Trage laptop

[FVE]

Ja, in de veilige modus is Ares nu verwijderd

grootste probleem is dus nu de muiscursor die vastloopt

[kape]

Download ComboFix van één van deze locaties:

Link 1

Link 2

* BELANGRIJK !!! Sla ComboFix.exe op je Bureaublad op

1. Schakel alle antivirus- en antispywareprogramma's uit, want anders kunnen ze misschien conflicteren met ComboFix. Hier is een handleiding over hoe je ze kan uitschakelen:

Klik hier

2. Het kan voorkomen dat de computer meerdere malen opnieuw gestart moet worden, dit is normaal.

3. Dubbelklik op "Combofix.exe" om de tool te starten.

4. Klik niet in het scherm van Combofix als deze actief is, hierdoor kan de 'tool' vastlopen.

Noot !!! Als er een error wordt getoond met de melding "Illegal operation attempted on a registery key that has been marked for deletion", herstart dan de computer.

5. Wanneer ComboFix klaar is, zal het het een logbestand voor je maken. Post de inhoud van dit logbestand (te vinden als C:\ComboFix.txt) in je volgende bericht.

[FVE]

De muis deed het even weer

ComboFix 12-09-26.04 - Joke 26-09-2012 23:43:48.1.2 - x86

Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.31.1043.18.1013.269 [GMT 2:00]

Gestart vanuit: c:\users\Joke\Documents\Downloads\ComboFix.exe

.

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

C:\install.exe

c:\program files\Vid-Saver

c:\program files\Vid-Saver\Uninstall.exe

c:\program files\Vid-Saver\Vid-Saver.exe

c:\program files\Vid-Saver\Vid-Saver.ico

c:\program files\Vid-Saver\Vid-Saver.ini

c:\program files\Vid-Saver\Vid-SaverGui.exe

c:\program files\Vid-Saver\Vid-SaverInstaller.log

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\14d02158d1dc4c498d1acd9638684120\Name.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\194ac47433b8bc54b2df1d99c554a72e\EV.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\20252d6e001ae3774b425e81ba09b666\Fcntl.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\2076671ee5d0a5323570c92c74abac6f\Process.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\23ae7fb85999872530b5a5d4d67a4f44\Registry.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\2d2847f7dd2a1fddd0fdb79d9d64ba93\List.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\2f0807b0946b0fe6a4923ffadf1218fc\vxs.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\461090bfc26706cc26ffa02662c1592c\Syck.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\48a4e6ef370984d8d9ce53660d66a7a5\Unicode.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\4e3813a1edb6903dcc223941e51f7e18\Parser.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\52831fecbfbbfee1a05b91977e499808\File.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\542ba247eebc159476ad07ad6bd76209\XS.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\5f6960e0234e0b14396e4c82a1f56c8f\HiRes.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\62aa3b09ac39e34fd76505142c94e975\Storable.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\64aa79000ff318c6735dfd0191e3b022\Scale.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\6a834a555edd63cb8706466e7c1666f2\Hostname.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\6c1da131f436ce35edb0690f338bdad8\File.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\6c25de79371a4db1d7e8eff0d11d5337\Base64.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\6eca2cf2961ac400050de852a1cbef9b\Byte.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\7020d50af327e3fc94b98242c307fc81\Cwd.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\76c0175b78e6f49c7544e19221d4457d\IO.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\7dd16cc839f33995d1a58e2773aa29b8\WinError.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\8245460bbc088712019f4f3ab3a844ff\icudt46.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\8245460bbc088712019f4f3ab3a844ff\icuin46.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\8245460bbc088712019f4f3ab3a844ff\icuuc46.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\8245460bbc088712019f4f3ab3a844ff\SQLite.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\855297e7b4b860331fdbdd53426f5e15\Dumper.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\86351894c58e4804ca004825fea78bbb\Encode.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\90198bd2c008178752393a8740fa6369\XS.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\9076f6dacaea506ecfb169822b132706\MD5.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\92d2aa3f2974636beefdb4636326e9c4\Scan.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\a33551806ec091669b28f0334ef049cc\DBI.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\a7c0cce4e1ac2c1f6d3e71bbe3c9bdd3\Socket.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\b7b4505cb0a127c242f14d779e410e03\POSIX.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\c06adade199b7f380d57181669fb22c1\Util.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\c3da4aa4c02db51c7f94d5eaf2438023\OLE.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\c8b0e39733c3e73e232a64a5c305ca76\API.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\e1ea0dbaf8a3ac5d1f0be83f219f8571\FastCalc.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\e775fca35641b4340ecf5cdba1fc6f62\Expat.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\ea4a4f99088551dd603ccfbabfaf3932\XSAccessor.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\f48694173221cfa9bad4275e2389b498\Win32.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\fc665959964b1312aee9d476290accdc\SHA1.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\fc8b9fd242032de837413f14e26ce21c\Zlib.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-3620\perl510.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-948\20252d6e001ae3774b425e81ba09b666\Fcntl.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-948\2076671ee5d0a5323570c92c74abac6f\Process.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-948\23ae7fb85999872530b5a5d4d67a4f44\Registry.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-948\23fe5d76b9491fa255db2281ac7687d5\Service.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-948\2d2847f7dd2a1fddd0fdb79d9d64ba93\List.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-948\6a834a555edd63cb8706466e7c1666f2\Hostname.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-948\7020d50af327e3fc94b98242c307fc81\Cwd.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-948\7dd16cc839f33995d1a58e2773aa29b8\WinError.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-948\855297e7b4b860331fdbdd53426f5e15\Dumper.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-948\86351894c58e4804ca004825fea78bbb\Encode.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-948\a7c0cce4e1ac2c1f6d3e71bbe3c9bdd3\Socket.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-948\b7b4505cb0a127c242f14d779e410e03\POSIX.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-948\c3da4aa4c02db51c7f94d5eaf2438023\OLE.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-948\f48694173221cfa9bad4275e2389b498\Win32.dll

