Mededeling

Collapse
No announcement yet.

Lastige Anti Virus Pop Ups

Collapse
X
Collapse
  •  
  • Page of 2
  • Filter
  • Tijd
  • Show
Clear All
new posts
Vorige 1 2 template Volgende
  • #1

    Lastige Anti Virus Pop Ups

    Ik krijg de laatste tijd altijd van deze pop ups om anti virrusen te downloaden en ook een geel driehoekje met daarin dat ik virus fzo heb ...
    Heb nogal veel Online Games Op me pc maar die staan er al eeuwen op ... heb geen nieuw spel gdl Voor Deze Last Begon ...

    Men Logje


    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 16:10:09, on 21/12/2007
    Platform: Windows Vista (WinNT 6.00.1904)
    MSIE: Internet Explorer v7.00 (7.00.6000.16575)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Windows\ehome\ehtray.exe
    C:\Users\Faes BVBA\Program Files\BitTorrent_DNA\dna.exe
    C:\Program Files\Video Add-on\icmntr.exe
    C:\Windows\system32\wbem\unsecapp.exe
    C:\Windows\System32\rundll32.exe
    C:\Windows\ehome\ehmsas.exe
    C:\Program Files\Video Add-on\icthis.exe
    C:\Program Files\Internet Explorer\IEUser.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
    C:\Windows\system32\SearchFilterHost.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O1 - Hosts: ::1 localhost
    O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: GetRight IE Download Helper - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll
    O2 - BHO: (no name) - {69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014} - C:\Program Files\Video Add-on\isfmdl.dll (file missing)
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
    O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
    O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
    O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
    O4 - HKCU\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Users\Faes BVBA\Program Files\BitTorrent_DNA\dna.exe"
    O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
    O4 - HKLM\..\Policies\Explorer\Run: [some] C:\Program Files\Video Add-on\icthis.exe
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
    O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
    O4 - Global Startup: Adobe Reader Snelle start.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
    O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
    O4 - Global Startup: Logitech SetPoint.lnk = ?
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
    O9 - Extra button: (no name) - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
    O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.securesoftwarefeed.com/redirect.php (file missing)
    O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.securesoftwarefeed.com/redirect.php (file missing)
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Users\Faes BVBA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
    O13 - Gopher Prefix:
    O15 - Trusted Zone: *.kbc.be
    O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
    O16 - DPF: {2DA3C4AB-E6B6-47A6-B0F3-1BD81524B51B} (ActiveWorldsDownload Control) - http://www.activeworlds.com/products/ActiveWorldsDownload.cab
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/NL-BE/a-UNO1/GAME_UNO1.cab
    O16 - DPF: {5F5F9FB8-878E-4455-95E0-F64B2314288A} (ijjiPlugin2 Class) - http://gamedownload.ijjimax.com/gamedownload/dist/hgstart/HGPlugin11USA.cab
    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
    O16 - DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} (GameLauncher Control) - http://www.acclaim.com/cabs/acclaim_v8.cab
    O16 - DPF: {7B41B7AC-3496-4C13-A70F-DE6B60A6A8A8} (MGAME manager Class) - http://legendofares.netgame.com/download/mgusamanagerv1001.cab
    O16 - DPF: {7C5D062A-7A1E-4A46-A02B-A928084CBD66} (MLauncherNew Class) - http://legendofares.netgame.com/download/MusaLauncherNew.cab
    O16 - DPF: {AA07EBD2-EBDD-4BD6-9F8F-114BD513492C} (NeffyLauncherCtl Class) - http://dist.globalgamecdn.com/dist/neffy/NeffyLauncher.cab
    O16 - DPF: {AB4ADC0F-2B4B-4B08-8B5C-CA4D6188A180} (P3Xfer Loader Class) - http://package.hyosungcdn.com/download/p3xset.cab
    O16 - DPF: {AE2B937E-EA7D-4A8D-888C-B68D7F72A3C4} (IPSUploader4 Control) - http://as.photoprintit.de/ips-opdata/74914091/activex/IPSUploader4.cab
    O16 - DPF: {BD08A9D5-0E5C-4F42-99A3-C0CB5E860557} (CSolidBrowserObj Object) - http://www.playwhat.com/solidPlugin/solidstateion.cab
    O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game03.zylom.com/activex/zylomgamesplayer.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {CEE326E8-7571-4086-B347-3C0ACA9A9DE8} (PcubeSet Class) - http://config.hyosungcdn.com/download/hsloadset.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {D88C7675-7CEE-4C9A-BDD4-7A43EED7794D} (Logout Class) - http://www.gamengame.com/KALogoutComponent.cab
    O16 - DPF: {DD583921-A9E9-4FBF-9266-8DC2AB5EA0AF} (HGPlugin10USA Class) - http://gamedownload.ijjimax.com/gamedownload/dist/hgstart/HGPlugin10USA.cab
    O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\r3hook.dll
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: Kaspersky Anti Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
    O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

    --
    End of file - 8481 bytes
    Labels: Geen
    • Citaat
  • #2
    Download: RVAXO.exe
    • Sla het bestand op je bureaublad op, dubbelklik het en kies voor "Unzip" om het uit te pakken.
    • Open nu de map RVAXO op je bureaublad en dubbeklik RVAXO.cmd
      Er zal een cmd-schermpje openen, daarin zullen snel enkele regels over niet gevonden bestanden voorbijkomen, dit is normaal.
    • Mogelijk start er ook een uninstaller van een rogue scanner op, sluit deze niet af maar volg eventuele aanwijzingen en laat deze gewoon zijn werk doen.
    • Daarna zal je PC herstarten, na de herstart opent het cmd-venster van RVAXO opnieuw.
      Laat deze lopen en wacht tot er een logfile opent: C:\RVAXO-results.log
    • Herstart je computer niet vanzelf, of start de tool niet na de reboot, doe dit dan handmatig.
    • Post de inhoud van de logfile in je volgende bericht tesamen met een nieuw logje van HijackThis.
    • Citaat

    Comment

    • #3
      Niet vinden ...

      1. Hij sloot pc niet vanzelf af dus deet ik dat
      2. Hij opende cmd.File niet vanzelfd dus deed ik dat
      3. Bij Cmd Scherm Zegt hIj KaN Result.log ( en nog vanalles ervoor ) Niet vinden
      dan opent zich een schermpje met doorgaan of annuleren klik ik op doorgan en dan sluit cmd schermpje af en gebeurt er niets meer


      Eventueel Nieuw HiJack Logje

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 16:10:09, on 21/12/2007
      Platform: Windows Vista (WinNT 6.00.1904)
      MSIE: Internet Explorer v7.00 (7.00.6000.16575)
      Boot mode: Normal

      Running processes:
      C:\Windows\system32\taskeng.exe
      C:\Windows\system32\Dwm.exe
      C:\Windows\Explorer.EXE
      C:\Program Files\Windows Defender\MSASCui.exe
      C:\Windows\ehome\ehtray.exe
      C:\Users\Faes BVBA\Program Files\BitTorrent_DNA\dna.exe
      C:\Program Files\Video Add-on\icmntr.exe
      C:\Windows\system32\wbem\unsecapp.exe
      C:\Windows\System32\rundll32.exe
      C:\Windows\ehome\ehmsas.exe
      C:\Program Files\Video Add-on\icthis.exe
      C:\Program Files\Internet Explorer\IEUser.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
      C:\Windows\system32\SearchFilterHost.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      O1 - Hosts: ::1 localhost
      O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
      O2 - BHO: GetRight IE Download Helper - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll
      O2 - BHO: (no name) - {69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014} - C:\Program Files\Video Add-on\isfmdl.dll (file missing)
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
      O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
      O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
      O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
      O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
      O4 - HKCU\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
      O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
      O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Users\Faes BVBA\Program Files\BitTorrent_DNA\dna.exe"
      O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
      O4 - HKLM\..\Policies\Explorer\Run: [some] C:\Program Files\Video Add-on\icthis.exe
      O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
      O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
      O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
      O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
      O4 - Global Startup: Adobe Reader Snelle start.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
      O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
      O4 - Global Startup: Logitech SetPoint.lnk = ?
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
      O9 - Extra button: (no name) - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
      O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
      O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
      O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.securesoftwarefeed.com/redirect.php (file missing)
      O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.securesoftwarefeed.com/redirect.php (file missing)
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
      O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Users\Faes BVBA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
      O13 - Gopher Prefix:
      O15 - Trusted Zone: *.kbc.be
      O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
      O16 - DPF: {2DA3C4AB-E6B6-47A6-B0F3-1BD81524B51B} (ActiveWorldsDownload Control) - http://www.activeworlds.com/products/ActiveWorldsDownload.cab
      O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/NL-BE/a-UNO1/GAME_UNO1.cab
      O16 - DPF: {5F5F9FB8-878E-4455-95E0-F64B2314288A} (ijjiPlugin2 Class) - http://gamedownload.ijjimax.com/gamedownload/dist/hgstart/HGPlugin11USA.cab
      O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
      O16 - DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} (GameLauncher Control) - http://www.acclaim.com/cabs/acclaim_v8.cab
      O16 - DPF: {7B41B7AC-3496-4C13-A70F-DE6B60A6A8A8} (MGAME manager Class) - http://legendofares.netgame.com/download/mgusamanagerv1001.cab
      O16 - DPF: {7C5D062A-7A1E-4A46-A02B-A928084CBD66} (MLauncherNew Class) - http://legendofares.netgame.com/download/MusaLauncherNew.cab
      O16 - DPF: {AA07EBD2-EBDD-4BD6-9F8F-114BD513492C} (NeffyLauncherCtl Class) - http://dist.globalgamecdn.com/dist/neffy/NeffyLauncher.cab
      O16 - DPF: {AB4ADC0F-2B4B-4B08-8B5C-CA4D6188A180} (P3Xfer Loader Class) - http://package.hyosungcdn.com/download/p3xset.cab
      O16 - DPF: {AE2B937E-EA7D-4A8D-888C-B68D7F72A3C4} (IPSUploader4 Control) - http://as.photoprintit.de/ips-opdata/74914091/activex/IPSUploader4.cab
      O16 - DPF: {BD08A9D5-0E5C-4F42-99A3-C0CB5E860557} (CSolidBrowserObj Object) - http://www.playwhat.com/solidPlugin/solidstateion.cab
      O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game03.zylom.com/activex/zylomgamesplayer.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O16 - DPF: {CEE326E8-7571-4086-B347-3C0ACA9A9DE8} (PcubeSet Class) - http://config.hyosungcdn.com/download/hsloadset.cab
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
      O16 - DPF: {D88C7675-7CEE-4C9A-BDD4-7A43EED7794D} (Logout Class) - http://www.gamengame.com/KALogoutComponent.cab
      O16 - DPF: {DD583921-A9E9-4FBF-9266-8DC2AB5EA0AF} (HGPlugin10USA Class) - http://gamedownload.ijjimax.com/gamedownload/dist/hgstart/HGPlugin10USA.cab
      O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\r3hook.dll
      O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
      O23 - Service: Kaspersky Anti Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
      O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
      O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

      --
      End of file - 8481 bytes
      Last edited by Rexke; 21-12-07, 15:34.
      • Citaat

      Comment

      • #4
        Download Combofix naar je Bureaublad.
        Dubbelklik op Combofix.exe
        Kies voor "Continue" door 1 te typen gevolgd door ENTER.
        Tijdens het runnen van de fix, NIET in het venster klikken, want dit zal je pc doen vasthangen.
        Wanneer de fix voltooid is en na herstart, zal de log combofix.txt openen.
        Plaats deze log in je volgende post.

        NOTA: Indien je virusscanner reageert met een melding van een scriptuitvoering, mag je dit negeren.
        Last edited by smeenk; 21-12-07, 15:54.
        • Citaat

        Comment

        • #5
          Ja
          • Citaat

          Comment

          • #6
            Komt omdat je Vista hebt, ik heb mijn vorige post al aangepast
            • Citaat

            Comment

            • #7
              Heb me pc wel niet heropgestart ( niet zeker of moest ) Maar heb dit logje gekregen :

              ComboFix 07-12-21.4 - Faes BVBA 2007-12-21 17:14:04.1 - NTFSx86
              Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.1.1043.18.421 [GMT 1:00]
              Gestart vanuit: C:\Users\Faes BVBA\Desktop\ComboFix.exe
              * Nieuw herstelpunt werd aangemaakt
              .

              (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
              .

              C:\Program Files\baidu
              C:\Program Files\Helper

              .
              (((((((((((((((((((( Bestanden Gemaakt van 2007-11-21 to 2007-12-21 ))))))))))))))))))))))))))))))
              .

              2007-12-21 16:09 . 2007-12-21 16:09 <DIR> d-------- C:\Program Files\Trend Micro
              2007-12-20 11:47 . 2007-12-20 11:47 <DIR> d-------- C:\Users\Faes BVBA\AppData\Roaming\Webroot
              2007-12-20 11:47 . 2007-12-20 11:47 <DIR> d-------- C:\Program Files\Webroot
              2007-12-18 21:29 . 2007-12-18 21:29 <DIR> d-------- C:\Users\All Users\Lavasoft
              2007-12-18 21:29 . 2007-12-18 21:29 <DIR> d-------- C:\ProgramData\Lavasoft
              2007-12-18 21:29 . 2007-12-18 21:29 <DIR> d-------- C:\Program Files\Lavasoft
              2007-12-18 16:34 . 2007-12-18 17:13 <DIR> d-------- C:\Program Files\Video Add-on
              2007-12-15 21:51 . 2007-12-15 21:55 <DIR> d-------- C:\Program Files\BitLord
              2007-12-15 13:41 . 2007-12-15 13:41 <DIR> d-------- C:\Program Files\MaxOn Soft
              2007-12-13 06:26 . 2007-12-13 06:26 1,327,104 --a------ C:\Windows\System32\quartz.dll
              2007-12-13 06:25 . 2007-12-13 06:25 223,232 --a------ C:\Windows\System32\WMASF.DLL
              2007-12-13 06:25 . 2007-12-13 06:25 9,728 --a------ C:\Windows\System32\LAPRXY.DLL
              2007-12-13 06:25 . 2007-12-13 06:25 2,048 --a------ C:\Windows\System32\asferror.dll
              2007-12-13 06:22 . 2007-12-13 06:22 3,504,824 --a------ C:\Windows\System32\ntkrnlpa.exe
              2007-12-13 06:22 . 2007-12-13 06:22 3,470,520 --a------ C:\Windows\System32\ntoskrnl.exe
              2007-12-13 06:21 . 2007-12-13 06:21 2,048 --a------ C:\Windows\System32\tzres.dll
              2007-12-02 10:20 . 2007-12-02 10:20 <DIR> d-------- C:\Program Files\Game Cam v1.4
              2007-11-28 14:02 . 2007-11-28 14:02 <DIR> d-------- C:\Program Files\Sierra On-Line
              2007-11-28 14:02 . 1998-01-23 12:22 304,128 --a------ C:\Windows\IsUninst.exe
              2007-11-28 14:02 . 2007-11-28 14:02 170 --a------ C:\Windows\SIERRA.INI
              2007-11-21 10:52 . 2007-11-21 10:57 <DIR> d-------- C:\Users\Faes BVBA\AppData\Roaming\Xfire
              2007-11-21 10:52 . 2007-11-21 10:52 <DIR> d-------- C:\Users\All Users\Xfire
              2007-11-21 10:52 . 2007-11-21 10:52 <DIR> d-------- C:\ProgramData\Xfire
              2007-11-21 10:52 . 2007-11-21 10:52 <DIR> d-------- C:\Program Files\Xfire

              .
              ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
              .
              2007-12-21 16:16 --------- d-----w C:\Users\Faes BVBA\AppData\Roaming\BitTorrent DNA
              2007-12-21 16:12 60,035,616 --sha-w C:\Windows\system32\drivers\fidbox.dat
              2007-12-21 15:27 --------- d-----w C:\ProgramData\Kaspersky Lab
              2007-12-21 15:25 804,788 --sha-w C:\Windows\system32\drivers\fidbox.idx
              2007-12-20 18:06 91,492 ----a-w C:\Windows\system32\drivers\klin.dat
              2007-12-18 20:27 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
              2007-12-18 19:07 --------- d--h--w C:\Program Files\InstallShield Installation Information
              2007-12-17 20:35 22,328 ----a-w C:\Windows\system32\drivers\PnkBstrK.sys
              2007-12-17 20:33 107,832 ----a-w C:\Windows\System32\PnkBstrB.exe
              2007-12-16 10:13 --------- d-----w C:\Program Files\Legend Of Ares
              2007-12-15 21:15 --------- d-----w C:\Program Files\Common Files\Adobe
              2007-12-13 21:36 --------- d-----w C:\Program Files\Outspark
              2007-12-13 05:24 84,992 ----a-w C:\Windows\system32\drivers\srvnet.sys
              2007-12-13 05:24 58,368 ----a-w C:\Windows\system32\drivers\mrxsmb20.sys
              2007-12-13 05:24 56,320 ----a-w C:\Windows\System32\iesetup.dll
              2007-12-13 05:24 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
              2007-12-13 05:24 26,624 ----a-w C:\Windows\System32\ieUnatt.exe
              2007-12-13 05:24 130,048 ----a-w C:\Windows\system32\drivers\srv2.sys
              2007-12-13 05:24 101,888 ----a-w C:\Windows\system32\drivers\mrxsmb.sys
              2007-12-13 05:17 85,860 ----a-w C:\Windows\system32\drivers\klick.dat
              2007-11-19 21:03 --------- d-----w C:\Users\Faes BVBA\AppData\Roaming\Hamachi
              2007-11-19 20:13 26,056 ----a-w C:\Windows\system32\drivers\hamachi.sys
              2007-11-19 18:42 --------- d---a-w C:\ProgramData\TEMP
              2007-11-19 15:39 --------- d-----w C:\Program Files\The Sir. Community
              2007-11-18 06:42 1,244,672 ----a-w C:\Windows\System32\mcmde.dll
              2007-11-16 18:53 --------- d-----w C:\Program Files\Silkroad
              2007-11-15 11:32 --------- d-----w C:\Program Files\Norton Security Scan
              2007-11-15 07:57 704,000 ----a-w C:\Windows\System32\PhotoScreensaver.scr
              2007-11-15 07:57 67,584 ----a-w C:\Windows\System32\wlanhlp.dll
              2007-11-15 07:57 542,720 ----a-w C:\Windows\System32\sysmain.dll
              2007-11-15 07:57 502,784 ----a-w C:\Windows\System32\wlansvc.dll
              2007-11-15 07:57 47,104 ----a-w C:\Windows\System32\wlanapi.dll
              2007-11-15 07:57 297,984 ----a-w C:\Windows\System32\wlansec.dll
              2007-11-15 07:57 290,816 ----a-w C:\Windows\System32\wlanmsm.dll
              2007-11-15 07:57 258,232 ----a-w C:\Windows\system32\drivers\acpi.sys
              2007-11-15 07:57 24,064 ----a-w C:\Windows\System32\wtsapi32.dll
              2007-11-15 07:57 2,923,520 ----a-w C:\Windows\explorer.exe
              2007-11-15 07:57 2,027,008 ----a-w C:\Windows\System32\win32k.sys
              2007-11-15 07:55 8,704 ----a-w C:\Windows\System32\hcrstco.dll
              2007-11-15 07:55 8,704 ----a-w C:\Windows\System32\hccoin.dll
              2007-11-15 07:55 73,216 ----a-w C:\Windows\system32\drivers\usbccgp.sys
              2007-11-15 07:55 5,888 ----a-w C:\Windows\system32\drivers\usbd.sys
              2007-11-15 07:55 38,400 ----a-w C:\Windows\system32\drivers\usbehci.sys
              2007-11-15 07:55 224,768 ----a-w C:\Windows\system32\drivers\usbport.sys
              2007-11-15 07:55 192,000 ----a-w C:\Windows\system32\drivers\usbhub.sys
              2007-11-15 07:55 19,456 ----a-w C:\Windows\system32\drivers\usbohci.sys
              2007-11-15 07:55 --------- d-----w C:\Program Files\Windows Mail
              2007-11-14 21:27 --------- d-----w C:\Program Files\GameTribe
              2007-11-14 15:03 --------- d-----w C:\Program Files\Tales of Pirates Online
              2007-11-14 14:16 --------- d-----w C:\Program Files\ONWIND
              2007-11-10 21:53 --------- d-----w C:\ProgramData\Zylom
              2007-11-08 18:40 --------- d-----w C:\Program Files\Activision
              2007-11-03 18:10 --------- d-----w C:\Program Files\SwiftSwitch
              2007-11-03 18:03 --------- d-----w C:\ProgramData\SwiftSwitch
              2007-10-29 18:26 --------- d-----w C:\Program Files\NHN USA
              2007-10-28 18:25 --------- d-----w C:\Program Files\BOSOnline
              2007-10-28 08:16 --------- d-----w C:\Program Files\ZhyperMU
              2007-10-25 15:08 --------- d-----w C:\Program Files\Sunshine Mu 0.08
              2007-10-21 19:43 --------- d-----w C:\Program Files\Phoenix Dynasty Online
              2007-10-10 12:04 8,147,968 ----a-w C:\Windows\System32\wmploc.DLL
              2007-10-10 12:04 7,680 ----a-w C:\Windows\System32\spwmp.dll
              2007-10-10 12:04 4,096 ----a-w C:\Windows\System32\dxmasf.dll
              2007-10-10 12:04 356,864 ----a-w C:\Windows\System32\MediaMetadataHandler.dll
              2007-10-10 12:01 84,480 ----a-w C:\Windows\System32\INETRES.dll
              2007-10-10 12:00 788,992 ----a-w C:\Windows\System32\rpcrt4.dll
              2007-10-10 12:00 737,792 ----a-w C:\Windows\System32\inetcomm.dll
              2007-09-27 11:08 692,224 ----a-w C:\Windows\System32\ijjiSetup.exe
              2007-08-31 18:01 174 --sha-w C:\Program Files\desktop.ini
              2006-09-19 16:45 964 ----a-w C:\Program Files\inst.dat
              2006-09-19 12:46 3,940 ----a-w C:\Program Files\pk.bin
              2006-09-19 12:45 1,760 ----a-w C:\Program Files\web.dat
              .

              ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
              .
              .
              REGEDIT4
              *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

              [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014}]
              C:\Program Files\Video Add-on\isfmdl.dll

              [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
              "ISUSPM Startup"="C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe"
              "ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 13:35]
              "BitTorrent DNA"="C:\Users\Faes BVBA\Program Files\BitTorrent_DNA\dna.exe" [2007-08-05 12:00]
              "SpySweeper"="C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" [2004-09-13 09:22]

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
              "Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2007-04-12 14:00]
              "NvSvc"="RUNDLL32.exe" [2006-11-02 10:45 C:\Windows\System32\rundll32.exe]
              "NvCplDaemon"="RUNDLL32.exe" [2006-11-02 10:45 C:\Windows\System32\rundll32.exe]
              "NvMediaCenter"="RUNDLL32.exe" [2006-11-02 10:45 C:\Windows\System32\rundll32.exe]
              "AVP"="C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" [2007-01-29 22:02]
              "Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2007-01-23 14:44 C:\Windows\KHALMNPR.Exe]
              "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 03:00]
              "Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2007-06-16 00:15]

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
              "RVAXO"="RVAXO.bat"

              C:\Users\Faes BVBA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
              OneNote 2007 Schermopname en Snel starten.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 19:24:54]

              C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
              Adobe Reader Snelle start.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe [2006-10-23 00:48:20]
              Adobe Reader Synchronizer.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe [2006-10-22 23:01:50]
              Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe [2007-03-31 09:40:32]

              [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
              "AppInit_DLLs"=C:\PROGRA~1\KASPER~1\KASPER~1.0\r3hook.dll

              [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
              SecurityProviders credssp.dll

              R0 nvstor32;nvstor32;C:\Windows\system32\DRIVERS\nvstor32.sys [2006-12-22 19:07]
              R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;C:\Windows\system32\DRIVERS\klim6.sys [2007-01-25 18:33]
              R3 nvlddmkm;nvlddmkm;C:\Windows\system32\DRIVERS\nvlddmkm.sys [2006-12-19 12:38]

              [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
              LocalSystemNetworkRestricted REG_MULTI_SZ hidserv UxSms WdiSystemHost Netman trkwks AudioEndpointBuilder WUDFSvc irmon sysmain IPBusEnum dot3svc PcaSvc EMDMgmt TabletInputService wlansvc WPDBusEnum

              [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f825e18f-dc4d-11db-b1ed-806e6f6e6963}]
              \shell\AutoRun\command - E:\INSTALL.EXE

              *Newly Created Service* - CATCHME
              *Newly Created Service* - PROCEXP90
              .
              **************************************************************************

              catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
              Rootkit scan 2007-12-21 17:22:16
              Windows 6.0.6000 NTFS

              scannen van verborgen processen ...

              scannen van verborgen autostart items ...

              scannen van verborgen bestanden ...

              Scan succesvol afgerond
              verborgen bestanden: 0

              **************************************************************************
              .
              Voltooingstijd: 2007-12-21 17:24:49
              .
              2007-12-19 11:23:18 --- E O F ---
              • Citaat

              Comment

              • #8
                Download de bijlage: CFScript.txt

                Sleep CFScript.txt in ComboFix.exe zoals getoond in onderstaand voorbeeld :



                Dit zal ComboFix doen herstarten.
                Start opnieuw op als daarom gevraagd wordt,
                en post de inhoud van de Combofix.txt in je volgende antwoord.

