Ga naar inhoud

Resident shield waarschuwing (AVG)

Luuk24
 Delen

Aanbevolen berichten

Luuk24 Enthousiasteling

Luuk24

Geplaatst:
  • Auteur
Geplaatst:

Dit is de log:

ComboFix 10-04-14.04 - Administrator 15-04-2010 17:13:45.2.2 - x86

Microsoft Windows XP Professional 5.1.2600.3.1252.31.1033.18.2031.1119 [GMT 2:00]

Gestart vanuit: c:\documents and settings\Administrator\Desktop\ComboFix.exe

gebruikte Opdracht switches :: c:\documents and settings\Administrator\Desktop\CFScript.txt

AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}

FW: F-Secure Client Security 7.12 *disabled* {D4747503-0346-49EB-9262-997542F79BF4}

FILE ::

"c:\windows\system32\drivers\logiflt.iad"

"c:\windows\system32\drivers\lvuvc.hs"

"c:\windows\system32\drivers\vwqoh.sys"

"c:\windows\system32\drivers\ybqpf.sys"

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\windows\system32\drivers\logiflt.iad

c:\windows\system32\drivers\lvuvc.hs

c:\windows\system32\drivers\vwqoh.sys

c:\windows\system32\drivers\ybqpf.sys

c:\windows\TEMP\logishrd\LVPrcInj01.dll

.

((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

-------\Service_ftxurm

-------\Service_gqjpitq

-------\Service_xntsukbx

-------\Legacy_vwqoh

-------\Legacy_ybqpf

-------\Service_vwqoh

-------\Service_ybqpf

(((((((((((((((((((( Bestanden Gemaakt van 2010-03-15 to 2010-04-15 ))))))))))))))))))))))))))))))

.

2010-04-15 09:04 . 2010-04-15 09:04 -------- d-----w- c:\documents and settings\Administrator\Application Data\Malwarebytes

2010-04-15 09:04 . 2010-03-29 22:46 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2010-04-15 09:04 . 2010-04-15 09:04 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2010-04-15 09:04 . 2010-04-15 09:04 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes

2010-04-15 09:04 . 2010-03-29 22:45 20824 ----a-w- c:\windows\system32\drivers\mbam.sys

2010-04-15 07:58 . 2010-04-15 07:58 -------- d-----w- c:\program files\TrendMicro

2010-04-09 07:13 . 2010-04-09 07:13 -------- d-sh--w- c:\documents and settings\LocalService\PrivacIE

2010-03-17 17:10 . 2010-03-17 17:10 12464 ----a-w- c:\windows\system32\avgrsstx.dll

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2010-04-15 07:58 . 2010-04-15 07:58 388096 ----a-r- c:\documents and settings\Administrator\Application Data\Microsoft\Installer\{0761C9A8-8F3A-4216-B4A7-B7AFBF24A24A}\HiJackThis.exe

2010-04-14 20:07 . 2010-03-01 14:11 -------- d-----w- c:\documents and settings\All Users\Application Data\avg9

2010-04-12 13:16 . 2010-02-23 17:16 -------- d-----w- c:\documents and settings\Administrator\Application Data\BitTorrent

2010-04-07 17:30 . 2010-04-07 17:30 4255072 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgcorex.dll

2010-04-04 21:35 . 2008-07-29 13:05 -------- d-----w- c:\documents and settings\All Users\Application Data\FLEXnet

2010-03-17 17:10 . 2010-03-17 17:10 360584 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgtdix.sys

2010-03-17 17:10 . 2010-03-17 17:10 333192 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgldx86.sys

2010-03-17 17:10 . 2010-03-17 17:10 28424 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgmfx86.sys

2010-03-17 17:10 . 2010-03-01 14:11 242696 ----a-w- c:\windows\system32\drivers\avgtdix.sys

2010-03-17 17:10 . 2010-03-01 14:11 29512 ----a-w- c:\windows\system32\drivers\avgmfx86.sys

2010-03-17 17:10 . 2010-03-01 14:11 216200 ----a-w- c:\windows\system32\drivers\avgldx86.sys

2010-03-15 16:57 . 2008-07-29 13:04 147960 -c--a-w- c:\documents and settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2010-03-10 06:15 . 1980-01-01 00:00 420352 ----a-w- c:\windows\system32\vbscript.dll

2010-03-05 14:34 . 2008-09-01 12:38 -------- d-----w- c:\program files\Google

2010-03-05 14:34 . 2008-07-29 10:55 -------- d-----w- c:\program files\DIALux

2010-03-05 12:31 . 2008-10-08 07:36 -------- d-----w- c:\documents and settings\Administrator\Application Data\dvdcss

2010-03-05 12:09 . 2008-07-29 10:47 -------- d--h--w- c:\program files\InstallShield Installation Information

2010-03-05 11:44 . 2008-07-29 10:50 -------- d-----w- c:\program files\CES EduPack 2008

2010-03-05 11:23 . 2008-07-29 10:46 -------- d-----w- c:\program files\Bentley

2010-03-05 11:13 . 2008-07-29 09:48 -------- d-----w- c:\program files\Windows Live

2010-03-04 15:16 . 2010-03-04 15:14 -------- d-----w- c:\program files\Virtual Earth 3D

2010-03-03 17:16 . 2010-03-03 17:16 -------- d-----w- c:\documents and settings\All Users\Application Data\Office Genuine Advantage

2010-03-02 12:05 . 2009-04-10 08:26 -------- d-----w- c:\documents and settings\All Users\Application Data\PhotoStitch

2010-03-02 08:44 . 2010-03-02 08:44 -------- d-----w- c:\documents and settings\Administrator\Application Data\Office Genuine Advantage

2010-03-01 14:11 . 2010-03-01 14:11 -------- d-----w- c:\program files\AVG

2010-03-01 13:00 . 2010-03-01 13:00 -------- d-----w- c:\program files\Common Files\Deterministic Networks

2010-03-01 12:51 . 2008-07-29 12:12 -------- d-----w- c:\program files\F-Secure

2010-03-01 12:49 . 2008-07-29 12:12 -------- d-----w- c:\documents and settings\All Users\Application Data\F-Secure

2010-02-28 12:21 . 2010-02-28 12:21 -------- d-----w- c:\documents and settings\Administrator\Application Data\Bentley

2010-02-28 12:21 . 2008-07-29 10:46 -------- d-----w- c:\documents and settings\All Users\Application Data\Bentley

2010-02-27 13:32 . 2009-09-13 13:36 -------- d-----w- c:\program files\LimeWire

2010-02-25 06:24 . 1980-01-01 00:00 916480 ------w- c:\windows\system32\wininet.dll

2010-02-24 13:11 . 1980-01-01 00:00 455680 ----a-w- c:\windows\system32\drivers\mrxsmb.sys

2010-02-23 17:16 . 2010-02-23 17:16 -------- d-----w- c:\program files\BitTorrent

2010-02-16 14:08 . 1980-01-01 00:00 2146304 ------w- c:\windows\system32\ntoskrnl.exe

2010-02-16 13:25 . 2008-04-14 00:01 2024448 ------w- c:\windows\system32\ntkrnlpa.exe

2010-02-12 04:33 . 1980-01-01 00:00 100864 ----a-w- c:\windows\system32\6to4svc.dll

2010-02-11 12:02 . 1980-01-01 00:00 226880 ----a-w- c:\windows\system32\drivers\tcpip6.sys

2008-06-19 09:16 . 2008-06-19 09:16 118784 ------w- c:\program files\mozilla firefox\plugins\MyCamera.dll

2008-09-08 16:57 . 2008-09-08 16:56 952 --sha-w- c:\windows\system32\KGyGaAvL.sys

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-03-12 153136]

"Logitech Vid"="c:\program files\Logitech\Logitech Vid\vid.exe" [2009-04-30 5472016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-05-25 8429568]

"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-05-25 81920]

"nwiz"="nwiz.exe" [2007-05-25 1626112]

"imekrmig7.0"="c:\program files\Common Files\Microsoft Shared\IME\IMKR7\IMEKRMIG.EXE" [2007-04-19 25440]

"IMSCMig"="c:\progra~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE" [2007-04-02 17248]

"CJIMETIPSYNC"="c:\program files\Common Files\Microsoft Shared\IME\IMTC65\CHANGJIE\CINTLCFG.EXE" [2007-03-22 66400]

"PHIMETIPSYNC"="c:\program files\Common Files\Microsoft Shared\IME\IMTC65\PHONETIC\TINTLCFG.EXE" [2007-03-22 98656]

"IMJPMIG9.0"="c:\progra~1\COMMON~1\MICROS~1\IME\IMJP9\IMJPMIG.EXE" [2007-04-19 125792]

"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 144784]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]

"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2007-12-11 286720]

"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-09 153136]

"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [2006-10-22 620152]

"QlbCtrl"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2007-11-06 177456]

"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2007-01-05 872448]

"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-03-11 49152]

"PTHOSTTR"="c:\program files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE" [2007-01-09 145184]

"CognizanceTS"="c:\progra~1\HEWLET~1\IAM\Bin\ASTSVCC.dll" [2003-12-22 17920]

