Archief - Logje

Pc was zeer traag.Ik heb de pc reeds gescand met Malwarebytes en Combofix zal de logs posten op volg orden hoe ik gescand hebt.

ComboFix 10-06-03.01 - Administrator 05/06/2010 9:37.1.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.32.1043.18.2047.1505 [GMT 2:00]
Gestart vanuit: c:\documents and settings\Administrator\Bureaublad\ComboFix.exe
AV: BitDefender Antivirus *On-access scanning disabled* (Updated) {6C4BB89C-B0ED-4F41-A29C-4373888923BB}
FW: BitDefender Firewall *disabled* {4055920F-2E99-48A8-A270-4243D2B8F242}
.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Administrator\Application Data\Dealio
c:\documents and settings\Administrator\Application Data\Dealio\res\widgets.xml
c:\documents and settings\Administrator\Application Data\Dealio\temp\http___www_dealio_com_rss_coupons-deals_dotd_.xml
c:\program files\Dealio Toolbar
c:\program files\Dealio Toolbar\FF\chrome.manifest
c:\program files\Dealio Toolbar\FF\chrome\content\chevron.js
c:\program files\Dealio Toolbar\FF\chrome\content\chevron.xul
c:\program files\Dealio Toolbar\FF\chrome\content\login.js
c:\program files\Dealio Toolbar\FF\chrome\content\login.xul
c:\program files\Dealio Toolbar\FF\chrome\content\parser.js
c:\program files\Dealio Toolbar\FF\chrome\content\RssTickerWidget.js
c:\program files\Dealio Toolbar\FF\chrome\content\searchbox.js
c:\program files\Dealio Toolbar\FF\chrome\content\searchbox.xul
c:\program files\Dealio Toolbar\FF\chrome\content\widgichevron.js
c:\program files\Dealio Toolbar\FF\chrome\content\widgicomm.js
c:\program files\Dealio Toolbar\FF\chrome\content\widgihandling.js
c:\program files\Dealio Toolbar\FF\chrome\content\widgilisteners.js
c:\program files\Dealio Toolbar\FF\chrome\content\widgitoolbarplugin.js
c:\program files\Dealio Toolbar\FF\chrome\content\widgitoolbarplugin.xul
c:\program files\Dealio Toolbar\FF\chrome\content\widgiui.js
c:\program files\Dealio Toolbar\FF\chrome\locale\EN-US\searchbox.dtd
c:\program files\Dealio Toolbar\FF\chrome\locale\EN-US\widgitoolbarplugin.dtd
c:\program files\Dealio Toolbar\FF\chrome\locale\EN-US\widgitoolbarplugin.properties
c:\program files\Dealio Toolbar\FF\chrome\locale\EN-US\yahoo-search.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\amazon.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\apple.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\barnes.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\bestbuy.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\chevron.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\dealio_logo.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\dealio_logo_hover.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\ebay.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\icon_settings.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\macys.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\newegg.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\overstock.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\search-button-hover.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\search-button.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\search-chevron-hover.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\search-chevron.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\search_amazon.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\search_dealio.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\search_ebay.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\search_yahoo.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\searchbox.css
c:\program files\Dealio Toolbar\FF\chrome\skin\separator.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\target.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\walmart.gif
c:\program files\Dealio Toolbar\FF\chrome\skin\widgitoolbarplugin.css
c:\program files\Dealio Toolbar\FF\components\config.ini
c:\program files\Dealio Toolbar\FF\components\dealioToolbarFF.dll
c:\program files\Dealio Toolbar\FF\components\IFBHOHelperWidgiToolbar.xpt
c:\program files\Dealio Toolbar\FF\components\IFBHOWidgiToolbar.xpt
c:\program files\Dealio Toolbar\FF\install.rdf
c:\program files\Dealio Toolbar\IE\4.0.2\config.ini
c:\program files\Dealio Toolbar\IE\4.0.2\dealioToolbarIE.dll
c:\program files\Dealio Toolbar\Res\amazon.gif
c:\program files\Dealio Toolbar\Res\apple.gif
c:\program files\Dealio Toolbar\Res\barnes.gif
c:\program files\Dealio Toolbar\Res\bestbuy.gif
c:\program files\Dealio Toolbar\Res\dealio_logo.gif
c:\program files\Dealio Toolbar\Res\dealio_logo_hover.gif
c:\program files\Dealio Toolbar\Res\ebay.gif
c:\program files\Dealio Toolbar\Res\icon_settings.gif
c:\program files\Dealio Toolbar\Res\macys.gif
c:\program files\Dealio Toolbar\Res\newegg.gif
c:\program files\Dealio Toolbar\Res\overstock.gif
c:\program files\Dealio Toolbar\Res\search-button-hover.gif
c:\program files\Dealio Toolbar\Res\search-button.gif
c:\program files\Dealio Toolbar\Res\search-chevron-hover.gif
c:\program files\Dealio Toolbar\Res\search-chevron.gif
c:\program files\Dealio Toolbar\Res\search_amazon.gif
c:\program files\Dealio Toolbar\Res\search_dealio.gif
c:\program files\Dealio Toolbar\Res\search_ebay.gif
c:\program files\Dealio Toolbar\Res\search_yahoo.gif
c:\program files\Dealio Toolbar\Res\target.gif
c:\program files\Dealio Toolbar\Res\walmart.gif
c:\program files\Dealio Toolbar\Res\widgets.xml
c:\program files\Dealio Toolbar\WidgiHelper.exe
c:\program files\FunWebProducts
c:\program files\FunWebProducts\Shared\Cache\CursorManiaBtn.html
c:\program files\FunWebProducts\Shared\Cache\MyFunCardsIMBtn.html
c:\program files\FunWebProducts\Shared\Cache\SmileyCentralBtn.html
c:\program files\FunWebProducts\Shared\Cache\WebfettiBtn.html
c:\program files\MyWebSearch
c:\program files\MyWebSearch\bar\1.bin\CHROME.MANIFEST
c:\program files\MyWebSearch\bar\1.bin\chrome\M3FFXTBR.JAR
c:\program files\MyWebSearch\bar\1.bin\F3BKGERR.JPG
c:\program files\MyWebSearch\bar\1.bin\F3CJPEG.DLL
c:\program files\MyWebSearch\bar\1.bin\F3DTACTL.DLL
c:\program files\MyWebSearch\bar\1.bin\F3HISTSW.DLL
c:\program files\MyWebSearch\bar\1.bin\F3HKSTUB.DLL
c:\program files\MyWebSearch\bar\1.bin\F3HTmlmu.dll
c:\program files\MyWebSearch\bar\1.bin\F3HTtpct.dll
c:\program files\MyWebSearch\bar\1.bin\F3IMSTUB.DLL
c:\program files\MyWebSearch\bar\1.bin\F3POPSWT.DLL
c:\program files\MyWebSearch\bar\1.bin\F3PSSAVR.SCR
c:\program files\MyWebSearch\bar\1.bin\F3REGHK.DLL
c:\program files\MyWebSearch\bar\1.bin\F3REPROX.DLL
c:\program files\MyWebSearch\bar\1.bin\F3RESTUB.DLL
c:\program files\MyWebSearch\bar\1.bin\F3SCHMON.EXE
c:\program files\MyWebSearch\bar\1.bin\F3SCRCTR.DLL
c:\program files\MyWebSearch\bar\1.bin\F3SPACER.WMV
c:\program files\MyWebSearch\bar\1.bin\F3WALLPP.DAT
c:\program files\MyWebSearch\bar\1.bin\F3WPHOOK.DLL
c:\program files\MyWebSearch\bar\1.bin\FWPBUDDY.PNG
c:\program files\MyWebSearch\bar\1.bin\INSTALL.RDF
c:\program files\MyWebSearch\bar\1.bin\M3AUXSTB.DLL
c:\program files\MyWebSearch\bar\1.bin\M3DLGHK.DLL
c:\program files\MyWebSearch\bar\1.bin\M3HIGHIN.EXE
c:\program files\MyWebSearch\bar\1.bin\M3HTML.DLL
c:\program files\MyWebSearch\bar\1.bin\M3IDLE.DLL
c:\program files\MyWebSearch\bar\1.bin\M3IMPIPE.EXE
c:\program files\MyWebSearch\bar\1.bin\M3MEDINT.EXE
c:\program files\MyWebSearch\bar\1.bin\M3MSg.dll
c:\program files\MyWebSearch\bar\1.bin\M3OUtlcn.dll
c:\program files\MyWebSearch\bar\1.bin\M3PLUGIN.DLL
c:\program files\MyWebSearch\bar\1.bin\M3SKIN.DLL
c:\program files\MyWebSearch\bar\1.bin\M3SKPLAY.EXE
c:\program files\MyWebSearch\bar\1.bin\M3SLSRCH.EXE
c:\program files\MyWebSearch\bar\1.bin\MWSMLBTN.DLL
c:\program files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
c:\program files\MyWebSearch\bar\1.bin\MWSOEPLG.DLL
c:\program files\MyWebSearch\bar\1.bin\MWSOESTB.DLL
c:\program files\MyWebSearch\bar\1.bin\MWSSVC.EXE
c:\program files\MyWebSearch\bar\1.bin\MWSUABTN.DLL
c:\program files\MyWebSearch\bar\1.bin\NPMYWEBS.DLL
c:\program files\MyWebSearch\bar\Avatar\COMMON.F3S
c:\program files\MyWebSearch\bar\Cache\00D8692F
c:\program files\MyWebSearch\bar\Cache\00D86AB5.bin
c:\program files\MyWebSearch\bar\Cache\00D86E30.bin
c:\program files\MyWebSearch\bar\Cache\00D86E8E.bin
c:\program files\MyWebSearch\bar\Cache\00D86EFB.bin
c:\program files\MyWebSearch\bar\Cache\00D86F3A
c:\program files\MyWebSearch\bar\Cache\00DD586D.bin
c:\program files\MyWebSearch\bar\Cache\00DD5A04.bin
c:\program files\MyWebSearch\bar\Cache\00DD5F14.bin
c:\program files\MyWebSearch\bar\Cache\00DD61F3.bin
c:\program files\MyWebSearch\bar\Cache\00DD64F0.bin
c:\program files\MyWebSearch\bar\Cache\00EA5E3A
c:\program files\MyWebSearch\bar\Cache\files.ini
c:\program files\MyWebSearch\bar\Game\CHECKERS.F3S
c:\program files\MyWebSearch\bar\Game\CHESS.F3S
c:\program files\MyWebSearch\bar\Game\REVERSI.F3S
c:\program files\MyWebSearch\bar\History\search3
c:\program files\MyWebSearch\bar\icons\CM.ICO
c:\program files\MyWebSearch\bar\icons\MFC.ICO
c:\program files\MyWebSearch\bar\icons\PSS.ICO
c:\program files\MyWebSearch\bar\icons\SMILEY.ICO
c:\program files\MyWebSearch\bar\icons\WB.ICO
c:\program files\MyWebSearch\bar\icons\ZWINKY.ICO
c:\program files\MyWebSearch\bar\Message\COMMON.F3S
c:\program files\MyWebSearch\bar\Notifier\COMMON.F3S
c:\program files\MyWebSearch\bar\Notifier\DOG.F3S
c:\program files\MyWebSearch\bar\Notifier\FISH.F3S
c:\program files\MyWebSearch\bar\Notifier\KUNGFU.F3S
c:\program files\MyWebSearch\bar\Notifier\LIFEGARD.F3S
c:\program files\MyWebSearch\bar\Notifier\MAID.F3S
c:\program files\MyWebSearch\bar\Notifier\MAILBOX.F3S
c:\program files\MyWebSearch\bar\Notifier\OPERA.F3S
c:\program files\MyWebSearch\bar\Notifier\ROBOT.F3S
c:\program files\MyWebSearch\bar\Notifier\SEDUCT.F3S
c:\program files\MyWebSearch\bar\Notifier\SURFER.F3S
c:\program files\MyWebSearch\bar\Settings\prevcfg2.htm
c:\program files\MyWebSearch\bar\Settings\s_FeatCk.dat
c:\program files\MyWebSearch\bar\Settings\s_FeatCk.dat.bak
c:\program files\MyWebSearch\bar\Settings\s_pid.dat
c:\program files\Search Settings
c:\program files\Search Settings\FF\chrome.manifest
c:\program files\Search Settings\FF\chrome\content\plugin.js
c:\program files\Search Settings\FF\chrome\content\plugin.xul
c:\program files\Search Settings\FF\chrome\content\protection.js
c:\program files\Search Settings\FF\chrome\content\utils.js
c:\program files\Search Settings\FF\chrome\locale\en-US\searchsettingsplugin.dtd
c:\program files\Search Settings\FF\chrome\locale\en-US\searchsettingsplugin.properties
c:\program files\Search Settings\FF\components\IFBHOSearch.xpt
c:\program files\Search Settings\FF\components\IFBHOSearchHelperEngine.xpt
c:\program files\Search Settings\FF\components\IFHelperPreferences.xpt
c:\program files\Search Settings\FF\components\SearchSettingsFF.dll
c:\program files\Search Settings\FF\install.rdf
c:\program files\Search Settings\SeARchsettings.dll
c:\program files\Search Settings\SearchSettings.exe
c:\program files\Search Settings\SearchSettingsRes409.dll
c:\windows\system32\Drivers\ggpctww.sys

