Hallo allemaal

Ik heb een probleem met een spambot. Wat ik uit de diverse blocklists
heb kunnen halen schijnt het xarvester te zijn. Ik heb al veel dingen ondernomen om het kwijt te raken maar dat wil niet lukken. Ik heb alle pc's voorziens van die nieuwste AV Mcaffee en volledige scans laten uitvoern.

alle pc's gecontrolleerd met hitman Pro (trial)

Antimalwarebytes geinstalleerd en aangezet

comodo fire wal geinstalleerd en aangezet.

Blijf het probleen houden, iemand een idee hoe ik dit kan oplossen??

Indien jij webmail gebruikt, hebben al die maatregelen weinig zin!

Dus: hoe email jij?

Ik mail gewoon via outlook en niet via webmail. Ik heb het aantal eventueel geinfecteerde pc's terug gebracht tot twee.
Tijdstippen op de blocklists bekeken. Twee van de vier pc's bleken al die tijdstippen uit te hebben gestaan.

Blijven een win7 laptop en een win xppro desktop over. Ik heb op dit moment alleen de desktop aanstaan, kan ik kijken of er vandaag weer een melding komt.

Indien deze topic dan je desktop PC betreft - blijf dan voor die PC in deze topic.

En maak dan voor je notebook een ander topic aan, om vergissingen uit te sluiten, daar geen enkele Windows gelijk is aan een andere Windows.

Doe in ieder geval alvast het volgende:

alvast bedankt voor tips, ik ga er vanavond mee aan de slag en zal de resultaten hier posten.

MBR CHECK

MBRCheck, version 1.2.3
© 2010, AD

Command-line:
Windows Version: Windows XP Professional
Windows Information: Service Pack 3 (build 2600)
Logical Drives Mask: 0x000001fc