"IFXSPMGT"="c:\windows\system32\ifxspmgt.exe" [2007-07-24 677144]

"LogitechQuickCamRibbon"="c:\program files\Logitech\Logitech WebCam Software\LWS.exe" [2009-05-08 2780432]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2009-07-26 3883856]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"NeroHomeFirstStart"="c:\program files\Common Files\Ahead\Lib\NMFirstStart.exe" [2007-03-12 16944]

c:\documents and settings\All Users\Start Menu\Programs\Startup\

Adobe Acrobat Speed Launcher.lnk - c:\windows\Installer\{AC76BA86-1033-0000-7760-000000000003}\_SC_Acrobat.exe [2008-7-29 295606]

Adobe Acrobat Synchronizer.lnk - c:\program files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe [2006-10-23 734872]

AutoCAD Startup Accelerator.lnk - c:\program files\Common Files\Autodesk Shared\acstart16.exe [2005-3-5 10872]

Cisco Systems VPN Client.lnk - c:\program files\Cisco Systems\VPN Client\vpngui.exe [2010-3-1 1544984]

HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2008-3-25 214360]

MAYA 2008 Check.lnk - c:\windows\Installer\{D0B2DBA7-511A-4066-B678-FBE4F5ECCEBA}\IconD0B2DBA71.ico [2008-7-29 27648]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\OneCard]

2007-03-14 04:03 74752 ------r- c:\program files\Hewlett-Packard\IAM\Bin\ASWLNPkg.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]

"AppInit_DLLs"=c:\windows\system32\APSHook.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Notification Packages REG_MULTI_SZ SbHpNp scecli

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

@="Driver"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

"DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"%windir%\\system32\\sessmgr.exe"=

"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=

"c:\\Program Files\\Common Files\\Adobe\\Adobe Version Cue CS3\\Server\\bin\\VersionCueCS3.exe"=

"c:\\Program Files\\Autodesk\\Maya2008\\bin\\maya.exe"=

"c:\\Program Files\\Java\\jre1.6.0_05\\bin\\javaw.exe"=

"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=

"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

"c:\\Program Files\\BitTorrent\\bittorrent.exe"=

"c:\\Program Files\\AVG\\AVG9\\avgupd.exe"=

"c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"=

"c:\\Program Files\\Logitech\\Logitech Vid\\Vid.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

"3703:TCP"= 3703:TCP:Adobe Version Cue CS3 Server

"3704:TCP"= 3704:TCP:Adobe Version Cue CS3 Server

"50900:TCP"= 50900:TCP:Adobe Version Cue CS3 Server

"50901:TCP"= 50901:TCP:Adobe Version Cue CS3 Server

R0 SafeBoot;SafeBoot;c:\windows\system32\drivers\SafeBoot.sys [14-8-2007 17:59 101167]

R0 SbAlg;SbAlg;c:\windows\system32\drivers\SbAlg.sys [9-10-2006 13:31 44720]

R0 SbFsLock;SbFsLock;c:\windows\system32\drivers\SbFsLock.sys [14-6-2007 16:22 13184]

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [1-3-2010 16:11 216200]

R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [1-3-2010 16:11 242696]

R1 PersonalSecureDrive;PersonalSecureDrive;c:\windows\system32\drivers\psd.sys [24-7-2007 8:21 38816]

R1 RsvLock;RsvLock;c:\windows\system32\drivers\rsvlock.sys [14-8-2007 17:59 5840]

R2 ASBroker;Logon Session Broker;c:\windows\System32\svchost.exe -k Cognizance [1-1-1980 2:00 14336]

R2 ASChannel;Local Communication Channel;c:\windows\System32\svchost.exe -k Cognizance [1-1-1980 2:00 14336]

R2 avg9wd;AVG Free WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [17-3-2010 19:10 308064]

R2 HpFkCryptService;Drive Encryption Service;c:\program files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe [6-9-2007 13:26 221184]

R2 TabletServiceWacom;TabletServiceWacom;c:\windows\system32\Wacom_Tablet.exe [29-7-2008 12:08 1373480]

R2 USBDLM;USBDLM;c:\program files\USBDLM\USBDLM.exe [27-5-2008 10:02 156672]

R3 IFXTPM;IFXTPM;c:\windows\system32\drivers\ifxtpm.sys [28-8-2008 16:51 41216]

R3 rismc32;RICOH Smart Card Reader;c:\windows\system32\drivers\rismc32.sys [28-8-2008 16:51 47616]

S3 DAMDrv;DAMDrv;c:\windows\system32\drivers\DAMDrv.sys [7-10-2008 14:20 30008]

S3 FLCDLOCK;HP ProtectTools Device Locking / Auditing;c:\windows\system32\flcdlock.exe [8-6-2007 9:06 172131]

S4 msvsmon80;Visual Studio 2005 Remote Debugger;c:\program files\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x86\msvsmon.exe [23-9-2005 7:01 2799808]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12

hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

Cognizance REG_MULTI_SZ ASBroker ASChannel

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{EEBF9CA6-567B-41cd-B5F6-EF2C7FEF37B5}]

2009-03-08 02:32 128512 ----a-w- c:\windows\system32\advpack.dll

.