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_MYWEBSEARCHSERVICE
-------\Service_xrjq


(((((((((((((((((((( Bestanden Gemaakt van 2010-05-05 to 2010-06-05 ))))))))))))))))))))))))))))))
.

2010-06-05 07:30 . 2010-06-05 07:30 -------- d-----w- c:\documents and settings\Administrator\Application Data\Malwarebytes
2010-06-05 07:29 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-06-05 07:29 . 2010-06-05 07:29 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-06-05 07:29 . 2010-06-05 07:29 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-06-05 07:29 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-06-05 07:23 . 2010-06-05 07:23 388096 ----a-r- c:\documents and settings\Administrator\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-06-05 07:23 . 2010-06-05 07:23 -------- d-----w- c:\program files\Trend Micro
2010-06-03 10:42 . 2009-10-16 06:34 11776 ----a-w- c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\aoncf35s.default\extensions\{d9284e50-81fc-11da-a72b-0800200c9a66}\lib\WINNT_x86-msvc\1.9.1\yoono.dll
2010-06-02 16:24 . 2010-06-02 16:24 19708 ---ha-w- c:\windows\system32\mlfcache.dat
2010-05-31 16:58 . 2010-05-27 18:44 85464 ----a-w- c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\aoncf35s.default\extensions\{340c2bbc-ce74-4362-90b5-7c26312808ef}\platform\WINNT_x86-msvc\components\WeaveCrypto.dll
2010-05-31 16:58 . 2010-05-27 18:44 38872 ----a-w- c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\aoncf35s.default\extensions\{340c2bbc-ce74-4362-90b5-7c26312808ef}\platform\WINCE\components\WeaveCrypto.dll
2010-05-30 14:56 . 2009-11-03 12:07 679936 ----a-w- c:\windows\system32\D3DX81ab.dll
2010-05-30 14:56 . 2009-11-03 12:07 1970176 ----a-w- c:\windows\system32\d3dx9.dll
2010-05-30 12:57 . 2010-05-30 15:18 -------- d-----w- c:\documents and settings\Administrator\Application Data\fizzy
2010-05-30 12:57 . 2010-05-30 12:57 -------- d-sh--w- c:\windows\ftpcache
2010-05-30 10:21 . 2010-05-30 10:21 -------- d-----w- c:\documents and settings\Administrator\Application Data\Office Genuine Advantage
2010-05-29 13:58 . 2010-05-29 13:58 -------- d-----w- c:\windows\system32\Adobe
2010-05-29 10:37 . 2010-05-30 08:46 -------- d---a-w- c:\documents and settings\Administrator\L2PhX
2010-05-28 14:17 . 2010-05-28 14:17 -------- d-----w- c:\program files\MSXML 4.0
2010-05-28 13:49 . 2010-05-28 13:49 -------- d-----w- c:\documents and settings\All Users\Application Data\Office Genuine Advantage
2010-05-27 20:06 . 2009-04-16 10:42 315904 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\hpfpp70w.dll
2010-05-27 20:06 . 2009-04-16 10:42 123904 ----a-w- c:\windows\system32\hpf3l70w.dll
2010-05-27 20:05 . 2010-05-27 20:05 -------- d-----w- c:\program files\Common Files\HP
2010-05-27 20:05 . 2010-05-27 20:05 -------- d-----w- c:\program files\Common Files\Hewlett-Packard
2010-05-27 20:04 . 2008-10-29 00:27 16496 ----a-w- c:\windows\system32\drivers\HPZipr12.sys
2010-05-27 20:04 . 2009-04-16 11:53 452408 ----a-w- c:\windows\system32\hpzids01.dll
2010-05-27 20:04 . 2009-04-01 06:21 713728 ----a-w- c:\windows\system32\hposwia_d02d.dll
2010-05-27 20:04 . 2009-04-01 06:21 589824 ----a-w- c:\windows\system32\hpost_d02d.dll
2010-05-27 20:04 . 2009-04-01 06:21 315392 ----a-w- c:\windows\system32\hposc_d02a.dll
2010-05-27 20:03 . 2010-05-27 20:04 -------- d-----w- c:\program files\HP
2010-05-27 20:03 . 2008-04-13 22:15 15104 -c--a-w- c:\windows\system32\dllcache\usbscan.sys
2010-05-27 20:03 . 2008-04-13 22:15 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys
2010-05-27 20:02 . 2010-05-27 20:08 180384 ----a-w- c:\windows\hpoins46.dat
2010-05-27 20:02 . 2010-01-30 13:17 532 ------w- c:\windows\hpomdl46.dat
2010-05-27 17:58 . 2010-05-27 17:58 -------- d-----w- c:\program files\Microsoft.NET
2010-05-27 17:55 . 2010-05-27 17:56 -------- d-----w- c:\windows\SHELLNEW
2010-05-27 17:55 . 2010-05-27 17:55 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\Microsoft Help
2010-05-27 17:55 . 2010-05-28 14:29 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2010-05-27 17:54 . 2010-05-27 17:54 -------- d-----r- C:\MSOCache
2010-05-23 10:12 . 2010-05-23 10:12 664 ----a-w- c:\windows\system32\d3d9caps.dat
2010-05-23 09:55 . 2001-09-06 19:26 8704 -c--a-w- c:\windows\system32\dllcache\kbdjpn.dll
2010-05-23 09:55 . 2001-09-06 19:26 8704 ----a-w- c:\windows\system32\kbdjpn.dll
2010-05-23 09:55 . 2001-09-06 19:26 8192 -c--a-w- c:\windows\system32\dllcache\kbdkor.dll
2010-05-23 09:55 . 2001-09-06 19:26 8192 ----a-w- c:\windows\system32\kbdkor.dll
2010-05-23 09:55 . 2001-08-17 20:55 6144 -c--a-w- c:\windows\system32\dllcache\kbd101c.dll
2010-05-23 09:55 . 2001-08-17 20:55 6144 -c--a-w- c:\windows\system32\dllcache\kbd101b.dll
2010-05-23 09:55 . 2001-08-17 20:55 6144 ----a-w- c:\windows\system32\kbd101c.dll
2010-05-23 09:55 . 2001-08-17 20:55 6144 ----a-w- c:\windows\system32\kbd101b.dll
2010-05-23 09:55 . 2001-08-17 20:55 5632 -c--a-w- c:\windows\system32\dllcache\kbd103.dll
2010-05-23 09:55 . 2001-08-17 20:55 5632 ----a-w- c:\windows\system32\kbd103.dll
2010-05-23 09:55 . 2008-04-14 20:31 6144 -c--a-w- c:\windows\system32\dllcache\kbd106.dll
2010-05-23 09:55 . 2008-04-14 20:31 6144 ----a-w- c:\windows\system32\kbd106.dll
2010-05-22 21:03 . 2010-05-22 21:03 61440 ----a-w- c:\documents and settings\Administrator\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-75414689-n\decora-sse.dll
2010-05-22 21:03 . 2010-05-22 21:03 503808 ----a-w- c:\documents and settings\Administrator\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-42f2292d-n\msvcp71.dll
2010-05-22 21:03 . 2010-05-22 21:03 499712 ----a-w- c:\documents and settings\Administrator\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-42f2292d-n\jmc.dll
2010-05-22 21:03 . 2010-05-22 21:03 348160 ----a-w- c:\documents and settings\Administrator\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-42f2292d-n\msvcr71.dll
2010-05-22 21:03 . 2010-05-22 21:03 12800 ----a-w- c:\documents and settings\Administrator\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-75414689-n\decora-d3d.dll
2010-05-21 19:53 . 2010-05-21 19:53 -------- d-----w- c:\documents and settings\Administrator\Application Data\Search Settings
2010-05-19 16:34 . 2010-05-19 16:34 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
2010-05-19 16:34 . 2010-05-19 16:34 -------- d-----w- c:\windows\system32\config\systemprofile\Application Data\Application Updater
