Ga naar inhoud

fout melding , kan rtl120bpl niet vinden

brazempje

Door brazempje
in Archief Windows Algemeen

 Delen

Aanbevolen berichten

  • Reacties 39
  • Aangemaakt
  • Laatste reactie

Beste reacties in dit topic

Populaire dagen

Beste reacties in dit topic

Populaire dagen

brazempje Bijdrager

brazempje

Geplaatst:
  • Auteur
Geplaatst:

ComboFix 12-02-10.03 - Gebruiker 11-02-2012 11:25:56.2.4 - x86

Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.31.1043.18.3326.1993 [GMT 1:00]

Gestart vanuit: c:\users\Gebruiker\Desktop\11111.exe

AV: AVG Internet Security *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}

AV: Microsoft Security Essentials *Disabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}

FW: AVG Firewall *Enabled* {621CC794-9486-F902-D092-0484E8EA828B}

SP: AVG Internet Security *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}

SP: Microsoft Security Essentials *Disabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}

SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

---- Voorgaande Run -------

.

C:\90210.exe

C:\iexplor520.exe

C:\Iexplor701.exe

C:\Iexploreiosg.exe

C:\Install.exe

c:\program files\INSTALL.LOG

c:\programdata\Tages

c:\programdata\Tages\100663612\Serial.txt

c:\programdata\Tages\Priv.xey

c:\users\Gebruiker\AppData\Roaming\.#

c:\users\Gebruiker\AppData\Roaming\client

c:\users\Gebruiker\AppData\Roaming\data.dat

c:\users\Gebruiker\AppData\Roaming\Gebruiker3SQLite3.dll

c:\users\Gebruiker\AppData\Roaming\Gebruikerlog.dat

c:\users\Gebruiker\AppData\Roaming\Secure-Soft Bot

c:\users\Gebruiker\AppData\Roaming\Svchost.exe

c:\users\Gebruiker\AppData\Roaming\system32

c:\users\Gebruiker\AppData\Roaming\Windowsupdate

c:\users\Gebruiker\AppData\Roaming\Windowsupdate\Update - kopie (2).exe

c:\users\Gebruiker\AppData\Roaming\Windowsupdate\Update - kopie (3).exe

c:\users\Gebruiker\AppData\Roaming\Windowsupdate\Update - kopie.exe

c:\users\Gebruiker\AppData\Roaming\Windowsupdate\Update.exe

c:\windows\IsUn0413.exe

c:\windows\system32\CddbCdda.dll

c:\windows\system32\muzapp.exe

c:\windows\system32\system

c:\windows\unin0413.exe

.

.

(((((((((((((((((((( Bestanden Gemaakt van 2012-01-11 to 2012-02-11 ))))))))))))))))))))))))))))))

.

.

2012-02-11 10:35 . 2012-02-11 10:35 -------- d-----w- c:\users\Gebruiker\AppData\Local\temp

2012-02-11 10:35 . 2012-02-11 10:35 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp

2012-02-11 10:35 . 2012-02-11 10:35 -------- d-----w- c:\users\Default\AppData\Local\temp

2012-02-10 18:38 . 2012-01-05 19:19 6557240 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{A566E735-D703-4BA4-9493-2275FDE8275F}\mpengine.dll

2012-02-10 18:05 . 2012-02-10 18:05 -------- d-----w- c:\users\Gebruiker\AppData\Roaming\AVG9

2012-02-10 17:09 . 2012-02-10 17:09 -------- d-----w- C:\rsit

2012-02-10 16:11 . 2012-02-10 16:10 713784 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{5825539C-3241-47EF-982C-6339D579017E}\gapaengine.dll

2012-02-06 17:37 . 2012-02-10 11:55 -------- d-----w- c:\program files\Ask.com

2012-02-06 17:36 . 2012-02-06 17:36 -------- d-----w- c:\users\Gebruiker\AppData\Local\APN

2012-02-05 17:18 . 2012-02-05 17:18 388096 ----a-r- c:\users\Gebruiker\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

