Op deze website gebruiken we cookies om content en advertenties te personaliseren, om functies voor social media te bieden en om ons websiteverkeer te analyseren. Ook delen we informatie over uw gebruik van onze site met onze partners voor social media, adverteren en analyse. Deze partners kunnen deze gegevens combineren met andere informatie die u aan ze heeft verstrekt of die ze hebben verzameld op basis van uw gebruik van hun services. Meer informatie.

Akkoord

Vraag & Antwoord

Beveiliging & privacy

Hijackthis 1302

None
57 antwoorden
  • Het volgende probleem doet zich sinds gisteren voor: ik kreeg vandaag enkele honderden emails met een bericht dat mijn verzonden emails niet afgeleverd konden worden. Ben me niet bewust dat ik zoveel emails aan het verzenden was, dus dat baart me al zorgen. Via Ziggo werd ik verwezen naar https://www.ziggo.nl/#help/hulp-per-onderwerp/internet/e-mail/email003/, dus ik kan nu (voorlopig hoop ik) geen email meer versturen.

    Vandaar dat ik zou willen vragen of iemand onderstaande log zou willen beoordelen.
    Intussen heb ik wel een herstelpunt teruggeplaatst van voor deze problemen. Om tot een oplossing te komen, had ik dat misschien beter niet kunnen doen???

    Alvast bedankt.

    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 19:40:26, on 13-2-2012
    Platform: Windows Vista SP2 (WinNT 6.00.1906)
    MSIE: Internet Explorer v9.00 (9.00.8112.16421)
    Boot mode: Normal

    Running processes:
    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
    C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
    E:\CB Algemeen\X_cbupdate.exe
    c:\PROGRA~2\mcafee\SITEAD~1\saui.exe
    C:\Program Files (x86)\Opera\opera.exe
    C:\Program Files (x86)\Hijackthis\Trend Micro\HiJackThis\HiJackThis.exe
    C:\Program Files (x86)\ConTEXT\ConTEXT.exe
    C:\Windows\SysWOW64\DllHost.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com/maps/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
    O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\progra~1\mcafee\msk\mskapbho.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
    O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20111226152210.dll
    O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
    O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
    O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
    O3 - Toolbar: Dme&x Toolbar - {3F756BC4-26CB-497E-9409-8F09C1850C80} - C:\Program Files (x86)\DMEXBar\dmexbar.dll
    O4 - HKLM\..\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe"
    unkey
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
    O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe" -osboot
    O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /install /silent
    O4 - HKLM\..\RunOnce: [InnoSetupRegFile.0000000001] "C:\Windows\is-4L6Q7.exe" /REG /REGSVRMODE
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
    O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe
    O4 - HKUS\S-1-5-21-3325951053-1369944651-455877973-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'UpdatusUser')
    O4 - HKUS\S-1-5-21-3325951053-1369944651-455877973-1001\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'UpdatusUser')
    O4 - Global Startup: ConBuilder - Auto Update.lnk = E:\CB Algemeen\cbupdate.exe
    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
    O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
    O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
    O18 - Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\progra~2\mcafee\msc\mcsniepl.dll
    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
    O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
    O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
    O23 - Service: McAfee Personal Firewall Service (McMPFSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
    O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
    O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
    O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
    O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan\mcods.exe
    O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
    O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe
    O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
    O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - Unknown owner - C:\Windows\system32\mfevtps.exe (file missing)
    O23 - Service: 1% (MOBKbackup) - McAfee, Inc. - C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe
    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
    O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
    O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
    O23 - Service: @%SystemRoot%\System32
    etlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32
    vvsvc.exe (file missing)
    O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
    O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\SysWOW64\PSIService.exe
    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
    O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision
    vSCPAPISvr.exe
    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
    O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)


    End of file - 9059 bytes



  • Jij mag het volgende gaan doen:

    [b:0b5fcf32f4]Ik wil graag dat jij je tijdens de fix aan onderstaande regels houdt:[/b:0b5fcf32f4]
  • Bedankt voor je snelle antwoord. 't Zal wel morgenavond worden voordat ik je instructies uit ga voeren; vanavond en morgen overdag komt het er niet van.

    Groeten
    Rob
  • Hieronder de gevraagde logs. Combofix meldde wel dat ik antivirussoftware niet had uitgeschakeld, terwijl ik dat (volgens mij) wel gedaan had.

