Best mensen, kan iemand mij helpen, heb het msn virus gekregen en het bestand heet: 888bar!
Kreeg een berichtje van een meisje met: IS THAT YOU? en dan een GIF bestand erbij...ik ging er dus naartoe om te kijken of ik het ben en nu heb ik het virus...
PLEASE KAN IEMAND HELPEN!!!??
dit is mijn uitreksel van combofix:
DominiquePC - 06-11-25 15:53:42,00 Service Pack 2
ComboFix 06.11.22 - Running from: "C:\Documents and Settings\DominiquePC\Bureaublad"
(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
C:\Program Files\Common Files\Yazzle1122OinAdmin.exe
C:\Program Files\Common Files\Yazzle1122OinUninstaller.exe
C:\Program Files\Common Files\{309ED818-0965-1043-1001-02080603001f}
C:\Program Files\Inetget2
C:\Program Files\Common Files\{709ED818-0965-1043-1001-02080603001f}
~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ Purity ~ ~ ~ ~ ~ ~ ~ ~~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
Folders Quarantined:
C:\QooBox\Purity\WINDOWS\system32\ASKS~1
C:\QooBox\Purity\WINDOWS\system32\WNSXS~1
C:\QooBox\Purity\WINDOWS\system32\ASKS~1\notepad.exe
C:\QooBox\Purity\WINDOWS\system32\ASKS~1\?asks
C:\QooBox\Purity\WINDOWS\system32\WNSXS~1\j?vaw.exe
((((((((((((((((((((((((((((((( Files Created from 2006-10-25 to 2006-11-25 ))))))))))))))))))))))))))))))))))
2006-11-25 15:33 2 --a------ C:\WINDOWS\system32\wnscpsv.exe
2006-11-25 15:33 131,072 --a------ C:\WINDOWS\system32\lgnuxr.dll
2006-11-24 23:55
d-------- C:\Program Files\Spybot - Search & Destroy
2006-11-24 23:55
d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2006-11-24 23:20
d--hs---- C:\Config.Msi
2006-11-24 22:31 77,824 --a------ C:\Documents and Settings\DominiquePC\vsetup.exe
2006-11-24 22:31 139,489 --a------ C:\Documents and Settings\DominiquePC\mc2.exe
2006-11-24 22:31 122,880 --a------ C:\Documents and Settings\DominiquePC\winstall.exe
2006-11-24 22:30 77,824 --a------ C:\WINDOWS\system32\vsetup.exe
2006-11-24 22:30 139,489 --a------ C:\WINDOWS\system32\mc2.exe
2006-11-24 22:30 122,880 --a------ C:\WINDOWS\system32\winstall.exe
2006-11-12 13:16
d-------- C:\Program Files\TVAnts
2006-11-04 14:14 1,245,696 --a------ C:\WINDOWS\system32\msxml4.dll
2006-11-03 14:05 20,480 --a------ C:\WINDOWS\INRES.DLL
2006-11-03 13:54
d-------- C:\Documents and Settings\DominiquePC\Application Data\Help
2006-11-03 13:47 90,112 --------- C:\WINDOWS\Updreg.EXE
2006-11-03 13:47 84,992 --------- C:\WINDOWS\system32\SFCVRT32.DLL
2006-11-03 13:47 82,432 --------- C:\WINDOWS\system32\CTWFLT32.DLL
2006-11-03 13:47 53,552 --------- C:\WINDOWS\CTCCW.DLL
2006-11-03 13:47 26,768 --------- C:\WINDOWS\system32\CTL3D.DLL
2006-11-03 13:47 24,976 --------- C:\WINDOWS\CTRES.DLL
2006-11-03 13:46 49,152 --a------ C:\WINDOWS\CTDCRDUT.DLL
2006-11-03 13:46 20,480 --a------ C:\WINDOWS\INRESDUT.DLL
2006-11-03 13:42 73,728 --a------ C:\WINDOWS\system32\CTDrmRes.dll
2006-11-03 13:42 65,024 --a------ C:\WINDOWS\system32\CTDetres.dll
2006-11-03 13:42 54,784 --------- C:\WINDOWS\system32\Inetwh32.dll
2006-11-03 13:42 331,776 --------- C:\WINDOWS\system32\CTMedEng.dll
2006-11-03 13:42 32,768 --a------ C:\WINDOWS\system32\CTIntRes.dll
2006-11-03 13:42 25,088 --a------ C:\WINDOWS\system32\CTSVCCTL.EXE
2006-11-03 13:42 24,576 --a------ C:\WINDOWS\system32\CTMERes.DLL
2006-11-03 13:42 163,840 --------- C:\WINDOWS\system32\CTDRMUI.dll
2006-11-03 13:42
d-------- C:\Media
2006-11-03 13:41 12,288 --a------ C:\WINDOWS\system32\AHQCpURes.dll
2006-11-03 13:40 15,840 --------- C:\WINDOWS\system32\drivers\PFMODNT.SYS
2006-10-31 21:32
d-------- C:\Documents and Settings\DominiquePC\Application Data\SopCast
2006-10-31 20:32
d-------- C:\Program Files\Common Files\Synacast
2006-10-31 20:32
d-------- C:\Documents and Settings\DominiquePC\Application Data\PPLive
2006-10-30 19:22
d----c--- C:\WINDOWS\system32\DRVSTORE
2006-10-30 19:22
d-------- C:\Documents and Settings\DominiquePC\Contacts
2006-10-27 20:36
d-------- C:\Documents and Settings\DominiquePC\Application Data\PlayFirst
(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))
2006-11-25 15:55 -------- d-------- C:\Program Files\Common Files
2006-11-25 15:48 -------- d-------- C:\Documents and Settings\DominiquePC\Application Data\Skype
2006-11-24 23:23 -------- d-------- C:\Program Files\MSN Messenger
2006-11-24 23:23 -------- d-------- C:\Program Files\Common Files\Microsoft Shared
2006-11-20 15:37 -------- d-------- C:\Program Files\Internet Explorer
2006-11-10 21:13 62992 --a------ C:\Documents and Settings\DominiquePC\Application Data\GDIPFONTCACHEV1.DAT
2006-11-03 17:30 -------- d-------- C:\Program Files\Norton SystemWorks
2006-11-03 14:04 -------- d--h----- C:\Program Files\InstallShield Installation Information
2006-11-03 13:44 -------- d-------- C:\Program Files\Creative
2006-10-31 20:33 359808 --a------ C:\WINDOWS\system32\drivers\TCPIP.SYS
2006-10-31 12:27 -------- d-------- C:\Program Files\Common Files\Teleca Shared
2006-10-30 19:40 -------- d-------- C:\Program Files\MessengerPlus! 3
2006-10-30 19:33 -------- d---s---- C:\Documents and Settings\DominiquePC\Application Data\Microsoft
2006-10-27 20:37 -------- d-------- C:\Documents and Settings\DominiquePC\Application Data\Macromedia
2006-10-20 11:24 -------- d-------- C:\Documents and Settings\DominiquePC\Application Data\VoipStunt
2006-10-20 11:18 -------- d-------- C:\Documents and Settings\DominiquePC\Application Data\VoipBuster
2006-10-20 11:15 -------- d-------- C:\Program Files\VoipBuster.com
2006-10-13 13:41 144384 --a------ C:\WINDOWS\system32\nwprovau.dll
2006-09-29 12:32 -------- d-------- C:\Documents and Settings\DominiquePC\Application Data\LimeWire
2006-09-13 06:07 1084416 --a------ C:\WINDOWS\system32\msxml3.dll
2006-08-25 16:51 617472 --a------ C:\WINDOWS\system32\comctl32.dll
(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))
*Note* empty entries are not shown
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"
"Shareaza"="\"C:\\Program Files\\K-litePro\\K-litePro.exe\" -tray"
"msnmsgr"="\"C:\\PROGRA~1\\MSNMES~1\\msnmsgr.exe\" /background"
"VoipBuster"="\"C:\\Program Files\\VoipBuster.com\\VoipBuster\\VoipBuster.exe\" -nosplash -minimized"
"Skype"="\"C:\\Program Files\\Skype\\Phone\\Skype.exe\" /nosplash /minimized"
"VoipStunt"="\"C:\\Program Files\\VoipStunt.com\\VoipStunt\\VoipStunt.exe\" -nosplash -minimized"
"FreeCall"="\"C:\\Program Files\\FreeCall.com\\FreeCall\\FreeCall.exe\" -nosplash -minimized"
"RemoteCenter"="C:\\Program Files\\Creative\\SBLive\\RemoteCenter\\Rc\\RcMan.EXE"
"Uddm"="\"C:\\WINDOWS\\system32\\ASKS~1\\notepad.exe\" -vt yazb"
"Torjxmt"="C:\\WINDOWS\\system32\\W?nSxS\\j?vaw.exe"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"nwiz"="nwiz.exe /install"
"NvMediaCenter"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvMcTray.dll,NvTaskbarInit"
"SiSUSBRG"="C:\\WINDOWS\\SiSUSBrg.exe"
"zBrowser Launcher"="C:\\Program Files\\Logitech\\iTouch\\iTouch.exe"
"EM_EXEC"="C:\\PROGRA~1\\Logitech\\MOUSEW~1\\SYSTEM\\EM_EXEC.EXE"
"ccApp"="\"C:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe\""
"SunJavaUpdateSched"="C:\\Program Files\\Java\\jre1.5.0_01\\bin\\jusched.exe"
"Creative WebCam Tray"="C:\\Program Files\\Creative\\Shared Files\\CAMTRAY.EXE"
"NeroCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"QD FastAndSafe"=""
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"Disc Detector"="C:\\Program Files\\Creative\\ShareDLL\\CtNotify.exe"
"UpdReg"="C:\\WINDOWS\\UpdReg.EXE"
"Jet Detection"="\"C:\\Program Files\\Creative\\SBLive\\PROGRAM\\ADGJDet.exe\""
"CTHelper"="CTHELPER.EXE"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"
[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000005
[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
"Source"="about:Home"
"SubscribedURL"="about:Home"
"FriendlyName"="Mijn huidige introductiepagina"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,a0,00,00,00,00,00,00,00,80,02,00,00,3a,02,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,c0
"OriginalStateInfo"=hex:18,00,00,00,90,01,00,00,00,00,00,00,90,01,00,00,3a,02,\
00,00,04,00,00,c0
"RestoredStateInfo"=hex:18,00,00,00,90,01,00,00,00,00,00,00,90,01,00,00,3a,02,\
00,00,01,00,00,00
[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"
[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Preloader van browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Cache-daemon voor onderdeelcategorieën"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000000
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"
Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\Norton AntiVirus - Scan my computer.job
C:\WINDOWS\tasks\Norton SystemWorks One Button Checkup.job
C:\WINDOWS\tasks\Symantec Drmc.job
C:\WINDOWS\tasks\Symantec NetDetect.job
C:\WINDOWS\tasks\XoftSpy.job
Completion time: 06-11-25 15:56:21.89
C:\ComboFix.txt ... 06-11-25 15:56
Als iemand mij kan helpen, zou ik het fijn vinden....mijn pc flipt hem uit door dat virus!!
mailen kan naar:
dominiquestaal@hotmail.com
anders op dit forum
Kreeg een berichtje van een meisje met: IS THAT YOU? en dan een GIF bestand erbij...ik ging er dus naartoe om te kijken of ik het ben en nu heb ik het virus...
PLEASE KAN IEMAND HELPEN!!!??
dit is mijn uitreksel van combofix:
DominiquePC - 06-11-25 15:53:42,00 Service Pack 2
ComboFix 06.11.22 - Running from: "C:\Documents and Settings\DominiquePC\Bureaublad"
(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
C:\Program Files\Common Files\Yazzle1122OinAdmin.exe
C:\Program Files\Common Files\Yazzle1122OinUninstaller.exe
C:\Program Files\Common Files\{309ED818-0965-1043-1001-02080603001f}
C:\Program Files\Inetget2
C:\Program Files\Common Files\{709ED818-0965-1043-1001-02080603001f}
~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ Purity ~ ~ ~ ~ ~ ~ ~ ~~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~
Folders Quarantined:
C:\QooBox\Purity\WINDOWS\system32\ASKS~1
C:\QooBox\Purity\WINDOWS\system32\WNSXS~1
C:\QooBox\Purity\WINDOWS\system32\ASKS~1\notepad.exe
C:\QooBox\Purity\WINDOWS\system32\ASKS~1\?asks
C:\QooBox\Purity\WINDOWS\system32\WNSXS~1\j?vaw.exe
((((((((((((((((((((((((((((((( Files Created from 2006-10-25 to 2006-11-25 ))))))))))))))))))))))))))))))))))
2006-11-25 15:33 2 --a------ C:\WINDOWS\system32\wnscpsv.exe
2006-11-25 15:33 131,072 --a------ C:\WINDOWS\system32\lgnuxr.dll
2006-11-24 23:55
d-------- C:\Program Files\Spybot - Search & Destroy
2006-11-24 23:55
d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2006-11-24 23:20
d--hs---- C:\Config.Msi
2006-11-24 22:31 77,824 --a------ C:\Documents and Settings\DominiquePC\vsetup.exe
2006-11-24 22:31 139,489 --a------ C:\Documents and Settings\DominiquePC\mc2.exe
2006-11-24 22:31 122,880 --a------ C:\Documents and Settings\DominiquePC\winstall.exe
2006-11-24 22:30 77,824 --a------ C:\WINDOWS\system32\vsetup.exe
2006-11-24 22:30 139,489 --a------ C:\WINDOWS\system32\mc2.exe
2006-11-24 22:30 122,880 --a------ C:\WINDOWS\system32\winstall.exe
2006-11-12 13:16
d-------- C:\Program Files\TVAnts
2006-11-04 14:14 1,245,696 --a------ C:\WINDOWS\system32\msxml4.dll
2006-11-03 14:05 20,480 --a------ C:\WINDOWS\INRES.DLL
2006-11-03 13:54
d-------- C:\Documents and Settings\DominiquePC\Application Data\Help
2006-11-03 13:47 90,112 --------- C:\WINDOWS\Updreg.EXE
2006-11-03 13:47 84,992 --------- C:\WINDOWS\system32\SFCVRT32.DLL
2006-11-03 13:47 82,432 --------- C:\WINDOWS\system32\CTWFLT32.DLL
2006-11-03 13:47 53,552 --------- C:\WINDOWS\CTCCW.DLL
2006-11-03 13:47 26,768 --------- C:\WINDOWS\system32\CTL3D.DLL
2006-11-03 13:47 24,976 --------- C:\WINDOWS\CTRES.DLL
2006-11-03 13:46 49,152 --a------ C:\WINDOWS\CTDCRDUT.DLL
2006-11-03 13:46 20,480 --a------ C:\WINDOWS\INRESDUT.DLL
2006-11-03 13:42 73,728 --a------ C:\WINDOWS\system32\CTDrmRes.dll
2006-11-03 13:42 65,024 --a------ C:\WINDOWS\system32\CTDetres.dll
2006-11-03 13:42 54,784 --------- C:\WINDOWS\system32\Inetwh32.dll
2006-11-03 13:42 331,776 --------- C:\WINDOWS\system32\CTMedEng.dll
2006-11-03 13:42 32,768 --a------ C:\WINDOWS\system32\CTIntRes.dll
2006-11-03 13:42 25,088 --a------ C:\WINDOWS\system32\CTSVCCTL.EXE
2006-11-03 13:42 24,576 --a------ C:\WINDOWS\system32\CTMERes.DLL
2006-11-03 13:42 163,840 --------- C:\WINDOWS\system32\CTDRMUI.dll
2006-11-03 13:42
d-------- C:\Media
2006-11-03 13:41 12,288 --a------ C:\WINDOWS\system32\AHQCpURes.dll
2006-11-03 13:40 15,840 --------- C:\WINDOWS\system32\drivers\PFMODNT.SYS
2006-10-31 21:32
d-------- C:\Documents and Settings\DominiquePC\Application Data\SopCast
2006-10-31 20:32
d-------- C:\Program Files\Common Files\Synacast
2006-10-31 20:32
d-------- C:\Documents and Settings\DominiquePC\Application Data\PPLive
2006-10-30 19:22
d----c--- C:\WINDOWS\system32\DRVSTORE
2006-10-30 19:22
d-------- C:\Documents and Settings\DominiquePC\Contacts
2006-10-27 20:36
d-------- C:\Documents and Settings\DominiquePC\Application Data\PlayFirst
(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))
2006-11-25 15:55 -------- d-------- C:\Program Files\Common Files
2006-11-25 15:48 -------- d-------- C:\Documents and Settings\DominiquePC\Application Data\Skype
2006-11-24 23:23 -------- d-------- C:\Program Files\MSN Messenger
2006-11-24 23:23 -------- d-------- C:\Program Files\Common Files\Microsoft Shared
2006-11-20 15:37 -------- d-------- C:\Program Files\Internet Explorer
2006-11-10 21:13 62992 --a------ C:\Documents and Settings\DominiquePC\Application Data\GDIPFONTCACHEV1.DAT
2006-11-03 17:30 -------- d-------- C:\Program Files\Norton SystemWorks
2006-11-03 14:04 -------- d--h----- C:\Program Files\InstallShield Installation Information
2006-11-03 13:44 -------- d-------- C:\Program Files\Creative
2006-10-31 20:33 359808 --a------ C:\WINDOWS\system32\drivers\TCPIP.SYS
2006-10-31 12:27 -------- d-------- C:\Program Files\Common Files\Teleca Shared
2006-10-30 19:40 -------- d-------- C:\Program Files\MessengerPlus! 3
2006-10-30 19:33 -------- d---s---- C:\Documents and Settings\DominiquePC\Application Data\Microsoft
2006-10-27 20:37 -------- d-------- C:\Documents and Settings\DominiquePC\Application Data\Macromedia
2006-10-20 11:24 -------- d-------- C:\Documents and Settings\DominiquePC\Application Data\VoipStunt
2006-10-20 11:18 -------- d-------- C:\Documents and Settings\DominiquePC\Application Data\VoipBuster
2006-10-20 11:15 -------- d-------- C:\Program Files\VoipBuster.com
2006-10-13 13:41 144384 --a------ C:\WINDOWS\system32\nwprovau.dll
2006-09-29 12:32 -------- d-------- C:\Documents and Settings\DominiquePC\Application Data\LimeWire
2006-09-13 06:07 1084416 --a------ C:\WINDOWS\system32\msxml3.dll
2006-08-25 16:51 617472 --a------ C:\WINDOWS\system32\comctl32.dll
(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))
*Note* empty entries are not shown
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"
"Shareaza"="\"C:\\Program Files\\K-litePro\\K-litePro.exe\" -tray"
"msnmsgr"="\"C:\\PROGRA~1\\MSNMES~1\\msnmsgr.exe\" /background"
"VoipBuster"="\"C:\\Program Files\\VoipBuster.com\\VoipBuster\\VoipBuster.exe\" -nosplash -minimized"
"Skype"="\"C:\\Program Files\\Skype\\Phone\\Skype.exe\" /nosplash /minimized"
"VoipStunt"="\"C:\\Program Files\\VoipStunt.com\\VoipStunt\\VoipStunt.exe\" -nosplash -minimized"
"FreeCall"="\"C:\\Program Files\\FreeCall.com\\FreeCall\\FreeCall.exe\" -nosplash -minimized"
"RemoteCenter"="C:\\Program Files\\Creative\\SBLive\\RemoteCenter\\Rc\\RcMan.EXE"
"Uddm"="\"C:\\WINDOWS\\system32\\ASKS~1\\notepad.exe\" -vt yazb"
"Torjxmt"="C:\\WINDOWS\\system32\\W?nSxS\\j?vaw.exe"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"nwiz"="nwiz.exe /install"
"NvMediaCenter"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvMcTray.dll,NvTaskbarInit"
"SiSUSBRG"="C:\\WINDOWS\\SiSUSBrg.exe"
"zBrowser Launcher"="C:\\Program Files\\Logitech\\iTouch\\iTouch.exe"
"EM_EXEC"="C:\\PROGRA~1\\Logitech\\MOUSEW~1\\SYSTEM\\EM_EXEC.EXE"
"ccApp"="\"C:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe\""
"SunJavaUpdateSched"="C:\\Program Files\\Java\\jre1.5.0_01\\bin\\jusched.exe"
"Creative WebCam Tray"="C:\\Program Files\\Creative\\Shared Files\\CAMTRAY.EXE"
"NeroCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"QD FastAndSafe"=""
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"Disc Detector"="C:\\Program Files\\Creative\\ShareDLL\\CtNotify.exe"
"UpdReg"="C:\\WINDOWS\\UpdReg.EXE"
"Jet Detection"="\"C:\\Program Files\\Creative\\SBLive\\PROGRAM\\ADGJDet.exe\""
"CTHelper"="CTHELPER.EXE"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"
[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000005
[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
"Source"="about:Home"
"SubscribedURL"="about:Home"
"FriendlyName"="Mijn huidige introductiepagina"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,a0,00,00,00,00,00,00,00,80,02,00,00,3a,02,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,c0
"OriginalStateInfo"=hex:18,00,00,00,90,01,00,00,00,00,00,00,90,01,00,00,3a,02,\
00,00,04,00,00,c0
"RestoredStateInfo"=hex:18,00,00,00,90,01,00,00,00,00,00,00,90,01,00,00,3a,02,\
00,00,01,00,00,00
[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"
[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Preloader van browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Cache-daemon voor onderdeelcategorieën"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000000
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"
Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\Norton AntiVirus - Scan my computer.job
C:\WINDOWS\tasks\Norton SystemWorks One Button Checkup.job
C:\WINDOWS\tasks\Symantec Drmc.job
C:\WINDOWS\tasks\Symantec NetDetect.job
C:\WINDOWS\tasks\XoftSpy.job
Completion time: 06-11-25 15:56:21.89
C:\ComboFix.txt ... 06-11-25 15:56
Als iemand mij kan helpen, zou ik het fijn vinden....mijn pc flipt hem uit door dat virus!!
mailen kan naar:
dominiquestaal@hotmail.com
anders op dit forum
Laatst bewerkt:
