ogg directshow filter

kape · 3 juli 2010

Kan je ons eens duidelijk maken welke antivirusscanner je nu actief gebruikt ?

Want er komen maar meer en meer gegevens opduiken over een pakket verschillende scanners :

ASquared, Kaspersky IS, Norton IS, ESET/Nod32, Bitdefender, Windows Live One Care

... een beetje veel om goed te zijn

edpo · 4 juli 2010

Ik gebruik alleen Bitdefender.... Norton is van mijn systeem weg, ik gebruikte dit vroeger. van die andere, kapersky heb ik nog nooit gebruikt.ASquared, heb ik ooit eens gebruikt om een scan te doen maar is ook niet meer op mijn systeem.

kweezie wabbit · 5 juli 2010

Start Hijackthis op. Ben je gebruiker van Vista kies dan voor “Run as administrator" of "Uitvoeren als administrator". Selecteer “Do a system scan only”. Selecteer alleen de items die hieronder zijn genoemd:

O16 - DPF: {44990B00-3C9D-426D-81DF-AAB636FA4345} - https://www-secure.symantec.com/tech...bs/tgctlcm.cab

O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab

Klik op 'Fix checked' om de items te verwijderen.

Open een kladblokbestand.

Kopieer en plak daarin de onderstaande vetgedrukte tekst.

Folder::

c:\program files\ESET

c:\program files\Common Files\Symantec Shared

c:\program files\a-squared Free

Registry::

[-HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]

[-HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]

Sla dit bestand op je bureaublad op als CFScript.txt.

Sleep CFScript.txt in ComboFix.exe

Dit zal ComboFix doen herstarten. Start opnieuw op als dat gevraagd wordt.

Post na herstart de inhoud van de Combofix.txt in je volgende bericht samen met een nieuw hijackthis logje.

edpo · 5 juli 2010

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 20:08:06, on 5/07/2010

Platform: Windows Vista SP2 (WinNT 6.00.1906)

MSIE: Internet Explorer v8.00 (8.00.6001.18928)

Boot mode: Normal

Running processes:

C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe

C:\Windows\system32\Dwm.exe

C:\Windows\system32\taskeng.exe

C:\Program Files\Lexmark X1100 Series\LXBKbmgr.exe

C:\Windows\RtHDVCpl.exe

C:\Windows\System32\nvraidservice.exe

C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe

C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe

C:\Acer\Empowering Technology\eLock\autolockprocess\AutoLockProcess.exe

C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe

C:\Acer\Empowering Technology\SysMonitor.exe

C:\Program Files\Belgium Identity Card\beid35gui.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Windows\ehome\ehtray.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Windows\ehome\ehmsas.exe

C:\Acer\Empowering Technology\eDataSecurity\x86\eDSDTS.exe

C:\Users\Eddy\AppData\Local\Google\Update\1.2.183.29\GoogleCrashHandler.exe

C:\Acer\Empowering Technology\ACER.EMPOWERING.FRAMEWORK.SUPERVISOR.EXE

C:\Acer\Empowering Technology\eDataSecurity\x86\MsnVane.exe

C:\Program Files\BitDefender\BitDefender 2010\seccenter.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\Windows\system32\conime.exe

C:\Windows\Explorer.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Program Files\Avant Browser\avant.exe

F:\virusprog\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll

O3 - Toolbar: &Egis Option Pack - {312105C4-2E13-4E10-AF72-F9D79BA077E6} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDsWebmailtb.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2010\IEToolbar.dll

O4 - HKLM\..\Run: [lxbkbmgr.exe] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"

O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe

O4 - HKLM\..\Run: [NVRaidService] C:\Windows\system32\nvraidservice.exe

O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"

O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe

O4 - HKLM\..\Run: [AutoLockProcess] C:\Acer\Empowering Technology\eLock\autolockprocess\autolockprocess.exe

O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"

O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe

O4 - HKLM\..\Run: [beid] "C:\Program Files\Belgium Identity Card\beid35gui.exe" /startup

O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin

O4 - HKLM\..\Run: [skytel] Skytel.exe

O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [bDAgent] "C:\Program Files\BitDefender\BitDefender 2010\bdagent.exe"

O4 - HKLM\..\Run: [bitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2010\IEShow.exe"

O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe

O4 - HKCU\..\Run: [Google Update] "C:\Users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe" /c

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

O4 - HKCU\..\Run: [CAHeadless] C:\Program Files\Adobe\Elements Organizer 8.0\CAHeadless\ElementsAutoAnalyzer.exe

O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

O4 - Global Startup: Empowering Technology Launcher.lnk = C:\Acer\Empowering Technology\eAPLauncher.exe

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200

O8 - Extra context menu item: Add to Windows &Live Favorites - Welcome to Windows Live

O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)

O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\Program Files\OFFICE11\REFIEBAR.DLL

O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.6.cab

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe

O23 - Service: Adobe Active File Monitor V7 (AdobeActiveFileMonitor7.0) - Adobe Systems Incorporated - C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe

O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: BitDefender Arrakis-server (Arrakis3) - BitDefender S.R.L. Antivirus software - BitDefender - The future of security now! - C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe

O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe

O23 - Service: eLock Service (eLockService) - Acer Inc. - C:\Acer\Empowering Technology\eLock\Service\eLockServ.exe

O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe

O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: BitDefender Desktop-updateservice (LIVESRV) - BitDefender S.R.L. - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe

O23 - Service: LogMeIn Rescue (c37e8bc0-fee3-400a-803c-3b5fdbaa6ae3) (LMIRescue_c37e8bc0-fee3-400a-803c-3b5fdbaa6ae3) - Unknown owner - C:\Users\Eddy\AppData\Local\Temp\LMI986C.tmp\LMI_Rescue_srv.exe (file missing)

O23 - Service: lxbk_device - - C:\Windows\system32\lxbkcoms.exe

O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe

O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe

O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2010\vsserv.exe

--

End of file - 13057 bytes

COMBOFIX log

ComboFix 10-07-01.02 - Eddy 05/07/2010 19:41:30.4.2 - x86

Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.32.1043.18.3071.1697 [GMT 2:00]

Gestart vanuit: c:\users\Eddy\Desktop\scan.exe

gebruikte Opdracht switches :: f:\virusprog\cfscript.txt

AV: Kaspersky Internet Security *On-access scanning enabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}

AV: Norton Internet Security *On-access scanning enabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8}

AV: Windows Live OneCare *On-access scanning disabled* (Updated) {427ADFC3-B354-4A51-BE34-A9D4218E45C4}

FW: Kaspersky Internet Security *enabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}

FW: Norton Internet Security *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}

FW: Windows Live OneCare - Firewall *disabled* {A3899D22-27E6-4A7E-AE4E-2C106646DAAB}

SP: Kaspersky Internet Security *enabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}

SP: Norton Internet Security *enabled* (Updated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A}

SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

SP: Windows Live OneCare *disabled* (Updated) {CC7E50BA-BA8C-4DDE-B5AC-EA53BC38D01B}

* Aanwezig AV is actief

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\program files\a-squared Free

c:\program files\a-squared Free\a2mor.dll

c:\program files\a-squared Free\license_de.rtf

c:\program files\a-squared Free\license_en.rtf

c:\program files\a-squared Free\Logs\a-squared.db3

c:\program files\a-squared Free\Signatures\T3sigs.vdb

c:\program files\a-squared Free\t3.dll

c:\program files\a-squared Free\vdbupdate.dll

c:\program files\Common Files\Symantec Shared

c:\program files\Common Files\Symantec Shared\CCPD-LC\ez_log.html

c:\program files\Common Files\Symantec Shared\CCPD-LC\symlcrst.dll

c:\program files\Common Files\Symantec Shared\COH\coh.cache

c:\program files\Common Files\Symantec Shared\COH\COH32.exe

c:\program files\Common Files\Symantec Shared\COH\COH64.exe

c:\program files\Common Files\Symantec Shared\COH\COHClean.dll

c:\program files\Common Files\Symantec Shared\COH\sH0003.dll

c:\program files\Common Files\Symantec Shared\COH\sH0007.dll

.

---- Voorgaande Run -------

.

c:\users\Eddy\AppData\Local\Temp\LMI986C.tmp\LMIRhook.000.dll

c:\users\Eddy\AppData\Local\Temp\LMI986C.tmp\rahook.dll

c:\windows\system32\tmp.reg

.

(((((((((((((((((((( Bestanden Gemaakt van 2010-06-05 to 2010-07-05 ))))))))))))))))))))))))))))))

.

2010-07-05 17:57 . 2010-07-05 17:57 -------- d-----w- c:\users\Public\AppData\Local\temp

2010-07-05 17:57 . 2010-07-05 17:57 -------- d-----w- c:\users\Default\AppData\Local\temp

2010-07-05 17:04 . 2009-04-13 12:39 16384 ----a-w- C:\msimg32.dll

2010-07-05 14:59 . 2010-07-05 15:11 -------- d-----w- c:\programdata\BitDefender

2010-07-05 14:59 . 2010-07-05 15:00 -------- d-----w- c:\users\Eddy\AppData\Roaming\BitDefender

2010-07-05 14:58 . 2010-07-05 15:00 -------- d-----w- c:\program files\Common Files\BitDefender

2010-07-05 14:51 . 2010-07-05 14:53 227024 ----a-w- C:\BdUninstallTool2010.07.05-04.51.03.reg

2010-07-05 14:35 . 2010-07-05 17:58 -------- d-----w- c:\users\Eddy\AppData\Local\temp

2010-07-05 14:28 . 2010-07-05 14:35 -------- d-----w- C:\scan21652s

2010-07-05 14:24 . 2010-07-05 14:25 -------- d-----w- C:\C-o-m-b-o-F-i-x

2010-07-05 14:20 . 2010-07-05 14:20 35 ----a-w- c:\users\Eddy\AppData\Roaming\SetValue.bat

2010-07-05 14:20 . 2010-07-05 14:23 -------- d-----w- C:\SmitfraudFix

2010-07-05 14:15 . 2009-09-13 09:10 1872472 ----a-w- C:\S-m-i-t-f-r-a-u-d-F-i-x.exe

2010-07-05 14:15 . 2010-07-05 14:25 3726382 ----a-r- C:\C-o-m-b-o-F-i-x.exe

2010-07-02 07:05 . 2010-07-02 07:22 -------- d-----w- C:\scan

2010-06-26 15:18 . 2010-06-26 15:20 305297 ----a-w- C:\BdUninstallTool2010.06.26-05.18.28.reg

2010-06-26 08:16 . 2010-06-26 08:16 -------- d-----w- c:\program files\IncrediMail

2010-06-25 13:19 . 2010-06-25 13:19 -------- d-----w- c:\program files\Common Files\Java

2010-06-25 10:18 . 2009-05-18 11:17 26600 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys

2010-06-25 10:18 . 2008-04-17 10:12 107368 ----a-w- c:\windows\system32\GEARAspi.dll

2010-06-25 10:17 . 2010-06-25 10:17 -------- d-----w- c:\program files\iPod

2010-06-25 10:17 . 2010-06-25 10:18 -------- d-----w- c:\programdata\{429CAD59-35B1-4DBC-BB6D-1DB246563521}

2010-06-25 10:17 . 2010-06-25 10:18 -------- d-----w- c:\program files\iTunes

2010-06-25 10:13 . 2010-06-25 10:13 -------- d-----w- c:\program files\Bonjour

2010-06-25 10:12 . 2010-06-25 10:12 72504 ----a-w- c:\programdata\Apple Computer\Installer Cache\iTunes 9.2.0.61\SetupAdmin.exe

2010-06-24 09:27 . 2010-06-24 09:27 -------- d-----w- c:\users\Eddy\AppData\Local\ReaJPEG

2010-06-24 08:45 . 2010-06-24 08:45 44544 ------w- c:\windows\AWuninstall.exe

2010-06-24 08:45 . 2010-06-24 08:45 -------- d-----w- c:\program files\Lokas

2010-06-24 07:29 . 2009-11-08 08:55 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll

2010-06-24 07:29 . 2009-11-08 08:55 49472 ----a-w- c:\windows\system32\netfxperf.dll

2010-06-24 07:29 . 2009-11-08 08:55 297808 ----a-w- c:\windows\system32\mscoree.dll

2010-06-24 07:29 . 2009-11-08 08:55 295264 ----a-w- c:\windows\system32\PresentationHost.exe

2010-06-24 07:29 . 2009-11-08 08:55 1130824 ----a-w- c:\windows\system32\dfshim.dll

2010-06-24 05:45 . 2010-04-16 16:43 28672 ----a-w- c:\windows\system32\Apphlpdm.dll

2010-06-24 05:45 . 2010-04-16 14:39 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll

2010-06-20 19:24 . 2010-06-20 19:24 -------- d-----w- c:\programdata\PhotoMail

2010-06-20 19:24 . 2010-06-20 19:24 -------- d-----w- c:\program files\PhotoMail Maker

2010-06-16 08:17 . 2010-06-16 08:17 -------- d-----w- c:\users\Eddy\AppData\Roaming\No Company Name

2010-06-16 07:56 . 2010-06-16 07:56 -------- d-----w- c:\programdata\eSellerate

2010-06-16 07:56 . 2010-06-16 13:55 -------- d-----w- c:\programdata\SmartSound Software Inc

2010-06-16 07:56 . 2010-06-16 07:56 -------- d-----w- c:\program files\SmartSound Software

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2010-07-05 15:18 . 2009-10-19 15:04 72784 ----a-w- c:\windows\system32\drivers\BdfNdisf6.sys

2010-07-05 14:59 . 2010-04-12 07:46 -------- d-----w- c:\program files\BitDefender

2010-07-05 14:23 . 2009-05-14 10:53 -------- d-----w- c:\programdata\Zylom

2010-07-05 14:20 . 2010-07-05 14:20 691 ----a-w- c:\users\Eddy\AppData\Roaming\GetValue.vbs

2010-06-30 13:57 . 2009-12-03 09:16 -------- d-----w- c:\programdata\PrinterShare

2010-06-25 15:01 . 2009-06-12 16:01 -------- d-----w- c:\users\Eddy\AppData\Roaming\Apple Computer

2010-06-25 13:19 . 2010-05-11 06:47 411368 ----a-w- c:\windows\system32\deployJava1.dll

2010-06-25 10:17 . 2009-06-12 15:58 -------- d-----w- c:\program files\Common Files\Apple

2010-06-24 09:28 . 2010-04-24 13:24 -------- d-----w- c:\program files\WatermarkSoftware

2010-06-18 14:55 . 2006-11-02 16:11 735382 ----a-w- c:\windows\system32\perfh013.dat

2010-06-18 14:55 . 2006-11-02 16:11 152096 ----a-w- c:\windows\system32\perfc013.dat

2010-06-17 06:45 . 2007-12-06 07:16 -------- d--h--w- c:\program files\InstallShield Installation Information

2010-06-16 09:50 . 2009-07-05 14:42 -------- d-----w- c:\users\Eddy\AppData\Roaming\Download Manager

2010-06-16 08:45 . 2008-05-27 14:31 108712 ----a-w- c:\users\Eddy\AppData\Local\GDIPFONTCACHEV1.DAT

2010-06-16 08:17 . 2009-04-04 11:28 -------- d-----w- c:\programdata\FLEXnet

2010-06-16 07:54 . 2009-07-14 12:54 -------- d-----w- c:\program files\Common Files\PX Storage Engine

2010-06-16 07:54 . 2007-12-06 07:59 -------- d-----w- c:\program files\Common Files\Adobe

2010-06-09 08:17 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail

2010-06-09 07:31 . 2007-12-06 07:20 -------- d-----w- c:\programdata\Microsoft Help

2010-06-05 08:21 . 2010-06-05 08:21 -------- d-----w- c:\program files\Project1

2010-06-05 08:21 . 2010-06-05 08:05 249856 ------w- c:\windows\Setup1.exe

2010-06-05 08:21 . 2010-06-05 08:05 73216 ----a-w- c:\windows\ST6UNST.EXE

2010-06-05 08:09 . 2010-06-05 08:09 -------- d-----w- c:\program files\LottoPro 2009

2010-06-04 07:35 . 2010-03-17 16:58 -------- d-----w- c:\users\Eddy\AppData\Roaming\OxelonMC

2010-06-04 06:55 . 2008-05-28 09:18 -------- d-----w- c:\program files\Microsoft Silverlight

2010-06-04 06:38 . 2010-06-04 06:16 -------- d-----w- c:\program files\NVIDIA Corporation

2010-06-04 06:31 . 2010-06-04 06:31 34805 ----a-w- c:\programdata\nvModes.dat

2010-06-04 06:31 . 2007-12-06 07:12 -------- d-----w- c:\programdata\NVIDIA

2010-06-03 17:25 . 2010-06-03 17:25 -------- d-----w- c:\program files\Uniblue

2010-06-01 05:49 . 2010-06-01 05:49 4 ----a-w- c:\windows\system32\aspdict-en.dat

2010-06-01 05:49 . 2010-06-01 05:49 16 ----a-w- c:\windows\system32\asdict.dat

2010-05-29 09:40 . 2010-05-29 09:40 -------- d-----w- c:\users\Eddy\AppData\Roaming\JLC's Software

2010-05-29 09:39 . 2010-05-29 09:39 -------- d-----w- c:\program files\JLC's Software

2010-05-26 17:06 . 2010-06-09 05:44 34304 ----a-w- c:\windows\system32\atmlib.dll

2010-05-26 14:47 . 2010-06-09 05:44 289792 ----a-w- c:\windows\system32\atmfd.dll

2010-05-26 07:46 . 2009-04-04 09:27 -------- d-----w- c:\program files\Microsoft

2010-05-21 12:14 . 2010-04-11 13:37 221568 ------w- c:\windows\system32\MpSigStub.exe

2010-05-20 11:57 . 2009-05-24 08:57 -------- d-----w- c:\users\Eddy\AppData\Roaming\Test-A

2010-05-18 14:35 . 2010-05-18 14:35 91424 ----a-w- c:\windows\system32\dnssd.dll

2010-05-18 14:35 . 2010-05-18 14:35 197920 ----a-w- c:\windows\system32\dnssdX.dll

2010-05-18 14:35 . 2010-05-18 14:35 107808 ----a-w- c:\windows\system32\dns-sd.exe

2010-05-16 07:56 . 2009-04-13 11:10 -------- d-----w- c:\program files\Google

2010-05-11 06:47 . 2009-04-04 07:16 -------- d-----w- c:\program files\Java

2010-05-05 07:23 . 2010-05-05 07:23 -------- d-----w- c:\windows\Fonts\Fonts

2010-05-04 05:59 . 2010-06-09 05:44 916480 ----a-w- c:\windows\system32\wininet.dll

2010-05-04 05:55 . 2010-06-09 05:44 71680 ----a-w- c:\windows\system32\iesetup.dll

2010-05-04 05:55 . 2010-06-09 05:44 109056 ----a-w- c:\windows\system32\iesysprep.dll

2010-05-04 04:31 . 2010-06-09 05:44 133632 ----a-w- c:\windows\system32\ieUnatt.exe

2010-05-01 14:13 . 2010-06-09 05:44 2037248 ----a-w- c:\windows\system32\win32k.sys

2010-05-01 06:36 . 2010-02-22 10:45 7592 ----a-w- c:\users\Eddy\AppData\Local\d3d9caps.dat

2010-04-28 12:53 . 2010-04-28 12:55 3974440 ----a-w- c:\windows\system32\AdvrCntr3.dll

2010-04-27 09:40 . 2010-05-20 12:00 16384 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\MTPC-MTTG\Syncfusion.Tools.Base.dll

2010-04-26 14:39 . 2010-05-20 12:00 24576 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\SystemInfoLib.dll

2010-04-26 14:39 . 2010-05-20 12:00 20480 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\SystemInfo.exe

2010-04-26 14:39 . 2010-05-20 12:00 11264 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\PersonalCode.dll

2010-04-26 14:39 . 2010-05-20 12:00 61440 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\MultitaxUtilities.dll

2010-04-26 14:39 . 2010-05-20 12:00 40960 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\SystemInfo\ITools.dll

2010-04-26 14:39 . 2010-05-20 12:00 24576 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\Updater.dll

2010-04-26 14:39 . 2010-05-20 12:00 1511424 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\MultitaxStarter.exe

2010-04-26 14:39 . 2010-05-20 12:00 36864 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\ITools.dll

2010-04-26 14:39 . 2010-05-20 12:00 217088 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\ICSharpCode.SharpZipLib.dll

2010-04-26 14:39 . 2010-05-20 12:00 24576 ----a-w- c:\users\Eddy\AppData\Roaming\Test-A\Multitax2010\2010\Starter\ExceptionHandler.dll

2010-04-23 14:13 . 2010-05-26 05:47 2048 ----a-w- c:\windows\system32\tzres.dll

2010-04-22 11:36 . 2010-04-22 11:36 283648 ----a-w- c:\windows\uninst.exe

2010-04-16 16:43 . 2010-06-24 05:45 173056 ----a-w- c:\windows\AppPatch\AcXtrnal.dll

2010-04-16 16:43 . 2010-06-24 05:45 458752 ----a-w- c:\windows\AppPatch\AcSpecfc.dll

2010-04-16 16:43 . 2010-06-24 05:45 542720 ----a-w- c:\windows\AppPatch\AcLayers.dll

2010-04-16 16:43 . 2010-06-24 05:45 2159616 ----a-w- c:\windows\AppPatch\AcGenral.dll

.

((((((((((((((((((((((((((((( SnapShot@2010-07-02_07.18.28 )))))))))))))))))))))))))))))))))))))))))

.

+ 2007-12-06 07:12 . 2010-07-05 17:06 93314 c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin

+ 2006-11-02 13:05 . 2010-07-05 17:07 84424 c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin

+ 2008-05-27 14:32 . 2010-07-05 17:07 18840 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-786010562-3885121150-2963765948-1000_UserData.bin

- 2009-10-19 14:04 . 2009-10-19 14:04 72200 c:\windows\System32\DriverStore\FileRepository\netlwf.inf_6ec54ecb\BdfNdisf6.sys

+ 2009-10-19 15:04 . 2009-10-19 15:04 72200 c:\windows\System32\DriverStore\FileRepository\netlwf.inf_6ec54ecb\BdfNdisf6.sys

+ 2010-01-19 17:32 . 2010-01-19 17:32 85128 c:\windows\System32\drivers\BDVEDISK.sys

+ 2010-02-10 13:26 . 2010-07-05 12:30 16384 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\Low\index.dat

- 2010-02-10 13:26 . 2010-06-28 09:33 16384 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\Low\index.dat

+ 2008-05-27 14:28 . 2010-07-05 17:04 32768 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat

- 2008-05-27 14:28 . 2010-07-02 06:29 32768 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat

+ 2010-02-10 13:26 . 2010-07-05 12:30 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\index.dat

- 2010-02-10 13:26 . 2010-06-28 09:33 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\index.dat

+ 2008-05-27 14:28 . 2010-07-05 17:04 65536 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat

- 2008-05-27 14:28 . 2010-07-02 06:29 65536 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat

- 2010-02-10 13:26 . 2010-06-28 09:33 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\Low\History.IE5\index.dat

+ 2010-02-10 13:26 . 2010-07-05 12:30 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\Low\History.IE5\index.dat

+ 2008-05-27 14:28 . 2010-07-05 17:04 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat

- 2008-05-27 14:28 . 2010-07-02 06:29 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat

- 2009-07-05 08:24 . 2010-07-02 05:23 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat

+ 2009-07-05 08:24 . 2010-07-05 17:04 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat

+ 2008-05-27 15:16 . 2010-07-05 17:05 40960 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\rtdrvmon.exe

- 2008-05-27 15:16 . 2010-07-02 05:24 40960 c:\windows\ServiceProfiles\LocalService\AppData\Local\Temp\rtdrvmon.exe

+ 2009-07-05 08:24 . 2010-07-05 17:04 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat

- 2009-07-05 08:24 . 2010-07-02 05:23 32768 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat

+ 2009-07-05 08:24 . 2010-07-05 17:04 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat

- 2009-07-05 08:24 . 2010-07-02 05:23 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat

+ 2010-07-05 15:01 . 2010-07-05 15:01 57344 c:\windows\Installer\{0DFF6117-CBBC-4F5C-9C57-6936644F10D4}\texticon.exe

+ 2010-07-05 15:01 . 2010-07-05 15:01 32768 c:\windows\Installer\{0DFF6117-CBBC-4F5C-9C57-6936644F10D4}\maintenance_icon.exe

+ 2010-07-05 15:01 . 2010-07-05 15:01 61440 c:\windows\Installer\{0DFF6117-CBBC-4F5C-9C57-6936644F10D4}\helpicon.exe

- 2006-11-02 10:25 . 2010-06-26 16:17 86016 c:\windows\inf\infstor.dat

+ 2006-11-02 10:25 . 2010-07-05 15:01 86016 c:\windows\inf\infstor.dat

+ 2006-11-02 10:25 . 2010-07-05 15:01 51200 c:\windows\inf\infpub.dat

- 2006-11-02 10:25 . 2010-06-26 16:17 51200 c:\windows\inf\infpub.dat

+ 2010-07-05 17:04 . 2010-07-05 17:04 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat

- 2010-07-02 05:23 . 2010-07-02 05:23 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat

- 2010-07-02 05:23 . 2010-07-02 05:23 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

+ 2010-07-05 17:04 . 2010-07-05 17:04 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

- 2007-01-31 11:50 . 2007-01-31 11:50 913408 c:\windows\System32\xreglib.dll

+ 2007-01-31 12:50 . 2007-01-31 12:50 913408 c:\windows\System32\xreglib.dll

- 2009-01-15 10:45 . 2009-01-15 10:45 181248 c:\windows\System32\txmlutil.dll

+ 2009-01-15 11:45 . 2009-01-15 11:45 181248 c:\windows\System32\txmlutil.dll

- 2010-02-03 10:56 . 2010-02-03 10:56 106464 c:\windows\System32\drivers\bdhv.sys

+ 2010-02-03 11:56 . 2010-02-03 11:56 106464 c:\windows\System32\drivers\bdhv.sys

- 2009-07-24 09:26 . 2010-06-26 16:25 291352 c:\windows\System32\drivers\bdfsfltr.sys

+ 2010-02-22 12:58 . 2010-02-22 12:58 291352 c:\windows\System32\drivers\bdfsfltr.sys

- 2010-02-03 10:57 . 2010-02-03 10:57 153448 c:\windows\System32\drivers\bdfm.sys

+ 2010-02-03 11:57 . 2010-02-03 11:57 153448 c:\windows\System32\drivers\bdfm.sys

- 2009-05-01 17:33 . 2010-06-30 14:08 245760 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat

+ 2009-05-01 17:33 . 2010-07-05 13:44 245760 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat

+ 2007-04-11 09:11 . 2007-04-11 09:11 511328 c:\windows\System32\capicom.dll

- 2007-04-11 08:11 . 2007-04-11 08:11 511328 c:\windows\System32\capicom.dll

+ 2010-07-05 15:01 . 2010-07-05 15:01 336782 c:\windows\Installer\{0DFF6117-CBBC-4F5C-9C57-6936644F10D4}\register_icon.exe

- 2006-11-02 10:25 . 2010-06-26 16:17 143360 c:\windows\inf\infstrng.dat

+ 2006-11-02 10:25 . 2010-07-05 15:01 143360 c:\windows\inf\infstrng.dat

+ 2010-07-05 15:01 . 2010-07-05 15:01 14780416 c:\windows\Installer\4a26a.msi

.

-- Snapshot teruggezet naar huidige datum --

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]

@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"

[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]

2009-04-13 12:47 121392 ----a-w- c:\acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-05-03 39408]

"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]

"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]

"Google Update"="c:\users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe" [2009-04-18 133104]

"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]

"CAHeadless"="c:\program files\Adobe\Elements Organizer 8.0\CAHeadless\ElementsAutoAnalyzer.exe" [2009-09-18 615808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"lxbkbmgr.exe"="c:\program files\Lexmark X1100 Series\lxbkbmgr.exe" [2008-02-28 74408]

"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-19 1008184]

"RtHDVCpl"="RtHDVCpl.exe" [2007-10-11 4702208]

"NVRaidService"="c:\windows\system32\nvraidservice.exe" [2007-12-07 196128]

"Lexmark X1100 Series"="c:\program files\Lexmark X1100 Series\lxbkbmgr.exe" [2008-02-28 74408]

"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]

"eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe" [2009-04-13 526896]

"AutoLockProcess"="c:\acer\Empowering Technology\eLock\autolockprocess\autolockprocess.exe" [2008-01-23 561152]

"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [2008-10-14 623992]

"Acer Empowering Technology Monitor"="c:\acer\Empowering Technology\SysMonitor.exe" [2006-12-25 319488]

"beid"="c:\program files\Belgium Identity Card\beid35gui.exe" [2009-02-02 2035712]

"AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]

"Skytel"="Skytel.exe" [2007-10-11 1826816]

"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-03-18 207360]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]

"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-03-29 1086856]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-06-15 141624]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]

"BDAgent"="c:\program files\BitDefender\BitDefender 2010\bdagent.exe" [2010-03-18 1123360]

"BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2010\IEShow.exe" [2009-10-19 71152]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2008-5-30 113664]

Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe [2007-12-6 535336]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]

"NoResolveTrack"= 1 (0x1)

"NoFileAssociate"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

@="Service"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]

"Google Update"="c:\users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe" /c

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]

"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]

"VistaSp2"=hex(:1c,90,67,b4,0b,44,ca,01

R2 gupdate;Google Update Service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-05-16 136176]

R2 LMIRescue_c37e8bc0-fee3-400a-803c-3b5fdbaa6ae3;LogMeIn Rescue (c37e8bc0-fee3-400a-803c-3b5fdbaa6ae3);c:\users\Eddy\AppData\Local\Temp\LMI986C.tmp\LMI_Rescue_srv.exe [x]

R3 Arrakis3;BitDefender Arrakis-server;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\arrakis3.exe [2009-10-19 183880]

R3 WSVD;WSVD;c:\windows\system32\drivers\WSVD.sys [2007-12-16 75776]

R4 MSSQLServerADHelper100;SQL Active Directory Helper Service;c:\program files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2008-07-11 47128]

R4 RsFx0102;RsFx0102 Driver;c:\windows\system32\DRIVERS\RsFx0102.sys [2008-07-10 242712]

R4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS);c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2008-07-11 369688]

S0 eLock2BurnerLockDriver;Disk Performance Monitor Filter Driver;c:\windows\system32\DRIVERS\eLock2BurnerLockDriver.sys [2008-01-10 22048]

S1 archlp;archlp;c:\windows\system32\drivers\archlp.sys [2008-01-29 11392]

S1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver;c:\windows\system32\DRIVERS\BdfNdisf6.sys [2010-07-05 72784]

S2 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7;c:\program files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe [2008-09-16 169312]

S2 BDVEDISK;BDVEDISK;c:\program files\BitDefender\BitDefender 2010\bdvedisk.sys [2010-01-19 85128]

S2 eLock2FSCTLDriver;eLock2FSCTLDriver;c:\windows\system32\DRIVERS\eLock2FSCTLDriver.sys [2008-01-23 86048]

S2 lxbk_device;lxbk_device;c:\windows\system32\lxbkcoms.exe [2008-02-19 537256]

S3 BDFM;BDFM;c:\windows\system32\DRIVERS\bdfm.sys [2010-02-03 153448]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

bdx REG_MULTI_SZ scan

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs

UxTuneUp

.

Inhoud van de 'Gedeelde Taken' map

2010-07-05 c:\windows\Tasks\1-klik Onderhoud.job

- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2009-04-27 13:51]

2010-07-05 c:\windows\Tasks\Google Software Updater.job

- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-13 08:46]

2010-07-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-05-16 07:54]

2010-07-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-05-16 07:54]

2010-07-05 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-786010562-3885121150-2963765948-1000Core.job

- c:\users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe [2009-04-18 14:49]

2010-07-05 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-786010562-3885121150-2963765948-1000UA.job

- c:\users\Eddy\AppData\Local\Google\Update\GoogleUpdate.exe [2009-04-18 14:49]

2010-07-05 c:\windows\Tasks\User_Feed_Synchronization-{4D4AA6C7-C1FB-4CD5-83A3-F10056D36B3F}.job

- c:\windows\system32\msfeedssync.exe [2010-06-09 04:30]

.

------- Bijkomende Scan -------

.

uInternet Settings,ProxyOverride = *.local

IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200

IE: Add to Windows &Live Favorites - Welcome to Windows Live

IE: Append to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

IE: Convert link target to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

IE: Convert link target to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

IE: Convert selected links to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

IE: Convert selected links to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

IE: Convert selection to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

IE: Convert selection to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

IE: Convert to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html

.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2010-07-05 19:57

Windows 6.0.6002 Service Pack 2 NTFS

scannen van verborgen processen ...

scannen van verborgen autostart items ...

scannen van verborgen bestanden ...

Scan succesvol afgerond

verborgen bestanden: 0

**************************************************************************

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

[HKEY_USERS\S-1-5-21-786010562-3885121150-2963765948-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{BD04728F-9192-6B05-B051-4594A84D0BF9}*]

"hakmfkdlbpeomjbn"=hex:6a,61,65,70,6c,66,6e,65,67,6e,6a,6a,69,64,62,63,6b,66,

63,6c,00,07

"iaincidjhffejbbbdd"=hex:6a,61,65,70,6c,66,6e,65,67,6e,6a,6a,69,64,62,63,6b,66,

63,6c,00,08

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

--------------------- DLLs Geladen Onder Lopende Processen ---------------------

- - - - - - - > 'Explorer.exe'(2884)

c:\acer\Empowering Technology\eDataSecurity\x86\eDSWinMailHook.dll

c:\acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll

c:\acer\Empowering Technology\eDataSecurity\x86\sysenv.dll

c:\windows\System32\netshell.dll

c:\windows\System32\npmproxy.dll

c:\windows\system32\Wlanapi.dll

c:\windows\system32\OneX.DLL

c:\windows\system32\eappcfg.dll

c:\windows\system32\mssprxy.dll

.

Voltooingstijd: 2010-07-05 20:06:26

ComboFix-quarantined-files.txt 2010-07-05 18:06

ComboFix2.txt 2010-07-03 10:20

ComboFix3.txt 2010-07-02 07:22

ComboFix4.txt 2010-04-29 15:42

Pre-Run: 72.725.180.416 bytes beschikbaar

Post-Run: 72.599.023.616 bytes beschikbaar

- - End Of File - - 5DAC0198F7993C22C93E68D0B76CC1D9

kweezie wabbit · 6 juli 2010

Ga naar Start – Uitvoeren/Zoekopdracht en tik in: sc stop "LogMeIn Rescue"

Druk op Enter.

Ga naar Start – Uitvoeren/Zoekopdracht en tik in: sc delete "LogMeIn Rescue"

Druk op Enter.

Start Hijackthis op. Ben je gebruiker van Vista kies dan voor “Run as administrator" of "Uitvoeren als administrator". Selecteer “Do a system scan only”. Selecteer alleen de items die hieronder zijn genoemd:

O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe (file missing)

Klik op 'Fix checked' om de items te verwijderen.

Kijk eens of er in c:\program files\ mappen staan van Kaspersky, Windows Live OneCare, Symantec of Norton?

Indien dit zo is, mag je die verwijderen en met CCleaner het register opruimen.

Daarna mag je nog dit uitvoeren.

Download DDS en bewaar het op je bureaublad.

Schakel programma's uit die scripts blokkeren, zoals je Antivirus

Dubbelklik dds.scr om de tool te starten.

Daarna zal DDS.txt openen.

Klik Yes voor de Optional Scan. Dit zal het bestand Attach.txt maken.

Kopieer en plak beide logs in je volgende post.

edpo · 6 juli 2010

Ik heb alles uitgevoerd zoals gevraagd. er was een Kaspersky map, de andere niet.

DDS log

DDS (Ver_10-03-17.01) - NTFSx86

Run by Eddy at 19:40:10,15 on di 06/07/2010

Internet Explorer: 8.0.6001.18928

Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.32.1043.18.3071.1651 [GMT 2:00]