[OPGELOST] Langdurig wachten op internetverbinding

Marit22 · 7 mei 2009

sorry,

Dit is de goede:

ComboFix 09-05-06.08 - Marit 07-05-2009 15:52.5 - NTFSx86

Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.31.1043.18.3068.2006 [GMT 2:00]

Gestart vanuit: c:\users\Marit\Desktop\ComboFix.exe

AV: Kaspersky Anti-Virus *On-access scanning disabled* (Updated)

.

(((((((((((((((((((( Bestanden Gemaakt van 2009-04-07 to 2009-05-07 ))))))))))))))))))))))))))))))

.

2009-05-06 20:45 . 2009-05-06 20:45 -------- d-----w c:\users\Marit\AppData\Roaming\Malwarebytes

2009-05-06 20:45 . 2009-04-06 13:32 15504 ----a-w c:\windows\system32\drivers\mbam.sys

2009-05-06 20:45 . 2009-04-06 13:32 38496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys

2009-05-06 20:45 . 2009-05-06 20:45 -------- d-----w c:\programdata\Malwarebytes

2009-05-06 20:45 . 2009-05-06 20:45 -------- d-----w c:\users\All Users\Malwarebytes

2009-05-06 20:45 . 2009-05-06 20:45 -------- d-----w c:\program files\Malwarebytes' Anti-Malware

2009-05-06 12:41 . 2008-04-07 04:38 22872 ----a-r c:\windows\system32\AdobePDFUI.dll

2009-05-06 10:20 . 2009-05-06 10:20 -------- d-----w c:\users\Marit\AppData\Roaming\SuperAdBlocker.com

2009-05-06 10:19 . 2009-05-06 10:19 -------- d-----w c:\windows\system32\URTTemp

2009-05-06 10:19 . 2009-05-06 10:22 -------- d-----w c:\program files\SuperAdBlocker.com

2009-05-04 20:13 . 2009-05-04 20:13 -------- d-----w c:\users\Marit\AppData\Roaming\Uniblue

2009-05-03 21:10 . 2009-05-03 21:20 -------- d-----w c:\program files\r2 Studios

2009-05-03 21:04 . 2009-05-03 21:04 -------- d-----w c:\users\Marit\AppData\Roaming\GTek

2009-04-26 08:38 . 2009-04-26 08:38 -------- d-----w c:\programdata\Vodafone

2009-04-26 08:38 . 2009-04-26 08:38 -------- d-----w c:\users\All Users\Vodafone

2009-04-25 15:19 . 2008-09-15 12:26 104960 ----a-w c:\windows\system32\drivers\ZTEusbnmea.sys

2009-04-25 15:19 . 2008-09-15 12:26 110080 ----a-w c:\windows\system32\drivers\ZTEusbnet.sys

2009-04-25 15:19 . 2008-09-15 12:26 104960 ----a-w c:\windows\system32\drivers\ZTEusbmdm6k.sys

2009-04-25 15:19 . 2008-09-15 12:26 104960 ----a-w c:\windows\system32\drivers\ZTEusbser6k.sys

2009-04-25 15:17 . 2009-04-25 15:17 -------- d-----w c:\users\Marit\AppData\Local\{BAD7C248-517D-4CE1-B65A-829C01BEFDB1}

2009-04-24 12:27 . 2009-04-24 12:27 -------- d-----w c:\users\Marit\AppData\Roaming\Vodafone

2009-04-24 12:27 . 2009-04-24 12:27 -------- d-----w c:\programdata\InstallShield

2009-04-24 12:27 . 2009-04-24 12:27 -------- d-----w c:\users\All Users\InstallShield

2009-04-24 12:27 . 2008-03-17 09:05 101632 ----a-w c:\windows\system32\drivers\ewusbmdm.sys

2009-04-24 12:25 . 2009-04-24 12:25 -------- d-----w c:\users\Marit\AppData\Local\{D53238E8-3427-491E-A57E-097FA966AAC1}