    16:37:40.0550 3500 TDSS rootkit removing tool 2.7.12.0 Feb 11 2012 16:58:52
    16:37:40.0550 3500 ============================================================
    16:37:40.0550 3500 Current date / time: 2012/02/14 16:37:40.0550
    16:37:40.0550 3500 SystemInfo:
    16:37:40.0550 3500
    16:37:40.0550 3500 OS Version: 6.0.6002 ServicePack: 2.0
    16:37:40.0550 3500 Product type: Workstation
    16:37:40.0550 3500 ComputerName: mijzelf
    16:37:40.0550 3500 UserName: mijzelf
    16:37:40.0550 3500 Windows directory: C:\Windows
    16:37:40.0550 3500 System windows directory: C:\Windows
    16:37:40.0550 3500 Running under WOW64
    16:37:40.0550 3500 Processor architecture: Intel x64
    16:37:40.0550 3500 Number of processors: 4
    16:37:40.0550 3500 Page size: 0x1000
    16:37:40.0550 3500 Boot type: Normal boot
    16:37:40.0550 3500 ============================================================
    16:37:42.0406 3500 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
    16:37:42.0422 3500 \Device\Harddisk0\DR0:
    16:37:42.0422 3500 MBR used
    16:37:42.0422 3500 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x1E848000
    16:37:42.0422 3500 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1E848800, BlocksNum 0x1E848000
    16:37:42.0422 3500 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x3D090800, BlocksNum 0x37675800
    16:37:42.0858 3500 Initialize success
    16:37:42.0858 3500 ============================================================
    16:37:42.0874 1780 ============================================================
    16:37:42.0874 1780 Scan started
    16:37:42.0874 1780 Mode: Auto (DCExact ); SigCheck; TDLFS; Silent;
    16:37:42.0874 1780 ============================================================
    16:37:45.0588 1780 ACPI (1965aaffab07e3fb03c77f81beba3547) C:\Windows\system32\drivers\acpi.sys
    16:37:45.0713 1780 ACPI - ok
    16:37:45.0776 1780 adp94xx (f14215e37cf124104575073f782111d2) C:\Windows\system32\drivers\adp94xx.sys
    16:37:45.0916 1780 adp94xx - ok
    16:37:45.0947 1780 adpahci (7d05a75e3066861a6610f7ee04ff085c) C:\Windows\system32\drivers\adpahci.sys
    16:37:45.0963 1780 adpahci - ok
    16:37:45.0994 1780 adpu160m (820a201fe08a0c345b3bedbc30e1a77c) C:\Windows\system32\drivers\adpu160m.sys
    16:37:46.0010 1780 adpu160m - ok
    16:37:46.0056 1780 adpu320 (9b4ab6854559dc168fbb4c24fc52e794) C:\Windows\system32\drivers\adpu320.sys
    16:37:46.0072 1780 adpu320 - ok
    16:37:46.0134 1780 AFD (0cc146c4addea45791b18b1e2659f4a9) C:\Windows\system32\drivers\afd.sys
    16:37:46.0384 1780 AFD - ok
    16:37:46.0431 1780 agp440 (f6f6793b7f17b550ecfdbd3b229173f7) C:\Windows\system32\drivers\agp440.sys
    16:37:46.0431 1780 agp440 - ok
    16:37:46.0462 1780 aic78xx (222cb641b4b8a1d1126f8033f9fd6a00) C:\Windows\system32\drivers\djsvs.sys
    16:37:46.0478 1780 aic78xx - ok
    16:37:46.0524 1780 aliide (157d0898d4b73f075ce9fa26b482df98) C:\Windows\system32\drivers\aliide.sys
    16:37:46.0524 1780 aliide - ok
    16:37:46.0540 1780 amdide (970fa5059e61e30d25307b99903e991e) C:\Windows\system32\drivers\amdide.sys
    16:37:46.0556 1780 amdide - ok
    16:37:46.0571 1780 AmdK8 (cdc3632a3a5ea4dbb83e46076a3165a1) C:\Windows\system32\drivers\amdk8.sys
    16:37:46.0665 1780 AmdK8 - ok
    16:37:46.0696 1780 arc (ba8417d4765f3988ff921f30f630e303) C:\Windows\system32\drivers\arc.sys
    16:37:46.0712 1780 arc - ok
    16:37:46.0758 1780 arcsas (9d41c435619733b34cc16a511e644b11) C:\Windows\system32\drivers\arcsas.sys
    16:37:46.0774 1780 arcsas - ok
    16:37:46.0821 1780 AsyncMac (22d13ff3dafec2a80634752b1eaa2de6) C:\Windows\system32\DRIVERS\asyncmac.sys
    16:37:46.0883 1780 AsyncMac - ok
    16:37:46.0899 1780 atapi (e68d9b3a3905619732f7fe039466a623) C:\Windows\system32\drivers\atapi.sys
    16:37:46.0914 1780 atapi - ok
    16:37:47.0024 1780 Beep - ok
    16:37:47.0055 1780 blbdrive (79feeb40056683f8f61398d81dda65d2) C:\Windows\system32\drivers\blbdrive.sys
    16:37:47.0102 1780 blbdrive - ok
    16:37:47.0148 1780 bowser (2348447a80920b2493a9b582a23e81e1) C:\Windows\system32\DRIVERS\bowser.sys
    16:37:47.0273 1780 bowser - ok
    16:37:47.0289 1780 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\brfiltlo.sys
    16:37:47.0414 1780 BrFiltLo - ok
    16:37:47.0429 1780 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\brfiltup.sys
    16:37:47.0460 1780 BrFiltUp - ok
    16:37:47.0507 1780 Brserid (f0f0ba4d815be446aa6a4583ca3bca9b) C:\Windows\system32\drivers\brserid.sys
    16:37:47.0648 1780 Brserid - ok
    16:37:47.0663 1780 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\system32\drivers\brserwdm.sys
    16:37:47.0772 1780 BrSerWdm - ok
    16:37:47.0788 1780 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\system32\drivers\brusbmdm.sys
    16:37:47.0897 1780 BrUsbMdm - ok
    16:37:47.0928 1780 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\system32\drivers\brusbser.sys
    16:37:47.0975 1780 BrUsbSer - ok
    16:37:48.0038 1780 BTHMODEM (e0777b34e05f8a82a21856efc900c29f) C:\Windows\system32\drivers\bthmodem.sys
    16:37:48.0100 1780 BTHMODEM - ok
    16:37:48.0116 1780 catchme - ok
    16:37:48.0147 1780 cdfs (b4d787db8d30793a4d4df9feed18f136) C:\Windows\system32\DRIVERS\cdfs.sys
    16:37:48.0225 1780 cdfs - ok
    16:37:48.0256 1780 cdrom (c025aa69be3d0d25c7a2e746ef6f94fc) C:\Windows\system32\DRIVERS\cdrom.sys
    16:37:48.0334 1780 cdrom - ok
    16:37:48.0381 1780 cfwids (ed0263b2eb24f0f4e3898036fa1d28a1) C:\Windows\system32\drivers\cfwids.sys
    16:37:48.0474 1780 cfwids - ok
    16:37:48.0552 1780 circlass (02ea568d498bbdd4ba55bf3fce34d456) C:\Windows\system32\drivers\circlass.sys
    16:37:48.0615 1780 circlass - ok
    16:37:48.0646 1780 CLFS (3dca9a18b204939cfb24bea53e31eb48) C:\Windows\system32\CLFS.sys
    16:37:48.0708 1780 CLFS - ok
    16:37:48.0740 1780 cmdide (e5d5499a1c50a54b5161296b6afe6192) C:\Windows\system32\drivers\cmdide.sys
    16:37:48.0755 1780 cmdide - ok
    16:37:48.0771 1780 Compbatt (7fb8ad01db0eabe60c8a861531a8f431) C:\Windows\system32\drivers\compbatt.sys
    16:37:48.0786 1780 Compbatt - ok
    16:37:48.0802 1780 crcdisk (a8585b6412253803ce8efcbd6d6dc15c) C:\Windows\system32\drivers\crcdisk.sys
    16:37:48.0818 1780 crcdisk - ok
    16:37:48.0880 1780 DfsC (8b722ba35205c71e7951cdc4cdbade19) C:\Windows\system32\Drivers\dfsc.sys
    16:37:49.0005 1780 DfsC - ok
    16:37:49.0036 1780 disk (b0107e40ecdb5fa692ebf832f295d905) C:\Windows\system32\drivers\disk.sys
    16:37:49.0052 1780 disk - ok
    16:37:49.0114 1780 drmkaud (f1a78a98cfc2ee02144c6bec945447e6) C:\Windows\system32\drivers\drmkaud.sys
    16:37:49.0145 1780 drmkaud - ok
    16:37:49.0192 1780 DXGKrnl (b8e554e502d5123bc111f99d6a2181b4) C:\Windows\System32\drivers\dxgkrnl.sys
    16:37:49.0223 1780 DXGKrnl - ok
    16:37:49.0254 1780 E1G60 (264cee7b031a9d6c827f3d0cb031f2fe) C:\Windows\system32\DRIVERS\E1G6032E.sys
    16:37:49.0317 1780 E1G60 - ok
    16:37:49.0379 1780 Ecache (5f94962be5a62db6e447ff6470c4f48a) C:\Windows\system32\drivers\ecache.sys
    16:37:49.0395 1780 Ecache - ok
    16:37:49.0457 1780 elxstor (c4636d6e10469404ab5308d9fd45ed07) C:\Windows\system32\drivers\elxstor.sys
    16:37:49.0551 1780 elxstor - ok
    16:37:49.0566 1780 ErrDev (bc3a58e938bb277e46bf4b3003b01abd) C:\Windows\system32\drivers\errdev.sys
    16:37:49.0598 1780 ErrDev - ok
    16:37:49.0738 1780 exfat (486844f47b6636044a42454614ed4523) C:\Windows\system32\drivers\exfat.sys
    16:37:49.0832 1780 exfat - ok
    16:37:49.0863 1780 fastfat (1a4bee34277784619ddaf0422c0c6e23) C:\Windows\system32\drivers\fastfat.sys
    16:37:49.0941 1780 fastfat - ok
    16:37:49.0941 1780 fdc (81b79b6df71fa1d2c6d688d830616e39) C:\Windows\system32\DRIVERS\fdc.sys
    16:37:49.0988 1780 fdc - ok
    16:37:50.0019 1780 FileInfo (457b7d1d533e4bd62a99aed9c7bb4c59) C:\Windows\system32\drivers\fileinfo.sys
    16:37:50.0034 1780 FileInfo - ok
    16:37:50.0066 1780 Filetrace (d421327fd6efccaf884a54c58e1b0d7f) C:\Windows\system32\drivers\filetrace.sys
    16:37:50.0112 1780 Filetrace - ok
    16:37:50.0128 1780 flpydisk (230923ea2b80f79b0f88d90f87b87ebd) C:\Windows\system32\DRIVERS\flpydisk.sys
    16:37:50.0159 1780 flpydisk - ok
    16:37:50.0175 1780 FltMgr (e3041bc26d6930d61f42aedb79c91720) C:\Windows\system32\drivers\fltmgr.sys
    16:37:50.0222 1780 FltMgr - ok
    16:37:50.0253 1780 Fs_Rec (29d99e860a1ca0a03c6a733fdd0da703) C:\Windows\system32\drivers\Fs_Rec.sys
    16:37:50.0300 1780 Fs_Rec - ok
    16:37:50.0331 1780 gagp30kx (c8e416668d3dc2be3d4fe4c79224997f) C:\Windows\system32\drivers\gagp30kx.sys
    16:37:50.0378 1780 gagp30kx - ok
    16:37:50.0409 1780 HdAudAddService (68e732382b32417ff61fd663259b4b09) C:\Windows\system32\drivers\HdAudio.sys
    16:37:50.0534 1780 HdAudAddService - ok
    16:37:50.0658 1780 HDAudBus (f942c5820205f2fb453243edfec82a3d) C:\Windows\system32\DRIVERS\HDAudBus.sys
    16:37:50.0752 1780 HDAudBus - ok
    16:37:50.0783 1780 HidBth (b4881c84a180e75b8c25dc1d726c375f) C:\Windows\system32\drivers\hidbth.sys
    16:37:50.0846 1780 HidBth - ok
    16:37:50.0877 1780 HidIr (4e77a77e2c986e8f88f996bb3e1ad829) C:\Windows\system32\drivers\hidir.sys
    16:37:50.0970 1780 HidIr - ok
    16:37:50.0986 1780 HidUsb (443bdd2d30bb4f00795c797e2cf99edf) C:\Windows\system32\DRIVERS\hidusb.sys
    16:37:51.0033 1780 HidUsb - ok
    16:37:51.0048 1780 HpCISSs (d7109a1e6bd2dfdbcba72a6bc626a13b) C:\Windows\system32\drivers\hpcisss.sys
    16:37:51.0064 1780 HpCISSs - ok
    16:37:51.0095 1780 HTTP (098f1e4e5c9cb5b0063a959063631610) C:\Windows\system32\drivers\HTTP.sys
    16:37:51.0204 1780 HTTP - ok
    16:37:51.0220 1780 i2omp (da94c854cea5fac549d4e1f6e88349e8) C:\Windows\system32\drivers\i2omp.sys
    16:37:51.0236 1780 i2omp - ok
    16:37:51.0267 1780 i8042prt (cbb597659a2713ce0c9cc20c88c7591f) C:\Windows\system32\DRIVERS\i8042prt.sys
    16:37:51.0329 1780 i8042prt - ok
    16:37:51.0345 1780 iaStorV (3e3bf3627d886736d0b4e90054f929f6) C:\Windows\system32\drivers\iastorv.sys
    16:37:51.0360 1780 iaStorV - ok
    16:37:51.0407 1780 iirsp (8c3951ad2fe886ef76c7b5027c3125d3) C:\Windows\system32\drivers\iirsp.sys
    16:37:51.0423 1780 iirsp - ok
    16:37:51.0438 1780 intelide (df797a12176f11b2d301c5b234bb200e) C:\Windows\system32\drivers\intelide.sys
    16:37:51.0454 1780 intelide - ok
    16:37:51.0485 1780 intelppm (bfd84af32fa1bad6231c4585cb469630) C:\Windows\system32\DRIVERS\intelppm.sys
    16:37:51.0501 1780 intelppm - ok
    16:37:51.0548 1780 IpFilterDriver (d8aabc341311e4780d6fce8c73c0ad81) C:\Windows\system32\DRIVERS\ipfltdrv.sys
    16:37:51.0626 1780 IpFilterDriver - ok
    16:37:51.0626 1780 IpInIp - ok
    16:37:51.0641 1780 IPMIDRV (9c2ee2e6e5a7203bfae15c299475ec67) C:\Windows\system32\drivers\ipmidrv.sys
    16:37:51.0672 1780 IPMIDRV - ok
    16:37:51.0719 1780 IPNAT (b7e6212f581ea5f6ab0c3a6ceeeb89be) C:\Windows\system32\DRIVERS\ipnat.sys
    16:37:51.0750 1780 IPNAT - ok
    16:37:51.0797 1780 IRENUM (8c42ca155343a2f11d29feca67faa88d) C:\Windows\system32\drivers\irenum.sys
    16:37:51.0844 1780 IRENUM - ok
    16:37:51.0860 1780 isapnp (0672bfcedc6fc468a2b0500d81437f4f) C:\Windows\system32\drivers\isapnp.sys
    16:37:51.0906 1780 isapnp - ok
    16:37:51.0922 1780 iScsiPrt (e4fdf99599f27ec25d2cf6d754243520) C:\Windows\system32\DRIVERS\msiscsi.sys
    16:37:51.0938 1780 iScsiPrt - ok
    16:37:51.0953 1780 iteatapi (63c766cdc609ff8206cb447a65abba4a) C:\Windows\system32\drivers\iteatapi.sys
    16:37:51.0969 1780 iteatapi - ok
    16:37:52.0000 1780 iteraid (1281fe73b17664631d12f643cbea3f59) C:\Windows\system32\drivers\iteraid.sys
    16:37:52.0016 1780 iteraid - ok
    16:37:52.0156 1780 kbdclass (423696f3ba6472dd17699209b933bc26) C:\Windows\system32\DRIVERS\kbdclass.sys
    16:37:52.0172 1780 kbdclass - ok
    16:37:52.0281 1780 kbdhid (dbdf75d51464fbc47d0104ec3d572c05) C:\Windows\system32\DRIVERS\kbdhid.sys
    16:37:52.0328 1780 kbdhid - ok
    16:37:52.0374 1780 KSecDD (2758d174604f597bbc8a217ff667913d) C:\Windows\system32\Drivers\ksecdd.sys
    16:37:52.0577 1780 KSecDD - ok
    16:37:52.0593 1780 ksthunk (1d419cf43db29396ecd7113d129d94eb) C:\Windows\system32\drivers\ksthunk.sys
    16:37:52.0671 1780 ksthunk - ok
    16:37:52.0686 1780 L1E (4180e9d6e51516371afc369f7e8f6652) C:\Windows\system32\DRIVERS\L1E60x64.sys
    16:37:52.0842 1780 L1E - ok
    16:37:52.0858 1780 lltdio (96ece2659b6654c10a0c310ae3a6d02c) C:\Windows\system32\DRIVERS\lltdio.sys
    16:37:52.0905 1780 lltdio - ok
    16:37:52.0920 1780 LSI_FC (acbe1af32d3123e330a07bfbc5ec4a9b) C:\Windows\system32\drivers\lsi_fc.sys
    16:37:52.0983 1780 LSI_FC - ok
    16:37:53.0014 1780 LSI_SAS (799ffb2fc4729fa46d2157c0065b3525) C:\Windows\system32\drivers\lsi_sas.sys
    16:37:53.0030 1780 LSI_SAS - ok
    16:37:53.0061 1780 LSI_SCSI (f445ff1daad8a226366bfaf42551226b) C:\Windows\system32\drivers\lsi_scsi.sys
    16:37:53.0076 1780 LSI_SCSI - ok
    16:37:53.0123 1780 luafv (52f87b9cc8932c2a7375c3b2a9be5e3e) C:\Windows\system32\drivers\luafv.sys
    16:37:53.0186 1780 luafv - ok
    16:37:53.0232 1780 MBAMProtector (79da94b35371b9e7104460c7693dcb2c) C:\Windows\system32\drivers\mbam.sys
    16:37:53.0248 1780 MBAMProtector - ok
    16:37:53.0326 1780 megasas (5c5cd6aaced32fb26c3fb34b3dcf972f) C:\Windows\system32\drivers\megasas.sys
    16:37:53.0342 1780 megasas - ok
    16:37:53.0373 1780 MegaSR (859bc2436b076c77c159ed694acfe8f8) C:\Windows\system32\drivers\megasr.sys
