POWERMERCEDES
Gebruiker
- Lid geworden
- 12 okt 2004
- Berichten
- 208


Bekijk de onderstaande video om te zien hoe je onze site als een web app op je startscherm installeert.
Opmerking: Deze functie is mogelijk niet beschikbaar in sommige browsers.
Dat had je even wat eerder moeten melden (zie mijn vorige posting). Terugzetten is dus blijkbaar niet nodig.
SORRY!
Ok, het taakbeheer-programma is er dus nog. Probeer dan een rechtstreekse aanroep ervan:
Start -> Uitvoeren -> taskmgr.exe
HET PAD BESTAAT NIET,krijg ik dan???
Edit: Werkt bovenstaande, probeer dan ook de andere manier van Taakbeheer aanroepen: [Ctrl][Shift][Esc] toetscombinatie.
Er gebeurt NIKS bij mij :shocked:
Tijs.
Path c:]windows\system32;c:\windows;c:]windows
Er is nu een topic op Nucia waarin de tip met de regkey geplaatst wordt.
Vervolgens is er hier een topic geopend waarin ik zei dat het daar niet aan lag maar dat het bestand taskmgr waarschijnlijk verdwenen was.
Er loopt op Nucia een HijackThis topic over dit probleem.
Én dit topic is actief voor het probleem.
Ik geloof niet dat het de duidelijkheid ten goede komt.
Ok,het eerste werkt[...]
ComboFix 08-08-11.01 - Admin 2008-08-12 16:15:49.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1043.18.436 [GMT 2:00]
Gestart vanuit: C:\Documents and Settings\Admin\Bureaublad\ComboFix.exe
* Nieuw herstelpunt werd aangemaakt
* Resident AV is active
WAARSCHUWING - DE RECOVERY CONSOLE IS NIET OP DIT SYSTEEM GEINSTALLEERD !!
.
(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\Admin\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML
C:\WINDOWS\system\msvbvm60.dll
C:\WINDOWS\system32\pskill.exe
C:\WINDOWS\system32\slootniw01.dll
.
(((((((((((((((((((( Bestanden Gemaakt van 2008-07-12 to 2008-08-12 ))))))))))))))))))))))))))))))
.
2008-08-12 15:56 . 2008-08-12 16:16 <DIR> dr-h-c--- C:\Documents and Settings\Admin\Onlangs geopend
2008-08-12 15:40 . 2008-08-12 15:40 <DIR> d----c--- C:\Program Files\FastStone Capture
2008-08-11 22:53 . 2008-08-11 22:56 <DIR> d----c--- C:\Documents and Settings\Admin\.SunDownloadManager
2008-08-11 17:46 . 2008-08-11 17:47 <DIR> d----c--- C:\Documents and Settings\Admin\Application Data\ViStart
2008-08-11 17:38 . 2008-08-11 17:38 <DIR> d----c--- C:\Documents and Settings\Admin\Application Data\Styler
2008-08-11 17:25 . 2008-08-12 16:29 <DIR> d----c--- C:\WINDOWS\system32\VIRepair
2008-08-11 17:25 . 2008-08-11 17:25 <DIR> d----c--- C:\Program Files\WinFlip
2008-08-11 17:25 . 2008-08-11 17:25 <DIR> d----c--- C:\Program Files\VisualTooltip
2008-08-11 17:25 . 2008-08-12 16:31 <DIR> d----c--- C:\Program Files\ViStart
2008-08-11 17:25 . 2008-08-11 17:25 <DIR> d----c--- C:\Program Files\ViOrb
2008-08-11 17:25 . 2008-08-11 17:25 <DIR> d----c--- C:\Program Files\TrueTransparency
2008-08-11 17:25 . 2007-11-30 05:56 329,029 --a--c--- C:\WINDOWS\system32\viwc.exe
2008-08-11 17:24 . 2008-08-11 21:25 <DIR> d----c--- C:\Program Files\Vista Sidebar
2008-08-11 17:24 . 2008-08-11 17:25 <DIR> d----c--- C:\Program Files\Styler
2008-08-11 17:24 . 2008-08-11 17:24 <DIR> d----c--- C:\Program Files\LClock
2008-08-11 17:24 . 2007-04-15 01:32 7,333,376 --a--c--- C:\WINDOWS\system32\vistaui.exe
2008-08-11 17:24 . 2004-09-20 01:27 172,032 --a--c--- C:\WINDOWS\system32\LClock.cpl
2008-08-11 17:24 . 2007-11-25 22:11 49,208 --a--c--- C:\WINDOWS\system32\vistartup.bmp
2008-08-11 17:10 . 2008-08-11 17:10 78,942 --a--c--- C:\WINDOWS\Icon_1.ico
2008-08-11 17:09 . 2008-08-11 17:40 <DIR> d----c--- C:\WINDOWS\system32\VITrans
2008-08-11 17:09 . 2008-08-11 17:45 <DIR> d----c--- C:\VTPFiles
2008-08-11 17:09 . 2006-12-03 17:15 111,104 --a--c--- C:\WINDOWS\system32\Uharc.exe
2008-08-11 17:09 . 2006-12-03 17:15 69,632 --a--c--- C:\WINDOWS\system32\moveex.exe
2008-08-11 17:09 . 2006-12-03 17:15 19,968 --a--c--- C:\WINDOWS\system32\reico.exe
2008-08-11 17:09 . 2006-12-03 17:14 8,636 --a--c--- C:\WINDOWS\system32\modifype.exe
2008-08-10 19:07 . 2008-08-10 19:07 <DIR> d----c--- C:\Documents and Settings\Kusum\Bureaublad
2008-08-09 16:43 . 2008-08-09 16:43 737,280 --a--c--- C:\WINDOWS\iun6002.exe
2008-08-09 16:35 . 2008-08-09 16:35 <DIR> d----c--- C:\Program Files\Tweak-XP Pro 4
2008-08-09 16:32 . 2008-08-09 16:32 <DIR> d----c--- C:\Documents and Settings\All Users\Application Data\WinZip
2008-08-09 16:15 . 2008-08-09 16:15 <DIR> d----c--- C:\Program Files\Lavasoft
2008-08-09 16:15 . 2008-08-09 16:16 <DIR> d----c--- C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-08-09 16:14 . 2008-08-09 16:14 <DIR> d----c--- C:\Program Files\Common Files\Wise Installation Wizard
2008-08-09 14:23 . 2008-08-09 14:23 <DIR> d----c--- C:\Documents and Settings\Admin\Application Data\Malwarebytes
2008-08-09 14:22 . 2008-08-09 14:23 <DIR> d----c--- C:\Program Files\Malwarebytes' Anti-Malware
2008-08-09 14:22 . 2008-08-09 14:22 <DIR> d----c--- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-08-09 14:22 . 2008-07-30 20:07 38,472 --a--c--- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-08-09 14:22 . 2008-07-30 20:07 17,144 --a--c--- C:\WINDOWS\system32\drivers\mbam.sys
2008-08-09 14:17 . 2008-08-11 17:05 <DIR> d----c--- C:\Program Files\SpywareBlaster
2008-08-09 14:17 . 2008-08-12 16:08 <DIR> d-a--c--- C:\Documents and Settings\All Users\Application Data\TEMP
2008-08-09 14:16 . 2008-08-09 14:16 <DIR> d----c--- C:\Program Files\Trend Micro
2008-08-09 14:06 . 2001-09-06 19:54 634,198 --a--c--- C:\WINDOWS\system32\dllcache\el656ct5.sys
2008-08-09 14:05 . 2001-08-17 20:14 952,007 --a--c--- C:\WINDOWS\system32\dllcache\diwan.sys
2008-08-09 14:04 . 2001-09-06 18:59 980,034 --a--c--- C:\WINDOWS\system32\dllcache\cicap.sys
2008-08-08 17:31 . 2008-08-08 17:31 <DIR> d----c--- C:\Program Files\uTorrent
2008-08-08 16:58 . 2008-08-08 17:07 <DIR> d----c--- C:\Program Files\Kaspersky Lab
2008-08-08 16:58 . 2008-08-12 14:49 <DIR> d----c--- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2008-08-08 16:58 . 2008-08-12 16:29 7,884,832 --ahsc--- C:\WINDOWS\system32\drivers\fidbox.dat
2008-08-08 16:58 . 2008-08-12 16:27 106,100 --ahsc--- C:\WINDOWS\system32\drivers\fidbox.idx
2008-08-08 16:58 . 2008-08-08 17:09 96,976 --a--c--- C:\WINDOWS\system32\drivers\klin.dat
2008-08-08 16:58 . 2008-08-08 17:09 87,855 --a--c--- C:\WINDOWS\system32\drivers\klick.dat
2008-08-08 16:58 . 2008-08-12 16:31 72,736 --ahsc--- C:\WINDOWS\system32\drivers\fidbox2.dat
2008-08-08 16:58 . 2008-08-12 16:27 7,748 --ahsc--- C:\WINDOWS\system32\drivers\fidbox2.idx
2008-08-05 13:44 . 2008-08-05 13:44 <DIR> d----c--- C:\Documents and Settings\Admin\Application Data\ATI
2008-07-25 07:42 . 2001-08-17 22:05 314,752 --a--c--- C:\WINDOWS\system32\dllcache\camdro21.sys
2008-07-25 07:41 . 2002-09-11 14:00 195,618 --a--c--- C:\WINDOWS\system32\dllcache\c_10002.nls
2008-07-25 07:40 . 2001-09-06 21:26 81,920 --a--c--- C:\WINDOWS\system32\dllcache\brmfcwia.dll
2008-07-25 07:39 . 2001-08-17 21:28 871,388 --a--c--- C:\WINDOWS\system32\dllcache\bcmdm.sys
2008-07-25 07:38 . 2001-09-06 21:26 382,592 --a--c--- C:\WINDOWS\system32\dllcache\atidrab.dll
2008-07-25 07:37 . 2001-08-17 20:12 97,354 --a--c--- C:\WINDOWS\system32\dllcache\aspndis3.sys
2008-07-25 07:37 . 2001-09-06 21:26 96,128 --a--c--- C:\WINDOWS\system32\dllcache\ati.dll
2008-07-25 07:37 . 2001-09-06 18:30 77,824 --a--c--- C:\WINDOWS\system32\dllcache\ati.sys
2008-07-25 07:37 . 2002-08-28 22:59 36,224 --a--c--- C:\WINDOWS\system32\dllcache\an983.sys
2008-07-25 07:37 . 2001-08-17 20:11 27,678 --a--c--- C:\WINDOWS\system32\dllcache\ali5261.sys
2008-07-25 07:37 . 2001-08-17 21:49 26,624 --a--c--- C:\WINDOWS\system32\dllcache\alifir.sys
2008-07-25 07:37 . 2001-08-17 20:11 16,969 --a--c--- C:\WINDOWS\system32\dllcache\amb8002.sys
2008-07-25 07:37 . 2001-08-17 21:47 6,272 --a--c--- C:\WINDOWS\system32\dllcache\apmbatt.sys
2008-07-25 07:36 . 2001-08-17 20:19 747,392 --a--c--- C:\WINDOWS\system32\dllcache\adm8830.sys
2008-07-25 07:36 . 2001-08-17 20:19 553,984 --a--c--- C:\WINDOWS\system32\dllcache\adm8820.sys
2008-07-25 07:36 . 2001-08-17 20:11 46,112 --a--c--- C:\WINDOWS\system32\dllcache\adptsf50.sys
2008-07-25 07:36 . 2001-09-06 21:27 24,576 --a--c--- C:\WINDOWS\system32\dllcache\agcgauge.ax
2008-07-25 07:36 . 2002-08-28 23:00 10,880 --a--c--- C:\WINDOWS\system32\dllcache\admjoy.sys
2008-07-25 07:34 . 2001-09-06 21:26 66,048 --a--c--- C:\WINDOWS\system32\dllcache\s3legacy.dll
2008-07-25 07:33 . 2008-04-14 18:42 2,193,408 --a--c--- C:\WINDOWS\system32\dllcache\ntoskrnl.exe
2008-07-25 07:28 . 2008-07-26 12:54 <DIR> d----c--- C:\Documents and Settings\Admin\Application Data\GlarySoft
2008-07-25 07:16 . 2008-07-29 13:27 <DIR> d----c--- C:\Program Files\Glary Utilities
2008-07-25 07:15 . 2008-08-03 12:59 <DIR> d----c--- C:\Program Files\Find Junk Files
2008-07-25 07:15 . 2008-07-25 07:18 <DIR> d----c--- C:\Program Files\Common Files\Adobe
2008-07-25 07:02 . 2008-07-25 07:02 <DIR> d----c--- C:\Documents and Settings\Admin\Application Data\Delete Cookie
2008-07-25 06:57 . 2008-07-25 06:57 32 --a--c--- C:\WINDOWS\go
2008-07-25 06:52 . 2008-07-26 12:52 <DIR> d----c--- C:\Documents and Settings\Admin\Application Data\Hide IP NG
2008-07-20 13:49 . 2008-07-20 13:50 874 --a--c--- C:\WINDOWS\unins000.dat
2008-07-13 19:08 . 2007-12-05 02:53 356,352 --a--c--- C:\WINDOWS\system32\NVUNINST.EXE
2008-07-13 19:08 . 2007-12-04 05:41 356,352 -ra--c--- C:\WINDOWS\system32\nvudisp.exe
.
((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-08-12 13:40 --------- dc----w C:\Documents and Settings\Admin\Application Data\FastStone
2008-08-12 13:34 --------- dc----w C:\Documents and Settings\Admin\Application Data\uTorrent
2008-08-09 13:46 --------- dc----w C:\Documents and Settings\Admin\Application Data\CyberLink
2008-08-08 15:09 112,144 -c--a-w C:\WINDOWS\system32\drivers\kl1.sys
2008-08-06 05:21 --------- dc----w C:\Documents and Settings\Admin\Application Data\dvdcss
2008-08-06 04:36 --------- dc----w C:\Program Files\Windows Media Connect 2
2008-08-05 11:42 --------- dc----w C:\Program Files\HP
2008-08-05 11:36 --------- dc-h--w C:\Program Files\InstallShield Installation Information
2008-08-03 20:27 --------- dc----w C:\Documents and Settings\All Users\Application Data\DVD Shrink
2008-07-25 05:38 --------- dc----w C:\Documents and Settings\All Users\Application Data\Symantec
2008-07-20 11:50 72,748 -c--a-w C:\WINDOWS\unins000.exe
2008-07-13 17:10 --------- dc----w C:\Program Files\Common Files\Symantec Shared
2008-07-13 17:08 --------- dc----w C:\Program Files\Common Files\InstallShield
2008-07-08 18:15 22,024 -c--a-w C:\Documents and Settings\Admin\Application Data\GDIPFONTCACHEV1.DAT
2008-07-07 05:23 --------- dc----w C:\Program Files\ATI Technologies
2008-07-06 13:41 --------- dc----w C:\Program Files\Any Video Converter
2008-07-06 13:41 --------- dc----w C:\Documents and Settings\Admin\Application Data\Any Video Converter
2008-07-06 13:24 --------- dc----w C:\Program Files\Free Audio Pack
2008-07-06 12:57 --------- dc----w C:\Documents and Settings\Admin\Application Data\zweitgeist
2008-07-05 09:08 --------- dc----w C:\Documents and Settings\Admin\Application Data\Symantec
2008-07-05 06:32 --------- dc----w C:\Documents and Settings\LocalService\Application Data\Webroot
2008-07-05 06:17 --------- dc----w C:\Program Files\NCH Swift Sound
2008-07-04 13:20 --------- dc----w C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files
2008-06-20 11:51 361,600 -c--a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-06-20 11:40 138,496 -c--a-w C:\WINDOWS\system32\drivers\afd.sys
2008-06-20 11:08 225,856 -c--a-w C:\WINDOWS\system32\drivers\tcpip6.sys
2008-06-20 05:59 --------- dc----w C:\Program Files\FastStone Photo Resizer
2008-06-20 04:20 --------- dc----w C:\Program Files\NCH Software
2008-06-19 12:23 --------- dc----w C:\Program Files\K-Lite Codec Pack
2008-06-18 11:06 --------- dc----w C:\Program Files\Java
2008-06-18 11:05 --------- dc----w C:\Program Files\Common Files\Java
2008-06-14 17:36 272,640 -c----w C:\WINDOWS\system32\drivers\bthport.sys
2008-06-06 04:55 24,439 -c--a-w C:\Program Files\updatejpegprocessing.docx
2004-09-28 02:00 26,240 -c--a-w C:\WINDOWS\inf\RAMDSK.SYS
.
------- Sigcheck -------
2005-03-02 20:09 2061184 c6cf1974acdb8329daf9d001c0937cb0 C:\WINDOWS\$hf_mig$\KB890859\SP2GDR\ntkrnlpa.exe
2005-03-02 20:14 2061312 c26d84b802567e629d42861a11c7ec04 C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe
2007-02-28 18:09 2063744 f51b8d8b0703518349096604e788b83e C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntkrnlpa.exe
2007-02-28 18:05 2020352 6f3de0df5031560a92f4498a23062641 C:\WINDOWS\$NtServicePackUninstall$\ntkrnlpa.exe
2008-04-14 18:41 2070272 6129da5c68c13dca12e77580730fd770 C:\WINDOWS\ServicePackFiles\i386\ntkrnlpa.exe
2008-04-14 18:41 2038272 1517cf0a705a6a92769beefef1ef9c5a C:\WINDOWS\system32\ntkrnlpa.exe
2003-04-24 19:19 1953664 743e0ab93a1cd6e7e33833aa4a8b1cdd C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\i386\ntkrnlpa.exe
2008-04-14 18:41 2028544 1b3709f568af90fdb935fd017c92e5e9 C:\WINDOWS\system32\VITrans\ntkrnlpa.exe
2005-03-02 20:09 2183680 281a1e82f5f8fc0b2f4b57ef296a4240 C:\WINDOWS\$hf_mig$\KB890859\SP2GDR\ntoskrnl.exe
2005-03-02 20:15 2183936 5db3e8dec987b5d350e4a105dceaee6a C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe
2007-02-28 18:09 2186496 59dca97dc201792c1ccf9fe621ee5ed7 C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe
2007-02-28 18:05 2140672 5836c9b396de1efda60c07ed5ae09aa9 C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe
2008-04-14 18:42 2193408 140a1bad8a6642c1386bb5b388eb447f C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe
2008-04-14 18:41 2159616 6db14eb4d2a02dd5703c4465de42c80e C:\WINDOWS\system32\ntoskrnl.exe
2008-04-14 18:42 2193408 140a1bad8a6642c1386bb5b388eb447f C:\WINDOWS\system32\dllcache\ntoskrnl.exe
2003-04-24 19:20 1929984 42136718606f3b8c651f390ecba343fe C:\WINDOWS\system32\ReinstallBackups\0000\DriverFiles\i386\ntoskrnl.exe
2008-04-14 18:41 2149888 f13a2b659a51aa340f5596e7d604864b C:\WINDOWS\system32\VITrans\ntoskrnl.exe
2008-04-14 19:02 1427968 8ce3b2402a303dd5c0219de2c3f10c91 C:\WINDOWS\explorer.exe
2007-06-13 15:12 1036800 1d6245afbd3faabc16a885116be1874d C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe
2007-06-13 15:24 1036800 147e95a42a58ce99e403f7f57656bbeb C:\WINDOWS\$NtServicePackUninstall$\explorer.exe
2008-04-14 19:02 1037312 aa04f042a820bf1868e643575887e1a6 C:\WINDOWS\ServicePackFiles\i386\explorer.exe
2008-04-14 19:02 1037312 aa04f042a820bf1868e643575887e1a6 C:\WINDOWS\system32\dllcache\explorer.exe
2008-04-14 19:02 1037312 aa04f042a820bf1868e643575887e1a6 C:\WINDOWS\system32\VITrans\explorer.exe
.
((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HijackThis startup scan"="C:\Program Files\Trend Micro\HijackThis\HijackThis.exe" [2008-08-09 14:16 396288]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 19:02 15360]
"Glary Memory Optimizer"="C:\Program Files\Glary Utilities\memdefrag.exe" [2008-03-05 10:23 92160]
"viwc"="C:\WINDOWS\system32\viwc.exe" [2007-11-30 05:56 329029]
"LClock"="C:\Program Files\LClock\LClock.exe" [2004-09-20 01:27 65536]
"ViStart"="C:\Program Files\ViStart\ViStart.exe" [2007-11-26 19:27 593920]
"ViOrb"="C:\Program Files\ViOrb\ViOrb.exe" [2007-11-19 13:01 163840]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"NoSecCpl"= 0 (0x0)
"DisableChangePassword"= 0 (0x0)
"DisableLockWorkstation"= 0 (0x0)
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoStartMenuPinnedList"= 0 (0x0)
"NoStartMenuMFUprogramsList"= 0 (0x0)
"NoUserNameInStartMenu"= 0 (0x0)
"NoStartMenuSubFolders"= 0 (0x0)
"NoCommonGroups"= 0 (0x0)
"NoPrinterTabs"= 0 (0x0)
"NoDeletePrinter"= 0 (0x0)
"NoAddPrinter"= 0 (0x0)
"NoPrinters"= 0 (0x0)
"NoFavoritesMenu"= 0 (0x0)
"NoRecentDocsNetHood"= 0 (0x0)
"NoChangeAnimation"= 0 (0x0)
"NoChangeKeyboardNavigationIndicators"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"=hex(2):76,69,73,74,61,75,69,2e,65,78,65,00
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.YV12"= yv12vfw.dll
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"C:\\Documents and Settings\\All Users\\Application Data\\Kaspersky Lab Setup Files\\Kaspersky Internet Security 7.0.1.325\\English\\setup.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCPxpsp2res.dll,-22009
"80:TCP"= 80:TCP:HTTP
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)
R0 fasttrak;fasttrak;C:\WINDOWS\system32\DRIVERS\fasttrak.sys [2002-02-25 21:45]
R0 viasraid;viasraid;C:\WINDOWS\system32\DRIVERS\viasraid.sys [2003-09-05 18:25]
R3 ctgame;Game Port;C:\WINDOWS\system32\DRIVERS\ctgame.sys [2002-12-30 07:53]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;C:\WINDOWS\system32\DRIVERS\klim5.sys [2007-04-04 14:58]
S3 MBAMSwissArmy;MBAMSwissArmy;C:\WINDOWS\system32\drivers\mbamswissarmy.sys [2008-07-30 20:07]
.
Inhoud van de 'Gedeelde Taken' map
2008-08-12 C:\WINDOWS\Tasks\GlaryInitialize.job
- C:\Program Files\Glary Utilities\initialize.exe [2008-07-18 11:08]
.
.
------- Supplementary Scan -------
.
FireFox -: Profile - C:\Documents and Settings\Admin\Application Data\Mozilla\Firefox\Profiles\qglo0m6e.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.telegraaf.nl/
FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\NpFv501.dll
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, [url]http://www.gmer.net[/url]
Rootkit scan 2008-08-12 16:29:58
Windows 5.1.2600 Service Pack 3 NTFS
scannen van verborgen processen ...
scannen van verborgen autostart items ...
scannen van verborgen bestanden ...
Scan succesvol afgerond
verborgen bestanden: 0
**************************************************************************
"ImagePath"="SYSTEM32\DRIVERS\viasraid.sys\00.13.01.3196
[Signed]\00|ICH5US"
.
--------------------- DLLs Geladen Onder Lopende Processen ---------------------
PROCESS: C:\WINDOWS\explorer.exe
-> C:\Program Files\LClock\LC.dll
.
------------------------ Other Running Processes ------------------------
.
C:\WINDOWS\system32\ati2evxx.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\Program Files\Glary Utilities\Integrator.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\Microsoft Office\Office10\OUTLOOK.EXE
C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
.
**************************************************************************
.
Voltooingstijd: 2008-08-12 16:36:29 - machine was rebooted
ComboFix-quarantined-files.txt 2008-08-12 14:36:22
Pre-Run: 56,664,420,352 bytes beschikbaar
Post-Run: 58,053,509,120 bytes beschikbaar
272 --- E O F --- 2008-07-09 15:30:02
We gebruiken essentiële cookies om deze site te laten werken, en optionele cookies om de ervaring te verbeteren.