2010-05-19 16:34 . 2010-05-19 16:34 -------- d-----w- c:\program files\Application Updater
2010-05-19 16:33 . 2010-05-19 16:33 -------- d-----w- c:\windows\system32\custom matrices
2010-05-19 16:33 . 2010-05-19 16:33 -------- d-----w- c:\windows\system32\C2MP
2010-05-19 16:33 . 2010-05-19 16:33 -------- d-----w- c:\windows\system32\QuickTime
2010-05-19 16:27 . 2010-05-24 14:39 -------- d-----w- c:\documents and settings\Administrator\Application Data\vlc
2010-05-19 16:26 . 2010-05-19 16:26 -------- d-----w- c:\program files\VideoLAN
2010-05-18 14:35 . 2010-05-18 14:35 -------- d-----w- c:\program files\4Videosoft Studio
2010-05-18 14:25 . 2007-05-17 21:30 318976 ----a-w- c:\windows\system32\avisynth.dll
2010-05-18 14:25 . 2006-11-07 09:22 719872 ----a-w- c:\windows\system32\devil.dll
2010-05-18 14:25 . 2010-05-18 14:25 -------- d-----w- c:\program files\Kingdia Software
2010-05-18 13:33 . 2010-05-18 13:33 -------- d-----w- C:\AmadisTMP
2010-05-18 13:32 . 2010-05-18 13:32 -------- d-----w- c:\program files\MegaDev
2010-05-18 13:21 . 2010-05-18 13:21 -------- d-----w- c:\program files\Amadis Software
2010-05-14 17:52 . 2010-05-14 17:52 -------- d-----w- c:\program files\EA SPORTS
2010-05-12 18:36 . 2010-05-12 18:36 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Google
2010-05-12 18:31 . 2010-05-12 18:31 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Google
2010-05-12 18:31 . 2010-05-12 18:31 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\Temp
2010-05-12 18:31 . 2010-05-30 18:36 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\Google
2010-05-12 18:31 . 2010-05-12 18:31 -------- d-----w- c:\program files\Google
2010-05-12 17:21 . 2008-04-14 20:09 14720 -c--a-w- c:\windows\system32\dllcache\kbdhid.sys
2010-05-12 17:21 . 2008-04-14 20:09 14720 ----a-w- c:\windows\system32\drivers\kbdhid.sys
2010-05-09 17:14 . 2010-05-09 17:14 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Adobe
2010-05-09 12:55 . 2010-06-03 12:42 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\AskToolbar
2010-05-09 07:28 . 2010-06-03 14:01 -------- d-----w- c:\program files\Ask.com
2010-05-09 07:28 . 2010-06-02 15:47 -------- d-----w- c:\documents and settings\Administrator\Application Data\BitTorrent
2010-05-09 07:28 . 2010-05-09 07:28 -------- d-----w- c:\program files\BitTorrent
2010-05-07 19:10 . 2010-05-07 19:10 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Apple
2010-05-07 19:02 . 2010-05-07 19:02 -------- d-----w- c:\windows\system32\wbem\Repository
2010-05-07 18:48 . 2010-05-07 18:48 -------- d-----w- c:\documents and settings\mustafa\PrivacIE
2010-05-07 18:42 . 2010-05-07 18:42 -------- d-----w- c:\documents and settings\mustafa\Local Settings\Application Data\Identities
2010-05-07 18:42 . 2010-05-07 18:42 -------- d-----w- c:\documents and settings\mustafa\Local Settings\Application Data\Apple Computer
2010-05-07 18:42 . 2010-05-07 18:42 -------- d-----w- c:\documents and settings\mustafa\Application Data\BitDefender
2010-05-07 18:42 . 2010-05-07 18:42 -------- d-----w- c:\documents and settings\mustafa\Local Settings\Application Data\ATI
2010-05-07 18:41 . 2010-05-07 18:41 13688 ----a-w- c:\documents and settings\mustafa\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-05-07 18:41 . 2010-05-07 18:41 -------- d-----w- c:\documents and settings\mustafa\IETldCache
2010-05-07 18:41 . 2010-05-07 19:01 -------- d-----w- c:\documents and settings\mustafa\Local Settings\Application Data\Microsoft
2010-05-07 18:41 . 2010-05-07 19:01 -------- d-----w- c:\documents and settings\mustafa\Sjablonen
2010-05-07 18:41 . 2010-05-07 19:01 -------- d-----w- c:\documents and settings\mustafa\Favorieten
2010-05-07 18:41 . 2010-05-07 19:01 -------- d-s---w- c:\documents and settings\mustafa
2010-05-06 13:50 . 2010-05-06 13:50 -------- d--h--r- c:\documents and settings\Administrator\Application Data\SecuROM
2010-05-06 13:39 . 2010-05-06 13:40 38784 ----a-w- c:\documents and settings\Administrator\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2010-05-06 13:39 . 2010-05-06 13:40 -------- d-----w- c:\program files\Common Files\Adobe AIR
2010-05-06 13:38 . 2010-05-06 13:40 -------- d-----w- c:\documents and settings\All Users\Application Data\Electronic Arts
2010-05-06 13:38 . 2010-05-06 13:38 -------- d-----w- C:\ProgramData
2010-05-06 13:08 . 2010-05-06 13:08 -------- d-----w- c:\program files\Electronic Arts
2010-05-06 08:36 . 2010-05-06 08:36 -------- d-----w- c:\program files\SystemRequirementsLab
2010-05-06 08:36 . 2010-05-06 08:36 85504 ----a-w- c:\documents and settings\Administrator\Application Data\SystemRequirementsLab\srlproxy_cyri_4.1.71.0A.dll
2010-05-06 08:36 . 2010-05-06 08:36 -------- d-----w- c:\documents and settings\Administrator\Application Data\SystemRequirementsLab
2010-05-06 08:36 . 2010-05-06 08:36 -------- d-----w- c:\windows\Sun
2010-05-06 08:35 . 2010-05-06 08:35 503808 ----a-w- c:\documents and settings\Administrator\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-5723d133-n\msvcp71.dll
2010-05-06 08:35 . 2010-05-06 08:35 499712 ----a-w- c:\documents and settings\Administrator\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-5723d133-n\jmc.dll
2010-05-06 08:35 . 2010-05-06 08:35 348160 ----a-w- c:\documents and settings\Administrator\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-5723d133-n\msvcr71.dll
2010-05-06 08:35 . 2010-05-06 08:35 61440 ----a-w- c:\documents and settings\Administrator\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-4aadc3e5-n\decora-sse.dll
2010-05-06 08:35 . 2010-05-06 08:35 12800 ----a-w- c:\documents and settings\Administrator\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-4aadc3e5-n\decora-d3d.dll
2010-05-06 08:35 . 2010-05-06 08:35 -------- d-----w- c:\program files\Common Files\Java
2010-05-06 08:35 . 2010-05-06 08:35 411368 ----a-w- c:\windows\system32\deployJava1.dll
2010-05-06 08:34 . 2010-05-06 08:34 -------- d-----w- c:\program files\Java
2010-05-06 08:12 . 2010-03-15 09:31 165376 ----a-w- c:\windows\system32\unrar.dll
2010-05-06 08:12 . 2006-04-02 12:47 630784 ----a-w- c:\windows\system32\vp7vfw.dll
2010-05-06 08:12 . 2004-05-18 18:16 39936 ----a-w- c:\windows\system32\huffyuv.dll
2010-05-06 08:12 . 2004-01-25 16:18 217088 ----a-w- c:\windows\system32\yv12vfw.dll
2010-05-06 08:12 . 2010-05-06 08:12 -------- d-----w- c:\program files\K-Lite Codec Pack

