internet start traag en sommige websites blijven hangen en blokkeren

17 maart 2009

hallo

de tittel zegt het al,

ik heb ALLE tips voor snelle pc geprobeerd maar helaas zonder resultaat

dit probleem heb ik al maanden lang

kan iemand helpen?

alvast hartelijk bedankt

hier alvast mijn hijackthis log

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 2:00:31, on 17/03/2009

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16791)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Common Files\Real\Update_OB\realsched.exe

C:\Program Files\Java\jre6\bin\jusched.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe

C:\Program Files\Google\Update\GoogleUpdate.exe

C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

C:\WINDOWS\system32\svchost.exe

C:\PROGRA~1\AVG\AVG8\avgrsx.exe

C:\PROGRA~1\AVG\AVG8\avgnsx.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\WINDOWS\explorer.exe

C:\WINDOWS\system32\notepad.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\WINDOWS\system32\WgaTray.exe

C:\Program Files\Windows Live\Contacts\wlcomm.exe

C:\Program Files\Internet Explorer\IEXPLORE.EXE

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [Advanced SystemCare 3] "C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe" /startup

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll

O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll

O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe

O23 - Service: Google Updateservice (gupdate1c9a42c2425e7b0) (gupdate1c9a42c2425e7b0) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

--

End of file - 3463 bytes

17 maart 2009

hier heb ik ook nog een ComboFix 09 logje

ComboFix 09-03-15.01 - Hoofdgebruiker 2009-03-17 1:35:30.1 - NTFSx86

Microsoft Windows XP Home Edition 5.1.2600.3.1256.212.1043.18.2047.1510 [GMT 1:00]

Running from: c:\documents and settings\Hoofdgebruiker\Mijn documenten\Downloads\ComboFix.exe

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)

* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

.

((((((((((((((((((((((((( Files Created from 2009-02-17 to 2009-03-17 )))))))))))))))))))))))))))))))

.

2009-03-17 01:22 . 2009-03-17 01:22 <DIR> d-------- c:\windows\5888428E699C4E71BF7194EE06B497DA.TMP

2009-03-17 01:22 . 2009-03-17 01:22 <DIR> d-------- c:\program files\Common Files\Wise Installation Wizard

2009-03-17 01:17 . 2009-03-17 01:17 <DIR> d--hs---- c:\documents and settings\All Users\Application Data\{55A29068-F2CE-456C-9148-C869879E2357}

2009-03-16 21:56 . 2009-03-16 21:56 <DIR> d-------- c:\program files\Java

2009-03-16 21:56 . 2009-03-16 21:56 73,728 --a------ c:\windows\system32\javacpl.cpl

2009-03-16 20:57 . 2009-03-16 20:57 <DIR> d-------- c:\program files\Common Files\xing shared

2009-03-16 08:53 . 2007-08-13 18:45 78,336 --a------ c:\windows\system32\ieencode.dll

2009-03-16 08:53 . 2007-08-13 18:45 78,336 --a--c--- c:\windows\system32\dllcache\ieencode.dll

2009-03-15 02:21 . 2009-02-06 18:08 55,152 --a------ c:\windows\system32\drivers\fssfltr_tdi.sys

2009-03-15 02:17 . 2009-03-15 02:17 <DIR> d-------- c:\program files\Windows Live SkyDrive

2009-03-15 02:07 . 2009-03-15 02:20 <DIR> d-------- c:\program files\Windows Live Toolbar

2009-03-15 02:07 . 2009-03-15 02:07 <DIR> d-------- c:\program files\Windows Live Favorites

2009-03-15 01:57 . 2009-03-15 01:57 <DIR> d-------- c:\program files\Windows Installer Clean Up

2009-03-15 01:52 . 2009-03-15 01:52 <DIR> d-------- c:\program files\CCleaner

2009-03-15 01:22 . 2008-10-16 02:02 1,499,136 -----c--- c:\windows\system32\dllcache\shdocvw.dll

2009-03-14 23:09 . 2009-03-14 23:09 <DIR> d-------- c:\program files\Common Files\Windows Live