c:\users\Joke\AppData\Local\Temp\pdk-Joke-948\perl510.dll

c:\users\Joke\AppData\Local\Vid-Saver

c:\users\Joke\AppData\Local\Vid-Saver\Chrome\Vid-Saver.crx

c:\windows\security\Database\tmp.edb

c:\windows\system32\uxt8075.tmp

.

.

(((((((((((((((((((( Bestanden Gemaakt van 2012-08-26 to 2012-09-26 ))))))))))))))))))))))))))))))

.

.

2012-09-26 21:58 . 2012-09-26 21:58 -------- d-----w- c:\users\Gast\AppData\Local\temp

2012-09-25 18:29 . 2012-09-25 18:30 -------- d-----w- c:\program files\Defraggler

2012-09-25 11:56 . 2012-08-30 08:17 6980552 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{89BC7F44-B593-4793-A7A9-EF61DE9FDBAA}\mpengine.dll

2012-09-24 11:41 . 2012-09-24 11:48 190 ----a-w- c:\windows\DeleteOnReboot.bat

2012-09-24 11:35 . 2012-09-24 11:35 -------- d-----w- c:\windows\system32\Extensions

2012-09-24 11:34 . 2012-09-24 11:34 -------- d-----w- c:\windows\system32\searchplugins

2012-09-24 11:34 . 2012-09-24 11:34 -------- d-----w- c:\programdata\Browser Manager

2012-09-24 11:30 . 2012-09-24 11:30 -------- d-----w- c:\program files\Perion

2012-09-24 10:43 . 2012-09-24 10:44 388096 ----a-r- c:\users\Joke\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

2012-09-24 10:43 . 2012-09-24 10:43 -------- d-----w- c:\program files\Trend Micro

2012-09-14 11:27 . 2012-09-14 11:27 -------- d-----w- c:\program files\Speccy

2012-09-14 09:14 . 2012-09-14 09:14 -------- d-----w- c:\users\Joke\AppData\Roaming\Malwarebytes

2012-09-14 09:14 . 2012-09-14 09:14 -------- d-----w- c:\programdata\Malwarebytes

2012-09-03 17:58 . 2012-09-03 18:44 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe

.

.

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-09-03 18:44 . 2011-10-06 17:48 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2012-08-21 09:13 . 2011-03-17 15:14 355632 ----a-w- c:\windows\system32\drivers\aswSP.sys

2012-08-21 09:13 . 2011-03-17 15:14 54232 ----a-w- c:\windows\system32\drivers\aswTdi.sys

2012-08-21 09:13 . 2011-03-17 15:14 729752 ----a-w- c:\windows\system32\drivers\aswSnx.sys

2012-08-21 09:13 . 2011-03-17 15:14 35928 ----a-w- c:\windows\system32\drivers\aswRdr.sys

2012-08-21 09:13 . 2011-03-17 15:14 58680 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys

2012-08-21 09:13 . 2011-03-17 15:14 21256 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys

2012-08-21 09:12 . 2011-03-17 15:13 41224 ----a-w- c:\windows\avastSS.scr

2012-08-21 09:12 . 2011-03-17 15:13 227648 ----a-w- c:\windows\system32\aswBoot.exe

.