                Post ook een nieuw logje van Hijackthis en vertel ook of er nog problemen zijn.
                Bijgevoegde Bestanden
                • Citaat

                Comment

                • #9
                  het cfscript blijft gwn op me bureaublad staan als ik deze erin sleep
                  dan moet ik eerst op uitvoeren klikken
                  daarna op toestaan ( vista zooi )
                  En dan opent hij naar mij zeggen net hetzelfde als vorig keer
                  want er komt weer 1 to proceed 2 to abort


                  Is dat goed dan ?

                  ( Ik ga nu ff feesje Vieren dus ik kijk morgen verder )
                  Alvast Bedankt voor je hulp en tot morgen
                  • Citaat

                  Comment

                  • #10
                    Proceed = doorgaan abort = stoppen
                    • Citaat

                    Comment

                    • #11
                      Ok ik heb Gedaan wat je heb gezegd + computer herstart hier is combofix logje

                      ComboFix 07-12-21.4 - Faes BVBA 2007-12-22 10:52:54.2 - NTFSx86
                      Microsoft&#174; Windows Vista™ Home Premium 6.0.6000.0.1252.1.1043.18.517 [GMT 1:00]
                      Gestart vanuit: C:\Users\Faes BVBA\Desktop\ComboFix.exe
                      Command switches used :: C:\Users\Faes BVBA\Desktop\cfscript.txt
                      * Nieuw herstelpunt werd aangemaakt
                      .

                      (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
                      .

                      C:\Program Files\Video Add-on
                      C:\Program Files\Video Add-on\icmntr.exe
                      C:\Program Files\Video Add-on\icthis.exe
                      C:\Program Files\Video Add-on\isfmm.exe
                      C:\Program Files\Video Add-on\ot.ico
                      C:\Program Files\Video Add-on\ts.ico
                      C:\Program Files\Video Add-on\uninst.exe

                      .
                      (((((((((((((((((((( Bestanden Gemaakt van 2007-11-22 to 2007-12-22 ))))))))))))))))))))))))))))))
                      .

                      2007-12-21 16:09 . 2007-12-21 16:09 <DIR> d-------- C:\Program Files\Trend Micro
                      2007-12-20 11:47 . 2007-12-20 11:47 <DIR> d-------- C:\Users\Faes BVBA\AppData\Roaming\Webroot
                      2007-12-20 11:47 . 2007-12-20 11:47 <DIR> d-------- C:\Program Files\Webroot
                      2007-12-18 21:29 . 2007-12-18 21:29 <DIR> d-------- C:\Users\All Users\Lavasoft
                      2007-12-18 21:29 . 2007-12-18 21:29 <DIR> d-------- C:\ProgramData\Lavasoft
                      2007-12-18 21:29 . 2007-12-18 21:29 <DIR> d-------- C:\Program Files\Lavasoft
                      2007-12-15 21:51 . 2007-12-15 21:55 <DIR> d-------- C:\Program Files\BitLord
                      2007-12-15 13:41 . 2007-12-15 13:41 <DIR> d-------- C:\Program Files\MaxOn Soft
                      2007-12-13 06:26 . 2007-12-13 06:26 1,327,104 --a------ C:\Windows\System32\quartz.dll
                      2007-12-13 06:25 . 2007-12-13 06:25 223,232 --a------ C:\Windows\System32\WMASF.DLL
                      2007-12-13 06:25 . 2007-12-13 06:25 9,728 --a------ C:\Windows\System32\LAPRXY.DLL
                      2007-12-13 06:25 . 2007-12-13 06:25 2,048 --a------ C:\Windows\System32\asferror.dll
                      2007-12-13 06:22 . 2007-12-13 06:22 3,504,824 --a------ C:\Windows\System32\ntkrnlpa.exe
                      2007-12-13 06:22 . 2007-12-13 06:22 3,470,520 --a------ C:\Windows\System32\ntoskrnl.exe
                      2007-12-13 06:21 . 2007-12-13 06:21 2,048 --a------ C:\Windows\System32\tzres.dll
                      2007-12-02 10:20 . 2007-12-02 10:20 <DIR> d-------- C:\Program Files\Game Cam v1.4
                      2007-11-28 14:02 . 2007-11-28 14:02 <DIR> d-------- C:\Program Files\Sierra On-Line
                      2007-11-28 14:02 . 1998-01-23 12:22 304,128 --a------ C:\Windows\IsUninst.exe
                      2007-11-28 14:02 . 2007-11-28 14:02 170 --a------ C:\Windows\SIERRA.INI

                      .
                      ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
                      .
                      2007-12-22 09:58 --------- d-----w C:\Users\Faes BVBA\AppData\Roaming\BitTorrent DNA
                      2007-12-22 09:53 60,084,000 --sha-w C:\Windows\system32\drivers\fidbox.dat
                      2007-12-22 09:48 --------- d-----w C:\ProgramData\Kaspersky Lab
                      2007-12-21 17:11 805,508 --sha-w C:\Windows\system32\drivers\fidbox.idx
                      2007-12-20 18:06 91,492 ----a-w C:\Windows\system32\drivers\klin.dat
                      2007-12-18 20:27 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
                      2007-12-18 19:07 --------- d--h--w C:\Program Files\InstallShield Installation Information
                      2007-12-17 20:35 22,328 ----a-w C:\Windows\system32\drivers\PnkBstrK.sys
                      2007-12-17 20:33 107,832 ----a-w C:\Windows\System32\PnkBstrB.exe
                      2007-12-16 10:13 --------- d-----w C:\Program Files\Legend Of Ares
                      2007-12-15 21:15 --------- d-----w C:\Program Files\Common Files\Adobe
                      2007-12-13 21:36 --------- d-----w C:\Program Files\Outspark
                      2007-12-13 05:24 84,992 ----a-w C:\Windows\system32\drivers\srvnet.sys
                      2007-12-13 05:24 58,368 ----a-w C:\Windows\system32\drivers\mrxsmb20.sys
                      2007-12-13 05:24 56,320 ----a-w C:\Windows\System32\iesetup.dll
                      2007-12-13 05:24 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
                      2007-12-13 05:24 26,624 ----a-w C:\Windows\System32\ieUnatt.exe
                      2007-12-13 05:24 130,048 ----a-w C:\Windows\system32\drivers\srv2.sys
                      2007-12-13 05:24 101,888 ----a-w C:\Windows\system32\drivers\mrxsmb.sys
                      2007-12-13 05:17 85,860 ----a-w C:\Windows\system32\drivers\klick.dat
                      2007-11-21 09:57 --------- d-----w C:\Users\Faes BVBA\AppData\Roaming\Xfire
                      2007-11-21 09:52 --------- d-----w C:\ProgramData\Xfire
                      2007-11-21 09:52 --------- d-----w C:\Program Files\Xfire
                      2007-11-19 21:03 --------- d-----w C:\Users\Faes BVBA\AppData\Roaming\Hamachi
                      2007-11-19 20:13 26,056 ----a-w C:\Windows\system32\drivers\hamachi.sys
                      2007-11-19 18:42 --------- d---a-w C:\ProgramData\TEMP
                      2007-11-19 15:39 --------- d-----w C:\Program Files\The Sir. Community
                      2007-11-18 06:42 1,244,672 ----a-w C:\Windows\System32\mcmde.dll
                      2007-11-16 18:53 --------- d-----w C:\Program Files\Silkroad
                      2007-11-15 11:32 --------- d-----w C:\Program Files\Norton Security Scan
                      2007-11-15 07:57 704,000 ----a-w C:\Windows\System32\PhotoScreensaver.scr
                      2007-11-15 07:57 67,584 ----a-w C:\Windows\System32\wlanhlp.dll
                      2007-11-15 07:57 542,720 ----a-w C:\Windows\System32\sysmain.dll
                      2007-11-15 07:57 502,784 ----a-w C:\Windows\System32\wlansvc.dll
                      2007-11-15 07:57 47,104 ----a-w C:\Windows\System32\wlanapi.dll
                      2007-11-15 07:57 297,984 ----a-w C:\Windows\System32\wlansec.dll
                      2007-11-15 07:57 290,816 ----a-w C:\Windows\System32\wlanmsm.dll
                      2007-11-15 07:57 258,232 ----a-w C:\Windows\system32\drivers\acpi.sys
                      2007-11-15 07:57 24,064 ----a-w C:\Windows\System32\wtsapi32.dll
                      2007-11-15 07:57 2,923,520 ----a-w C:\Windows\explorer.exe
                      2007-11-15 07:57 2,027,008 ----a-w C:\Windows\System32\win32k.sys
                      2007-11-15 07:55 8,704 ----a-w C:\Windows\System32\hcrstco.dll
                      2007-11-15 07:55 8,704 ----a-w C:\Windows\System32\hccoin.dll
                      2007-11-15 07:55 73,216 ----a-w C:\Windows\system32\drivers\usbccgp.sys
                      2007-11-15 07:55 5,888 ----a-w C:\Windows\system32\drivers\usbd.sys
                      2007-11-15 07:55 38,400 ----a-w C:\Windows\system32\drivers\usbehci.sys
                      2007-11-15 07:55 224,768 ----a-w C:\Windows\system32\drivers\usbport.sys
                      2007-11-15 07:55 192,000 ----a-w C:\Windows\system32\drivers\usbhub.sys
                      2007-11-15 07:55 19,456 ----a-w C:\Windows\system32\drivers\usbohci.sys
                      2007-11-15 07:55 --------- d-----w C:\Program Files\Windows Mail
                      2007-11-14 21:27 --------- d-----w C:\Program Files\GameTribe
                      2007-11-14 15:03 --------- d-----w C:\Program Files\Tales of Pirates Online
                      2007-11-14 14:16 --------- d-----w C:\Program Files\ONWIND
                      2007-11-10 21:53 --------- d-----w C:\ProgramData\Zylom
                      2007-11-08 18:40 --------- d-----w C:\Program Files\Activision
                      2007-11-03 18:10 --------- d-----w C:\Program Files\SwiftSwitch
                      2007-11-03 18:03 --------- d-----w C:\ProgramData\SwiftSwitch
                      2007-10-29 18:26 --------- d-----w C:\Program Files\NHN USA
                      2007-10-28 18:25 --------- d-----w C:\Program Files\BOSOnline
                      2007-10-28 08:16 --------- d-----w C:\Program Files\ZhyperMU
                      2007-10-25 15:08 --------- d-----w C:\Program Files\Sunshine Mu 0.08
                      2007-10-10 12:04 8,147,968 ----a-w C:\Windows\System32\wmploc.DLL
                      2007-10-10 12:04 7,680 ----a-w C:\Windows\System32\spwmp.dll
                      2007-10-10 12:04 4,096 ----a-w C:\Windows\System32\dxmasf.dll
                      2007-10-10 12:04 356,864 ----a-w C:\Windows\System32\MediaMetadataHandler.dll
                      2007-10-10 12:01 84,480 ----a-w C:\Windows\System32\INETRES.dll
                      2007-10-10 12:00 788,992 ----a-w C:\Windows\System32\rpcrt4.dll
                      2007-10-10 12:00 737,792 ----a-w C:\Windows\System32\inetcomm.dll
                      2007-09-27 11:08 692,224 ----a-w C:\Windows\System32\ijjiSetup.exe
                      2007-08-31 18:01 174 --sha-w C:\Program Files\desktop.ini
                      2006-09-19 16:45 964 ----a-w C:\Program Files\inst.dat
                      2006-09-19 12:46 3,940 ----a-w C:\Program Files\pk.bin
                      2006-09-19 12:45 1,760 ----a-w C:\Program Files\web.dat
                      .

                      ((((((((((((((((((((((((((((( [email protected]_17.23.26,84 )))))))))))))))))))))))))))))))))))))))))
                      .
                      - 2007-12-21 15:26:27 67,584 --s-a-w C:\Windows\bootstat.dat
                      + 2007-12-22 09:47:33 67,584 --s-a-w C:\Windows\bootstat.dat
                      - 2007-12-21 15:41:38 262,144 ----a-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\usrclass.dat
                      + 2007-12-22 09:50:29 262,144 ----a-w C:\Windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\usrclass.dat
                      - 2007-12-21 15:28:13 262,144 --sha-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
                      + 2007-12-22 09:49:52 262,144 --sha-w C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
                      - 2007-12-21 15:34:24 262,144 ----a-w C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\usrclass.dat
                      + 2007-12-22 09:51:07 262,144 ----a-w C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\usrclass.dat
                      - 2007-12-21 15:28:08 262,144 --sha-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
                      + 2007-12-22 09:49:46 262,144 --sha-w C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
                      + 2007-12-22 09:49:46 262,144 ---ha-w C:\Windows\ServiceProfiles\NetworkService\ntuser.dat.LOG1
                      - 2007-12-21 16:11:16 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.d at
                      + 2007-12-22 09:49:56 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.d at
                      - 2007-12-21 16:11:16 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
                      + 2007-12-22 09:49:56 32,768 --sha-w C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
                      - 2007-12-21 16:11:16 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
                      + 2007-12-22 09:49:56 16,384 --sha-w C:\Windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
                      - 2007-12-21 16:13:54 262,144 ----a-w C:\Windows\System32\config\systemprofile\ntuser.dat
                      + 2007-12-22 09:52:44 262,144 ----a-w C:\Windows\System32\config\systemprofile\ntuser.dat
                      - 2007-12-21 15:28:34 14,940 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2268883484-1008820423-1400515354-1000_UserData.bin
                      + 2007-12-22 09:49:52 14,940 ----a-w C:\Windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2268883484-1008820423-1400515354-1000_UserData.bin
                      - 2007-12-21 15:28:34 52,960 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
                      + 2007-12-22 09:49:52 53,046 ----a-w C:\Windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
                      - 2007-12-21 15:28:33 37,190 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
                      + 2007-12-22 09:49:51 37,254 ----a-w C:\Windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
                      .
                      ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
                      .
                      .
                      REGEDIT4
                      *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

                      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                      "ISUSPM Startup"="C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe"
                      "ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 13:35]
                      "BitTorrent DNA"="C:\Users\Faes BVBA\Program Files\BitTorrent_DNA\dna.exe" [2007-08-05 12:00]
                      "SpySweeper"="C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" [2004-09-13 09:22]

                      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
                      "Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2007-04-12 14:00]
                      "NvSvc"="RUNDLL32.exe" [2006-11-02 10:45 C:\Windows\System32\rundll32.exe]
                      "NvCplDaemon"="RUNDLL32.exe" [2006-11-02 10:45 C:\Windows\System32\rundll32.exe]
                      "NvMediaCenter"="RUNDLL32.exe" [2006-11-02 10:45 C:\Windows\System32\rundll32.exe]
                      "AVP"="C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" [2007-01-29 22:02]
                      "Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2007-01-23 14:44 C:\Windows\KHALMNPR.Exe]
                      "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 03:00]
                      "Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2007-06-16 00:15]

                      C:\Users\Faes BVBA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
                      OneNote 2007 Schermopname en Snel starten.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 19:24:54]

                      C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
                      Adobe Reader Snelle start.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe [2006-10-23 00:48:20]
                      Adobe Reader Synchronizer.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe [2006-10-22 23:01:50]
                      Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe [2007-03-31 09:40:32]

                      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
                      "AppInit_DLLs"=C:\PROGRA~1\KASPER~1\KASPER~1.0\r3hook.dll

                      [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
                      SecurityProviders credssp.dll

                      R0 nvstor32;nvstor32;C:\Windows\system32\DRIVERS\nvstor32.sys [2006-12-22 19:07]
                      R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;C:\Windows\system32\DRIVERS\klim6.sys [2007-01-25 18:33]
                      R3 nvlddmkm;nvlddmkm;C:\Windows\system32\DRIVERS\nvlddmkm.sys [2006-12-19 12:38]

                      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
                      LocalSystemNetworkRestricted REG_MULTI_SZ hidserv UxSms WdiSystemHost Netman trkwks AudioEndpointBuilder WUDFSvc irmon sysmain IPBusEnum dot3svc PcaSvc EMDMgmt TabletInputService wlansvc WPDBusEnum

                      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f825e18f-dc4d-11db-b1ed-806e6f6e6963}]
                      \shell\AutoRun\command - E:\INSTALL.EXE

                      .
                      **************************************************************************

                      catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                      Rootkit scan 2007-12-22 11:00:23
                      Windows 6.0.6000 NTFS

                      scannen van verborgen processen ...

                      scannen van verborgen autostart items ...

                      scannen van verborgen bestanden ...

                      Scan succesvol afgerond
                      verborgen bestanden: 0

                      **************************************************************************
                      .
                      Voltooingstijd: 2007-12-22 11:02:07
                      C:\ComboFix2.txt ... 2007-12-21 17:24
                      .
                      2007-12-19 11:23:18 --- E O F ---


                      Hijack Logje :

                      Logfile of Trend Micro HijackThis v2.0.2
                      Scan saved at 16:10:09, on 21/12/2007
                      Platform: Windows Vista (WinNT 6.00.1904)
                      MSIE: Internet Explorer v7.00 (7.00.6000.16575)
                      Boot mode: Normal

                      Running processes:
                      C:\Windows\system32\taskeng.exe
                      C:\Windows\system32\Dwm.exe
                      C:\Windows\Explorer.EXE
                      C:\Program Files\Windows Defender\MSASCui.exe
                      C:\Windows\ehome\ehtray.exe
                      C:\Users\Faes BVBA\Program Files\BitTorrent_DNA\dna.exe
                      C:\Program Files\Video Add-on\icmntr.exe
                      C:\Windows\system32\wbem\unsecapp.exe
                      C:\Windows\System32\rundll32.exe
                      C:\Windows\ehome\ehmsas.exe
                      C:\Program Files\Video Add-on\icthis.exe
                      C:\Program Files\Internet Explorer\IEUser.exe
                      C:\Program Files\Internet Explorer\iexplore.exe
                      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
                      C:\Windows\system32\SearchFilterHost.exe

                      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                      O1 - Hosts: ::1 localhost
                      O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                      O2 - BHO: GetRight IE Download Helper - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll
                      O2 - BHO: (no name) - {69B98C68-D2B8-4A4E-9CB7-E85B6F3A7014} - C:\Program Files\Video Add-on\isfmdl.dll (file missing)
                      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
                      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                      O4 - HKLM\..\Run: [Windows Defender] &#37;ProgramFiles%\Windows Defender\MSASCui.exe -hide
                      O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
                      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
                      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
                      O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
                      O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
                      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
                      O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
                      O4 - HKCU\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
                      O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
                      O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Users\Faes BVBA\Program Files\BitTorrent_DNA\dna.exe"
                      O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
                      O4 - HKLM\..\Policies\Explorer\Run: [some] C:\Program Files\Video Add-on\icthis.exe
                      O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
                      O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
                      O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
                      O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
                      O4 - Global Startup: Adobe Reader Snelle start.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
                      O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
                      O4 - Global Startup: Logitech SetPoint.lnk = ?
                      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
                      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
                      O9 - Extra button: (no name) - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
                      O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
                      O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
                      O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.securesoftwarefeed.com/redirect.php (file missing)
                      O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.securesoftwarefeed.com/redirect.php (file missing)
                      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
                      O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Users\Faes BVBA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
                      O13 - Gopher Prefix:
                      O15 - Trusted Zone: *.kbc.be
                      O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
                      O16 - DPF: {2DA3C4AB-E6B6-47A6-B0F3-1BD81524B51B} (ActiveWorldsDownload Control) - http://www.activeworlds.com/products/ActiveWorldsDownload.cab
                      O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/NL-BE/a-UNO1/GAME_UNO1.cab
                      O16 - DPF: {5F5F9FB8-878E-4455-95E0-F64B2314288A} (ijjiPlugin2 Class) - http://gamedownload.ijjimax.com/gamedownload/dist/hgstart/HGPlugin11USA.cab
                      O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
                      O16 - DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} (GameLauncher Control) - http://www.acclaim.com/cabs/acclaim_v8.cab
                      O16 - DPF: {7B41B7AC-3496-4C13-A70F-DE6B60A6A8A8} (MGAME manager Class) - http://legendofares.netgame.com/download/mgusamanagerv1001.cab
                      O16 - DPF: {7C5D062A-7A1E-4A46-A02B-A928084CBD66} (MLauncherNew Class) - http://legendofares.netgame.com/download/MusaLauncherNew.cab
                      O16 - DPF: {AA07EBD2-EBDD-4BD6-9F8F-114BD513492C} (NeffyLauncherCtl Class) - http://dist.globalgamecdn.com/dist/neffy/NeffyLauncher.cab
                      O16 - DPF: {AB4ADC0F-2B4B-4B08-8B5C-CA4D6188A180} (P3Xfer Loader Class) - http://package.hyosungcdn.com/download/p3xset.cab
                      O16 - DPF: {AE2B937E-EA7D-4A8D-888C-B68D7F72A3C4} (IPSUploader4 Control) - http://as.photoprintit.de/ips-opdata/74914091/activex/IPSUploader4.cab
                      O16 - DPF: {BD08A9D5-0E5C-4F42-99A3-C0CB5E860557} (CSolidBrowserObj Object) - http://www.playwhat.com/solidPlugin/solidstateion.cab
                      O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game03.zylom.com/activex/zylomgamesplayer.cab
                      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                      O16 - DPF: {CEE326E8-7571-4086-B347-3C0ACA9A9DE8} (PcubeSet Class) - http://config.hyosungcdn.com/download/hsloadset.cab
                      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                      O16 - DPF: {D88C7675-7CEE-4C9A-BDD4-7A43EED7794D} (Logout Class) - http://www.gamengame.com/KALogoutComponent.cab
                      O16 - DPF: {DD583921-A9E9-4FBF-9266-8DC2AB5EA0AF} (HGPlugin10USA Class) - http://gamedownload.ijjimax.com/gamedownload/dist/hgstart/HGPlugin10USA.cab
                      O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\r3hook.dll
                      O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
                      O23 - Service: Kaspersky Anti Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
                      O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
                      O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

                      --
                      End of file - 8481 bytes


                      ik start pc net op dus niet zeker of er nog problemen zijn , dit weet'(k well binne 5 minuten fzo
                      • Citaat

                      Comment

                      • #12
                        Wel ... Het lijkt me of het weg is de laaste 10+ minuten is er NIETS meer p gekomen!

                        Smeenk ... Je bent een Genie

                        Echt Bedankt Voor alles ... echt geweldig dat je iedereen zo help

                        Nog 1 vraagje : Welk mag ik van die gedownloade dingen er nu afgooien ?
                        Last edited by Rexke; 22-12-07, 11:08.
                        • Citaat

                        Comment

                        • #13
                          Doe dit maar eens:

                          Download ATF cleaner (mirror)(gemaakt door Atribune)

                          Belangrijk: Sluit al je browservensters(IE en/of Firefox en/of Opera) om de tool goed te kunnen laten werken.

                          Dubbelklik op ATF cleaner om het programma te starten.
                          Op het tabblad "Main", plaats je een vinkje bij Select All.
                          Klik op de knop Empty Selected.

                          Het volgende doen als je ook FireFox als browser hebt:
                          Klik op tabblad "Firefox", plaats een vinkje bij Select All.
                          Wil je de door Firefox opgeslagen wachtwoorden behouden, dan klik je in het venster dat verschijnt op "No".
                          (dit haalt het vinkje weer weg bij "Firefox saved passwords")
                          Klik op de knop Empty Selected.

                          Het volgende doen als je ook Opera als browser hebt:
                          Klik op tabblad "Opera", plaats een vinkje bij Select All.
                          Wil je de door Opera opgeslagen wachtwoorden behouden, dan klik je in het venster dat verschijnt op "No".
                          Klik op de knop Empty Selected.
                          Ga naar het tabblad "Main" en klik op de knop Exit om het programma af te sluiten.

                          Ga naar Start - Uitvoeren en geef hier het volgende in:
                          Combofix /U
                          Druk daarna op OK.
                          Let op: Er moet een spatie tussen Combofix en /U zitten.

                          Dit zal Combofix deïnstalleren.

                          Schakel Systeemherstel uit. Herstart de computer. Schakel Systeemherstel weer in.
                          Kijk hier hoe je je systeemherstel moet uitschakelen.
                          Hiermee verwijder je eventuele restanten van de infecties uit je systeemherstel.

                          Alle overige gedownloade programma's mag je ook verwijderen
                          • Citaat

                          Comment

                          • #14
                            alles lukt wel behalve dat systeemherstel er is allaan voor xp en ME ....
                            • Citaat

                            Comment

                            • #15
                              1. U kunt Systeem als volgt openen: klik op de knop Start, klik op Configuratiescherm, klik op Systeem en onderhoud en klik vervolgens op Systeem.

                              2. Klik in het linkerdeelvenster op Systeembeveiliging. Typ het wachtwoord of een bevestiging als u wordt gevraagd om het Administrator-wachtwoord of een bevestiging.

                              3. Schakel het selectievakje naast een schijf in en klik vervolgens op OK als u Systeembeveiliging voor de desbetreffende schijf wilt inschakelen
                              – of –
                              Schakel het selectievakje naast een schijf uit en klik vervolgens op OK als u Systeembeveiliging voor de desbetreffende vaste schijf wilt uitschakelen.

                              4. Herstart vervolgens de computer en zet systeemherstel weer aan.
                              • Citaat

                              Comment

                              Vorige 1 2 template Volgende
                              Sorry, you are not authorized to view this page
                              Working...
                              X