Mededeling

Collapse
No announcement yet.

Notebook heel erg traag

Collapse
X
  •  
  • Filter
  • Tijd
  • Show
Clear All
new posts

  • Notebook heel erg traag

    Twee weken geleden nog een Ukash op de notebook van mijn ene dochter en nu een super trage notebook van mijn andere dochter. Tja...... Ik weet niet of het spyware is of iets anders. Virusscanner gedraaid waaronder MBAM. Een dds en een GMER gemaakt (volgens de aanwijzingen op deze site) en hopelijk kan iemand me helpen. Alleen die dds draaien duurde al zeker een kwartier (terwijl er staat dat het niet langer dan 3 minuten mag duren). Voor een programma opstarten of het internet opgaan duurt een eeuwigheid. Hieronder de logfiles:

    DDS (Ver_2012-11-05.02) - NTFS_AMD64
    Internet Explorer: 10.0.9200.16635 BrowserJavaVersion: 10.25.2
    Run by Notebook Tony at 22:19:54 on 2013-07-23
    Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.1979.434 [GMT 2:00]
    .
    AV: McAfee Antivirus en antispyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    SP: Spybot - Search and Destroy *Enabled/Updated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
    SP: McAfee Antivirus en antispyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
    FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
    .
    ============== Running Processes ===============
    .
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\svchost.exe -k DcomLaunch
    C:\Windows\system32\svchost.exe -k RPCSS
    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
    C:\Windows\system32\svchost.exe -k LocalService
    C:\Windows\system32\svchost.exe -k netsvcs
    C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b87ff64c8b56b7db\STacSV64.e xe
    C:\Windows\system32\svchost.exe -k NetworkService
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\taskhost.exe
    C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b87ff64c8b56b7db\AESTSr64.e xe
    C:\Windows\system32\Dwm.exe
    C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    C:\Windows\Explorer.EXE
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Windows\SysWOW64\svchost.exe -k netsvcs
    C:\Windows\System32\igfxtray.exe
    C:\Windows\System32\hkcmd.exe
    C:\Windows\System32\igfxpers.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\IDT\WDM\sttray64.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
    C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
    C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
    C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe
    C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
    C:\Program Files\McAfee.com\Agent\mcagent.exe
    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
    C:\Program Files (x86)\iTunes\iTunesHelper.exe
    C:\Windows\system32\igfxsrvc.exe
    C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
    C:\Windows\system32\mfevtps.exe
    C:\Windows\system32\spool\DRIVERS\x64\3\HP1006MC.EXE
    C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
    C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
    C:\Windows\SysWOW64\IoctlSvc.exe
    C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
    C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
    C:\Windows\system32\svchost.exe -k imgsvc
    C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
    C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
    C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
    C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
    C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
    C:\Windows\system32\SearchIndexer.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
    C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe
    C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
    C:\Windows\system32\wbem\wmiprvse.exe
    C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
    C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe
    C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
    C:\Windows\System32\svchost.exe -k LocalServicePeerNet
    C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
    C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
    C:\Program Files\Windows Media Player\wmpnetwk.exe
    C:\Windows\system32\wuauclt.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
    C:\Windows\system32\Macromed\Flash\FlashUtil64_11_7_700_224_ActiveX.exe
    C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
    C:\Windows\system32\SearchProtocolHost.exe
    C:\Windows\system32\SearchFilterHost.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
    C:\Windows\System32\cscript.exe
    .
    ============== Pseudo HJT Report ===============
    .
    uStart Page = hxxp://google.nl/
    uProxyServer = 10.31.4.14:8080
    mWinlogon: Userinit = userinit.exe
    BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - <orphaned>
    BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
    BHO: scriptproxy: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20110112132633.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
    BHO: {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - <orphaned>
    uRun: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
    uRun: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
    uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    mRun: [QlbCtrl.exe] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
    mRun: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED
    mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
    mRun: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
    mRun: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
    mRun: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
    mRun: [NBKeyScan] "C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
    mRun: [HPUsageTracking] C:\Program Files (x86)\HP\HP UT\bin\hppusg.exe "C:\Program Files (x86)\HP\HP UT\"
    mRun: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
    mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
    mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
    mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
    mRun: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
    mPolicies-Explorer: NoActiveDesktop = dword:1
    mPolicies-Explorer: NoActiveDesktopChanges = dword:1
    mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
    mPolicies-System: ConsentPromptBehaviorUser = dword:3
    mPolicies-System: EnableUIADesktopToggle = dword:0
    mPolicies-System: SoftwareSASGeneration = dword:1
    IE: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr/200
    IE: E&xporteren naar Microsoft Excel - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
    IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - <orphaned>
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
    DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
    TCP: NameServer = 192.168.1.254 195.241.77.55 195.241.77.58
    TCP: Interfaces\{13ECD552-9E77-4A10-8A7E-68B8673F8C39} : DHCPNameServer = 192.168.1.254 195.241.77.55 195.241.77.58
    TCP: Interfaces\{E19E4AA8-F5D3-4FCA-8AAB-013FCBF1D1B9} : DHCPNameServer = 192.168.1.254 195.241.77.55 195.241.77.58
    TCP: Interfaces\{E19E4AA8-F5D3-4FCA-8AAB-013FCBF1D1B9}\A5978554C4 : DHCPNameServer = 192.168.1.254 195.241.77.55 195.241.77.58
    TCP: Interfaces\{E19E4AA8-F5D3-4FCA-8AAB-013FCBF1D1B9}\A597F507279667164756F5738443D4A464 : DHCPNameServer = 192.168.1.254 195.241.77.55 195.241.77.58
    TCP: Interfaces\{E19E4AA8-F5D3-4FCA-8AAB-013FCBF1D1B9}\D454451443 : DHCPNameServer = 192.168.1.254 195.241.77.55 195.241.77.58
    Notify: SDWinLogon - SDWinLogon.dll
    SSODL: WebCheck - <orphaned>
    SEH: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll
    mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files (x86)\Common Files\LightScribe\LSRunOnce.exe"
    x64-BHO: scriptproxy: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20110112132633.dll
    x64-BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    x64-Run: [IgfxTray] C:\Windows\System32\igfxtray.exe
    x64-Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe
    x64-Run: [Persistence] C:\Windows\System32\igfxpers.exe
    x64-Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe
    x64-Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe
    x64-Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    x64-DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
    x64-DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
    x64-DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
    x64-Notify: igfxcui - igfxdev.dll
    x64-SSODL: WebCheck - <orphaned>
    .
    ============= SERVICES / DRIVERS ===============
    .
    R3 cfwids;McAfee Inc. cfwids;C:\Windows\System32\drivers\cfwids.sys [2011-1-12 62800]
    S3 e.dentifier2;SmartCard Reader ABN AMRO e.dentifier2;C:\Windows\System32\drivers\aabed2.sys [2008-3-20 28672]
    .
    =============== Created Last 30 ================
    .
    2013-07-23 17:40:28 -------- d-----w- C:\ProgramData\Spybot - Search & Destroy
    2013-07-23 17:39:49 17272 ----a-w- C:\Windows\System32\sdnclean64.exe
    2013-07-23 17:39:43 -------- d-----w- C:\Program Files (x86)\Spybot - Search & Destroy 2
    2013-07-11 21:20:04 571904 ----a-w- C:\Program Files\Windows Defender\MpClient.dll
    2013-07-11 21:20:04 1011712 ----a-w- C:\Program Files\Windows Defender\MpSvc.dll
    2013-07-11 21:20:03 9216 ----a-w- C:\Program Files (x86)\Windows Defender\MpAsDesc.dll
    2013-07-11 21:20:03 54784 ----a-w- C:\Program Files (x86)\Windows Defender\MpOAV.dll
    2013-07-11 21:20:03 4608 ----a-w- C:\Program Files (x86)\Windows Defender\MsMpLics.dll
    2013-07-11 21:20:03 392704 ----a-w- C:\Program Files (x86)\Windows Defender\MpClient.dll
    2013-07-11 21:20:03 314880 ----a-w- C:\Program Files\Windows Defender\MpCommu.dll
    2013-07-11 21:20:01 624128 ----a-w- C:\Windows\System32\qedit.dll
    2013-07-11 21:20:01 509440 ----a-w- C:\Windows\SysWow64\qedit.dll
    2013-07-11 21:20:00 1887744 ----a-w- C:\Windows\System32\WMVDECOD.DLL
    2013-07-11 21:19:59 1620480 ----a-w- C:\Windows\SysWow64\WMVDECOD.DLL
    2013-07-11 21:17:26 3153920 ----a-w- C:\Windows\System32\win32k.sys
    2013-07-11 21:17:14 1367040 ----a-w- C:\Program Files\Common Files\Microsoft Shared\ink\journal.dll
    2013-07-11 21:17:13 936448 ----a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\ink\journal.dll
    2013-07-11 21:15:58 1643520 ----a-w- C:\Windows\System32\DWrite.dll
    2013-07-11 21:15:58 1247744 ----a-w- C:\Windows\SysWow64\DWrite.dll
    2013-07-11 20:54:34 -------- d-----w- C:\Program Files (x86)\Total Video Converter
    2013-07-08 22:00:46 -------- d-----w- C:\Users\Notebook Tony\www.apowersoft.com
    2013-06-29 20:36:55 -------- d-----w- C:\Users\Notebook Tony\AppData\Local\Google
    2013-06-29 19:04:54 1045072 ----a-w- C:\Program Files\uTorrent.exe
    2013-06-29 19:03:18 -------- d-----w- C:\Users\Notebook Tony\AppData\Roaming\uTorrent
    2013-06-29 19:00:53 -------- d-----w- C:\Program Files\hjsplit
    2013-06-29 18:44:47 -------- d-----w- C:\Program Files (x86)\iWisoft Free Video Converter
    2013-06-29 18:37:23 -------- d-----w- C:\Program Files (x86)\iWisoft Free Video Downloader
    2013-06-29 18:06:36 -------- d-----w- C:\Users\Notebook Tony\AppData\Local\Apple Computer
    2013-06-29 18:05:45 33240 ----a-w- C:\Windows\System32\drivers\GEARAspiWDM.sys
    2013-06-29 18:04:26 -------- d-----w- C:\Program Files\iPod
    2013-06-29 18:04:25 -------- d-----w- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
    2013-06-29 18:04:25 -------- d-----w- C:\Program Files\iTunes
    2013-06-29 18:04:25 -------- d-----w- C:\Program Files (x86)\iTunes
    2013-06-29 18:01:36 -------- d-----w- C:\Users\Notebook Tony\AppData\Local\Apple
    2013-06-29 18:00:23 -------- d-----w- C:\Program Files\Bonjour
    2013-06-29 18:00:23 -------- d-----w- C:\Program Files (x86)\Bonjour
    2013-06-29 17:57:07 758018 ----a-w- C:\Windows\SysWow64\xvidcore.dll
    2013-06-29 17:57:07 696832 ----a-w- C:\Windows\System32\xvidcore.dll
    2013-06-29 17:57:07 255488 ----a-w- C:\Windows\System32\xvidvfw.dll
    2013-06-29 17:57:07 180224 ----a-w- C:\Windows\SysWow64\xvidvfw.dll
    2013-06-29 17:57:07 173568 ----a-w- C:\Windows\System32\xvid.ax
    2013-06-29 17:57:07 139264 ----a-w- C:\Windows\SysWow64\xvid.ax
    2013-06-29 17:57:06 -------- d-----w- C:\Program Files (x86)\Xvid
    2013-06-29 17:56:05 -------- d-----w- C:\Program Files (x86)\AviSynth 2.5
    2013-06-29 17:55:55 -------- d-----w- C:\Program Files (x86)\AVI ReComp
    2013-06-29 17:53:29 -------- d-----w- C:\Program Files\VirtualDub-1.9.11
    2013-06-29 17:44:48 -------- d-----w- C:\Users\Notebook Tony\AppData\Roaming\AVI ReComp
    2013-06-29 17:43:41 -------- d-----w- C:\Program Files (x86)\Abyssmedia
    2013-06-28 19:59:11 -------- d-----w- C:\Users\Notebook Tony\AppData\Local\CyberLink
    2013-06-27 21:57:53 96168 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
    2013-06-27 21:30:57 -------- d-----w- C:\Users\Notebook Tony\AppData\Local\Programs
    2013-06-27 21:23:28 -------- d-----w- C:\Program Files\CCleaner
    2013-06-27 18:47:30 -------- d-----w- C:\Users\Notebook Tony\AppData\Local\fontconfig
    2013-06-27 18:40:47 -------- d-----w- C:\Users\Notebook Tony\AppData\Local\Aegisub
    2013-06-27 18:40:46 -------- d-----w- C:\Users\Notebook Tony\AppData\Roaming\Aegisub
    2013-06-27 18:40:10 -------- d-----w- C:\Program Files (x86)\Aegisub
    2013-06-27 18:37:11 -------- d-----w- C:\Program Files (x86)\VisualSubSync
    .
    ==================== Find3M ====================
    .
    2013-06-27 21:57:41 867240 ----a-w- C:\Windows\SysWow64\npdeployJava1.dll
    2013-06-27 21:57:41 789416 ----a-w- C:\Windows\SysWow64\deployJava1.dll
    2013-06-18 14:31:37 71048 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
    2013-06-18 14:31:37 692104 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
    2013-06-11 23:43:37 1767936 ----a-w- C:\Windows\SysWow64\wininet.dll
    2013-06-11 23:43:00 2877440 ----a-w- C:\Windows\SysWow64\jscript9.dll
    2013-06-11 23:42:58 61440 ----a-w- C:\Windows\SysWow64\iesetup.dll
    2013-06-11 23:42:58 109056 ----a-w- C:\Windows\SysWow64\iesysprep.dll
    2013-06-11 23:26:20 2241024 ----a-w- C:\Windows\System32\wininet.dll
    2013-06-11 23:25:16 3958784 ----a-w- C:\Windows\System32\jscript9.dll
    2013-06-11 23:25:13 67072 ----a-w- C:\Windows\System32\iesetup.dll
    2013-06-11 23:25:13 136704 ----a-w- C:\Windows\System32\iesysprep.dll
    2013-06-11 22:51:45 71680 ----a-w- C:\Windows\SysWow64\RegisterIEPKEYs.exe
    2013-06-11 22:50:58 89600 ----a-w- C:\Windows\System32\RegisterIEPKEYs.exe
    2013-06-07 03:22:18 2706432 ----a-w- C:\Windows\System32\mshtml.tlb
    2013-06-07 02:37:52 2706432 ----a-w- C:\Windows\SysWow64\mshtml.tlb
    2013-05-13 05:51:01 184320 ----a-w- C:\Windows\System32\cryptsvc.dll
    2013-05-13 05:51:00 1464320 ----a-w- C:\Windows\System32\crypt32.dll
    2013-05-13 05:51:00 139776 ----a-w- C:\Windows\System32\cryptnet.dll
    2013-05-13 05:50:40 52224 ----a-w- C:\Windows\System32\certenc.dll
    2013-05-13 04:45:55 140288 ----a-w- C:\Windows\SysWow64\cryptsvc.dll
    2013-05-13 04:45:55 1160192 ----a-w- C:\Windows\SysWow64\crypt32.dll
    2013-05-13 04:45:55 103936 ----a-w- C:\Windows\SysWow64\cryptnet.dll
    2013-05-13 03:43:55 1192448 ----a-w- C:\Windows\System32\certutil.exe
    2013-05-13 03:08:10 903168 ----a-w- C:\Windows\SysWow64\certutil.exe
    2013-05-13 03:08:06 43008 ----a-w- C:\Windows\SysWow64\certenc.dll
    2013-05-10 05:49:27 30720 ----a-w- C:\Windows\System32\cryptdlg.dll
    2013-05-10 03:20:54 24576 ----a-w- C:\Windows\SysWow64\cryptdlg.dll
    2013-05-08 06:39:01 1910632 ----a-w- C:\Windows\System32\drivers\tcpip.sys
    2013-04-26 05:51:36 751104 ----a-w- C:\Windows\System32\win32spl.dll
    2013-04-26 04:55:21 492544 ----a-w- C:\Windows\SysWow64\win32spl.dll
    2013-04-25 23:30:32 1505280 ----a-w- C:\Windows\SysWow64\d3d11.dll
    .
    ============= FINISH: 22:30:46,65 ===============


    .
    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT
    .
    DDS (Ver_2012-11-05.02)
    .
    Microsoft Windows 7 Home Premium
    Boot Device: \Device\HarddiskVolume1
    Install Date: 14-5-2010 10:09:11
    System Uptime: 23-7-2013 21:13:32 (1 hours ago)
    .
    Motherboard: Hewlett-Packard | | 3069
    Processor: Intel(R) Celeron(R) CPU 900 @ 2.20GHz | CPU | 2194/800mhz
    .
    ==== Disk Partitions =========================
    .
    C: is FIXED (NTFS) - 220 GiB total, 122,753 GiB free.
    D: is FIXED (NTFS) - 13 GiB total, 2,119 GiB free.
    E: is CDROM ()
    .
    ==== Disabled Device Manager Items =============
    .
    ==== System Restore Points ===================
    .
    .
    ==== Installed Programs ======================
    .
    Update for Microsoft Office 2007 (KB2508958)
    Acrobat.com
    ActiveCheck component for HP Active Support Library
    Adobe AIR
    Adobe Flash Player 11 ActiveX
    Adobe Reader 9.5.5 MUI
    Adobe Shockwave Player
    Aegisub 3.0.2
    Apple Application Support
    Apple Mobile Device Support
    Apple Software Update
    µTorrent
    AVI ReComp 1.5.5
    AviSynth 2.5
    Basissoftware voor HP Deskjet 1050 J410 series
    Bonjour
    CCleaner
    Compatibiliteitspakket voor het 2007 Microsoft Office system
    CyberLink YouCam
    Firebird SQL Server - MAGIX Edition
    HP Customer Experience Enhancements
    HP Deskjet 1050 J410 series Haelp
    HP Games
    HP LaserJet P1000 series
    HP Quick Launch Buttons
    HP Setup
    HP Support Assistant
    HP Update
    HP User Guides 0148
    HP Wireless Assistant
    HPAsset component for HP Active Support Library
    hppMSRedist
    hppusgP1000
    HPSSupply
    IDT Audio
    Intel(R) Graphics Media Accelerator Driver
    iTunes
    iWisoft Free Video Converter 1.2
    iWisoft Free Video Downloader 2.1
    Java 7 Update 25
    Java Auto Updater
    Java(TM) 6 Update 15 (64-bit)
    Java(TM) SE Development Kit 6 Update 15 (64-bit)
    Junk Mail filter update
    LabelPrint
    LightScribe System Software
    Magic Desktop
    Malwarebytes Anti-Malware versie 1.75.0.1300
    MarketResearch
    McAfee AntiVirus Plus
    Microsoft .NET Framework 4 Client Profile
    Microsoft .NET Framework 4 Client Profile NLD Language Pack
    Microsoft Application Error Reporting
    Microsoft Choice Guard
    Microsoft Office 2007 Service Pack 3 (SP3)
    Microsoft Office Access MUI (Dutch) 2007
    Microsoft Office Excel MUI (Dutch) 2007
    Microsoft Office File Validation Add-In
    Microsoft Office InfoPath MUI (Dutch) 2007
    Microsoft Office Office 64-bit Components 2007
    Microsoft Office Outlook MUI (Dutch) 2007
    Microsoft Office PowerPoint MUI (Dutch) 2007
    Microsoft Office PowerPoint Viewer 2007 (Dutch)
    Microsoft Office Professional Plus 2007
    Microsoft Office Proof (Dutch) 2007
    Microsoft Office Proof (English) 2007
    Microsoft Office Proof (French) 2007
    Microsoft Office Proof (German) 2007
    Microsoft Office Proofing (Dutch) 2007
    Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
    Microsoft Office Publisher MUI (Dutch) 2007
    Microsoft Office Shared 64-bit MUI (Dutch) 2007
    Microsoft Office Shared MUI (Dutch) 2007
    Microsoft Office Suite Activation Assistant
    Microsoft Office Word MUI (Dutch) 2007
    Microsoft Silverlight
    Microsoft SQL Server 2005 Compact Edition [ENU]
    Microsoft Sync Framework Runtime Native v1.0 (x86)
    Microsoft Sync Framework Services Native v1.0 (x86)
    Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
    Microsoft Works
    MrvlUsgTracking
    MSVCRT
    MSXML 4.0 SP2 (KB954430)
    MSXML 4.0 SP2 (KB973688)
    muvee Reveal
    Nero 8
    neroxml
    Norton Online Backup
    Picasa 3
    Power2Go
    PowerDirector
    QLBCASL
    Realtek 8136 8168 8169 Ethernet Driver
    Realtek USB 2.0 Card Reader
    Recovery Manager
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2835393)
    Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628)
    Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2687309) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2687311) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2687439) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2687499) 32-Bit Edition
    Security Update for Microsoft Office 2007 suites (KB2760416) 32-Bit Edition
    Security Update for Microsoft Office Excel 2007 (KB2687307) 32-Bit Edition
    Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition
    Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
    Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
    Security Update for Microsoft Office Publisher 2007 (KB2597971) 32-Bit Edition
    Security Update for Microsoft Office Word 2007 (KB2760421) 32-Bit Edition
    Security Update for Taalpakket voor Microsoft .NET Framework 4 Client Profile - NLD (KB2478663)
    Security Update for Taalpakket voor Microsoft .NET Framework 4 Client Profile - NLD (KB2518870)
    Spybot - Search & Destroy
    Synaptics Pointing Device Driver
    Taalpakket voor Microsoft .NET Framework 4 Client Profile - NLD
    Update for 2007 Microsoft Office System (KB967642)
    Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
    Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
    Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
    Update for Microsoft .NET Framework 4 Client Profile (KB2836939)
    Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
    Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
    Update for Microsoft Office 2007 suites (KB2596802) 32-Bit Edition
    Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
    Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
    Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
    Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
    Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817563) 32-Bit Edition
    Update voor Microsoft Office Excel 2007 Help (KB963678)
    Update voor Microsoft Office Powerpoint 2007 Help (KB963669)
    Update voor Microsoft Office Word 2007 Help (KB963665)
    VisualSubSync (remove only)
    VLC media player 2.0.7
    VobSub 2.23
    Windows Live Call
    Windows Live Communications Platform
    Windows Live Essentials
    Windows Live Mail
    Windows Live Messenger
    Windows Live Movie Maker
    Windows Live Photo Gallery
    Windows Live Toolbar
    Windows Live Writer
    WinRAR
    Xvid Video Codec
    Your Uninstaller! 2010
    .
    ==== End Of File ===========================


    GMER 2.1.19163 - http://www.gmer.net
    Rootkit scan 2013-07-23 23:08:50
    Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 WDC_WD2500BEKT-60V5T1 rev.12.01A12 232,89GB
    Running: gexc6gx3.exe; Driver: C:\Users\NOTEBO~1\AppData\Local\Temp\uwliqpoc.sys


    ---- User code sections - GMER 2.1 ----

    .text C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe[3616] C:\Windows\system32\kernel32.dll!LoadLibraryW 00000000771b6f80 5 bytes JMP 0000000162423bc8
    .text C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe[3616] C:\Windows\system32\kernel32.dll!LoadLibraryA 00000000771b7070 5 bytes JMP 0000000162423abc

    ---- Threads - GMER 2.1 ----

    Thread C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2364:4980] 0000000075457587
    Thread C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2364:3992] 000000006d740cb3
    Thread C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2364:476] 00000000774f2e25
    Thread C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2364:3204] 00000000774f3e45
    Thread C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2364:3260] 00000000774f3e45
    Thread C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2364:5036] 000000007595d864
    Thread C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE [4628:3656] 000000006d33313c
    Thread C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE [4628:3824] 000000006d33313c
    Thread C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE [4628:1080] 000000006d33313c
    Thread C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE [4628:4844] 000000006d33313c
    Thread C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE [4628:624] 000000006d33313c
    Thread C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE [4628:2268] 000000006d33313c
    Thread C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE [4628:2108] 000000006d33313c
    Thread C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE [4628:4864] 000000006d33313c
    Thread C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE [4628:672] 000000006d33313c
    Thread C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE [4628:2272] 000000006d33313c
    Thread C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE [4628:740] 000000007595d864

    ---- Registry - GMER 2.1 ----

    Reg HKLM\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\{B2D8DF45-24E1-4AB5-A32B-E96243F80DC5}\[email protected] isatap.{5C16CED7-C92E-4A8A-A97A-31AEF3AF19D9}
    Reg HKLM\SYSTEM\CurrentControlSet\Control\Network\{4d36e975-e325-11ce-bfc1-08002be10318}\{2B07FAA1-8217-4E30-B5EC-FD4501E773BB}\[email protected] \Device\{B2D8DF45-24E1-4AB5-A32B-E96243F80DC5}?\Device\{97668D4E-EE9B-4914-8437-BE5B729D0625}?\Device\{2047383E-E915-4262-BA22-DE07D4E97775}?\Device\{4020A103-129E-4B31-845E-BA023FD66FFF}?\Device\{6C858E4E-1DC4-497A-B12A-7126D7DEA4CA}?\Device\{E0175487-4ADE-4D65-A2E6-D1507DA74B28}?\Device\{C3C11393-9CCA-4503-8E66-CCEF63DA8729}?\Device\{D770712A-95FF-42A2-BA72-5E7B93D63AAC}?\Device\{33D78EA6-8163-4A3B-9716-2CC8C79EAE91}?
    Reg HKLM\SYSTEM\CurrentControlSet\Control\Network\{4d36e975-e325-11ce-bfc1-08002be10318}\{2B07FAA1-8217-4E30-B5EC-FD4501E773BB}\[email protected] "{B2D8DF45-24E1-4AB5-A32B-E96243F80DC5}"?"{97668D4E-EE9B-4914-8437-BE5B729D0625}"?"{2047383E-E915-4262-BA22-DE07D4E97775}"?"{4020A103-129E-4B31-845E-BA023FD66FFF}"?"{6C858E4E-1DC4-497A-B12A-7126D7DEA4CA}"?"{E0175487-4ADE-4D65-A2E6-D1507DA74B28}"?"{C3C11393-9CCA-4503-8E66-CCEF63DA8729}"?"{D770712A-95FF-42A2-BA72-5E7B93D63AAC}"?"{33D78EA6-8163-4A3B-9716-2CC8C79EAE91}"?
    Reg HKLM\SYSTEM\CurrentControlSet\Control\Network\{4d36e975-e325-11ce-bfc1-08002be10318}\{2B07FAA1-8217-4E30-B5EC-FD4501E773BB}\[email protected] \Device\TCPIP6TUNNEL_{B2D8DF45-24E1-4AB5-A32B-E96243F80DC5}?\Device\TCPIP6TUNNEL_{97668D4E-EE9B-4914-8437-BE5B729D0625}?\Device\TCPIP6TUNNEL_{2047383E-E915-4262-BA22-DE07D4E97775}?\Device\TCPIP6TUNNEL_{4020A103-129E-4B31-845E-BA023FD66FFF}?\Device\TCPIP6TUNNEL_{6C858E4E-1DC4-497A-B12A-7126D7DEA4CA}?\Device\TCPIP6TUNNEL_{E0175487-4ADE-4D65-A2E6-D1507DA74B28}?\Device\TCPIP6TUNNEL_{C3C11393-9CCA-4503-8E66-CCEF63DA8729}?\Device\TCPIP6TUNNEL_{D770712A-95FF-42A2-BA72-5E7B93D63AAC}?\Device\TCPIP6TUNNEL_{33D78EA6-8163-4A3B-9716-2CC8C79EAE91}?
    Reg HKLM\SYSTEM\CurrentControlSet\services\iphlpsvc\Parameters\Isatap\{B2D8DF45-24E1-4AB5-A32B-E96243F80DC5}@InterfaceName isatap.{5C16CED7-C92E-4A8A-A97A-31AEF3AF19D9}
    Reg HKLM\SYSTEM\CurrentControlSet\services\iphlpsvc\Parameters\Isatap\{B2D8DF45-24E1-4AB5-A32B-E96243F80DC5}@ReusableType 0
    Reg HKLM\SYSTEM\CurrentControlSet\services\iphlpsvc\Teredo\PreviousState\b0-b[email protected] 59616
    Reg HKLM\SYSTEM\CurrentControlSet\services\iphlpsvc\Teredo\PreviousState\[email protected] 2001:0:9d38:6ab8:c2:171f:ad54:59cf
    Reg HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\[email protected] 8701
    Reg HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\[email protected] 4417

    ---- Disk sectors - GMER 2.1 ----

    Disk \Device\Harddisk0\DR0 unknown MBR code

    ---- EOF - GMER 2.1 ----

    Groet,

    Tony

  • #2
    Hoi Tony24,

    Voor we beginnen , wil ik even vriendelijk op de volgende richtlijnen wijzen:
    .
    • Log enkel in als beheerder met alle rechten.
    • Post je probleem niet in verscheidene fora. het komt je probleem niet ten goede en het is niet netjes tegenover de helpers.
    • Het opruimen van je systeem kan wat tijd in beslag nemen, wees geduldig.
    • Volg aandachtig de instructies die door mij worden gegeven.
    • Volg enkel het door mij gegeven advies op
    • Blijf bij het topic totdat ik gemeldt heb dat je PC clean is.
    • Als je iets niet weet of verstaat, vraag het dan even aub.
    • Installeer of deinstalleer géén software of hardware terwijl we met je probleem bezig zijn.
    • Ga ondertussen niet wat "anders" proberen, dat maakt het alleen maar moeilijker voor ons
    • Zet je emoticons (Smileys) uit als je logs plaatst aub .
    • De logs niet als bijlage, noch tussen codetags zetten aub.

    .
    Opmerking: Vista of Windows 7 ? >> Alle tools steeds uitvoeren als admin.
    De instructies die worden gegeven, zijn enkel geldig voor jouw PC.

    Stap 1:

    Malware scannen en verwijderen....


    Download MalwareBytes' Anti-Malware naar je bureaublad vanuit één van de volgende links: Dubbelklik op mbam-setup.exe om het programma te installeren.

    Op het einde van de setup procedure, krijg je een scherm waar je op "Voltooien" moet klikken.
    Indien je MBAM niet wenst te evalueren, vink je de eerste optie uit en klik je dan pas op "Voltooien"

    Zorg dat er na de installatie een vinkje is geplaatst bij:
    • Update MalwareBytes' Anti-Malware
    • Start MalwareBytes' Anti-Malware
    • Klik daarna op "Voltooien". Indien een update gevonden wordt, zal die gedownload en geïnstalleerd worden.



    Zodra het programma gestart is, ga je naar het tabblad "Instellingen".
    • Vink hier aan: "Sluit Internet Explorer tijdens verwijdering van malware".
    • Ga naar het tabblad "Updates" en Update MBAM.
    • Ga daarna naar het tabblad "Scanner", kies hier voor "VOLLEDIGE Scan".
    • Druk vervolgens op "Scannen" om de scan te starten.
    • Het scannen kan een tijdje duren, dus wees geduldig.
    • Wanneer de scan voltooid is, klik op OK, daarna "Bekijk Resultaten" om de resultaten te zien.
    • Zorg ervoor dat daar alles aangevinkt is, daarna klik op: "Verwijder geselecteerde".
    • Na het verwijderen zal een log openen en zal er gevraagd worden om de computer opnieuw op te starten.

    Indien MBAM vraagt om een herstart, doe dit dan ook.
    Wanneer je de restart hebt gedaan, maak je een nieuwe snelle scan met MBAM.
    In dat geval post je dus de twee logs.

    De log wordt automatisch bewaard door MalwareBytes' Anti-Malware en kan je terugvinden door op de "Logs" tab te klikken in het programma.


    Bij problemen!!!

    ___________________________________________________________

    Stap 2:

    Controle op slechte toolbars...

    Opmerking:Vista of Windows 7 ? >> Alle tools steeds uitvoeren als admin.
    Beveiligingssoftware uitschakelen.

    Download AdwCleaner by Xplode naar je Bureaublad.
    • Sluit alle openstaande vensters
    • Start AdwCleaner en klik op Verwijderen

    • KLIK HIER voor een vergroting! 
    • Klik bij AdwCleaner – Information op OK
    • Klik bij AdwCleaner – Restart Required op OK

    Alle icoontjes verdwijnen van het Bureaublad,dit is normaal
    Je PC word opnieuw opgestart en er een opent logfile (C:\ AdwCleaner[xx].txt post de inhoud hier op het Forum.

    Vergeet niet om je "smileys" uit te schakelen.

    Als je Startpagina ook gehijackt was,stel dan de zoekmachine opnieuw in,deze word standaard door AdwCleaner terug gezet naar Google.com

    ___________________________________________________________

    Stap 3:

    Download DDS.com, DDS.scr of DDS.pif van één van deze locaties en plaats het op je bureaublad:


    DDS is een diagnosetool en maakt gebruik van scripts.
    Is het uitvoeren van scripts uitgeschakeld, dan schakel je dit weer in zodat er geen problemen optreden bij gebruik van DDS.


    Dubbelklik op DDS om de tool te starten. (afhankelijk van de download die je gekozen hebt kan dit het bestand DDS.com, DDS.scr of DDS.pif zijn)
    Wanneer het klaar is openen er twee logfiles: DDS.txt en Attach.txt
    Beide logfiles sla je op je bureaublad.

    Post de inhoud van DDS.txt.

    De inhoud Attach.txt moet je niet posten en Attach.txt moet je niet als bijlage toevoegen aan je post, tenzij ik er om vraag.

    ___________________________________________________________

    Stap 4:

    Controle op updates...

    Download Security Check op je bureaublad via hier of hier

    Start Security Check
    Volg de Instructies in het scherm
    Aan het eind verschijnt een log ( checkup.txt )
    Plaats de inhoud ervan in je volgende antwoord.

    In je volgende posting, had ik graag de volgende logs gezien, gemaakt in de opgestelde volgorde:
    .
    • MBAM
    • AdwCleaner
    • DDS
    • checkup.txt

    .
    Deze logs NIET als bijlage of tussen codetags posten aub.
    (Desnoods in meerdere postingen.)

    Emphyrio
    Malware Research [email protected] (MBAM) ..... ASAP & Unite Member
    E Dev * McAfee verwijderen. * Ccleaner * E-Peek

    Comment


    • #3
      Hoi Emphyrio,

      Bedankt voor de hulp! Hieronder de logjes!

      Malwarebytes Anti-Malware 1.75.0.1300
      Protect your home and business PCs, Macs, iOS and Android devices from malware, viruses & cyber threats with our comprehensive cyber security solutions. Free trials available.


      Databaseversie: v2013.07.27.02

      Windows 7 Service Pack 1 x64 NTFS
      Internet Explorer 10.0.9200.16635
      Notebook Tony :: CHOKOZAI [administrator]

      27-7-2013 13:29:44
      mbam-log-2013-07-27 (13-29-44).txt

      Scan type: Volledige scan (C:\|D:\|)
      Ingeschakelde scan opties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM
      Uitgeschakelde scan opties: P2P
      Objecten gescand: 432039
      Verstreken tijd: 2 uur/uren, 5 minuut/minuten, 17 seconde(n)

      Geheugenprocessen gedetecteerd: 0
      (Geen kwaadaardige objecten gedetecteerd)

      Geheugenmodulen gedetecteerd: 0
      (Geen kwaadaardige objecten gedetecteerd)

      Registersleutels gedetecteerd: 0
      (Geen kwaadaardige objecten gedetecteerd)

      Registerwaarden gedetecteerd: 0
      (Geen kwaadaardige objecten gedetecteerd)

      Registerdata gedetecteerd: 0
      (Geen kwaadaardige objecten gedetecteerd)

      Mappen gedetecteerd: 0
      (Geen kwaadaardige objecten gedetecteerd)

      Bestanden gedetecteerd: 0
      (Geen kwaadaardige objecten gedetecteerd)

      (einde)







      # AdwCleaner v2.306 - Verslag gemaakt op 27/07/2013 om 15:56:17
      # Geactualiseerd op 19/07/2013 door Xplode
      # Besturingssysteem : Windows 7 Home Premium Service Pack 1 (64 bits)
      # Gebruiker : Notebook Tony - CHOKOZAI
      # Opstarten Modus : Normale modus
      # Gelanceerd vanaf : C:\Users\Notebook Tony\Desktop\adwcleaner.exe
      # Optie [Verwijderen]


      ***** [Diensten] *****


      ***** [Files / Mappen] *****

      Map Verwijderd : C:\Program Files (x86)\Common Files\Wondershare
      Map Verwijderd : C:\ProgramData\Ask
      Map Verwijderd : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
      Map Verwijderd : C:\Users\Notebook Tony\AppData\Local\Wondershare

      ***** [Register] *****

      Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
      Sleutel Verwijderd : HKCU\Software\Softonic
      Sleutel Verwijderd : HKCU\Software\YahooPartnerToolbar
      Waarde Verwijderd : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]

      ***** [Browsers] *****

      -\\ Internet Explorer v10.0.9200.16635

      [OK] Het register bevat geen enkele ongeoorloofde invoer.

      *************************

      AdwCleaner[S1].txt - [1193 octets] - [27/07/2013 15:56:17]

      ########## EOF - C:\AdwCleaner[S1].txt - [1253 octets] ##########







      .
      UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
      IF REQUESTED, ZIP IT UP & ATTACH IT
      .
      DDS (Ver_2012-11-05.02)
      .
      Microsoft Windows 7 Home Premium
      Boot Device: \Device\HarddiskVolume1
      Install Date: 14-5-2010 10:09:11
      System Uptime: 27-7-2013 15:59:51 (1 hours ago)
      .
      Motherboard: Hewlett-Packard | | 3069
      Processor: Intel(R) Celeron(R) CPU 900 @ 2.20GHz | CPU | 2194/800mhz
      .
      ==== Disk Partitions =========================
      .
      C: is FIXED (NTFS) - 220 GiB total, 121,35 GiB free.
      D: is FIXED (NTFS) - 13 GiB total, 2,119 GiB free.
      E: is CDROM ()
      F: is Removable
      .
      ==== Disabled Device Manager Items =============
      .
      ==== System Restore Points ===================
      .
      .
      ==== Installed Programs ======================
      .
      Update for Microsoft Office 2007 (KB2508958)
      Acrobat.com
      ActiveCheck component for HP Active Support Library
      Adobe AIR
      Adobe Flash Player 11 ActiveX
      Adobe Reader 9.5.5 MUI
      Adobe Shockwave Player
      Aegisub 3.0.2
      Apple Application Support
      Apple Mobile Device Support
      Apple Software Update
      µTorrent
      AVI ReComp 1.5.5
      AviSynth 2.5
      Basissoftware voor HP Deskjet 1050 J410 series
      Bonjour
      CCleaner
      Compatibiliteitspakket voor het 2007 Microsoft Office system
      CyberLink YouCam
      Firebird SQL Server - MAGIX Edition
      HP Customer Experience Enhancements
      HP Deskjet 1050 J410 series Haelp
      HP Games
      HP LaserJet P1000 series
      HP Quick Launch Buttons
      HP Setup
      HP Support Assistant
      HP Update
      HP User Guides 0148
      HP Wireless Assistant
      HPAsset component for HP Active Support Library
      hppMSRedist
      hppusgP1000
      HPSSupply
      IDT Audio
      Intel(R) Graphics Media Accelerator Driver
      iTunes
      iWisoft Free Video Converter 1.2
      iWisoft Free Video Downloader 2.1
      Java 7 Update 25
      Java Auto Updater
      Java(TM) 6 Update 15 (64-bit)
      Java(TM) SE Development Kit 6 Update 15 (64-bit)
      Junk Mail filter update
      LabelPrint
      LightScribe System Software
      Magic Desktop
      Malwarebytes Anti-Malware versie 1.75.0.1300
      MarketResearch
      McAfee AntiVirus Plus
      Microsoft .NET Framework 4 Client Profile
      Microsoft .NET Framework 4 Client Profile NLD Language Pack
      Microsoft Application Error Reporting
      Microsoft Choice Guard
      Microsoft Office 2007 Service Pack 3 (SP3)
      Microsoft Office Access MUI (Dutch) 2007
      Microsoft Office Excel MUI (Dutch) 2007
      Microsoft Office File Validation Add-In
      Microsoft Office InfoPath MUI (Dutch) 2007
      Microsoft Office Office 64-bit Components 2007
      Microsoft Office Outlook MUI (Dutch) 2007
      Microsoft Office PowerPoint MUI (Dutch) 2007
      Microsoft Office PowerPoint Viewer 2007 (Dutch)
      Microsoft Office Professional Plus 2007
      Microsoft Office Proof (Dutch) 2007
      Microsoft Office Proof (English) 2007
      Microsoft Office Proof (French) 2007
      Microsoft Office Proof (German) 2007
      Microsoft Office Proofing (Dutch) 2007
      Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
      Microsoft Office Publisher MUI (Dutch) 2007
      Microsoft Office Shared 64-bit MUI (Dutch) 2007
      Microsoft Office Shared MUI (Dutch) 2007
      Microsoft Office Suite Activation Assistant
      Microsoft Office Word MUI (Dutch) 2007
      Microsoft Silverlight
      Microsoft SQL Server 2005 Compact Edition [ENU]
      Microsoft Sync Framework Runtime Native v1.0 (x86)
      Microsoft Sync Framework Services Native v1.0 (x86)
      Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
      Microsoft Visual C++ 2005 Redistributable
      Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
      Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
      Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
      Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
      Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
      Microsoft Works
      MrvlUsgTracking
      MSVCRT
      MSXML 4.0 SP2 (KB954430)
      MSXML 4.0 SP2 (KB973688)
      muvee Reveal
      Nero 8
      neroxml
      Norton Online Backup
      Picasa 3
      Power2Go
      PowerDirector
      QLBCASL
      Realtek 8136 8168 8169 Ethernet Driver
      Realtek USB 2.0 Card Reader
      Recovery Manager
      Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)
      Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)
      Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
      Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
      Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
      Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
      Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)
      Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
      Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
      Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
      Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
      Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
      Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
      Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)
      Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)
      Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)
      Security Update for Microsoft .NET Framework 4 Client Profile (KB2835393)
      Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628)
      Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition
      Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition
      Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition
      Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition
      Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition
      Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition
      Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition
      Security Update for Microsoft Office 2007 suites (KB2687309) 32-Bit Edition
      Security Update for Microsoft Office 2007 suites (KB2687311) 32-Bit Edition
      Security Update for Microsoft Office 2007 suites (KB2687439) 32-Bit Edition
      Security Update for Microsoft Office 2007 suites (KB2687499) 32-Bit Edition
      Security Update for Microsoft Office 2007 suites (KB2760416) 32-Bit Edition
      Security Update for Microsoft Office Excel 2007 (KB2687307) 32-Bit Edition
      Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition
      Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition
      Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition
      Security Update for Microsoft Office Publisher 2007 (KB2597971) 32-Bit Edition
      Security Update for Microsoft Office Word 2007 (KB2760421) 32-Bit Edition
      Security Update for Taalpakket voor Microsoft .NET Framework 4 Client Profile - NLD (KB2478663)
      Security Update for Taalpakket voor Microsoft .NET Framework 4 Client Profile - NLD (KB2518870)
      Spybot - Search & Destroy
      Synaptics Pointing Device Driver
      Taalpakket voor Microsoft .NET Framework 4 Client Profile - NLD
      Update for 2007 Microsoft Office System (KB967642)
      Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
      Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
      Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
      Update for Microsoft .NET Framework 4 Client Profile (KB2836939)
      Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition
      Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition
      Update for Microsoft Office 2007 suites (KB2596802) 32-Bit Edition
      Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition
      Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition
      Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition
      Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition
      Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817563) 32-Bit Edition
      Update voor Microsoft Office Excel 2007 Help (KB963678)
      Update voor Microsoft Office Powerpoint 2007 Help (KB963669)
      Update voor Microsoft Office Word 2007 Help (KB963665)
      VisualSubSync (remove only)
      VLC media player 2.0.7
      VobSub 2.23
      Windows Live Call
      Windows Live Communications Platform
      Windows Live Essentials
      Windows Live Mail
      Windows Live Messenger
      Windows Live Movie Maker
      Windows Live Photo Gallery
      Windows Live Toolbar
      Windows Live Writer
      WinRAR
      Xvid Video Codec
      Your Uninstaller! 2010
      .
      ==== End Of File ===========================






      DDS (Ver_2012-11-05.02) - NTFS_AMD64
      Internet Explorer: 10.0.9200.16635 BrowserJavaVersion: 10.25.2
      Run by Notebook Tony at 16:01:46 on 2013-07-27
      Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.1979.903 [GMT 2:00]
      .
      AV: McAfee Antivirus en antispyware *Disabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
      SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
      SP: Spybot - Search and Destroy *Enabled/Updated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
      SP: McAfee Antivirus en antispyware *Disabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
      FW: McAfee Firewall *Disabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
      .
      ============== Running Processes ===============
      .
      C:\Windows\system32\lsm.exe
      C:\Windows\system32\svchost.exe -k DcomLaunch
      C:\Windows\system32\svchost.exe -k RPCSS
      C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
      C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
      C:\Windows\system32\svchost.exe -k LocalService
      C:\Windows\system32\svchost.exe -k netsvcs
      C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b87ff64c8b56b7db\STacSV64.e xe
      C:\Windows\system32\svchost.exe -k NetworkService
      C:\Windows\System32\spoolsv.exe
      C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
      C:\Windows\system32\taskeng.exe
      C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
      C:\Windows\system32\Dwm.exe
      C:\Windows\Explorer.EXE
      C:\Windows\system32\taskhost.exe
      C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b87ff64c8b56b7db\AESTSr64.e xe
      C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
      C:\Windows\system32\taskeng.exe
      C:\Program Files\Bonjour\mDNSResponder.exe
      C:\Windows\SysWOW64\svchost.exe -k netsvcs
      C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
      C:\Windows\System32\hkcmd.exe
      C:\Windows\system32\igfxsrvc.exe
      C:\Windows\System32\igfxpers.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Program Files\IDT\WDM\sttray64.exe
      C:\Program Files\Java\jre6\bin\jusched.exe
      C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
      C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe
      C:\Program Files\Windows Sidebar\sidebar.exe
      C:\Windows\system32\spool\DRIVERS\x64\3\HP1006MC.EXE
      C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
      C:\Windows\system32\mfevtps.exe
      C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
      C:\Windows\SysWOW64\IoctlSvc.exe
      C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
      C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
      C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
      C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe
      C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
      C:\Program Files (x86)\Hp\HP UT\bin\hppusg.exe
      C:\Program Files\McAfee.com\Agent\mcagent.exe
      C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
      C:\Program Files (x86)\iTunes\iTunesHelper.exe
      C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
      C:\Windows\system32\svchost.exe -k imgsvc
      C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
      C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
      C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
      C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
      C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Windows\system32\SearchIndexer.exe
      C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
      C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe
      C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
      C:\Windows\system32\wbem\wmiprvse.exe
      C:\Windows\servicing\TrustedInstaller.exe
      C:\Windows\System32\WUDFHost.exe
      C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
      C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
      C:\Program Files\Windows Media Player\wmpnetwk.exe
      C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe
      C:\Windows\system32\SearchProtocolHost.exe
      C:\Windows\System32\svchost.exe -k LocalServicePeerNet
      C:\Windows\system32\SearchFilterHost.exe
      C:\Windows\system32\wbem\wmiprvse.exe
      C:\Windows\System32\cscript.exe
      .
      ============== Pseudo HJT Report ===============
      .
      uStart Page = hxxp://google.nl/
      uProxyServer = 10.31.4.14:8080
      mWinlogon: Userinit = userinit.exe
      BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - <orphaned>
      BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
      BHO: scriptproxy: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20110112132633.dll
      BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
      BHO: {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - <orphaned>
      uRun: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
      uRun: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
      uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
      mRun: [QlbCtrl.exe] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
      mRun: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED
      mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
      mRun: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
      mRun: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
      mRun: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
      mRun: [NBKeyScan] "C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
      mRun: [HPUsageTracking] C:\Program Files (x86)\HP\HP UT\bin\hppusg.exe "C:\Program Files (x86)\HP\HP UT\"
      mRun: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
      mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
      mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
      mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
      mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
      mRun: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
      mPolicies-Explorer: NoActiveDesktop = dword:1
      mPolicies-Explorer: NoActiveDesktopChanges = dword:1
      mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
      mPolicies-System: ConsentPromptBehaviorUser = dword:3
      mPolicies-System: EnableUIADesktopToggle = dword:0
      mPolicies-System: SoftwareSASGeneration = dword:1
      IE: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr/200
      IE: E&xporteren naar Microsoft Excel - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
      IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - <orphaned>
      IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
      DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
      TCP: NameServer = 192.168.1.254 195.241.77.55 195.241.77.58
      TCP: Interfaces\{13ECD552-9E77-4A10-8A7E-68B8673F8C39} : DHCPNameServer = 192.168.1.254 195.241.77.55 195.241.77.58
      TCP: Interfaces\{E19E4AA8-F5D3-4FCA-8AAB-013FCBF1D1B9} : DHCPNameServer = 192.168.1.254 195.241.77.55 195.241.77.58
      TCP: Interfaces\{E19E4AA8-F5D3-4FCA-8AAB-013FCBF1D1B9}\A5978554C4 : DHCPNameServer = 192.168.1.254 195.241.77.55 195.241.77.58
      TCP: Interfaces\{E19E4AA8-F5D3-4FCA-8AAB-013FCBF1D1B9}\A597F507279667164756F5738443D4A464 : DHCPNameServer = 192.168.1.254 195.241.77.55 195.241.77.58
      TCP: Interfaces\{E19E4AA8-F5D3-4FCA-8AAB-013FCBF1D1B9}\D454451443 : DHCPNameServer = 192.168.1.254 195.241.77.55 195.241.77.58
      Notify: SDWinLogon - SDWinLogon.dll
      SSODL: WebCheck - <orphaned>
      SEH: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll
      mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files (x86)\Common Files\LightScribe\LSRunOnce.exe"
      x64-BHO: scriptproxy: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20110112132633.dll
      x64-BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
      x64-Run: [IgfxTray] C:\Windows\System32\igfxtray.exe
      x64-Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe
      x64-Run: [Persistence] C:\Windows\System32\igfxpers.exe
      x64-Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe
      x64-Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe
      x64-Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
      x64-DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
      x64-DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
      x64-DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
      x64-Notify: igfxcui - igfxdev.dll
      x64-SSODL: WebCheck - <orphaned>
      .
      ============= SERVICES / DRIVERS ===============
      .
      R0 mfehidk;McAfee Inc. mfehidk;C:\Windows\System32\drivers\mfehidk.sys [2011-1-12 529128]
      R1 mfenlfk;McAfee NDIS Light Filter;C:\Windows\System32\drivers\mfenlfk.sys [2011-1-12 75032]
      R1 mfewfpk;McAfee Inc. mfewfpk;C:\Windows\System32\drivers\mfewfpk.sys [2011-1-12 283360]
      R2 SSPORT;SSPORT;C:\Windows\System32\drivers\SSPORT.sys [2007-12-11 11576]
      R3 cfwids;McAfee Inc. cfwids;C:\Windows\System32\drivers\cfwids.sys [2011-1-12 62800]
      R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;C:\Windows\System32\drivers\IntcHdmi.sys [2009-7-10 139264]
      R3 mfeavfk;McAfee Inc. mfeavfk;C:\Windows\System32\drivers\mfeavfk.sys [2011-1-12 190136]
      R3 mfefirek;McAfee Inc. mfefirek;C:\Windows\System32\drivers\mfefirek.sys [2011-1-12 441328]
      R3 NETw5s64;Intel(R) Wireless WiFi Link adapter stuurprogramma onder Windows 7 64 Bit;C:\Windows\System32\drivers\NETw5s64.sys [2010-1-13 7675392]
      R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2009-11-5 215040]
      S3 e.dentifier2;SmartCard Reader ABN AMRO e.dentifier2;C:\Windows\System32\drivers\aabed2.sys [2008-3-20 28672]
      S3 mferkdet;McAfee Inc. mferkdet;C:\Windows\System32\drivers\mferkdet.sys [2011-1-12 94864]
      S3 NETw1v64;Intel(R) Wireless WiFi Link 1000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\System32\drivers\NETw1v64.sys [2009-11-5 7058432]
      S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\System32\drivers\netw5v64.sys [2009-6-10 5434368]
      S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\System32\drivers\RtsUStor.sys [2009-11-5 225280]
      S3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;C:\Windows\System32\drivers\RTL8192su.sys [2010-11-25 694888]
      S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\System32\drivers\VSTAZL6.SYS [2009-7-14 292864]
      S3 SrvHsfV92;SrvHsfV92;C:\Windows\System32\drivers\VSTDPV6.SYS [2009-7-14 1485312]
      S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\System32\drivers\VSTCNXT6.SYS [2009-7-14 740864]
      S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2011-6-23 59392]
      S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-12-13 54784]
      S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\System32\drivers\yk62x64.sys [2009-6-10 389120]
      .
      =============== Created Last 30 ================
      .
      2013-07-23 17:40:28 -------- d-----w- C:\ProgramData\Spybot - Search & Destroy
      2013-07-23 17:39:49 17272 ----a-w- C:\Windows\System32\sdnclean64.exe
      2013-07-23 17:39:43 -------- d-----w- C:\Program Files (x86)\Spybot - Search & Destroy 2
      2013-07-11 21:20:04 571904 ----a-w- C:\Program Files\Windows Defender\MpClient.dll
      2013-07-11 21:20:04 1011712 ----a-w- C:\Program Files\Windows Defender\MpSvc.dll
      2013-07-11 21:20:03 9216 ----a-w- C:\Program Files (x86)\Windows Defender\MpAsDesc.dll
      2013-07-11 21:20:03 54784 ----a-w- C:\Program Files (x86)\Windows Defender\MpOAV.dll
      2013-07-11 21:20:03 4608 ----a-w- C:\Program Files (x86)\Windows Defender\MsMpLics.dll
      2013-07-11 21:20:03 392704 ----a-w- C:\Program Files (x86)\Windows Defender\MpClient.dll
      2013-07-11 21:20:03 314880 ----a-w- C:\Program Files\Windows Defender\MpCommu.dll
      2013-07-11 21:20:01 624128 ----a-w- C:\Windows\System32\qedit.dll
      2013-07-11 21:20:01 509440 ----a-w- C:\Windows\SysWow64\qedit.dll
      2013-07-11 21:20:00 1887744 ----a-w- C:\Windows\System32\WMVDECOD.DLL
      2013-07-11 21:19:59 1620480 ----a-w- C:\Windows\SysWow64\WMVDECOD.DLL
      2013-07-11 21:17:26 3153920 ----a-w- C:\Windows\System32\win32k.sys
      2013-07-11 21:17:14 1367040 ----a-w- C:\Program Files\Common Files\Microsoft Shared\ink\journal.dll
      2013-07-11 21:17:13 936448 ----a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\ink\journal.dll
      2013-07-11 21:15:58 1643520 ----a-w- C:\Windows\System32\DWrite.dll
      2013-07-11 21:15:58 1247744 ----a-w- C:\Windows\SysWow64\DWrite.dll
      2013-07-11 20:54:34 -------- d-----w- C:\Program Files (x86)\Total Video Converter
      2013-07-08 22:00:46 -------- d-----w- C:\Users\Notebook Tony\www.apowersoft.com
      2013-06-29 20:36:55 -------- d-----w- C:\Users\Notebook Tony\AppData\Local\Google
      2013-06-29 19:04:54 1045072 ----a-w- C:\Program Files\uTorrent.exe
      2013-06-29 19:03:18 -------- d-----w- C:\Users\Notebook Tony\AppData\Roaming\uTorrent
      2013-06-29 19:00:53 -------- d-----w- C:\Program Files\hjsplit
      2013-06-29 18:44:47 -------- d-----w- C:\Program Files (x86)\iWisoft Free Video Converter
      2013-06-29 18:37:23 -------- d-----w- C:\Program Files (x86)\iWisoft Free Video Downloader
      2013-06-29 18:06:36 -------- d-----w- C:\Users\Notebook Tony\AppData\Local\Apple Computer
      2013-06-29 18:05:45 33240 ----a-w- C:\Windows\System32\drivers\GEARAspiWDM.sys
      2013-06-29 18:04:26 -------- d-----w- C:\Program Files\iPod
      2013-06-29 18:04:25 -------- d-----w- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
      2013-06-29 18:04:25 -------- d-----w- C:\Program Files\iTunes
      2013-06-29 18:04:25 -------- d-----w- C:\Program Files (x86)\iTunes
      2013-06-29 18:01:36 -------- d-----w- C:\Users\Notebook Tony\AppData\Local\Apple
      2013-06-29 18:00:23 -------- d-----w- C:\Program Files\Bonjour
      2013-06-29 18:00:23 -------- d-----w- C:\Program Files (x86)\Bonjour
      2013-06-29 17:57:07 758018 ----a-w- C:\Windows\SysWow64\xvidcore.dll
      2013-06-29 17:57:07 696832 ----a-w- C:\Windows\System32\xvidcore.dll
      2013-06-29 17:57:07 255488 ----a-w- C:\Windows\System32\xvidvfw.dll
      2013-06-29 17:57:07 180224 ----a-w- C:\Windows\SysWow64\xvidvfw.dll
      2013-06-29 17:57:07 173568 ----a-w- C:\Windows\System32\xvid.ax
      2013-06-29 17:57:07 139264 ----a-w- C:\Windows\SysWow64\xvid.ax
      2013-06-29 17:57:06 -------- d-----w- C:\Program Files (x86)\Xvid
      2013-06-29 17:56:05 -------- d-----w- C:\Program Files (x86)\AviSynth 2.5
      2013-06-29 17:55:55 -------- d-----w- C:\Program Files (x86)\AVI ReComp
      2013-06-29 17:53:29 -------- d-----w- C:\Program Files\VirtualDub-1.9.11
      2013-06-29 17:44:48 -------- d-----w- C:\Users\Notebook Tony\AppData\Roaming\AVI ReComp
      2013-06-29 17:43:41 -------- d-----w- C:\Program Files (x86)\Abyssmedia
      2013-06-28 19:59:11 -------- d-----w- C:\Users\Notebook Tony\AppData\Local\CyberLink
      2013-06-27 21:57:53 96168 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
      2013-06-27 21:30:57 -------- d-----w- C:\Users\Notebook Tony\AppData\Local\Programs
      2013-06-27 21:23:28 -------- d-----w- C:\Program Files\CCleaner
      2013-06-27 18:47:30 -------- d-----w- C:\Users\Notebook Tony\AppData\Local\fontconfig
      2013-06-27 18:40:47 -------- d-----w- C:\Users\Notebook Tony\AppData\Local\Aegisub
      2013-06-27 18:40:46 -------- d-----w- C:\Users\Notebook Tony\AppData\Roaming\Aegisub
      2013-06-27 18:40:10 -------- d-----w- C:\Program Files (x86)\Aegisub
      2013-06-27 18:37:11 -------- d-----w- C:\Program Files (x86)\VisualSubSync
      .
      ==================== Find3M ====================
      .





      SECURITY CHECK


      Results of screen317's Security Check version 0.99.71
      Windows 7 Service Pack 1 x64 (UAC is enabled)
      Internet Explorer 10
      ``````````````Antivirus/Firewall Check:``````````````
      McAfee Antivirus en antispyware
      WMI entry may not exist for antivirus; attempting automatic update.
      `````````Anti-malware/Other Utilities Check:`````````
      Spybot - Search & Destroy
      Java 7 Update 25
      Adobe Reader 9 Adobe Reader out of Date!
      ````````Process Check: objlist.exe by Laurent````````
      Spybot Teatimer.exe is disabled!
      `````````````````System Health check`````````````````
      Total Fragmentation on Drive C: 3%
      ````````````````````End of Log``````````````````````

      Comment


      • #4
        Adobe Reader 9 mag je verwijderen van je pc.



        Download TFC en sla deze op je Bureaublad op.
        • Dubbelklik op TFC.exe om het programma te openen.
        • Het programma zal alle andere programma's sluiten, zorg er dus voor dat je al je werk hebt opgeslagen voordat je verder gaat.
        • Klik op de knop Start om het programma te starten.
        • Als het programma klaar is, dan zal het je computer opnieuw opstarten.
          Als dit niet gebeurt, start dan je computer handmatig opnieuw op.


        _____________________________________________________________

        Download Combofix en plaats het op je bureaublad.

        Extra nota... Zorg ervoor dat je Security software uitschakeld is tijdens het gebruik van Combofix.
        Dit omdat deze scanners bepaalde componenten die Combofix gebruikt, onterecht zien als geïnfecteerd en Combofix zullen blokkeren.


        Kijk hier indien je niet weet hoe je je Antivirus, Firewall en/of Antispywarescanner moet uitschakelen.


        Sluit ALLE vensters, ook je browser en laat Combofix rustig zijn werk doen.
        Open dus geen andere applicaties totdat Combofix de log heeft gepresenteert.

        Als Combofix vraagt om een update, dan staat je dit toe.

        Wanneer ComboFix klaar is met scannen, dit kan eventueel na een reboot zijn, opent er een logfile (combofix.txt).
        Deze kan je vinden als C:\combofix.txt.

        Post het Combofixlogje samen met een nieuw DDS logje in je volgende antwoord.

        Emphyrio
        Malware Research [email protected] (MBAM) ..... ASAP & Unite Member
        E Dev * McAfee verwijderen. * Ccleaner * E-Peek

        Comment


        • #5
          Bij deze: (alleen dds kladblokje en combofix is wellicht voldoende?!)




          ComboFix 13-07-27.01 - Notebook Tony 27-07-2013 21:06:56.1.1 - x64
          Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.1979.874 [GMT 2:00]
          Gestart vanuit: c:\users\Notebook Tony\Desktop\ComboFix.exe
          AV: McAfee Antivirus en antispyware *Disabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
          FW: McAfee Firewall *Disabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
          SP: McAfee Antivirus en antispyware *Disabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
          SP: Spybot - Search and Destroy *Disabled/Updated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
          SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
          .
          .
          (((((((((((((((((((( Bestanden Gemaakt van 2013-06-27 to 2013-07-27 ))))))))))))))))))))))))))))))
          .
          .
          2013-07-27 19:16 . 2013-07-27 19:16 -------- d-----w- c:\users\Default\AppData\Local\temp
          2013-07-23 17:40 . 2013-07-23 19:06 -------- d-----w- c:\programdata\Spybot - Search & Destroy
          2013-07-23 17:39 . 2013-07-27 18:59 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy 2
          2013-07-11 21:20 . 2013-05-27 05:50 1011712 ----a-w- c:\program files\Windows Defender\MpSvc.dll
          2013-07-11 21:20 . 2013-05-27 05:50 571904 ----a-w- c:\program files\Windows Defender\MpClient.dll
          2013-07-11 21:20 . 2013-05-27 05:50 314880 ----a-w- c:\program files\Windows Defender\MpCommu.dll
          2013-07-11 21:20 . 2013-05-27 04:57 4608 ----a-w- c:\program files (x86)\Windows Defender\MsMpLics.dll
          2013-07-11 21:20 . 2013-05-27 04:57 54784 ----a-w- c:\program files (x86)\Windows Defender\MpOAV.dll
          2013-07-11 21:20 . 2013-05-27 04:57 392704 ----a-w- c:\program files (x86)\Windows Defender\MpClient.dll
          2013-07-11 21:20 . 2013-05-27 03:15 9216 ----a-w- c:\program files (x86)\Windows Defender\MpAsDesc.dll
          2013-07-11 21:20 . 2013-06-04 06:00 624128 ----a-w- c:\windows\system32\qedit.dll
          2013-07-11 21:20 . 2013-06-04 04:53 509440 ----a-w- c:\windows\SysWow64\qedit.dll
          2013-07-11 21:20 . 2013-05-06 06:03 1887744 ----a-w- c:\windows\system32\WMVDECOD.DLL
          2013-07-11 21:19 . 2013-05-06 04:56 1620480 ----a-w- c:\windows\SysWow64\WMVDECOD.DLL
          2013-07-11 21:17 . 2013-06-05 03:34 3153920 ----a-w- c:\windows\system32\win32k.sys
          2013-07-11 21:17 . 2013-04-10 05:46 1367040 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
          2013-07-11 21:17 . 2013-04-10 05:03 936448 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\ink\journal.dll
          2013-07-11 21:15 . 2013-04-09 23:34 1247744 ----a-w- c:\windows\SysWow64\DWrite.dll
          2013-07-11 21:15 . 2013-04-02 22:51 1643520 ----a-w- c:\windows\system32\DWrite.dll
          2013-07-11 20:54 . 2013-07-11 20:55 -------- d-----w- c:\program files (x86)\Total Video Converter
          2013-07-08 22:00 . 2013-07-08 22:03 -------- d-----w- c:\users\Notebook Tony\www.apowersoft.com
          2013-06-29 20:36 . 2013-06-29 20:51 -------- d-----w- c:\users\Notebook Tony\AppData\Local\Google
          2013-06-29 20:36 . 2013-06-29 20:36 -------- d-----w- c:\program files (x86)\Google
          2013-06-29 19:04 . 2013-06-29 19:04 1045072 ----a-w- c:\program files\uTorrent.exe
          2013-06-29 19:03 . 2013-06-29 20:11 -------- d-----w- c:\users\Notebook Tony\AppData\Roaming\uTorrent
          2013-06-29 19:00 . 2013-06-29 19:00 -------- d-----w- c:\program files\hjsplit
          2013-06-29 18:44 . 2013-06-29 18:44 -------- d-----w- c:\program files (x86)\iWisoft Free Video Converter
          2013-06-29 18:37 . 2013-06-29 18:37 -------- d-----w- c:\program files (x86)\iWisoft Free Video Downloader
          2013-06-29 18:06 . 2013-07-14 20:52 -------- d-----w- c:\users\Notebook Tony\AppData\Roaming\Apple Computer
          2013-06-29 18:06 . 2013-06-29 18:06 -------- d-----w- c:\users\Notebook Tony\AppData\Local\Apple Computer
          2013-06-29 18:05 . 2012-08-21 11:01 33240 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
          2013-06-29 18:05 . 2013-06-29 18:05 -------- dc----w- c:\windows\system32\DRVSTORE
          2013-06-29 18:04 . 2013-06-29 18:04 -------- d-----w- c:\program files\iPod
          2013-06-29 18:04 . 2013-06-29 18:05 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
          2013-06-29 18:04 . 2013-06-29 18:05 -------- d-----w- c:\program files\iTunes
          2013-06-29 18:04 . 2013-06-29 18:05 -------- d-----w- c:\program files (x86)\iTunes
          2013-06-29 18:04 . 2013-06-29 18:04 -------- d-----w- c:\programdata\Apple Computer
          2013-06-29 18:01 . 2013-06-29 18:01 -------- d-----w- c:\users\Notebook Tony\AppData\Local\Apple
          2013-06-29 18:01 . 2013-06-29 18:01 -------- d-----w- c:\program files (x86)\Apple Software Update
          2013-06-29 18:00 . 2013-06-29 18:00 -------- d-----w- c:\program files\Common Files\Apple
          2013-06-29 18:00 . 2013-06-29 18:00 -------- d-----w- c:\program files\Bonjour
          2013-06-29 18:00 . 2013-06-29 18:00 -------- d-----w- c:\program files (x86)\Bonjour
          2013-06-29 18:00 . 2013-06-29 18:04 -------- d-----w- c:\program files (x86)\Common Files\Apple
          2013-06-29 18:00 . 2013-06-29 18:01 -------- d-----w- c:\programdata\Apple
          2013-06-29 17:57 . 2013-06-29 17:57 -------- d-----w- c:\program files (x86)\Gabest
          2013-06-29 17:57 . 2011-05-30 13:42 255488 ----a-w- c:\windows\system32\xvidvfw.dll
          2013-06-29 17:57 . 2011-05-23 07:49 173568 ----a-w- c:\windows\system32\xvid.ax
          2013-06-29 17:57 . 2011-05-23 07:45 696832 ----a-w- c:\windows\system32\xvidcore.dll
          2013-06-29 17:57 . 2009-09-29 18:57 758018 ----a-w- c:\windows\SysWow64\xvidcore.dll
          2013-06-29 17:57 . 2008-12-04 19:46 180224 ----a-w- c:\windows\SysWow64\xvidvfw.dll
          2013-06-29 17:57 . 2008-10-08 08:16 139264 ----a-w- c:\windows\SysWow64\xvid.ax
          2013-06-29 17:57 . 2013-06-29 17:57 -------- d-----w- c:\program files (x86)\Xvid
          2013-06-29 17:56 . 2013-06-29 17:56 -------- d-----w- c:\program files (x86)\AviSynth 2.5
          2013-06-29 17:55 . 2013-06-29 17:57 -------- d-----w- c:\program files (x86)\AVI ReComp
          2013-06-29 17:53 . 2013-06-29 17:53 -------- d-----w- c:\program files\VirtualDub-1.9.11
          2013-06-29 17:44 . 2013-06-30 21:53 -------- d-----w- c:\users\Notebook Tony\AppData\Roaming\AVI ReComp
          2013-06-29 17:43 . 2013-06-29 17:43 -------- d-----w- c:\program files (x86)\Abyssmedia
          2013-06-28 19:59 . 2013-06-28 19:59 -------- d-----w- c:\users\Notebook Tony\AppData\Roaming\CyberLink
          2013-06-28 19:59 . 2013-06-28 19:59 -------- d-----w- c:\users\Public\CyberLink
          2013-06-28 19:59 . 2013-06-28 19:59 -------- d-----w- c:\users\Notebook Tony\AppData\Local\CyberLink
          2013-06-27 21:58 . 2013-06-27 21:58 -------- d-----w- c:\program files (x86)\Common Files\Java
          2013-06-27 21:57 . 2013-06-27 21:57 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
          2013-06-27 21:57 . 2013-06-27 21:57 -------- d-----w- c:\program files (x86)\Java
          2013-06-27 21:30 . 2013-06-27 21:30 -------- d-----w- c:\users\Notebook Tony\AppData\Local\Programs
          2013-06-27 21:23 . 2013-06-27 21:23 -------- d-----w- c:\program files\CCleaner
          .
          .
          .
          ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
          .
          2013-07-23 12:57 . 2010-05-14 08:35 78185248 ----a-w- c:\windows\system32\MRT.exe
          2013-06-27 21:57 . 2012-11-07 08:06 867240 ----a-w- c:\windows\SysWow64\npdeployJava1.dll
          2013-06-27 21:57 . 2010-05-20 20:20 789416 ----a-w- c:\windows\SysWow64\deployJava1.dll
          2013-06-18 14:31 . 2012-08-26 18:33 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
          2013-06-18 14:31 . 2011-11-14 11:53 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
          2013-05-13 05:51 . 2013-06-18 14:20 184320 ----a-w- c:\windows\system32\cryptsvc.dll
          2013-05-13 05:51 . 2013-06-18 14:20 1464320 ----a-w- c:\windows\system32\crypt32.dll
          2013-05-13 05:51 . 2013-06-18 14:20 139776 ----a-w- c:\windows\system32\cryptnet.dll
          2013-05-13 05:50 . 2013-06-18 14:20 52224 ----a-w- c:\windows\system32\certenc.dll
          2013-05-13 04:45 . 2013-06-18 14:20 1160192 ----a-w- c:\windows\SysWow64\crypt32.dll
          2013-05-13 04:45 . 2013-06-18 14:20 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll
          2013-05-13 04:45 . 2013-06-18 14:20 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
          2013-05-13 03:43 . 2013-06-18 14:20 1192448 ----a-w- c:\windows\system32\certutil.exe
          2013-05-13 03:08 . 2013-06-18 14:20 903168 ----a-w- c:\windows\SysWow64\certutil.exe
          2013-05-13 03:08 . 2013-06-18 14:20 43008 ----a-w- c:\windows\SysWow64\certenc.dll
          2013-05-10 05:49 . 2013-06-18 14:20 30720 ----a-w- c:\windows\system32\cryptdlg.dll
          2013-05-10 03:20 . 2013-06-18 14:20 24576 ----a-w- c:\windows\SysWow64\cryptdlg.dll
          2013-05-08 06:39 . 2013-06-18 14:21 1910632 ----a-w- c:\windows\system32\drivers\tcpip.sys
          .
          .
          ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
          .
          .
          *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
          REGEDIT4
          .
          [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
          "LightScribe Control Panel"="c:\program files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe" [2009-08-20 2363392]
          "IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-06-24 1840424]
          "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
          "QlbCtrl.exe"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2009-08-20 322104]
          "NortonOnlineBackupReminder"="c:\program files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" [2009-06-29 600936]
          "Easybits Recovery"="c:\program files (x86)\EasyBits For Kids\ezRecover.exe" [2009-09-02 60464]
          "HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576]
          "WirelessAssistant"="c:\program files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2009-07-23 498744]
          "NBKeyScan"="c:\program files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-06-08 2221352]
          "HPUsageTracking"="c:\program files (x86)\HP\HP UT\bin\hppusg.exe" [2009-05-11 24576]
          "mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2010-11-22 1484856]
          "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
          "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
          "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-05-31 152392]
          .
          [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
          "ConsentPromptBehaviorAdmin"= 5 (0x5)
          "ConsentPromptBehaviorUser"= 3 (0x3)
          "EnableUIADesktopToggle"= 0 (0x0)
          "SoftwareSASGeneration"= 1 (0x1)
          .
          [hkey_local_machine\software\Wow6432Node\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
          .
          [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
          "mixer"=wdmaud.drv
          .
          [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
          BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean64.exe
          .
          [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
          @=""
          .
          [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
          @=""
          .
          [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
          @="Driver"
          .
          R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET \Framework64\v4.0.30319\mscorsvw.exe [x]
          R2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
          R3 e.dentifier2;SmartCard Reader ABN AMRO e.dentifier2;c:\windows\system32\DRIVERS\aabed2.sys;c:\windows\SYSNATIVE\DRIVERS\aabed2.sys [x]
          R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [x]
          R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys;c:\windows\SYSNATIVE\drivers\mferkdet.sys [x]
          R3 NETw1v64;Intel(R) Wireless WiFi Link 1000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\NETw1v64.sys;c:\windows\SYSNATIVE\DRIVERS\NETw1v64.sys [x]
          R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys;c:\windows\SYSNATIVE\DRIVERS\netw5v64.sys [x]
          R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
          R3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192su.sys;c:\windows\SYSNATIVE\DRIVERS\RTL8192su.sys [x]
          R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTAZL6.SYS [x]
          R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTDPV6.SYS [x]
          R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTCNX T6.SYS [x]
          R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
          R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
          R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
          R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys;c:\windows\SYSNATIVE\DRIVERS\yk62x64.sys [x]
          S1 mfenlfk;McAfee NDIS Light Filter;c:\windows\system32\DRIVERS\mfenlfk.sys;c:\windows\SYSNATIVE\DRIVERS\mfenlfk.sys [x]
          S1 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys;c:\windows\SYSNATIVE\drivers\mfewfpk.sys [x]
          S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b87ff64c8b56b7db\AE STSr64.exe;c:\windows\SYSNATIVE\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b87ff64c8b56b7d b\AESTSr64.exe [x]
          S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [x]
          S2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [x]
          S2 McNaiAnn;McAfee VirusScan Announcer;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [x]
          S2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe [x]
          S2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe;c:\windows\SYSNATIVE\mfevtps.exe [x]
          S2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys;c:\windows\SYSNATIVE\Drivers\SSPORT.sys [x]
          S3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys;c:\windows\SYSNATIVE\drivers\cfwids.sys [x]
          S3 Com4QLBEx;Com4QLBEx;c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe;c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [x]
          S3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys;c:\windows\SYSNATIVE\drivers\IntcHdmi.sys [x]
          S3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys;c:\windows\SYSNATIVE\drivers\mfefirek.sys [x]
          S3 NETw5s64;Intel(R) Wireless WiFi Link adapter stuurprogramma onder Windows 7 64 Bit;c:\windows\system32\DRIVERS\NETw5s64.sys;c:\windows\SYSNATIVE\DRIVERS\NETw5s64.sys [x]
          S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
          .
          .
          --- Andere Services/Drivers In Geheugen ---
          .
          *Deregistered* - mfeavfk01
          .
          HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
          ezSharedSvc
          .
          [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
          2009-08-20 12:24 451872 ----a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe
          .
          Inhoud van de 'Gedeelde Taken' map
          .
          2013-07-27 c:\windows\Tasks\Adobe Flash Player Updater.job
          - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-26 14:31]
          .
          .
          --------- X64 Entries -----------
          .
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
          "IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-09-10 165912]
          "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-09-10 387608]
          "Persistence"="c:\windows\system32\igfxpers.exe" [2009-09-10 365592]
          "SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2009-08-13 456192]
          "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-11-15 171520]
          .
          ------- Bijkomende Scan -------
          .
          uStart Page = hxxp://google.nl/
          uLocal Page = c:\windows\system32\blank.htm
          mLocal Page = c:\windows\SysWOW64\blank.htm
          uInternet Settings,ProxyOverride = *.local
          IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
          IE: E&xporteren naar Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
          Trusted Zone: otys.nl\bo01
          Trusted Zone: otys.nl\bo02
          Trusted Zone: otys.nl\bo03
          Trusted Zone: otys.nl\bo04
          Trusted Zone: otys.nl\bo11
          Trusted Zone: otys.nl\bo12
          Trusted Zone: otys.nl\bo13
          Trusted Zone: otys.nl\bo14
          Trusted Zone: otys.nl\bo15
          Trusted Zone: otys.nl\bo16
          TCP: DhcpNameServer = 192.168.1.254 195.241.77.55 195.241.77.58
          .
          - - - - ORPHANS VERWIJDERD - - - -
          .
          HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
          AddRemove-EasyBits Magic Desktop - c:\windows\system32\ezMDUninstall.exe
          .
          .
          .
          --------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
          @Denied: (A 2) (Everyone)
          @="FlashBroker"
          "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe ,-101"
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
          "Enabled"=dword:00000001
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
          @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe"
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
          @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
          @Denied: (A 2) (Everyone)
          @="IFlashBroker5"
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
          @="{00020424-0000-0000-C000-000000000046}"
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
          @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
          "Version"="1.0"
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
          @Denied: (A 2) (Everyone)
          @="FlashBroker"
          "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe ,-101"
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
          "Enabled"=dword:00000001
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
          @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe"
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
          @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
          @Denied: (A 2) (Everyone)
          @="Shockwave Flash Object"
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
          @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
          "ThreadingModel"="Apartment"
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
          @="0"
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
          @="ShockwaveFlash.ShockwaveFlash.11"
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
          @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
          @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
          @="1.0"
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
          @="ShockwaveFlash.ShockwaveFlash"
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
          @Denied: (A 2) (Everyone)
          @="Macromedia Flash Factory Object"
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
          @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
          "ThreadingModel"="Apartment"
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
          @="FlashFactory.FlashFactory.1"
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
          @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
          @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
          @="1.0"
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
          @="FlashFactory.FlashFactory"
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
          @Denied: (A 2) (Everyone)
          @="IFlashBroker5"
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
          @="{00020424-0000-0000-C000-000000000046}"
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
          @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
          "Version"="1.0"
          .
          [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
          "SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
          00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
          .
          [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
          @Denied: (Full) (Everyone)
          .
          Voltooingstijd: 2013-07-27 21:21:19
          ComboFix-quarantined-files.txt 2013-07-27 19:21
          .
          Pre-Run: 132.226.965.504 bytes beschikbaar
          Post-Run: 131.467.165.696 bytes beschikbaar
          .
          - - End Of File - - D201C6F0B71F2AC2FA6B655D5734D556
          0E64FBE2A2549D814A251B7640F801CC








          DDS (Ver_2012-11-05.02) - NTFS_AMD64
          Internet Explorer: 10.0.9200.16635 BrowserJavaVersion: 10.25.2
          Run by Notebook Tony at 21:21:56 on 2013-07-27
          Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.1979.767 [GMT 2:00]
          .
          AV: McAfee Antivirus en antispyware *Disabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
          SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
          SP: Spybot - Search and Destroy *Disabled/Updated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
          SP: McAfee Antivirus en antispyware *Disabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
          FW: McAfee Firewall *Disabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
          .
          ============== Running Processes ===============
          .
          C:\Windows\system32\lsm.exe
          C:\Windows\system32\svchost.exe -k DcomLaunch
          C:\Windows\system32\svchost.exe -k RPCSS
          C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
          C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
          C:\Windows\system32\svchost.exe -k LocalService
          C:\Windows\system32\svchost.exe -k netsvcs
          C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b87ff64c8b56b7db\STacSV64.e xe
          C:\Windows\system32\svchost.exe -k NetworkService
          C:\Windows\System32\spoolsv.exe
          C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
          C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
          C:\Windows\system32\taskhost.exe
          C:\Windows\system32\Dwm.exe
          C:\Windows\Explorer.EXE
          C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b87ff64c8b56b7db\AESTSr64.e xe
          C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
          C:\Program Files\Bonjour\mDNSResponder.exe
          C:\Windows\system32\spool\DRIVERS\x64\3\HP1006MC.EXE
          C:\Windows\System32\hkcmd.exe
          C:\Windows\System32\igfxpers.exe
          C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
          C:\Program Files\IDT\WDM\sttray64.exe
          C:\Program Files\Java\jre6\bin\jusched.exe
          C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
          C:\Program Files\Windows Sidebar\sidebar.exe
          C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
          C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe
          C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
          C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
          C:\Program Files\McAfee.com\Agent\mcagent.exe
          C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
          C:\Program Files (x86)\iTunes\iTunesHelper.exe
          C:\Windows\system32\igfxsrvc.exe
          C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
          C:\Windows\system32\mfevtps.exe
          C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
          C:\Windows\SysWOW64\IoctlSvc.exe
          C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
          C:\Windows\system32\svchost.exe -k imgsvc
          C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
          C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
          C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
          C:\Program Files\iPod\bin\iPodService.exe
          C:\Windows\system32\SearchIndexer.exe
          C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
          C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe
          C:\Windows\system32\wbem\wmiprvse.exe
          C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
          C:\Windows\System32\WUDFHost.exe
          C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
          C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
          C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe
          C:\Windows\System32\svchost.exe -k LocalServicePeerNet
          C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe
          C:\Program Files\Windows Media Player\wmpnetwk.exe
          C:\Program Files\Common Files\McAfee\Core\mchost.exe
          C:\Windows\system32\notepad.exe
          C:\Windows\system32\SearchProtocolHost.exe
          C:\Windows\system32\SearchFilterHost.exe
          C:\Windows\system32\wbem\wmiprvse.exe
          C:\Windows\System32\cscript.exe
          .
          ============== Pseudo HJT Report ===============
          .
          uStart Page = hxxp://google.nl/
          BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - <orphaned>
          BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
          BHO: scriptproxy: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20110112132633.dll
          BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
          BHO: {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - <orphaned>
          uRun: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
          uRun: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
          uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
          mRun: [QlbCtrl.exe] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
          mRun: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED
          mRun: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
          mRun: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
          mRun: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
          mRun: [NBKeyScan] "C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
          mRun: [HPUsageTracking] C:\Program Files (x86)\HP\HP UT\bin\hppusg.exe "C:\Program Files (x86)\HP\HP UT\"
          mRun: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
          mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
          mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
          mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
          uPolicies-Explorer: NoDrives = dword:0
          mPolicies-Explorer: NoDrives = dword:0
          mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
          mPolicies-System: ConsentPromptBehaviorUser = dword:3
          mPolicies-System: EnableUIADesktopToggle = dword:0
          mPolicies-System: SoftwareSASGeneration = dword:1
          IE: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr/200
          IE: E&xporteren naar Microsoft Excel - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
          IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - <orphaned>
          IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
          DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
          TCP: NameServer = 192.168.1.254 195.241.77.55 195.241.77.58
          TCP: Interfaces\{13ECD552-9E77-4A10-8A7E-68B8673F8C39} : DHCPNameServer = 192.168.1.254 195.241.77.55 195.241.77.58
          TCP: Interfaces\{E19E4AA8-F5D3-4FCA-8AAB-013FCBF1D1B9} : DHCPNameServer = 192.168.1.254 195.241.77.55 195.241.77.58
          TCP: Interfaces\{E19E4AA8-F5D3-4FCA-8AAB-013FCBF1D1B9}\A5978554C4 : DHCPNameServer = 192.168.1.254 195.241.77.55 195.241.77.58
          TCP: Interfaces\{E19E4AA8-F5D3-4FCA-8AAB-013FCBF1D1B9}\A597F507279667164756F5738443D4A464 : DHCPNameServer = 192.168.1.254 195.241.77.55 195.241.77.58
          TCP: Interfaces\{E19E4AA8-F5D3-4FCA-8AAB-013FCBF1D1B9}\D454451443 : DHCPNameServer = 192.168.1.254 195.241.77.55 195.241.77.58
          SSODL: WebCheck - <orphaned>
          SEH: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll
          mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files (x86)\Common Files\LightScribe\LSRunOnce.exe"
          x64-BHO: scriptproxy: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20110112132633.dll
          x64-BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
          x64-Run: [IgfxTray] C:\Windows\System32\igfxtray.exe
          x64-Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe
          x64-Run: [Persistence] C:\Windows\System32\igfxpers.exe
          x64-Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe
          x64-Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe
          x64-Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
          x64-DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
          x64-DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
          x64-DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
          x64-Notify: igfxcui - igfxdev.dll
          x64-SSODL: WebCheck - <orphaned>
          .
          ============= SERVICES / DRIVERS ===============
          .
          R0 mfehidk;McAfee Inc. mfehidk;C:\Windows\System32\drivers\mfehidk.sys [2011-1-12 529128]
          R1 mfenlfk;McAfee NDIS Light Filter;C:\Windows\System32\drivers\mfenlfk.sys [2011-1-12 75032]
          R1 mfewfpk;McAfee Inc. mfewfpk;C:\Windows\System32\drivers\mfewfpk.sys [2011-1-12 283360]
          R2 AESTFilters;Andrea ST Filters Service;C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b87ff64c8b56b7db\AE STSr64.exe [2009-11-5 89600]
          R2 Fabs;FABS - Helping agent for MAGIX media database;C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [2009-8-27 1253376]
          R2 McMPFSvc;McAfee Personal Firewall Service;C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2011-1-12 355440]
          R2 McNaiAnn;McAfee VirusScan Announcer;C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2011-1-12 355440]
          R2 McProxy;McAfee Proxy Service;C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2011-1-12 355440]
          R2 McShield;McShield;C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe [2011-1-12 200056]
          R2 mfefire;McAfee Firewall Core Service;C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe [2011-1-12 245352]
          R2 mfevtp;McAfee Validation Trust Protection Service;C:\Windows\System32\mfevtps.exe [2011-1-12 149032]
          R2 SSPORT;SSPORT;C:\Windows\System32\drivers\SSPORT.sys [2007-12-11 11576]
          R3 cfwids;McAfee Inc. cfwids;C:\Windows\System32\drivers\cfwids.sys [2011-1-12 62800]
          R3 Com4QLBEx;Com4QLBEx;C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-11-15 228408]
          R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;C:\Windows\System32\drivers\IntcHdmi.sys [2009-7-10 139264]
          R3 mfeavfk;McAfee Inc. mfeavfk;C:\Windows\System32\drivers\mfeavfk.sys [2011-1-12 190136]
          R3 mfefirek;McAfee Inc. mfefirek;C:\Windows\System32\drivers\mfefirek.sys [2011-1-12 441328]
          R3 NETw5s64;Intel(R) Wireless WiFi Link adapter stuurprogramma onder Windows 7 64 Bit;C:\Windows\System32\drivers\NETw5s64.sys [2010-1-13 7675392]
          R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2009-11-5 215040]
          S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
          S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
          S2 ezSharedSvc;Easybits Shared Services for Windows;C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
          S3 e.dentifier2;SmartCard Reader ABN AMRO e.dentifier2;C:\Windows\System32\drivers\aabed2.sys [2008-3-20 28672]
          S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2008-8-7 3276800]
          S3 mferkdet;McAfee Inc. mferkdet;C:\Windows\System32\drivers\mferkdet.sys [2011-1-12 94864]
          S3 NETw1v64;Intel(R) Wireless WiFi Link 1000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\System32\drivers\NETw1v64.sys [2009-11-5 7058432]
          S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\System32\drivers\netw5v64.sys [2009-6-10 5434368]
          S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\System32\drivers\RtsUStor.sys [2009-11-5 225280]
          S3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;C:\Windows\System32\drivers\RTL8192su.sys [2010-11-25 694888]
          S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\System32\drivers\VSTAZL6.SYS [2009-7-14 292864]
          S3 SrvHsfV92;SrvHsfV92;C:\Windows\System32\drivers\VSTDPV6.SYS [2009-7-14 1485312]
          S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\System32\drivers\VSTCNXT6.SYS [2009-7-14 740864]
          S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2011-6-23 59392]
          S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-12-13 54784]
          S3 WatAdminSvc;Windows Activation Technologies-service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-5-21 1255736]
          S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\System32\drivers\yk62x64.sys [2009-6-10 389120]
          .
          =============== Created Last 30 ================
          .
          2013-07-27 19:00:14 98816 ----a-w- C:\Windows\sed.exe
          2013-07-27 19:00:14 256000 ----a-w- C:\Windows\PEV.exe
          2013-07-27 19:00:14 208896 ----a-w- C:\Windows\MBR.exe
          2013-07-23 17:40:28 -------- d-----w- C:\ProgramData\Spybot - Search & Destroy
          2013-07-23 17:39:43 -------- d-----w- C:\Program Files (x86)\Spybot - Search & Destroy 2
          2013-07-11 21:20:04 571904 ----a-w- C:\Program Files\Windows Defender\MpClient.dll
          2013-07-11 21:20:04 1011712 ----a-w- C:\Program Files\Windows Defender\MpSvc.dll
          2013-07-11 21:20:03 9216 ----a-w- C:\Program Files (x86)\Windows Defender\MpAsDesc.dll
          2013-07-11 21:20:03 54784 ----a-w- C:\Program Files (x86)\Windows Defender\MpOAV.dll
          2013-07-11 21:20:03 4608 ----a-w- C:\Program Files (x86)\Windows Defender\MsMpLics.dll
          2013-07-11 21:20:03 392704 ----a-w- C:\Program Files (x86)\Windows Defender\MpClient.dll
          2013-07-11 21:20:03 314880 ----a-w- C:\Program Files\Windows Defender\MpCommu.dll
          2013-07-11 21:20:01 624128 ----a-w- C:\Windows\System32\qedit.dll
          2013-07-11 21:20:01 509440 ----a-w- C:\Windows\SysWow64\qedit.dll
          2013-07-11 21:20:00 1887744 ----a-w- C:\Windows\System32\WMVDECOD.DLL
          2013-07-11 21:19:59 1620480 ----a-w- C:\Windows\SysWow64\WMVDECOD.DLL
          2013-07-11 21:17:26 3153920 ----a-w- C:\Windows\System32\win32k.sys
          2013-07-11 21:17:14 1367040 ----a-w- C:\Program Files\Common Files\Microsoft Shared\ink\journal.dll
          2013-07-11 21:17:13 936448 ----a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\ink\journal.dll
          2013-07-11 21:15:58 1643520 ----a-w- C:\Windows\System32\DWrite.dll
          2013-07-11 21:15:58 1247744 ----a-w- C:\Windows\SysWow64\DWrite.dll
          2013-07-11 20:54:34 -------- d-----w- C:\Program Files (x86)\Total Video Converter
          2013-07-08 22:00:46 -------- d-----w- C:\Users\Notebook Tony\www.apowersoft.com
          2013-06-29 20:36:55 -------- d-----w- C:\Users\Notebook Tony\AppData\Local\Google
          2013-06-29 19:04:54 1045072 ----a-w- C:\Program Files\uTorrent.exe
          2013-06-29 19:03:18 -------- d-----w- C:\Users\Notebook Tony\AppData\Roaming\uTorrent
          2013-06-29 19:00:53 -------- d-----w- C:\Program Files\hjsplit
          2013-06-29 18:44:47 -------- d-----w- C:\Program Files (x86)\iWisoft Free Video Converter
          2013-06-29 18:37:23 -------- d-----w- C:\Program Files (x86)\iWisoft Free Video Downloader
          2013-06-29 18:06:36 -------- d-----w- C:\Users\Notebook Tony\AppData\Local\Apple Computer
          2013-06-29 18:05:45 33240 ----a-w- C:\Windows\System32\drivers\GEARAspiWDM.sys
          2013-06-29 18:04:26 -------- d-----w- C:\Program Files\iPod
          2013-06-29 18:04:25 -------- d-----w- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
          2013-06-29 18:04:25 -------- d-----w- C:\Program Files\iTunes
          2013-06-29 18:04:25 -------- d-----w- C:\Program Files (x86)\iTunes
          2013-06-29 18:01:36 -------- d-----w- C:\Users\Notebook Tony\AppData\Local\Apple
          2013-06-29 18:00:23 -------- d-----w- C:\Program Files\Bonjour
          2013-06-29 18:00:23 -------- d-----w- C:\Program Files (x86)\Bonjour
          2013-06-29 17:57:07 758018 ----a-w- C:\Windows\SysWow64\xvidcore.dll
          2013-06-29 17:57:07 696832 ----a-w- C:\Windows\System32\xvidcore.dll
          2013-06-29 17:57:07 255488 ----a-w- C:\Windows\System32\xvidvfw.dll
          2013-06-29 17:57:07 180224 ----a-w- C:\Windows\SysWow64\xvidvfw.dll
          2013-06-29 17:57:07 173568 ----a-w- C:\Windows\System32\xvid.ax
          2013-06-29 17:57:07 139264 ----a-w- C:\Windows\SysWow64\xvid.ax
          2013-06-29 17:57:06 -------- d-----w- C:\Program Files (x86)\Xvid
          2013-06-29 17:56:05 -------- d-----w- C:\Program Files (x86)\AviSynth 2.5
          2013-06-29 17:55:55 -------- d-----w- C:\Program Files (x86)\AVI ReComp
          2013-06-29 17:53:29 -------- d-----w- C:\Program Files\VirtualDub-1.9.11
          2013-06-29 17:44:48 -------- d-----w- C:\Users\Notebook Tony\AppData\Roaming\AVI ReComp
          2013-06-29 17:43:41 -------- d-----w- C:\Program Files (x86)\Abyssmedia
          2013-06-28 19:59:11 -------- d-----w- C:\Users\Notebook Tony\AppData\Local\CyberLink
          2013-06-27 21:57:53 96168 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
          2013-06-27 21:30:57 -------- d-----w- C:\Users\Notebook Tony\AppData\Local\Programs
          2013-06-27 21:23:28 -------- d-----w- C:\Program Files\CCleaner
          .
          ==================== Find3M ====================
          .
          2013-06-27 21:57:41 867240 ----a-w- C:\Windows\SysWow64\npdeployJava1.dll
          2013-06-27 21:57:41 789416 ----a-w- C:\Windows\SysWow64\deployJava1.dll
          2013-06-18 14:31:37 71048 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
          2013-06-18 14:31:37 692104 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
          2013-06-11 23:43:37 1767936 ----a-w- C:\Windows\SysWow64\wininet.dll
          2013-06-11 23:43:00 2877440 ----a-w- C:\Windows\SysWow64\jscript9.dll
          2013-06-11 23:42:58 61440 ----a-w- C:\Windows\SysWow64\iesetup.dll
          2013-06-11 23:42:58 109056 ----a-w- C:\Windows\SysWow64\iesysprep.dll
          2013-06-11 23:26:20 2241024 ----a-w- C:\Windows\System32\wininet.dll
          2013-06-11 23:25:16 3958784 ----a-w- C:\Windows\System32\jscript9.dll
          2013-06-11 23:25:13 67072 ----a-w- C:\Windows\System32\iesetup.dll
          2013-06-11 23:25:13 136704 ----a-w- C:\Windows\System32\iesysprep.dll
          2013-06-11 22:51:45 71680 ----a-w- C:\Windows\SysWow64\RegisterIEPKEYs.exe
          2013-06-11 22:50:58 89600 ----a-w- C:\Windows\System32\RegisterIEPKEYs.exe
          2013-06-07 03:22:18 2706432 ----a-w- C:\Windows\System32\mshtml.tlb
          2013-06-07 02:37:52 2706432 ----a-w- C:\Windows\SysWow64\mshtml.tlb
          2013-05-13 05:51:01 184320 ----a-w- C:\Windows\System32\cryptsvc.dll
          2013-05-13 05:51:00 1464320 ----a-w- C:\Windows\System32\crypt32.dll
          2013-05-13 05:51:00 139776 ----a-w- C:\Windows\System32\cryptnet.dll
          2013-05-13 05:50:40 52224 ----a-w- C:\Windows\System32\certenc.dll
          2013-05-13 04:45:55 140288 ----a-w- C:\Windows\SysWow64\cryptsvc.dll
          2013-05-13 04:45:55 1160192 ----a-w- C:\Windows\SysWow64\crypt32.dll
          2013-05-13 04:45:55 103936 ----a-w- C:\Windows\SysWow64\cryptnet.dll
          2013-05-13 03:43:55 1192448 ----a-w- C:\Windows\System32\certutil.exe
          2013-05-13 03:08:10 903168 ----a-w- C:\Windows\SysWow64\certutil.exe
          2013-05-13 03:08:06 43008 ----a-w- C:\Windows\SysWow64\certenc.dll
          2013-05-10 05:49:27 30720 ----a-w- C:\Windows\System32\cryptdlg.dll
          2013-05-10 03:20:54 24576 ----a-w- C:\Windows\SysWow64\cryptdlg.dll
          2013-05-08 06:39:01 1910632 ----a-w- C:\Windows\System32\drivers\tcpip.sys
          .
          ============= FINISH: 21:22:18,80 ===============

          Comment


          • #6
            Schakel je beveiligingssoftware uit.

            Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkwaardig probleem.

            Open een kladblokbestand.
            Kopieer het onderstaande en plak dit in het kladblokbestand.
            Sla het kladblokbestand op als CFScript.txt
            Code:
            KillAll::
            ClearJavaCache::
            DDS::
            Trusted Zone: otys.nl\bo01
            Trusted Zone: otys.nl\bo02
            Trusted Zone: otys.nl\bo03
            Trusted Zone: otys.nl\bo04
            Trusted Zone: otys.nl\bo11
            Trusted Zone: otys.nl\bo12
            Trusted Zone: otys.nl\bo13
            Trusted Zone: otys.nl\bo14
            Trusted Zone: otys.nl\bo15
            Trusted Zone: otys.nl\bo16
            Sleep nu het bestand CFScript.txt in het bestand ComboFix.exe



            ComboFix zal opnieuw starten.
            Als Combofix vraagt om een update, dan staat je dit toe.

            Wanneer ComboFix klaar is, dit kan na een herstart zijn, opent er een logfile. Post de inhoud van de logfile.

            Maak een nieuwe DDS log en post deze ook.
            Malware Research [email protected] (MBAM) ..... ASAP & Unite Member
            E Dev * McAfee verwijderen. * Ccleaner * E-Peek

            Comment


            • #7
              Hoi emphyrio,

              Iets gaat er niet goed. Ik je script naar combofix gesleept en hij heeft alles uitgevoerd. De PC starte opnieuw op, maar ergens aan het eind kreeg ik een melding dat de viruschecker iets had geblokkeerd. Ik had McAfee voor een uur uitgeschakeld, maar dit was wellicht net te kort. Ik heb wel gezegd dat de blokkade omgedaan moest worden gemaakt. Nu heb ik dat logje van combofix, maar die dds wil niet opstarten omdat het gaat om een ongeldige bewerking op een registersleutel is aangemerkt is om verwijderd te worden?? geen idee wat dit nu betekent?

              Hieronder in ieder geval de combofix log: (ik doe dit nu trouwens allemaal vanuit de PC die zo traag liep en die traagheid is er in ieder geval niet meer!)


              ComboFix 13-07-27.01 - Notebook Tony 27-07-2013 21:50:07.2.1 - x64
              Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.1979.739 [GMT 2:00]
              Gestart vanuit: c:\users\Notebook Tony\Desktop\ComboFix.exe
              gebruikte Opdracht switches :: c:\users\Notebook Tony\Desktop\CFScript.txt
              AV: McAfee Antivirus en antispyware *Disabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
              FW: McAfee Firewall *Disabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
              SP: McAfee Antivirus en antispyware *Disabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
              SP: Spybot - Search and Destroy *Disabled/Updated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
              SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
              .
              .
              (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
              .
              .
              c:\windows\wininit.ini
              .
              .
              (((((((((((((((((((( Bestanden Gemaakt van 2013-06-27 to 2013-07-27 ))))))))))))))))))))))))))))))
              .
              .
              2013-07-23 17:40 . 2013-07-23 19:06 -------- d-----w- c:\programdata\Spybot - Search & Destroy
              2013-07-23 17:39 . 2013-07-27 20:02 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy 2
              2013-07-11 21:20 . 2013-05-27 05:50 1011712 ----a-w- c:\program files\Windows Defender\MpSvc.dll
              2013-07-11 21:20 . 2013-05-27 05:50 571904 ----a-w- c:\program files\Windows Defender\MpClient.dll
              2013-07-11 21:20 . 2013-05-27 05:50 314880 ----a-w- c:\program files\Windows Defender\MpCommu.dll
              2013-07-11 21:20 . 2013-05-27 04:57 4608 ----a-w- c:\program files (x86)\Windows Defender\MsMpLics.dll
              2013-07-11 21:20 . 2013-05-27 04:57 54784 ----a-w- c:\program files (x86)\Windows Defender\MpOAV.dll
              2013-07-11 21:20 . 2013-05-27 04:57 392704 ----a-w- c:\program files (x86)\Windows Defender\MpClient.dll
              2013-07-11 21:20 . 2013-05-27 03:15 9216 ----a-w- c:\program files (x86)\Windows Defender\MpAsDesc.dll
              2013-07-11 21:20 . 2013-06-04 06:00 624128 ----a-w- c:\windows\system32\qedit.dll
              2013-07-11 21:20 . 2013-06-04 04:53 509440 ----a-w- c:\windows\SysWow64\qedit.dll
              2013-07-11 21:20 . 2013-05-06 06:03 1887744 ----a-w- c:\windows\system32\WMVDECOD.DLL
              2013-07-11 21:19 . 2013-05-06 04:56 1620480 ----a-w- c:\windows\SysWow64\WMVDECOD.DLL
              2013-07-11 21:17 . 2013-06-05 03:34 3153920 ----a-w- c:\windows\system32\win32k.sys
              2013-07-11 21:17 . 2013-04-10 05:46 1367040 ----a-w- c:\program files\Common Files\Microsoft Shared\ink\journal.dll
              2013-07-11 21:17 . 2013-04-10 05:03 936448 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\ink\journal.dll
              2013-07-11 21:15 . 2013-04-09 23:34 1247744 ----a-w- c:\windows\SysWow64\DWrite.dll
              2013-07-11 21:15 . 2013-04-02 22:51 1643520 ----a-w- c:\windows\system32\DWrite.dll
              2013-07-11 20:54 . 2013-07-11 20:55 -------- d-----w- c:\program files (x86)\Total Video Converter
              2013-07-08 22:00 . 2013-07-08 22:03 -------- d-----w- c:\users\Notebook Tony\www.apowersoft.com
              2013-06-29 20:36 . 2013-06-29 20:51 -------- d-----w- c:\users\Notebook Tony\AppData\Local\Google
              2013-06-29 20:36 . 2013-06-29 20:36 -------- d-----w- c:\program files (x86)\Google
              2013-06-29 19:04 . 2013-06-29 19:04 1045072 ----a-w- c:\program files\uTorrent.exe
              2013-06-29 19:03 . 2013-06-29 20:11 -------- d-----w- c:\users\Notebook Tony\AppData\Roaming\uTorrent
              2013-06-29 19:00 . 2013-06-29 19:00 -------- d-----w- c:\program files\hjsplit
              2013-06-29 18:44 . 2013-06-29 18:44 -------- d-----w- c:\program files (x86)\iWisoft Free Video Converter
              2013-06-29 18:37 . 2013-06-29 18:37 -------- d-----w- c:\program files (x86)\iWisoft Free Video Downloader
              2013-06-29 18:06 . 2013-07-14 20:52 -------- d-----w- c:\users\Notebook Tony\AppData\Roaming\Apple Computer
              2013-06-29 18:06 . 2013-06-29 18:06 -------- d-----w- c:\users\Notebook Tony\AppData\Local\Apple Computer
              2013-06-29 18:05 . 2012-08-21 11:01 33240 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
              2013-06-29 18:05 . 2013-06-29 18:05 -------- dc----w- c:\windows\system32\DRVSTORE
              2013-06-29 18:04 . 2013-06-29 18:04 -------- d-----w- c:\program files\iPod
              2013-06-29 18:04 . 2013-06-29 18:05 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
              2013-06-29 18:04 . 2013-06-29 18:05 -------- d-----w- c:\program files\iTunes
              2013-06-29 18:04 . 2013-06-29 18:05 -------- d-----w- c:\program files (x86)\iTunes
              2013-06-29 18:04 . 2013-06-29 18:04 -------- d-----w- c:\programdata\Apple Computer
              2013-06-29 18:01 . 2013-06-29 18:01 -------- d-----w- c:\users\Notebook Tony\AppData\Local\Apple
              2013-06-29 18:01 . 2013-06-29 18:01 -------- d-----w- c:\program files (x86)\Apple Software Update
              2013-06-29 18:00 . 2013-06-29 18:00 -------- d-----w- c:\program files\Common Files\Apple
              2013-06-29 18:00 . 2013-06-29 18:00 -------- d-----w- c:\program files\Bonjour
              2013-06-29 18:00 . 2013-06-29 18:00 -------- d-----w- c:\program files (x86)\Bonjour
              2013-06-29 18:00 . 2013-06-29 18:04 -------- d-----w- c:\program files (x86)\Common Files\Apple
              2013-06-29 18:00 . 2013-06-29 18:01 -------- d-----w- c:\programdata\Apple
              2013-06-29 17:57 . 2013-06-29 17:57 -------- d-----w- c:\program files (x86)\Gabest
              2013-06-29 17:57 . 2011-05-30 13:42 255488 ----a-w- c:\windows\system32\xvidvfw.dll
              2013-06-29 17:57 . 2011-05-23 07:49 173568 ----a-w- c:\windows\system32\xvid.ax
              2013-06-29 17:57 . 2011-05-23 07:45 696832 ----a-w- c:\windows\system32\xvidcore.dll
              2013-06-29 17:57 . 2009-09-29 18:57 758018 ----a-w- c:\windows\SysWow64\xvidcore.dll
              2013-06-29 17:57 . 2008-12-04 19:46 180224 ----a-w- c:\windows\SysWow64\xvidvfw.dll
              2013-06-29 17:57 . 2008-10-08 08:16 139264 ----a-w- c:\windows\SysWow64\xvid.ax
              2013-06-29 17:57 . 2013-06-29 17:57 -------- d-----w- c:\program files (x86)\Xvid
              2013-06-29 17:56 . 2013-06-29 17:56 -------- d-----w- c:\program files (x86)\AviSynth 2.5
              2013-06-29 17:55 . 2013-06-29 17:57 -------- d-----w- c:\program files (x86)\AVI ReComp
              2013-06-29 17:53 . 2013-06-29 17:53 -------- d-----w- c:\program files\VirtualDub-1.9.11
              2013-06-29 17:44 . 2013-06-30 21:53 -------- d-----w- c:\users\Notebook Tony\AppData\Roaming\AVI ReComp
              2013-06-29 17:43 . 2013-06-29 17:43 -------- d-----w- c:\program files (x86)\Abyssmedia
              2013-06-28 19:59 . 2013-06-28 19:59 -------- d-----w- c:\users\Notebook Tony\AppData\Roaming\CyberLink
              2013-06-28 19:59 . 2013-06-28 19:59 -------- d-----w- c:\users\Public\CyberLink
              2013-06-28 19:59 . 2013-06-28 19:59 -------- d-----w- c:\users\Notebook Tony\AppData\Local\CyberLink
              2013-06-27 21:58 . 2013-06-27 21:58 -------- d-----w- c:\program files (x86)\Common Files\Java
              2013-06-27 21:57 . 2013-06-27 21:57 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
              2013-06-27 21:57 . 2013-06-27 21:57 -------- d-----w- c:\program files (x86)\Java
              2013-06-27 21:30 . 2013-06-27 21:30 -------- d-----w- c:\users\Notebook Tony\AppData\Local\Programs
              2013-06-27 21:23 . 2013-06-27 21:23 -------- d-----w- c:\program files\CCleaner
              .
              .
              .
              ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
              .
              2013-07-23 12:57 . 2010-05-14 08:35 78185248 ----a-w- c:\windows\system32\MRT.exe
              2013-06-27 21:57 . 2012-11-07 08:06 867240 ----a-w- c:\windows\SysWow64\npdeployJava1.dll
              2013-06-27 21:57 . 2010-05-20 20:20 789416 ----a-w- c:\windows\SysWow64\deployJava1.dll
              2013-06-18 14:31 . 2012-08-26 18:33 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
              2013-06-18 14:31 . 2011-11-14 11:53 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
              2013-05-13 05:51 . 2013-06-18 14:20 184320 ----a-w- c:\windows\system32\cryptsvc.dll
              2013-05-13 05:51 . 2013-06-18 14:20 1464320 ----a-w- c:\windows\system32\crypt32.dll
              2013-05-13 05:51 . 2013-06-18 14:20 139776 ----a-w- c:\windows\system32\cryptnet.dll
              2013-05-13 05:50 . 2013-06-18 14:20 52224 ----a-w- c:\windows\system32\certenc.dll
              2013-05-13 04:45 . 2013-06-18 14:20 1160192 ----a-w- c:\windows\SysWow64\crypt32.dll
              2013-05-13 04:45 . 2013-06-18 14:20 140288 ----a-w- c:\windows\SysWow64\cryptsvc.dll
              2013-05-13 04:45 . 2013-06-18 14:20 103936 ----a-w- c:\windows\SysWow64\cryptnet.dll
              2013-05-13 03:43 . 2013-06-18 14:20 1192448 ----a-w- c:\windows\system32\certutil.exe
              2013-05-13 03:08 . 2013-06-18 14:20 903168 ----a-w- c:\windows\SysWow64\certutil.exe
              2013-05-13 03:08 . 2013-06-18 14:20 43008 ----a-w- c:\windows\SysWow64\certenc.dll
              2013-05-10 05:49 . 2013-06-18 14:20 30720 ----a-w- c:\windows\system32\cryptdlg.dll
              2013-05-10 03:20 . 2013-06-18 14:20 24576 ----a-w- c:\windows\SysWow64\cryptdlg.dll
              2013-05-08 06:39 . 2013-06-18 14:21 1910632 ----a-w- c:\windows\system32\drivers\tcpip.sys
              .
              .
              ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
              .
              .
              *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
              REGEDIT4
              .
              [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
              "LightScribe Control Panel"="c:\program files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe" [2009-08-20 2363392]
              "IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-06-24 1840424]
              "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
              "QlbCtrl.exe"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2009-08-20 322104]
              "NortonOnlineBackupReminder"="c:\program files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" [2009-06-29 600936]
              "Easybits Recovery"="c:\program files (x86)\EasyBits For Kids\ezRecover.exe" [2009-09-02 60464]
              "HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576]
              "WirelessAssistant"="c:\program files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2009-07-23 498744]
              "NBKeyScan"="c:\program files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-06-08 2221352]
              "HPUsageTracking"="c:\program files (x86)\HP\HP UT\bin\hppusg.exe" [2009-05-11 24576]
              "mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2010-11-22 1484856]
              "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]
              "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
              "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-05-31 152392]
              .
              [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
              "ConsentPromptBehaviorAdmin"= 5 (0x5)
              "ConsentPromptBehaviorUser"= 3 (0x3)
              "EnableUIADesktopToggle"= 0 (0x0)
              "SoftwareSASGeneration"= 1 (0x1)
              .
              [hkey_local_machine\software\Wow6432Node\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
              .
              [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
              "mixer"=wdmaud.drv
              .
              [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
              BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean64.exe
              .
              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
              @=""
              .
              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
              @=""
              .
              [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
              @="Driver"
              .
              R3 Com4QLBEx;Com4QLBEx;c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe;c:\program files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [x]
              R3 e.dentifier2;SmartCard Reader ABN AMRO e.dentifier2;c:\windows\system32\DRIVERS\aabed2.sys;c:\windows\SYSNATIVE\DRIVERS\aabed2.sys [x]
              R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [x]
              R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys;c:\windows\SYSNATIVE\drivers\mferkdet.sys [x]
              R3 NETw1v64;Intel(R) Wireless WiFi Link 1000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\NETw1v64.sys;c:\windows\SYSNATIVE\DRIVERS\NETw1v64.sys [x]
              R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys;c:\windows\SYSNATIVE\DRIVERS\netw5v64.sys [x]
              R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
              R3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192su.sys;c:\windows\SYSNATIVE\DRIVERS\RTL8192su.sys [x]
              R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTAZL6.SYS [x]
              R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTDPV6.SYS [x]
              R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTCNX T6.SYS [x]
              R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
              R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
              R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
              R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys;c:\windows\SYSNATIVE\DRIVERS\yk62x64.sys [x]
              S1 mfenlfk;McAfee NDIS Light Filter;c:\windows\system32\DRIVERS\mfenlfk.sys;c:\windows\SYSNATIVE\DRIVERS\mfenlfk.sys [x]
              S1 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys;c:\windows\SYSNATIVE\drivers\mfewfpk.sys [x]
              S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b87ff64c8b56b7db\AE STSr64.exe;c:\windows\SYSNATIVE\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b87ff64c8b56b7d b\AESTSr64.exe [x]
              S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET \Framework64\v4.0.30319\mscorsvw.exe [x]
              S2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
              S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [x]
              S2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [x]
              S2 McNaiAnn;McAfee VirusScan Announcer;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [x]
              S2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe [x]
              S2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe;c:\windows\SYSNATIVE\mfevtps.exe [x]
              S2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys;c:\windows\SYSNATIVE\Drivers\SSPORT.sys [x]
              S3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys;c:\windows\SYSNATIVE\drivers\cfwids.sys [x]
              S3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys;c:\windows\SYSNATIVE\drivers\IntcHdmi.sys [x]
              S3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys;c:\windows\SYSNATIVE\drivers\mfefirek.sys [x]
              S3 NETw5s64;Intel(R) Wireless WiFi Link adapter stuurprogramma onder Windows 7 64 Bit;c:\windows\system32\DRIVERS\NETw5s64.sys;c:\windows\SYSNATIVE\DRIVERS\NETw5s64.sys [x]
              S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
              .
              .
              --- Andere Services/Drivers In Geheugen ---
              .
              *NewlyCreated* - WS2IFSL
              *Deregistered* - mfeavfk01
              .
              HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
              ezSharedSvc
              .
              [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
              2009-08-20 12:24 451872 ----a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe
              .
              Inhoud van de 'Gedeelde Taken' map
              .
              2013-07-27 c:\windows\Tasks\Adobe Flash Player Updater.job
              - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-26 14:31]
              .
              .
              --------- X64 Entries -----------
              .
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
              "IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-09-10 165912]
              "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-09-10 387608]
              "Persistence"="c:\windows\system32\igfxpers.exe" [2009-09-10 365592]
              "SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
              "SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2009-08-13 456192]
              "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-11-15 171520]
              .
              ------- Bijkomende Scan -------
              .
              uStart Page = hxxp://google.nl/
              uLocal Page = c:\windows\system32\blank.htm
              mLocal Page = c:\windows\SysWOW64\blank.htm
              uInternet Settings,ProxyOverride = *.local
              IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
              IE: E&xporteren naar Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
              TCP: DhcpNameServer = 192.168.1.254 195.241.77.55 195.241.77.58
              .
              - - - - ORPHANS VERWIJDERD - - - -
              .
              AddRemove-EasyBits Magic Desktop - c:\windows\system32\ezMDUninstall.exe
              .
              .
              .
              --------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
              @Denied: (A 2) (Everyone)
              @="FlashBroker"
              "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe ,-101"
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
              "Enabled"=dword:00000001
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
              @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe"
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
              @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
              @Denied: (A 2) (Everyone)
              @="IFlashBroker5"
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
              @="{00020424-0000-0000-C000-000000000046}"
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
              @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
              "Version"="1.0"
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
              @Denied: (A 2) (Everyone)
              @="FlashBroker"
              "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe ,-101"
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
              "Enabled"=dword:00000001
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
              @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe"
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
              @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
              @Denied: (A 2) (Everyone)
              @="Shockwave Flash Object"
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
              @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
              "ThreadingModel"="Apartment"
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
              @="0"
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
              @="ShockwaveFlash.ShockwaveFlash.11"
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
              @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
              @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
              @="1.0"
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
              @="ShockwaveFlash.ShockwaveFlash"
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
              @Denied: (A 2) (Everyone)
              @="Macromedia Flash Factory Object"
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
              @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx"
              "ThreadingModel"="Apartment"
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
              @="FlashFactory.FlashFactory.1"
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
              @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1"
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
              @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
              @="1.0"
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
              @="FlashFactory.FlashFactory"
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
              @Denied: (A 2) (Everyone)
              @="IFlashBroker5"
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
              @="{00020424-0000-0000-C000-000000000046}"
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
              @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
              "Version"="1.0"
              .
              [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
              "SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
              00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
              .
              [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
              @Denied: (Full) (Everyone)
              .
              ------------------------ Andere Aktieve Processen ------------------------
              .
              c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
              c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe
              c:\program files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
              c:\windows\SysWOW64\IoctlSvc.exe
              c:\program files (x86)\CyberLink\Shared files\RichVideo.exe
              c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
              .
              **************************************************************************
              .
              Voltooingstijd: 2013-07-27 22:10:47 - machine werd herstart
              ComboFix-quarantined-files.txt 2013-07-27 20:10
              ComboFix2.txt 2013-07-27 19:21
              .
              Pre-Run: 131.345.514.496 bytes beschikbaar
              Post-Run: 131.291.475.968 bytes beschikbaar
              .
              - - End Of File - - E3011DE28C01E23B0BE45CC4D4AE2F5C
              0E64FBE2A2549D814A251B7640F801CC

              Comment


              • #8
                Gewoon je pc herstarten, plaats dan een verse DDS log.
                Malware Research [email protected] (MBAM) ..... ASAP & Unite Member
                E Dev * McAfee verwijderen. * Ccleaner * E-Peek

                Comment


                • #9
                  Ja herstarten deed 't m! ;^)

                  Hier de dds


                  (Ver_2012-11-05.02) - NTFS_AMD64
                  Internet Explorer: 10.0.9200.16635 BrowserJavaVersion: 10.25.2
                  Run by Notebook Tony at 22:32:05 on 2013-07-27
                  Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.1979.872 [GMT 2:00]
                  .
                  AV: McAfee Antivirus en antispyware *Disabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
                  SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
                  SP: McAfee Antivirus en antispyware *Disabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
                  FW: McAfee Firewall *Disabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
                  .
                  ============== Running Processes ===============
                  .
                  C:\Windows\system32\lsm.exe
                  C:\Windows\system32\svchost.exe -k DcomLaunch
                  C:\Windows\system32\svchost.exe -k RPCSS
                  C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
                  C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
                  C:\Windows\system32\svchost.exe -k LocalService
                  C:\Windows\system32\svchost.exe -k netsvcs
                  C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b87ff64c8b56b7db\STacSV64.e xe
                  C:\Windows\system32\svchost.exe -k NetworkService
                  C:\Windows\System32\spoolsv.exe
                  C:\Windows\system32\taskeng.exe
                  C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
                  C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
                  C:\Windows\system32\taskhost.exe
                  C:\Windows\system32\Dwm.exe
                  C:\Windows\Explorer.EXE
                  C:\Windows\System32\hkcmd.exe
                  C:\Windows\System32\igfxpers.exe
                  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                  C:\Program Files\IDT\WDM\sttray64.exe
                  C:\Program Files\Java\jre6\bin\jusched.exe
                  C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
                  C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe
                  C:\Program Files\Windows Sidebar\sidebar.exe
                  C:\Windows\system32\igfxsrvc.exe
                  C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
                  C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe
                  C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b87ff64c8b56b7db\AESTSr64.e xe
                  C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
                  C:\Program Files (x86)\Hp\HP UT\bin\hppusg.exe
                  C:\Program Files\McAfee.com\Agent\mcagent.exe
                  C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
                  C:\Program Files (x86)\iTunes\iTunesHelper.exe
                  C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
                  C:\Program Files\Bonjour\mDNSResponder.exe
                  C:\Windows\system32\spool\DRIVERS\x64\3\HP1006MC.EXE
                  C:\Windows\SysWOW64\svchost.exe -k netsvcs
                  C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
                  C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
                  C:\Windows\system32\mfevtps.exe
                  C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe
                  C:\Windows\SysWOW64\IoctlSvc.exe
                  C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
                  C:\Windows\system32\svchost.exe -k imgsvc
                  C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe
                  C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
                  C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
                  C:\Windows\system32\taskeng.exe
                  C:\Windows\system32\SearchIndexer.exe
                  C:\Program Files\iPod\bin\iPodService.exe
                  C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
                  C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe
                  C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
                  C:\Windows\system32\wbem\wmiprvse.exe
                  C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
                  C:\Windows\servicing\TrustedInstaller.exe
                  C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
                  C:\Program Files\Windows Media Player\wmpnetwk.exe
                  C:\Windows\System32\svchost.exe -k LocalServicePeerNet
                  C:\Program Files (x86)\Hewlett-Packard\Shared\hpqToaster.exe
                  C:\Windows\system32\wbem\wmiprvse.exe
                  C:\Windows\System32\cscript.exe
                  .
                  ============== Pseudo HJT Report ===============
                  .
                  uStart Page = hxxp://google.nl/
                  BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - <orphaned>
                  BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
                  BHO: scriptproxy: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20110112132633.dll
                  BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
                  BHO: {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - <orphaned>
                  uRun: [LightScribe Control Panel] C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
                  uRun: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
                  uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
                  mRun: [QlbCtrl.exe] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
                  mRun: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED
                  mRun: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
                  mRun: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
                  mRun: [WirelessAssistant] C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
                  mRun: [NBKeyScan] "C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
                  mRun: [HPUsageTracking] C:\Program Files (x86)\HP\HP UT\bin\hppusg.exe "C:\Program Files (x86)\HP\HP UT\"
                  mRun: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
                  mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
                  mRun: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
                  mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
                  uPolicies-Explorer: NoDrives = dword:0
                  mPolicies-Explorer: NoDrives = dword:0
                  mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
                  mPolicies-System: ConsentPromptBehaviorUser = dword:3
                  mPolicies-System: EnableUIADesktopToggle = dword:0
                  mPolicies-System: SoftwareSASGeneration = dword:1
                  IE: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr/200
                  IE: E&xporteren naar Microsoft Excel - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
                  IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - <orphaned>
                  IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
                  DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
                  TCP: NameServer = 192.168.1.254 195.241.77.55 195.241.77.58
                  TCP: Interfaces\{13ECD552-9E77-4A10-8A7E-68B8673F8C39} : DHCPNameServer = 192.168.1.254 195.241.77.55 195.241.77.58
                  TCP: Interfaces\{E19E4AA8-F5D3-4FCA-8AAB-013FCBF1D1B9} : DHCPNameServer = 192.168.1.254 195.241.77.55 195.241.77.58
                  TCP: Interfaces\{E19E4AA8-F5D3-4FCA-8AAB-013FCBF1D1B9}\A5978554C4 : DHCPNameServer = 192.168.1.254 195.241.77.55 195.241.77.58
                  TCP: Interfaces\{E19E4AA8-F5D3-4FCA-8AAB-013FCBF1D1B9}\A597F507279667164756F5738443D4A464 : DHCPNameServer = 192.168.1.254 195.241.77.55 195.241.77.58
                  TCP: Interfaces\{E19E4AA8-F5D3-4FCA-8AAB-013FCBF1D1B9}\D454451443 : DHCPNameServer = 192.168.1.254 195.241.77.55 195.241.77.58
                  SSODL: WebCheck - <orphaned>
                  SEH: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll
                  mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files (x86)\Common Files\LightScribe\LSRunOnce.exe"
                  x64-BHO: scriptproxy: {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20110112132633.dll
                  x64-BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                  x64-Run: [IgfxTray] C:\Windows\System32\igfxtray.exe
                  x64-Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe
                  x64-Run: [Persistence] C:\Windows\System32\igfxpers.exe
                  x64-Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe
                  x64-Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray64.exe
                  x64-Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
                  x64-DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
                  x64-DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
                  x64-DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
                  x64-Notify: igfxcui - igfxdev.dll
                  x64-SSODL: WebCheck - <orphaned>
                  .
                  ============= SERVICES / DRIVERS ===============
                  .
                  R0 mfehidk;McAfee Inc. mfehidk;C:\Windows\System32\drivers\mfehidk.sys [2011-1-12 529128]
                  R1 mfenlfk;McAfee NDIS Light Filter;C:\Windows\System32\drivers\mfenlfk.sys [2011-1-12 75032]
                  R1 mfewfpk;McAfee Inc. mfewfpk;C:\Windows\System32\drivers\mfewfpk.sys [2011-1-12 283360]
                  R2 AESTFilters;Andrea ST Filters Service;C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b87ff64c8b56b7db\AE STSr64.exe [2009-11-5 89600]
                  R2 ezSharedSvc;Easybits Shared Services for Windows;C:\Windows\System32\svchost.exe -k netsvcs [2009-7-14 27136]
                  R2 Fabs;FABS - Helping agent for MAGIX media database;C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [2009-8-27 1253376]
                  R2 McMPFSvc;McAfee Personal Firewall Service;C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2011-1-12 355440]
                  R2 McProxy;McAfee Proxy Service;C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2011-1-12 355440]
                  R2 McShield;McShield;C:\Program Files\Common Files\McAfee\SystemCore\mcshield.exe [2011-1-12 200056]
                  R2 mfefire;McAfee Firewall Core Service;C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe [2011-1-12 245352]
                  R2 mfevtp;McAfee Validation Trust Protection Service;C:\Windows\System32\mfevtps.exe [2011-1-12 149032]
                  R2 SSPORT;SSPORT;C:\Windows\System32\drivers\SSPORT.sys [2007-12-11 11576]
                  R3 cfwids;McAfee Inc. cfwids;C:\Windows\System32\drivers\cfwids.sys [2011-1-12 62800]
                  R3 Com4QLBEx;Com4QLBEx;C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-11-15 228408]
                  R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;C:\Windows\System32\drivers\IntcHdmi.sys [2009-7-10 139264]
                  R3 mfeavfk;McAfee Inc. mfeavfk;C:\Windows\System32\drivers\mfeavfk.sys [2011-1-12 190136]
                  R3 mfefirek;McAfee Inc. mfefirek;C:\Windows\System32\drivers\mfefirek.sys [2011-1-12 441328]
                  R3 NETw5s64;Intel(R) Wireless WiFi Link adapter stuurprogramma onder Windows 7 64 Bit;C:\Windows\System32\drivers\NETw5s64.sys [2010-1-13 7675392]
                  R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\System32\drivers\Rt64win7.sys [2009-11-5 215040]
                  S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
                  S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]
                  S2 McNaiAnn;McAfee VirusScan Announcer;C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2011-1-12 355440]
                  S3 e.dentifier2;SmartCard Reader ABN AMRO e.dentifier2;C:\Windows\System32\drivers\aabed2.sys [2008-3-20 28672]
                  S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2008-8-7 3276800]
                  S3 mferkdet;McAfee Inc. mferkdet;C:\Windows\System32\drivers\mferkdet.sys [2011-1-12 94864]
                  S3 NETw1v64;Intel(R) Wireless WiFi Link 1000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\System32\drivers\NETw1v64.sys [2009-11-5 7058432]
                  S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\System32\drivers\netw5v64.sys [2009-6-10 5434368]
                  S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\System32\drivers\RtsUStor.sys [2009-11-5 225280]
                  S3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;C:\Windows\System32\drivers\RTL8192su.sys [2010-11-25 694888]
                  S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\System32\drivers\VSTAZL6.SYS [2009-7-14 292864]
                  S3 SrvHsfV92;SrvHsfV92;C:\Windows\System32\drivers\VSTDPV6.SYS [2009-7-14 1485312]
                  S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\System32\drivers\VSTCNXT6.SYS [2009-7-14 740864]
                  S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2011-6-23 59392]
                  S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys [2012-12-13 54784]
                  S3 WatAdminSvc;Windows Activation Technologies-service;C:\Windows\System32\Wat\WatAdminSvc.exe [2010-5-21 1255736]
                  S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\System32\drivers\yk62x64.sys [2009-6-10 389120]
                  .
                  =============== Created Last 30 ================
                  .
                  2013-07-27 20:03:38 -------- d-----w- C:\$RECYCLE.BIN
                  2013-07-27 19:00:14 98816 ----a-w- C:\Windows\sed.exe
                  2013-07-27 19:00:14 256000 ----a-w- C:\Windows\PEV.exe
                  2013-07-27 19:00:14 208896 ----a-w- C:\Windows\MBR.exe
                  2013-07-23 17:40:28 -------- d-----w- C:\ProgramData\Spybot - Search & Destroy
                  2013-07-23 17:39:43 -------- d-----w- C:\Program Files (x86)\Spybot - Search & Destroy 2
                  2013-07-11 21:20:04 571904 ----a-w- C:\Program Files\Windows Defender\MpClient.dll
                  2013-07-11 21:20:04 1011712 ----a-w- C:\Program Files\Windows Defender\MpSvc.dll
                  2013-07-11 21:20:03 9216 ----a-w- C:\Program Files (x86)\Windows Defender\MpAsDesc.dll
                  2013-07-11 21:20:03 54784 ----a-w- C:\Program Files (x86)\Windows Defender\MpOAV.dll
                  2013-07-11 21:20:03 4608 ----a-w- C:\Program Files (x86)\Windows Defender\MsMpLics.dll
                  2013-07-11 21:20:03 392704 ----a-w- C:\Program Files (x86)\Windows Defender\MpClient.dll
                  2013-07-11 21:20:03 314880 ----a-w- C:\Program Files\Windows Defender\MpCommu.dll
                  2013-07-11 21:20:01 624128 ----a-w- C:\Windows\System32\qedit.dll
                  2013-07-11 21:20:01 509440 ----a-w- C:\Windows\SysWow64\qedit.dll
                  2013-07-11 21:20:00 1887744 ----a-w- C:\Windows\System32\WMVDECOD.DLL
                  2013-07-11 21:19:59 1620480 ----a-w- C:\Windows\SysWow64\WMVDECOD.DLL
                  2013-07-11 21:17:26 3153920 ----a-w- C:\Windows\System32\win32k.sys
                  2013-07-11 21:17:14 1367040 ----a-w- C:\Program Files\Common Files\Microsoft Shared\ink\journal.dll
                  2013-07-11 21:17:13 936448 ----a-w- C:\Program Files (x86)\Common Files\Microsoft Shared\ink\journal.dll
                  2013-07-11 21:15:58 1643520 ----a-w- C:\Windows\System32\DWrite.dll
                  2013-07-11 21:15:58 1247744 ----a-w- C:\Windows\SysWow64\DWrite.dll
                  2013-07-11 20:54:34 -------- d-----w- C:\Program Files (x86)\Total Video Converter
                  2013-07-08 22:00:46 -------- d-----w- C:\Users\Notebook Tony\www.apowersoft.com
                  2013-06-29 20:36:55 -------- d-----w- C:\Users\Notebook Tony\AppData\Local\Google
                  2013-06-29 19:04:54 1045072 ----a-w- C:\Program Files\uTorrent.exe
                  2013-06-29 19:03:18 -------- d-----w- C:\Users\Notebook Tony\AppData\Roaming\uTorrent
                  2013-06-29 19:00:53 -------- d-----w- C:\Program Files\hjsplit
                  2013-06-29 18:44:47 -------- d-----w- C:\Program Files (x86)\iWisoft Free Video Converter
                  2013-06-29 18:37:23 -------- d-----w- C:\Program Files (x86)\iWisoft Free Video Downloader
                  2013-06-29 18:06:36 -------- d-----w- C:\Users\Notebook Tony\AppData\Local\Apple Computer
                  2013-06-29 18:05:45 33240 ----a-w- C:\Windows\System32\drivers\GEARAspiWDM.sys
                  2013-06-29 18:04:26 -------- d-----w- C:\Program Files\iPod
                  2013-06-29 18:04:25 -------- d-----w- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
                  2013-06-29 18:04:25 -------- d-----w- C:\Program Files\iTunes
                  2013-06-29 18:04:25 -------- d-----w- C:\Program Files (x86)\iTunes
                  2013-06-29 18:01:36 -------- d-----w- C:\Users\Notebook Tony\AppData\Local\Apple
                  2013-06-29 18:00:23 -------- d-----w- C:\Program Files\Bonjour
                  2013-06-29 18:00:23 -------- d-----w- C:\Program Files (x86)\Bonjour
                  2013-06-29 17:57:07 758018 ----a-w- C:\Windows\SysWow64\xvidcore.dll
                  2013-06-29 17:57:07 696832 ----a-w- C:\Windows\System32\xvidcore.dll
                  2013-06-29 17:57:07 255488 ----a-w- C:\Windows\System32\xvidvfw.dll
                  2013-06-29 17:57:07 180224 ----a-w- C:\Windows\SysWow64\xvidvfw.dll
                  2013-06-29 17:57:07 173568 ----a-w- C:\Windows\System32\xvid.ax
                  2013-06-29 17:57:07 139264 ----a-w- C:\Windows\SysWow64\xvid.ax
                  2013-06-29 17:57:06 -------- d-----w- C:\Program Files (x86)\Xvid
                  2013-06-29 17:56:05 -------- d-----w- C:\Program Files (x86)\AviSynth 2.5
                  2013-06-29 17:55:55 -------- d-----w- C:\Program Files (x86)\AVI ReComp
                  2013-06-29 17:53:29 -------- d-----w- C:\Program Files\VirtualDub-1.9.11
                  2013-06-29 17:44:48 -------- d-----w- C:\Users\Notebook Tony\AppData\Roaming\AVI ReComp
                  2013-06-29 17:43:41 -------- d-----w- C:\Program Files (x86)\Abyssmedia
                  2013-06-28 19:59:11 -------- d-----w- C:\Users\Notebook Tony\AppData\Local\CyberLink
                  2013-06-27 21:57:53 96168 ----a-w- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
                  2013-06-27 21:30:57 -------- d-----w- C:\Users\Notebook Tony\AppData\Local\Programs
                  2013-06-27 21:23:28 -------- d-----w- C:\Program Files\CCleaner
                  .
                  ==================== Find3M ====================
                  .
                  2013-06-27 21:57:41 867240 ----a-w- C:\Windows\SysWow64\npdeployJava1.dll
                  2013-06-27 21:57:41 789416 ----a-w- C:\Windows\SysWow64\deployJava1.dll
                  2013-06-18 14:31:37 71048 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
                  2013-06-18 14:31:37 692104 ----a-w- C:\Windows\SysWow64\FlashPlayerApp.exe
                  2013-06-11 23:43:37 1767936 ----a-w- C:\Windows\SysWow64\wininet.dll
                  2013-06-11 23:43:00 2877440 ----a-w- C:\Windows\SysWow64\jscript9.dll
                  2013-06-11 23:42:58 61440 ----a-w- C:\Windows\SysWow64\iesetup.dll
                  2013-06-11 23:42:58 109056 ----a-w- C:\Windows\SysWow64\iesysprep.dll
                  2013-06-11 23:26:20 2241024 ----a-w- C:\Windows\System32\wininet.dll
                  2013-06-11 23:25:16 3958784 ----a-w- C:\Windows\System32\jscript9.dll
                  2013-06-11 23:25:13 67072 ----a-w- C:\Windows\System32\iesetup.dll
                  2013-06-11 23:25:13 136704 ----a-w- C:\Windows\System32\iesysprep.dll
                  2013-06-11 22:51:45 71680 ----a-w- C:\Windows\SysWow64\RegisterIEPKEYs.exe
                  2013-06-11 22:50:58 89600 ----a-w- C:\Windows\System32\RegisterIEPKEYs.exe
                  2013-06-07 03:22:18 2706432 ----a-w- C:\Windows\System32\mshtml.tlb
                  2013-06-07 02:37:52 2706432 ----a-w- C:\Windows\SysWow64\mshtml.tlb
                  2013-05-13 05:51:01 184320 ----a-w- C:\Windows\System32\cryptsvc.dll
                  2013-05-13 05:51:00 1464320 ----a-w- C:\Windows\System32\crypt32.dll
                  2013-05-13 05:51:00 139776 ----a-w- C:\Windows\System32\cryptnet.dll
                  2013-05-13 05:50:40 52224 ----a-w- C:\Windows\System32\certenc.dll
                  2013-05-13 04:45:55 140288 ----a-w- C:\Windows\SysWow64\cryptsvc.dll
                  2013-05-13 04:45:55 1160192 ----a-w- C:\Windows\SysWow64\crypt32.dll
                  2013-05-13 04:45:55 103936 ----a-w- C:\Windows\SysWow64\cryptnet.dll
                  2013-05-13 03:43:55 1192448 ----a-w- C:\Windows\System32\certutil.exe
                  2013-05-13 03:08:10 903168 ----a-w- C:\Windows\SysWow64\certutil.exe
                  2013-05-13 03:08:06 43008 ----a-w- C:\Windows\SysWow64\certenc.dll
                  2013-05-10 05:49:27 30720 ----a-w- C:\Windows\System32\cryptdlg.dll
                  2013-05-10 03:20:54 24576 ----a-w- C:\Windows\SysWow64\cryptdlg.dll
                  2013-05-08 06:39:01 1910632 ----a-w- C:\Windows\System32\drivers\tcpip.sys
                  .
                  ============= FINISH: 22:42:41,05 ===============

                  Comment


                  • #10
                    Ok, ik zie géén abnormale zaken meer in je logs.

                    We gaan Combofix verwijderen...

                    Ga naar start > uitvoeren en kopieer en plak volgende command in het veld:

                    ComboFix /Uninstall

                    Zorg ervoor dat er dus een spatie is tussen Combofix en /
                    Daarna klik je op Enter.


                    Klik op de afbeelding om te vergroten....


                    Dit zal Combofix verwijderen+gerelateerde mappen en bestanden,
                    herstelt de klokinstellingen opnieuw, verbergt de bestandsextensies,
                    gaat verborgen bestanden en systeembestanden terug verbergen
                    en reset je Systeemherstel opnieuw.



                    Download OTC.exe (by OldTimer) naar je bureaublad.
                    (Dus : Opslaan, "Door je mappen bladeren" klikken, in de linkerkolom je bureaublad selecteren en "opslaan" klikken)
                    .
                    • Klik vervolgens met je rechtermuisknop op OTC.exe en kies voor Run as Administrator (Nederlands: Uitvoeren als Administrator) om het programma te starten.
                    • Klik nu op de knop "CleanUp!"
                    • Als je firewall, of een ander beveiligingsprogramma, een waarschuwing geeft dat OTC.exe internettoegang wil,
                      mag je dit toestaan, het programma heeft die connectie nodig.
                    • OTC zal als laatste vragen of je de computer herstarten wilt, dit mag je toestaan, hiermee verwijdert het zichzelf ook.

                    .
                    Nota: Het gebruik van OTC.exe zal alle gebruikte tools(inclusief bijbehorende logs en backupmappen) van je computer doen verwijderen.


                    Download of Update Ccleaner

                    Start CCleaner op.
                    • Run Ccleaner en klik in de linkse kolom op Opties
                    • Selecteer het tabblad Geavanceerd
                    • Haal het vinkje weg voor Verwijder alleen bestanden in Windows Temp-systeemmap die ouder zijn dan 24 uur
                    • Haal het vinkje weg voor Verwijder alleen bestanden in de Prullenbak die ouder zijn dan 24 uur
                    • Selecteer het tabblad Instellingen
                    • Haal het vinkje weg bij "Computer automatisch schoonmaken...."
                    • Klik in de linkse kolom op Cleaner.
                    • Klik dan achtereenvolgens op Analyseer en Schoonmaken.
                    • Klik vervolgens in de linkse kolom op Register
                    • Klik op Scan naar problemen.
                    • Als er fouten gevonden worden klik je op Herstel geselecteerde problemen en OK

                    .
                    Zijn er nog klachten?
                    Malware Research [email protected] (MBAM) ..... ASAP & Unite Member
                    E Dev * McAfee verwijderen. * Ccleaner * E-Peek

                    Comment


                    • #11
                      Top Emphyrio! Mijn dochter van 15 heeft een brede grijns op haar face en zegt dat'ie weer als een trein loopt!

                      Thanks a lot!!!!!!

                      Tony

                      Comment


                      • #12
                        Graag gedaan

                        Maar zeg haar ook maar op te passen met uTorrent : C:\Program Files\uTorrent.exe


                        1) Je mag alle losse bestanden en tools die we hebben gebruikt verwijderen.

                        2) Om herbesmetting te vermijden, kan je deze tips eens nalezen:

                        Het voorkomen van spyware-infecties en browserhijacking en Hoe voorkom ik een nieuwe infectie?

                        3) Om je PC een snelle onderhoudbeurt te geven, kan je deze tips eens lezen: Handleiding voor een schone PC

                        4) Allerlei tips en hints kan je hier raadplegen.


                        Ik zet het topic op opgelost.

                        Indien er niet meer gereageerd wordt, zal binnen een 3-tal dagen deze thread automatisch verplaatst worden
                        naar de sectie Opgeloste hijackthislogs en is een reactie niet meer mogelijk
                        Dit is gedaan om het forum netjes en overzichtelijk te houden.

                        Blijkt dat er toch nog problemen zijn, en je wil weer reageren in dit topic, dan stuur je me een privé bericht met verzoek om heropening.



                        Hebben we je goed geholpen? Overweeg eens een (vrijblijvende) donatie aan Nucia

                        Emphyrio
                        Malware Research [email protected] (MBAM) ..... ASAP & Unite Member
                        E Dev * McAfee verwijderen. * Ccleaner * E-Peek

                        Comment


                        • #13
                          Ja die Utorrent heb ik ook al tegen mijn oudste dochter van 20 gezegd. Maar ja dochters ............ :^)))

                          Groet,

                          Tony

                          Comment


                          • #14
                            Malware Research [email protected] (MBAM) ..... ASAP & Unite Member
                            E Dev * McAfee verwijderen. * Ccleaner * E-Peek

                            Comment

                            Sorry, you are not authorized to view this page
                            Working...
                            X