2012-02-05 17:18 . 2012-02-05 17:18 -------- d-----w- c:\program files\Trend Micro

2012-02-05 10:30 . 2012-02-05 10:30 -------- d-----w- c:\program files\Common Files\Java

2012-02-05 10:07 . 2012-02-05 10:07 -------- d-----w- c:\program files\E Dev

2012-02-04 18:18 . 2012-02-04 18:18 -------- d-----w- c:\users\Gebruiker\AppData\Roaming\TuneUp Software

2012-02-04 18:17 . 2012-02-11 08:22 -------- d-----w- c:\programdata\TuneUp Software

2012-02-04 18:17 . 2012-02-04 18:17 -------- d-sh--w- c:\programdata\{32364CEA-7855-4A3C-B674-53D8E9B97936}

2012-02-04 15:40 . 2008-08-26 08:26 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys

2012-02-04 15:40 . 2012-02-04 15:40 -------- d-----w- c:\program files\PC Connectivity Solution

2012-01-23 13:07 . 2012-01-23 13:07 -------- d-----w- c:\program files\iPod

2012-01-18 15:18 . 2011-11-17 06:48 440192 ----a-w- c:\windows\system32\drivers\ksecdd.sys

2012-01-18 15:18 . 2011-11-16 16:23 377344 ----a-w- c:\windows\system32\winhttp.dll

2012-01-18 15:18 . 2011-11-16 16:23 72704 ----a-w- c:\windows\system32\secur32.dll

2012-01-18 15:18 . 2011-11-16 16:23 278528 ----a-w- c:\windows\system32\schannel.dll

2012-01-18 15:18 . 2011-11-16 16:21 1259008 ----a-w- c:\windows\system32\lsasrv.dll

2012-01-18 15:18 . 2011-11-16 14:12 9728 ----a-w- c:\windows\system32\lsass.exe

.

.

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-02-05 10:30 . 2010-04-21 13:58 472808 ----a-w- c:\windows\system32\deployJava1.dll

2012-01-31 12:44 . 2009-10-03 13:25 237072 ------w- c:\windows\system32\MpSigStub.exe

2012-01-26 10:54 . 2009-09-19 18:52 139128 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys

2012-01-26 10:54 . 2010-02-28 17:13 215128 ----a-w- c:\windows\system32\PnkBstrB.xtr

2012-01-26 10:54 . 2009-09-19 18:52 215128 ----a-w- c:\windows\system32\PnkBstrB.exe

2012-01-05 19:19 . 2010-12-23 16:54 6557240 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll

2011-12-30 13:48 . 2011-05-15 11:31 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2011-12-22 13:36 . 2009-09-19 18:52 75064 ----a-w- c:\windows\system32\PnkBstrA.exe

2011-12-10 15:31 . 2009-09-19 18:52 22328 ----a-w- c:\users\Gebruiker\AppData\Roaming\PnkBstrK.sys

2011-11-25 15:59 . 2012-01-11 16:12 376320 ----a-w- c:\windows\system32\winsrv.dll

2011-11-23 13:37 . 2011-12-15 11:22 2043904 ----a-w- c:\windows\system32\win32k.sys

2011-11-18 20:23 . 2012-01-11 16:12 1205064 ----a-w- c:\windows\system32\ntdll.dll

2011-11-18 17:47 . 2012-01-11 16:12 66560 ----a-w- c:\windows\system32\packager.dll

2010-11-28 13:37 . 2010-11-28 13:38 1164640 ----a-w- c:\program files\unins000.exe

2010-11-18 19:48 . 2010-11-28 13:38 1792000 ----a-w- c:\program files\launcher.exe

2009-06-16 18:54 . 2009-08-16 18:45 13727048 ----a-w- c:\program files\winzip121.exe