2009-03-14 22:07 . 2009-03-14 22:09 <DIR> d--h----- C:\$AVG8.VAULT$

2009-03-14 14:00 . 2009-03-14 17:08 3,803,168 --ahs---- c:\windows\system32\drivers\fidbox.dat

2009-03-14 14:00 . 2009-03-14 17:08 46,688 --ahs---- c:\windows\system32\drivers\fidbox.idx

2009-03-13 23:31 . 2009-03-16 16:32 <DIR> d-------- c:\windows\system32\drivers\Avg

2009-03-13 23:31 . 2009-03-13 23:33 <DIR> d-------- c:\documents and settings\Hoofdgebruiker\Application Data\AVGTOOLBAR

2009-03-13 23:31 . 2009-03-13 23:31 325,640 --a------ c:\windows\system32\drivers\avgldx86.sys

2009-03-13 23:31 . 2009-03-13 23:31 107,912 --a------ c:\windows\system32\drivers\avgtdix.sys

2009-03-13 23:31 . 2009-03-13 23:31 10,520 --a------ c:\windows\system32\avgrsstx.dll

2009-03-13 12:52 . 2009-03-13 12:53 <DIR> d--h----- c:\windows\msdownld.tmp

2009-03-13 11:44 . 2009-03-13 11:44 <DIR> d-------- c:\documents and settings\LocalService\Bureaublad

2009-03-13 11:28 . 2009-03-13 20:53 <DIR> d-------- c:\program files\Lavasoft

2009-03-13 11:28 . 2009-03-13 20:53 <DIR> d-------- c:\documents and settings\All Users\Application Data\Lavasoft

2009-03-13 10:17 . 2009-03-13 20:53 <DIR> d-------- c:\windows\BDOSCAN8

2009-03-13 09:59 . 2009-03-17 01:06 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware

2009-03-13 09:59 . 2009-02-11 10:19 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys

2009-03-13 09:59 . 2009-02-11 10:19 15,504 --a------ c:\windows\system32\drivers\mbam.sys

2009-03-12 00:05 . 2009-03-12 00:05 23,392 --a------ c:\windows\system32\nscompat.tlb

2009-03-12 00:05 . 2009-03-12 00:05 16,832 --a------ c:\windows\system32\amcompat.tlb

2009-03-11 23:55 . 2006-03-02 13:00 1,802 --a------ c:\windows\system32exit

2009-03-11 21:12 . 2009-02-23 13:46 0 -ra------ c:\windows\autoexec.bat

2009-03-11 20:48 . 2009-03-16 17:33 1,374 --a------ c:\windows\imsins.BAK

2009-03-11 15:40 . 2009-03-11 15:40 <DIR> d-------- c:\program files\DoubleD

2009-03-11 14:21 . 2009-03-16 23:30 <DIR> dr-h----- c:\documents and settings\Hoofdgebruiker\Onlangs geopend

2009-03-11 14:19 . 2009-03-11 14:19 <DIR> d-------- c:\program files\Brownie

2009-03-11 14:19 . 2009-03-11 14:19 <DIR> d-------- c:\program files\Brother

2009-03-11 14:05 . 2009-03-11 14:05 <DIR> d-------- c:\documents and settings\Hoofdgebruiker\Application Data\aAvgApi

2009-03-11 14:03 . 2009-03-11 14:03 34 --------- c:\windows\system32\BD2030.DAT

2009-03-11 13:46 . 2009-03-11 14:15 <DIR> d-------- c:\program files\Brownie(2)

2009-03-11 13:46 . 2009-03-11 14:15 <DIR> d-------- c:\program files\Brother(2)

2009-03-10 17:17 . 2009-03-11 14:20 <DIR> d-------- c:\program files\AVS4YOU

2009-03-10 09:39 . 2009-03-13 21:54 <DIR> d-------- c:\program files\Spybot - Search & Destroy

2009-03-10 09:39 . 2009-03-13 21:27 <DIR> d-------- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy

2009-03-10 00:01 . 2009-03-10 00:01 <DIR> d-------- c:\program files\Trend Micro

2009-03-07 18:18 . 2009-03-07 18:18 <DIR> d-------- c:\documents and settings\All Users\Application Data\Nokia

