ogg directshow filter

floris-jan · 28 juni 2010

ehm ik ken mensen op een ander forum met zon zelfde probleem met c++

volgens hun (en bij de meeste werkt het) is je netframe outdate update dat is misschien helpt het (kan geen kwaad staat op bijna alle pc's afgezien van mac enz)

---------- Post toegevoegd om 16:11 ---------- Vorige post was om 16:07 ----------

Win32.Worm.Downadup.Gen

hmm mischien??

kweezie wabbit · 29 juni 2010

Ik denk dat er iets anders mis gaat..... ik kan nu geen updates meer binnenhalen van Bitdefender.... zou er een virusje met mijn voeten spelen ?

Ik denk het niet want de logs van Malwarebytes en Hijackthis waren clean maar je mag voor de zekerheid een nieuw hjt log maken.

edpo · 29 juni 2010

Bovenstaande win32.worm.downadup.gen wil alvast niet worden aangesproken.... verdacht.

Hier de Logfile...

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 15:32:53, on 29/06/2010

Platform: Windows Vista SP2 (WinNT 6.00.1906)

MSIE: Internet Explorer v8.00 (8.00.6001.18928)

Boot mode: Normal

Running processes:

C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\taskeng.exe

C:\Program Files\Lexmark X1100 Series\LXBKbmgr.exe

C:\Windows\RtHDVCpl.exe

C:\Windows\System32\nvraidservice.exe

C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe

C:\Acer\Empowering Technology\eLock\autolockprocess\AutoLockProcess.exe

C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe

C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe

C:\Acer\Empowering Technology\SysMonitor.exe

C:\Program Files\Belgium Identity Card\beid35gui.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Windows\ehome\ehtray.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Windows\ehome\ehmsas.exe

C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE

C:\Acer\Empowering Technology\eRecovery\ERAGENT.EXE

C:\Acer\Empowering Technology\eDataSecurity\x86\MsnVane.exe

C:\Users\Eddy\AppData\Local\Google\Update\1.2.183.29\GoogleCrashHandler.exe

C:\Acer\Empowering Technology\eDataSecurity\x86\eDSDTS.exe

C:\Program Files\Windows Live\Contacts\wlcomm.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\Program Files\IncrediMail\Bin\IncMail.exe

C:\Program Files\IncrediMail\Bin\ImApp.exe

C:\Program Files\Avant Browser\avant.exe

C:\Windows\system32\taskeng.exe

F:\virusprog\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MyStart by IncrediMail.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo! UK & Ireland

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

O1 - Hosts: ::1 localhost

O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll

O3 - Toolbar: &Egis Option Pack - {312105C4-2E13-4E10-AF72-F9D79BA077E6} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDsWebmailtb.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2010\IEToolbar.dll

O4 - HKLM\..\Run: [lxbkbmgr.exe] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"

O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe

O4 - HKLM\..\Run: [NVRaidService] C:\Windows\system32\nvraidservice.exe

O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"

O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe

O4 - HKLM\..\Run: [AutoLockProcess] C:\Acer\Empowering Technology\eLock\autolockprocess\autolockprocess.exe

O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"

O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe

O4 - HKLM\..\Run: [beid] "C:\Program Files\Belgium Identity Card\beid35gui.exe" /startup

O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin

O4 - HKLM\..\Run: [skytel] Skytel.exe

O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [bDAgent] "C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe"

O4 - HKLM\..\Run: [bitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2010\IEShow.exe"

O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [PrinterShare] C:\Program Files\PrinterShare\paConsole.exe -minimized

O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe

O4 - HKCU\..\Run: [Google Update] "C:\Users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe" /c

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

O4 - HKCU\..\Run: [CAHeadless] C:\Program Files\Adobe\Elements Organizer 8.0\CAHeadless\ElementsAutoAnalyzer.exe

O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

O4 - Global Startup: Empowering Technology Launcher.lnk = C:\Acer\Empowering Technology\eAPLauncher.exe

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200

O8 - Extra context menu item: Add to Windows &Live Favorites - Welcome to Windows Live

O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe

O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\Program Files\OFFICE11\REFIEBAR.DLL

O16 - DPF: {254AA86E-5655-4518-AA87-185D7CC41801} (LogMeIn Rescue Technician Console) - https://secure.logmeinrescue.com/NL/TechConsole/x86/RescueControl.cab

O16 - DPF: {3D3B42C2-11BF-4732-A304-A01384B70D68} (UploadListView Class) - http://picasaweb.google.be/s/v/59.20/uploader2.cab

O16 - DPF: {44990B00-3C9D-426D-81DF-AAB636FA4345} - https://www-secure.symantec.com/techsupp/asa/ss/sa/sa_cabs/tgctlcm.cab

O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.6.cab

O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab

O16 - DPF: {82774781-8F4E-11D1-AB1C-0000F8773BF0} (DLC Class) - https://transfers.ds.microsoft.com/FTM/TransferSource/grTransferCtrl.cab

O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game09.zylom.com/activex/zylomgamesplayer.cab

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe

O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe

O23 - Service: Adobe Active File Monitor V7 (AdobeActiveFileMonitor7.0) - Adobe Systems Incorporated - C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe

O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: BitDefender Arrakis-server (Arrakis3) - BitDefender S.R.L. Antivirus software - BitDefender - The future of security now! - C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe

O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe

O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe

O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe

O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: BitDefender Desktop-updateservice (LIVESRV) - BitDefender S.R.L. - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe

O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE

O23 - Service: lxbk_device - - C:\Windows\system32\lxbkcoms.exe

O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe

O23 - Service: Planner voor Automatische LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

O23 - Service: Symantec RemoteAssist - Symantec, Inc. - C:\Program Files\Common Files\Symantec Shared\Support Controls\ssrc.exe

O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe

O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe

O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe

--

End of file - 14660 bytes

deze logfile is gemaakt terwijl het fenemeen zich voordoet op dit eigenste ogenblik... nu moet ik mijn pc resetten om verder te kunnen werken met incredimail.

Bitdefender wil nog altijd geen updates maken.

kweezie wabbit · 30 juni 2010

Volgens mij ziet het logje er goed uit.

Als je denkt besmet te zijn, probeer dan met de downadup removal tool.

Zip-bestand uitpakken en de tool opstarten met cleaner_gui.exe

PC herstarten en kijk dan of je bitdefender kan updaten.

edpo · 30 juni 2010

niets te vinden met bovenstaande scanner....

kweezie wabbit · 1 juli 2010

Dan gaan we iets dieper graven.

Download Combofix naar je Bureaublad.

Lees hier meer over correct gebruik van Combofix.

OPMERKING: indien je, tijdens of na het downloaden van Combofix of tijdens het gebruik van Combofix een melding krijgt van je Antivirus- of een andere realtime scanner, schakel dan deze scanner uit en download Combofix opnieuw.

Sommige scanners zien bepaalde componenten die Combofix gebruikt als verdacht en gaan deze blokkeren of verwijderen!

Dubbelklik op Combofix.exe om het te starten.
Indien je Combofix al eerder hebt gebruikt, kan je een waarschuwing krijgen dat een update beschikbaar is. Sta toe dat ComboFix wordt geupdate.
Volg de instructies, aanvaard de disclaimer door op Ja te klikken.
Indien de Recovery Console niet geïnstalleerd is, wordt je gevraagd om dit alsnog te doen door op JA te klikken in het "Query - Recovery Console" venster (enkel voor XP, niet voor VISTA).
Klik op OK en Ja om automatisch de Recovery Console te laten installeren.
Klik na afloop terug op Ja om het scannen op malware te starten.
Tijdens het runnen van de fix, NIET in het venster klikken, want dit zal je pc doen vasthangen.