2001-05-24 09:59 . 2009-09-26 17:05 162304 ----a-w- c:\program files\UNWISE.EXE

1998-11-08 08:10 . 2009-08-17 16:30 520 ----a-w- c:\program files\car2.reg

1998-10-16 08:05 . 2009-08-17 16:30 118784 ----a-w- c:\program files\d3d.bdd

1998-07-25 11:42 . 2009-08-17 16:30 69632 ----a-w- c:\program files\3dfx_win.bdd

1998-07-24 15:48 . 2009-08-17 16:30 69632 ----a-w- c:\program files\hardware_3dfx.bdd

1998-07-21 14:12 . 2009-08-17 16:30 236544 ----a-w- c:\program files\hardware_d3d.bdd

1998-06-13 05:49 . 2009-08-17 16:30 17920 ----a-w- c:\program files\DDRAW.BDD

1998-06-13 05:48 . 2009-08-17 16:30 139776 ----a-w- c:\program files\SOFTD.BDD

1998-06-13 05:48 . 2009-08-17 16:30 18432 ----a-w- c:\program files\SOFTB.BDD

1998-06-13 05:48 . 2009-08-17 16:30 34304 ----a-w- c:\program files\SOFTTZ.BDD

1998-06-13 05:48 . 2009-08-17 16:30 31232 ----a-w- c:\program files\SOFTT.BDD

1998-06-13 05:48 . 2009-08-17 16:30 100864 ----a-w- c:\program files\SOFTHZF.BDD

1998-06-13 05:48 . 2009-08-17 16:30 53248 ----a-w- c:\program files\SOFTHF.BDD

1998-06-13 05:48 . 2009-08-17 16:30 137216 ----a-w- c:\program files\SFTIZFBF.BDD

1998-06-13 05:47 . 2009-08-17 16:30 135168 ----a-w- c:\program files\SOFTIZBF.BDD

1998-06-13 05:47 . 2009-08-17 16:30 142848 ----a-w- c:\program files\SOFTIZFF.BDD

1998-06-13 05:47 . 2009-08-17 16:30 173568 ----a-w- c:\program files\SOFTIZF.BDD

1998-06-13 05:47 . 2009-08-17 16:30 103424 ----a-w- c:\program files\SOFTIF.BDD

1998-06-13 05:47 . 2009-08-17 16:30 13312 ----a-w- c:\program files\SOFTIZ.BDD

1998-06-13 05:47 . 2009-08-17 16:30 12288 ----a-w- c:\program files\SOFTI.BDD

1998-06-13 05:47 . 2009-08-17 16:30 108544 ----a-w- c:\program files\SOFTPRMF.BDD

1998-06-13 05:47 . 2009-08-17 16:30 8704 ----a-w- c:\program files\MCGA.BDD

1998-06-13 05:47 . 2009-08-17 16:30 23552 ----a-w- c:\program files\VESA.BDD

.

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"aux2"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

@="Service"

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

@="Service"

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]

2012-01-03 07:37 843712 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]

2008-01-22 09:13 152872 ----a-w- c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray.exe]

2008-01-21 02:25 125952 ----a-w- c:\windows\ehome\ehtray.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]

2009-02-26 17:36 30040 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]

2012-01-16 16:22 421736 ----a-w- c:\program files\iTunes\iTunesHelper.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PcSync]

2006-06-27 14:21 1449984 ----a-w- c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]

2008-05-20 10:06 6144000 ----a-w- c:\windows\RtHDVCpl.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skytel]

2007-11-20 10:15 1826816 ----a-w- c:\windows\SkyTel.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SNPSTD2]

2004-08-30 14:37 286720 ----a-w- c:\windows\vsnpstd2.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]

2009-08-16 18:39 39408 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]

"HP Software Update"=c:\program files\Hp\HP Software Update\HPWuSchd2.exe

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe"

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"

.

R2 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys [x]

S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

.

Inhoud van de 'Gedeelde Taken' map

.

2012-02-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2009-08-25 14:29]

.

2012-02-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2009-08-25 14:29]

.