    16:37:53.0435 1780 MegaSR - ok
    16:37:53.0576 1780 mfeapfk (ef3acfb7e3f82d5f7cde9ef5f0a4e2e2) C:\Windows\system32\drivers\mfeapfk.sys
    16:37:53.0622 1780 mfeapfk - ok
    16:37:53.0716 1780 mfeavfk (e7a60bdb4365b561d896019b82fb7dd0) C:\Windows\system32\drivers\mfeavfk.sys
    16:37:53.0763 1780 mfeavfk - ok
    16:37:53.0794 1780 mfeavfk01 - ok
    16:37:53.0841 1780 mfefirek (670dffe55e2f9ab99d9169c428bcece9) C:\Windows\system32\drivers\mfefirek.sys
    16:37:54.0028 1780 mfefirek - ok
    16:37:54.0075 1780 mfehidk (1892616b7f9291fd77c3fa0a5811fe9f) C:\Windows\system32\drivers\mfehidk.sys
    16:37:54.0184 1780 mfehidk - ok
    16:37:54.0215 1780 mfenlfk (1721261c77f6e7a9e0cb51b7d9f31b60) C:\Windows\system32\DRIVERS\mfenlfk.sys
    16:37:54.0262 1780 mfenlfk - ok
    16:37:54.0293 1780 mferkdet (65776bd8029e409935b90de30bf99526) C:\Windows\system32\drivers\mferkdet.sys
    16:37:54.0340 1780 mferkdet - ok
    16:37:54.0371 1780 mfewfpk (4f17d8b85b903d96ef7033bb6ef50516) C:\Windows\system32\drivers\mfewfpk.sys
    16:37:54.0418 1780 mfewfpk - ok
    16:37:54.0449 1780 MOBKFilter (3800c23d0d90c59aafcdefdc82b5c4af) C:\Windows\system32\DRIVERS\MOBK.sys
    16:37:54.0496 1780 MOBKFilter - ok
    16:37:54.0527 1780 Modem (59848d5cc74606f0ee7557983bb73c2e) C:\Windows\system32\drivers\modem.sys
    16:37:54.0590 1780 Modem - ok
    16:37:54.0605 1780 monitor (c247cc2a57e0a0c8c6dccf7807b3e9e5) C:\Windows\system32\DRIVERS\monitor.sys
    16:37:54.0652 1780 monitor - ok
    16:37:54.0668 1780 mouclass (9367304e5e412b120cf5f4ea14e4e4f1) C:\Windows\system32\DRIVERS\mouclass.sys
    16:37:54.0683 1780 mouclass - ok
    16:37:54.0714 1780 mouhid (c2c2bd5c5ce5aaf786ddd74b75d2ac69) C:\Windows\system32\DRIVERS\mouhid.sys
    16:37:54.0761 1780 mouhid - ok
    16:37:54.0777 1780 MountMgr (11bc9b1e8801b01f7f6adb9ead30019b) C:\Windows\system32\drivers\mountmgr.sys
    16:37:54.0777 1780 MountMgr - ok
    16:37:54.0824 1780 mpio (f8276eb8698142884498a528dfea8478) C:\Windows\system32\drivers\mpio.sys
    16:37:54.0839 1780 mpio - ok
    16:37:54.0886 1780 mpsdrv (c92b9abdb65a5991e00c28f13491dba2) C:\Windows\system32\drivers\mpsdrv.sys
    16:37:54.0933 1780 mpsdrv - ok
    16:37:54.0995 1780 Mraid35x (3c200630a89ef2c0864d515b7a75802e) C:\Windows\system32\drivers\mraid35x.sys
    16:37:55.0011 1780 Mraid35x - ok
    16:37:55.0058 1780 MRxDAV (7c1de4aa96dc0c071611f9e7de02a68d) C:\Windows\system32\drivers\mrxdav.sys
    16:37:55.0120 1780 MRxDAV - ok
    16:37:55.0167 1780 mrxsmb (1485811b320ff8c7edad1caebb1c6c2b) C:\Windows\system32\DRIVERS\mrxsmb.sys
    16:37:55.0260 1780 mrxsmb - ok
    16:37:55.0307 1780 mrxsmb10 (3b929a60c833fc615fd97fba82bc7632) C:\Windows\system32\DRIVERS\mrxsmb10.sys
    16:37:55.0370 1780 mrxsmb10 - ok
    16:37:55.0385 1780 mrxsmb20 (c64ab3e1f53b4f5b5bb6d796b2d7bec3) C:\Windows\system32\DRIVERS\mrxsmb20.sys
    16:37:55.0448 1780 mrxsmb20 - ok
    16:37:55.0463 1780 msahci (1ac860612b85d8e85ee257d372e39f4d) C:\Windows\system32\drivers\msahci.sys
    16:37:55.0479 1780 msahci - ok
    16:37:55.0494 1780 msdsm (264bbb4aaf312a485f0e44b65a6b7202) C:\Windows\system32\drivers\msdsm.sys
    16:37:55.0510 1780 msdsm - ok
    16:37:55.0588 1780 Msfs (704f59bfc4512d2bb0146aec31b10a7c) C:\Windows\system32\drivers\Msfs.sys
    16:37:55.0635 1780 Msfs - ok
    16:37:55.0666 1780 msisadrv (00ebc952961664780d43dca157e79b27) C:\Windows\system32\drivers\msisadrv.sys
    16:37:55.0682 1780 msisadrv - ok
    16:37:55.0728 1780 MSKSSRV (0ea73e498f53b96d83dbfca074ad4cf8) C:\Windows\system32\drivers\MSKSSRV.sys
    16:37:55.0775 1780 MSKSSRV - ok
    16:37:55.0791 1780 MSPCLOCK (52e59b7e992a58e740aa63f57edbae8b) C:\Windows\system32\drivers\MSPCLOCK.sys
    16:37:55.0884 1780 MSPCLOCK - ok
    16:37:55.0916 1780 MSPQM (49084a75bae043ae02d5b44d02991bb2) C:\Windows\system32\drivers\MSPQM.sys
    16:37:55.0962 1780 MSPQM - ok
    16:37:56.0040 1780 MsRPC (dc6ccf440cdede4293db41c37a5060a5) C:\Windows\system32\drivers\MsRPC.sys
    16:37:56.0056 1780 MsRPC - ok
    16:37:56.0103 1780 mssmbios (855796e59df77ea93af46f20155bf55b) C:\Windows\system32\DRIVERS\mssmbios.sys
    16:37:56.0103 1780 mssmbios - ok
    16:37:56.0259 1780 MSTEE (86d632d75d05d5b7c7c043fa3564ae86) C:\Windows\system32\drivers\MSTEE.sys
    16:37:56.0306 1780 MSTEE - ok
    16:37:56.0352 1780 MTsensor (03b7145c889603537e9ffeabb1ad1089) C:\Windows\system32\DRIVERS\ASACPI.sys
    16:37:56.0430 1780 MTsensor - ok
    16:37:56.0446 1780 Mup (0cc49f78d8aca0877d885f149084e543) C:\Windows\system32\Drivers\mup.sys
    16:37:56.0462 1780 Mup - ok
    16:37:56.0540 1780 NativeWifiP (2007b826c4acd94ae32232b41f0842b9) C:\Windows\system32\DRIVERS
    wifi.sys
    16:37:56.0571 1780 NativeWifiP - ok
    16:37:56.0649 1780 NDIS (65950e07329fcee8e6516b17c8d0abb6) C:\Windows\system32\drivers
    dis.sys
    16:37:56.0742 1780 NDIS - ok
    16:37:56.0774 1780 NdisTapi (64df698a425478e321981431ac171334) C:\Windows\system32\DRIVERS
    distapi.sys
    16:37:56.0820 1780 NdisTapi - ok
    16:37:56.0883 1780 Ndisuio (8baa43196d7b5bb972c9a6b2bbf61a19) C:\Windows\system32\DRIVERS
    disuio.sys
    16:37:56.0961 1780 Ndisuio - ok
    16:37:56.0976 1780 NdisWan (f8158771905260982ce724076419ef19) C:\Windows\system32\DRIVERS
    diswan.sys
    16:37:57.0008 1780 NdisWan - ok
    16:37:57.0023 1780 NDProxy (9cb77ed7cb72850253e973a2d6afdf49) C:\Windows\system32\drivers\NDProxy.sys
    16:37:57.0086 1780 NDProxy - ok
    16:37:57.0132 1780 NetBIOS (a499294f5029a7862adc115bda7371ce) C:\Windows\system32\DRIVERS
    etbios.sys
    16:37:57.0164 1780 NetBIOS - ok
    16:37:57.0320 1780 netbt (fc2c792ebddc8e28df939d6a92c83d61) C:\Windows\system32\DRIVERS
    etbt.sys
    16:37:57.0429 1780 netbt - ok
    16:37:57.0460 1780 nfrd960 (4ac08bd6af2df42e0c3196d826c8aea7) C:\Windows\system32\drivers
    frd960.sys
    16:37:57.0476 1780 nfrd960 - ok
    16:37:57.0507 1780 Npfs (b298874f8e0ea93f06ec40aa8d146478) C:\Windows\system32\drivers\Npfs.sys
    16:37:57.0585 1780 Npfs - ok
    16:37:57.0647 1780 nsiproxy (1523af19ee8b030ba682f7a53537eaeb) C:\Windows\system32\drivers
    siproxy.sys
    16:37:57.0694 1780 nsiproxy - ok
    16:37:57.0803 1780 Ntfs (bac869dfb98e499ba4d9bb1fb43270e1) C:\Windows\system32\drivers\Ntfs.sys
    16:37:57.0990 1780 Ntfs - ok
    16:37:58.0006 1780 Null (dd5d684975352b85b52e3fd5347c20cb) C:\Windows\system32\drivers\Null.sys
    16:37:58.0068 1780 Null - ok
    16:37:58.0661 1780 nvlddmkm (cc1efea1f0ab17e59bd4b5baff3e5cb0) C:\Windows\system32\DRIVERS
    vlddmkm.sys
    16:37:58.0942 1780 nvlddmkm - ok
    16:37:58.0973 1780 nvraid (2c040b7ada5b06f6facadac8514aa034) C:\Windows\system32\drivers
    vraid.sys
    16:37:58.0989 1780 nvraid - ok