.
((((((((((((((((((((((((((((((((((((((( Find3M Rapport

))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-06-05 07:46 . 2010-05-04 20:32 81984 ----a-w- c:\windows\system32\bdod.bin
2010-06-05 07:13 . 2010-05-04 20:21 -------- d-----w- c:\program files\Microsoft Silverlight
2010-05-29 18:06 . 2003-04-08 12:00 533920 ----a-w- c:\windows\system32\perfh013.dat
2010-05-29 18:06 . 2003-04-08 12:00 100464 ----a-w- c:\windows\system32\perfc013.dat
2010-05-29 07:45 . 2010-05-15 15:37 -------- d-----w- c:\documents and settings\Administrator\Application Data\Winamp
2010-05-28 13:49 . 2010-05-04 18:58 24160 ----a-w- c:\documents and settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-05-15 15:38 . 2010-05-15 15:37 -------- d-----w- c:\program files\Winamp
2010-05-05 17:47 . 2010-05-05 10:46 -------- d-----w- c:\program files\Windows Desktop Search
2010-05-05 13:55 . 2010-05-04 20:40 -------- d-----w- c:\documents and settings\Administrator\Application Data\Apple Computer
2010-05-05 13:54 . 2010-05-05 13:54 -------- d-----w- c:\documents and settings\Administrator\Application Data\Windows Search
2010-05-05 10:47 . 2010-05-05 10:47 -------- d-----w- c:\documents and settings\Administrator\Application Data\Windows Desktop Search
2010-05-05 10:44 . 2010-05-05 10:44 -------- d-----w- c:\program files\Windows Media Connect 2
2010-05-05 09:05 . 2010-05-04 18:21 86327 ----a-w- c:\windows\PCHealth\HelpCtr\OfflineCache\index.dat
2010-05-04 20:58 . 2009-02-12 14:52 104456 ----a-w- c:\windows\system32\drivers\bdfndisf.sys
2010-05-04 20:52 . 2010-05-04 20:33 -------- d-----w- c:\documents and settings\All Users\Application Data\BitDefender
2010-05-04 20:44 . 2010-05-04 20:44 -------- d-----w- c:\program files\MSBuild
2010-05-04 20:44 . 2010-05-04 20:44 -------- d-----w- c:\program files\Reference Assemblies
2010-05-04 20:41 . 2010-05-04 20:41 -------- d-----w- c:\program files\MSXML 6.0
2010-05-04 20:40 . 2010-05-04 20:39 -------- d-----w- c:\program files\iTunes
2010-05-04 20:40 . 2010-05-04 20:39 -------- d-----w- c:\documents and settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-05-04 20:39 . 2010-05-04 20:39 -------- d-----w- c:\program files\iPod
2010-05-04 20:39 . 2010-05-04 20:39 -------- d-----w- c:\program files\QuickTime
2010-05-04 20:39 . 2010-05-04 20:39 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple Computer
2010-05-04 20:38 . 2010-05-04 20:38 -------- d-----w- c:\program files\Apple Software Update
2010-05-04 20:38 . 2010-05-04 20:38 -------- d-----w- c:\program files\Bonjour
2010-05-04 20:38 . 2010-05-04 20:38 -------- d-----w- c:\program files\Common Files\Apple
2010-05-04 20:38 . 2010-05-04 20:38 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple
2010-05-04 20:34 . 2010-05-04 19:36 -------- d-----w- c:\documents and settings\All Users\Application Data\NOS
2010-05-04 20:33 . 2010-05-04 20:33 -------- d-----w- c:\documents and settings\Administrator\Application Data\BitDefender
2010-05-04 20:33 . 2010-05-04 20:31 -------- d-----w- c:\program files\Common Files\BitDefender
2010-05-04 20:33 . 2010-05-04 20:33 -------- d-----w- c:\program files\BitDefender
2010-05-04 20:25 . 2010-05-04 20:22 -------- d-----w- c:\program files\Common Files\Softwin
2010-05-04 20:20 . 2010-05-04 20:17 -------- d-----w- c:\program files\Windows Live
2010-05-04 20:20 . 2010-05-04 20:20 -------- d-----w- c:\program files\Microsoft Sync Framework
2010-05-04 20:19 . 2010-05-04 20:19 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2010-05-04 20:18 . 2010-05-04 20:18 -------- d-----w- c:\program files\Microsoft
2010-05-04 20:17 . 2010-05-04 20:17 -------- d-----w- c:\program files\Windows Live SkyDrive
2010-05-04 20:15 . 2010-05-04 20:15 -------- d-----w- c:\program files\Common Files\Windows Live
2010-05-04 19:51 . 2010-05-04 19:51 -------- d-----w- c:\program files\Common Files\Adobe
2010-05-04 19:46 . 2010-05-04 19:46 0 ----a-w- c:\windows\nsreg.dat
2010-05-04 19:36 . 2010-05-04 19:36 1956656 ----a-w- c:\documents and settings\All Users\Application Data\NOS\Adobe_Downloads\install_flash_player_ax.exe
2010-05-04 19:31 . 2010-05-04 19:30 1956808 ----a-w- c:\documents and settings\Administrator\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\fpupdateax\fpupdateax.exe
2010-05-04 19:04 . 2010-05-04 19:04 -------- d-----w- c:\documents and settings\All Users\Application Data\ATI
2010-05-04 19:04 . 2010-05-04 19:04 0 ----a-w- c:\windows\ativpsrm.bin
2010-05-04 19:01 . 2010-05-04 18:37 -------- d-----w- c:\program files\ATI Technologies
2010-05-04 18:58 . 2010-05-04 18:58 -------- d-----w- c:\documents and settings\Administrator\Application Data\ATI
2010-05-04 18:43 . 2010-05-04 18:29 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-05-04 18:42 . 2010-05-04 18:42 9158 ----a-r- c:\documents and settings\Administrator\Application Data\Microsoft\Installer\{89DE67AD-08B8-4699-A55D-CA5C0AF82BF3}\ARPPRODUCTICON.exe
2010-05-04 18:42 . 2010-05-04 18:42 -------- d-----w- c:\program files\Common Files\ATI Technologies
2010-05-04 18:36 . 2010-05-04 18:28 -------- d-----w- c:\program files\Common Files\InstallShield
2010-05-04 18:30 . 2010-05-04 18:30 -------- d-----w- c:\program files\Realtek
2010-05-04 18:28 . 2010-05-04 18:28 -------- d-----w- c:\program files\VIA
2010-05-04 18:22 . 2010-05-04 18:22 -------- d-----w- c:\program files\microsoft frontpage
2010-05-04 18:19 . 2010-05-04 18:19 21748 ----a-w- c:\windows\system32\emptyregdb.dat
2010-04-28 13:45 . 2010-04-28 13:45 73000 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 9.1.1.12\SetupAdmin.exe
2010-04-16 06:33 . 2010-05-04 20:38 41472 ----a-w- c:\windows\system32\drivers\usbaapl.sys
2010-04-16 06:33 . 2010-05-04 20:38 3003680 ----a-w- c:\windows\system32\usbaaplrc.dll
2010-04-08 11:20 . 2010-04-08 11:20 91424 ----a-w- c:\windows\system32\dnssd.dll
2010-04-08 11:20 . 2010-04-08 11:20 107808 ----a-w- c:\windows\system32\dns-sd.exe
2010-03-10 06:17 . 2003-04-08 12:00 420352 ----a-w- c:\windows\system32\vbscript.dll
.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{00000000-6E41-4FD3-8538-502F5495E5FC}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-05-26 1385864]

[HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2010-05-26 13:23 1385864 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-05-26 1385864]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2010-05-26 1385864]

[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2007-02-26 16125440]
"SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-08-13 98304]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-04-04 36272]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-03-24 952768]
"BDAgent"="c:\program files\BitDefender\BitDefender 2009\bdagent.exe" [2010-05-04 782336]
"BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2009\IEShow.exe" [2009-02-23 69632]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2010-03-17 421888]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-04-28 142120]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2010-04-29 437584]

c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\
Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2008-5-26 123904]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\BitTorrent\\bittorrent.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfcCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"d:\\Games\\Steam\\steamapps\\xinu89\\counter-strike\\hl.exe"=

R0 ViBus;ViBus;c:\windows\system32\drivers\ViBus.sys [4/05/2010 20:29 16896]
R0 ViPrt;VIA SATA IDE Device Driver;c:\windows\system32\drivers\ViPrt.sys [4/05/2010 20:29 52224]
R2 Application Updater;Application Updater;c:\program files\Application Updater\ApplicationUpdater.exe [8/01/2010 0:51 380928]
R2 BDVEDISK;BDVEDISK;c:\program files\BitDefender\BitDefender 2009\BDVEDISK.sys [6/10/2008 18:16 82696]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [5/06/2010 9:29 304464]
R3 bdfm;BDFM;c:\windows\system32\drivers\bdfm.sys [18/09/2008 12:09 111112]
R3 Bdfndisf;BitDefender Firewall NDIS Filter Service;c:\windows\system32\drivers\bdfndisf.sys [12/02/2009 16:52 104456]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [5/06/2010 9:29 20952]
S2 gupdate;Google Updateservice (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [12/05/2010 20:31 136176]
S3 Arrakis3;BitDefender Arrakis Server;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe [20/01/2009 19:16 172032]

