sp2 en andere problemen

[kape]

Dan mag je dit nog eens uitvoeren (maar doe het ditmaal in veilige modus) :

Open een kladblokbestand.

Kopieer en plak daarin de onderstaande vetgedrukte tekst.

File::

c:\programdata\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\temporaryFolder\bases\as\pas4\ForDiff\base.keb.bat

Driver::

TfFsMon

TfSysMon

TfNetMon

FireFox::

FF - ProfilePath - c:\users\home\AppData\Roaming\Mozilla\Firefox\Profiles\2e1wqqg9.default\

FF - prefs.js: keyword.URL -

Sla dit bestand op je bureaublad op als CFScript.txt.

Sleep CFScript.txt in ComboFix.exe

Dit zal ComboFix doen herstarten. Start opnieuw op als dat gevraagd wordt.

En dan een nieuw logje graag ?

[daveEHV]

sorry voor de late reactie heb 6 keer opnieuw moeten opstarten omdat spybot problemen bleef geven in de veilige modus, nadat ik hem verwijderd had kon ik de CFScript gebruiken, heb weer de registry foutmelding gekregen en veel acces denied in de combofix, en mozilla doet het nog steeds niet,uiteindelijk is er weer een nieuw log uit gekomen;

ComboFix 10-06-29.03 - home 30-06-2010 19:38:46.7.2 - x86 MINIMAL

Gestart vanuit: c:\users\home\Desktop\ComboFix.exe

gebruikte Opdracht switches :: c:\users\home\Desktop\CFScript.txt

* Nieuw herstelpunt werd aangemaakt

FILE ::

"c:\programdata\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\temporaryFolder\bases\as\pas4\ForDiff\base.keb.bat"

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\programdata\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\temporaryFolder\bases\as\pas4\ForDiff\base.keb.bat

.

((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

-------\Legacy_TFFSMON

-------\Legacy_TFNETMON

-------\Legacy_TFSYSMON

-------\Service_TfFsMon

-------\Service_TfNetMon

-------\Service_TfSysMon

(((((((((((((((((((( Bestanden Gemaakt van 2010-05-28 to 2010-06-30 ))))))))))))))))))))))))))))))

.

2010-06-30 17:45 . 2010-06-30 17:50 -------- d-----w- c:\users\home\AppData\Local\temp

2010-06-30 17:45 . 2010-06-30 17:45 -------- d-----w- c:\users\Public\AppData\Local\temp

2010-06-30 17:45 . 2010-06-30 17:45 -------- d-----w- c:\users\Default\AppData\Local\temp

2010-06-30 16:03 . 2010-06-30 16:03 -------- d-----w- c:\users\home\AppData\Roaming\HPAppData

2010-06-30 10:28 . 2010-06-30 10:28 -------- d-----w- c:\program files\ok-s.com

2010-06-29 13:18 . 2010-06-30 17:22 -------- d-----w- c:\program files\Emsisoft Anti-Malware

2010-06-29 12:16 . 2010-06-29 12:16 -------- d-----w- c:\program files\CCleaner

2010-06-28 08:11 . 2010-06-28 08:11 -------- d-----w- c:\program files\Unlocker

2010-06-28 07:12 . 1998-12-02 08:11 143360 ----a-w- c:\windows\system32\vbuzip10.dll

2010-06-28 07:12 . 1998-06-17 23:00 89360 ----a-w- c:\windows\system32\Vb5db.dll

2010-06-28 06:24 . 2010-06-28 06:23 411368 ----a-w- c:\windows\system32\deployJava1.dll

2010-06-25 16:49 . 2010-06-25 16:49 -------- d-----w- c:\users\home\AppData\Local\Apps

2010-06-25 11:13 . 2009-07-14 17:45 445008 ----a-w- c:\windows\system32\drivers\Wdf01000.sys

2010-06-25 11:13 . 2009-07-14 17:45 38480 ----a-w- c:\windows\system32\drivers\WdfLdr.sys

2010-06-24 21:27 . 2010-06-24 21:27 -------- d-----w- c:\users\home\AppData\Roaming\FixIt

2010-06-24 20:10 . 2010-06-24 20:10 -------- d-----w- c:\users\home\AppData\Local\Adobe

2010-06-24 13:46 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2010-06-24 13:45 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys

2010-06-22 21:33 . 2009-11-08 08:55 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll

2010-06-22 21:33 . 2009-11-08 08:55 49472 ----a-w- c:\windows\system32\netfxperf.dll

2010-06-22 21:33 . 2009-11-08 08:55 297808 ----a-w- c:\windows\system32\mscoree.dll

2010-06-22 21:33 . 2009-11-08 08:55 295264 ----a-w- c:\windows\system32\PresentationHost.exe

2010-06-22 21:33 . 2009-11-08 08:55 1130824 ----a-w- c:\windows\system32\dfshim.dll

2010-06-22 21:03 . 2010-04-16 16:43 28672 ----a-w- c:\windows\system32\Apphlpdm.dll

2010-06-22 21:03 . 2010-04-16 14:39 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll

2010-06-22 11:54 . 2010-06-22 11:54 -------- d-----w- c:\users\home\AppData\Roaming\PC Suite

2010-06-21 03:07 . 2010-06-21 03:10 -------- d-----w- c:\program files\TweakNow RegCleaner

2010-06-21 03:07 . 2010-06-21 03:07 -------- d-----w- c:\users\home\AppData\Roaming\TweakNow RegCleaner

2010-06-21 02:52 . 2010-06-21 02:52 -------- d-----w- c:\program files\ToniArts

2010-06-21 01:44 . 2010-06-21 01:44 -------- d-----w- c:\users\home\AppData\Roaming\Auslogics

2010-06-21 01:43 . 2010-06-21 01:43 -------- d-----w- c:\program files\Auslogics

2010-06-20 22:14 . 2010-06-20 22:14 -------- d-----w- c:\programdata\PC Suite

2010-06-20 21:58 . 2010-06-20 21:58 -------- d-----w- c:\users\home\{50a2dd4a-1e00-4bdd-b72a-daf48ba322fc}

2010-06-20 21:50 . 2007-05-02 14:31 90624 ----a-w- c:\windows\system32\nmwcdcls.dll

2010-06-20 21:50 . 2007-09-17 13:53 21632 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys

2010-06-20 21:50 . 2010-06-20 21:50 -------- dc----w- c:\windows\system32\DRVSTORE

2010-06-20 21:48 . 2010-06-24 19:37 -------- d-----w- c:\windows\system32\Samsung_USB_Drivers

2010-06-20 21:47 . 2009-04-07 07:39 36608 ----a-w- c:\windows\system32\FsUsbExDisk.Sys

2010-06-20 21:47 . 2009-04-07 07:39 233472 ----a-w- c:\windows\system32\FsUsbExService.Exe

2010-06-20 21:47 . 2009-04-07 07:39 110592 ----a-w- c:\windows\system32\FsUsbExDevice.Dll

2010-06-20 21:46 . 2010-06-24 17:56 -------- d-----w- c:\users\home\AppData\Roaming\Samsung

2010-06-20 21:45 . 2010-06-20 21:45 -------- d-----w- c:\program files\MarkAny

2010-06-20 21:45 . 2010-06-20 21:50 -------- d-----w- c:\program files\PC Connectivity Solution

2010-06-20 21:42 . 2010-06-24 18:30 -------- d-----w- c:\program files\Samsung

2010-06-20 21:39 . 2010-06-20 21:39 -------- d-----w- c:\users\home\AppData\Local\Downloaded Installations

2010-06-13 17:37 . 2010-06-13 17:37 -------- d-----w- c:\program files\Microsoft.NET

2010-06-13 17:32 . 2010-06-13 17:32 -------- d-----r- C:\MSOCache

2010-06-10 23:13 . 2010-06-10 23:13 -------- d-----w- c:\program files\WinPcap

2010-06-10 23:07 . 2010-05-01 14:13 2037248 ----a-w- c:\windows\system32\win32k.sys

2010-06-09 16:57 . 2010-06-09 17:01 -------- d-----w- c:\program files\Windows Live Safety Center

2010-05-31 22:34 . 2004-01-25 16:18 217088 ----a-w- c:\windows\system32\yv12vfw.dll

2010-05-31 22:33 . 2009-05-29 21:37 205824 ----a-w- c:\windows\system32\xvidvfw.dll

2010-05-31 22:33 . 2009-05-29 21:31 881664 ----a-w- c:\windows\system32\xvidcore.dll

2010-05-31 22:33 . 2010-05-27 08:00 108032 ----a-w- c:\windows\system32\ff_vfw.dll

2010-05-31 22:33 . 2010-05-31 22:34 -------- d-----w- c:\program files\K-Lite Codec Pack

2010-05-31 22:11 . 2010-05-31 22:25 -------- d-----w- c:\program files\DAEMON Tools Toolbar

2010-05-31 22:11 . 2010-06-29 12:38 -------- d-----w- c:\program files\DAEMON Tools Lite

2010-05-31 19:32 . 2010-06-28 10:33 -------- d-----w- C:\OidView

2010-05-31 19:32 . 1998-09-01 06:44 1355776 ----a-w- c:\windows\system32\MSVBVM50.dll

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2010-06-30 17:51 . 2009-12-20 12:15 -------- d-----w- c:\programdata\Kaspersky Lab

2010-06-30 17:43 . 2009-02-28 14:33 666044 ----a-w- c:\windows\system32\perfh013.dat

2010-06-30 17:43 . 2009-02-28 14:33 126022 ----a-w- c:\windows\system32\perfc013.dat

2010-06-30 17:33 . 2010-04-21 19:22 -------- d-----w- c:\program files\Spybot - Search & Destroy

2010-06-30 17:33 . 2010-04-21 19:22 -------- d-----w- c:\programdata\Spybot - Search & Destroy

2010-06-29 12:38 . 2010-02-14 08:20 -------- d-----w- c:\users\home\AppData\Roaming\vlc

2010-06-29 12:38 . 2009-12-20 16:44 -------- d-----w- c:\users\home\AppData\Roaming\uTorrent

2010-06-29 11:48 . 2010-03-27 17:30 -------- d-----w- c:\program files\Nero

2010-06-28 19:11 . 2009-11-02 14:50 -------- d-----w- c:\users\home\AppData\Roaming\Media Player Classic

2010-06-28 19:08 . 2010-05-17 19:54 -------- d-----w- c:\program files\DsNET Corp

2010-06-28 11:03 . 2009-02-28 08:01 -------- d-----w- c:\program files\Java

2010-06-26 11:39 . 2009-10-27 17:24 76216 ----a-w- c:\users\home\AppData\Local\GDIPFONTCACHEV1.DAT

2010-06-26 11:38 . 2009-10-27 17:15 -------- d-----w- c:\programdata\Microsoft Help

2010-06-25 11:15 . 2010-06-25 11:15 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_SynTP_01009.Wdf

2010-06-25 11:15 . 2010-06-25 11:15 0 ---ha-w- c:\windows\system32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf

2010-06-24 19:45 . 2009-11-13 17:42 7512 ----a-w- c:\users\home\AppData\Local\d3d9caps.dat

2010-06-24 17:02 . 2010-05-23 01:12 -------- d-----w- c:\program files\WhatsRunning

2010-06-24 13:46 . 2010-05-23 18:59 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2010-06-21 14:49 . 2010-01-27 19:28 -------- d-----w- c:\program files\MRU-Blaster

2010-06-21 02:52 . 2009-02-28 06:35 -------- d--h--w- c:\program files\InstallShield Installation Information

2010-06-15 16:42 . 2010-06-15 16:42 133648 ----a-w- c:\programdata\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav9exec\9.0.0.736\mmpprtc.dll

2010-06-15 16:42 . 2010-06-15 16:42 133720 ----a-w- c:\programdata\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav9exec\9.0.0.736\mmpprtc.dll

2010-06-13 17:39 . 2009-10-27 17:16 -------- d-----w- c:\program files\Microsoft Works

2010-06-12 12:14 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail

2010-06-05 17:27 . 2009-10-27 22:02 -------- d-----w- c:\program files\Microsoft Silverlight

2010-06-01 00:12 . 2009-11-03 20:06 -------- d-----w- c:\users\home\AppData\Roaming\HpUpdate

2010-05-31 17:17 . 2010-05-31 17:17 -------- d-----w- c:\programdata\SolarWinds

2010-05-30 12:50 . 2010-05-23 00:18 57344 ----a-w- c:\programdata\DivX\RunAsUser\RUNASUSERPROCESS.dll

2010-05-30 12:50 . 2010-04-14 22:41 -------- d-----w- c:\programdata\DivX

2010-05-30 12:50 . 2009-11-10 01:54 -------- d-----w- c:\program files\Common Files\DivX Shared

2010-05-30 12:50 . 2009-11-10 01:54 -------- d-----w- c:\program files\Common Files\PX Storage Engine

2010-05-30 12:50 . 2009-11-10 01:54 -------- d-----w- c:\program files\DivX

2010-05-30 12:47 . 2010-05-23 00:14 144696 ----a-w- c:\programdata\DivX\RunAsUser\RUNASUSERPROCESS.exe

2010-05-29 16:55 . 2009-10-27 20:32 -------- d-----w- c:\program files\Google

2010-05-27 20:32 . 2010-05-27 20:32 245936 ----a-w- c:\windows\system32\drivers\SynTP.sys

2010-05-27 20:31 . 2008-07-24 16:46 120104 ----a-w- c:\windows\system32\SynTPCo4.dll

2010-05-27 20:31 . 2008-07-24 16:26 165160 ----a-w- c:\windows\system32\SynTPAPI.dll

2010-05-27 20:31 . 2010-05-27 20:31 210216 ----a-w- c:\windows\system32\SynCtrl.dll

2010-05-27 20:31 . 2008-07-24 16:11 173352 ----a-w- c:\windows\system32\SynCOM.dll

2010-05-26 17:36 . 2009-10-27 22:02 -------- d-----w- c:\program files\Microsoft

2010-05-26 17:06 . 2010-06-10 23:08 34304 ----a-w- c:\windows\system32\atmlib.dll

2010-05-26 14:47 . 2010-06-10 23:08 289792 ----a-w- c:\windows\system32\atmfd.dll

2010-05-23 18:59 . 2010-05-23 18:59 -------- d-----w- c:\programdata\Malwarebytes

2010-05-23 00:18 . 2010-05-23 00:18 53600 ----a-w- c:\programdata\DivX\Update\Uninstaller.exe

2010-05-23 00:13 . 2010-05-23 00:18 1180952 ----a-w- c:\programdata\DivX\Setup\DivXSetup.exe

2010-05-18 07:57 . 2009-12-26 13:48 -------- d-----w- c:\program files\uTorrent

2010-05-16 19:21 . 2010-05-16 19:21 -------- d-----w- c:\program files\VS Revo Group

2010-05-16 19:02 . 2009-11-23 00:28 -------- d-----w- c:\program files\Common Files\Real

2010-05-14 11:20 . 2009-12-20 21:31 -------- d-----w- c:\users\home\AppData\Roaming\SBMAV Disk Cleaner

2010-05-05 16:39 . 2009-12-20 13:01 113933 ----a-w- c:\windows\system32\drivers\klin.dat

2010-05-05 16:39 . 2009-12-20 13:01 97549 ----a-w- c:\windows\system32\drivers\klick.dat

2010-05-04 05:59 . 2010-06-10 23:08 916480 ----a-w- c:\windows\system32\wininet.dll

2010-05-04 05:55 . 2010-06-10 23:08 109056 ----a-w- c:\windows\system32\iesysprep.dll

2010-05-04 05:55 . 2010-06-10 23:08 71680 ----a-w- c:\windows\system32\iesetup.dll

2010-05-04 04:31 . 2010-06-10 23:08 133632 ----a-w- c:\windows\system32\ieUnatt.exe

2010-05-03 17:52 . 2010-05-03 17:52 388096 ----a-r- c:\users\home\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

2010-05-01 16:56 . 2010-05-01 16:56 247296 ----a-w- c:\windows\system32\wbem\WMIPRVSE.EXE

2010-04-23 14:13 . 2010-05-26 16:43 2048 ----a-w- c:\windows\system32\tzres.dll

2010-04-22 00:44 . 2010-04-22 00:42 23209 ----a-w- c:\windows\hpqins15.dat

2010-04-16 16:43 . 2010-06-22 21:03 173056 ----a-w- c:\windows\AppPatch\AcXtrnal.dll

2010-04-16 16:43 . 2010-06-22 21:03 458752 ----a-w- c:\windows\AppPatch\AcSpecfc.dll

2010-04-16 16:43 . 2010-06-22 21:03 542720 ----a-w- c:\windows\AppPatch\AcLayers.dll

2010-04-16 16:43 . 2010-06-22 21:03 2159616 ----a-w- c:\windows\AppPatch\AcGenral.dll

2010-04-05 17:01 . 2010-06-10 23:08 67072 ----a-w- c:\windows\system32\asycfilt.dll

2009-02-28 14:50 . 2009-02-28 14:35 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2010-05-27 1721640]

"SysTrayApp"="c:\program files\IDT\WDM\sttray.exe" [2009-06-03 450652]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]

"a-squared"="c:\program files\EMSISOFT ANTI-MALWARE\a2guard.exe" [2010-06-29 3627912]

"avp"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe" [2009-10-20 340456]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]

"AppInit_DLLs"=c:\progra~1\KASPER~1\KASPER~1\mzvkbd3.dll c:\progra~1\KASPER~1\KASPER~1\kloehk.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"mixer"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

@="Service"

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]

backup=c:\windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup

backupExtension=.CommonStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]

2010-03-24 18:17 952768 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]

2010-04-04 05:42 36272 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer for HP TouchSmart]

2008-12-25 12:41 189736 ------w- c:\program files\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DVDAgent]

2008-11-28 17:04 1148200 ------w- c:\program files\Hewlett-Packard\Media\DVD\DVDAgent.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel]

2008-06-09 09:16 2363392 ----a-w- c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Messenger (Yahoo!)]

2009-11-10 14:39 5244216 ----a-w- c:\progra~1\Yahoo!\Messenger\YahooMessenger.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]

2009-07-26 15:44 3883856 ----a-w- c:\program files\Windows Live\Messenger\msnmsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

2009-11-10 22:08 417792 ----a-w- c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmartMenu]

2008-11-18 18:35 914224 ----a-w- c:\program files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]

2009-11-23 00:28 198160 ----a-w- c:\program files\Common Files\Real\Update_OB\realsched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TSMAgent]

2008-12-25 12:41 1316136 ------w- c:\program files\Hewlett-Packard\TouchSmart\Media\TSMAgent.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TVAgent]

2009-05-08 16:32 206120 ------w- c:\program files\Hewlett-Packard\Media\TV\TVAgent.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UCam_Menu]

2008-11-14 21:02 218408 ------w- c:\program files\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateLBPShortCut]

2008-06-13 17:11 210216 ------w- c:\program files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateP2GoShortCut]

2008-10-30 10:51 210216 ------w- c:\program files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePDIRShortCut]

2008-06-13 17:11 210216 ------w- c:\program files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePSTShortCut]

2008-11-26 10:34 210216 ------w- c:\program files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]

2008-01-21 02:23 1008184 ----a-w- c:\program files\Windows Defender\MSASCui.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]

"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]

"AntiVirusOverride"=dword:00000001

"VistaSp2"=hex(:50,9d,48,44,6b,59,ca,01

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-3031723917-1600518869-3245930991-1000]

"EnableNotificationsRef"=dword:00000001

R2 BSSNMPTRAP;ByteSphere Trap Manager;c:\oidview\trap_manager.exe [x]

R2 gupdate;Google Updateservice (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-05-29 136176]

R3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2008-11-19 222512]

R3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver;c:\windows\system32\DRIVERS\ManyCam.sys [x]

R3 rcmirror;rcmirror;c:\windows\system32\DRIVERS\rcmirror.sys [2010-01-18 3200]

R4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys [2009-12-05 691696]

S0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [2009-10-14 36880]

S1 a2injectiondriver;a2injectiondriver;c:\program files\Emsisoft Anti-Malware\a2dix86.sys [2010-05-15 39576]

S1 a2util;a-squared Malware-IDS utility driver;c:\program files\Emsisoft Anti-Malware\a2util32.sys [2010-05-05 11776]

S1 ElRawDisk;ElRawDisk;c:\windows\system32\drivers\elrawdsk.sys [2007-03-22 20560]

S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys [2009-11-03 21520]

S2 {55662437-DA8C-40c0-AADA-2C816A897A49};Power Control [2009/10/27 16:12];c:\program files\Hewlett-Packard\Media\DVD\000.fcl [2008-11-28 17:04 87536]

S2 a2AntiMalware;Emsisoft Anti-Malware 5.0 - Service;c:\program files\Emsisoft Anti-Malware\a2service.exe [2010-06-29 1935120]

S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt.inf_827e372d\aestsrv.exe [2009-03-02 81920]

S2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe [2008-01-21 21504]

S2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [2009-04-07 233472]

S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe [2008-03-18 19456]

S2 Recovery Service for Windows;Recovery Service for Windows;c:\program files\SMINST\BLService.exe [2008-12-17 365952]

S2 TVCapSvc;TV Background Capture Service (TVBCS);c:\program files\Hewlett-Packard\Media\TV\Kernel\TV\TVCapSvc.exe [2008-11-26 296320]

S2 TVSched;TV Task Scheduler (TVTS);c:\program files\Hewlett-Packard\Media\TV\Kernel\TV\TVSched.exe [2008-11-26 116096]

S3 a2acc;a2acc;c:\program files\EMSISOFT ANTI-MALWARE\a2accx86.sys [2010-06-29 71008]

S3 enecir;ENE CIR Receiver;c:\windows\system32\DRIVERS\enecir.sys [2008-09-04 54784]

S3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.SYS [2009-04-07 36608]

S3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [2008-10-23 107360]

S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [2009-10-02 19472]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12

hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs

ezSharedSvc

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]

2008-06-09 09:14 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe

.

Inhoud van de 'Gedeelde Taken' map

2010-06-30 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-05-29 16:52]

2010-06-30 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-05-29 16:52]

2010-06-28 c:\windows\Tasks\HPCeeScheduleForhome.job

- c:\program files\hewlett-packard\sdp\ceement\HPCEE.exe [2009-02-28 10:34]

.

.

------- Bijkomende Scan -------

.

uStart Page = hxxp://www.google.nl/

IE: Add to Anti-Banner - c:\program files\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm

IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

IE: {{7A0815F1-6B65-4e3a-B198-709807B4042A} - {1EC035CE-090E-4AF7-B6DF-AD11C2F0F9C9} - c:\program files\XstreamRadio 3.02\RadioHelper.dll

TCP: {5BB7BBF4-5484-4488-9278-0AEBB2BEBADE} = 208.67.222.222,208.67.220.220

FF - ProfilePath - c:\users\home\AppData\Roaming\Mozilla\Firefox\Profiles\2e1wqqg9.default\

FF - prefs.js: browser.startup.homepage - hxxp://www.google.nl/

FF - component: c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpClipBook.dll

FF - component: c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpClipBookDB.dll

FF - component: c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpNeoLogger.dll

FF - component: c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpSaturn.dll

FF - component: c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpSmartSelect.dll

FF - component: c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpSmartWebPrinting.dll

FF - component: c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpSWPOperation.dll

FF - component: c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpXPLogging.dll

FF - component: c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpXPMTC.dll

FF - component: c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpXPMTL.dll

FF - component: c:\program files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpXREStub.dll

FF - component: c:\program files\Real\RealPlayer\browserrecord\firefox\ext\components\nprpffbrowserrecordext.dll

---- FIREFOX POLICIES ----

FF - user.js: network.protocol-handler.warn-external.dnupdate - falsec:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);

c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");

c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);

c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);

.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2010-06-30 19:50

Windows 6.0.6002 Service Pack 2 NTFS

scannen van verborgen processen ...

scannen van verborgen autostart items ...

scannen van verborgen bestanden ...

Scan succesvol afgerond

verborgen bestanden: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\{55662437-DA8C-40c0-AADA-2C816A897A49}]

"ImagePath"="\??\c:\program files\Hewlett-Packard\Media\DVD\000.fcl"

.

------------------------ Andere Aktieve Processen ------------------------

.

c:\windows\system32\Ati2evxx.exe

c:\windows\System32\DriverStore\FileRepository\stwrt.inf_827e372d\STacSV.exe

c:\windows\system32\Ati2evxx.exe

c:\windows\system32\WLANExt.exe

c:\program files\Common Files\LightScribe\LSSrvc.exe

c:\program files\CyberLink\Shared files\RichVideo.exe

c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

c:\windows\system32\conime.exe

c:\program files\Windows Media Player\wmpnscfg.exe

c:\program files\Windows Media Player\wmpnetwk.exe

.

**************************************************************************

.

Voltooingstijd: 2010-06-30 20:00:24 - machine werd herstart

ComboFix-quarantined-files.txt 2010-06-30 18:00

ComboFix2.txt 2010-06-30 11:33

ComboFix3.txt 2010-06-29 14:31

Pre-Run: 203.093.504.000 bytes beschikbaar

Post-Run: 202.643.140.608 bytes beschikbaar

- - End Of File - - EFD22847F35B9C87C32FA00F992A5393

[kape]

Verwijder Combofix: Start -> Uitvoeren en typ: ComboFix /Uninstall

Dit zal Combofix verwijderen + gerelateerde mappen en bestanden, herstelt de klokinstellingen opnieuw, verbergt de bestandsextensies, gaat verborgen bestanden en systeembestanden terug verbergen en maakt een nieuw herstelpunt.

Indien aanwezig mag je de map C:\Qoobox manueel verwijderen.

Download hier CCleaner en dan start de download van CCleaner automatisch en gratis op.

Installeer het en start CCleaner op. Klik in de linkse kolom op “Cleaner”. Klik achtereenvolgens op ‘Analyseren’ en 'Schoonmaken'. Soms is 1 analyse niet voldoende. Deze procedure mag je herhalen tot de analyse geen fouten meer aangeeft. Klik vervolgens in de linkse kolom op “Register” en klik op ‘Scan naar problemen”. Als er fouten gevonden worden klik je op ”Herstel geselecteerde problemen” en ”OK”. Dan krijg je de vraag om een back-up te maken. Klik op “JA”. Kies dan “Herstel alle geselecteerde fouten”. Sluit hierna CCleaner terug af.

Wil je dit uitgebreid in beeld bekijken, klik dan hier voor de handleiding.

[daveEHV]

heb alles opgeschoond en herstart en herkende maar 3 fouten in mijn systeem;;

bytesphere trap manager maar dat is van een programma dat niet meer in gebruik is,

languagepack setup,

hp healthcheck,

alleen doet mijn mozilla het nog steeds niet? moet ik hem verwijderen met revo en opnieuw installeren???

verder ervaar ik geen problemen tot dus ver wat me al heel blij stemt thanks for the help

mvg dave

[kape]

Dan lijkt het me inderdaad nu zinvol om te uninstallen en opnieuw te installeren.

[daveEHV]

harstikke bedankt voor de hulp nu kan ik na heel wat dagen erachter te hebben gezeten weer wat relaxen hahaha en zal ik de opgelost knop gebruiken

mvg dave