Wanneer de fix voltooid is en na herstart, zal de log Combofix.txt openen.

Plak de inhoud van het logje in je volgende bericht, samen met een nieuw HijackThis log.

edpo · 2 juli 2010

Niet te geloven.... combofix weigert te openen...!

Zie bijgevoegde knipsels

edpo · 2 juli 2010

na verschillende keer herproberen is combofix gestart en geupdated..

hier de log van combofix

ComboFix 10-07-01.02 - Eddy 02/07/2010 9:08.2.2 - x86

Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.32.1043.18.3071.1888 [GMT 2:00]

Gestart vanuit: c:\users\Eddy\Desktop\scan.exe

AV: Kaspersky Internet Security *On-access scanning enabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}

AV: Norton Internet Security *On-access scanning enabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8}

AV: Windows Live OneCare *On-access scanning disabled* (Updated) {427ADFC3-B354-4A51-BE34-A9D4218E45C4}

FW: Kaspersky Internet Security *enabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}

FW: Norton Internet Security *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}

FW: Windows Live OneCare - Firewall *disabled* {A3899D22-27E6-4A7E-AE4E-2C106646DAAB}

SP: Kaspersky Internet Security *enabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}

SP: Norton Internet Security *enabled* (Updated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A}

SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

SP: Windows Live OneCare *disabled* (Updated) {CC7E50BA-BA8C-4DDE-B5AC-EA53BC38D01B}

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\windows\system32\OggDSuninst.exe

.

(((((((((((((((((((( Bestanden Gemaakt van 2010-06-02 to 2010-07-02 ))))))))))))))))))))))))))))))

.

2010-07-02 07:18 . 2010-07-02 07:18 -------- d-----w- c:\users\Public\AppData\Local\temp

2010-07-02 07:18 . 2010-07-02 07:18 -------- d-----w- c:\users\Eddy\AppData\Local\temp

2010-07-02 07:18 . 2010-07-02 07:18 -------- d-----w- c:\users\Default\AppData\Local\temp

2010-07-02 06:58 . 2010-07-02 07:04 -------- d-----w- C:\ComboFix

2010-07-02 05:24 . 2009-04-13 12:39 16384 ----a-w- C:\msimg32.dll

2010-06-29 19:50 . 2010-06-29 19:50 -------- d-----w- c:\program files\ESET

2010-06-26 15:33 . 2010-06-26 16:16 -------- d-----w- c:\programdata\BitDefender

2010-06-26 15:33 . 2010-06-26 15:34 -------- d-----w- c:\users\Eddy\AppData\Roaming\BitDefender

2010-06-26 15:20 . 2010-06-26 16:16 -------- d-----w- c:\program files\Common Files\BitDefender

2010-06-26 15:18 . 2010-06-26 15:20 305297 ----a-w- C:\BdUninstallTool2010.06.26-05.18.28.reg

2010-06-26 08:16 . 2010-06-26 08:16 -------- d-----w- c:\program files\IncrediMail

2010-06-25 13:19 . 2010-06-25 13:19 -------- d-----w- c:\program files\Common Files\Java

2010-06-25 10:18 . 2009-05-18 11:17 26600 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys

2010-06-25 10:18 . 2008-04-17 10:12 107368 ----a-w- c:\windows\system32\GEARAspi.dll

2010-06-25 10:17 . 2010-06-25 10:17 -------- d-----w- c:\program files\iPod

2010-06-25 10:17 . 2010-06-25 10:18 -------- d-----w- c:\programdata\{429CAD59-35B1-4DBC-BB6D-1DB246563521}

2010-06-25 10:17 . 2010-06-25 10:18 -------- d-----w- c:\program files\iTunes

2010-06-25 10:13 . 2010-06-25 10:13 -------- d-----w- c:\program files\Bonjour

2010-06-25 10:12 . 2010-06-25 10:12 72504 ----a-w- c:\programdata\Apple Computer\Installer Cache\iTunes 9.2.0.61\SetupAdmin.exe

