096 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{5A12355F-0A1D-11E0-8D89-5C260A008B29}.dat - 2010-09-29 13:24 . 2010-06-19 06:48 2048 c:\windows\system32\tzres.dll + 2010-12-16 08:19 . 2010-10-27 05:06 2048 c:\windows\system32\tzres.dll - 2010-12-13 09:01 . 2010-12-13 14:34 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2010-12-20 19:53 . 2010-12-21 19:30 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat + 2010-12-20 19:53 . 2010-12-21 19:30 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat - 2010-12-13 09:01 . 2010-12-13 14:34 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat + 2010-12-16 08:19 . 2010-11-04 05:52 978944 c:\windows\SysWOW64\wininet.dll + 2010-12-16 08:19 . 2010-10-16 04:36 314368 c:\windows\SysWOW64\webio.dll + 2010-12-16 08:19 . 2010-11-02 04:40 496128 c:\windows\SysWOW64\taskschd.dll - 2009-07-13 23:30 . 2009-07-14 01:16 496128 c:\windows\SysWOW64\taskschd.dll + 2010-12-16 08:19 . 2010-11-02 04:34 192000 c:\windows\SysWOW64\taskeng.exe + 2010-12-16 08:19 . 2010-11-02 04:40 305152 c:\windows\SysWOW64\taskcomp.dll + 2010-12-16 08:19 . 2010-11-02 04:34 179712 c:\windows\SysWOW64\schtasks.exe + 2010-12-16 08:19 . 2010-11-04 05:49 606208 c:\windows\SysWOW64\mstime.dll - 2010-10-13 10:32 . 2010-09-08 04:28 606208 c:\windows\SysWOW64\mstime.dll - 2010-10-13 10:32 . 2010-09-08 04:28 599040 c:\windows\SysWOW64\msfeeds.dll + 2010-12-16 08:18 . 2010-11-04 05:49 599040 c:\windows\SysWOW64\msfeeds.dll - 2010-10-13 10:32 . 2010-09-08 04:28 176640 c:\windows\SysWOW64\ieui.dll + 2010-12-16 08:18 . 2010-11-04 05:48 176640 c:\windows\SysWOW64\ieui.dll - 2010-10-13 10:32 . 2010-09-08 04:28 185856 c:\windows\SysWOW64\iepeers.dll + 2010-12-16 08:18 . 2010-11-04 05:48 185856 c:\windows\SysWOW64\iepeers.dll + 2010-12-16 08:18 . 2010-11-04 05:48 381440 c:\windows\SysWOW64\iedkcs32.dll - 2010-10-13 10:32 . 2010-09-08 04:27 381440 c:\windows\SysWOW64\iedkcs32.dll + 2010-09-23 11:37 . 2010-12-17 20:35 262144 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat - 2010-09-23 11:37 . 2010-11-22 16:37 262144 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat + 2009-07-14 04:54 . 2010-12-21 19:32 311296 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2009-07-14 04:54 . 2010-12-13 14:35 311296 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2010-12-16 08:19 . 2010-10-20 02:58 294400 c:\windows\SysWOW64\atmfd.dll + 2010-12-16 08:19 . 2010-11-02 05:18 524288 c:\windows\system32\wmicmiplugin.dll + 2010-12-16 08:19 . 2010-10-16 05:19 395776 c:\windows\system32\webio.dll + 2010-09-23 15:56 . 2010-12-21 16:40 260142 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S4.bin + 2010-09-21 16:03 . 2010-12-21 16:33 239732 c:\windows\system32\wdi\SuspendPerformanceDiagnostics_SystemData_S3.bin + 2010-12-16 08:19 . 2010-11-02 05:10 464384 c:\windows\system32\taskeng.exe - 2009-07-13 23:47 . 2009-07-14 01:41 473600 c:\windows\system32\taskcomp.dll + 2010-12-16 08:19 . 2010-11-02 05:17 473600 c:\windows\system32\taskcomp.dll + 2010-12-16 08:19 . 2010-11-02 05:10 285696 c:\windows\system32\schtasks.exe - 2009-07-14 09:16 . 2010-12-13 14:40 758778 c:\windows\system32\perfh013.dat + 2009-07-14 09:16 . 2010-12-21 19:37 758778 c:\windows\system32\perfh013.dat + 2009-07-14 02:36 . 2010-12-21 19:37 657212 c:\windows\system32\perfh009.dat - 2009-07-14 02:36 . 2010-12-13 14:40 657212 c:\windows\system32\perfh009.dat + 2009-07-14 09:16 . 2010-12-21 19:37 157664 c:\windows\system32\perfc013.dat - 2009-07-14 09:16 . 2010-12-13 14:40 157664 c:\windows\system32\perfc013.dat - 2009-07-14 02:36 . 2010-12-13 14:40 125694 c:\windows\system32\perfc009.dat + 2009-07-14 02:36 . 2010-12-21 19:37 125694 c:\windows\system32\perfc009.dat + 2010-12-16 08:19 . 2010-11-04 06:32 703488 c:\windows\system32\msfeeds.dll + 2010-12-16 08:18 . 2010-11-04 06:31 247808 c:\windows\system32\ieui.dll - 2010-10-13 10:32 . 2010-09-08 05:34 247808 c:\windows\system32\ieui.dll + 2010-12-16 08:18 . 2010-11-04 06:31 256000 c:\windows\system32\iepeers.dll - 2010-10-13 10:32 . 2010-09-08 05:34 256000 c:\windows\system32\iepeers.dll + 2010-12-16 08:18 . 2010-11-04 06:31 445952 c:\windows\system32\iedkcs32.dll - 2010-10-13 10:32 . 2010-09-08 05:34 445952 c:\windows\system32\iedkcs32.dll + 2010-12-16 08:19 . 2010-10-16 05:23 112000 c:\windows\system32\consent.exe + 2010-12-16 08:19 . 2010-10-20 03:05 367104 c:\windows\system32\atmfd.dll - 2009-07-14 05:01 . 2010-12-13 00:10 369256 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat + 2009-07-14 05:01 . 2010-12-20 19:36 369256 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat + 2010-07-23 00:03 . 2010-07-23 00:03 338432 c:\windows\Installer\2bd0f07.msp - 2010-11-14 18:58 . 2010-11-17 02:04 888080 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe + 2010-11-14 18:58 . 2010-12-16 23:26 888080 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe + 2010-11-14 18:58 . 2010-12-16 23:26 922384 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\pptico.exe - 2010-11-14 18:58 . 2010-11-17 02:04 922384 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\pptico.exe + 2010-11-14 18:58 . 2010-12-16 23:26 217864 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\misc.exe - 2010-11-14 18:58 . 2010-11-17 02:04 217864 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\misc.exe + 2010-11-14 18:58 . 2010-12-16 23:26 184080 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\joticon.exe - 2010-11-14 18:58 . 2010-11-17 02:04 184080 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\joticon.exe + 2008-11-04 03:13 . 2008-11-04 03:13 118128 c:\windows\Installer\$PatchCache$\Managed\00002119F20000000000000000F01FEC\12.0.6425\MSCONV97.DLL + 2010-12-16 08:19 . 2010-11-04 05:52 1226752 c:\windows\SysWOW64\urlmon.dll - 2010-10-13 10:32 . 2010-09-08 04:30 1226752 c:\windows\SysWOW64\urlmon.dll + 2010-12-16 08:19 . 2010-11-04 05:49 5978112 c:\windows\SysWOW64\mshtml.dll + 2010-12-16 08:19 . 2010-11-04 05:48 2063360 c:\windows\SysWOW64\iertutil.dll + 2010-12-16 08:19 . 2010-11-04 06:35 1194496 c:\windows\system32\wininet.dll + 2010-12-16 08:19 . 2010-10-20 03:09 3124224 c:\windows\system32\win32k.sys + 2010-12-16 08:19 . 2010-11-04 06:35 1495040 c:\windows\system32\urlmon.dll - 2010-10-13 10:32 . 2010-09-08 05:36 1495040 c:\windows\system32\urlmon.dll + 2010-12-16 08:19 . 2010-11-02 05:17 1169408 c:\windows\system32\taskschd.dll + 2010-12-16 08:19 . 2010-11-02 05:16 1114624 c:\windows\system32\schedsvc.dll + 2010-12-16 08:19 . 2010-11-04 06:32 1026560 c:\windows\system32\mstime.dll + 2010-12-16 08:19 . 2010-11-04 06:32 9306624 c:\windows\system32\mshtml.dll + 2010-12-16 08:19 . 2010-11-04 06:31 2447872 c:\windows\system32\iertutil.dll + 2009-07-14 04:45 . 2010-12-17 20:31 4867992 c:\windows\system32\FNTCACHE.DAT - 2009-07-14 04:45 . 2010-11-15 07:35 4867992 c:\windows\system32\FNTCACHE.DAT + 2009-07-14 04:45 . 2010-12-19 10:10 3802522 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat - 2009-07-14 04:45 . 2010-12-12 15:18 3802522 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat + 2010-10-11 19:28 . 2010-12-20 19:37 6602216 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3246235719-1228998758-3747656504-1001-8192.dat - 2010-11-14 18:58 . 2010-11-17 02:04 1172240 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe + 2010-11-14 18:58 . 2010-12-16 23:26 1172240 c:\windows\Installer\{91120000-002F-0000-0000-0000000FF1CE}\xlicons.exe + 2010-12-16 08:19 . 2010-11-04 05:48 10989056 c:\windows\SysWOW64\ieframe.dll - 2009-07-14 02:34 . 2010-12-13 15:41 10485760 c:\windows\system32\SMI\Store\Machine\SCHEMA.DAT + 2009-07-14 02:34 . 2010-12-20 20:07 10485760 c:\windows\system32\SMI\Store\Machine\SCHEMA.DAT + 2010-10-05 22:45 . 2010-12-16 23:27 39298504 c:\windows\system32\MRT.exe + 2010-12-16 08:19 . 2010-11-04 06:31 12369408 c:\windows\system32\ieframe.dll - 2010-10-13 10:32 . 2010-09-08 05:34 12369408 c:\windows\system32\ieframe.dll . -- Snapshot teruggezet naar huidige datum -- . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072] "msnmsgr"="c:\program files (x86)\Windows Live\Messenger\msnmsgr.exe" [2010-09-22 4240760] "Steam"="c:\program files (x86)\Steam\Steam.exe" [2010-11-27 1242448] "uPc+kt0NoeaXms"="c:\windows\system32\mredzo.dll" [N/A] "Mqrtc"="c:\windows\hexdump.exe" [N/A] "Mqruqc"="c:\windows\iexplarer.exe" [N/A] "Mqvre"="c:\windows\wininst.exe" [N/A] "MqsZ"="c:\windows\mdm.exe" [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2010-09-30 1484856] "dellsupportcenter"="c:\program files (x86)\Dell Support Center\bin\sprtcmd.exe" [N/A] "DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2010-09-01 1164584] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288] "uPc+kt0NoeaXms"="c:\windows\system32\mredzo.dll" [N/A] "Mqvre"="c:\windows\wininst.exe" [N/A] "MqsZ"="c:\windows\mdm.exe" [N/A] "Mqruqc"="c:\windows\iexplarer.exe" [N/A] "Mqrtc"="c:\windows\hexdump.exe" [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce] "Launcher"="c:\program files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe" [2010-07-21 165184] "DSUpdateLauncher"="c:\program files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\hstart.exe" [2010-07-21 18240] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "uPc+kt0NoeaXms"="c:\windows\system32\mredzo.dll" [N/A] "MqsZ"="c:\windows\mdm.exe" [N/A] "Mqruqc"="c:\windows\iexplarer.exe" [N/A] "Mqrtc"="c:\windows\hexdump.exe" [N/A] "Mqvre"="c:\windows\wininst.exe" [N/A] c:\users\henk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OneNote 2007 Schermopname en Snel starten.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc] @="" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] @="" R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [2010-10-13 94864] R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184] R3 TurboBoost;TurboBoost;c:\program files\Intel\TurboBoost\TurboBoost.exe [2009-11-02 126352] R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-09-23 1255736] R4 McOobeSv;McAfee OOBE Service;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe [2010-03-10 355440] S0 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys [2010-10-13 283360] S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2010-08-12 55856] S1 mfenlfk;McAfee NDIS Light Filter;c:\windows\system32\DRIVERS\mfenlfk.sys [2010-10-13 75032] S1 SBRE;SBRE;c:\windows\system32\drivers\SBREdrv.sys [2010-03-22 49752] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904] S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_0057cbec48a2d7cf\AESTSr64.exe [2009-03-02 89600] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-04-12 202752] S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-02-28 821664] S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2010-03-10 355440] S2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2010-03-10 355440] S2 McNaiAnn;McAfee VirusScan Announcer;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe [2010-03-10 355440] S2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe [2010-10-13 245352] S2 mfevtp;McAfee Validation Trust Protection Service;c:\program files\Common Files\McAfee\SystemCore\mfevtps.exe [2010-10-13 149032] S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2010-04-23 483688] S2 SftService;SoftThinks Agent Service;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE [2010-08-20 689472] S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [2009-11-02 13784] S3 Acceler;Accelerometer Service;c:\windows\system32\DRIVERS\Acceler.sys [2009-09-17 23912] S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atipmdag.sys [2010-04-12 6405120] S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2010-04-12 188928] S3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [2010-10-13 62800] S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys [2009-06-15 172704] S3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [2010-10-13 441328] S3 O2MDGRDR;O2MDGRDR;c:\windows\system32\DRIVERS\o2mdgx64.sys [2009-11-13 74272] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2009-05-22 215040] S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2010-04-23 721768] S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2010-04-23 269672] S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2010-04-23 25960] S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2010-04-23 22376] S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2010-04-23 209768] --- Andere Services/Drivers In Geheugen --- *Deregistered* - mfeavfk01 . --------- x86-64 ----------- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe" [N/A] "SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2010-01-20 487424] "Broadcom Wireless Manager UI"="c:\program files\Dell\Dell Wireless WLAN Card\WLTRAY.exe" [2009-07-17 4968960] "AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208] "SBRegRebootCleaner"="c:\program files (x86)\Sunbelt Software\VIPRE\SBRC.exe" [N/A] . ------- Bijkomende Scan ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://hyves.nl/ mStart Page = hxxp://home.sweetim.com mLocal Page = c:\windows\SysWOW64\blank.htm IE: E&xporteren naar Microsoft Excel - c:\progra~2\MIF5BA~1\Office12\EXCEL.EXE/3000 . - - - - ORPHANS VERWIJDERD - - - - Toolbar-Locked - (no file) WebBrowser-{BA14329E-9550-4989-B3F2-9732E92D17CC} - (no file) WebBrowser-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file) WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file) . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences] @Denied: (2) (LocalSystem) "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,57,91,02,75,a6,18,50,49,b0,09,db,\ "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,57,91,02,75,a6,18,50,49,b0,09,db,\ [HKEY_USERS\S-1-5-21-3246235719-1228998758-3747656504-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLiveMail.Email.1" [HKEY_USERS\S-1-5-21-3246235719-1228998758-3747656504-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLiveMail.VCard.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe,-101" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx" "ThreadingModel"="Apartment" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx, 1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx" "ThreadingModel"="Apartment" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx, 1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee] "SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\ [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Voltooingstijd: 2010-12-21 20:53:06 ComboFix-quarantined-files.txt 2010-12-21 19:53 ComboFix2.txt 2010-12-13 23:18 Pre-Run: 449.993.469.952 bytes beschikbaar Post-Run: 450.025.021.440 bytes beschikbaar - - End Of File - - F64B6BE8CA0F216E71D0A1E80EE2F13B Logfile of Trend Micro HijackThis v2.0.3 (BETA) Scan saved at 20:54:31, on 21-12-2010 Platform: Unknown Windows (WinNT 6.01.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16700) Boot mode: Normal Running processes: C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe C:\Program Files (x86)\Steam\Steam.exe C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE C:\Program Files (x86)\TrendMicro\HiJackThis\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Hyves.nl: always in touch with your friends R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\progra~2\mcafee\sitead~1\mcieplg.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\progra~1\mcafee\msk\mskapbho.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20101107160942.dll O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\progra~2\mcafee\sitead~1\mcieplg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\progra~2\mcafee\sitead~1\mcieplg.dll O4 - HKLM\..\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey O4 - HKLM\..\Run: [dellsupportcenter] "C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe" /P dellsupportcenter O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [uPc+kt0NoeaXms] rundll32.exe C:\Windows\system32\mredzo.dll, SystemServer O4 - HKLM\..\Run: [Mqvre] C:\Windows\wininst.exe O4 - HKLM\..\Run: [MqsZ] C:\Windows\mdm.exe O4 - HKLM\..\Run: [Mqruqc] C:\Windows\iexplarer.exe O4 - HKLM\..\Run: [Mqrtc] C:\Windows\hexdump.exe O4 - HKLM\..\RunOnce: [Launcher] C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe O4 - HKLM\..\RunOnce: [DSUpdateLauncher] "C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\hstart.exe" /NOCONSOLE /D="C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate" /RUNAS "C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe" O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent O4 - HKCU\..\Run: [uPc+kt0NoeaXms] rundll32.exe C:\Windows\system32\mredzo.dll, SystemServer O4 - HKCU\..\Run: [Mqrtc] C:\Windows\hexdump.exe O4 - HKCU\..\Run: [Mqruqc] C:\Windows\iexplarer.exe O4 - HKCU\..\Run: [Mqvre] C:\Windows\wininst.exe O4 - HKCU\..\Run: [MqsZ] C:\Windows\mdm.exe O4 - HKUS\S-1-5-18\..\Run: [uPc+kt0NoeaXms] rundll32.exe C:\Windows\system32\mredzo.dll, SystemServer (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\Run: [MqsZ] C:\Windows\mdm.exe (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\Run: [Mqruqc] C:\Windows\iexplarer.exe (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\Run: [Mqrtc] C:\Windows\hexdump.exe (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\Run: [Mqvre] C:\Windows\wininst.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [uPc+kt0NoeaXms] rundll32.exe C:\Windows\system32\mredzo.dll, SystemServer (User 'Default user') O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MIF5BA~1\Office12\EXCEL.EXE/3000 O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MIF5BA~1\Office12\REFIEBAR.DLL O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~2\mcafee\sitead~1\mcieplg.dll O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~2\mcafee\sitead~1\mcieplg.dll O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_0057cbec48a2d7cf\AESTSr64.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe O23 - Service: McAfee Personal Firewall Service (McMPFSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\Program Files\mcafee\VirusScan\mcods.exe O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe O23 - Service: McShield - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: O2FLASH - Unknown owner - C:\Windows\system32\DRIVERS\o2flash.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks SAS - C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: SupportSoft Sprocket Service (DellSupportCenter) (sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_0057cbec48a2d7cf\STacSV64.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe O23 - Service: TurboBoost - Intel® Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 12726 bytes

ComboFix 10-12-13.02 - henk 14-12-2010 0:07.1.8 - x64 Microsoft Windows 7 Home Premium 6.1.7600.0.1252.31.1043.18.4084.2850 [GMT 1:00] Gestart vanuit: c:\users\henk\Desktop\ComboFix.exe AV: McAfee Antivirus en antispyware *Disabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637} FW: McAfee Firewall *Disabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C} SP: McAfee Antivirus en antispyware *Disabled/Updated* {3D54B793-665E-3129-9103-206115370C8A} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Nieuw herstelpunt werd aangemaakt . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\users\henk\Desktop\Internet Explorer.lnk . (((((((((((((((((((( Bestanden Gemaakt van 2010-11-13 to 2010-12-13 )))))))))))))))))))))))))))))) . 2010-12-13 23:13 . 2010-12-13 23:13 -------- d-----w- c:\users\Default\AppData\Local\temp 2010-12-13 14:39 . 2010-11-16 11:01 8199504 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{916E6147-FB0D-45E4-B2B4-EC1AF053CF4B}\mpengine.dll 2010-12-08 18:48 . 2010-12-08 18:48 -------- d-----w- c:\programdata\Sunbelt 2010-12-08 18:46 . 2010-08-20 08:18 27472 ----a-w- c:\windows\system32\sbbd.exe 2010-12-08 18:46 . 2010-03-22 11:11 49752 ----a-w- c:\windows\system32\drivers\sbredrv.sys 2010-12-04 17:17 . 2010-12-04 17:17 -------- d-----w- c:\program files (x86)\ESET 2010-11-29 23:06 . 2010-11-29 23:06 -------- d-----w- c:\program files (x86)\Common Files\DivX Shared 2010-11-28 12:20 . 2010-11-28 13:02 -------- d-----w- c:\programdata\WinZip 2010-11-27 18:08 . 2010-11-28 12:59 -------- d-----w- c:\users\henk\DoctorWeb 2010-11-27 14:17 . 2010-12-13 17:29 -------- d-----w- c:\program files (x86)\Steam 2010-11-24 22:07 . 2010-11-24 22:19 -------- d-----w- c:\users\henk\AppData\Local\Deployment 2010-11-24 22:07 . 2010-11-24 22:07 -------- d-----w- c:\users\henk\AppData\Local\Apps 2010-11-24 13:14 . 2010-11-24 22:29 -------- d-----w- c:\users\henk\AppData\Local\ElevatedDiagnostics 2010-11-24 09:06 . 2010-10-19 08:47 7680 ----a-w- c:\program files\Internet Explorer\iecompat.dll 2010-11-24 09:06 . 2010-10-19 08:10 7680 ----a-w- c:\program files (x86)\Internet Explorer\iecompat.dll 2010-11-23 08:23 . 2010-11-23 08:23 -------- d-----w- c:\users\henk\AppData\Roaming\Malwarebytes 2010-11-23 08:23 . 2010-11-23 08:23 -------- d-----w- c:\programdata\Malwarebytes 2010-11-23 08:23 . 2010-04-29 14:39 24664 ----a-w- c:\windows\system32\drivers\mbam.sys 2010-11-22 17:16 . 2010-11-22 17:16 388096 ----a-r- c:\users\henk\AppData\Roaming\Microsoft\Installer\{0761C9A8-8F3A-4216-B4A7-B7AFBF24A24A}\HiJackThis.exe 2010-11-22 17:16 . 2010-11-22 17:16 -------- d-----w- c:\program files (x86)\TrendMicro 2010-11-21 01:21 . 2010-11-21 01:21 -------- d-----w- c:\windows\nl 2010-11-21 01:16 . 2010-11-21 01:16 -------- d-----w- c:\program files\Windows Live 2010-11-21 01:12 . 2009-09-04 16:44 69464 ----a-w- c:\windows\SysWow64\XAPOFX1_3.dll 2010-11-21 01:12 . 2009-09-04 16:44 515416 ----a-w- c:\windows\SysWow64\XAudio2_5.dll 2010-11-21 01:12 . 2009-09-04 16:29 453456 ----a-w- c:\windows\SysWow64\d3dx10_42.dll 2010-11-21 01:12 . 2009-09-04 16:29 523088 ----a-w- c:\windows\system32\d3dx10_42.dll 2010-11-21 01:12 . 2010-11-21 01:12 469256 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\2a2a57521cb891907\InstallManager_WLE_WLE.exe 2010-11-21 01:12 . 2010-11-21 01:12 525656 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\25879c6e1cb891906\DXSETUP.exe 2010-11-21 01:12 . 2010-11-21 01:12 1691480 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\25879c6e1cb891906\dsetup32.dll 2010-11-21 01:12 . 2010-11-21 01:12 94040 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\25879c6e1cb891906\DSETUP.dll 2010-11-21 01:12 . 2010-11-21 01:12 94040 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\1f5f02541cb891905\DSETUP.dll 2010-11-21 01:12 . 2010-11-21 01:12 525656 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\1f5f02541cb891905\DXSETUP.exe 2010-11-21 01:12 . 2010-11-21 01:12 1691480 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\1f5f02541cb891905\dsetup32.dll 2010-11-19 23:01 . 2010-10-19 09:41 270720 ------w- c:\windows\system32\MpSigStub.exe 2010-11-19 22:48 . 2010-12-13 21:13 -------- d-----w- c:\users\henk\AppData\Local\Windows Live 2010-11-19 22:47 . 2010-05-23 08:35 206848 ----a-w- c:\windows\system32\mfps.dll 2010-11-19 22:47 . 2010-05-23 10:15 1619456 ----a-w- c:\windows\SysWow64\WMVDECOD.DLL 2010-11-19 22:47 . 2010-05-23 10:11 196608 ----a-w- c:\windows\SysWow64\mfreadwrite.dll 2010-11-19 22:47 . 2010-05-23 08:37 1888256 ----a-w- c:\windows\system32\WMVDECOD.DLL 2010-11-19 22:47 . 2010-05-23 08:35 257024 ----a-w- c:\windows\system32\mfreadwrite.dll 2010-11-19 22:47 . 2010-05-23 10:11 3181568 ----a-w- c:\windows\SysWow64\mf.dll 2010-11-19 22:47 . 2010-05-23 08:35 4068864 ----a-w- c:\windows\system32\mf.dll 2010-11-19 17:14 . 2010-11-26 17:19 -------- d-----w- c:\users\henk\AppData\Roaming\Azureus 2010-11-15 02:02 . 2010-11-15 02:02 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help 2010-11-14 18:58 . 2010-11-15 02:02 -------- d-----w- c:\program files (x86)\Microsoft Works 2010-11-14 18:54 . 2010-11-14 18:54 -------- d-----w- c:\users\henk\AppData\Local\Microsoft Help 2010-11-14 18:54 . 2010-11-17 02:04 -------- d-----w- c:\programdata\Microsoft Help . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-10-13 21:28 . 2010-09-16 15:16 9984 ----a-w- c:\windows\system32\drivers\mfeclnk.sys 2010-10-13 21:28 . 2010-01-05 23:04 94864 ----a-w- c:\windows\system32\drivers\mferkdet.sys 2010-10-13 21:28 . 2010-01-05 23:04 75032 ----a-w- c:\windows\system32\drivers\mfenlfk.sys 2010-10-13 21:28 . 2010-01-05 23:04 62800 ----a-w- c:\windows\system32\drivers\cfwids.sys 2010-10-13 21:28 . 2010-01-05 23:04 529128 ----a-w- c:\windows\system32\drivers\mfehidk.sys 2010-10-13 21:28 . 2010-01-05 23:04 441328 ----a-w- c:\windows\system32\drivers\mfefirek.sys 2010-10-13 21:28 . 2010-01-05 23:04 283360 ----a-w- c:\windows\system32\drivers\mfewfpk.sys 2010-10-13 21:28 . 2010-01-05 23:04 190136 ----a-w- c:\windows\system32\drivers\mfeavfk.sys 2010-10-13 21:28 . 2010-01-05 23:04 121248 ----a-w- c:\windows\system32\drivers\mfeapfk.sys 2010-09-22 23:47 . 2010-09-22 23:47 49016 ----a-w- c:\windows\SysWow64\sirenacm.dll 2010-09-21 13:49 . 2010-09-21 13:49 252800 ----a-w- c:\windows\system32\LIVESSP.DLL 2010-09-21 13:03 . 2010-09-21 13:03 208768 ----a-w- c:\windows\SysWow64\LIVESSP.DLL 2010-09-16 17:36 . 2010-09-16 17:36 51712 ----a-w- c:\windows\system32\drivers\usbehci.sys 2010-09-16 17:36 . 2010-09-16 17:36 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys 2010-09-16 17:36 . 2010-09-16 17:36 243712 ----a-w- c:\windows\system32\drivers\ks.sys 2010-09-16 17:36 . 2010-09-16 17:36 184832 ----a-w- c:\windows\system32\drivers\usbvideo.sys 2010-09-16 17:36 . 2010-09-16 17:36 286720 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys 2010-09-16 17:36 . 2010-09-16 17:36 157696 ----a-w- c:\windows\system32\drivers\mrxsmb.sys 2010-09-16 17:36 . 2010-09-16 17:36 125952 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys 2010-09-16 17:36 . 2010-09-16 17:36 70656 ----a-w- c:\windows\SysWow64\fontsub.dll 2010-09-16 17:36 . 2010-09-16 17:36 46592 ----a-w- c:\windows\system32\msasn1.dll 2010-09-16 17:36 . 2010-09-16 17:36 46080 ----a-w- c:\windows\system32\atmlib.dll 2010-09-16 17:36 . 2010-09-16 17:36 366080 ----a-w- c:\windows\system32\atmfd.dll 2010-09-16 17:36 . 2010-09-16 17:36 34816 ----a-w- c:\windows\SysWow64\msasn1.dll 2010-09-16 17:36 . 2010-09-16 17:36 34304 ----a-w- c:\windows\SysWow64\atmlib.dll 2010-09-16 17:36 . 2010-09-16 17:36 293888 ----a-w- c:\windows\SysWow64\atmfd.dll 2010-09-16 17:36 . 2010-09-16 17:36 100864 ----a-w- c:\windows\system32\fontsub.dll 2010-09-16 17:36 . 2010-09-16 17:36 91648 ----a-w- c:\windows\SysWow64\avifil32.dll 2010-09-16 17:36 . 2010-09-16 17:36 84480 ----a-w- c:\windows\SysWow64\mciavi32.dll 2010-09-16 17:36 . 2010-09-16 17:36 7680 ----a-w- c:\windows\SysWow64\instnm.exe 2010-09-16 17:36 . 2010-09-16 17:36 54272 ----a-w- c:\windows\system32\iyuv_32.dll 2010-09-16 17:36 . 2010-09-16 17:36 5120 ----a-w- c:\windows\SysWow64\wow32.dll 2010-09-16 17:36 . 2010-09-16 17:36 50176 ----a-w- c:\windows\SysWow64\iyuv_32.dll 2010-09-16 17:36 . 2010-09-16 17:36 44032 ----a-w- c:\windows\apppatch\acwow64.dll 2010-09-16 17:36 . 2010-09-16 17:36 38912 ----a-w- c:\windows\system32\msvidc32.dll 2010-09-16 17:36 . 2010-09-16 17:36 31744 ----a-w- c:\windows\SysWow64\msvidc32.dll 2010-09-16 17:36 . 2010-09-16 17:36 311808 ----a-w- c:\windows\system32\msv1_0.dll 2010-09-16 17:36 . 2010-09-16 17:36 257024 ----a-w- c:\windows\SysWow64\msv1_0.dll 2010-09-16 17:36 . 2010-09-16 17:36 25600 ----a-w- c:\windows\SysWow64\setup16.exe 2010-09-16 17:36 . 2010-09-16 17:36 25088 ----a-w- c:\windows\system32\msyuv.dll 2010-09-16 17:36 . 2010-09-16 17:36 243200 ----a-w- c:\windows\system32\wow64.dll 2010-09-16 17:36 . 2010-09-16 17:36 22016 ----a-w- c:\windows\SysWow64\msyuv.dll 2010-09-16 17:36 . 2010-09-16 17:36 2048 ----a-w- c:\windows\SysWow64\user.exe 2010-09-16 17:36 . 2010-09-16 17:36 16384 ----a-w- c:\windows\system32\msrle32.dll 2010-09-16 17:36 . 2010-09-16 17:36 1572352 ----a-w- c:\windows\system32\quartz.dll 2010-09-16 17:36 . 2010-09-16 17:36 14848 ----a-w- c:\windows\system32\tsbyuv.dll 2010-09-16 17:36 . 2010-09-16 17:36 14336 ----a-w- c:\windows\SysWow64\ntvdm64.dll 2010-09-16 17:36 . 2010-09-16 17:36 13312 ----a-w- c:\windows\SysWow64\msrle32.dll 2010-09-16 17:36 . 2010-09-16 17:36 1328640 ----a-w- c:\windows\SysWow64\quartz.dll 2010-09-16 17:36 . 2010-09-16 17:36 12288 ----a-w- c:\windows\SysWow64\tsbyuv.dll 2010-09-16 17:36 . 2010-09-16 17:36 389632 ----a-w- c:\windows\system32\winlogon.exe 2010-09-16 17:36 . 2010-09-16 17:36 2870272 ----a-w- c:\windows\explorer.exe 2010-09-16 17:36 . 2010-09-16 17:36 2614272 ----a-w- c:\windows\SysWow64\explorer.exe 2010-09-16 17:35 . 2010-09-16 17:35 96768 ----a-w- c:\windows\SysWow64\sspicli.dll 2010-09-16 17:35 . 2010-09-16 17:35 22016 ----a-w- c:\windows\SysWow64\secur32.dll 2010-09-16 17:35 . 2010-09-16 17:35 153160 ----a-w- c:\windows\system32\drivers\ksecpkg.sys 2010-09-16 17:35 . 2010-09-16 17:35 1446912 ----a-w- c:\windows\system32\lsasrv.dll 2010-09-16 17:35 . 2010-09-16 17:35 613888 ----a-w- c:\windows\system32\psisdecd.dll 2010-09-16 17:35 . 2010-09-16 17:35 612352 ----a-w- c:\windows\system32\vbscript.dll 2010-09-16 17:35 . 2010-09-16 17:35 465408 ----a-w- c:\windows\SysWow64\psisdecd.dll 2010-09-16 17:35 . 2010-09-16 17:35 427520 ----a-w- c:\windows\SysWow64\vbscript.dll 2010-09-16 17:35 . 2010-09-16 17:35 976896 ----a-w- c:\windows\system32\inetcomm.dll 2010-09-16 17:35 . 2010-09-16 17:35 85504 ----a-w- c:\windows\SysWow64\secproc_ssp_isv.dll 2010-09-16 17:35 . 2010-09-16 17:35 85504 ----a-w- c:\windows\SysWow64\secproc_ssp.dll 2010-09-16 17:35 . 2010-09-16 17:35 740864 ----a-w- c:\windows\SysWow64\inetcomm.dll 2010-09-16 17:35 . 2010-09-16 17:35 424960 ----a-w- c:\windows\system32\secproc.dll 2010-09-16 17:35 . 2010-09-16 17:35 422912 ----a-w- c:\windows\system32\secproc_isv.dll 2010-09-16 17:35 . 2010-09-16 17:35 369152 ----a-w- c:\windows\SysWow64\secproc.dll 2010-09-16 17:35 . 2010-09-16 17:35 365568 ----a-w- c:\windows\SysWow64\secproc_isv.dll 2010-09-16 17:35 . 2010-09-16 17:35 357888 ----a-w- c:\windows\system32\RMActivate_isv.exe 2010-09-16 17:35 . 2010-09-16 17:35 356352 ----a-w- c:\windows\system32\RMActivate.exe 2010-09-16 17:35 . 2010-09-16 17:35 324608 ----a-w- c:\windows\SysWow64\RMActivate_isv.exe 2010-09-16 17:35 . 2010-09-16 17:35 320512 ----a-w- c:\windows\SysWow64\RMActivate.exe 2010-09-16 17:35 . 2010-09-16 17:35 306688 ----a-w- c:\windows\system32\RMActivate_ssp.exe 2010-09-16 17:35 . 2010-09-16 17:35 305152 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe 2010-09-16 17:35 . 2010-09-16 17:35 280064 ----a-w- c:\windows\SysWow64\RMActivate_ssp.exe 2010-09-16 17:35 . 2010-09-16 17:35 277504 ----a-w- c:\windows\SysWow64\RMActivate_ssp_isv.exe 2010-09-16 17:35 . 2010-09-16 17:35 121856 ----a-w- c:\windows\system32\secproc_ssp_isv.dll 2010-09-16 17:35 . 2010-09-16 17:35 121856 ----a-w- c:\windows\system32\secproc_ssp.dll 2010-09-16 17:35 . 2010-09-16 17:35 982600 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys 2010-09-16 17:35 . 2010-09-16 17:35 84992 ----a-w- c:\windows\system32\asycfilt.dll 2010-09-16 17:35 . 2010-09-16 17:35 67584 ----a-w- c:\windows\SysWow64\asycfilt.dll 2010-09-16 17:35 . 2010-09-16 17:35 220672 ----a-w- c:\windows\system32\wintrust.dll 2010-09-16 17:35 . 2010-09-16 17:35 1975296 ----a-w- c:\windows\system32\CertEnroll.dll 2010-09-16 17:35 . 2010-09-16 17:35 172032 ----a-w- c:\windows\SysWow64\wintrust.dll 2010-09-16 17:35 . 2010-09-16 17:35 14336 ----a-w- c:\windows\system32\drivers\sffp_sd.sys 2010-09-16 17:35 . 2010-09-16 17:35 139264 ----a-w- c:\windows\system32\cabview.dll 2010-09-16 17:35 . 2010-09-16 17:35 132608 ----a-w- c:\windows\SysWow64\cabview.dll 2010-09-16 17:35 . 2010-09-16 17:35 1320960 ----a-w- c:\windows\SysWow64\CertEnroll.dll 2010-09-16 17:35 . 2010-09-16 17:35 91648 ----a-w- c:\windows\system32\isoburn.exe 2010-09-16 17:35 . 2010-09-16 17:35 86528 ----a-w- c:\windows\SysWow64\isoburn.exe 2010-09-16 17:35 . 2010-09-16 17:35 78848 ----a-w- c:\windows\system32\WUDFSvc.dll 2010-09-16 17:35 . 2010-09-16 17:35 687616 ----a-w- c:\windows\system32\WUDFx.dll 2010-09-16 17:35 . 2010-09-16 17:35 630272 ----a-w- c:\windows\system32\evr.dll 2010-09-16 17:35 . 2010-09-16 17:35 488448 ----a-w- c:\windows\SysWow64\evr.dll 2010-09-16 17:35 . 2010-09-16 17:35 44544 ----a-w- c:\windows\system32\WUDFCoinstaller.dll 2010-09-16 17:35 . 2010-09-16 17:35 228864 ----a-w- c:\windows\system32\WUDFHost.exe 2010-09-16 17:35 . 2010-09-16 17:35 228352 ----a-w- c:\windows\system32\drivers\1394ohci.sys 2010-09-16 17:35 . 2010-09-16 17:35 183808 ----a-w- c:\windows\system32\WUDFPlatform.dll 2010-09-16 17:35 . 2010-09-16 17:35 172544 ----a-w- c:\windows\system32\drivers\WUDFRd.sys . <pre> c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl .exe c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart .exe c:\program files (x86)\DivX\DivX Update\DivXUpdate .exe c:\program files (x86)\Windows Live\Messenger\msnmsgr .exe </pre> ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072] "msnmsgr"="c:\program files (x86)\Windows Live\Messenger\msnmsgr.exe" [2010-09-22 4240760] "Steam"="c:\program files (x86)\Steam\Steam.exe" [2010-11-27 1242448] [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2010-09-30 1484856] "dellsupportcenter"="c:\program files (x86)\Dell Support Center\bin\sprtcmd.exe" [N/A] "DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2010-09-16 1164584] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288] [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce] "Launcher"="c:\program files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe" [2010-07-21 165184] "DSUpdateLauncher"="c:\program files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\hstart.exe" [2010-07-21 18240] c:\users\henk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OneNote 2007 Schermopname en Snel starten.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc] @="" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] @="" R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [2010-10-13 94864] R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184] R3 TurboBoost;TurboBoost;c:\program files\Intel\TurboBoost\TurboBoost.exe [2009-11-02 126352] R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-09-23 1255736] R4 McOobeSv;McAfee OOBE Service;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe [2010-03-10 355440] S0 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys [2010-10-13 283360] S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2010-08-12 55856] S1 mfenlfk;McAfee NDIS Light Filter;c:\windows\system32\DRIVERS\mfenlfk.sys [2010-10-13 75032] S1 SBRE;SBRE;c:\windows\system32\drivers\SBREdrv.sys [2010-03-22 49752] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904] S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_0057cbec48a2d7cf\AESTSr64.exe [2009-03-02 89600] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-04-12 202752] S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-02-28 821664] S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2010-03-10 355440] S2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2010-03-10 355440] S2 McNaiAnn;McAfee VirusScan Announcer;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe [2010-03-10 355440] S2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe [2010-10-13 245352] S2 mfevtp;McAfee Validation Trust Protection Service;c:\program files\Common Files\McAfee\SystemCore\mfevtps.exe [2010-10-13 149032] S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2010-04-23 483688] S2 SftService;SoftThinks Agent Service;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE [2010-08-20 689472] S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [2009-11-02 13784] S3 Acceler;Accelerometer Service;c:\windows\system32\DRIVERS\Acceler.sys [2009-09-17 23912] S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atipmdag.sys [2010-04-12 6405120] S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2010-04-12 188928] S3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [2010-10-13 62800] S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys [2009-06-15 172704] S3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [2010-10-13 441328] S3 O2MDGRDR;O2MDGRDR;c:\windows\system32\DRIVERS\o2mdgx64.sys [2009-11-13 74272] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2009-05-22 215040] S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2010-04-23 721768] S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2010-04-23 269672] S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2010-04-23 25960] S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2010-04-23 22376] S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2010-04-23 209768] --- Andere Services/Drivers In Geheugen --- *NewlyCreated* - MFEAPFK01 *Deregistered* - mfeapfk01 *Deregistered* - mfeavfk01 . Inhoud van de 'Gedeelde Taken' map . --------- x86-64 ----------- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe" [N/A] "SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2010-01-20 487424] "Broadcom Wireless Manager UI"="c:\program files\Dell\Dell Wireless WLAN Card\WLTRAY.exe" [2009-07-17 4968960] "QuickSet"="c:\program files\Dell\QuickSet\QuickSet.exe" [2010-06-09 3216544] "AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208] "SBRegRebootCleaner"="c:\program files (x86)\Sunbelt Software\VIPRE\SBRC.exe" [N/A] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "LoadAppInit_DLLs"=0x0 . ------- Bijkomende Scan ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://hyves.nl/ mLocal Page = c:\windows\SysWOW64\blank.htm IE: E&xporteren naar Microsoft Excel - c:\progra~2\MIF5BA~1\Office12\EXCEL.EXE/3000 . - - - - ORPHANS VERWIJDERD - - - - Toolbar-Locked - (no file) Toolbar-Locked - (no file) WebBrowser-{BA14329E-9550-4989-B3F2-9732E92D17CC} - (no file) WebBrowser-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file) . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences] @Denied: (2) (LocalSystem) "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,57,91,02,75,a6,18,50,49,b0,09,db,\ "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,57,91,02,75,a6,18,50,49,b0,09,db,\ [HKEY_USERS\S-1-5-21-3246235719-1228998758-3747656504-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLiveMail.Email.1" [HKEY_USERS\S-1-5-21-3246235719-1228998758-3747656504-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLiveMail.VCard.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe,-101" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx" "ThreadingModel"="Apartment" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.10" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx, 1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx" "ThreadingModel"="Apartment" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10i.ocx, 1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee] "SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\ [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Voltooingstijd: 2010-12-14 00:18:21 ComboFix-quarantined-files.txt 2010-12-13 23:18 Pre-Run: 450.419.965.952 bytes beschikbaar Post-Run: 450.457.137.152 bytes beschikbaar - - End Of File - - 0E8D3CCBDFD1A34A6FA180BDD380A1D8