--- Andere Services/Drivers In Geheugen ---

*NewlyCreated* - IPFILTERDRIVER

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bdx REG_MULTI_SZ scan
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
HPService REG_MULTI_SZ HPSLPSVC
.
Inhoud van de 'Gedeelde Taken' map

2010-06-04 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 09:50]

2010-06-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-05-12 18:31]

2010-06-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-05-12 18:31]

2010-06-05 c:\windows\Tasks\OGALogon.job
- c:\windows\system32\OGAEXEC.exe [2009-08-03 13:07]

2010-06-04 c:\windows\Tasks\Scheduled Update for Ask Toolbar.job
- c:\program files\Ask.com\UpdateTask.exe [2010-05-26 13:23]
.
.
------- Bijkomende Scan -------
.
uStart Page = hxxp://eu.ask.com?o=15446&l=dis
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MI1933~1\Office12\EXCEL.EXE/3000
.
- - - - ORPHANS VERWIJDERD - - - -

BHO-{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - c:\program files\Dealio Toolbar\IE\4.0.2\dealioToolbarIE.dll
Toolbar-{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - c:\program files\Dealio Toolbar\IE\4.0.2\dealioToolbarIE.dll
HKCU-Run-EA Core - c:\program files\Electronic Arts\EADM\Core.exe
HKLM-Run-SearchSettings - c:\program files\Search Settings\SearchSettings.exe
AddRemove-Cheat Engine 5.6_is1 - d:\ozan\Cheat engine 5.6\Cheat Engine\unins000.exe
AddRemove-L2PhX 3.1.8 - c:\documents and settings\Administrator\Bureaublad\Uninstal.exe
AddRemove-Mozilla Firefox (3.6.3) - c:\documents and settings\Administrator\Mijn documenten\uninstall\helper.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover
Rootkit scan 2010-06-05 09:49
Windows 5.1.2600 Service Pack 3 NTFS

scannen van verborgen processen ...

scannen van verborgen autostart items ...

scannen van verborgen bestanden ...


c:\windows\TEMP\bdaB.tmp 70436 bytes

Scan succesvol afgerond
verborgen bestanden: 1

**************************************************************************
.
--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

[HKEY_USERS\S-1-5-21-790525478-1547161642-725345543-500\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (Administrator)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,ab,92,ce,8a,cc,10,67,4b,bc,c6,bf,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,ab,92,ce,8a,cc,10,67,4b,bc,c6,bf,\

[HKEY_USERS\S-1-5-21-790525478-1547161642-725345543-500\Software\SecuROM\License information*]
"datasecu"=hex:a1,e3,1b,ce,e8,77,0d,02,e4,50,2b,f1,ec,8a,85,dc,72,a8,c4,e5,f4,
75,e5,91,7e,43,0b,cf,4e,5d,7d,f5,40,0f,cd,94,82,9d,12,3e,34,8c,c3,a8,17,b4,\
"rkeysecu"=hex:68,61,08,ca,0f,92,41,ff,19,bc,2c,42,7c,4b,94,09
.
--------------------- DLLs Geladen Onder Lopende Processen ---------------------

- - - - - - - > 'winlogon.exe'(980)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(4032)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll
c:\windows\system32\mmfinfo.dll
c:\windows\system32\mkunicode.dll
c:\program files\BitDefender\BitDefender 2009\bdfvsctx.dll
c:\windows\system32\txmlutil.dll
c:\program files\BitDefender\BitDefender 2009\NLD\bdfvsctx.ui
c:\program files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll
c:\program files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.NLD
.
------------------------ Andere Aktieve Processen ------------------------
.
c:\windows\System32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\windows\RTHDCPL.EXE
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\windows\system32\SearchIndexer.exe
c:\program files\iPod\bin\iPodService.exe
c:\windows\system32\SearchProtocolHost.exe
c:\windows\system32\SearchFilterHost.exe
.
**************************************************************************
.
Voltooingstijd: 2010-06-05 09:55:44 - machine werd herstart
ComboFix-quarantined-files.txt 2010-06-05 07:55

Pre-Run: 25.920.159.744 bytes beschikbaar
Post-Run: 27.277.975.552 bytes beschikbaar

WindowsXP-KB310994-SP2-Pro-BootDisk-NLD.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn

- - End Of File - - 46287957845D9B5BE19204BAC0FA2C8B

Malwarebytes' Anti-Malware 1.46
Malwarebytes

Databaseversie: 4170

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

5/06/2010 10:04:46
mbam-log-2010-06-05 (10-04-46).txt

Scantype: Snelle scan
Objecten gescand: 125486
Verstreken tijd: 7 minuut/minuten, 41 seconde

Geheugenprocessen geïnfecteerd: 0
Geheugenmodulen geïnfecteerd: 0
Registersleutels geïnfecteerd: 36
Registerwaarden geïnfecteerd: 0
Registerdata geïnfecteerd: 0
Mappen geïnfecteerd: 0
Bestanden geïnfecteerd: 0

Geheugenprocessen geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Geheugenmodulen geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Registersleutels geïnfecteerd:
HKEY_CLASSES_ROOT\Interface\{1093995a-ba37-41d2-836e-091067c4ad17} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{120927bf-1700-43bc-810f-fab92549b390} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{17de5e5e-bfe3-4e83-8e1f-8755795359ec} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{1f52a5fa-a705-4415-b975-88503b291728} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{247a115f-06c2-4fb3-967d-2d62d3cf4f0a} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{2e3537fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{2e9937fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{3e1656ed-f60e-4597-b6aa-b6a58e171495} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{3e53e2cb-86db-4a4a-8bd9-ffeb7a64df82} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{3e720451-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{3e720453-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{63d0ed2b-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{63d0ed2d-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{6e74766c-4d93-4cc0-96d1-47b8e07ff9ca} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{72ee7f04-15bd-4845-a005-d6711144d86a} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{741de825-a6f0-4497-9aa6-8023cf9b0fff} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{7473d291-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{7473d293-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{7473d295-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{7473d297-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{90449521-d834-4703-bb4e-d3aa44042ff8} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{991aac62-b100-47ce-8b75-253965244f69} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{a626cdbd-3d13-4f78-b819-440a28d7e8fc} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{bbabdc90-f3d5-4801-863a-ee6ae529862d} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{cf54be1c-9359-4395-8533-1657cf209cfe} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{d6ff3684-ad3b-48eb-bbb4-b9e6c5a355c1} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{de38c398-b328-4f4c-a3ad-1b5e4ed93477} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25e} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25f} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{e79dfbc9-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{e79dfbcb-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{eb9e5c1c-b1f9-4c2b-be8a-27d6446fdaf8} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{1e0de227-5ce4-4ea3-ab0c-8b03e1aa76bc} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Typelib\{d518921a-4a03-425e-9873-b9a71756821e} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Typelib\{e47caee0-deea-464a-9326-3f2801535a4d} (Adware.MyWebSearch) -> No action taken.
HKEY_CLASSES_ROOT\Typelib\{f42228fb-e84e-479e-b922-fbbd096e792c} (Adware.MyWebSearch) -> No action taken.

Registerwaarden geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Registerdata geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Mappen geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Bestanden geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:05:45, on 5/06/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Application Updater\ApplicationUpdater.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Ask.com - International
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN | Hotmail | Messenger | Nieuws, entertainment, concerten, video, sport, lifestyle, auto en nog veel meer, dat is MSN !
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN | Hotmail | Messenger | Nieuws, entertainment, concerten, video, sport, lifestyle, auto en nog veel meer, dat is MSN !
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe"
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2009\IEShow.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office12\EXCEL.EXE/3000
O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/mic...ls/en/x86/client/muweb_site.cab?1273005332125
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files\Application Updater\ApplicationUpdater.exe
O23 - Service: BitDefender Arrakis Server (Arrakis3) - Unknown owner - C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S. R. L. - C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe

--
End of file - 8544 bytes

Start Hijackthis op en kies voor 'Do a system scan only'
Selecteer alleen de items die hieronder zijn genoemd:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Ask.com - International
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN | Hotmail | Messenger | Nieuws, entertainment, concerten, video, sport, lifestyle, auto en nog veel meer, dat is MSN !
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN | Hotmail | Messenger | Nieuws, entertainment, concerten, video, sport, lifestyle, auto en nog veel meer, dat is MSN !
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll

Sluit alle vensters behalve Hijackthis
Klik op 'Fix checked' om de items te verwijderen.

STart opnieuw op.

Start nu combofix opnieuw en laat het scannen, plaats de uitslag van combofix en ook een vers HijackThis logje.

ComboFix 10-06-14.03 - Administrator 15/06/2010 15:49:16.2.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.32.1043.18.2047.1303 [GMT 2:00]
Gestart vanuit: c:\documents and settings\Administrator\Bureaublad\ComboFix.exe
AV: BitDefender Antivirus *On-access scanning disabled* (Updated) {6C4BB89C-B0ED-4F41-A29C-4373888923BB}
FW: BitDefender Firewall *enabled* {4055920F-2E99-48A8-A270-4243D2B8F242}
.

(((((((((((((((((((( Bestanden Gemaakt van 2010-05-15 to 2010-06-15 ))))))))))))))))))))))))))))))
.

2010-06-15 13:33 . 2010-06-15 13:33 85512 ----a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2010-06-15 11:10 . 2008-04-13 22:16 10880 -c--a-w- c:\windows\system32\dllcache\ndisip.sys
2010-06-15 11:10 . 2008-04-13 22:16 10880 ----a-w- c:\windows\system32\drivers\NdisIP.sys
2010-06-15 11:10 . 2008-04-13 22:16 15232 -c--a-w- c:\windows\system32\dllcache\streamip.sys
2010-06-15 11:10 . 2008-04-13 22:16 15232 ----a-w- c:\windows\system32\drivers\StreamIP.sys
2010-06-15 11:10 . 2008-04-13 22:16 11136 -c--a-w- c:\windows\system32\dllcache\slip.sys
2010-06-15 11:10 . 2008-04-13 22:16 11136 ----a-w- c:\windows\system32\drivers\SLIP.sys
2010-06-15 11:10 . 2008-04-13 22:09 5504 -c--a-w- c:\windows\system32\dllcache\mstee.sys
2010-06-15 11:10 . 2008-04-13 22:09 5504 ----a-w- c:\windows\system32\drivers\MSTEE.sys
2010-06-15 11:10 . 2008-04-13 22:16 19200 -c--a-w- c:\windows\system32\dllcache\wstcodec.sys
2010-06-15 11:10 . 2008-04-13 22:16 19200 ----a-w- c:\windows\system32\drivers\WSTCODEC.SYS
2010-06-15 11:10 . 2008-04-13 22:16 85248 -c--a-w- c:\windows\system32\dllcache\nabtsfec.sys
2010-06-15 11:10 . 2008-04-13 22:16 85248 ----a-w- c:\windows\system32\drivers\NABTSFEC.sys
2010-06-15 11:09 . 2008-04-13 22:16 17024 -c--a-w- c:\windows\system32\dllcache\ccdecode.sys
2010-06-15 11:09 . 2008-04-13 22:16 17024 ----a-w- c:\windows\system32\drivers\CCDECODE.sys
2010-06-15 11:09 . 2008-04-14 20:32 54272 -c--a-w- c:\windows\system32\dllcache\vfwwdm32.dll
2010-06-15 11:09 . 2008-04-14 20:32 54272 ----a-w- c:\windows\system32\vfwwdm32.dll
2010-06-15 11:08 . 2010-05-20 13:27 1961072 ----a-w- c:\windows\system32\drivers\VX1000.sys
2010-06-15 11:08 . 2010-05-20 13:27 101232 ----a-w- c:\windows\VX1000.dll
2010-06-15 11:08 . 2010-05-20 13:27 762736 ----a-w- c:\windows\vVX1000.exe
2010-06-15 11:08 . 2010-05-20 13:27 677232 ----a-w- c:\windows\system32\LCCoin32.dll
2010-06-15 11:08 . 2010-05-20 13:27 227696 ----a-w- c:\windows\vVX1000.dll
2010-06-15 11:08 . 2010-05-20 13:27 175472 ----a-w- c:\windows\system32\cVX1000.dll
2010-06-15 11:08 . 2010-06-15 11:08 -------- d-----w- c:\program files\Microsoft LifeCam
2010-06-11 11:54 . 2010-05-06 10:36 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2010-06-11 08:11 . 2010-06-09 07:58 85464 ----a-w- c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\aoncf35s.default\extensions\{340c2bbc-ce74-4362-90b5-7c26312808ef}\platform\WINNT_x86-msvc\components\WeaveCrypto.dll
2010-06-11 08:11 . 2010-06-09 07:58 38872 ----a-w- c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\aoncf35s.default\extensions\{340c2bbc-ce74-4362-90b5-7c26312808ef}\platform\WINCE\components\WeaveCrypto.dll
2010-06-05 07:30 . 2010-06-05 07:30 -------- d-----w- c:\documents and settings\Administrator\Application Data\Malwarebytes
2010-06-05 07:29 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-06-05 07:29 . 2010-06-05 07:29 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-06-05 07:29 . 2010-06-05 07:29 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-06-05 07:29 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-06-05 07:23 . 2010-06-05 07:23 388096 ----a-r- c:\documents and settings\Administrator\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-06-05 07:23 . 2010-06-05 07:23 -------- d-----w- c:\program files\Trend Micro
2010-06-03 10:42 . 2009-10-16 06:34 11776 ----a-w- c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\aoncf35s.default\extensions\{d9284e50-81fc-11da-a72b-0800200c9a66}\lib\WINNT_x86-msvc\1.9.1\yoono.dll
2010-06-02 16:24 . 2010-06-02 16:24 19708 ---ha-w- c:\windows\system32\mlfcache.dat
2010-05-30 14:56 . 2009-11-03 12:07 679936 ----a-w- c:\windows\system32\D3DX81ab.dll
2010-05-30 14:56 . 2009-11-03 12:07 1970176 ----a-w- c:\windows\system32\d3dx9.dll
2010-05-30 12:57 . 2010-05-30 15:18 -------- d-----w- c:\documents and settings\Administrator\Application Data\fizzy
2010-05-30 12:57 . 2010-05-30 12:57 -------- d-sh--w- c:\windows\ftpcache
2010-05-30 10:21 . 2010-05-30 10:21 -------- d-----w- c:\documents and settings\Administrator\Application Data\Office Genuine Advantage
2010-05-29 13:58 . 2010-05-29 13:58 -------- d-----w- c:\windows\system32\Adobe
2010-05-29 10:37 . 2010-05-30 08:46 -------- d---a-w- c:\documents and settings\Administrator\L2PhX
2010-05-28 14:17 . 2010-05-28 14:17 -------- d-----w- c:\program files\MSXML 4.0
2010-05-28 13:49 . 2010-05-28 13:49 -------- d-----w- c:\documents and settings\All Users\Application Data\Office Genuine Advantage
2010-05-27 20:06 . 2009-04-16 10:42 315904 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\hpfpp70w.dll
2010-05-27 20:06 . 2009-04-16 10:42 123904 ----a-w- c:\windows\system32\hpf3l70w.dll
2010-05-27 20:05 . 2010-05-27 20:05 -------- d-----w- c:\program files\Common Files\HP
2010-05-27 20:05 . 2010-05-27 20:05 -------- d-----w- c:\program files\Common Files\Hewlett-Packard
2010-05-27 20:04 . 2008-10-29 00:27 16496 ----a-w- c:\windows\system32\drivers\HPZipr12.sys
2010-05-27 20:04 . 2009-04-16 11:53 452408 ----a-w- c:\windows\system32\hpzids01.dll
2010-05-27 20:04 . 2009-04-01 06:21 713728 ----a-w- c:\windows\system32\hposwia_d02d.dll
2010-05-27 20:04 . 2009-04-01 06:21 589824 ----a-w- c:\windows\system32\hpost_d02d.dll
2010-05-27 20:04 . 2009-04-01 06:21 315392 ----a-w- c:\windows\system32\hposc_d02a.dll
2010-05-27 20:03 . 2010-05-27 20:04 -------- d-----w- c:\program files\HP
2010-05-27 20:03 . 2008-04-13 22:15 15104 -c--a-w- c:\windows\system32\dllcache\usbscan.sys
2010-05-27 20:03 . 2008-04-13 22:15 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys
2010-05-27 20:02 . 2010-05-27 20:08 180384 ----a-w- c:\windows\hpoins46.dat
2010-05-27 20:02 . 2010-01-30 13:17 532 ------w- c:\windows\hpomdl46.dat
2010-05-27 17:58 . 2010-05-27 17:58 -------- d-----w- c:\program files\Microsoft.NET
2010-05-27 17:55 . 2010-05-27 17:56 -------- d-----w- c:\windows\SHELLNEW
2010-05-27 17:55 . 2010-05-27 17:55 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\Microsoft Help
2010-05-27 17:55 . 2010-06-11 13:24 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2010-05-27 17:54 . 2010-05-27 17:54 -------- d-----r- C:\MSOCache
2010-05-23 10:12 . 2010-05-23 10:12 664 ----a-w- c:\windows\system32\d3d9caps.dat
2010-05-23 09:55 . 2001-09-06 19:26 8704 -c--a-w- c:\windows\system32\dllcache\kbdjpn.dll
2010-05-23 09:55 . 2001-09-06 19:26 8704 ----a-w- c:\windows\system32\kbdjpn.dll
2010-05-23 09:55 . 2001-09-06 19:26 8192 -c--a-w- c:\windows\system32\dllcache\kbdkor.dll
2010-05-23 09:55 . 2001-09-06 19:26 8192 ----a-w- c:\windows\system32\kbdkor.dll
2010-05-23 09:55 . 2001-08-17 20:55 6144 -c--a-w- c:\windows\system32\dllcache\kbd101c.dll
2010-05-23 09:55 . 2001-08-17 20:55 6144 -c--a-w- c:\windows\system32\dllcache\kbd101b.dll
2010-05-23 09:55 . 2001-08-17 20:55 6144 ----a-w- c:\windows\system32\kbd101c.dll
2010-05-23 09:55 . 2001-08-17 20:55 6144 ----a-w- c:\windows\system32\kbd101b.dll
2010-05-23 09:55 . 2001-08-17 20:55 5632 -c--a-w- c:\windows\system32\dllcache\kbd103.dll
2010-05-23 09:55 . 2001-08-17 20:55 5632 ----a-w- c:\windows\system32\kbd103.dll
2010-05-23 09:55 . 2008-04-14 20:31 6144 -c--a-w- c:\windows\system32\dllcache\kbd106.dll
2010-05-23 09:55 . 2008-04-14 20:31 6144 ----a-w- c:\windows\system32\kbd106.dll
2010-05-22 21:03 . 2010-05-22 21:03 61440 ----a-w- c:\documents and settings\Administrator\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-75414689-n\decora-sse.dll
2010-05-22 21:03 . 2010-05-22 21:03 503808 ----a-w- c:\documents and settings\Administrator\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-42f2292d-n\msvcp71.dll
2010-05-22 21:03 . 2010-05-22 21:03 499712 ----a-w- c:\documents and settings\Administrator\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-42f2292d-n\jmc.dll
2010-05-22 21:03 . 2010-05-22 21:03 348160 ----a-w- c:\documents and settings\Administrator\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-42f2292d-n\msvcr71.dll
2010-05-22 21:03 . 2010-05-22 21:03 12800 ----a-w- c:\documents and settings\Administrator\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-75414689-n\decora-d3d.dll
2010-05-21 19:53 . 2010-05-21 19:53 -------- d-----w- c:\documents and settings\Administrator\Application Data\Search Settings
2010-05-19 16:34 . 2010-05-19 16:34 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
2010-05-19 16:34 . 2010-05-19 16:34 -------- d-----w- c:\windows\system32\config\systemprofile\Application Data\Application Updater
2010-05-19 16:34 . 2010-05-19 16:34 -------- d-----w- c:\program files\Application Updater
2010-05-19 16:33 . 2010-05-19 16:33 -------- d-----w- c:\windows\system32\custom matrices
2010-05-19 16:33 . 2010-05-19 16:33 -------- d-----w- c:\windows\system32\C2MP
2010-05-19 16:33 . 2010-05-19 16:33 -------- d-----w- c:\windows\system32\QuickTime
2010-05-19 16:27 . 2010-05-24 14:39 -------- d-----w- c:\documents and settings\Administrator\Application Data\vlc
2010-05-19 16:26 . 2010-05-19 16:26 -------- d-----w- c:\program files\VideoLAN
2010-05-18 14:35 . 2010-05-18 14:35 -------- d-----w- c:\program files\4Videosoft Studio
2010-05-18 14:25 . 2007-05-17 21:30 318976 ----a-w- c:\windows\system32\avisynth.dll
2010-05-18 14:25 . 2006-11-07 09:22 719872 ----a-w- c:\windows\system32\devil.dll
2010-05-18 14:25 . 2010-05-18 14:25 -------- d-----w- c:\program files\Kingdia Software
2010-05-18 13:33 . 2010-05-18 13:33 -------- d-----w- C:\AmadisTMP
2010-05-18 13:32 . 2010-05-18 13:32 -------- d-----w- c:\program files\MegaDev
2010-05-18 13:21 . 2010-05-18 13:21 -------- d-----w- c:\program files\Amadis Software

.
((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-06-15 13:33 . 2010-05-04 20:32 81984 ----a-w- c:\windows\system32\bdod.bin
2010-06-15 13:32 . 2010-05-09 07:28 -------- d-----w- c:\program files\Ask.com
2010-06-11 13:13 . 2003-04-08 12:00 533920 ----a-w- c:\windows\system32\perfh013.dat
2010-06-11 13:13 . 2003-04-08 12:00 100464 ----a-w- c:\windows\system32\perfc013.dat
2010-06-05 07:13 . 2010-05-04 20:21 -------- d-----w- c:\program files\Microsoft Silverlight
2010-06-02 15:47 . 2010-05-09 07:28 -------- d-----w- c:\documents and settings\Administrator\Application Data\BitTorrent
2010-05-29 07:45 . 2010-05-15 15:37 -------- d-----w- c:\documents and settings\Administrator\Application Data\Winamp
2010-05-28 13:49 . 2010-05-04 18:58 24160 ----a-w- c:\documents and settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-05-15 15:38 . 2010-05-15 15:37 -------- d-----w- c:\program files\Winamp
2010-05-14 17:52 . 2010-05-14 17:52 -------- d-----w- c:\program files\EA SPORTS
2010-05-12 18:31 . 2010-05-12 18:31 -------- d-----w- c:\program files\Google
2010-05-09 07:28 . 2010-05-09 07:28 -------- d-----w- c:\program files\BitTorrent
2010-05-06 13:50 . 2010-05-06 13:50 -------- d--h--r- c:\documents and settings\Administrator\Application Data\SecuROM
2010-05-06 13:40 . 2010-05-06 13:39 -------- d-----w- c:\program files\Common Files\Adobe AIR
2010-05-06 13:40 . 2010-05-06 13:39 38784 ----a-w- c:\documents and settings\Administrator\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2010-05-06 13:40 . 2010-05-06 13:38 -------- d-----w- c:\documents and settings\All Users\Application Data\Electronic Arts
2010-05-06 13:08 . 2010-05-06 13:08 -------- d-----w- c:\program files\Electronic Arts
2010-05-06 10:37 . 2003-04-08 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2010-05-06 08:36 . 2010-05-06 08:36 -------- d-----w- c:\program files\SystemRequirementsLab
2010-05-06 08:36 . 2010-05-06 08:36 85504 ----a-w- c:\documents and settings\Administrator\Application Data\SystemRequirementsLab\srlproxy_cyri_4.1.71.0A.dll
2010-05-06 08:36 . 2010-05-06 08:36 -------- d-----w- c:\documents and settings\Administrator\Application Data\SystemRequirementsLab
2010-05-06 08:35 . 2010-05-06 08:35 503808 ----a-w- c:\documents and settings\Administrator\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-5723d133-n\msvcp71.dll
2010-05-06 08:35 . 2010-05-06 08:35 499712 ----a-w- c:\documents and settings\Administrator\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-5723d133-n\jmc.dll
2010-05-06 08:35 . 2010-05-06 08:35 348160 ----a-w- c:\documents and settings\Administrator\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-5723d133-n\msvcr71.dll
2010-05-06 08:35 . 2010-05-06 08:35 61440 ----a-w- c:\documents and settings\Administrator\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-4aadc3e5-n\decora-sse.dll
2010-05-06 08:35 . 2010-05-06 08:35 12800 ----a-w- c:\documents and settings\Administrator\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-4aadc3e5-n\decora-d3d.dll
2010-05-06 08:35 . 2010-05-06 08:35 -------- d-----w- c:\program files\Common Files\Java
2010-05-06 08:35 . 2010-05-06 08:35 411368 ----a-w- c:\windows\system32\deployJava1.dll
2010-05-06 08:34 . 2010-05-06 08:34 -------- d-----w- c:\program files\Java
2010-05-06 08:12 . 2010-05-06 08:12 -------- d-----w- c:\program files\K-Lite Codec Pack
2010-05-05 17:47 . 2010-05-05 10:46 -------- d-----w- c:\program files\Windows Desktop Search
2010-05-05 13:55 . 2010-05-04 20:40 -------- d-----w- c:\documents and settings\Administrator\Application Data\Apple Computer
2010-05-05 13:54 . 2010-05-05 13:54 -------- d-----w- c:\documents and settings\Administrator\Application Data\Windows Search
2010-05-05 10:47 . 2010-05-05 10:47 -------- d-----w- c:\documents and settings\Administrator\Application Data\Windows Desktop Search
2010-05-05 10:44 . 2010-05-05 10:44 -------- d-----w- c:\program files\Windows Media Connect 2
2010-05-05 09:05 . 2010-05-04 18:21 86327 ----a-w- c:\windows\PCHealth\HelpCtr\OfflineCache\index.dat
2010-05-04 20:58 . 2009-02-12 14:52 104456 ----a-w- c:\windows\system32\drivers\bdfndisf.sys
2010-05-04 20:52 . 2010-05-04 20:33 -------- d-----w- c:\documents and settings\All Users\Application Data\BitDefender
2010-05-04 20:44 . 2010-05-04 20:44 -------- d-----w- c:\program files\MSBuild
2010-05-04 20:44 . 2010-05-04 20:44 -------- d-----w- c:\program files\Reference Assemblies
2010-05-04 20:41 . 2010-05-04 20:41 -------- d-----w- c:\program files\MSXML 6.0
2010-05-04 20:40 . 2010-05-04 20:39 -------- d-----w- c:\program files\iTunes
2010-05-04 20:40 . 2010-05-04 20:39 -------- d-----w- c:\documents and settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-05-04 20:39 . 2010-05-04 20:39 -------- d-----w- c:\program files\iPod
2010-05-04 20:39 . 2010-05-04 20:39 -------- d-----w- c:\program files\QuickTime
2010-05-04 20:39 . 2010-05-04 20:39 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple Computer
2010-05-04 20:38 . 2010-05-04 20:38 -------- d-----w- c:\program files\Apple Software Update
2010-05-04 20:38 . 2010-05-04 20:38 -------- d-----w- c:\program files\Bonjour
2010-05-04 20:38 . 2010-05-04 20:38 -------- d-----w- c:\program files\Common Files\Apple
2010-05-04 20:38 . 2010-05-04 20:38 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple
2010-05-04 20:34 . 2010-05-04 19:36 -------- d-----w- c:\documents and settings\All Users\Application Data\NOS
2010-05-04 20:33 . 2010-05-04 20:33 -------- d-----w- c:\documents and settings\Administrator\Application Data\BitDefender
2010-05-04 20:33 . 2010-05-04 20:31 -------- d-----w- c:\program files\Common Files\BitDefender
2010-05-04 20:33 . 2010-05-04 20:33 -------- d-----w- c:\program files\BitDefender
2010-05-04 20:25 . 2010-05-04 20:22 -------- d-----w- c:\program files\Common Files\Softwin
2010-05-04 20:20 . 2010-05-04 20:17 -------- d-----w- c:\program files\Windows Live
2010-05-04 20:20 . 2010-05-04 20:20 -------- d-----w- c:\program files\Microsoft Sync Framework
2010-05-04 20:19 . 2010-05-04 20:19 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2010-05-04 20:18 . 2010-05-04 20:18 -------- d-----w- c:\program files\Microsoft
2010-05-04 20:17 . 2010-05-04 20:17 -------- d-----w- c:\program files\Windows Live SkyDrive
2010-05-04 20:15 . 2010-05-04 20:15 -------- d-----w- c:\program files\Common Files\Windows Live
2010-05-04 19:51 . 2010-05-04 19:51 -------- d-----w- c:\program files\Common Files\Adobe
2010-05-04 19:46 . 2010-05-04 19:46 0 ----a-w- c:\windows\nsreg.dat
2010-05-04 19:36 . 2010-05-04 19:36 1956656 ----a-w- c:\documents and settings\All Users\Application Data\NOS\Adobe_Downloads\install_flash_player_ax.exe
2010-05-04 19:31 . 2010-05-04 19:30 1956808 ----a-w- c:\documents and settings\Administrator\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\fpupdateax\fpupdateax.exe
2010-05-04 19:04 . 2010-05-04 19:04 -------- d-----w- c:\documents and settings\All Users\Application Data\ATI
2010-05-04 19:04 . 2010-05-04 19:04 0 ----a-w- c:\windows\ativpsrm.bin
2010-05-04 19:01 . 2010-05-04 18:37 -------- d-----w- c:\program files\ATI Technologies
2010-05-04 18:58 . 2010-05-04 18:58 -------- d-----w- c:\documents and settings\Administrator\Application Data\ATI
2010-05-04 18:43 . 2010-05-04 18:29 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-05-04 18:42 . 2010-05-04 18:42 9158 ----a-r- c:\documents and settings\Administrator\Application Data\Microsoft\Installer\{89DE67AD-08B8-4699-A55D-CA5C0AF82BF3}\ARPPRODUCTICON.exe
2010-05-04 18:42 . 2010-05-04 18:42 -------- d-----w- c:\program files\Common Files\ATI Technologies
2010-05-04 18:36 . 2010-05-04 18:28 -------- d-----w- c:\program files\Common Files\InstallShield
2010-05-04 18:30 . 2010-05-04 18:30 -------- d-----w- c:\program files\Realtek
2010-05-04 18:28 . 2010-05-04 18:28 -------- d-----w- c:\program files\VIA
2010-05-04 18:22 . 2010-05-04 18:22 -------- d-----w- c:\program files\microsoft frontpage
2010-05-04 18:19 . 2010-05-04 18:19 21748 ----a-w- c:\windows\system32\emptyregdb.dat
2010-05-02 08:10 . 2003-04-08 12:00 1851392 ----a-w- c:\windows\system32\win32k.sys
2010-04-28 13:45 . 2010-04-28 13:45 73000 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 9.1.1.12\SetupAdmin.exe
2010-04-20 05:35 . 2003-04-08 12:00 285696 ----a-w- c:\windows\system32\atmfd.dll
2010-04-16 06:33 . 2010-05-04 20:38 41472 ----a-w- c:\windows\system32\drivers\usbaapl.sys
2010-04-16 06:33 . 2010-05-04 20:38 3003680 ----a-w- c:\windows\system32\usbaaplrc.dll
2010-04-08 11:20 . 2010-04-08 11:20 91424 ----a-w- c:\windows\system32\dnssd.dll
2010-04-08 11:20 . 2010-04-08 11:20 107808 ----a-w- c:\windows\system32\dns-sd.exe
.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2007-02-26 16125440]
"SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-08-13 98304]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-04-04 36272]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-03-24 952768]
"BDAgent"="c:\program files\BitDefender\BitDefender 2009\bdagent.exe" [2010-05-04 782336]
"BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2009\IEShow.exe" [2009-02-23 69632]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-04-28 142120]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2010-04-29 437584]
"VX1000"="c:\windows\vVX1000.exe" [2010-05-20 762736]
"LifeCam"="c:\program files\Microsoft LifeCam\LifeExp.exe" [2010-05-20 119152]