2009-04-20 17:13 . 2009-04-27 15:47 -------- d-----w c:\users\Marit\AppData\Roaming\Belastingdienst

2009-04-16 17:07 . 2009-02-13 08:49 1255936 ----a-w c:\windows\system32\lsasrv.dll

2009-04-16 17:07 . 2009-02-13 08:49 72704 ----a-w c:\windows\system32\secur32.dll

2009-04-16 17:07 . 2009-03-17 03:38 13824 ----a-w c:\windows\system32\apilogen.dll

2009-04-16 17:07 . 2009-03-17 03:38 24064 ----a-w c:\windows\system32\amxread.dll

2009-04-16 17:07 . 2008-12-06 04:42 376832 ----a-w c:\windows\system32\winhttp.dll

2009-04-16 17:07 . 2008-06-06 03:27 562176 ----a-w c:\windows\system32\msdtcprx.dll

2009-04-16 17:07 . 2008-06-06 03:27 38912 ----a-w c:\windows\system32\xolehlp.dll

2009-04-16 17:05 . 2009-03-03 04:39 551424 ----a-w c:\windows\system32\rpcss.dll

2009-04-16 17:05 . 2009-03-03 04:46 3599328 ----a-w c:\windows\system32\ntkrnlpa.exe

2009-04-16 17:05 . 2009-03-03 04:46 3547632 ----a-w c:\windows\system32\ntoskrnl.exe

2009-04-16 17:05 . 2009-03-03 03:04 666624 ----a-w c:\windows\system32\printfilterpipelinesvc.exe

2009-04-16 17:05 . 2009-03-03 04:39 26112 ----a-w c:\windows\system32\printfilterpipelineprxy.dll

2009-04-16 17:05 . 2009-03-03 04:39 183296 ----a-w c:\windows\system32\sdohlp.dll

2009-04-16 17:05 . 2009-03-03 04:37 98304 ----a-w c:\windows\system32\iasrecst.dll

2009-04-16 17:05 . 2009-03-03 04:37 44032 ----a-w c:\windows\system32\iasdatastore.dll

2009-04-16 17:05 . 2009-03-03 04:37 54784 ----a-w c:\windows\system32\iasads.dll

2009-04-16 17:05 . 2009-03-03 02:38 17408 ----a-w c:\windows\system32\iashost.exe

2009-04-15 18:33 . 2009-04-15 18:33 -------- d-----w c:\program files\Belastingdienst

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-05-07 13:45 . 2008-08-27 15:32 56351 ----a-w c:\users\All Users\nvModes.dat

2009-05-07 13:45 . 2008-08-27 15:32 56351 ----a-w c:\programdata\nvModes.dat

2009-05-07 13:43 . 2008-06-21 05:46 12 ----a-w c:\windows\bthservsdp.dat

2009-05-06 20:53 . 2008-08-27 16:15 7592 ----a-w c:\users\Marit\AppData\Local\d3d9caps.dat

2009-05-06 07:50 . 2008-06-21 15:38 667352 ----a-w c:\windows\system32\perfh013.dat

2009-05-06 07:50 . 2008-06-21 15:38 126854 ----a-w c:\windows\system32\perfc013.dat

2009-04-26 09:17 . 2009-02-10 13:46 -------- d-----w c:\program files\Oberon Media

2009-04-26 09:17 . 2008-08-27 15:57 -------- d-----w c:\program files\Windows Live

2009-04-26 09:17 . 2006-11-02 11:18 -------- d-----w c:\program files\Windows Mail

2009-04-25 15:19 . 2006-11-02 10:25 86016 ----a-w c:\windows\inf\infstor.dat

2009-04-25 15:19 . 2006-11-02 10:25 51200 ----a-w c:\windows\inf\infpub.dat

2009-04-25 15:19 . 2006-11-02 10:25 143360 ----a-w c:\windows\inf\infstrng.dat

2009-04-24 12:26 . 2008-06-21 05:57 -------- d-----w c:\program files\Common Files\InstallShield