2009-03-07 18:17 . 2009-03-11 14:15 <DIR> d-------- c:\program files\Nokia

2009-03-06 23:58 . 2009-03-06 23:58 <DIR> d-------- c:\program files\AVG

2009-03-06 20:41 . 2008-03-21 13:57 14,640 --------- c:\windows\system32\spmsgXP_2k3.dll

2009-03-06 20:41 . 2009-03-06 20:41 0 --------- c:\windows\system32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf

2009-03-06 20:41 . 2009-03-06 20:41 0 --------- c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01007.Wdf

2009-03-06 20:34 . 2009-03-06 20:34 <DIR> d-------- c:\program files\Common Files\PCSuite

2009-03-06 20:34 . 2009-03-07 18:17 <DIR> d-------- c:\program files\Common Files\Nokia

2009-03-06 20:34 . 2008-08-26 09:26 18,816 --a------ c:\windows\system32\drivers\pccsmcfd.sys

2009-03-06 20:33 . 2009-03-06 20:33 <DIR> d-------- c:\program files\PC Connectivity Solution

2009-03-06 20:32 . 2008-09-15 07:29 1,112,288 --a------ c:\windows\system32\wdfcoinstaller01007.dll

2009-03-06 20:32 . 2008-09-15 07:56 659,968 --a------ c:\windows\system32\nmwcdcocls.dll

2009-03-06 20:32 . 2008-09-15 07:56 22,016 --a------ c:\windows\system32\drivers\ccdcmbo.sys

2009-03-06 20:32 . 2008-09-15 07:56 17,664 --a------ c:\windows\system32\drivers\ccdcmb.sys

2009-03-06 20:32 . 2008-09-15 07:56 8,064 --a------ c:\windows\system32\drivers\usbser_lowerfltj.sys

2009-03-06 20:32 . 2008-09-15 07:56 8,064 --a------ c:\windows\system32\drivers\usbser_lowerflt.sys

2009-03-06 20:05 . 2009-03-06 20:10 <DIR> d-------- c:\documents and settings\All Users\Application Data\PC Suite

2009-03-06 20:04 . 2009-03-06 20:23 <DIR> d-------- c:\documents and settings\Hoofdgebruiker\Phone Browser

2009-03-06 20:04 . 2009-03-06 21:24 <DIR> d-------- c:\documents and settings\Hoofdgebruiker\Application Data\Nokia

2009-03-06 20:03 . 2009-03-06 20:03 <DIR> d-------- c:\program files\DIFX

2009-03-06 20:03 . 2009-03-07 18:16 <DIR> d-------- c:\documents and settings\Hoofdgebruiker\Application Data\PC Suite

2009-03-06 20:00 . 2009-03-07 18:18 <DIR> d-------- c:\documents and settings\All Users\Application Data\Installations

2009-03-06 19:55 . 2008-04-13 19:45 26,112 --a------ c:\windows\system32\drivers\usbser.sys

2009-03-06 19:55 . 2008-04-13 19:45 26,112 --a--c--- c:\windows\system32\dllcache\usbser.sys

2009-03-06 19:45 . 2009-03-06 19:45 0 --------- c:\windows\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf

2009-03-06 19:45 . 2009-03-06 19:45 0 --------- c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01005.Wdf

2009-03-05 16:01 . 2009-03-05 16:01 <DIR> d-------- c:\documents and settings\All Users\Application Data\Office Genuine Advantage

2009-03-05 11:34 . 2009-01-09 20:19 1,089,883 -----c--- c:\windows\system32\dllcache\ntprint.cat

2009-03-05 08:35 . 2009-03-05 08:35 106 --a------ C:\index.ini

2009-03-04 21:43 . 2009-03-04 21:43 <DIR> d-------- c:\program files\Microsoft Works

2009-03-04 21:42 . 2009-03-04 21:42 <DIR> d-------- c:\program files\Microsoft.NET

2009-03-04 19:58 . 2009-03-09 21:01 <DIR> d-------- c:\documents and settings\Hoofdgebruiker\Application Data\FileZilla

2009-03-04 19:03 . 2009-03-04 19:03 <DIR> d-------- C:\ftpxsetup

2009-03-04 17:57 . 2009-03-04 17:57 <DIR> d-------- c:\program files\Ipswitch

2009-03-04 17:57 . 2004-09-17 11:09 1,060,864 --a------ c:\windows\system32\MFC71.dll

2009-03-04 17:57 . 2005-02-28 12:37 606,293 --a------ c:\windows\system32\wbocx.ocx

2009-03-04 17:57 . 2005-02-28 12:37 50,688 --a------ c:\windows\system32\wbhelp2.dll

2009-03-04 15:08 . 2009-03-04 15:08 <DIR> dr-h----- C:\MSOCache

2009-03-04 12:01 . 2009-03-13 17:39 <DIR> d-------- c:\program files\IObit

2009-03-04 12:01 . 2009-03-04 12:01 <DIR> d-------- c:\documents and settings\Hoofdgebruiker\Application Data\IObit

2009-03-04 11:56 . 2009-03-04 11:56 <DIR> d-------- c:\documents and settings\Hoofdgebruiker\Application Data\Malwarebytes

2009-03-04 11:56 . 2009-03-04 11:56 <DIR> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes

2009-03-04 11:45 . 2009-03-13 23:31 <DIR> d-------- c:\documents and settings\All Users\Application Data\avg8

2009-03-04 11:37 . 2009-03-04 11:37 67 --a------ c:\windows\wininit.ini

2009-03-04 11:06 . 2009-03-04 11:06 <DIR> d-------- c:\documents and settings\All Users\Application Data\Hitman Pro 3

2009-03-04 11:06 . 2009-03-04 11:06 <DIR> d-------- c:\documents and settings\All Users\Application Data\Hitman Pro

2009-03-03 18:55 . 2009-03-03 18:55 80 --a------ C:\bootdelete.lst

2009-03-03 03:12 . 2009-03-15 01:57 <DIR> d-------- c:\program files\MSECACHE

2009-03-03 02:26 . 2009-03-03 02:26 <DIR> d-------- c:\documents and settings\Hoofdgebruiker\Application Data\OpenOffice.org

2009-03-03 02:25 . 2009-03-04 11:00 <DIR> d-------- c:\program files\OpenOffice.org 3

2009-03-02 17:12 . 2009-03-02 17:12 20,480 --a------ c:\documents and settings\update.exe

2009-02-28 23:46 . 2009-03-03 01:24 379 --a------ c:\windows\ODBC.INI

2009-02-28 18:33 . 2009-02-28 18:33 <DIR> d-------- c:\program files\YouTube Downloader

2009-02-28 17:17 . 2009-03-05 08:56 <DIR> d-------- c:\program files\filehippo.com

2009-02-28 17:16 . 2009-02-28 17:16 <DIR> d-------- c:\windows\CD95F661A5C444F5A6AAECDD91C240B7.TMP

2009-02-28 17:15 . 2009-03-16 09:29 <DIR> d-------- c:\windows\ie8updates

2009-02-28 17:15 . 2009-03-11 18:02 <DIR> d-a------ c:\documents and settings\All Users\Application Data\TEMP

2009-02-27 22:53 . 2009-02-28 17:16 <DIR> d-------- c:\program files\Microsoft Sync Framework

2009-02-27 12:43 . 2009-02-27 12:43 <DIR> d-------- c:\documents and settings\Hoofdgebruiker\Application Data\SmartFTP

2009-02-27 12:42 . 2009-03-04 19:23 <DIR> d-------- c:\program files\SmartFTP Client

2009-02-23 13:57 . 2009-02-28 17:16 <DIR> d-------- c:\program files\Java(2)

2009-02-23 13:55 . 2009-03-16 17:11 <DIR> d-------- c:\documents and settings\All Users\Application Data\Google Updater

2009-02-23 13:39 . 2009-02-23 13:41 <DIR> d-------- c:\documents and settings\Hoofdgebruiker\Application Data\ErrorFix

2009-02-22 21:59 . 2009-02-22 21:59 <DIR> d-------- c:\documents and settings\Hoofdgebruiker\Application Data\Uniblue

2009-02-22 21:57 . 2009-02-22 22:57 <DIR> d-------- c:\documents and settings\All Users\Application Data\WinZip

2009-02-22 21:52 . 2009-03-11 17:26 <DIR> d-------- c:\program files\NCH Swift Sound

2009-02-21 23:01 . 2009-02-21 23:01 <DIR> d--hs---- c:\documents and settings\Hoofdgebruiker\PrivacIE

2009-02-21 23:01 . 2009-02-21 23:01 <DIR> d--hs---- c:\documents and settings\Hoofdgebruiker\IETldCache

2009-02-21 22:40 . 2009-01-11 06:00 79,360 -----c--- c:\windows\system32\dllcache\iecompat.dll

2009-02-21 16:24 . 2009-02-21 16:24 <DIR> d-------- c:\windows\Sun

2009-02-21 16:23 . 2009-02-21 16:23 <DIR> d-------- c:\program files\AskBarDis

2009-02-20 14:43 . 2009-02-21 16:23 <DIR> d-------- c:\program files\AskBarDis(3)

2009-02-20 13:49 . 2009-02-21 16:23 <DIR> d-------- c:\program files\AskBarDis(2)

.

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-03-16 20:56 410,984 ----a-w c:\windows\system32\deploytk.dll

2009-03-16 19:57 --------- d-----w c:\program files\Common Files\Real

2009-03-16 19:56 499,712 ----a-w c:\windows\system32\msvcp71.dll

2009-03-16 19:56 348,160 ----a-w c:\windows\system32\msvcr71.dll

2009-03-16 19:54 --------- d-----w c:\program files\Google

2009-03-15 01:19 --------- d-----w c:\program files\Windows Live

2009-03-13 23:45 --------- d-----w c:\program files\Paltalk Messenger

2009-03-11 23:05 --------- d-----w c:\program files\Windows Media Connect 2

2009-03-11 20:00 --------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help

2009-03-11 17:05 --------- d-----w c:\program files\MSN Messenger

2009-03-11 16:26 --------- d-----w c:\documents and settings\Hoofdgebruiker\Application Data\NCH Swift Sound

2009-03-11 16:25 --------- d-----w c:\program files\NCH Software

2009-03-11 13:02 --------- d--h--w c:\program files\InstallShield Installation Information

2009-03-10 17:57 --------- d-----w c:\program files\Common Files\InstallShield

2009-03-10 12:22 --------- d-----w c:\program files\Disk Cleaner

2009-03-05 08:20 --------- d-----w c:\program files\Winferno

2009-03-04 20:40 --------- d-----w c:\program files\Microsoft Visual Studio 8

2009-03-04 20:27 --------- d-----w c:\program files\MSBuild

2009-03-01 11:29 --------- d-----w c:\program files\GRETECH

2009-02-28 21:42 --------- d-----w c:\documents and settings\All Users\Application Data\NOS

2009-02-28 17:06 --------- d-----w c:\documents and settings\All Users\Application Data\WLInstaller

2009-02-28 16:17 --------- d-----w c:\program files\Common Files\DVDVideoSoft

2009-02-28 16:16 --------- d-----w c:\program files\Microsoft

2009-02-28 16:15 --------- d-----w c:\documents and settings\All Users\Application Data\NCH Software

2009-02-28 16:13 --------- d-----w c:\documents and settings\All Users\Application Data\NCH Swift Sound

2009-02-25 21:44 --------- d-----w c:\program files\DVDVideoSoft

2009-02-16 23:27 --------- d-----w c:\documents and settings\Hoofdgebruiker\Application Data\Paltalk

2009-02-15 11:12 --------- d-----w c:\program files\Ahead

2009-02-15 11:11 --------- d-----w c:\program files\Common Files\Nero

2009-02-15 11:02 --------- d-----w c:\documents and settings\All Users\Application Data\Ahead

2009-02-15 11:01 --------- d-----w c:\program files\Common Files\Ahead

2009-02-15 10:57 --------- d-----w c:\program files\MediaMonkey

2009-02-15 10:26 --------- d-----w c:\program files\MSXML 4.0

2009-02-14 19:47 --------- d-----w c:\program files\Ela-Salaty

2009-02-14 13:49 --------- d-----w c:\documents and settings\Hoofdgebruiker\Application Data\Ahead

2009-02-14 13:39 --------- d-----w c:\program files\Nero

2009-02-11 15:13 --------- d-----w c:\documents and settings\All Users\Application Data\Disk Cleaner

2009-02-09 14:08 1,846,912 ------w c:\windows\system32\win32k.sys

2009-02-08 19:17 --------- d-----w c:\program files\Telemeter 3.0

2009-02-06 18:55 308,616 ----a-w c:\windows\WLXPGSS.SCR

2009-02-06 17:52 49,504 ----a-w c:\windows\system32\sirenacm.dll

2009-02-03 14:23 --------- d-----w c:\program files\Common Files\Adobe AIR

2009-01-31 18:55 --------- d-----w c:\program files\Reference Assemblies

2009-01-31 08:24 --------- d-----w c:\program files\KMaestro

2009-01-27 20:10 --------- d-----w c:\program files\IncrediMail

2009-01-27 20:10 --------- d-----w c:\program files\Free Offers from Freeze.com

2009-01-27 20:08 --------- d-----w c:\program files\Freeze.com

2009-01-27 20:00 --------- d-----w c:\documents and settings\All Users\Application Data\IM

2009-01-27 19:58 --------- d-----w c:\documents and settings\All Users\Application Data\IncrediMail

2009-01-21 17:17 --------- dcsh--w c:\program files\Common Files\WindowsLiveInstaller

2009-01-20 13:45 339,968 ----a-w c:\windows\system32\pythoncom25.dll

2009-01-20 13:45 2,117,632 ----a-w c:\windows\system32\python25.dll

2009-01-20 13:45 114,688 ----a-w c:\windows\system32\pywintypes25.dll

2009-01-19 17:25 --------- d-----w c:\documents and settings\Hoofdgebruiker\Application Data\deskPDF

2009-01-19 07:44 --------- d-----w c:\documents and settings\All Users\Application Data\Windows Live Toolbar

2009-01-18 20:01 --------- d-----w c:\documents and settings\LocalService\Application Data\agi

2009-01-16 20:31 3,594,752 ------w c:\windows\system32\SETED.tmp

2009-01-16 20:31 3,594,752 ------w c:\windows\system32\SET8E.tmp

2009-01-16 20:31 3,594,752 ------w c:\windows\system32\SET18.tmp

2009-01-16 20:31 3,594,752 ------w c:\windows\system32\SET14E.tmp

2009-01-15 01:06 105,984 ----a-w c:\windows\system32\url(3)(2).dll

2009-01-15 01:06 1,182,720 ----a-w c:\windows\system32\urlmon(3)(2).dll

2009-01-15 01:05 911,872 ----a-w c:\windows\system32\wininet(3)(2).dll

2009-01-15 01:03 724,992 ----a-w c:\windows\system32\jscript(2)(2).dll

2009-01-15 01:02 1,975,296 ----a-w c:\windows\system32\iertutil(2)(2).dll

2008-12-31 16:04 691,560 ----a-w c:\windows\system32\OGACheckControl.dll

2008-12-31 16:04 528,744 ----a-w c:\windows\system32\OGAVerify.exe

2008-12-31 16:04 502,120 ----a-w c:\windows\system32\OGAAddin.dll

2008-12-19 09:13 70,656 ------w c:\windows\system32\SETD5.tmp

2008-12-19 09:13 70,656 ------w c:\windows\system32\SET72.tmp

2008-12-19 09:13 70,656 ------w c:\windows\system32\SET136.tmp

2008-12-19 05:23 161,792 ------w c:\windows\system32\SETD8.tmp

2008-12-19 05:23 161,792 ------w c:\windows\system32\SET75.tmp

2008-12-19 05:23 161,792 ------w c:\windows\system32\SET139.tmp

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Note* empty entries & legit default entries are not shown

REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]

"{3041D03E-FD4B-44E0-B742-2D9B88305F98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-08-26 279944]

[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]

[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

"Advanced SystemCare 3"="c:\program files\IObit\Advanced SystemCare 3\AWC.exe" [2009-02-22 2272592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-03-16 198160]

"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-16 148888]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]

2009-03-13 23:31 10520 c:\windows\system32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

@="Driver"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\Program Files\\Messenger\\msmsgs.exe"=

"c:\\Program Files\\Paltalk Messenger\\paltalk.exe"=

"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=

"c:\\Program Files\\AVG\\AVG8\\avgnsx.exe"=

"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=

"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=

"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-03-13 325640]

R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-03-13 107912]

R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2009-03-13 298264]

R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [2009-03-15 55152]

R2 NwSapAgent;SAP Agent;c:\windows\system32\svchost.exe -k netsvcs [2006-03-02 14336]

R2 SeaPort;SeaPort;c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]

S2 fsssvc;Windows Live Family Safety;c:\program files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]

S2 gupdate1c9a42c2425e7b0;Google Updateservice (gupdate1c9a42c2425e7b0);c:\program files\Google\Update\GoogleUpdate.exe [2009-03-13 133104]

S3 hitmanpro3;Hitman Pro 3 Support Driver;\??\c:\windows\system32\drivers\hitmanpro3.sys --> c:\windows\system32\drivers\hitmanpro3.sys [?]

S4 getPlus® Helper;getPlus® Helper;c:\program files\NOS\bin\getPlus_HelperSvc.exe [2009-01-09 33752]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ffa0c543-dd88-11dd-92fa-806d6172696f}]

\Shell\AutoRun\command - e:\bin\assetup.exe

.

Contents of the 'Scheduled Tasks' folder

2009-03-16 c:\windows\Tasks\Ad-Aware Update (Weekly).job

- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe []

2009-03-13 c:\windows\Tasks\ErrorFix Scan.job

- c:\program files\ErrorFix\ErrorFix.exe []

2009-03-13 c:\windows\Tasks\ErrorFix Scan.job

- c:\program files\ErrorFix []

2009-03-17 c:\windows\Tasks\Google Software Updater.job

- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-13 13:06]

2009-03-17 c:\windows\Tasks\GoogleUpdateTaskMachine.job

- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-13 23:36]

2009-03-15 c:\windows\Tasks\OGADaily.job

- c:\windows\system32\OGAVerify.exe [2008-12-31 17:04]

2009-03-17 c:\windows\Tasks\OGALogon.job

- c:\windows\system32\OGAVerify.exe [2008-12-31 17:04]

2009-03-17 c:\windows\Tasks\PCConfidential.job

- c:\program files\Winferno\PC Confidential\PCConfidential.exe []

2009-03-17 c:\windows\Tasks\RegPowerClean.job

- c:\program files\Winferno\RegistryPowerCleaner\RegPowerClean.exe []

2009-01-27 c:\windows\Tasks\RPCReminder.job

- c:\program files\Winferno\RegistryPowerCleaner\RPCReminder.exe []

2009-03-10 c:\windows\Tasks\Schedule Task Weekly.job

- c:\program files\Registry Easy\RE.exe []

.

- - - - ORPHANS REMOVED - - - -

ShellExecuteHooks-{4F07DA45-8170-4859-9B5F-037EF2970034} - (no file)

.

------- Supplementary Scan -------

.

uStart Page = hxxp://www.google.com/

uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8

uInternet Settings,ProxyOverride = <local>

uSearchURL,(Default) = hxxp://www.google.com/search?q=%s

IE: &Search

.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-03-17 01:37:28

Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully

hidden files: 0

**************************************************************************

.

Completion time: 2009-03-17 1:38:52

ComboFix-quarantined-files.txt 2009-03-17 00:38:47

Pre-Run: 57.284.153.344 bytes beschikbaar

Post-Run: 57,748,062,208 bytes beschikbaar

302 --- E O F --- 2009-03-16 17:22:37

kape · 17 maart 2009

Open een kladblokbestand.

Kopieer en plak daarin de onderstaande vetgedrukte tekst.