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]

@="{472083B0-C522-11CF-8763-00608CC02F24}"

[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]

2012-08-21 09:12 121528 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2006-11-02 125440]

"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 201728]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-08-21 4282728]

"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2007-10-25 212992]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Systeempictogram van Squeezebox Server.lnk - c:\program files\Squeezebox\SqueezeTray.exe [2011-3-14 2162775]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableLUA"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]

2010-06-09 18:55 49208 ----a-w- c:\program files\HP\HP Software Update\hpwuschd2.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpWirelessAssistant]

2007-03-01 11:18 472776 ----a-w- c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify Web Helper]

2012-09-17 09:08 932528 ----a-w- c:\program files\Spotify\Data\SpotifyWebHelper.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]

2008-10-08 08:12 39408 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WAWifiMessage]

2007-01-10 14:12 317128 ----a-w- c:\program files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe

.

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]

"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

"Google Update"="c:\users\Joke\AppData\Local\Google\Update\GoogleUpdate.exe" /c

"ehTray.exe"=c:\windows\ehome\ehTray.exe

"Sidebar"=c:\program files\Windows Sidebar\sidebar.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" /startup

"HP Health Check Scheduler"=c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe

"QPService"="c:\program files\HP\QuickPlay\QPService.exe"

"HotKeysCmds"=c:\windows\system32\hkcmd.exe

"Persistence"=c:\windows\system32\igfxpers.exe

"IgfxTray"=c:\windows\system32\igfxtray.exe

"fssui"="c:\program files\Windows Live\Family Safety\fsui.exe" -autorun

"QlbCtrl"=%ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start

.

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]

"DisableMonitoring"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]

"DisableMonitoring"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]

"DisableMonitoring"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]

"AntiVirusOverride"=dword:00000001

"AntiSpywareOverride"=dword:00000001

.

R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [x]

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]

2007-04-19 11:23 452136 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe

.

Inhoud van de 'Gedeelde Taken' map

.

2012-09-04 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-03 18:44]

.

2011-09-15 c:\windows\Tasks\Google Software Updater.job

- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-11-17 19:16]

.

2012-09-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2009-12-26 09:39]

.

2012-09-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2009-12-26 09:39]

.

2010-10-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1756042752-1116401497-1990669267-1000Core.job

- c:\users\Joke\AppData\Local\Google\Update\GoogleUpdate.exe [2010-03-24 15:45]

.

2010-10-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1756042752-1116401497-1990669267-1000UA.job

- c:\users\Joke\AppData\Local\Google\Update\GoogleUpdate.exe [2010-03-24 15:45]

.

.

------- Bijkomende Scan -------

.

TCP: DhcpNameServer = 192.168.1.254

.

- - - - ORPHANS VERWIJDERD - - - -

.

WebBrowser-{3AD798D0-4642-4C55-BC14-CFE7DD19E0D1} - (no file)

MSConfigStartUp-ares - c:\program files\Ares\Ares.exe

AddRemove-01_Simmental - c:\program files\Samsung\USB Drivers\01_Simmental\Uninstall.exe

AddRemove-02_Siberian - c:\program files\Samsung\USB Drivers\02_Siberian\Uninstall.exe

AddRemove-03_Swallowtail - c:\program files\Samsung\USB Drivers\03_Swallowtail\Uninstall.exe

AddRemove-04_semseyite - c:\program files\Samsung\USB Drivers\04_semseyite\Uninstall.exe

AddRemove-05_Sloan - c:\program files\Samsung\USB Drivers\05_Sloan\Uninstall.exe

AddRemove-06_Spencer - c:\program files\Samsung\USB Drivers\06_Spencer\Uninstall.exe

AddRemove-07_Schorl - c:\program files\Samsung\USB Drivers\07_Schorl\Uninstall.exe

AddRemove-08_EMPChipset - c:\program files\Samsung\USB Drivers\08_EMPChipset\Uninstall.exe

AddRemove-09_Hsp - c:\program files\Samsung\USB Drivers\09_Hsp\Uninstall.exe

AddRemove-11_HSP_Plus_Default - c:\program files\Samsung\USB Drivers\11_HSP_Plus_Default\Uninstall.exe

AddRemove-16_Shrewsbury - c:\program files\Samsung\USB Drivers\16_Shrewsbury\Uninstall.exe

AddRemove-17_EMP_Chipset2 - c:\program files\Samsung\USB Drivers\17_EMP_Chipset2\Uninstall.exe

AddRemove-18_Zinia_Serial_Driver - c:\program files\Samsung\USB Drivers\18_Zinia_Serial_Driver\Uninstall.exe

AddRemove-19_VIA_driver - c:\program files\Samsung\USB Drivers\19_VIA_driver\Uninstall.exe

AddRemove-20_NXP_Driver - c:\program files\Samsung\USB Drivers\20_NXP_Driver\Uninstall.exe

AddRemove-22_WiBro_WiMAX - c:\program files\Samsung\USB Drivers\22_WiBro_WiMAX\Uninstall.exe

AddRemove-24_flashusbdriver - c:\program files\Samsung\USB Drivers\24_flashusbdriver\Uninstall.exe

AddRemove-25_escape - c:\program files\Samsung\USB Drivers\25_escape\Uninstall.exe

.

.

.

**************************************************************************

.

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2012-09-27 00:02

Windows 6.0.6000 NTFS

.

scannen van verborgen processen ...

.

scannen van verborgen autostart items ...

.

scannen van verborgen bestanden ...

.

Scan succesvol afgerond

verborgen bestanden: 0

.

**************************************************************************

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

------------------------ Andere Aktieve Processen ------------------------

.

c:\program files\AVAST Software\Avast\AvastSvc.exe

c:\windows\ehome\ehmsas.exe

c:\program files\Common Files\LightScribe\LSSrvc.exe

c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

c:\program files\Hewlett-Packard\Shared\hpqwmiex.exe

c:\program files\Windows Media Player\wmpnetwk.exe

c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

c:\progra~1\SQUEEZ~2\server\SQUEEZ~3.EXE

c:\program files\Hewlett-Packard\HP Health Check\hphc_service.exe

c:\windows\servicing\TrustedInstaller.exe

.

**************************************************************************

.

Voltooingstijd: 2012-09-27 00:11:32 - machine werd herstart

ComboFix-quarantined-files.txt 2012-09-26 22:10

.

Pre-Run: 36.740.153.344 bytes beschikbaar

Post-Run: 36.610.940.928 bytes beschikbaar

.

- - End Of File - - 74EEC511ED21180862E85EB42F2A1C2A

[FVE]

pc gaat wel sneller, muis werkt voorlopig, alleen het probleempje met update die niet geinstalleerd wordt, zie mijn andere bericht en als ik 2e tabblad open dan krijg ik MyStart by IncrediBar, dat wil ik helemaal niet, ik wil een google tabblad

[kape]

Verwijder manueel volgende vetgedrukte mappen :

c:\windows\system32\searchplugins

c:\programdata\Browser Manager

c:\program files\Perion

Download AdwCleaner by Xplode naar je Bureaublad.

• Sluit alle openstaande vensters
  
• Rechtsklik op AdwCleaner en selecteer als Administrator uitvoeren...
  
• Klik vervolgens op Delete
  
• Klik bij AdwCleaner – Information op OK
  
• Klik bij AdwCleaner – Restart Required op OK
  

Alle icoontjes verdwijnen van het Bureaublad, Dit is normaal

Je PC word opnieuw opgestart en er een opent logfile (C:\ AdwCleaner[xx].txt ) post de inhoud hier in een volgende bericht.

[FVE]

Als ik dat doe krijg ik weer de melding: Line 2056 (File "C:\Users\Joke\Documents\Downloads\adwcleaner (10).exe"):

Error: Variable used without being declared

[kape]

Heel erg vreemd, want eerder is er al een logje van AdwCleaner gelukt ???

Heb je nu nog die Incredibar op je tweede tabblad ?

[FVE]

Ja nog steeds.

Als ik trouwens AdwCleaner open (als administrator) dan staat er Staat: Wachten op actie en daaronder Acties Zoeken, Verwijderen Deinstallatie en Schenken. Ik neem aan dat ik moet klikken op Verwijderen?

Heb ik weer geprobeerd maar hetzelfde resultaat.

Logje AdwareCleaner was nog niet eerder gelukt