2009-03-23 17:42 . 2009-02-10 13:46 -------- d-----w c:\program files\Gamenext

2009-03-17 13:30 . 2009-01-14 21:47 410984 ----a-w c:\windows\system32\deploytk.dll

2009-03-17 13:30 . 2009-03-17 13:30 -------- d-----w c:\program files\Java

2009-03-17 13:27 . 2008-08-27 15:44 115552 ----a-w c:\users\Marit\AppData\Local\GDIPFONTCACHEV1.DAT

2009-03-17 13:22 . 2009-03-17 13:19 -------- d-----w c:\program files\Eusing Free Registry Cleaner

2009-03-17 13:15 . 2009-03-17 13:15 -------- d-----w c:\program files\CCleaner

2009-03-14 14:20 . 2009-03-14 14:20 -------- d-----w c:\program files\Microsoft SQL Server Compact Edition

2009-03-14 14:18 . 2009-03-07 15:54 -------- d-----w c:\program files\Microsoft

2009-03-14 14:17 . 2009-03-14 14:17 -------- d-----w c:\program files\Windows Live SkyDrive

2009-03-14 14:11 . 2009-03-14 14:11 -------- d-----w c:\program files\Common Files\Windows Live

2009-03-09 13:35 . 2008-06-21 05:57 -------- d--h--w c:\program files\InstallShield Installation Information

2009-03-09 13:15 . 2009-03-09 13:15 -------- d-----w c:\program files\Samsung

2009-03-06 15:12 . 2009-02-13 13:01 21256 ----a-w c:\windows\Help\OEM\scripts\HPScript.exe

2009-03-05 10:29 . 2009-03-13 12:58 16648 ----a-w c:\windows\Help\OEM\scripts\HC_ProtectSmartPatch.exe

2009-03-03 04:40 . 2009-04-17 12:48 827392 ----a-w c:\windows\system32\wininet.dll

2009-03-03 04:37 . 2009-04-17 12:48 78336 ----a-w c:\windows\system32\ieencode.dll

2009-03-03 02:28 . 2009-04-17 12:48 26624 ----a-w c:\windows\system32\ieUnatt.exe

2009-02-20 16:06 . 2009-02-20 16:06 28672 ----a-w c:\windows\system32\qttask.exe

2009-02-10 18:53 . 2009-02-10 18:53 32 ----a-w c:\users\All Users\ezsid.dat

2009-02-10 18:53 . 2009-02-10 18:53 32 ----a-w c:\programdata\ezsid.dat

2009-02-09 03:10 . 2009-03-12 15:08 2033152 ----a-w c:\windows\system32\win32k.sys

2009-02-06 18:55 . 2009-02-06 18:55 308616 ----a-w c:\windows\WLXPGSS.SCR

2009-02-06 17:52 . 2009-02-06 17:52 49504 ----a-w c:\windows\system32\sirenacm.dll

2008-01-21 02:43 . 2006-11-02 12:50 174 --sha-w c:\program files\desktop.ini

2008-06-21 15:39 . 2008-06-21 15:39 8192 --sha-w c:\windows\Users\Default\NTUSER.DAT

.

((((((((((((((((((((((((((((( SnapShot@2009-05-06_20.39.42 )))))))))))))))))))))))))))))))))))))))))

.