    16:37:59.0004 1780 nvstor (f7ea0fe82842d05eda3efdd376dbfdba) C:\Windows\system32\drivers
    vstor.sys
    16:37:59.0020 1780 nvstor - ok
    16:37:59.0067 1780 nv_agp (19067ca93075ef4823e3938a686f532f) C:\Windows\system32\drivers
    v_agp.sys
    16:37:59.0082 1780 nv_agp - ok
    16:37:59.0129 1780 NwlnkFlt - ok
    16:37:59.0145 1780 NwlnkFwd - ok
    16:37:59.0223 1780 ohci1394 (b5b1ce65ac15bbd11c0619e3ef7cfc28) C:\Windows\system32\DRIVERS\ohci1394.sys
    16:37:59.0270 1780 ohci1394 - ok
    16:37:59.0348 1780 Parport (aecd57f94c887f58919f307c35498ea0) C:\Windows\system32\drivers\parport.sys
    16:37:59.0410 1780 Parport - ok
    16:37:59.0472 1780 partmgr (f9b5eda4c17a2be7663f064dbf0fe254) C:\Windows\system32\drivers\partmgr.sys
    16:37:59.0488 1780 partmgr - ok
    16:37:59.0519 1780 pci (47ab1e0fc9d0e12bb53ba246e3a0906d) C:\Windows\system32\drivers\pci.sys
    16:37:59.0535 1780 pci - ok
    16:37:59.0582 1780 pciide (2657f6c0b78c36d95034be109336e382) C:\Windows\system32\drivers\pciide.sys
    16:37:59.0582 1780 pciide - ok
    16:37:59.0628 1780 pcmcia (037661f3d7c507c9993b7010ceee6288) C:\Windows\system32\drivers\pcmcia.sys
    16:37:59.0644 1780 pcmcia - ok
    16:37:59.0722 1780 PEAUTH (58865916f53592a61549b04941bfd80d) C:\Windows\system32\drivers\peauth.sys
    16:37:59.0972 1780 PEAUTH - ok
    16:38:00.0034 1780 PptpMiniport (23386e9952025f5f21c368971e2e7301) C:\Windows\system32\DRIVERS\raspptp.sys
    16:38:00.0112 1780 PptpMiniport - ok
    16:38:00.0159 1780 Processor (5080e59ecee0bc923f14018803aa7a01) C:\Windows\system32\drivers\processr.sys
    16:38:00.0206 1780 Processor - ok
    16:38:00.0252 1780 PSched (c5ab7f0809392d0da027f4a2a81bfa31) C:\Windows\system32\DRIVERS\pacer.sys
    16:38:00.0284 1780 PSched - ok
    16:38:00.0330 1780 ql2300 (0b83f4e681062f3839be2ec1d98fd94a) C:\Windows\system32\drivers\ql2300.sys
    16:38:00.0502 1780 ql2300 - ok
    16:38:00.0533 1780 ql40xx (e1c80f8d4d1e39ef9595809c1369bf2a) C:\Windows\system32\drivers\ql40xx.sys
    16:38:00.0549 1780 ql40xx - ok
    16:38:00.0580 1780 QWAVEdrv (e8d76edab77ec9c634c27b8eac33adc5) C:\Windows\system32\drivers\qwavedrv.sys
    16:38:00.0627 1780 QWAVEdrv - ok
    16:38:00.0642 1780 RasAcd (1013b3b663a56d3ddd784f581c1bd005) C:\Windows\system32\DRIVERS\rasacd.sys
    16:38:00.0689 1780 RasAcd - ok
    16:38:00.0752 1780 Rasl2tp (ac7bc4d42a7e558718dfdec599bbfc2c) C:\Windows\system32\DRIVERS\rasl2tp.sys
    16:38:00.0783 1780 Rasl2tp - ok
    16:38:00.0830 1780 RasPppoe (4517fbf8b42524afe4ede1de102aae3e) C:\Windows\system32\DRIVERS\raspppoe.sys
    16:38:00.0908 1780 RasPppoe - ok
    16:38:00.0954 1780 RasSstp (c6a593b51f34c33e5474539544072527) C:\Windows\system32\DRIVERS\rassstp.sys
    16:38:00.0970 1780 RasSstp - ok
    16:38:01.0095 1780 rdbss (322db5c6b55e8d8ee8d6f358b2aaabb1) C:\Windows\system32\DRIVERS\rdbss.sys
    16:38:01.0142 1780 rdbss - ok
    16:38:01.0173 1780 RDPCDD (603900cc05f6be65ccbf373800af3716) C:\Windows\system32\DRIVERS\RDPCDD.sys
    16:38:01.0220 1780 RDPCDD - ok
    16:38:01.0266 1780 rdpdr (c045d1fb111c28df0d1be8d4bda22c06) C:\Windows\system32\drivers\rdpdr.sys
    16:38:01.0344 1780 rdpdr - ok
    16:38:01.0360 1780 RDPENCDD (cab9421daf3d97b33d0d055858e2c3ab) C:\Windows\system32\drivers\rdpencdd.sys
    16:38:01.0391 1780 RDPENCDD - ok
    16:38:01.0407 1780 RDPWD (b1d741c87cea8d7282146366cc9c3f81) C:\Windows\system32\drivers\RDPWD.sys
    16:38:01.0500 1780 RDPWD - ok
    16:38:01.0547 1780 Revoflt (9c3ac71a9934b884fac567a8807e9c4d) C:\Windows\system32\DRIVERS\revoflt.sys
    16:38:01.0594 1780 Revoflt - ok
    16:38:01.0610 1780 rspndr (22a9cb08b1a6707c1550c6bf099aae73) C:\Windows\system32\DRIVERS\rspndr.sys
    16:38:01.0641 1780 rspndr - ok
    16:38:01.0719 1780 sbp2port (cd9c693589c60ad59bbbcfb0e524e01b) C:\Windows\system32\drivers\sbp2port.sys
    16:38:01.0734 1780 sbp2port - ok
    16:38:01.0750 1780 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
    16:38:01.0812 1780 secdrv - ok
    16:38:01.0844 1780 Serenum (2449316316411d65bd2c761a6ffb2ce2) C:\Windows\system32\DRIVERS\serenum.sys
    16:38:01.0922 1780 Serenum - ok
    16:38:01.0953 1780 Serial (4b438170be2fc8e0bd35ee87a960f84f) C:\Windows\system32\DRIVERS\serial.sys
    16:38:01.0984 1780 Serial - ok
    16:38:02.0000 1780 sermouse (a842f04833684bceea7336211be478df) C:\Windows\system32\drivers\sermouse.sys
    16:38:02.0046 1780 sermouse - ok
    16:38:02.0078 1780 sffdisk (14d4b4465193a87c127933978e8c4106) C:\Windows\system32\drivers\sffdisk.sys
    16:38:02.0109 1780 sffdisk - ok
    16:38:02.0171 1780 sffp_mmc (7073aee3f82f3d598e3825962aa98ab2) C:\Windows\system32\drivers\sffp_mmc.sys
    16:38:02.0218 1780 sffp_mmc - ok
    16:38:02.0249 1780 sffp_sd (35e59ebe4a01a0532ed67975161c7b82) C:\Windows\system32\drivers\sffp_sd.sys
    16:38:02.0327 1780 sffp_sd - ok
    16:38:02.0374 1780 sfloppy (6b7838c94135768bd455cbdc23e39e5f) C:\Windows\system32\drivers\sfloppy.sys
    16:38:02.0421 1780 sfloppy - ok
    16:38:02.0577 1780 SiSRaid2 (7a5de502aeb719d4594c6471060a78b3) C:\Windows\system32\drivers\sisraid2.sys
    16:38:02.0624 1780 SiSRaid2 - ok
    16:38:02.0686 1780 SiSRaid4 (3a2f769fab9582bc720e11ea1dfb184d) C:\Windows\system32\drivers\sisraid4.sys
    16:38:02.0702 1780 SiSRaid4 - ok
    16:38:02.0858 1780 Smb (290b6f6a0ec4fcdfc90f5cb6d7020473) C:\Windows\system32\DRIVERS\smb.sys
    16:38:02.0904 1780 Smb - ok
    16:38:03.0029 1780 spldr (386c3c63f00a7040c7ec5e384217e89d) C:\Windows\system32\drivers\spldr.sys
    16:38:03.0045 1780 spldr - ok
    16:38:03.0138 1780 srv (880a57fccb571ebd063d4dd50e93e46d) C:\Windows\system32\DRIVERS\srv.sys
    16:38:03.0201 1780 srv - ok
    16:38:03.0263 1780 srv2 (a1ad14a6d7a37891fffeca35ebbb0730) C:\Windows\system32\DRIVERS\srv2.sys
    16:38:03.0357 1780 srv2 - ok
    16:38:03.0372 1780 srvnet (4bed62f4fa4d8300973f1151f4c4d8a7) C:\Windows\system32\DRIVERS\srvnet.sys
    16:38:03.0435 1780 srvnet - ok
    16:38:03.0450 1780 swenum (8a851ca908b8b974f89c50d2e18d4f0c) C:\Windows\system32\DRIVERS\swenum.sys
    16:38:03.0466 1780 swenum - ok
    16:38:03.0497 1780 Symc8xx (2f26a2c6fc96b29beff5d8ed74e6625b) C:\Windows\system32\drivers\symc8xx.sys
    16:38:03.0513 1780 Symc8xx - ok
    16:38:03.0528 1780 Sym_hi (a909667976d3bccd1df813fed517d837) C:\Windows\system32\drivers\sym_hi.sys
    16:38:03.0544 1780 Sym_hi - ok
    16:38:03.0560 1780 Sym_u3 (36887b56ec2d98b9c362f6ae4de5b7b0) C:\Windows\system32\drivers\sym_u3.sys
    16:38:03.0575 1780 Sym_u3 - ok
    16:38:03.0622 1780 Tcpip (2cc45d932bd193cd4117321d469ad6b2) C:\Windows\system32\drivers\tcpip.sys
    16:38:03.0950 1780 Tcpip - ok
    16:38:04.0074 1780 Tcpip6 (2cc45d932bd193cd4117321d469ad6b2) C:\Windows\system32\DRIVERS\tcpip.sys
    16:38:04.0199 1780 Tcpip6 - ok