2010-06-24 09:27 . 2010-06-24 09:27 -------- d-----w- c:\users\Eddy\AppData\Local\ReaJPEG

2010-06-24 08:45 . 2010-06-24 08:45 44544 ------w- c:\windows\AWuninstall.exe

2010-06-24 08:45 . 2010-06-24 08:45 -------- d-----w- c:\program files\Lokas

2010-06-24 07:29 . 2009-11-08 08:55 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll

2010-06-24 07:29 . 2009-11-08 08:55 49472 ----a-w- c:\windows\system32\netfxperf.dll

2010-06-24 07:29 . 2009-11-08 08:55 297808 ----a-w- c:\windows\system32\mscoree.dll

2010-06-24 07:29 . 2009-11-08 08:55 295264 ----a-w- c:\windows\system32\PresentationHost.exe

2010-06-24 07:29 . 2009-11-08 08:55 1130824 ----a-w- c:\windows\system32\dfshim.dll

2010-06-24 05:45 . 2010-04-16 16:43 28672 ----a-w- c:\windows\system32\Apphlpdm.dll

2010-06-24 05:45 . 2010-04-16 14:39 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll

2010-06-20 19:24 . 2010-06-20 19:24 -------- d-----w- c:\programdata\PhotoMail

2010-06-20 19:24 . 2010-06-20 19:24 -------- d-----w- c:\program files\PhotoMail Maker

2010-06-18 13:03 . 2010-06-18 13:03 -------- d-----w- c:\program files\Xiph.Org

2010-06-16 08:17 . 2010-06-16 08:17 -------- d-----w- c:\users\Eddy\AppData\Roaming\No Company Name

2010-06-16 07:56 . 2010-06-16 07:56 -------- d-----w- c:\programdata\eSellerate

2010-06-16 07:56 . 2010-06-16 13:55 -------- d-----w- c:\programdata\SmartSound Software Inc

2010-06-16 07:56 . 2010-06-16 07:56 -------- d-----w- c:\program files\SmartSound Software

2010-06-05 08:21 . 2010-06-05 08:21 -------- d-----w- c:\program files\Project1

2010-06-05 08:09 . 2010-06-05 08:09 -------- d-----w- c:\program files\LottoPro 2009

2010-06-05 08:05 . 2010-06-05 08:21 249856 ------w- c:\windows\Setup1.exe

2010-06-05 08:05 . 2010-06-05 08:21 73216 ----a-w- c:\windows\ST6UNST.EXE

2010-06-05 06:29 . 2010-06-05 06:29 -------- d-----w- c:\users\Eddy\AppData\Local\EgisTec IPS

2010-06-04 06:16 . 2010-06-04 06:38 -------- d-----w- c:\program files\NVIDIA Corporation

2010-06-03 17:25 . 2010-06-03 17:25 -------- d-----w- c:\program files\Uniblue

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2010-06-30 13:57 . 2009-12-03 09:16 -------- d-----w- c:\programdata\PrinterShare

2010-06-26 16:25 . 2009-07-24 09:26 291352 ----a-w- c:\windows\system32\drivers\bdfsfltr.sys

2010-06-26 16:24 . 2009-10-19 14:04 72784 ----a-w- c:\windows\system32\drivers\BdfNdisf6.sys

2010-06-25 15:01 . 2009-06-12 16:01 -------- d-----w- c:\users\Eddy\AppData\Roaming\Apple Computer

2010-06-25 13:19 . 2010-05-11 06:47 411368 ----a-w- c:\windows\system32\deployJava1.dll

2010-06-25 10:17 . 2009-06-12 15:58 -------- d-----w- c:\program files\Common Files\Apple

2010-06-24 09:28 . 2010-04-24 13:24 -------- d-----w- c:\program files\WatermarkSoftware

2010-06-24 06:18 . 2010-05-03 10:23 -------- d-----w- c:\program files\ToggleDU

2010-06-18 14:55 . 2006-11-02 16:11 735382 ----a-w- c:\windows\system32\perfh013.dat

2010-06-18 14:55 . 2006-11-02 16:11 152096 ----a-w- c:\windows\system32\perfc013.dat

2010-06-17 15:05 . 2009-04-06 09:11 -------- d-----w- c:\program files\a-squared Free

2010-06-17 06:45 . 2007-12-06 07:16 -------- d--h--w- c:\program files\InstallShield Installation Information

2010-06-16 09:50 . 2009-07-05 14:42 -------- d-----w- c:\users\Eddy\AppData\Roaming\Download Manager

2010-06-16 08:45 . 2008-05-27 14:31 108712 ----a-w- c:\users\Eddy\AppData\Local\GDIPFONTCACHEV1.DAT

2010-06-16 08:17 . 2009-04-04 11:28 -------- d-----w- c:\programdata\FLEXnet

2010-06-16 07:54 . 2009-07-14 12:54 -------- d-----w- c:\program files\Common Files\PX Storage Engine

2010-06-16 07:54 . 2007-12-06 07:59 -------- d-----w- c:\program files\Common Files\Adobe

2010-06-09 08:17 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail

2010-06-09 07:31 . 2007-12-06 07:20 -------- d-----w- c:\programdata\Microsoft Help

2010-06-04 07:35 . 2010-03-17 16:58 -------- d-----w- c:\users\Eddy\AppData\Roaming\OxelonMC

2010-06-04 06:55 . 2008-05-28 09:18 -------- d-----w- c:\program files\Microsoft Silverlight

2010-06-04 06:31 . 2010-06-04 06:31 34805 ----a-w- c:\programdata\nvModes.dat

2010-06-04 06:31 . 2007-12-06 07:12 -------- d-----w- c:\programdata\NVIDIA

2010-06-01 05:49 . 2010-06-01 05:49 4 ----a-w- c:\windows\system32\aspdict-en.dat

2010-06-01 05:49 . 2010-06-01 05:49 16 ----a-w- c:\windows\system32\asdict.dat

2010-05-29 09:40 . 2010-05-29 09:40 -------- d-----w- c:\users\Eddy\AppData\Roaming\JLC's Software

2010-05-29 09:39 . 2010-05-29 09:39 -------- d-----w- c:\program files\JLC's Software

2010-05-26 17:06 . 2010-06-09 05:44 34304 ----a-w- c:\windows\system32\atmlib.dll

2010-05-26 14:47 . 2010-06-09 05:44 289792 ----a-w- c:\windows\system32\atmfd.dll

2010-05-26 07:46 . 2009-04-04 09:27 -------- d-----w- c:\program files\Microsoft

2010-05-20 11:57 . 2009-05-24 08:57 -------- d-----w- c:\users\Eddy\AppData\Roaming\Test-A

2010-05-18 14:35 . 2010-05-18 14:35 91424 ----a-w- c:\windows\system32\dnssd.dll

2010-05-18 14:35 . 2010-05-18 14:35 197920 ----a-w- c:\windows\system32\dnssdX.dll

2010-05-18 14:35 . 2010-05-18 14:35 107808 ----a-w- c:\windows\system32\dns-sd.exe

2010-05-16 07:56 . 2009-04-13 11:10 -------- d-----w- c:\program files\Google

2010-05-11 06:47 . 2009-04-04 07:16 -------- d-----w- c:\program files\Java

2010-05-05 07:23 . 2010-05-05 07:23 -------- d-----w- c:\windows\Fonts\Fonts

2010-05-05 07:03 . 2009-04-04 15:22 -------- d-----w- c:\users\Eddy\AppData\Roaming\uTorrent

2010-05-04 05:59 . 2010-06-09 05:44 916480 ----a-w- c:\windows\system32\wininet.dll

2010-05-04 05:55 . 2010-06-09 05:44 71680 ----a-w- c:\windows\system32\iesetup.dll

2010-05-04 05:55 . 2010-06-09 05:44 109056 ----a-w- c:\windows\system32\iesysprep.dll

2010-05-04 04:31 . 2010-06-09 05:44 133632 ----a-w- c:\windows\system32\ieUnatt.exe

2010-05-03 10:23 . 2010-05-03 10:23 -------- d-----w- c:\program files\Conduit

2010-05-01 14:13 . 2010-06-09 05:44 2037248 ----a-w- c:\windows\system32\win32k.sys

2010-05-01 06:36 . 2010-02-22 10:45 7592 ----a-w- c:\users\Eddy\AppData\Local\d3d9caps.dat

2010-04-28 12:53 . 2010-04-28 12:55 3974440 ----a-w- c:\windows\system32\AdvrCntr3.dll

2010-04-27 09:40 . 2010-05-20 12:00 16384 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\MTPC-MTTG\Syncfusion.Tools.Base.dll

2010-04-26 14:39 . 2010-05-20 12:00 24576 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\SystemInfoLib.dll

2010-04-26 14:39 . 2010-05-20 12:00 20480 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\SystemInfo.exe

2010-04-26 14:39 . 2010-05-20 12:00 11264 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\PersonalCode.dll

2010-04-26 14:39 . 2010-05-20 12:00 61440 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\MultitaxUtilities.dll

2010-04-26 14:39 . 2010-05-20 12:00 40960 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\ITools.dll

2010-04-26 14:39 . 2010-05-20 12:00 24576 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\Updater.dll

2010-04-26 14:39 . 2010-05-20 12:00 1511424 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\MultitaxStarter.exe

2010-04-26 14:39 . 2010-05-20 12:00 36864 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\ITools.dll

2010-04-26 14:39 . 2010-05-20 12:00 217088 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\ICSharpCode.SharpZipLib.dll

2010-04-26 14:39 . 2010-05-20 12:00 24576 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\ExceptionHandler.dll

2010-04-23 14:13 . 2010-05-26 05:47 2048 ----a-w- c:\windows\system32\tzres.dll

2010-04-22 11:36 . 2010-04-22 11:36 283648 ----a-w- c:\windows\uninst.exe

2010-04-16 16:43 . 2010-06-24 05:45 173056 ----a-w- c:\windows\AppPatch\AcXtrnal.dll

2010-04-16 16:43 . 2010-06-24 05:45 458752 ----a-w- c:\windows\AppPatch\AcSpecfc.dll

2010-04-16 16:43 . 2010-06-24 05:45 542720 ----a-w- c:\windows\AppPatch\AcLayers.dll

2010-04-16 16:43 . 2010-06-24 05:45 2159616 ----a-w- c:\windows\AppPatch\AcGenral.dll

2010-04-05 17:01 . 2010-06-09 05:44 67072 ----a-w- c:\windows\system32\asycfilt.dll

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]

@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"

[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]

2009-04-13 12:47 121392 ----a-w- c:\acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-05-03 39408]

"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]

"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]

"Google Update"="c:\users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe" [2009-04-18 133104]

"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]

"CAHeadless"="c:\program files\Adobe\Elements Organizer 8.0\CAHeadless\ElementsAutoAnalyzer.exe" [2009-09-18 615808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"lxbkbmgr.exe"="c:\program files\Lexmark X1100 Series\lxbkbmgr.exe" [2008-02-28 74408]

"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-19 1008184]

"RtHDVCpl"="RtHDVCpl.exe" [2007-10-11 4702208]

"NVRaidService"="c:\windows\system32\nvraidservice.exe" [2007-12-07 196128]

"Lexmark X1100 Series"="c:\program files\Lexmark X1100 Series\lxbkbmgr.exe" [2008-02-28 74408]

"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]

"eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe" [2009-04-13 526896]

"AutoLockProcess"="c:\acer\Empowering Technology\eLock\autolockprocess\autolockprocess.exe" [2008-01-23 561152]

"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [2008-10-14 623992]

"Acer Empowering Technology Monitor"="c:\acer\Empowering Technology\SysMonitor.exe" [2006-12-25 319488]

"beid"="c:\program files\Belgium Identity Card\beid35gui.exe" [2009-02-02 2035712]

"AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]

"Skytel"="Skytel.exe" [2007-10-11 1826816]

"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-03-18 207360]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]

"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-03-29 1086856]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-03-17 421888]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-06-15 141624]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]

"BDAgent"="c:\program files\BitDefender\BitDefender 2010\bdagent.exe" [2010-06-26 1123360]

"BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2010\IEShow.exe" [2009-10-19 71152]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2008-5-30 113664]

Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe [2007-12-6 535336]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]

"NoResolveTrack"= 1 (0x1)

"NoFileAssociate"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

@="Service"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]

"Google Update"="c:\users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe" /c

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]

"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]

"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]

"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]

"VistaSp2"=hex(:1c,90,67,b4,0b,44,ca,01

R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-05-16 136176]

R3 Arrakis3;BitDefender Arrakis-server;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe [2009-10-19 183880]

R3 WSVD;WSVD;c:\windows\system32\drivers\WSVD.sys [2007-12-16 75776]

R4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2008-07-11 47128]

R4 RsFx0102;RsFx0102 Driver;c:\windows\system32\DRIVERS\RsFx0102.sys [2008-07-10 242712]

R4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2008-07-11 369688]

S0 eLock2BurnerLockDriver;Disk Performance Monitor Filter Driver;c:\windows\system32\DRIVERS\eLock2BurnerLockDriver.sys [2008-01-10 22048]

S1 archlp;archlp;c:\windows\system32\drivers\archlp.sys [2008-01-29 11392]

S1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver;c:\windows\system32\DRIVERS\BdfNdisf6.sys [2010-06-26 72784]

S2 a2free;a-squared Free Service;c:\program files\a-squared Free\a2service.exe [2010-06-17 1872320]

S2 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7;c:\program files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe [2008-09-16 169312]

S2 BDVEDISK;BDVEDISK;c:\program files\BitDefender\BitDefender 2010\bdvedisk.sys [2010-06-26 85128]

S2 eLock2FSCTLDriver;eLock2FSCTLDriver;c:\windows\system32\DRIVERS\eLock2FSCTLDriver.sys [2008-01-23 86048]

S2 lxbk_device;lxbk_device;c:\windows\system32\lxbkcoms.exe [2008-02-19 537256]

S3 BDFM;BDFM;c:\windows\system32\DRIVERS\bdfm.sys [2010-02-03 153448]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

bdx REG_MULTI_SZ scan

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs

UxTuneUp

.

Inhoud van de 'Gedeelde Taken' map

2010-07-02 c:\windows\Tasks\1-klik Onderhoud.job

- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2009-04-27 13:51]

2010-07-02 c:\windows\Tasks\Google Software Updater.job

- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-13 08:46]

2010-07-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-05-16 07:54]

2010-07-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-05-16 07:54]

2010-06-30 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-786010562-3885121150-2963765948-1000Core.job

- c:\users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe [2009-04-18 14:49]

2010-07-02 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-786010562-3885121150-2963765948-1000UA.job

- c:\users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe [2009-04-18 14:49]

2010-07-02 c:\windows\Tasks\User_Feed_Synchronization-{4D4AA6C7-C1FB-4CD5-83A3-F10056D36B3F}.job

- c:\windows\system32\msfeedssync.exe [2010-06-09 04:30]

.

------- Bijkomende Scan -------

.

uStart Page = hxxp://mystart.incredimail.com/

uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7

uDefault_Search_URL = hxxp://www.google.com/ie

mStart Page = hxxp://nl.intl.acer.yahoo.com

uInternet Settings,ProxyOverride = *.local

uSearchAssistant = hxxp://www.google.com/ie

uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200

IE: Add to Windows &Live Favorites - Welcome to Windows Live

IE: Append to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

IE: Convert link target to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

IE: Convert link target to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

IE: Convert selected links to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

IE: Convert selected links to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

IE: Convert selection to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

IE: Convert selection to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

IE: Convert to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html

DPF: {254AA86E-5655-4518-AA87-185D7CC41801} - hxxps://secure.logmeinrescue.com/NL/TechConsole/x86/RescueControl.cab

DPF: {3D3B42C2-11BF-4732-A304-A01384B70D68} - hxxp://picasaweb.google.be/s/v/59.20/uploader2.cab

DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game09.zylom.com/activex/zylomgamesplayer.cab

.

------- Bestandsassociaties -------

.

.txt=

.

- - - - ORPHANS VERWIJDERD - - - -

WebBrowser-{3AD798D0-4642-4C55-BC14-CFE7DD19E0D1} - (no file)

AddRemove-3D Shadow by Lokas Software - c:\windows\AWuninstall.exe Software\Lokas Ltd\3D Shadow

AddRemove-OggDS - c:\windows\system32\OggDSuninst.exe

**************************************************************************

scannen van verborgen processen ...

scannen van verborgen autostart items ...

scannen van verborgen bestanden ...

Scan succesvol afgerond

verborgen bestanden:

**************************************************************************

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

[HKEY_USERS\S-1-5-21-786010562-3885121150-2963765948-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{BD04728F-9192-6B05-B051-4594A84D0BF9}*]

"hakmfkdlbpeomjbn"=hex:6a,61,65,70,6c,66,6e,65,67,6e,6a,6a,69,64,62,63,6b,66,

63,6c,00,07

"iaincidjhffejbbbdd"=hex:6a,61,65,70,6c,66,6e,65,67,6e,6a,6a,69,64,62,63,6b,66,

63,6c,00,08

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

Voltooingstijd: 2010-07-02 09:22:47

ComboFix-quarantined-files.txt 2010-07-02 07:22

ComboFix2.txt 2010-04-29 15:42

Pre-Run: 72.367.013.888 bytes beschikbaar

Post-Run: 72.130.285.568 bytes beschikbaar

- - End Of File - - B5D0C053A227EE23E29FC45E15F6DE5A

De log van Hijjackthis

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 9:23:26, on 2/07/2010

Platform: Windows Vista SP2 (WinNT 6.00.1906)

MSIE: Internet Explorer v8.00 (8.00.6001.18928)

Boot mode: Normal

Running processes:

C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe

C:\Windows\system32\Dwm.exe

C:\Windows\system32\taskeng.exe

C:\Program Files\Lexmark X1100 Series\LXBKbmgr.exe

C:\Windows\RtHDVCpl.exe

C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe

C:\Windows\System32\nvraidservice.exe

C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe

C:\Acer\Empowering Technology\eLock\autolockprocess\AutoLockProcess.exe

C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe

C:\Acer\Empowering Technology\SysMonitor.exe

C:\Program Files\Belgium Identity Card\beid35gui.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Windows\ehome\ehtray.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Windows\ehome\ehmsas.exe

C:\Users\Eddy\AppData\Local\Google\Update\1.2.183.29\GoogleCrashHandler.exe

C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE

C:\Acer\Empowering Technology\eDataSecurity\x86\MsnVane.exe

C:\Acer\Empowering Technology\eDataSecurity\x86\eDSDTS.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\Program Files\IncrediMail\Bin\IncMail.exe

C:\Program Files\IncrediMail\Bin\ImApp.exe

C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe

C:\Windows\system32\conime.exe

C:\scan\CF18810.cfxxe

C:\scan\mbr.cfxxe

C:\Windows\system32\SearchFilterHost.exe

C:\Windows\explorer.exe