+ 2008-01-21 01:58 . 2009-05-07 13:47 62496 c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin

+ 2008-08-27 15:33 . 2009-05-07 13:19 13478 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1443288986-3582346776-1172408581-1000_UserData.bin

- 2008-08-27 15:33 . 2009-05-06 20:27 13478 c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-1443288986-3582346776-1172408581-1000_UserData.bin

+ 2008-07-27 16:41 . 2009-05-07 13:44 32768 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat

- 2008-07-27 16:41 . 2009-05-06 20:24 32768 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat

+ 2008-07-27 16:41 . 2009-05-07 13:44 65536 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat

- 2008-07-27 16:41 . 2009-05-06 20:24 65536 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat

- 2008-07-27 16:41 . 2009-05-06 20:24 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat

+ 2008-07-27 16:41 . 2009-05-07 13:44 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat

- 2009-05-06 20:24 . 2009-05-06 20:24 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat

+ 2009-05-07 13:44 . 2009-05-07 13:44 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat

- 2009-05-06 20:24 . 2009-05-06 20:24 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

+ 2009-05-07 13:44 . 2009-05-07 13:44 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

+ 2006-11-02 13:05 . 2009-05-07 13:47 113162 c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-21 1233920]

"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2008-02-26 2289664]

"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]

"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2009-02-06 3885408]

"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]

"WindowsWelcomeCenter"="oobefldr.dll" - c:\windows\System32\oobefldr.dll [2008-01-21 2153472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SysTrayApp"="c:\program files\IDT\WDM\sttray.exe" [2008-06-27 442467]

"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2008-04-23 468264]

"QlbCtrl.exe"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2008-03-14 202032]

"OnScreenDisplay"="c:\program files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe" [2007-11-01 554288]

"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-05-14 92704]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-05-14 13535776]

"HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]

"hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-11-20 488752]

"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-03-28 1045800]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

@="Driver"

[HKLM\~\startupfolder\C:^Users^Marit^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Schermopname en Snel starten.lnk]

path=c:\users\Marit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Schermopname en Snel starten.lnk

backup=c:\windows\pss\OneNote 2007 Schermopname en Snel starten.lnk.Startup

backupExtension=.Startup

[HKEY_LOCAL_MACHINE\software\microsoft\security center]

"AntiVirusDisableNotify"="0"

"UpdatesDisableNotify"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]

"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]

"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]

"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]

"{6BD0B6C3-AD16-446F-BF9B-1903FD707E7A}"= c:\program files\HP\QuickPlay\QP.exe:Quick Play

"{538497D9-A9BF-4C41-9882-152939CF8D6E}"= c:\program files\HP\QuickPlay\QPService.exe:Quick Play Resident Program

"{AABAB0EC-A634-4A8F-A261-8E571FEC7BC8}"= c:\program files\Cyberlink\PowerDirector\PDR.EXE:CyberLink PowerDirector

"{8050FF2A-98AD-492C-A05F-B2CAB6792070}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote

"{ED105102-8062-41BF-AF91-538A55CCC289}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote

"{C499B08E-49A6-484B-8DB4-34EB5A4D754C}"= UDP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader

"{03E8EC2A-D66F-4E44-8AAD-BB78F79C9F17}"= TCP:c:\program files\Common Files\AOL\Loader\aolload.exe:AOL Loader

"{782000CB-9FC6-4DF1-8972-6BFF00C302B0}"= UDP:c:\program files\LimeWire Plus\LimeWire.exe:LimeWire

"{60343952-73F9-4DF3-AAC0-7C6C6ECB30A8}"= TCP:c:\program files\LimeWire Plus\LimeWire.exe:LimeWire

"{2923FA91-65D3-49E0-81A6-3F0D29C6DD96}"= UDP:5353:Adobe CSI CS4

"{B6DBACF1-FCAC-4354-A191-B1992EADDA15}"= UDP:3703:Adobe Version Cue CS4 Server

"{59132593-201B-44C0-9137-2022F84B4CA2}"= UDP:3704:Adobe Version Cue CS4 Server

"{C6B23993-A692-45C6-8968-CAC93C568C86}"= UDP:51000:Adobe Version Cue CS4 Server

"{7E6CE47D-C602-48CC-B7AE-4902BDE30E97}"= UDP:51001:Adobe Version Cue CS4 Server

"{0FB0DB98-715E-412E-998E-39F8D035F674}"= UDP:c:\program files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe:Adobe Version Cue CS4 Server