    16:38:04.0230 1780 tcpipreg (c7e72a4071ee0200e3c075dacfb2b334) C:\Windows\system32\drivers\tcpipreg.sys
    16:38:04.0293 1780 tcpipreg - ok
    16:38:04.0308 1780 TDPIPE (1d8bf4aaa5fb7a2761475781dc1195bc) C:\Windows\system32\drivers\tdpipe.sys
    16:38:04.0340 1780 TDPIPE - ok
    16:38:04.0386 1780 TDTCP (7f7e00cdf609df657f4cda02dd1c9bb1) C:\Windows\system32\drivers\tdtcp.sys
    16:38:04.0449 1780 TDTCP - ok
    16:38:04.0542 1780 tdx (458919c8c42e398dc4802178d5ffee27) C:\Windows\system32\DRIVERS\tdx.sys
    16:38:04.0574 1780 tdx - ok
    16:38:04.0605 1780 TermDD (8c19678d22649ec002ef2282eae92f98) C:\Windows\system32\DRIVERS\termdd.sys
    16:38:04.0620 1780 TermDD - ok
    16:38:04.0730 1780 tssecsrv (9e5409cd17c8bef193aad498f3bc2cb8) C:\Windows\system32\DRIVERS\tssecsrv.sys
    16:38:04.0776 1780 tssecsrv - ok
    16:38:04.0776 1780 tunmp (89ec74a9e602d16a75a4170511029b3c) C:\Windows\system32\DRIVERS\tunmp.sys
    16:38:04.0808 1780 tunmp - ok
    16:38:04.0839 1780 tunnel (f6a4fba7c03ac2efd00f3301c0c1e067) C:\Windows\system32\DRIVERS\tunnel.sys
    16:38:04.0870 1780 tunnel - ok
    16:38:04.0901 1780 uagp35 (fec266ef401966311744bd0f359f7f56) C:\Windows\system32\drivers\uagp35.sys
    16:38:04.0917 1780 uagp35 - ok
    16:38:04.0948 1780 udfs (faf2640a2a76ed03d449e443194c4c34) C:\Windows\system32\DRIVERS\udfs.sys
    16:38:04.0995 1780 udfs - ok
    16:38:05.0026 1780 uliagpkx (4ec9447ac3ab462647f60e547208ca00) C:\Windows\system32\drivers\uliagpkx.sys
    16:38:05.0073 1780 uliagpkx - ok
    16:38:05.0104 1780 uliahci (697f0446134cdc8f99e69306184fbbb4) C:\Windows\system32\drivers\uliahci.sys
    16:38:05.0182 1780 uliahci - ok
    16:38:05.0198 1780 UlSata (31707f09846056651ea2c37858f5ddb0) C:\Windows\system32\drivers\ulsata.sys
    16:38:05.0213 1780 UlSata - ok
    16:38:05.0291 1780 ulsata2 (85e5e43ed5b48c8376281bab519271b7) C:\Windows\system32\drivers\ulsata2.sys
    16:38:05.0322 1780 ulsata2 - ok
    16:38:05.0338 1780 umbus (46e9a994c4fed537dd951f60b86ad3f4) C:\Windows\system32\DRIVERS\umbus.sys
    16:38:05.0369 1780 umbus - ok
    16:38:05.0432 1780 usbccgp (07e3498fc60834219d2356293da0fecc) C:\Windows\system32\DRIVERS\usbccgp.sys
    16:38:05.0541 1780 usbccgp - ok
    16:38:05.0556 1780 usbcir (9247f7e0b65852c1f6631480984d6ed2) C:\Windows\system32\drivers\usbcir.sys
    16:38:05.0634 1780 usbcir - ok
    16:38:05.0712 1780 usbehci (827e44de934a736ea31e91d353eb126f) C:\Windows\system32\DRIVERS\usbehci.sys
    16:38:05.0744 1780 usbehci - ok
    16:38:05.0868 1780 usbhub (bb35cd80a2ececfadc73569b3d70c7d1) C:\Windows\system32\DRIVERS\usbhub.sys
    16:38:05.0915 1780 usbhub - ok
    16:38:05.0946 1780 usbohci (eba14ef0c07cec233f1529c698d0d154) C:\Windows\system32\drivers\usbohci.sys
    16:38:06.0009 1780 usbohci - ok
    16:38:06.0196 1780 usbprint (28b693b6d31e7b9332c1bdcefef228c1) C:\Windows\system32\DRIVERS\usbprint.sys
    16:38:06.0258 1780 usbprint - ok
    16:38:06.0305 1780 usbscan (ea0bf666868964fbe8cb10e50c97b9f1) C:\Windows\system32\DRIVERS\usbscan.sys
    16:38:06.0336 1780 usbscan - ok
    16:38:06.0352 1780 USBSTOR (b854c1558fca0c269a38663e8b59b581) C:\Windows\system32\DRIVERS\USBSTOR.SYS
    16:38:06.0414 1780 USBSTOR - ok
    16:38:06.0430 1780 usbuhci (b2872cbf9f47316abd0e0c74a1aba507) C:\Windows\system32\DRIVERS\usbuhci.sys
    16:38:06.0461 1780 usbuhci - ok
    16:38:06.0492 1780 vga (916b94bcf1e09873fff2d5fb11767bbc) C:\Windows\system32\DRIVERS\vgapnp.sys
    16:38:06.0555 1780 vga - ok
    16:38:06.0602 1780 VgaSave (b83ab16b51feda65dd81b8c59d114d63) C:\Windows\System32\drivers\vga.sys
    16:38:06.0648 1780 VgaSave - ok
    16:38:06.0664 1780 viaide (8294b6c3fdb6c33f24e150de647ecdaa) C:\Windows\system32\drivers\viaide.sys
    16:38:06.0680 1780 viaide - ok
    16:38:06.0742 1780 vmm (c117cedfb9bfeadb29106fdac1358470) C:\Windows\system32\Drivers\vmm.sys
    16:38:06.0758 1780 vmm - ok
    16:38:06.0773 1780 volmgr (2b7e885ed951519a12c450d24535dfca) C:\Windows\system32\drivers\volmgr.sys
    16:38:06.0804 1780 volmgr - ok
    16:38:06.0867 1780 volmgrx (cec5ac15277d75d9e5dec2e1c6eaf877) C:\Windows\system32\drivers\volmgrx.sys
    16:38:06.0945 1780 volmgrx - ok
    16:38:07.0007 1780 volsnap (5280aada24ab36b01a84a6424c475c8d) C:\Windows\system32\drivers\volsnap.sys
    16:38:07.0023 1780 volsnap - ok
    16:38:07.0054 1780 VPCNetS2 (bc2ea40b98b5e866d9a4f98afb66b682) C:\Windows\system32\DRIVERS\VMNetSrv.sys
    16:38:07.0101 1780 VPCNetS2 - ok
    16:38:07.0148 1780 vsmraid (a68f455ed2673835209318dd61bfbb0e) C:\Windows\system32\drivers\vsmraid.sys
    16:38:07.0163 1780 vsmraid - ok
    16:38:07.0194 1780 WacomPen (fef8fe5923fead2cee4dfabfce3393a7) C:\Windows\system32\drivers\wacompen.sys
    16:38:07.0288 1780 WacomPen - ok
    16:38:07.0335 1780 Wanarp (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys
    16:38:07.0397 1780 Wanarp - ok
    16:38:07.0397 1780 Wanarpv6 (b8e7049622300d20ba6d8be0c47c0cfd) C:\Windows\system32\DRIVERS\wanarp.sys
    16:38:07.0428 1780 Wanarpv6 - ok
    16:38:07.0460 1780 Wd (0c17a0816f65b89e362e682ad5e7266e) C:\Windows\system32\drivers\wd.sys
    16:38:07.0475 1780 Wd - ok
    16:38:07.0506 1780 Wdf01000 (d02e7e4567da1e7582fbf6a91144b0df) C:\Windows\system32\drivers\Wdf01000.sys
    16:38:07.0600 1780 Wdf01000 - ok
    16:38:07.0678 1780 WmiAcpi (e18aebaaa5a773fe11aa2c70f65320f5) C:\Windows\system32\drivers\wmiacpi.sys
    16:38:07.0787 1780 WmiAcpi - ok
    16:38:07.0896 1780 WpdUsb (5e2401b3fc1089c90e081291357371a9) C:\Windows\system32\DRIVERS\wpdusb.sys
    16:38:07.0974 1780 WpdUsb - ok
    16:38:07.0990 1780 ws2ifsl (8a900348370e359b6bff6a550e4649e1) C:\Windows\system32\drivers\ws2ifsl.sys
    16:38:08.0037 1780 ws2ifsl - ok
    16:38:08.0068 1780 WUDFRd (501a65252617b495c0f1832f908d54d8) C:\Windows\system32\DRIVERS\WUDFRd.sys
    16:38:08.0146 1780 WUDFRd - ok
    16:38:08.0162 1780 MBR (0x1B8) (5c616939100b85e558da92b899a0fc36) \Device\Harddisk0\DR0
    16:38:08.0505 1780 \Device\Harddisk0\DR0 - ok
    16:38:08.0536 1780 Boot (0x1200) (e49a6d7f2e4a69365829dc5a4d29643e) \Device\Harddisk0\DR0\Partition0
    16:38:08.0552 1780 \Device\Harddisk0\DR0\Partition0 - ok
    16:38:08.0567 1780 Boot (0x1200) (f4eecde97d0fc6a0d71f159de8c00fd8) \Device\Harddisk0\DR0\Partition1
    16:38:08.0567 1780 \Device\Harddisk0\DR0\Partition1 - ok
    16:38:08.0598 1780 Boot (0x1200) (02d3c43010815810f0b3b6efa7c9b76b) \Device\Harddisk0\DR0\Partition2
    16:38:08.0598 1780 \Device\Harddisk0\DR0\Partition2 - ok
    16:38:08.0598 1780 ============================================================
    16:38:08.0598 1780 Scan finished
    16:38:08.0598 1780 ============================================================
    16:38:09.0472 3792 Deinitialize success