.

------- Bijkomende Scan -------

.

uStart Page = hxxp://www.google.nl/

uInternet Settings,ProxyOverride = <local>

IE: Append to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

IE: Convert link target to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

IE: Convert link target to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

IE: Convert selected links to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

IE: Convert selected links to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

IE: Convert selection to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

IE: Convert selection to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

IE: Convert to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000

IE: {{c95fe080-8f5d-11d2-a20b-00aa003c157a}

.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2010-04-15 17:42

Windows 5.1.2600 Service Pack 3 NTFS

scannen van verborgen processen ...

scannen van verborgen autostart items ...

scannen van verborgen bestanden ...

Scan succesvol afgerond

verborgen bestanden: 0

**************************************************************************

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

[HKEY_USERS\S-1-5-21-3135674423-4116427951-2994065452-500\Software\Microsoft\Internet Explorer\User Preferences]

@Denied: (2) (Administrator)

"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,

d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,2a,45,c5,6a,17,c9,81,44,84,a5,d1,\

"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,

d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,2a,45,c5,6a,17,c9,81,44,84,a5,d1,\

[HKEY_LOCAL_MACHINE\software\DeterministicNetworks\DNE\Parameters]

"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,

00,5c,00,4d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,79,00,73,00,\

.

--------------------- DLLs Geladen Onder Lopende Processen ---------------------

- - - - - - - > 'winlogon.exe'(1340)

c:\program files\Hewlett-Packard\IAM\Bin\ASWLNPkg.dll

c:\program files\Hewlett-Packard\IAM\bin\ItMsg.dll

c:\program files\Hewlett-Packard\IAM\Bin\TrayIcon.dll

c:\program files\Hewlett-Packard\IAM\bin\HPBrand.dll

c:\program files\Hewlett-Packard\IAM\Bin\ASChnl.dll

c:\program files\Hewlett-Packard\IAM\Bin\ItDAC.dll

c:\program files\Hewlett-Packard\IAM\Bin\ItReports.DLL

c:\program files\Hewlett-Packard\IAM\Bin\BioAuth.dll

c:\program files\Hewlett-Packard\IAM\Bin\ASBIoAT.dll

c:\program files\Hewlett-Packard\IAM\Bin\ittal.dll

c:\program files\Hewlett-Packard\IAM\Bin\ItVCClient.dll

c:\program files\Hewlett-Packard\IAM\Bin\ittalsnap.dll

c:\program files\Hewlett-Packard\IAM\Bin\AuthWiz.dll

c:\program files\Hewlett-Packard\IAM\Bin\ItVCard.dll

c:\windows\system32\xenroll.dll

c:\windows\system32\WININET.dll

c:\program files\Hewlett-Packard\IAM\Bin\TpmAuth.dll

c:\windows\system32\IFXTSP.dll

c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\MSVCR80.dll

c:\windows\system32\IfxSpArc.dll

c:\windows\system32\msxml6.dll

c:\windows\system32\IFXTCSps.dll

c:\windows\system32\IFXTPMCP.dll

c:\program files\Hewlett-Packard\Embedded Security Software\IfxTRsUS.dll

c:\program files\Hewlett-Packard\Embedded Security Software\IfxTrsMs.dll

c:\windows\system32\capicom.dll

c:\program files\Hewlett-Packard\IAM\Bin\TokenAuth.dll

c:\program files\Hewlett-Packard\IAM\Bin\NetAdmin.dll

c:\windows\SbHpNp.DLL

- - - - - - - > 'lsass.exe'(1396)

c:\windows\SbHpNp.dll

- - - - - - - > 'explorer.exe'(7560)

c:\windows\system32\WININET.dll

c:\windows\TEMP\logishrd\LVPrcInj01.dll

c:\windows\system32\APSHook.dll

c:\program files\Hewlett-Packard\IAM\bin\ItClient.dll

c:\windows\system32\ieframe.dll

c:\windows\system32\webcheck.dll

c:\windows\system32\WPDShServiceObj.dll

c:\windows\system32\PortableDeviceTypes.dll

c:\windows\system32\PortableDeviceApi.dll

.