"{9A5CF341-3389-458C-B36D-EC4B2DAD3CCD}"= TCP:c:\program files\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe:Adobe Version Cue CS4 Server

"{6B568544-BC57-4F2C-AFA5-7C4DFAE1AF8E}"= UDP:c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:Adobe CSI CS4

"{81BE7005-E1B9-4BA7-BB8C-EFDE6C4788A4}"= TCP:c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:Adobe CSI CS4

"TCP Query User{60DAF01D-6B5A-402E-841D-F4041717D104}c:\\program files\\limewire plus\\limewire.exe"= UDP:c:\program files\limewire plus\limewire.exe:LimeWire

"UDP Query User{6601D96E-1C4E-4562-8936-91D21E2242F5}c:\\program files\\limewire plus\\limewire.exe"= TCP:c:\program files\limewire plus\limewire.exe:LimeWire

"TCP Query User{82350041-3DC6-4AF8-9CFD-F24FD16196EB}c:\\program files\\internet explorer\\iexplore.exe"= UDP:c:\program files\internet explorer\iexplore.exe:Internet Explorer

"UDP Query User{BB10E75A-BA3B-4A28-9ED5-3427BF94791B}c:\\program files\\internet explorer\\iexplore.exe"= TCP:c:\program files\internet explorer\iexplore.exe:Internet Explorer

"TCP Query User{CA0F9C77-AFA7-4235-A09D-1280A45C197B}c:\\program files\\internet explorer\\iexplore.exe"= UDP:c:\program files\internet explorer\iexplore.exe:Internet Explorer

"UDP Query User{321FE371-126C-42B0-B9DC-926AE15E9F10}c:\\program files\\internet explorer\\iexplore.exe"= TCP:c:\program files\internet explorer\iexplore.exe:Internet Explorer

"TCP Query User{ABC6B811-E206-4FF0-81D6-B55904A1A7F7}c:\\program files\\skype\\phone\\skype.exe"= UDP:c:\program files\skype\phone\skype.exe:Skype. Take a deep breath

"UDP Query User{78831CCB-D1DA-45D7-87F8-015FC7D82989}c:\\program files\\skype\\phone\\skype.exe"= TCP:c:\program files\skype\phone\skype.exe:Skype. Take a deep breath

"TCP Query User{0FD84221-039D-4DB4-AB69-756527D35E1A}c:\\program files\\skype\\phone\\skype.exe"= UDP:c:\program files\skype\phone\skype.exe:Skype. Take a deep breath

"UDP Query User{980556C4-0751-4159-A05F-284254579BEF}c:\\program files\\skype\\phone\\skype.exe"= TCP:c:\program files\skype\phone\skype.exe:Skype. Take a deep breath

"{1CE4B077-144D-49C4-82E5-AFA2136CBE44}"= c:\program files\Windows Live\Sync\WindowsLiveSync.exe:Windows Live Sync

R0 SymEFA;Symantec Extended File Attributes;c:\windows\System32\drivers\NAV\1002000.007\SymEFA.sys [3-2-2009 17:49 309296]

R1 BHDrvx86;Symantec Heuristics Driver;c:\windows\System32\drivers\NAV\1002000.007\BHDrvx86.sys [3-2-2009 17:49 255536]

R1 ccHP;Symantec Hash Provider;c:\windows\System32\drivers\NAV\1002000.007\cchpx86.sys [3-2-2009 17:49 362544]

R1 IDSVix86;IDSVix86;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090212.003\IDSvix86.sys [14-2-2009 14:07 292912]

R2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe -k netsvcs [21-1-2008 4:23 21504]

R2 hpsrv;HP Service;c:\windows\System32\hpservice.exe [18-3-2008 16:24 24880]

