Dank voor je reactie Tirm. Ga het gelijk ff checke bij virustotal.com.

Ik ben geen CPwizard en lees met veel belangstelling de topics op deze forum en heb zoals hier aangegeven word om Ccleaner en Eusing Free Register te gebruiken als goede gratis cleaners.

Omdat ik een leek ben, Pionier veel en dan is de kans groot dat er ongenode gasten zich instaleren op de laptop :cry:

Ik gebruik nu Mcafee en ernaast TuneUp.Als deze abonnement is verlopen en dat is over een paar maanden dan kies voor een goede gratis scanner

Heb Combifix gebruikt en had toch rommel op mijn laptop die Mcafee niet had opgemerkt.

Gr

Je kan maar beter je computer scannen met MBAM en HijackThis, en allebei de logs opnieuw posten bij beveiliging ,een expert kan je dan wellicht verder helpen. Wel MBAM eerst updaten.

http://www.idealsoftware.nl/MBAM/

http://free.antivirus.com/hijackthis/

Hoi jitro, je bent een leek en daarom pioneer je maar wat aan???????

En dan gebruik je ComboFix??????


Kijk in C:\ voor combofix.txt en post ook de inhoud van dat log!


En doe ook onderstaande:

[b:7603de199f]Te gebruiken programma's[/b:7603de199f]
[list:7603de199f][*:7603de199f]Trend Micro [b:7603de199f]Hijack This Versie 2.0.4[/b:7603de199f]
[*:7603de199f]Microsoft [b:7603de199f]Malicious Software Removal Tool[/b:7603de199f]
[*:7603de199f] Malwarebytes [b:7603de199f]MBAM[/b:7603de199f]
[*:7603de199f][b:7603de199f]TFC[/b:7603de199f] (The File Cleaner)[/list:u:7603de199f]
[b:7603de199f]Downloaden - maar nog niet installeren - download de setups naar je bureaublad[/b:7603de199f]:
[list:7603de199f][*:7603de199f]Download de [b:7603de199f]HijackThis Installer[/b:7603de199f]
[*:7603de199f]Microsoft [b:7603de199f]Malicious Software Removal Tool[/b:7603de199f] - download en meer informatie vindt je [b:7603de199f]hier[/b:7603de199f]
[*:7603de199f]Download [b:7603de199f]Malwarebytes MBAM[/b:7603de199f] via één van deze locaties: [b:7603de199f]Download.com[/b:7603de199f], [b:7603de199f]Softpedia.com[/b:7603de199f] of [b:7603de199f]Majorgeeks.com[/b:7603de199f]
[*:7603de199f]Download [b:7603de199f]TFC[/b:7603de199f] [b:7603de199f]hier[/b:7603de199f][/list:u:7603de199f]
[b:7603de199f]Belangrijk[/b:7603de199f]:
[list:7603de199f][*:7603de199f]Vista- en Windows 7 gebruik(st)ers installeren en starten alle gebruikte tools middels rechtsklikken en dan kiezen voor "Als Administrator uitvoeren".[/list:u:7603de199f]

Dankje Abraham54 en The Dragon voor jullie reactie.
Denk dat ik hier de log heb waar om gevraagd is.
Mocht er iets mis zijn zou ik het graag willen weten, aldoende leert men (ik dus)

ComboFix 11-01-28.03 - 29-01-2011 23:12:26.4.2 - x86

* Aanwezig AV is actief

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
.

Besmet exemplaar van c:\windows\system32\drivers\ntfs.sys werd aangetroffen en gedesinfecteerd
Hersteld exemplaar van - c:\combofix\HarddiskVolumeShadowCopy9_!Windows!System32!drivers!ntfs.sys

.
(((((((((((((((((((( Bestanden Gemaakt van 2010-12-28 to 2011-01-29 ))))))))))))))))))))))))))))))
.

2011-01-29 22:26 . 2011-01-29 22:28 ——– d—–w- c:\users\bianca\AppData\Local\temp
2011-01-29 22:26 . 2011-01-29 22:26 ——– d—–w- c:\users\Default\AppData\Local\temp
2011-01-26 06:17 . 2011-01-26 06:17 ——– d—–w- c:\program files\McAfeeMOBK
2011-01-26 06:17 . 2010-04-13 19:10 54776 —-a-w- c:\windows\system32\drivers\MOBK.sys
2011-01-26 06:17 . 2011-01-26 06:17 ——– d—–w- c:\program files\McAfee Online Backup
2011-01-26 06:15 . 2010-10-13 21:28 9344 —-a-w- c:\windows\system32\drivers\mfeclnk.sys
2011-01-26 06:15 . 2010-10-13 21:28 24376 —-a-w- c:\program files\Mozilla Firefox\components\Scriptff.dll
2011-01-26 06:15 . 2010-10-13 21:28 84264 —-a-w- c:\windows\system32\drivers\mferkdet.sys
2011-01-26 06:15 . 2010-10-13 21:28 64304 —-a-w- c:\windows\system32\drivers\mfenlfk.sys
2011-01-26 06:15 . 2010-10-13 21:28 55840 —-a-w- c:\windows\system32\drivers\cfwids.sys
2011-01-26 06:15 . 2010-10-13 21:28 52104 —-a-w- c:\windows\system32\drivers\mfebopk.sys
2011-01-26 06:15 . 2010-10-13 21:28 313288 —-a-w- c:\windows\system32\drivers\mfefirek.sys
2011-01-26 06:15 . 2010-10-13 21:28 164840 —-a-w- c:\windows\system32\drivers\mfewfpk.sys
2011-01-26 06:15 . 2010-10-13 21:28 152960 —-a-w- c:\windows\system32\drivers\mfeavfk.sys
2011-01-26 06:14 . 2011-01-26 06:16 ——– d—–w- c:\program files\Common Files\Mcafee
2011-01-26 06:14 . 2011-01-26 06:14 ——– d—–w- c:\program files\McAfee.com
2011-01-26 06:12 . 2010-10-13 21:28 141792 —-a-w- c:\windows\system32\mfevtps.exe
2011-01-16 21:59 . 2011-01-19 23:08 ——– d—–w- c:\program files\Eusing Free Registry Defrag
2011-01-16 21:45 . 2011-01-19 23:08 ——– d—–w- c:\program files\Free Internet Window Washer
2011-01-15 16:21 . 2011-01-15 16:29 ——– d—–w- c:\users\bianca\AppData\Roaming\vlc
2011-01-14 19:07 . 2011-01-14 19:07 ——– d—–w- c:\users\bianca\AppData\Roaming\KC Softwares
2011-01-13 18:48 . 2011-01-13 18:48 ——– d—–w- c:\program files\iPod
2011-01-13 18:48 . 2011-01-13 18:50 ——– d—–w- c:\program files\iTunes
2011-01-13 08:49 . 2011-01-13 08:49 ——– d—–w- c:\users\bianca\AppData\Local\Apps
2011-01-13 06:57 . 2011-01-13 08:02 ——– d—–w- c:\programdata\SpeedBit
2011-01-13 01:00 . 2011-01-13 01:00 ——– d—–w- c:\programdata\WindowsSearch
2011-01-12 10:06 . 2010-12-28 15:55 413696 —-a-w- c:\windows\system32\odbc32.dll
2011-01-12 10:06 . 2010-12-28 15:53 253952 —-a-w- c:\program files\Common Files\System\ado\msadox.dll
2011-01-12 10:06 . 2010-12-28 15:53 241664 —-a-w- c:\program files\Common Files\System\ado\msadomd.dll
2011-01-12 10:06 . 2010-12-28 15:53 708608 —-a-w- c:\program files\Common Files\System\ado\msado15.dll
2011-01-12 10:06 . 2010-12-28 15:53 57344 —-a-w- c:\program files\Common Files\System\msadc\msadcs.dll
2011-01-12 10:06 . 2010-12-28 15:53 180224 —-a-w- c:\program files\Common Files\System\msadc\msadco.dll
2011-01-12 10:06 . 2010-12-14 14:49 1169408 —-a-w- c:\windows\system32\sdclt.exe
2011-01-11 16:13 . 2011-01-26 11:33 ——– d—–w- c:\program files\Eusing Free Registry Cleaner
2011-01-11 13:28 . 2010-11-10 04:33 6273872 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{F43F0BA8-40D5-410E-A842-95FE1A478E3F}\mpengine.dll
2011-01-10 18:34 . 2011-01-26 06:11 ——– d—–w- c:\programdata\Trend Micro
2011-01-10 16:06 . 2011-01-11 10:46 146912 —-a-w- c:\windows\system32\drivers\sfi.dat
2011-01-10 16:02 . 2011-01-11 10:58 ——– d—–w- c:\programdata\Comodo

.
((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-10 11:16 . 2009-10-01 08:53 16968 —-a-w- c:\windows\system32\drivers\hitmanpro35.sys
2010-12-02 03:35 . 2010-12-02 03:35 4280320 —-a-w- c:\windows\system32\GPhotos.scr
2010-11-29 16:38 . 2010-11-29 16:38 94208 —-a-w- c:\windows\system32\QuickTimeVR.qtx
2010-11-29 16:38 . 2010-11-29 16:38 69632 —-a-w- c:\windows\system32\QuickTime.qts
2010-11-12 17:53 . 2010-05-10 11:27 472808 —-a-w- c:\windows\system32\deployJava1.dll
2010-11-07 14:34 . 2010-11-07 14:37 573608 —-a-w- c:\windows\system32\msvcp50.dll
2010-11-04 18:56 . 2010-12-16 07:55 345600 —-a-w- c:\windows\system32\wmicmiplugin.dll
2010-11-04 18:55 . 2010-12-16 07:55 352768 —-a-w- c:\windows\system32\taskschd.dll
2010-11-04 18:55 . 2010-12-16 07:55 270336 —-a-w- c:\windows\system32\taskcomp.dll
2010-11-04 18:55 . 2010-12-16 07:55 601600 —-a-w- c:\windows\system32\schedsvc.dll
2010-11-04 16:34 . 2010-12-16 07:55 171520 —-a-w- c:\windows\system32\taskeng.exe
2010-11-02 06:01 . 2010-12-16 07:55 916480 —-a-w- c:\windows\system32\wininet.dll
2010-11-02 05:57 . 2010-12-16 07:55 43520 —-a-w- c:\windows\system32\licmgr10.dll
2010-11-02 05:57 . 2010-12-16 07:55 1469440 —-a-w- c:\windows\system32\inetcpl.cpl
2010-11-02 05:57 . 2010-12-16 07:55 71680 —-a-w- c:\windows\system32\iesetup.dll
2010-11-02 05:57 . 2010-12-16 07:55 109056 —-a-w- c:\windows\system32\iesysprep.dll
2010-11-02 05:01 . 2010-12-16 07:55 385024 —-a-w- c:\windows\system32\html.iec
2010-11-02 04:26 . 2010-12-16 07:55 133632 —-a-w- c:\windows\system32\ieUnatt.exe
2010-11-02 04:24 . 2010-12-16 07:55 1638912 —-a-w- c:\windows\system32\mshtml.tlb
2010-10-13 21:28 . 2011-01-26 06:15 24376 —-a-w- c:\program files\mozilla firefox\components\Scriptff.dll
.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\MOBK]
@="{3c3f3c1a-9153-7c05-f938-622e7003894d}"
[HKEY_CLASSES_ROOT\CLSID\{3c3f3c1a-9153-7c05-f938-622e7003894d}]
2010-04-13 19:11 2872120 —-a-w- c:\program files\McAfee Online Backup\MOBKshell.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\MOBK2]
@="{e6ea1d7d-144e-b977-98c4-84c53c1a69d0}"
[HKEY_CLASSES_ROOT\CLSID\{e6ea1d7d-144e-b977-98c4-84c53c1a69d0}]
2010-04-13 19:11 2872120 —-a-w- c:\program files\McAfee Online Backup\MOBKshell.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\MOBK3]
@="{b4caf489-1eec-c617-49ad-8d7088598c06}"
[HKEY_CLASSES_ROOT\CLSID\{b4caf489-1eec-c617-49ad-8d7088598c06}]
2010-04-13 19:11 2872120 —-a-w- c:\program files\McAfee Online Backup\MOBKshell.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RtHDVCpl.exe" [2007-08-25 4669440]
"Apoint"="c:\program files\Apoint\Apoint.exe" [2007-06-10 118784]
"Skytel"="Skytel.exe" [2007-08-25 1826816]
"NvSvc"="c:\windows\system32\nvsvc.dll" [2007-11-16 86016]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-11-16 8497696]
"mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2010-11-22 1193848]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]
2007-08-14 19:05 98304 —-a-w- c:\windows\System32\VESWinlogon.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2010-05-14 09:44 248552 —-a-w- c:\program files\Common Files\Java\Java Update\jusched.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"WindowsWelcomeCenter"=rundll32.exe oobefldr.dll,ShowWelcomeCenter
"ehTray.exe"=c:\windows\ehome\ehTray.exe
"Picasa Media Detector"=c:\program files\Picasa2\PicasaMediaDetector.exe
"NSUFloatingUI"="c:\program files\Sony\Network Utility\LANUtil.exe"
"WMPNSCFG"=c:\program files\Windows Media Player\WMPNSCFG.exe
"TomTomHOME.exe"="c:\program files\TomTom HOME 2\TomTomHOMERunner.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"MarketingTools"=c:\program files\Sony\Marketing Tools\MarketingTools.exe
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime
"HP Software Update"=c:\program files\HP\HP Software Update\HPWuSchd2.exe
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe"
"NvMediaCenter"=RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
"ISBMgr.exe"="c:\program files\Sony\ISB Utility\ISBMgr.exe"
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
"AppleSyncNotifier"=c:\program files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

R1 ctredr15.sys;ctredr15.sys;c:\windows\system32\drivers\ctredr15.sys [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Google Updateservice (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-10-25 135664]
R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [2010-10-13 84264]
R3 VAIOMediaPlatform-UCLS-AppServer;VAIO Media Content Collection;c:\program files\Sony\VAIO Media Integrated Server\UCLS.exe [2007-01-10 745472]
R3 VAIOMediaPlatform-UCLS-HTTP;VAIO Media Content Collection (HTTP);c:\program files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe [2007-06-20 397312]
R3 VAIOMediaPlatform-UCLS-UPnP;VAIO Media Content Collection (UPnP);c:\program files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe [2007-06-20 1089536]
R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe [2009-09-08 83312]
R3 VUAgent;VUAgent;c:\program files\Sony\VAIO Update 5\VUAgent.exe [2010-04-09 722288]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]
S1 mfenlfk;McAfee NDIS Light Filter;c:\windows\system32\DRIVERS\mfenlfk.sys [2010-10-13 64304]
S1 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys [2010-10-13 164840]
S1 MOBKFilter;MOBKFilter;c:\windows\system32\DRIVERS\MOBK.sys [2010-04-13 54776]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\Common Files\Mcafee\McSvcHost\McSvHost.exe [2010-03-10 271480]
S2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\Common Files\Mcafee\McSvcHost\McSvHost.exe [2010-03-10 271480]
S2 McNaiAnn;McAfee VirusScan Announcer;c:\program files\Common Files\Mcafee\McSvcHost\McSvHost.exe [2010-03-10 271480]
S2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe [2010-10-13 188136]
S2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [2010-10-13 141792]
S2 MOBKbackup;1%;c:\program files\McAfee Online Backup\MOBKbackup.exe [2010-04-13 229688]
S2 NSUService;NSUService;c:\program files\Sony\Network Utility\NSUService.exe [2008-11-03 299008]
S2 regi;regi;c:\windows\system32\drivers\regi.sys [2007-04-17 11032]
S2 TomTomHOMEService;TomTomHOMEService;c:\program files\TomTom HOME 2\TomTomHOMEService.exe [2010-08-24 92008]
S2 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2007-09-28 292128]
S3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [2010-10-13 55840]
S3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [2010-10-13 313288]
S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\DRIVERS\SFEP.sys [2007-08-29 9344]
S3 ti21sony;ti21sony;c:\windows\system32\drivers\ti21sony.sys [2007-06-06 812544]


— Andere Services/Drivers In Geheugen —

*Deregistered* - mfeavfk01

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Inhoud van de 'Gedeelde Taken' map

2011-01-29 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-10-25 09:45]

2011-01-29 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-10-25 09:45]

2011-01-29 c:\windows\Tasks\User_Feed_Synchronization-{8ADC984D-159B-4E33-BA89-3D2A5BE8DE7F}.job
- c:\windows\system32\msfeedssync.exe [2010-12-16 04:25]
.
.
——- Bijkomende Scan ——-
.
uDefault_Search_URL = hxxp://www.google.com/ie
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki… - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html
FF - ProfilePath - c:\users\bianca\AppData\Roaming\Mozilla\Firefox\Profiles\tj3zptqg.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=mcafee&p=
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
FF - Ext: TrackerBlock: trackerblock@privacychoice.org - %profile%\extensions\trackerblock@privacychoice.org
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: WOT: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} - %profile%\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF - Ext: BetterPrivacy: {d40f5e7b-d2cf-4856-b441-cc613eeffbe3} - %profile%\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}
FF - Ext: Adblock Plus: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - %profile%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: McAfee SiteAdvisor: {B7082FAA-CB62-4872-9106-E42DD88EDE45} - c:\program files\McAfee\SiteAdvisor
FF - user.js: network.http.max-connections-per-server - 6
FF - user.js: network.http.max-persistent-connections-per-server - 3
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-01-29 23:31
Windows 6.0.6002 Service Pack 2 NTFS

scannen van verborgen processen …

scannen van verborgen autostart items …

scannen van verborgen bestanden …

Scan succesvol afgerond
verborgen bestanden: 0

**************************************************************************
.
——————— VERGRENDELDE REGISTER SLEUTELS ———————

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:0000007b
.
——————— DLLs Geladen Onder Lopende Processen ———————

- - - - - - - > 'Explorer.exe'(5864)
c:\progra~1\mcafee\SITEAD~1\saHook.dll
c:\program files\McAfee Online Backup\MOBKshell.dll
.
———————— Andere Aktieve Processen ————————
.
c:\program files\Sony\VAIO Update 5\VAIOUpdt.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
c:\windows\system32\rundll32.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe
c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\windows\system32\DRIVERS\xaudio.exe
c:\program files\Common Files\McAfee\SystemCore\mcshield.exe
c:\program files\Common Files\McAfee\SystemCore\mfefire.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
c:\windows\system32\conime.exe
c:\windows\system32\vssvc.exe
c:\progra~1\mcafee.com\agent\mcagent.exe
c:\windows\servicing\TrustedInstaller.exe
.
**************************************************************************
.
Voltooingstijd: 2011-01-29 23:38:51 - machine werd herstart
ComboFix-quarantined-files.txt 2011-01-29 22:38



Pre-Run: 130.105.749.504 bytes beschikbaar
Post-Run: 130.065.963.008 bytes beschikbaar

- - End Of File - - 0C6FADD1FD2029FB57F9DD3E40050FA6

Wil je nu ook datgene doen wat ik gevraagd heb en daarvan de logs posten?

Kan iemand mij vertellen of deze cleaner betrouwbaar is en of het wel naar behoren werkt. "C:\Program Files\WinUtilities\WinUtil.exe"

Ik gebruik het al een paar weken maar heb er toch mijn bedenkingen over.

gr

Als je WinUtil.exe in Google mikt (zal je al gedaan hebben) zie je enkele links met rode rondjes (WOT). Ik heb deze site met groen licht van WOT en McAfee Siteadvisor even doorgelezen
http://dottech.org/freeware-reviews/8234
en ik kan me voorstellen dat je wat ongerust bent. Je kan de oorspronkelijke downloadfile en/of die WinUtil.exe checken bij Virustotal.com.
Als je onzeker blijft, kun je natuurlijk een Hijackthis-logje plaatsen.

[quote:464de4729d]Ik gebruik nu Mcafee en ernaast TuneUp.Als deze abonnement is verlopen en dat is over een paar maanden dan kies voor een goede gratis scanner [/quote:464de4729d]

HIhi..:wink: daar heeft Abraham overheen gelezen anders had hij weer op de Avast-trommel geroffeld, zie
http://forum.computertotaal.nl/phpBB2/viewtopic.php?p=1443753
http://forum.computertotaal.nl/phpBB2/viewtopic.php?p=1429794
Overigens gebruik ik zelf ook nog steeds Avast, hoewel ik bij anderen Avira heb geïnstalleerd (voor het gemak, bij Avira hoef je je niet jaarlijks te registreren).

Tim schrijft "HIhi..:wink: daar heeft Abraham overheen gelezen anders had hij weer op de Avast-trommel geroffeld".


Mis vriend, juist vanwege McAfee wil ik graag dat de TS alle onderdelen uitvoert, die ik in mijn opdracht heb staan!

Want McAfee's virusherkenning is nu niet bepaald de beste!

Hoi Abraham54.

De Windows Defender gaf geen virus aan
Dit is de log van MBAM.
Rest volgt nog.

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Databaseversie: 5658

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18999

2-2-2011 14:29:21
mbam-log-2011-02-02 (14-29-21).txt

Scantype: Snelle scan
Objecten gescand: 153657
Verstreken tijd: 19 minuut/minuten, 50 seconde(n)

Geheugenprocessen geïnfecteerd: 0
Geheugenmodulen geïnfecteerd: 0
Registersleutels geïnfecteerd: 0
Registerwaarden geïnfecteerd: 0
Registerdata geïnfecteerd: 0
Mappen geïnfecteerd: 0
Bestanden geïnfecteerd: 0

Geheugenprocessen geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Geheugenmodulen geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Registersleutels geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Registerwaarden geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Registerdata geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Mappen geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Bestanden geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Hoi jitro, de scanresultaten zijn zijn zeer bemoedigend!

Wil je alsnog ook een Hijack This-log posten?

Hoi Abraham54

Helaas is mijn Micro trend proefversie verlopen had er al mee gescand weeks ago en geen probleem, TFC gaf ook niets aan.

Dankje Abraham54 voor je hulp

Kijk dan maar naar de Avast 6 Free beta versie!

Zie daarvoor http://forum.computertotaal.nl/phpBB2/viewtopic.php?t=211800