    ==============================================
    Last Created System Restore Point
    ==============================================
    RP256: 13-2-2012 17:54:31 - Herstelbewerking
    ==============================================
    EOF


    ++++++++++++++++++++++++++++++++++++++++++++++

    Combofixlog:

    ComboFix 12-02-13.01 - Rob Broers 14-02-2012 16:49:18.4.4 - x64
    Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.31.1043.18.4094.2537 [GMT 1:00]
    Gestart vanuit: c:\users\Rob Broers\Desktop\ComboFix.exe
    AV: McAfeeAntivirus en antispyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
    FW: McAfeeFirewall *Disabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
    SP: McAfeeAntivirus en antispyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    * Aanwezig AV is actief
    .
    .
    .
    (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    c:\windows\isRS-000.tmp
    c:\windows\pkunzip.pif
    c:\windows\pkzip.pif
    D:\install.exe
    .
    .
    (((((((((((((((((((( Bestanden Gemaakt van 2012-01-14 to 2012-02-14 ))))))))))))))))))))))))))))))
    .
    .
    2012-02-14 16:04 . 2012-02-14 16:11 ——– d—–w- c:\users\Rob Broers\AppData\Local\temp
    2012-02-14 16:04 . 2012-02-14 16:04 ——– d—–w- c:\users\UpdatusUser\AppData\Local\temp
    2012-02-14 16:04 . 2012-02-14 16:04 ——– d—–w- c:\users\Public\AppData\Local\temp
    2012-02-14 16:04 . 2012-02-14 16:04 ——– d—–w- c:\users\Default\AppData\Local\temp
    2012-02-14 15:37 . 2012-02-14 15:38 ——– d—–w- C:\TDSSStarter
    2012-02-05 10:00 . 2011-11-16 16:42 347136 —-a-w- c:\windows\system32\schannel.dll
    2012-02-05 10:00 . 2011-11-17 06:53 515968 —-a-w- c:\windows\system32\drivers\ksecdd.sys
    2012-02-05 10:00 . 2011-11-16 16:43 442368 —-a-w- c:\windows\system32\winhttp.dll
    2012-02-05 10:00 . 2011-11-16 16:41 1689600 —-a-w- c:\windows\system32\lsasrv.dll
    2012-02-05 10:00 . 2011-11-16 16:23 278528 —-a-w- c:\windows\SysWow64\schannel.dll
    2012-02-05 10:00 . 2011-11-16 16:42 94720 —-a-w- c:\windows\system32\secur32.dll
    2012-02-05 10:00 . 2011-11-16 16:24 77312 —-a-w- c:\windows\SysWow64\secur32.dll
    2012-02-05 10:00 . 2011-11-16 16:23 377344 —-a-w- c:\windows\SysWow64\winhttp.dll
    2012-02-05 10:00 . 2011-11-16 14:34 11264 —-a-w- c:\windows\system32\lsass.exe
    2012-01-21 18:41 . 2012-01-21 18:41 ——– d—–w- c:\program files (x86)\Microsoft Silverlight
    .
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2012-01-30 18:39 . 2011-07-17 08:59 414368 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
    2011-12-10 14:24 . 2011-04-03 11:46 23152 —-a-w- c:\windows\system32\drivers\mbam.sys
    2011-11-24 15:01 . 2011-11-24 15:01 499712 —-a-w- c:\windows\SysWow64\msvcp71.dll
    2011-11-24 15:01 . 2011-11-24 15:01 348160 —-a-w- c:\windows\SysWow64\msvcr71.dll
    2011-11-23 13:57 . 2012-01-08 09:09 2764800 —-a-w- c:\windows\system32\win32k.sys
    .
    .
    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
    REGEDIT4
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1555968]
    "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 138240]
    "Steam"="c:\program files (x86)\Steam\steam.exe" [2011-08-02 1242448]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
    "mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2011-11-22 1675160]
    "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
    "Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-01-13 460872]
    "TkBellExe"="c:\program files (x86)\Real\RealPlayer\update\realsched.exe" [2011-11-24 296056]
    .
    c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
    ConBuilder - Auto Update.lnk - e:\cb algemeen\cbupdate.exe [2011-10-8 194177]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "EnableLUA"= 0 (0x0)
    "EnableUIADesktopToggle"= 0 (0x0)
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
    "aux"=wdmaud.drv
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
    @=""
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
    @=""
    .
    — Andere Services/Drivers In Geheugen —
    .
    *NewlyCreated* - WS2IFSL
    *Deregistered* - mfeavfk01
    .
    .
    ——— x86-64 ———–
    .
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\MOBK]
    @="{3c3f3c1a-9153-7c05-f938-622e7003894d}"
    [HKEY_CLASSES_ROOT\CLSID\{3c3f3c1a-9153-7c05-f938-622e7003894d}]
    2010-04-13 19:11 3816248 —-a-w- c:\program files (x86)\McAfee Online Backup\MOBKshell.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\MOBK2]
    @="{e6ea1d7d-144e-b977-98c4-84c53c1a69d0}"
    [HKEY_CLASSES_ROOT\CLSID\{e6ea1d7d-144e-b977-98c4-84c53c1a69d0}]
    2010-04-13 19:11 3816248 —-a-w- c:\program files (x86)\McAfee Online Backup\MOBKshell.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\MOBK3]
    @="{b4caf489-1eec-c617-49ad-8d7088598c06}"
    [HKEY_CLASSES_ROOT\CLSID\{b4caf489-1eec-c617-49ad-8d7088598c06}]
    2010-04-13 19:11 3816248 —-a-w- c:\program files (x86)\McAfee Online Backup\MOBKshell.dll
    .
    ——- Bijkomende Scan ——-
    .
    uLocal Page = c:\windows\system32\blank.htm
    uStart Page = hxxp://www.bing.com/maps/
    mLocal Page = c:\windows\SysWOW64\blank.htm
    IE: E&xporteren naar Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
    TCP: DhcpNameServer = 212.54.40.25 212.54.35.25
    CLSID: {603d3801-bd81-11d0-a3a5-00c04fd706ec} - %SystemRoot%\SysWow64\browseui.dll
    FF - ProfilePath - c:\users\Rob Broers\AppData\Roaming\Mozilla\Firefox\Profiles\1cz0hd18.default\
    FF - prefs.js: browser.search.selectedEngine - Secure-zoeken
    FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=mcafee&p=
    .
    - - - - ORPHANS VERWIJDERD - - - -
    .
    Wow6432Node-HKCU-Run-WMPNSCFG - c:\program files (x86)\Windows Media Player\WMPNSCFG.exe
    WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
    AddRemove-Adobe Shockwave Player - c:\windows\system32\adobe\SHOCKW~1\UNWISE.EXE
    AddRemove-BADLANDS Summer Clear Plug-in for KOSMOS - c:\windows\system32\ss2uinst.exe
    AddRemove-CP Sggmrss - e:\temp\Uninstal CP Sggmrss.exe
    AddRemove-ProTrain Extra 6 Update 1.01 1.01 - e:\temp\SETUP\setup.exe
    AddRemove-RealPlayer 15.0 - c:\program files (x86)\real\realplayer\Update\r1puninst.exe
    AddRemove-2016 - e:\temp\2016.exe
    AddRemove-DB Schenker 189 - Packet - e:\temp\Uninstal.exe
    AddRemove-Glasgow - Carlisle Version 3.0 Beta - e:\ukroute\GLAS2CAR\Uninstal.exe
    AddRemove-Oberlausitzbahn V.1 + Zittauer Schmalspurbahn - e:\temp\Uninstal.exe
    AddRemove-TIR - e:\temp\ROUTES\TIR\Uninstal.exe
    AddRemove-Wupper Express 11 Actpack 1.0 - e:\temp\Uninstal.exe
    .
    .
    .
    ——————— VERGRENDELDE REGISTER SLEUTELS ———————
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10v_ActiveX.exe,-101"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
    "Enabled"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10v_ActiveX.exe"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Shockwave Flash Object"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
    @="0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
    @="ShockwaveFlash.ShockwaveFlash.10"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="ShockwaveFlash.ShockwaveFlash"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Macromedia Flash Factory Object"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
    @="FlashFactory.FlashFactory.1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10v.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="FlashFactory.FlashFactory"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker4"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0]
    @="Shockwave Flash"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}]
    @Denied: (A 2) (Everyone)
    @=""
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0]
    @="FlashBroker"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
    "SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
    00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes]
    "SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59,
    00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
    .
    ———————— Andere Aktieve Processen ————————
    .
    c:\program files (x86)\NVIDIA Corporation\3D Vision
    vSCPAPISvr.exe
    c:\program files (x86)\Nero\Update\NASvc.exe
    c:\windows\SysWOW64\rundll32.exe
    c:\windows\SysWOW64\PSIService.exe
    e:\cb algemeen\X_cbupdate.exe
    c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
    c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
    .
    **************************************************************************
    .
    Voltooingstijd: 2012-02-14 17:34:40 - machine werd herstart
    ComboFix-quarantined-files.txt 2012-02-14 16:34
    .
    Pre-Run: 133.555.699.712 bytes beschikbaar
    Post-Run: 132.977.979.392 bytes beschikbaar
    .
    - - End Of File - - 8F888E34436DF0A57F7A58500CAD7E20













  • Ik vind een rare gebruiker in jouw Windows, ben jij daar zelf mee bekend?

    Namelijk: [b:b54fb734e9]UpdatusUser[/b:b54fb734e9]

    Graag informatie hierover.
  • [quote:71e5b78e20="Abraham54"]Ik vind een rare gebruiker in jouw Windows, ben jij daar zelf mee bekend?

    Namelijk: [b:71e5b78e20]UpdatusUser[/b:71e5b78e20]

    Graag informatie hierover.[/quote:71e5b78e20]

    Die gebruikersnaam zegt me helemaal niets. Zou dat de boosdoener zijn?
  • Onderzoek leert mij dat het NVidia te maken heeft.

    Kijk in "Configuratiescherm/Programma's en onderdelen" of je daar NVidia Update tegenkomt.

    Dat tool hangt samen met die UpdateUser!

    En nee, zo te lezen is het geen veiligheidsrisico!

    Welk e-mailprogramma gebruik jij eigenlijk?
  • [quote:70af391be9="Abraham54"]Onderzoek leert mij dat het NVidia te maken heeft.

    Kijk in "Configuratiescherm/Programma's en onderdelen" of je daar NVidia Update tegenkomt.

    Dat tool hangt samen met die UpdateUser!

    En nee, zo te lezen is het geen veiligheidsrisico!

    Welk e-mailprogramma gebruik jij eigenlijk?[/quote:70af391be9]

    Ik gebruik Mozilla thunderbird als emailprogramma.

    Wat betreft die Nvidia updater: dat kijk ik vanavond even na. Ben nu onderweg.
  • [quote:5b2c6a2e00="Abraham54"]Onderzoek leert mij dat het NVidia te maken heeft.

    Kijk in "Configuratiescherm/Programma's en onderdelen" of je daar NVidia Update tegenkomt.

    Dat tool hangt samen met die UpdateUser!

    En nee, zo te lezen is het geen veiligheidsrisico!

    Welk e-mailprogramma gebruik jij eigenlijk?[/quote:5b2c6a2e00]

    In het configuratiescherm kom ik inderdaad Nvidia Update tegen.
  • Hallo Rob, hoeveel e-mailaccounts heb jij en hoe lang werk je al met hetzelfde wachtwoord?

    En gebruik je hetzelfde wachtwoord mogelijk ook voor andere log-ins?
  • [quote:a71e7d8936="Abraham54"]Hallo Rob, hoeveel e-mailaccounts heb jij en hoe lang werk je al met hetzelfde wachtwoord?

    En gebruik je hetzelfde wachtwoord mogelijk ook voor andere log-ins?[/quote:a71e7d8936]

    Hallo Abraham,

    Ik heb in totaal 3 accounts, werk inderdaad al lang met hetzelfde wachtwoord, wat ik intussen wel gewijzigd heb. Dat oude wachtwoord gebruik ik ook voor andere logins.

    Groeten
    Rob
  • Foute boel dus!

    Juist daardoor maak je het anderen wel bijzonder makkelijk om er achter te komen wat jij gebruikt.

    Bovendien zal je te makkelijk onthouden wachtwoorden gebruiken en ook dat is uit den boze.
    Vermoedelijk ook dat logins automatisch gebeuren vanuit de cookiecache.
    Ook dat is foute boel, want de cookiecache kan heel makkelijk door derden worden nagekeken en dan kan het gebeuren wat jiu is gebeurd: dat je spam gaat verzenden.

    Ik beschik over twee mailaccounts en onnoemelijk veel logins.
    Gemiddelde wachtwoordlengte bij mij is 14 tekens.
    Elk wachtwoord bij mij is anders en dat alles wordt mij ook heel makkelijk gemaakt, omdat ik LastPass gebruik als wachtwoordmanager.

    Dus onderzoek LastPass maar en verbeter je wachtwoordleven.
  • Hoi Rob, volgens mij heb jij je antwoord in een verkeerd topic gepost.

    Is het met LastPass al gelukt?

    En jij mag het volgende doen: [b:c3e29829fa]de ESET online scan (Klik).[/b:c3e29829fa]
    [list:c3e29829fa]
    [*:c3e29829fa]Klik op de knop [b:c3e29829fa]ESET Online Scanner[/b:c3e29829fa]
    [*:c3e29829fa]Zet een vinkje bij [b:c3e29829fa]YES, I accept the Terms of Use[/b:c3e29829fa]
    [*:c3e29829fa]Klik op [b:c3e29829fa]Start[/b:c3e29829fa]
    [*:c3e29829fa]Sta het ActiveX control toe om te installeren.
    [*:c3e29829fa]Zet een vinkje bij de volgende opties:
    [list:c3e29829fa][*:c3e29829fa][b:c3e29829fa]Remove found threats[/b:c3e29829fa]
    [*:c3e29829fa][b:c3e29829fa]Scan archives[/b:c3e29829fa][/list:u:c3e29829fa]
    [*:c3e29829fa]Klik vervolgens op [b:c3e29829fa]
  • Inderdaad Abraham, ik zat verkeerd. Heb het al gewijzigd met het verzoek om het bericht te verwijderen.

    LastPass zojuist gedownload en ga het zo meteen installeren. Als ik het goed begrijp, zou ik voor Opera een andere versie moeten installeren?

    'k Zal eerst de ESET scan uitvoeren.

    Groeten
    Rob
  • Hoi Rob, ik heb je bericht gelezen.
    Een schone installatie zal mogelijk niet het gewenste resultaat geven!
  • [quote:8f43954421="Abraham54"]Hoi Rob, ik heb je bericht gelezen.
    Een schone installatie zal mogelijk niet het gewenste resultaat geven![/quote:8f43954421]

    Zit het probleem dan toch bij mij als dat niet helpt?
    En hoe kan ik of mijn pc spam versturen als de pc niet aanstaat?

    Groeten
    Rob
  • Vertel, wie is jouw e-mailprovider?
  • [quote:5e40630cdc="Abraham54"]Vertel, wie is jouw e-mailprovider?[/quote:5e40630cdc]

    Ziggo is mijn provider.
  • Oké.

    Is LastPass al funktioneel?


    [b:5782aae7eb]Welk programma[/b:5782aae7eb]: Malwarebytes MBAM
    [b:5782aae7eb]Waarvoor/waarom[/b:5782aae7eb]: specialistische scanner om Windows snel te onderzoeken op- en te ontdoen van spy- & malware.
    [b:5782aae7eb]Moeilijkheidsgraad[/b:5782aae7eb]: geen.

    [b:5782aae7eb]Download Malwarebytes MBAM via één van deze locaties[/b:5782aae7eb]:
    [list:5782aae7eb][*:5782aae7eb][b:5782aae7eb]Softpedia.com[/b:5782aae7eb][*:5782aae7eb][b:5782aae7eb]Majorgeeks.com[/b:5782aae7eb][/list:u:5782aae7eb]
    [b:5782aae7eb]Allereerst[/b:5782aae7eb]:[list:5782aae7eb][*:5782aae7eb] Al meteen na de installatie wil 'MBAM' zijn database opwaarderen – toestaan dus.
    [*:5782aae7eb] Ook bij herhaald gebruik: eerst 'MBAM' updaten via de tab 'Update'![/list:u:5782aae7eb]
    [b:5782aae7eb]Malwarebytes MBAM opstarten[/b:5782aae7eb]:
    [list:5782aae7eb][*:5782aae7eb] [b:5782aae7eb]
  • Hallo Abraham,

    intussen is me iets anders opgevallen: met het emailprogramma in de Opera browser kan ik wel mail verzenden, maar met Mozilla niet.

    Het probleem zit waarschijnlijk in Mozilla Thunderbird, want met Windows Mail kan ik wel verzenden.

    de log van MBAM:

    Malwarebytes Anti-Malware (-evaluatieversie-) 1.60.1.1000
    www.malwarebytes.org

    Databaseversie: v2012.02.17.02

    Windows Vista Service Pack 2 x64 NTFS
    Internet Explorer 9.0.8112.16421
    Rob Broers :: PC_VAN_ROBBROER [administrator]

    Realtime bescherming: Uitgeschakeld

    17-2-2012 18:24:41
    mbam-log-2012-02-17 (18-24-41).txt

    Scantype: Snelle scan
    Ingeschakelde scanopties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM
    Uitgeschakelde scanopties: P2P
    Objecten gescand: 199469
    Verstreken tijd: 3 minuut/minuten, 49 seconde(n)

    Geheugenprocessen gedetecteerd: 0
    (Geen kwaadaardige objecten gedetecteerd)

    Geheugenmodulen gedetecteerd: 0
    (Geen kwaadaardige objecten gedetecteerd)

    Registersleutels gedetecteerd: 0
    (Geen kwaadaardige objecten gedetecteerd)

    Registerwaarden gedetecteerd: 0
    (Geen kwaadaardige objecten gedetecteerd)

    Registerdata gedetecteerd: 0
    (Geen kwaadaardige objecten gedetecteerd)

    Mappen gedetecteerd: 0
    (Geen kwaadaardige objecten gedetecteerd)

    Bestanden gedetecteerd: 0
    (Geen kwaadaardige objecten gedetecteerd)

    (einde)

Beantwoord deze vraag

Dit is een gearchiveerde pagina. Antwoorden is niet meer mogelijk.