File::

c:\windows\5888428E699C4E71BF7194EE06B497DA.TMP

c:\windows\msdownld.tmp

c:\windows\system32\drivers\pccsmcfd.sys

c:\windows\system32\drivers\hitmanpro3.sys

Folder::

c:\program files\AskBarDis

c:\program files\AskBarDis(3)

c:\program files\AskBarDis(2)

Driver::

pccsmcfd.sys

hitmanpro3.sys

Registry::

[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]

[-HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]

[-HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]

[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ffa0c543-dd88-11dd-92fa-806d6172696f}]

Sla dit bestand op je bureaublad op als CFScript.txt.

Sleep CFScript.txt in ComboFix.exe

Dit zal ComboFix doen herstarten. Start opnieuw op als dat gevraagd wordt.

Post na herstart de inhoud van de Combofix.txt in je volgende bericht en laat even weten hoe het nu met het opstarten staat ?

17 maart 2009

hallo kape , hier is de inhoud van combofix

ComboFix 09-03-15.01 - Hoofdgebruiker 2009-03-17 8:03:47.2 - NTFSx86

Microsoft Windows XP Home Edition 5.1.2600.3.1256.212.1043.18.2047.1464 [GMT 1:00]

Running from: c:\documents and settings\Hoofdgebruiker\Bureaublad\ComboFix.exe

Command switches used :: c:\documents and settings\Hoofdgebruiker\Bureaublad\CFScript.txt..txt

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)

* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

FILE ::

c:\windows\5888428E699C4E71BF7194EE06B497DA.TMP

c:\windows\msdownld.tmp

c:\windows\system32\drivers\hitmanpro3.sys

c:\windows\system32\drivers\pccsmcfd.sys

.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\program files\AskBarDis

c:\program files\AskBarDis(2)

c:\program files\AskBarDis(2)\bar(2)\Cache(2)\00026008.bin

c:\program files\AskBarDis(2)\bar(2)\Cache(2)\00027044.bin

c:\program files\AskBarDis(2)\bar(2)\Cache(2)\0002813C.bin

c:\program files\AskBarDis(2)\bar(2)\Cache(2)\0002958F.bin

c:\program files\AskBarDis(2)\bar(2)\Cache(2)\0002A4F0.bin

c:\program files\AskBarDis(2)\bar(2)\Cache(2)\00C44C51

c:\program files\AskBarDis(2)\bar(2)\History(2)\search

c:\program files\AskBarDis(2)\bar(2)\Settings(2)\prevcfg.htm

c:\program files\AskBarDis(3)

c:\program files\AskBarDis(3)\bar(2)\Cache(2)\000490A3.bin

c:\program files\AskBarDis(3)\bar(2)\Cache(2)\00049F3A.bin

c:\program files\AskBarDis(3)\bar(2)\Cache(2)\0004ABCD.bin

c:\program files\AskBarDis(3)\bar(2)\Cache(2)\0004BE2C.bin

c:\program files\AskBarDis(3)\bar(2)\Cache(2)\0004CB1C.bin

c:\program files\AskBarDis(3)\bar(2)\Cache(2)\00C44C51

c:\program files\AskBarDis(3)\bar(2)\History(2)\search

c:\program files\AskBarDis(3)\bar(2)\Settings(2)\prevcfg.htm

c:\program files\AskBarDis\bar\bin\askBar.dll

c:\program files\AskBarDis\bar\bin\askPopStp.dll

c:\program files\AskBarDis\bar\bin\psvince.dll

c:\program files\AskBarDis\bar\Cache\00019E00.bin

c:\program files\AskBarDis\bar\Cache\00019F67.bin

c:\program files\AskBarDis\bar\Cache\0001A0AF.bin

c:\program files\AskBarDis\bar\Cache\0001A1E8.bin

c:\program files\AskBarDis\bar\Cache\0001A2E2.bin

c:\program files\AskBarDis\bar\Cache\00C44C51

c:\program files\AskBarDis\bar\Cache\files.ini

c:\program files\AskBarDis\bar\History\search

c:\program files\AskBarDis\bar\Settings\prevcfg.htm

c:\program files\AskBarDis\PopSwatter\History\allowed

c:\program files\AskBarDis\PopSwatter\History\notallow

c:\program files\AskBarDis\unins000.exe