c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\
Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2008-5-26 123904]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\BitTorrent\\bittorrent.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfcCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
"d:\\Games\\Steam\\steamapps\\xinu89\\counter-strike\\hl.exe"=
"c:\\Program Files\\Microsoft LifeCam\\LifeCam.exe"=
"c:\\Program Files\\Microsoft LifeCam\\LifeEnC2.exe"=
"c:\\Program Files\\Microsoft LifeCam\\LifeExp.exe"=
"c:\\Program Files\\Microsoft LifeCam\\LifeTray.exe"=

R0 ViBus;ViBus;c:\windows\system32\drivers\ViBus.sys [4/05/2010 20:29 16896]
R0 ViPrt;VIA SATA IDE Device Driver;c:\windows\system32\drivers\ViPrt.sys [4/05/2010 20:29 52224]
R2 Application Updater;Application Updater;c:\program files\Application Updater\ApplicationUpdater.exe [8/01/2010 0:51 380928]
R2 BDVEDISK;BDVEDISK;c:\program files\BitDefender\BitDefender 2009\BDVEDISK.sys [6/10/2008 18:16 82696]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [5/06/2010 9:29 304464]
R3 bdfm;BDFM;c:\windows\system32\drivers\bdfm.sys [18/09/2008 12:09 111112]
R3 Bdfndisf;BitDefender Firewall NDIS Filter Service;c:\windows\system32\drivers\bdfndisf.sys [12/02/2009 16:52 104456]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [5/06/2010 9:29 20952]
S2 gupdate;Google Updateservice (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [12/05/2010 20:31 136176]
S3 Arrakis3;BitDefender Arrakis Server;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe [20/01/2009 19:16 172032]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bdx REG_MULTI_SZ scan
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
HPService REG_MULTI_SZ HPSLPSVC
.
Inhoud van de 'Gedeelde Taken' map

2010-06-04 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 09:50]

2010-06-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-05-12 18:31]

2010-06-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-05-12 18:31]

2010-06-15 c:\windows\Tasks\OGALogon.job
- c:\windows\system32\OGAEXEC.exe [2009-08-03 13:07]

2010-06-15 c:\windows\Tasks\Scheduled Update for Ask Toolbar.job
- c:\program files\Ask.com\UpdateTask.exe [2010-05-26 13:23]
.
.
------- Bijkomende Scan -------
.
IE: E&xport to Microsoft Excel - c:\progra~1\MI1933~1\Office12\EXCEL.EXE/3000
.
- - - - ORPHANS VERWIJDERD - - - -

WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover
Rootkit scan 2010-06-15 15:58
Windows 5.1.2600 Service Pack 3 NTFS

scannen van verborgen processen ...

scannen van verborgen autostart items ...

scannen van verborgen bestanden ...

Scan succesvol afgerond
verborgen bestanden: 0

**************************************************************************
.
--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

[HKEY_USERS\S-1-5-21-790525478-1547161642-725345543-500\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (Administrator)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,ab,92,ce,8a,cc,10,67,4b,bc,c6,bf,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,ab,92,ce,8a,cc,10,67,4b,bc,c6,bf,\

[HKEY_USERS\S-1-5-21-790525478-1547161642-725345543-500\Software\SecuROM\License information*]
"datasecu"=hex:20,db,70,74,10,6f,f4,42,a4,d1,88,8b,38,aa,5e,8a,fc,63,67,76,75,
70,32,1a,ff,eb,b0,40,e8,3d,39,1d,d8,15,99,03,10,b1,5d,6f,bf,7e,6a,a7,cf,3f,\
"rkeysecu"=hex:cf,2e,da,eb,26,1f,6c,49,17,6e,50,68,98,91,37,08
.
--------------------- DLLs Geladen Onder Lopende Processen ---------------------

- - - - - - - > 'winlogon.exe'(984)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(3144)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Voltooingstijd: 2010-06-15 16:02:05
ComboFix-quarantined-files.txt 2010-06-15 14:01
ComboFix2.txt 2010-06-05 07:55

Pre-Run: 26.173.788.160 bytes beschikbaar
Post-Run: 26.184.179.712 bytes beschikbaar

- - End Of File - - 81CCC71EA36FA195BF0E22739C413AAA

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:09:21, on 15/06/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Application Updater\ApplicationUpdater.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN | Hotmail | Messenger | Nieuws, entertainment, concerten, video, sport, lifestyle, auto en nog veel meer, dat is MSN !
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe"
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2009\IEShow.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [VX1000] C:\WINDOWS\vVX1000.exe
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office12\EXCEL.EXE/3000
O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/mic...ls/en/x86/client/muweb_site.cab?1273005332125
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files\Application Updater\ApplicationUpdater.exe
O23 - Service: BitDefender Arrakis Server (Arrakis3) - Unknown owner - C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S. R. L. - C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe

--
End of file - 7668 bytes

Beter nu ?

Pc gaat stukken beter maar als ik opstart dan blijf die hangen want dan loopt de klok ook achter.En dit gebeurt 3 a 5x achterelkaar wat kan de probleem zijn ? Want mijn msn komt nie op beeldscherm en alles blijft hangen

Moederbord batterij misschien op ?

eum kan goed zijn Ik zal het gaan veranderen en bedankt voor je tijd