netwerk adaptor kan niet meer inschakelen.

[kweezie wabbit]

OK, er is geen haast bij en wij zijn 24/7 bereikbaar.

[martinha]

Microsoft Windows XP Home Edition 5.1.2600.3.1252.31.1043.18.1014.595 [GMT 2:00]

Gestart vanuit: c:\documents and settings\Debby Bakker\Bureaublad\ComboFix.exe

AV: Trend Micro Internet Security Pro *Enabled/Updated* {7D2296BC-32CC-4519-917E-52E652474AF5}

FW: Trend Micro Personal Firewall *Enabled* {3E790E9E-6A5D-4303-A7F9-185EC20F3EB6}

.

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\documents and settings\Debby Bakker\Local Settings\Application Data\{273dfab5-1ab7-6771-5ca5-1e08ee31a024}

c:\documents and settings\Debby Bakker\Local Settings\Application Data\{273dfab5-1ab7-6771-5ca5-1e08ee31a024}\@

c:\documents and settings\Debby Bakker\Local Settings\Application Data\{273dfab5-1ab7-6771-5ca5-1e08ee31a024}\n

c:\windows\Installer\{273dfab5-1ab7-6771-5ca5-1e08ee31a024}

.

---- Voorgaande Run -------

.

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\burnlib.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\CddbLangNL.dll

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\dsp_sps.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\enc_aacplus.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\enc_flac.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\enc_flake.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\enc_lame.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\enc_vorbis.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\enc_wav.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\enc_wma.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\gen_crasher.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\gen_dropbox.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\gen_ff.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\gen_hotkeys.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\gen_ml.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\gen_orgler.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\gen_tray.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\gen_undo.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_avi.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_cdda.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_dshow.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_flac.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_flv.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_linein.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_midi.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_mkv.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_mod.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_mp3.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_mp4.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_nsv.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_swf.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_vorbis.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_wav.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_wave.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_wm.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\in_wv.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_addons.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_autotag.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_bookmarks.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_dash.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_disc.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_history.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_impex.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_local.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_nowplaying.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_online.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_orb.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_playlists.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_plg.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_pmp.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_rg.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_transcode.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ml_wire.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\ombrowser.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\out_disk.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\out_ds.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\out_wave.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\playlist.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\pmp_activesync.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\pmp_ipod.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\pmp_njb.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\pmp_p4s.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\pmp_usb.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\tagz.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\vis_avs.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\winamp.lng

c:\documents and settings\Debby Bakker\Local Settings\temp\WLZ4B2A.tmp\winampa.lng

C:\ipconfig.txt

c:\windows\system32\drivers\etc\hosts.ics

.

.

(((((((((((((((((((( Bestanden Gemaakt van 2012-05-20 to 2012-06-20 ))))))))))))))))))))))))))))))

.

.

2012-06-19 12:47 . 2012-06-19 12:47 40776 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2012-06-19 12:42 . 2012-06-19 12:42 -------- d-----w- c:\windows\system32\wbem\Repository

2012-06-19 12:41 . 2012-06-19 12:51 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2012-06-19 12:39 . 2012-06-20 17:51 -------- d--h--r- c:\documents and settings\Debby Bakker\Onlangs geopend

2012-06-19 12:38 . 2012-06-19 12:38 -------- d-----w- c:\program files\Microsoft Silverlight

2012-06-19 12:38 . 2012-06-19 12:38 -------- d-----w- c:\program files\Mozilla Maintenance Service

2012-06-19 12:33 . 2012-06-19 12:33 -------- d-----w- c:\windows\kdefense

2012-06-19 12:33 . 2012-06-19 12:36 -------- d-----w- c:\documents and settings\Debby Bakker\Local Settings\Application Data\Trend Micro

2012-06-19 12:33 . 2012-06-19 12:33 -------- d-----w- c:\documents and settings\All Users\Application Data\Trend Micro

2012-06-15 12:35 . 2012-06-15 12:35 -------- d-----w- c:\program files\Broadcom

2012-06-12 15:29 . 2012-04-04 13:56 22344 ----a-w- c:\windows\system32\drivers\mbam.sys

2012-06-12 13:47 . 2012-06-19 12:42 -------- d-----w- c:\documents and settings\Administrator

2012-06-11 19:15 . 2012-06-11 19:15 -------- d-----w- c:\documents and settings\Debby Bakker\Local Settings\Application Data\Deployment

.

.

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-05-31 13:22 . 2006-05-31 07:19 602624 ----a-w- c:\windows\system32\crypt32.dll

2012-05-05 15:08 . 2012-04-03 11:35 419488 ----a-w- c:\windows\system32\FlashPlayerApp.exe

2012-05-05 15:08 . 2011-06-05 10:25 70304 -c--a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2012-04-11 13:55 . 2004-08-04 00:58 2031104 ----a-w- c:\windows\system32\ntkrnlpa.exe

2012-04-11 13:55 . 2006-05-31 07:19 2152960 ----a-w- c:\windows\system32\ntoskrnl.exe

2012-04-11 13:55 . 2006-05-31 07:19 1862400 ----a-w- c:\windows\system32\win32k.sys

2012-05-03 20:10 . 2011-06-05 11:57 97208 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll

.

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"UfSeAgnt.exe"="c:\program files\Trend Micro\Internet Security\UfSeAgnt.exe" [2008-02-15 1398024]

"WinampAgent"="c:\program files\Winamp\winampa.exe" [2010-01-13 37888]

"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2007-05-14 644696]

"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2007-04-03 1603152]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-03-27 37296]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712]

.

[HKEY_LOCAL_MACHINE\software\microsoft\security center]

"AntiVirusOverride"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\TrendAntiVirus]

"DisableMonitoring"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\TrendFirewall]

"DisableMonitoring"=dword:00000001

.

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

.

R2 tdudf;TOSHIBA UDF File System Driver;c:\windows\system32\drivers\tdudf.sys [18-4-2006 15:12 98816]

R2 tmevtmgr;tmevtmgr;c:\windows\system32\drivers\tmevtmgr.sys [3-8-2008 20:46 52240]

R2 tmpreflt;tmpreflt;c:\windows\system32\drivers\tmpreflt.sys [16-2-2008 1:01 36368]

R3 tmcfw;Trend Micro Common Firewall Service;c:\windows\system32\drivers\TM_CFW.sys [16-2-2008 1:01 333328]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [3-4-2012 13:35 257696]

S3 dump_wmimmc;dump_wmimmc;\??\c:\documents and settings\BO\Bureaublad\9Dragons\GameGuard\dump_wmimmc.sys --> c:\documents and settings\BO\Bureaublad\9Dragons\GameGuard\dump_wmimmc.sys [?]

S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [19-6-2012 14:47 40776]

S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [3-5-2012 22:10 129976]

S3 TmPfw;Trend Micro Personal Firewall;c:\progra~1\TRENDM~1\INTERN~1\TmPfw.exe [3-8-2008 20:46 488768]

S3 tmproxy;Trend Micro Proxy Service;c:\program files\Trend Micro\Internet Security\TmProxy.exe [3-8-2008 20:46 648456]

S3 WinDefend;Windows Defender;c:\windows\System32\svchost.exe -k secsvcs [31-5-2006 9:19 14336]

.

Inhoud van de 'Gedeelde Taken' map

.

2012-06-20 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-03 15:08]

.

.

------- Bijkomende Scan -------

.

uStart Page = hxxp://www.google.com/

uInternet Settings,ProxyServer = 80.126.64.123:3128

uInternet Settings,ProxyOverride = <local>

TCP: DhcpNameServer = 192.168.1.254

FF - ProfilePath - c:\documents and settings\Debby Bakker\Application Data\Mozilla\Firefox\Profiles\sfqql9om.default\

FF - prefs.js: browser.startup.homepage - hxxp://tc4.travian.nl/dorf1.php|SOLID vs CRAP/BAZEN(LOSERS) - Pagina 26

.

.

**************************************************************************

.

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2012-06-20 20:05

Windows 5.1.2600 Service Pack 3 NTFS

.

scannen van verborgen processen ...

.

scannen van verborgen autostart items ...

.

scannen van verborgen bestanden ...

.

.

c:\windows\explorer(2).exe:userini.exe 22528 bytes executable

c:\windows\explorer(3).exe:userini.exe 22528 bytes executable

c:\windows\explorer(4).exe:userini.exe 22528 bytes executable

c:\windows\explorer(5).exe:userini.exe 22528 bytes executable

.

Scan succesvol afgerond

verborgen bestanden: 4

.

**************************************************************************

.

--------------------- DLLs Geladen Onder Lopende Processen ---------------------

.

- - - - - - - > 'explorer.exe'(2068)

c:\windows\system32\webcheck.dll

.

------------------------ Andere Aktieve Processen ------------------------

.

c:\program files\Intel\Wireless\Bin\EvtEng.exe

c:\program files\Intel\Wireless\Bin\S24EvMon.exe

c:\program files\TOSHIBA\ConfigFree\CFSvcs.exe

c:\program files\Java\jre6\bin\jqs.exe

c:\program files\Intel\Wireless\Bin\RegSrvc.exe

c:\windows\system32\TODDSrv.exe

c:\windows\system32\wdfmgr.exe

c:\program files\Trend Micro\BM\TMBMSRV.exe

.

**************************************************************************

.

Voltooingstijd: 2012-06-20 20:10:27 - machine werd herstart

ComboFix-quarantined-files.txt 2012-06-20 18:10

ComboFix2.txt 2012-06-12 18:27

.

Pre-Run: 25.970.401.280 bytes beschikbaar

Post-Run: 25.973.223.424 bytes beschikbaar

.

- - End Of File - - 6C3C3F39CDAB921F808A19692C1FC0A4

ennnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn internet werkt weer )

verder nog tips of kan ik jullie opnieuw bedanken en de knop opgelost aanklikken ?

[kweezie wabbit]

Combofix heeft weer goed werk geleverd

Verwijder Combofix: Start -> Uitvoeren en typ: ComboFix /Uninstall (met spatie voor de /)

Dit zal Combofix verwijderen + gerelateerde mappen en bestanden, herstelt de klokinstellingen opnieuw, verbergt de bestandsextensies, gaat verborgen bestanden en systeembestanden terug verbergen en maakt een nieuw herstelpunt.

Indien aanwezig mag je de map C:\Qoobox manueel verwijderen.

Herstart de pc.

Als internet nog steeds werkt na voorgaande acties, mag je verdergaan.

Download CCleaner. (Als je het nog niet hebt)

Installeer het (Als je niet wil dat Google Chrome op je pc als standaard webbrowser wordt geïnstalleerd, moet je de 2 vinkjes wegdoen !!!) en start CCleaner op.

Klik in de linkse kolom op “Cleaner”. Klik achtereenvolgens op ‘Analyseren’ en 'Schoonmaken'.

Klik vervolgens in de linkse kolom op “Register” en klik op ‘Scan naar problemen”.

Als er fouten gevonden worden klik je op ”Herstel geselecteerde problemen” en ”OK”.

Dan krijg je de vraag om een back-up te maken. Klik op “JA”. Kies dan “Herstel alle geselecteerde fouten”.

Soms is 1 analyse niet voldoende. Deze procedure mag je herhalen tot de analyse geen fouten meer aangeeft.

Sluit hierna CCleaner terug af.

Wil je dit uitgebreid in beeld bekijken, klik dan hier voor de handleiding.

Het is aangewezen om de bestaande herstelpunten te verwijderen (daar kunnen besmette herstelpunten tussen zitten die je zou kunnen terugzetten) door systeemherstel tijdelijk uit te schakelen.

Doe dit via Configuratiescherm -> Prestaties en onderhoud -> Systeem -> tab Systeemherstel

Vink het vakje aan bij systeemherstel en klik OK.

Herstart de pc.

Ga opnieuw naar Configuratiescherm -> Prestaties en onderhoud -> Systeem -> tab Systeemherstel

Vink het vakje uit bij systeemherstel en klik OK.

Dan maak je een nieuw herstelpunt.

Ga naar Start - help en ondersteuning, bij kies een taak klik je op Wijzigingen ongedaan maken met systeemherstel.

Selecteer herstelpunt aanmaken en klik op volgende.

Geef een beschrijving voor het herstelpunt en klik op aanmaken.

Je krijgt dan de melding dat het herstelpunt is aangemaakt en dan kan je alle vensters sluiten.

Hestart de pc en als alles dan nog steeds normaal werkt, mag je de knop "opgelost" aanklikken.

[kweezie wabbit]

Als je verder geen vragen of problemen meer hebt, mag je dit onderwerp afsluiten door een klik op de knop +Markeer als opgelost.

Nog veel computerplezier

[martinha]

excuus, dacht dat ik dat al had gedaan.

nog heel erg bedankt voor jullie hulp