R2 Recovery Service for Windows;Recovery Service for Windows;c:\windows\SMINST\BLService.exe [21-6-2008 9:08 341328]

R3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [21-6-2008 8:21 193840]

R3 enecir;ENE CIR Receiver;c:\windows\System32\drivers\enecir.sys [24-1-2008 15:23 52736]

R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [3-2-2009 17:49 99376]

R3 JMCR;JMCR;c:\windows\System32\drivers\jmcr.sys [11-4-2008 19:55 84240]

R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\System32\drivers\nvhda32v.sys [14-5-2008 4:09 43552]

R3 SYMNDISV;SYMNDISV;c:\windows\System32\drivers\NAV\1002000.007\symndisv.sys [3-2-2009 17:49 40496]

S3 massfilter;ZTE Mass Storage Filter Driver;c:\windows\System32\drivers\massfilter.sys [15-9-2008 14:26 7168]

S3 ZTEusbnet;ZTE USB-NDIS miniport;c:\windows\System32\drivers\ZTEusbnet.sys [25-4-2009 17:19 110080]

S4 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt.inf_030ac640\AEstSrv.exe [27-7-2008 18:50 73728]

S4 Norton AntiVirus;Norton AntiVirus;c:\program files\Norton AntiVirus\Engine\16.2.0.7\ccSvcHst.exe [3-2-2009 17:49 115560]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

bthsvcs REG_MULTI_SZ BthServ

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs

ezSharedSvc

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]

"c:\program files\Common Files\LightScribe\LSRunOnce.exe"

.

------- Bijkomende Scan -------

.

uStart Page = hxxp://www.nos.nl/

mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=nl_nl&c=83&bd=Pavilion&pf=cnnb

.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-05-07 15:54

Windows 6.0.6001 Service Pack 1 NTFS

scannen van verborgen processen ...

scannen van verborgen autostart items ...

scannen van verborgen bestanden ...

Scan succesvol afgerond

verborgen bestanden: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Norton AntiVirus]

"ImagePath"="\"c:\program files\Norton AntiVirus\Engine\16.2.0.7\ccSvcHst.exe\" /s \"Norton AntiVirus\" /m \"c:\program files\Norton AntiVirus\Engine\16.2.0.7\diMaster.dll\" /prefetch:1"

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

"MSCurrentCountry"=dword:00000000

.

--------------------- DLLs Geladen Onder Lopende Processen ---------------------

- - - - - - - > 'Explorer.exe'(5936)

c:\windows\system32\btncopy.dll

.

Voltooingstijd: 2009-05-07 15:56

ComboFix-quarantined-files.txt 2009-05-07 13:55

ComboFix2.txt 2009-05-07 13:31

ComboFix3.txt 2009-05-06 20:40

ComboFix4.txt 2009-02-09 17:48

ComboFix5.txt 2009-05-07 13:51

Pre-Run: 164.407.025.664 bytes beschikbaar

Post-Run: 164.376.440.832 bytes beschikbaar

247 --- E O F --- 2009-05-06 17:04

kape · 7 mei 2009

Wil je Malwarebytes nu eens opnieuw laten scannen (updaten indien nodig) en dan het nieuwe logje in je volgende bericht hangen.

Marit22 · 7 mei 2009

Malwarebytes' Anti-Malware 1.36

Database versie: 2085

Windows 6.0.6001 Service Pack 1

7-5-2009 17:10:38

mbam-log-2009-05-07 (17-10-38).txt

Scan type: Snelle Scan

Objecten gescand: 69536

Verstreken tijd: 3 minute(s), 15 second(s)

Geheugenprocessen geïnfecteerd: 0

Geheugenmodulen geïnfecteerd: 0

Registersleutels geïnfecteerd: 0

Registerwaarden geïnfecteerd: 0

Registerdata bestanden geïnfecteerd: 0

Mappen geïnfecteerd: 0

Bestanden geïnfecteerd: 0

Geheugenprocessen geïnfecteerd: