Windows Mail

[Clubboy]

ComboFix 10-09-23.01 - Carrefour Schoten 24/09/2010 12:52:51.1.2 - x86

Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.32.1043.18.2046.1158 [GMT 2:00]

Gestart vanuit: c:\users\Carrefour Schoten\Downloads\ComboFix.exe

AV: Norton Internet Security *On-access scanning disabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8}

FW: Norton Internet Security *disabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}

SP: Norton Internet Security *disabled* (Updated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A}

SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\windows\system32\AutoRun.inf

.

(((((((((((((((((((( Bestanden Gemaakt van 2010-08-24 to 2010-09-24 ))))))))))))))))))))))))))))))

.

2010-09-24 11:07 . 2010-09-24 11:08 -------- d-----w- c:\users\Carrefour Schoten\AppData\Local\temp

2010-09-24 11:07 . 2010-09-24 11:07 -------- d-----w- c:\users\Default\AppData\Local\temp

2010-09-22 16:08 . 2010-09-22 16:08 -------- d-----w- c:\users\Carrefour Schoten\AppData\Roaming\Malwarebytes

2010-09-22 16:07 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2010-09-22 16:07 . 2010-09-22 16:07 -------- d-----w- c:\programdata\Malwarebytes

2010-09-22 16:07 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys

2010-09-22 16:07 . 2010-09-22 16:07 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2010-09-22 09:37 . 2010-09-22 09:37 388096 ----a-r- c:\users\Carrefour Schoten\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

2010-09-22 09:37 . 2010-09-22 09:37 -------- d-----w- c:\program files\Trend Micro

2010-09-21 17:33 . 2010-09-22 18:13 680 ----a-w- c:\users\Carrefour Schoten\AppData\Local\d3d9caps.dat

2010-09-05 19:40 . 2007-02-16 02:48 36864 ----a-w- c:\windows\system32\wmdmps.dll

2010-09-05 19:40 . 2007-02-16 02:48 31744 ----a-w- c:\windows\system32\wmdmlog.dll

2010-09-05 19:40 . 2007-02-16 02:46 311296 ----a-w- c:\windows\system32\mswmdm.dll

2010-08-30 11:46 . 2010-08-30 11:46 -------- d-----w- c:\users\Carrefour Schoten\AppData\Roaming\Tific

2010-08-26 16:01 . 2010-08-26 16:01 -------- d-----w- c:\program files\Conduit

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2010-09-24 09:52 . 2007-05-26 09:37 13589 ----a-w- c:\users\Carrefour Schoten\AppData\Roaming\nvModes.dat

2010-09-24 09:43 . 2007-03-22 05:10 12 ----a-w- c:\windows\bthservsdp.dat

2010-09-24 06:04 . 2010-06-30 13:43 -------- d-----w- c:\users\Carrefour Schoten\AppData\Roaming\HpUpdate

2010-09-21 20:30 . 2008-12-21 14:45 -------- d-----w- c:\users\Carrefour Schoten\AppData\Roaming\Microgaming

2010-09-21 12:00 . 2007-03-21 19:39 689618 ----a-w- c:\windows\system32\perfh013.dat

2010-09-21 12:00 . 2007-03-21 19:39 122796 ----a-w- c:\windows\system32\perfc013.dat

2010-09-19 17:36 . 2007-10-13 11:26 140437 ----a-w- c:\windows\hpoins18.dat

2010-09-17 12:33 . 2007-08-24 19:59 -------- d-----w- c:\program files\Google

2010-09-15 21:46 . 2007-10-12 19:31 -------- d-----w- c:\programdata\Microsoft Help

2010-09-09 06:29 . 2009-06-19 09:08 -------- d-----w- c:\program files\Microsoft Silverlight

2010-09-04 07:10 . 2008-04-14 18:17 -------- d-----w- c:\program files\Common Files\Java

2010-09-04 07:09 . 2008-04-14 18:18 -------- d-----w- c:\program files\Java

2010-07-17 03:00 . 2010-04-28 12:46 423656 ----a-w- c:\windows\system32\deployJava1.dll

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-10 1232896]

"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2006-11-02 125440]

"MsnMsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]

"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-09-11 39408]

"TomTomHOME.exe"="c:\program files\TomTom HOME 2\TomTomHOMERunner.exe" [2009-11-13 247144]

"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 201728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2007-08-04 1006264]

"NvSvc"="c:\windows\system32\nvsvc.dll" [2007-02-05 90191]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-02-05 7770112]

"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-02-05 81920]

"RtHDVCpl"="RtHDVCpl.exe" [2006-11-01 3772416]

"SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2006-10-09 729088]

"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-10-27 815104]

"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]

"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-03-11 49152]

"ExtraFilmHemmaAgent"="c:\program files\ExtraFilm PhotoAssistant\Agent.exe" [2007-11-05 323584]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-11-10 417792]

"mxomssmenu"="c:\program files\Maxtor\OneTouch Status\maxmenumgr.exe" [2007-09-06 169264]

"beid"="c:\program files\Belgium Identity Card\beid35gui.exe" [2009-02-02 2035712]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-01-22 141608]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]

"Windows Mobile-based device management"="c:\windows\WindowsMobile\wmdSync.exe" [2006-11-02 215552]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Bluetooth Manager.lnk - c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe [2006-11-7 2134016]

HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-1-2 210520]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"mixer3"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]

"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]

"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]

"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]

"AntiVirusOverride"=dword:00000001

R2 gupdate;Google Updateservice (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2009-09-11 133104]

R3 ACSSCR;ACR38 Smart Card Reader;c:\windows\system32\DRIVERS\a38usb.sys [2009-04-27 35712]

R3 SYMNDISV;Symantec Network Filter Driver;c:\windows\System32\Drivers\NIS\1007020.00B\SYMNDISV.SYS [x]

S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NIS\1108000.005\SYMDS.SYS [2009-11-05 328752]

S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NIS\1108000.005\SYMEFA.SYS [2010-04-22 173104]

S1 BHDrvx86;BHDrvx86;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\BASHDefs\20100901.003\BHDrvx86.sys [2010-08-31 692272]

S1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\NIS\1108000.005\ccHPx86.sys [2010-02-26 501888]

S1 IDSVix86;IDSVix86;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\IPSDefs\20100923.001\IDSvix86.sys [2010-05-28 344112]

S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NIS\1108000.005\Ironx86.SYS [2010-04-29 116784]

S1 SYMTDIv;Symantec Vista Network Dispatch Driver;c:\windows\System32\Drivers\NIS\1108000.005\SYMTDIV.SYS [2010-05-06 339504]

S2 NIS;Norton Internet Security;c:\program files\Norton Internet Security\Engine\17.8.0.5\ccSvcHst.exe [2010-02-26 126392]

S2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [2009-11-13 92008]

S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2010-05-27 102448]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

bthsvcs REG_MULTI_SZ BthServ

HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12

hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

WindowsMobile REG_MULTI_SZ wcescomm rapimgr

LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr

.

Inhoud van de 'Gedeelde Taken' map

2010-09-24 c:\windows\Tasks\Google Software Updater.job

- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-08-24 11:06]

2010-09-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2009-09-11 11:07]

2010-09-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2009-09-11 11:07]

2010-09-24 c:\windows\Tasks\Norton Internet Security - Carrefour Schoten - Volledige systeemscan.job

- c:\program files\Norton Internet Security\Engine\17.8.0.5\navw32.exe [2010-09-24 19:24]

2010-09-24 c:\windows\Tasks\Norton Internet Security - Volledige systeemscan uitvoeren - Carrefour Schoten.job

- c:\program files\Norton Internet Security\Engine\17.8.0.5\navw32.exe [2010-09-24 19:24]

2010-09-24 c:\windows\Tasks\User_Feed_Synchronization-{009C11A5-C05F-4841-A79B-8F46D1EBC611}.job

- c:\windows\system32\msfeedssync.exe [2010-03-31 04:54]

.

.

------- Bijkomende Scan -------

.

uStart Page = hxxp://www.google.be/

uInternet Settings,ProxyOverride = *.local

IE: {{C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - c:\microgaming\Poker\UnibetpokerMPP\MPPoker.exe

.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2010-09-24 13:08

Windows 6.0.6000 NTFS

scannen van verborgen processen ...

scannen van verborgen autostart items ...

scannen van verborgen bestanden ...

Scan succesvol afgerond

verborgen bestanden: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\NIS]

"ImagePath"="\"c:\program files\Norton Internet Security\Engine\17.8.0.5\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files\Norton Internet Security\Engine\17.8.0.5\diMaster.dll\" /prefetch:1"

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000001

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

Voltooingstijd: 2010-09-24 13:18:32

ComboFix-quarantined-files.txt 2010-09-24 11:18

Pre-Run: 20.377.300.992 bytes beschikbaar

Post-Run: 20.354.437.120 bytes beschikbaar

- - End Of File - - 04B711AFEF42F2B8774D754F5A17698F

---------- Post toegevoegd om 11:31 ---------- Vorige post was om 11:23 ----------

Sinds ik deze laatste test deed, werkt mijn scroll van mijn laptop niet meer.

[kape]

Verwijder Combofix: Start -> Uitvoeren en typ: ComboFix /Uninstall

Dit zal Combofix verwijderen + gerelateerde mappen en bestanden, herstelt de klokinstellingen opnieuw, verbergt de bestandsextensies, gaat verborgen bestanden en systeembestanden terug verbergen en maakt een nieuw herstelpunt.

Indien aanwezig mag je de map C:\Qoobox manueel verwijderen.

Download hier CCleaner en dan start de download van CCleaner automatisch en gratis op.

Installeer het en start CCleaner op. Klik in de linkse kolom op “Cleaner”. Klik achtereenvolgens op ‘Analyseren’ en 'Schoonmaken'. Soms is 1 analyse niet voldoende. Deze procedure mag je herhalen tot de analyse geen fouten meer aangeeft. Klik vervolgens in de linkse kolom op “Register” en klik op ‘Scan naar problemen”. Als er fouten gevonden worden klik je op ”Herstel geselecteerde problemen” en ”OK”. Dan krijg je de vraag om een back-up te maken. Klik op “JA”. Kies dan “Herstel alle geselecteerde fouten”. Sluit hierna CCleaner terug af.

Wil je dit uitgebreid in beeld bekijken, klik dan hier voor de handleiding.

En laat dan eens weten hoe het nu staat met de problemen ?

[Clubboy]

Ik heb mijn pc herstart en het scroll-probleem is terug in orde.

Ik typ "ComboFix/Uninstall" en duw vervolgens op ok. Dan krijg ik een bericht dat hij dit bestand niet vind.

CCleaner had ik al op mijn pc. Dit doe ik dagelijks.

Probleem is nog steeds hetzelfde. Ik kan nog steeds geen e-mails ontvangen.

[kape]

Heb je tussen ComboFix en de slash een spatie gelaten ? Want dat wordt wel eens over het hoofd gezien

[Clubboy]

Kheb spatie er tussen gelaten, en het is verwijderd.

Hoe verwijder ik die "Qoobox"?

Oeps, die is ook automatisch verdwenen.

[Clubboy]

Problemen blijven hetzelfde. Ik kan nog steeds geen mails ontvangen...

[Clubboy]

Probleem lijkt opgelost. Nieuw wachtwoord gekregen, alles terug ingesteld, en ik kan terug mails ontvangen.

Bedankt voor jullie hulp.