Ik heb dat vipre gebruikt, maar die scan duurde wel meer dan een dag ofzo als ik 'm door liet gaan? en mijn computer werd er zo sloom van dat ik er 3 dagen over gedaan heb om Vipre weer te kunnen verwijderen! Vipre had in 't begin wel 3 dingen verwijderd die zeer schadelijk waren stond er en 800 bestanden met het gevaren niveau "low" gevonden. Maar hij heeft dus niet alles gescand..

D:\HENK-PC\Backup Set 2010-11-20 003223\Backup Files 2010-11-20 003223\Backup files 1.zip multiple threats deleted - quarantined dit is de gevonden "threats" van de ESET online scanner, dit is 't enige wat ik nog iets van een log heb kunnen maken/vinden

Ik heb 't opnieuw geprobeerd maar het logje geeft hetzelfde aan en ik kan nergens een ander logje vinden!

ESETSmartInstaller@High as CAB hook log: OnlineScanner64.ocx - registred OK OnlineScanner.ocx - registred OK Dit staat in 't logje? is dit wel goed?

Ik kreeg zonet weer een blauw scherm dat mijn computer preventief werd afgesloten omdat er beschadigde bestanden op mijn computer stonden ofzo, dat had ik ook toen ik dat trojaanse paard dowloader binnen haalde. ik doe hier alvast een logje van HiJackThis bij: Logfile of Trend Micro HijackThis v2.0.3 (BETA) Scan saved at 0:13:18, on 2-12-2010 Platform: Unknown Windows (WinNT 6.01.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16671) Boot mode: Normal Running processes: C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe C:\Program Files (x86)\Steam\Steam.exe C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SCServer\SCServer.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10i_ActiveX.exe C:\Program Files (x86)\TrendMicro\HiJackThis\HiJackThis.exe C:\Program Files (x86)\Skype\Toolbars\Shared\SkypeNames2.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Dell | MSN R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Hyves.nl: always in touch with your friends R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\progra~2\mcafee\sitead~1\mcieplg.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\progra~1\mcafee\msk\mskapbho.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20101107160942.dll O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\progra~2\mcafee\sitead~1\mcieplg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\progra~2\mcafee\sitead~1\mcieplg.dll O4 - HKLM\..\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey O4 - HKLM\..\Run: [dellsupportcenter] "C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe" /P dellsupportcenter O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\RunOnce: [Launcher] C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe O4 - HKLM\..\RunOnce: [DSUpdateLauncher] "C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\hstart.exe" /NOCONSOLE /D="C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate" /RUNAS "C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe" O4 - HKLM\..\RunOnce: [sTToasterLauncher] C:\Program Files (x86)\Dell DataSafe Local Backup\toasterLauncher.exe O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MIF5BA~1\Office12\EXCEL.EXE/3000 O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MIF5BA~1\Office12\REFIEBAR.DLL O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O13 - Gopher Prefix: O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~2\mcafee\sitead~1\mcieplg.dll O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~2\mcafee\sitead~1\mcieplg.dll O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_0057cbec48a2d7cf\AESTSr64.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe O23 - Service: McAfee Personal Firewall Service (McMPFSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\Program Files\mcafee\VirusScan\mcods.exe O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe O23 - Service: McShield - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: O2FLASH - Unknown owner - C:\Windows\system32\DRIVERS\o2flash.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks SAS - C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: SupportSoft Sprocket Service (DellSupportCenter) (sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_0057cbec48a2d7cf\STacSV64.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe O23 - Service: TurboBoost - Intel® Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Program Files\Dell\Dell Wireless WLAN Card\WLTRYSVC.EXE O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 13015 bytes

Ik heb geen meldingen meer gehad, maar mijn internet explorer loopt soms nog wel vast als ik 'm opstart en net had ik iets raars toen ik mijn laptop opstartte. Toen ik het wachtwoord van de laptop in had gevuld ging hij het "bureaublad voorbereiden". Toen dat eenmaal was gebeurt zag het bureaublad eruit als een hele oude windows en er stond alleen de prullenbak op het bureaublad. Ook stonden er alleen maar foutmeldingen, maar toen heb ik mijn laptop opnieuw opgestart en toen was 't weer goed. Maar wel vreemd..

Tot nu toe geen meldingen gehad. Moet ik dat bestandje nog wel sturen naar dat email adres of is 't wel gewoon gelukt met mijn vorige post?

Hier het logje ingepakt met winrar!