Wie wil naar onderstaand logje kijken en evt. advies geven?

Hallo Ben,

Hierbij de 2 logjes.

Tot op dit moment gaat alles nog oke met de pc. Maar dat heb ik wel vaker dat het een lange tijd goed gaat.

In het Hijack logje staan er bij 023 - Service vaak (file missing), wat houd dat in, behalve dat er files ontbreken.

ComboFix 11-08-26.04 - Arjen 26-08-2011 21:51:17.1.2 - x64

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.4095.2877

Gestart vanuit: c:\users\Arjen\Desktop\ComboFix.exe

AV: Lavasoft Ad-Watch Live! Anti-Virus *Disabled/Updated* {9FF26384-70D4-CE6B-3ECB-E759A6A40116}

AV: McAfee Antivirus en antispyware *Disabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}

FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}

SP: Lavasoft Ad-Watch Live! *Disabled/Updated* {24938260-56EE-C1E5-047B-DC2BDD234BAB}

SP: McAfee Antivirus en antispyware *Disabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

(((((((((((((((((((( Bestanden Gemaakt van 2011-07-26 to 2011-08-26 ))))))))))))))))))))))))))))))

2011-08-26 19:55 . 2011-08-26 19:55 ——– d—–w- c:\users\Default\AppData\Local\temp

2011-08-26 15:30 . 2011-07-09 05:26 2048 —-a-w- c:\windows\system32\tzres.dll

2011-08-26 15:30 . 2011-07-09 04:29 2048 —-a-w- c:\windows\SysWow64\tzres.dll

2011-08-26 15:22 . 2011-08-26 15:22 ——– d—–w- c:\users\Arjen\AppData\Roaming\Malwarebytes

2011-08-26 15:22 . 2011-07-06 17:52 41272 —-a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys

2011-08-26 15:22 . 2011-08-26 15:22 ——– d—–w- c:\programdata\Malwarebytes

2011-08-26 15:22 . 2011-08-26 15:22 ——– d—–w- c:\program files (x86)\Malwarebytes' Anti-Malware

2011-08-26 15:22 . 2011-07-06 17:52 25912 —-a-w- c:\windows\system32\drivers\mbam.sys

2011-08-26 15:05 . 2011-08-26 15:05 388096 —-a-r- c:\users\Arjen\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

2011-08-26 15:05 . 2011-08-26 15:05 ——– d—–w- c:\program files (x86)\Trend Micro

2011-08-26 15:01 . 2011-08-26 15:01 12872 —-a-w- c:\windows\system32\bootdelete.exe

2011-08-26 14:58 . 2011-08-26 14:59 ——– d—–w- c:\program files\CCleaner

2011-08-26 14:55 . 2011-08-26 14:42 16432 —-a-w- c:\windows\system32\lsdelete.exe

2011-08-26 14:54 . 2011-08-26 14:54 25160 —-a-w- c:\windows\system32\drivers\hitmanpro35.sys

2011-08-26 14:54 . 2011-08-26 15:01 ——– d—–w- c:\programdata\Hitman Pro

2011-08-26 14:47 . 2011-08-26 14:47 ——– d—–w- c:\users\Arjen\AppData\Roaming\McAfee

2011-08-26 14:45 . 2011-08-26 14:45 ——– d—–w- c:\users\Arjen\AppData\Local\Downloaded Installations

2011-08-26 14:42 . 2011-08-26 14:42 55384 —-a-w- c:\windows\system32\drivers\SBREDrv.sys

2011-08-26 14:40 . 2011-08-26 14:40 ——– dc—-w- c:\windows\system32\DRVSTORE

2011-08-26 14:40 . 2011-08-18 13:25 69376 —-a-w- c:\windows\system32\drivers\Lbd.sys

2011-08-26 14:40 . 2011-08-26 14:40 ——– d—–w- c:\programdata\Lavasoft

2011-08-26 14:40 . 2011-08-26 14:40 ——– d—–w- c:\program files (x86)\Lavasoft

2011-08-26 14:33 . 2011-08-16 06:48 8862544 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{144BE680-8AA4-4B1D-B5E0-3D781BCCB772}\mpengine.dll

2011-08-26 14:33 . 2011-05-24 17:14 270720 ——w- c:\windows\system32\MpSigStub.exe

2011-08-26 14:30 . 2009-06-30 08:37 33800 —-a-w- c:\windows\system32\drivers\pavboot64.sys

2011-08-26 14:30 . 2011-08-26 14:30 ——– d—–w- c:\program files (x86)\Panda Security

2011-08-26 14:15 . 2011-08-26 17:49 ——– d—–w- c:\windows\system32\wbem\repository

2011-08-14 22:23 . 2011-08-14 22:23 ——– d—–w- c:\users\Arjen\AppData\Roaming\Origin

2011-08-13 16:49 . 2011-08-13 16:49 ——– d—–w- c:\program files (x86)\DAMN NFO Viewer

2011-08-13 16:24 . 2011-08-13 16:24 ——– d—–w- c:\program files (x86)\PowerISO

2011-08-13 16:24 . 2011-06-15 08:30 93240 —-a-w- c:\windows\system32\drivers\scdemu.sys

2011-08-13 15:21 . 2011-08-13 15:21 ——– d—–w- c:\users\Arjen\AppData\Local\Origin

2011-08-13 15:21 . 2011-08-14 22:23 ——– d—–w- c:\programdata\Origin

2011-08-13 15:21 . 2011-08-13 15:21 ——– d—–w- c:\program files (x86)\Origin Games

2011-08-13 15:21 . 2011-08-13 15:21 ——– d—–w- c:\program files (x86)\Origin

2011-08-13 15:19 . 2011-08-13 15:21 ——– d—–w- c:\programdata\Electronic Arts

2011-08-13 13:34 . 2011-08-13 13:34 ——– d—–w- c:\windows\SysWow64\2040

2011-08-13 13:34 . 2011-08-13 13:34 ——– d—–w- c:\windows\SysWow64\2038

2011-08-13 13:10 . 2011-08-13 13:10 ——– d—–w- c:\program files (x86)\Microsoft WSE

2011-08-10 18:44 . 2011-07-16 05:41 362496 —-a-w- c:\windows\system32\wow64win.dll

2011-08-10 17:00 . 2010-06-02 02:55 77656 —-a-w- c:\windows\system32\XAPOFX1_5.dll

2011-08-05 12:32 . 2011-08-05 12:59 ——– d—–w- c:\users\Arjen\AppData\Local\Deployment

2011-08-05 12:32 . 2011-08-05 12:32 ——– d—–w- c:\users\Arjen\AppData\Local\Apps

2011-08-05 12:32 . 2011-08-05 12:32 ——– d—–w- c:\users\Default\AppData\Local\Microsoft Help

2011-08-05 12:18 . 2011-08-05 12:18 ——– d—–w- c:\program files\Microsoft Help Viewer

2011-08-05 12:17 . 2011-08-05 12:17 ——– d—–w- c:\windows\symbols

2011-08-05 12:17 . 2011-08-05 12:17 ——– d—–w- c:\program files (x86)\Microsoft Visual Studio 10.0

2011-08-05 11:59 . 2011-08-05 11:59 ——– d—–w- c:\program files\Microsoft Windows Performance Toolkit

2011-08-05 11:58 . 2011-08-05 11:58 ——– d—–w- c:\program files\Debugging Tools for Windows (x64)

2011-08-05 11:58 . 2011-08-05 11:58 ——– d—–w- c:\program files (x86)\Application Verifier

2011-08-05 11:58 . 2011-08-05 11:58 ——– d—–w- c:\program files\Application Verifier (x64)

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

2011-08-22 08:39 . 2011-06-23 19:12 404640 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2011-07-18 10:27 . 2011-07-18 10:27 525544 —-a-w- c:\windows\system32\deployJava1.dll

2011-07-16 09:03 . 2011-07-16 09:03 43680 —-a-w- c:\windows\system32\drivers\lirsgt.sys

2011-07-16 09:03 . 2011-07-16 09:03 314016 —-a-w- c:\windows\system32\drivers\atksgt.sys

2011-07-16 04:26 . 2011-08-10 18:44 44032 —-a-w- c:\windows\apppatch\acwow64.dll

2011-07-09 08:38 . 2011-07-09 08:38 882496 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll

2011-07-08 14:51 . 2011-07-08 14:52 8192 —-a-w- c:\windows\SysWow64\srvany.exe

2011-07-08 12:51 . 2011-07-08 12:51 254528 —-a-w- c:\windows\system32\drivers\dtsoftbus01.sys

2011-07-01 09:03 . 2011-07-01 09:03 48648 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll

2011-06-23 23:19 . 2009-07-14 02:36 152576 —-a-w- c:\windows\SysWow64\msclmd.dll

2011-06-23 23:19 . 2009-07-14 02:36 175616 —-a-w- c:\windows\system32\msclmd.dll

2011-06-23 22:33 . 2011-06-23 22:33 48648 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll

2011-06-23 22:33 . 2011-06-23 22:33 894784 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll

2011-06-23 22:07 . 2011-06-23 22:07 74752 —-a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe

2011-06-23 22:07 . 2011-06-23 22:07 161792 —-a-w- c:\windows\SysWow64\msls31.dll

2011-06-23 22:07 . 2011-06-23 22:07 91648 —-a-w- c:\windows\system32\SetIEInstalledDate.exe

2011-06-23 22:07 . 2011-06-23 22:07 89088 —-a-w- c:\windows\system32\RegisterIEPKEYs.exe

2011-06-23 22:07 . 2011-06-23 22:07 86528 —-a-w- c:\windows\SysWow64\iesysprep.dll

2011-06-23 22:07 . 2011-06-23 22:07 85504 —-a-w- c:\windows\system32\iesetup.dll

2011-06-23 22:07 . 2011-06-23 22:07 76800 —-a-w- c:\windows\SysWow64\SetIEInstalledDate.exe

2011-06-23 22:07 . 2011-06-23 22:07 76800 —-a-w- c:\windows\system32\tdc.ocx

2011-06-23 22:07 . 2011-06-23 22:07 74752 —-a-w- c:\windows\SysWow64\iesetup.dll

2011-06-23 22:07 . 2011-06-23 22:07 63488 —-a-w- c:\windows\SysWow64\tdc.ocx

2011-06-23 22:07 . 2011-06-23 22:07 603648 —-a-w- c:\windows\system32\vbscript.dll

2011-06-23 22:07 . 2011-06-23 22:07 49664 —-a-w- c:\windows\system32\imgutil.dll

2011-06-23 22:07 . 2011-06-23 22:07 48640 —-a-w- c:\windows\SysWow64\mshtmler.dll

2011-06-23 22:07 . 2011-06-23 22:07 48640 —-a-w- c:\windows\system32\mshtmler.dll

2011-06-23 22:07 . 2011-06-23 22:07 448512 —-a-w- c:\windows\system32\html.iec

2011-06-23 22:07 . 2011-06-23 22:07 420864 —-a-w- c:\windows\SysWow64\vbscript.dll

2011-06-23 22:07 . 2011-06-23 22:07 367104 —-a-w- c:\windows\SysWow64\html.iec

2011-06-23 22:07 . 2011-06-23 22:07 35840 —-a-w- c:\windows\SysWow64\imgutil.dll

2011-06-23 22:07 . 2011-06-23 22:07 30720 —-a-w- c:\windows\system32\licmgr10.dll

2011-06-23 22:07 . 2011-06-23 22:07 23552 —-a-w- c:\windows\SysWow64\licmgr10.dll

2011-06-23 22:07 . 2011-06-23 22:07 222208 —-a-w- c:\windows\system32\msls31.dll

2011-06-23 22:07 . 2011-06-23 22:07 173056 —-a-w- c:\windows\system32\ieUnatt.exe

2011-06-23 22:07 . 2011-06-23 22:07 165888 —-a-w- c:\windows\system32\iexpress.exe

2011-06-23 22:07 . 2011-06-23 22:07 160256 —-a-w- c:\windows\system32\wextract.exe

2011-06-23 22:07 . 2011-06-23 22:07 152064 —-a-w- c:\windows\SysWow64\wextract.exe

2011-06-23 22:07 . 2011-06-23 22:07 150528 —-a-w- c:\windows\SysWow64\iexpress.exe

2011-06-23 22:07 . 2011-06-23 22:07 1492992 —-a-w- c:\windows\system32\inetcpl.cpl

2011-06-23 22:07 . 2011-06-23 22:07 142848 —-a-w- c:\windows\SysWow64\ieUnatt.exe

2011-06-23 22:07 . 2011-06-23 22:07 1427456 —-a-w- c:\windows\SysWow64\inetcpl.cpl

2011-06-23 22:07 . 2011-06-23 22:07 135168 —-a-w- c:\windows\system32\IEAdvpack.dll

2011-06-23 22:07 . 2011-06-23 22:07 12288 —-a-w- c:\windows\system32\mshta.exe

2011-06-23 22:07 . 2011-06-23 22:07 11776 —-a-w- c:\windows\SysWow64\mshta.exe

2011-06-23 22:07 . 2011-06-23 22:07 114176 —-a-w- c:\windows\system32\admparse.dll

2011-06-23 22:07 . 2011-06-23 22:07 111616 —-a-w- c:\windows\system32\iesysprep.dll

2011-06-23 22:07 . 2011-06-23 22:07 110592 —-a-w- c:\windows\SysWow64\IEAdvpack.dll

2011-06-23 22:07 . 2011-06-23 22:07 101888 —-a-w- c:\windows\SysWow64\admparse.dll

2011-06-11 03:07 . 2011-07-13 10:16 3137536 —-a-w- c:\windows\system32\win32k.sys

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

“DAEMON Tools Lite”=“c:\program files (x86)\DAEMON Tools Lite\DTLite.exe”

“Dell DataSafe Online”=“c:\program files (x86)\Dell DataSafe Online\DataSafeOnline.exe”

“mcui_exe”=“c:\program files\McAfee.com\Agent\mcagent.exe”

“BCSSync”=“c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe”

“PWRISOVM.EXE”=“c:\program files (x86)\PowerISO\PWRISOVM.EXE”

“Launcher”=“c:\program files (x86)\Dell DataSafe Local Backup\Components\scheduler\Launcher.exe”

c:\users\Arjen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Dell Dock.lnk - c:\program files\Dell\DellDock\DellDock.exe

c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Dell Dock First Run.lnk - c:\program files\Dell\DellDock\DellDock.exe

“ConsentPromptBehaviorAdmin”= 5 (0x5)

“ConsentPromptBehaviorUser”= 3 (0x3)

“EnableUIADesktopToggle”= 0 (0x0)

“PromptOnSecureDesktop”= 0 (0x0)

“EnableLinkedConnections”= 1 (0x1)

“mixer5”=wdmaud.drv

@=“Service”

@=“”

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files (x86)\Lavasoft\Ad-Aware\AAWService.exe

R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys

R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE

R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

R3 RTTEAMPT;Realtek Teaming Protocol Driver (NDIS 6.2);c:\windows\system32\DRIVERS\RtTeam60.sys

R3 RTVLANPT;Realtek Vlan Protocol Driver (NDIS 6.2);c:\windows\system32\DRIVERS\RtVlan60.sys

R3 Sony Ericsson PCCompanion;Sony Ericsson PCCompanion;c:\program files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe

R3 TEAM;Realtek Virtual Miniport Driver for Teaming (NDIS 6.2);c:\windows\system32\DRIVERS\RtTeam60.sys

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys

R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe

R4 McOobeSv;McAfee OOBE Service;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe

S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys

S0 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys

S0 pavboot;pavboot;c:\windows\system32\drivers\pavboot64.sys

S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys

S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys

S1 mfenlfk;McAfee NDIS Light Filter;c:\windows\system32\DRIVERS\mfenlfk.sys

S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys

S2 DockLoginService;Dock Login Service;c:\program files\Dell\DellDock\DockLogin.exe

S2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe

S2 McNaiAnn;McAfee VirusScan Announcer;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe

S2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe

S2 mfevtp;McAfee Validation Trust Protection Service;c:\program files\Common Files\McAfee\SystemCore\mfevtps.exe

S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe

S2 RtNdPt60;Realtek NDIS Protocol Driver;c:\windows\system32\DRIVERS\RtNdPt60.sys

S2 SftService;SoftThinks Agent Service;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE

S3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys

S3 HCW3x64;Hauppauge WinTV-HVR 713X PCI Card;c:\windows\system32\DRIVERS\HCW71364.sys

S3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys

S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys

— Andere Services/Drivers In Geheugen —

*Deregistered* - Lavasoft Kernexplorer

*Deregistered* - mfeavfk01

Inhoud van de ‘Gedeelde Taken’ map

2011-08-22 c:\windows\Tasks\PCDoctorBackgroundMonitorTask.job

- c:\program files\Dell Support Center\uaclauncher.exe

2011-08-26 c:\windows\Tasks\SystemToolsDailyTest.job

- c:\program files\Dell Support Center\uaclauncher.exe

——— x86-64 ———–

“RtHDVCpl”=“c:\program files\Realtek\Audio\HDA\RAVCpl64.exe”

“IAAnotif”=“c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe”

“LoadAppInit_DLLs”=0x0

——- Bijkomende Scan ——-

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://www.hyves.nl/

mLocal Page = c:\windows\SysWOW64\blank.htm

IE: &Verzenden naar OneNote - c:\progra~2\MICROS~2\Office14\ONBttnIE.dll/105

IE: E&xporteren naar Microsoft Excel - c:\progra~2\MICROS~2\Office14\EXCEL.EXE/3000

Trusted Zone: internet

Trusted Zone: mcafee.com

TCP: DhcpNameServer = 62.45.45.45 62.45.46.46

- - - - ORPHANS VERWIJDERD - - - -

Toolbar-Locked - (no file)

——————— VERGRENDELDE REGISTER SLEUTELS ———————

“hapolndjejiklkhb”=hex:69,61,64,6d,63,65,65,6d,69,63,65,62,67,6f,6a,65,61,62,

00,77

@Denied: (A 2) (Everyone)

@=“FlashBroker”

“LocalizedString”=“@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10v_ActiveX.exe,-101”

“Enabled”=dword:00000001

@=“c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10v_ActiveX.exe”

@=“{FAB3E735-69C7-453B-A446-B6823C6DF1C9}”

@Denied: (A 2) (Everyone)

@=“Shockwave Flash Object”

@=“c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx”

“ThreadingModel”=“Apartment”

@=“0”

@=“ShockwaveFlash.ShockwaveFlash.10”

@=“c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx, 1”

@=“{D27CDB6B-AE6D-11cf-96B8-444553540000}”

@=“1.0”

@=“ShockwaveFlash.ShockwaveFlash”

@Denied: (A 2) (Everyone)

@=“Macromedia Flash Factory Object”

@=“c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx”

“ThreadingModel”=“Apartment”

@=“FlashFactory.FlashFactory.1”

@=“c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx, 1”

@=“{D27CDB6B-AE6D-11cf-96B8-444553540000}”

@=“1.0”

@=“FlashFactory.FlashFactory”

@Denied: (A 2) (Everyone)

@=“IFlashBroker4”

@=“{00020424-0000-0000-C000-000000000046}”

@=“{FAB3E735-69C7-453B-A446-B6823C6DF1C9}”

“Version”=“1.0”

“SymbolicLinkValue”=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,

00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\

@Denied: (A) (Everyone)

“Solution”=“{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}”

@Denied: (A) (Everyone)

“Key”=“ActionsPane3”

“Location”=“c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd”

@Denied: (Full) (Everyone)

Voltooingstijd: 2011-08-26 21:57:38

ComboFix-quarantined-files.txt 2011-08-26 19:57

Pre-Run: 508.788.736.000 bytes beschikbaar

Post-Run: 508.460.474.368 bytes beschikbaar

- - End Of File - - E7D29313EA03432BFD9AD03A4DC0C04C

Hijacklogje:

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 22:05:30, on 26-8-2011

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v9.00 (9.00.8112.16421)

Boot mode: Normal

Running processes:

C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe

C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE

C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe

C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe

C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe

C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe

C:\Program Files (x86)\PowerISO\PWRISOVM.EXE

C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Program Files (x86)\Trend Micro\HiJackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hyves.nl/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL

O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20110625170228.dll

O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL

O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (file missing)

O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll

O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll

O4 - HKLM\..\Run: “C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe” /m

O4 - HKLM\..\Run: “C:\Program Files\McAfee.com\Agent\mcagent.exe” /runkey

O4 - HKLM\..\Run: “C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe” /DelayServices

O4 - HKLM\..\Run: C:\Program Files (x86)\PowerISO\PWRISOVM.EXE -startup

O4 - HKLM\..\RunOnce: C:\Program Files (x86)\Dell DataSafe Local Backup\Components\scheduler\Launcher.exe

O4 - HKCU\..\Run: “C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe” -autorun

O4 - .DEFAULT User Startup: Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (User ‘Default user’)

O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe

O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000

O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra ‘Tools’ menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

O9 - Extra ‘Tools’ menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

O9 - Extra ‘Tools’ menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

O11 - Options group: Accelerated graphics

O15 - Trusted Zone: http://*.mcafee.com

O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://oas.support.microsoft.com/ActiveX/MSDcode.cab

O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} (WMI Class) - http://support.euro.dell.com/systemprofiler/SysProExe.CAB

O16 - DPF: {9191F686-7F0A-441D-8A98-2FE3AC1BD913} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab

O16 - DPF: {C1F8FC10-E5DB-4112-9DBF-6C3FF728D4E3} (DellSystemLite.Scanner) - http://support.euro.dell.com/systemprofiler/DellSystemLite.CAB

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O16 - DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} (Image Uploader Control) - http://cache.hyves-static.net/statics/Aurigma/ImageUploader4.cab

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL

O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: KMService - Unknown owner - C:\Windows\system32\srvany.exe

O23 - Service: Lavasoft Ad-Aware Service - Lavasoft Limited - C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe

O23 - Service: McAfee Personal Firewall Service (McMPFSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe

O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe

O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe

O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe

O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\Program Files\mcafee\VirusScan\mcods.exe

O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe

O23 - Service: McShield - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe

O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe

O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks SAS - C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: Sony Ericsson PCCompanion - Avanquest Software - C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

Arjen2201

Ben

Piet

Ben

Arjen2201

Ben

Arjen2201

Ben