Personal Shield Pro Version 2.20

breyton · 26 september 2011

Beste Kape,

Ik was het ganse weekend in Frankfurt en vandaag heb ik net een nieuwe videokaart geïnstalleerd. Met de hoop het opstart probleem verholpen te hebben.

Als je het goed vindt, zal ik me morgen met de 'Combofix' bezig houden.

mvg,

Breyton

kape · 26 september 2011

Uitstekend ... neem er je tijd voor !

breyton · 27 september 2011

Beste Kape,

Zoals beloofd heb je hier de ComboFix-log:

ComboFix 11-09-22.03 - Naam 27/09/2011 18:57:49.1.2 - x86

Gestart vanuit: c:\users\Naam\Desktop\ComboFix.exe

AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}

SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

(((((((((((((((((((( Bestanden Gemaakt van 2011-08-27 to 2011-09-27 ))))))))))))))))))))))))))))))

.

2011-09-27 17:08 . 2011-09-27 17:08 -------- d-----w- c:\users\Default\AppData\Local\temp

2011-09-27 15:34 . 2011-09-27 15:34 56200 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BA6F3595-B4E0-4DD4-ACAE-90AACE190F5E}\offreg.dll

2011-09-27 15:33 . 2011-09-12 23:14 7269712 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BA6F3595-B4E0-4DD4-ACAE-90AACE190F5E}\mpengine.dll

2011-09-26 10:01 . 2011-09-26 10:01 -------- d-----w- c:\program files\ASUS

2011-09-23 12:49 . 2011-03-03 15:59 139368 ----a-w- c:\windows\system32\drivers\nvhda32v.sys

2011-09-23 12:49 . 2011-03-03 15:59 837224 ----a-w- c:\windows\system32\nvhdagenco322040.dll

2011-09-23 12:49 . 2011-03-03 15:59 26216 ----a-w- c:\windows\system32\nvhdap32.dll

2011-09-23 12:48 . 2011-09-27 15:22 -------- d-----w- c:\programdata\NVIDIA

2011-09-23 12:43 . 2011-09-23 12:43 -------- d-----w- c:\programdata\NVIDIA Corporation

2011-09-23 12:43 . 2011-03-28 10:27 941160 ----a-w- c:\windows\system32\nvdispco322090.dll

2011-09-23 12:43 . 2011-03-28 10:28 837736 ----a-w- c:\windows\system32\nvgenco322040.dll

2011-09-23 12:42 . 2011-03-28 10:28 57960 ----a-w- c:\windows\system32\OpenCL.dll

2011-09-23 12:42 . 2011-03-28 10:28 6049384 ----a-w- c:\windows\system32\nvwgf2um.dll

2011-09-23 12:42 . 2011-03-28 10:28 15063656 ----a-w- c:\windows\system32\nvoglv32.dll

2011-09-23 12:42 . 2011-03-28 10:28 10518248 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys

2011-09-23 12:42 . 2011-03-28 10:27 10084968 ----a-w- c:\windows\system32\nvd3dum.dll

2011-09-23 12:42 . 2011-03-28 10:27 4943976 ----a-w- c:\windows\system32\nvcuda.dll

2011-09-23 12:42 . 2011-03-28 10:27 2897512 ----a-w- c:\windows\system32\nvcuvid.dll

2011-09-23 12:42 . 2011-03-28 10:27 2252904 ----a-w- c:\windows\system32\nvcuvenc.dll

2011-09-23 12:42 . 2011-03-28 10:27 13011560 ----a-w- c:\windows\system32\nvcompiler.dll

2011-09-23 12:41 . 2011-09-23 12:49 -------- d-----w- c:\program files\NVIDIA Corporation

2011-09-22 16:12 . 2011-09-22 16:12 -------- d-----w- c:\users\Naam\AppData\Roaming\Malwarebytes

2011-09-22 16:11 . 2011-09-22 16:11 -------- d-----w- c:\programdata\Malwarebytes

2011-09-22 16:11 . 2011-08-31 15:00 22216 ----a-w- c:\windows\system32\drivers\mbam.sys

2011-09-22 16:11 . 2011-09-22 16:11 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2011-09-21 22:30 . 2011-09-06 20:36 20568 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys

2011-09-21 22:30 . 2011-09-06 20:37 320856 ----a-w- c:\windows\system32\drivers\aswSP.sys

2011-09-21 22:29 . 2011-09-06 20:36 34392 ----a-w- c:\windows\system32\drivers\aswRdr.sys

2011-09-21 22:29 . 2011-09-06 20:36 52568 ----a-w- c:\windows\system32\drivers\aswTdi.sys

2011-09-21 22:29 . 2011-09-06 20:38 442200 ----a-w- c:\windows\system32\drivers\aswSnx.sys

2011-09-21 22:29 . 2011-09-06 20:36 54616 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys

2011-09-21 22:25 . 2011-09-06 20:45 41184 ----a-w- c:\windows\avastSS.scr

2011-09-21 22:25 . 2011-09-06 20:45 199304 ----a-w- c:\windows\system32\aswBoot.exe

2011-09-21 22:24 . 2011-09-21 22:24 -------- d-----w- c:\programdata\AVAST Software

2011-09-21 22:24 . 2011-09-21 22:24 -------- d-----w- c:\program files\AVAST Software

2011-09-21 20:26 . 2011-09-21 20:26 388096 ----a-r- c:\users\Naam\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

2011-09-21 20:26 . 2011-09-21 20:26 -------- d-----w- c:\program files\Trend Micro

2011-09-20 23:36 . 2011-09-20 23:36 -------- dc-h--w- c:\programdata\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}

2011-09-20 22:37 . 2011-09-20 22:37 -------- d-----w- c:\programdata\nG21703EbCkJ21703

2011-09-15 15:41 . 2011-09-15 15:41 -------- d-----w- C:\b903dee1b9492d5eadd5

2011-09-08 01:01 . 2010-09-20 09:25 231936 ----a-w- c:\windows\system32\msshsq.dll

2011-09-07 15:56 . 2011-03-03 14:56 28672 ----a-w- c:\windows\system32\Apphlpdm.dll

2011-09-07 15:56 . 2011-03-03 13:01 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll

2011-09-06 16:32 . 2010-04-14 17:46 80896 ----a-w- c:\windows\system32\MSNP.ax

2011-09-06 16:32 . 2010-04-14 17:47 293376 ----a-w- c:\windows\system32\psisdecd.dll

2011-09-06 16:32 . 2010-04-14 17:47 217088 ----a-w- c:\windows\system32\psisrndr.ax

2011-09-06 15:57 . 2009-10-09 21:56 2048 ----a-w- c:\windows\system32\winrsmgr.dll

2011-09-05 16:41 . 2011-04-21 13:16 273408 ----a-w- c:\windows\system32\drivers\afd.sys

2011-09-05 16:40 . 2010-09-10 16:35 168960 ----a-w- c:\program files\Windows Media Player\wmplayer.exe

2011-09-05 16:40 . 2010-09-10 16:37 8147456 ----a-w- c:\windows\system32\wmploc.DLL

2011-09-05 16:40 . 2010-09-06 16:24 125952 ----a-w- c:\windows\system32\srvsvc.dll

2011-09-05 16:40 . 2010-09-06 16:23 17920 ----a-w- c:\windows\system32\netevent.dll

2011-09-05 16:39 . 2010-04-16 16:10 501760 ----a-w- c:\windows\system32\usp10.dll

2011-09-05 16:39 . 2010-10-12 15:48 33280 ----a-w- c:\program files\Windows Mail\wabfind.dll

2011-09-05 16:39 . 2010-10-12 13:52 66048 ----a-w- c:\program files\Windows Mail\wabmig.exe

2011-09-05 16:39 . 2010-10-12 13:52 515584 ----a-w- c:\program files\Windows Mail\wab.exe

2011-09-05 16:39 . 2011-02-16 13:24 292864 ----a-w- c:\windows\system32\atmfd.dll

2011-09-05 16:39 . 2011-02-16 15:29 34304 ----a-w- c:\windows\system32\atmlib.dll

2011-09-05 16:39 . 2010-06-16 15:12 72704 ----a-w- c:\windows\system32\fontsub.dll

2011-09-05 16:37 . 2011-04-14 14:24 75264 ----a-w- c:\windows\system32\drivers\dfsc.sys

2011-09-05 16:37 . 2010-10-15 14:08 3600272 ----a-w- c:\windows\system32\ntkrnlpa.exe

2011-09-05 16:37 . 2010-10-15 14:08 3548048 ----a-w- c:\windows\system32\ntoskrnl.exe

2011-09-05 16:37 . 2010-10-15 13:48 1205080 ----a-w- c:\windows\system32\ntdll.dll

2011-09-05 16:37 . 2011-03-10 16:12 1136640 ----a-w- c:\windows\system32\mfc42.dll

2011-09-05 16:37 . 2011-03-10 16:12 1161728 ----a-w- c:\windows\system32\mfc42u.dll

2011-09-05 16:37 . 2010-01-29 16:22 1616384 ----a-w- c:\program files\Windows Mail\msoe.dll

2011-09-05 16:37 . 2010-05-27 19:16 81920 ----a-w- c:\windows\system32\iccvid.dll

2011-09-05 16:37 . 2008-04-05 03:34 15360 ----a-w- c:\windows\system32\pacerprf.dll

2011-09-05 16:37 . 2008-04-05 01:21 72192 ----a-w- c:\windows\system32\drivers\pacer.sys

2011-09-05 16:35 . 2010-04-05 16:08 317952 ----a-w- c:\windows\system32\MP4SDECD.DLL

2011-09-05 16:32 . 2010-12-14 15:49 1169408 ----a-w- c:\windows\system32\sdclt.exe

2011-09-05 16:32 . 2010-06-17 17:15 10926592 ----a-w- c:\program files\Movie Maker\MOVIEMK.dll

2011-09-05 16:32 . 2010-06-17 15:49 150016 ----a-w- c:\program files\Movie Maker\MOVIEMK.exe

2011-09-05 16:32 . 2010-06-18 16:43 36352 ----a-w- c:\windows\system32\rtutils.dll

2011-09-05 16:32 . 2011-04-29 12:49 146432 ----a-w- c:\windows\system32\drivers\srv2.sys

2011-09-05 16:32 . 2011-04-29 12:49 102400 ----a-w- c:\windows\system32\drivers\srvnet.sys

2011-09-05 16:32 . 2011-05-02 16:00 766464 ----a-w- c:\program files\Common Files\Microsoft Shared\vgx\VGX.dll

2011-09-05 16:32 . 2011-02-16 15:35 430080 ----a-w- c:\windows\system32\vbscript.dll

2011-09-05 16:32 . 2010-12-20 15:39 563200 ----a-w- c:\windows\system32\oleaut32.dll

2011-09-05 16:32 . 2010-08-31 15:41 954752 ----a-w- c:\windows\system32\mfc40.dll

2011-09-05 16:32 . 2010-08-31 15:41 954288 ----a-w- c:\windows\system32\mfc40u.dll

2011-09-05 16:28 . 2010-10-18 14:01 81920 ----a-w- c:\windows\system32\consent.exe

2011-09-05 16:26 . 2008-05-08 21:59 90112 ----a-w- c:\windows\system32\wshext.dll

2011-09-05 16:26 . 2008-05-08 21:59 155648 ----a-w- c:\windows\system32\wscript.exe

2011-09-05 16:26 . 2008-05-08 21:58 135168 ----a-w- c:\windows\system32\wshom.ocx

2011-09-05 16:26 . 2008-05-08 21:59 180224 ----a-w- c:\windows\system32\scrobj.dll

2011-09-05 16:26 . 2008-05-08 21:59 172032 ----a-w- c:\windows\system32\scrrun.dll

2011-09-05 16:26 . 2008-05-08 21:58 135168 ----a-w- c:\windows\system32\cscript.exe

2011-09-05 16:26 . 2010-06-16 15:59 898952 ----a-w- c:\windows\system32\drivers\tcpip.sys

2011-09-05 16:26 . 2011-04-20 14:47 375808 ----a-w- c:\windows\system32\winsrv.dll

2011-09-05 16:26 . 2011-04-20 14:44 49152 ----a-w- c:\windows\system32\csrsrv.dll

2011-09-05 16:26 . 2010-08-31 15:40 531968 ----a-w- c:\windows\system32\comctl32.dll

2011-09-05 16:00 . 2011-09-05 16:00 -------- d-----w- c:\programdata\WindowsSearch

2011-09-05 15:54 . 2011-04-29 14:54 276992 ----a-w- c:\windows\system32\schannel.dll

2011-09-03 14:52 . 2011-09-03 14:52 -------- d-----w- C:\PerfLogs

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2011-09-26 19:28 . 2009-12-20 15:35 249856 ------w- c:\windows\Setup1.exe

2011-09-26 19:28 . 2009-12-20 15:35 73216 ----a-w- c:\windows\ST6UNST.EXE

2011-09-15 15:32 . 2011-06-28 22:41 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2011-09-03 14:27 . 2006-11-02 10:32 101888 ----a-w- c:\windows\system32\ifxcardm.dll

2011-09-03 14:26 . 2006-11-02 10:32 82432 ----a-w- c:\windows\system32\axaltocm.dll

2011-09-08 00:05 . 2011-08-18 10:28 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]

@="{472083B0-C522-11CF-8763-00608CC02F24}"

[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]

2011-09-06 20:45 122512 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920]

"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2009-06-25 1414144]

"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]

"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"JMB36X IDE Setup"="c:\windows\JM\JMInsIDE.exe" [2006-10-30 36864]

"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2006-12-06 69216]

"LanguageShortcut"="c:\program files\CyberLink\PowerDVD\Language\Language.exe" [2006-12-05 54832]

"WinampAgent"="c:\program files\Winamp\winampa.exe" [2008-04-01 36352]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-11-10 417792]

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-11-12 141600]

"NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-02-18 2221352]

"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2010-03-31 202256]

"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-03-05 1135912]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]

"ledpointer"="CNYHKey.exe" [2006-11-09 5585408]

"MoLed"="ModLEDKey.exe" [2006-11-09 53248]

"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2006-12-18 868352]

"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-09-06 3722416]

"Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2011-08-31 1047208]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Adobe Reader Snelle start.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-9-23 29696]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]

BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~1\AVG\AVG10\avgchsvx.exe /sync\0c:\progra~1\AVG\AVG10\avgrsx.exe /sync /restart

.

R2 CheckStage2_svc;CheckStage2_svc;c:\windows\CheckStage2.exe [2007-03-12 462848]

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

R3 athrusb;Atheros Wireless LAN USB device driver;c:\windows\system32\DRIVERS\athrusb.sys [2006-12-22 449536]

R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [x]

R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]

S1 aswSnx;aswSnx; [x]

S1 aswSP;aswSP; [x]

S2 aswFsBlk;aswFsBlk; [x]

S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-09-06 54616]

S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-03-23 378472]

S3 3xHybrid;ASUSTek SAA713x PCI Card;c:\windows\system32\DRIVERS\3xHybrid.sys [2006-10-27 2814080]

S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32v.sys [2011-03-03 139368]

S3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys [2010-04-19 47360]

.

Inhoud van de 'Gedeelde Taken' map

.

2011-09-26 c:\windows\Tasks\User_Feed_Synchronization-{A00DB71E-D82E-415A-9205-46B51548DBF9}.job

- c:\windows\system32\msfeedssync.exe [2009-01-01 07:33]

.

------- Bijkomende Scan -------

.

uStart Page = about:blank

mStart Page = about:blank

uInternet Settings,ProxyOverride = *.local

IE: &Download All with FlashGet - c:\program files\FlashGet\jc_all.htm

IE: &Download with FlashGet - c:\program files\FlashGet\jc_link.htm

IE: &Winamp Search - c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html

IE: Open with WordPerfect - c:\program files\WordPerfect Office X3\Programs\WPLauncher.hta

TCP: DhcpNameServer = 195.130.130.133 195.130.131.133

FF - ProfilePath - c:\users\Naam\AppData\Roaming\Mozilla\Firefox\Profiles\4jikr7k2.default\

FF - prefs.js: browser.search.selectedEngine - Web Search

FF - prefs.js: browser.startup.homepage - hxxp://www.google.be/

FF - prefs.js: keyword.URL - hxxp://startsear.ch/?aff=1&q=

FF - prefs.js: network.proxy.http - 196.30.133.146

FF - prefs.js: network.proxy.http_port - 8080

FF - prefs.js: network.proxy.type - 0

.

- - - - ORPHANS VERWIJDERD - - - -

.

Toolbar-{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - c:\program files\vShare.tv plugin\BarLcher.dll

.

**************************************************************************

.

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2011-09-27 19:10

Windows 6.0.6001 Service Pack 1 NTFS

.

scannen van verborgen processen ...

.

scannen van verborgen autostart items ...

.

scannen van verborgen bestanden ...

.

Scan succesvol afgerond

verborgen bestanden: 0

.

**************************************************************************

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

"MSCurrentCountry"=dword:0000000f

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

Voltooingstijd: 2011-09-27 19:15:38

ComboFix-quarantined-files.txt 2011-09-27 17:15

.

Pre-Run: 59.730.911.232 bytes beschikbaar

Post-Run: 61.965.185.024 bytes beschikbaar

.

- - End Of File - - 620FF81175C82B8E9BCFA8A9A7A8E5A1

M'n pc wou weer niet heropstarten. Na een paar keer m'n powerknop in te drukken en opnieuw in te drukken is het na 5 keer proberen dan eindelijk gelukt om windows op te starten. Echt om gek van te worden! Net nu ik een nieuwe videokaart heb gekocht om zo het probleem op te lossen.

mvg,

Breyton

kape · 28 september 2011

Open een kladblokbestand.

Kopieer en plak daarin de onderstaande vetgedrukte tekst.

Folder::

c:\programdata\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}

c:\programdata\nG21703EbCkJ21703

C:\b903dee1b9492d5eadd5

DDS::

uStart Page = about:blank

mStart Page = about:blank

Firefox::

FF - ProfilePath - c:\users\Naam\AppData\Roaming\Mozilla\Firefox\Profiles\4jikr7k2.default\

FF - prefs.js: browser.search.selectedEngine -

FF - prefs.js: keyword.URL -

Sla dit bestand op je bureaublad op als CFScript.txt.

Sleep CFScript.txt in ComboFix.exe

Dit zal ComboFix doen herstarten. Start opnieuw op als dat gevraagd wordt.

Post na herstart de inhoud van de Combofix.txt in je volgende bericht.

breyton · 29 september 2011

Beste Kape hier is m'n ComboFix log dan:

ComboFix 11-09-22.03 - Naam 29/09/2011 17:22:05.2.2 - x86

Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.32.1043.18.1022.301 [GMT 2:00]

Gestart vanuit: c:\users\Naam\Desktop\ComboFix.exe

gebruikte Opdracht switches :: c:\users\Naam\Desktop\CFScript.txt

AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}

SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

C:\b903dee1b9492d5eadd5

c:\b903dee1b9492d5eadd5\$shtdwn$.req

c:\b903dee1b9492d5eadd5\mrt.exe._p

c:\b903dee1b9492d5eadd5\mrtstub.exe

c:\programdata\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}

c:\programdata\nG21703EbCkJ21703

c:\programdata\nG21703EbCkJ21703\nG21703EbCkJ21703

c:\users\Naam\AppData\Local\Temp\ppcrlui_5420_2

.

(((((((((((((((((((( Bestanden Gemaakt van 2011-08-28 to 2011-09-29 ))))))))))))))))))))))))))))))

.

2011-09-29 15:24 . 2011-09-29 15:24 -------- d-----w- c:\users\Default\AppData\Local\temp

2011-09-29 15:06 . 2011-09-29 15:06 56200 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BA6F3595-B4E0-4DD4-ACAE-90AACE190F5E}\offreg.dll

2011-09-28 17:50 . 2011-09-28 17:50 -------- d-----w- c:\program files\Microsoft Silverlight

2011-09-28 17:37 . 2011-09-28 17:37 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2011-09-27 15:33 . 2011-09-12 23:14 7269712 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BA6F3595-B4E0-4DD4-ACAE-90AACE190F5E}\mpengine.dll

2011-09-25 10:01 . 2011-09-25 10:01 -------- d-----w- c:\users\Naam\AppData\Local\PowerCinema

2011-09-26 10:01 . 2011-09-26 10:01 -------- d-----w- c:\program files\ASUS

2011-09-24 12:49 . 2011-03-03 15:59 139368 ----a-w- c:\windows\system32\drivers\nvhda32v.sys

2011-09-24 12:49 . 2011-03-03 15:59 837224 ----a-w- c:\windows\system32\nvhdagenco322040.dll

2011-09-24 12:49 . 2011-03-03 15:59 26216 ----a-w- c:\windows\system32\nvhdap32.dll

2011-09-24 12:48 . 2011-09-29 15:06 -------- d-----w- c:\programdata\NVIDIA

2011-09-24 12:43 . 2011-09-24 12:43 -------- d-----w- c:\programdata\NVIDIA Corporation

2011-09-24 12:43 . 2011-03-28 10:27 941160 ----a-w- c:\windows\system32\nvdispco322090.dll

2011-09-24 12:43 . 2011-03-28 10:28 837736 ----a-w- c:\windows\system32\nvgenco322040.dll

2011-09-24 12:42 . 2011-03-28 10:28 57960 ----a-w- c:\windows\system32\OpenCL.dll

2011-09-24 12:42 . 2011-03-28 10:28 6049384 ----a-w- c:\windows\system32\nvwgf2um.dll

2011-09-24 12:42 . 2011-03-28 10:28 15063656 ----a-w- c:\windows\system32\nvoglv32.dll

2011-09-24 12:42 . 2011-03-28 10:28 10518248 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys

2011-09-24 12:42 . 2011-03-28 10:27 10084968 ----a-w- c:\windows\system32\nvd3dum.dll

2011-09-24 12:42 . 2011-03-28 10:27 4943976 ----a-w- c:\windows\system32\nvcuda.dll

2011-09-24 12:42 . 2011-03-28 10:27 2897512 ----a-w- c:\windows\system32\nvcuvid.dll

2011-09-24 12:42 . 2011-03-28 10:27 2252904 ----a-w- c:\windows\system32\nvcuvenc.dll

2011-09-24 12:42 . 2011-03-28 10:27 13011560 ----a-w- c:\windows\system32\nvcompiler.dll

2011-09-24 12:41 . 2011-09-24 12:49 -------- d-----w- c:\program files\NVIDIA Corporation