2012-02-11 c:\windows\Tasks\HP Photo Creations Messager.job

- c:\programdata\HP Photo Creations\MessageCheck.exe [2011-02-15 10:11]

.

.

------- Bijkomende Scan -------

.

uStart Page = hxxp://msn.nl/

IE: Zoek op het web - c:\program files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html

TCP: DhcpNameServer = 192.168.1.1

.

- - - - ORPHANS VERWIJDERD - - - -

.

Toolbar-10 - (no file)

WebBrowser-{AB8DC1E0-22BE-4181-B77E-02C495E031F8} - c:\program files\HyvesToolbar\Hyves Toolbar\tbcore3.dll

WebBrowser-{5E5AB302-7F65-44CD-8211-C1D4CAACCEA3} - (no file)

WebBrowser-{FC7CC2AB-180C-41BD-95D2-FFA6BA645EB8} - (no file)

WebBrowser-{B9D63C58-90CC-428B-8D3B-CBB88EB07E7E} - (no file)

WebBrowser-{13E6001D-2628-4EBA-B8E1-36866E267EAF} - (no file)

WebBrowser-{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - (no file)

WebBrowser-{65CA59EE-9920-4D7F-8C41-BFA12403261A} - (no file)

WebBrowser-{F4E6547E-325B-403C-A3BB-AD29ED37A92F} - (no file)

WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)

ShellExecuteHooks-{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - (no file)

SafeBoot-WudfPf

SafeBoot-WudfRd

SafeBoot-BsScanner

MSConfigStartUp-Adobe Reader Speed Launcher - c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe

MSConfigStartUp-HD Treiber x64 - c:\users\Gebruiker\AppData\Roaming\Treiber_Update.exe

MSConfigStartUp-MSSE - c:\program files\Microsoft Security Essentials\msseces.exe

MSConfigStartUp-NBKeyScan - c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe

MSConfigStartUp-NSLauncher - c:\program files\Nokia\Nokia Software Launcher\NSLauncher.exe

MSConfigStartUp-SUPERAntiSpyware - c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe

AddRemove-Klaverjassen - c:\windows\unin0413.exe

AddRemove-The Treasures of Montezuma 2 Deluxe - c:\games\The Treasures of Montezuma 2 Deluxe\GameInstlr.exe

.

.

.

**************************************************************************

.

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2012-02-11 11:35

Windows 6.0.6002 Service Pack 2 NTFS

.

scannen van verborgen processen ...

.

scannen van verborgen autostart items ...

.

scannen van verborgen bestanden ...

.

Scan succesvol afgerond

verborgen bestanden: 0

.

**************************************************************************

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\npggsvc]

"ImagePath"="c:\windows\system32\GameMon.des -service"

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

.

[HKEY_USERS\S-1-5-21-1117353456-3715185269-3049925691-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]

@Allowed: (Read) (RestrictedCode)

"??"=hex:95,ef,02,97,d9,4c,ed,d5,13,15,e4,3e,2a,ed,21,fc,5d,ef,68,58,0c,6e,db,

e7,98,ad,24,b3,4c,37,9c,19,a0,45,c5,4d,d6,43,85,22,19,f3,90,22,90,51,62,65,\

"??"=hex:06,db,d0,4b,b7,08,cb,0b,a0,18,78,ad,01,5c,b3,28

.

[HKEY_USERS\S-1-5-21-1117353456-3715185269-3049925691-1000\Software\SecuROM\License information*]

"datasecu"=hex:93,b3,34,a8,8b,a6,06,bc,9d,c2,f3,ab,24,b6,d4,b8,71,f0,a3,74,37,

18,43,ea,86,85,64,df,c4,14,94,c1,6d,4f,6f,9d,24,1c,a9,e1,55,d7,ec,a9,ed,44,\

"rkeysecu"=hex:87,59,20,87,ce,78,2a,73,2c,31,c3,99,23,50,99,c5

.

[HKEY_USERS\S-1-5-21-1117353456-3715185269-3049925691-1000\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QImageIOHandlerFactoryInterface:\c:\Users\Gebruiker\Desktop\BF3\B*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\imageformats]

"qgif4.dll"=multi:"2011-10-10T16:42\00gif\00\00"

"qico4.dll"=multi:"2011-10-10T16:42\00ico\00\00"

"qjpeg4.dll"=multi:"2011-10-10T16:42\00jpeg\00jpg\00\00"

.

[HKEY_USERS\S-1-5-21-1117353456-3715185269-3049925691-1000\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.7\com.trolltech.Qt.QTextCodecFactoryInterface:\c:\Users\Gebruiker\Desktop\BF3\B*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\codecs]

"qcncodecs4.dll"=multi:"2011-10-10T16:42\00GB18030\00GBK\00GB2312\00CP936\00MS936\00windows-936\00MIB: 114\00MIB: 113\00MIB: 2025\00\00"

"qkrcodecs4.dll"=multi:"2011-10-10T16:42\00EUC-KR\00cp949\00MIB: 38\00MIB: -949\00\00"

"qtwcodecs4.dll"=multi:"2011-10-10T16:42\00Big5\00Big5-HKSCS\00Big5-ETen\00CP950\00MIB: 2026\00MIB: 2101\00\00"

.

[HKEY_USERS\S-1-5-21-1117353456-3715185269-3049925691-1000\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.7.false\c:\users\Gebruiker\Desktop\BF3\B*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\codecs]

"qcncodecs4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"

"qjpcodecs4.dll"=multi:"40602\000\00Windows msvc release full-config\002011-10-10T16:42\00\00"

"qjpcodecsd4.dll"=multi:"40703\001\00Windows msvc debug full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"

"qkrcodecs4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"

"qtwcodecs4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"

.

[HKEY_USERS\S-1-5-21-1117353456-3715185269-3049925691-1000\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.7.false\c:\users\Gebruiker\Desktop\BF3\B*a*t*t*l*e*f*i*e*l*d* *3*"!\Core\imageformats]

"Microsoft.VC80.CRT.manifest"=multi:"0\001\00unknown\002011-10-10T16:42\00\00"

"msvcr80.dll"=multi:"0\001\00unknown\002011-10-10T16:42\00\00"

"qgif4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"

"qico4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"

"qjpeg4.dll"=multi:"40703\000\00Windows msvc release full-config QT_NO_DRAGANDDROP\002011-10-10T16:42\00\00"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

Voltooingstijd: 2012-02-11 11:38:29

ComboFix-quarantined-files.txt 2012-02-11 10:38

.

Pre-Run: 616.052.621.312 bytes beschikbaar

Post-Run: 615.973.830.656 bytes beschikbaar

.

- - End Of File - - F4EF9EA5E7F001959B28C1BEBCFF3C06

Link naar reactie
Delen op andere sites
kape Grootmeester

kape

Geplaatst:
Geplaatst:

Open een kladblokbestand.

Kopieer en plak daarin de onderstaande vetgedrukte tekst.

Folder::

C:\rsit

c:\program files\Ask.com

c:\programdata\{32364CEA-7855-4A3C-B674-53D8E9B97936}

DDS::

IE: Zoek op het web - c:\program files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html

Sla dit bestand op je bureaublad op als CFScript.txt.

Sleep CFScript.txt in ComboFix.exe

Dit zal ComboFix doen herstarten. Start opnieuw op als dat gevraagd wordt.

Post na herstart de inhoud van de Combofix.txt in je volgende bericht.

Link naar reactie
Delen op andere sites
Gast
Dit topic is nu gesloten voor nieuwe reacties.
 Delen
Ga naar topic overzicht
Logo

OVER ONS

PC Helpforum helpt GRATIS computergebruikers sinds juli 2006. Ons team geeft via het forum professioneel antwoord op uw vragen en probeert uw pc problemen zo snel mogelijk op te lossen. Word lid vandaag, plaats je vraag online en het PC Helpforum-team helpt u graag verder!

SITEMAP

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.