------------------------ Andere Aktieve Processen ------------------------

.

c:\windows\System32\SCardSvr.exe

c:\program files\Bonjour\mDNSResponder.exe

c:\program files\Cisco Systems\VPN Client\cvpnd.exe

c:\program files\AVG\AVG9\avgnsx.exe

c:\windows\system32\IFXTCS.exe

c:\program files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe

c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

c:\program files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe

c:\windows\system32\nvsvc32.exe

c:\windows\system32\IfxPsdSv.exe

c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

c:\program files\Microsoft SQL Server\90\Shared\sqlbrowser.exe

c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe

c:\program files\Canon\CAL\CALMAIN.exe

c:\program files\AVG\AVG9\avgrsx.exe

c:\program files\AVG\AVG9\avgchsvx.exe

c:\program files\AVG\AVG9\avgcsrvx.exe

c:\program files\Hewlett-Packard\IAM\bin\asghost.exe

c:\windows\system32\WTablet\Wacom_TabletUser.exe

c:\windows\system32\wscntfy.exe

c:\windows\system32\RUNDLL32.EXE

c:\program files\Hewlett-Packard\Shared\hpqwmiex.exe

c:\program files\Hewlett-Packard\Embedded Security Software\PSDrt.exe

c:\program files\Common Files\Ahead\Lib\NMIndexingService.exe

c:\program files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe

c:\program files\Common Files\Logishrd\LQCVFX\COCIManager.exe

c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

c:\program files\HP\Digital Imaging\bin\hpqSTE08.exe

c:\program files\HP\Digital Imaging\bin\hpqbam08.exe

.

**************************************************************************

.

Voltooingstijd: 2010-04-15 17:48:09 - machine werd herstart

ComboFix-quarantined-files.txt 2010-04-15 15:48

ComboFix2.txt 2010-04-15 10:19

Pre-Run: 15.971.508.224 bytes free

Post-Run: 15.944.654.848 bytes free

- - End Of File - - E6375CAF333F2A8F3D4A6CF096C77114

Link naar reactie
Delen op andere sites
kape Grootmeester

kape

Geplaatst:
Geplaatst:

Even je topic heropend, want er is nog wat opruiimingswerk te doen :-)

Problemen van de baan, dan is het tijd voor de “grote schoonmaak” : verwijderen van gebruikte programma’s, een cleaning en het verwijderen van de besmette herstelpunten.

Verwijder Combofix: Start -> Uitvoeren en typ: ComboFix /Uninstall

Dit zal Combofix verwijderen + gerelateerde mappen en bestanden, herstelt de klokinstellingen opnieuw, verbergt de bestandsextensies, gaat verborgen bestanden en systeembestanden terug verbergen en maakt een nieuw herstelpunt.

Download CCleaner. Klik op deze pagina op één van de mirrorsites van MajorGeeks en dan start de download van CCleaner automatisch en gratis op.

Installeer het en start CCleaner op. Klik in de linkse kolom op “Cleaner”. Klik achtereenvolgens op ‘Analyseren’ en 'Schoonmaken'. Soms is 1 analyse niet voldoende. Deze procedure mag je herhalen tot de analyse geen fouten meer aangeeft. Klik vervolgens in de linkse kolom op “Register” en klik op ‘Scan naar problemen”. Als er fouten gevonden worden klik je op ”Herstel geselecteerde problemen” en ”OK”. Dan krijg je de vraag om een back-up te maken. Klik op “JA”. Kies dan “Herstel alle geselecteerde fouten”. Sluit hierna CCleaner terug af.

Wil je dit uitgebreid in beeld bekijken, klik dan hier voor de handleiding.

Het is aangewezen om de bestaande herstelpunten te verwijderen (daar zitten besmette herstelpunten tussen die je eventueel zou kunnen terugzetten) door systeemherstel tijdelijk uit te schakelen. Doe dit via Start -> Configuratiescherm -> Prestaties en Onderhoud -> Systeem -> Systeemherstel -> "Systeemherstel op alle stations uitschakelen" aanvinken. Toepassen en OK. PC herstarten en het vinkje terug weg halen.

That's it !

Link naar reactie
Delen op andere sites
 Delen
Ga naar topic overzicht
Logo

OVER ONS

PC Helpforum helpt GRATIS computergebruikers sinds juli 2006. Ons team geeft via het forum professioneel antwoord op uw vragen en probeert uw pc problemen zo snel mogelijk op te lossen. Word lid vandaag, plaats je vraag online en het PC Helpforum-team helpt u graag verder!

SITEMAP

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.