Kernel Drivers (total 127):
0x804D7000 \WINDOWS\system32\ntkrnlpa.exe
0x806E6000 \WINDOWS\system32\hal.dll
0xB85A8000 \WINDOWS\system32\KDCOM.DLL
0xB84B8000 \WINDOWS\system32\BOOTVID.dll
0xB80A8000 dvys.sys
0xB7F78000 ACPI.sys
0xB85AA000 \WINDOWS\system32\DRIVERS\WMILIB.SYS
0xB7F67000 pci.sys
0xB80B8000 isapnp.sys
0xB8670000 pciide.sys
0xB8328000 \WINDOWS\system32\DRIVERS\PCIIDEX.SYS
0xB80C8000 MountMgr.sys
0xB7F48000 ftdisk.sys
0xB85AC000 dmload.sys
0xB7F22000 dmio.sys
0xB8330000 PartMgr.sys
0xB80D8000 VolSnap.sys
0xB7F0A000 atapi.sys
0xB80E8000 disk.sys
0xB80F8000 \WINDOWS\system32\DRIVERS\CLASSPNP.SYS
0xB7EEA000 fltmgr.sys
0xB7ED3000 KSecDD.sys
0xB7E46000 Ntfs.sys
0xB7E30000 inspect.sys
0xB7E03000 \WINDOWS\System32\DRIVERS\NDIS.SYS
0xB8338000 \WINDOWS\System32\DRIVERS\TDI.SYS
0xB7DE9000 Mup.sys
0xB82C8000 \SystemRoot\system32\DRIVERS\intelppm.sys
0xB72EE000 \SystemRoot\system32\DRIVERS\nv4_mini.sys
0xB72DA000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
0xB72B2000 \SystemRoot\system32\DRIVERS\HDAudBus.sys
0xB82D8000 \SystemRoot\system32\DRIVERS\l1e51x86.sys
0xB8438000 \SystemRoot\system32\DRIVERS\usbuhci.sys
0xB728E000 \SystemRoot\system32\DRIVERS\USBPORT.SYS
0xB8440000 \SystemRoot\system32\DRIVERS\usbehci.sys
0xB727A000 \SystemRoot\system32\DRIVERS\parport.sys
0xB82E8000 \SystemRoot\system32\DRIVERS\serial.sys
0xB859C000 \SystemRoot\system32\DRIVERS\serenum.sys
0xB82F8000 \SystemRoot\system32\DRIVERS\imapi.sys
0xB8308000 \SystemRoot\system32\DRIVERS\cdrom.sys
0xB8318000 \SystemRoot\system32\DRIVERS\redbook.sys
0xB7257000 \SystemRoot\system32\DRIVERS\ks.sys
0xB870E000 \SystemRoot\system32\DRIVERS\audstub.sys
0xB8168000 \SystemRoot\system32\DRIVERS\rasl2tp.sys
0xB7DC5000 \SystemRoot\system32\DRIVERS\ndistapi.sys
0xB7240000 \SystemRoot\system32\DRIVERS\ndiswan.sys
0xB8178000 \SystemRoot\system32\DRIVERS\raspppoe.sys
0xB8188000 \SystemRoot\system32\DRIVERS\raspptp.sys
0xB718F000 \SystemRoot\system32\DRIVERS\psched.sys
0xB8198000 \SystemRoot\system32\DRIVERS\msgpc.sys
0xB8448000 \SystemRoot\system32\DRIVERS\ptilink.sys
0xB8450000 \SystemRoot\system32\DRIVERS\raspti.sys
0xB715F000 \SystemRoot\system32\DRIVERS\rdpdr.sys
0xB81A8000 \SystemRoot\system32\DRIVERS\termdd.sys
0xB8458000 \SystemRoot\system32\DRIVERS\kbdclass.sys
0xB8460000 \SystemRoot\system32\DRIVERS\mouclass.sys
0xB85CA000 \SystemRoot\system32\DRIVERS\swenum.sys
0xB7101000 \SystemRoot\system32\DRIVERS\update.sys
0xB7DAD000 \SystemRoot\system32\DRIVERS\mssmbios.sys
0xB81C8000 \SystemRoot\System32\Drivers\NDProxy.SYS
0xB41B7000 \SystemRoot\system32\drivers\viahduaa.sys
0xB4193000 \SystemRoot\system32\drivers\portcls.sys
0xB81D8000 \SystemRoot\system32\drivers\drmk.sys
0xB403F000 \SystemRoot\system32\drivers\monfilt.sys
0xB81E8000 \SystemRoot\system32\DRIVERS\usbhub.sys
0xB85CE000 \SystemRoot\system32\DRIVERS\USBD.SYS
0xB3F9E000 \SystemRoot\System32\DRIVERS\cmdguard.sys
0xB8570000 \SystemRoot\system32\DRIVERS\hidusb.sys
0xB8208000 \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
0xB8478000 \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
0xB85D2000 \SystemRoot\System32\Drivers\Fs_Rec.SYS
0xB8684000 \SystemRoot\System32\Drivers\Null.SYS
0xB85D4000 \SystemRoot\System32\Drivers\Beep.SYS
0xB8488000 \SystemRoot\System32\drivers\vga.sys
0xB85D6000 \SystemRoot\System32\Drivers\mnmdd.SYS
0xB85DA000 \SystemRoot\System32\DRIVERS\RDPCDD.sys
0xB8490000 \SystemRoot\System32\Drivers\Msfs.SYS
0xB8498000 \SystemRoot\System32\Drivers\Npfs.SYS
0xB8578000 \SystemRoot\system32\DRIVERS\rasacd.sys
0xB3F6B000 \SystemRoot\system32\DRIVERS\ipsec.sys
0xB3F12000 \SystemRoot\system32\DRIVERS\tcpip.sys
0xB84A0000 \SystemRoot\System32\DRIVERS\cmdhlp.sys
0xB3EC4000 \SystemRoot\system32\DRIVERS\ipnat.sys
0xB8228000 \SystemRoot\system32\drivers\mfetdik.sys
0xB8238000 \SystemRoot\system32\DRIVERS\wanarp.sys
0xB3E9C000 \SystemRoot\system32\DRIVERS\netbt.sys
0xB3E7A000 \SystemRoot\System32\drivers\afd.sys
0xB8248000 \SystemRoot\system32\DRIVERS\netbios.sys
0xB84A8000 \SystemRoot\System32\Drivers\SCDEmu.SYS
0xB3E4F000 \SystemRoot\system32\DRIVERS\rdbss.sys
0xB3DDF000 \SystemRoot\system32\DRIVERS\mrxsmb.sys
0xB84B0000 \??\C:\Program Files\McAfee\VirusScan Enterprise\mferkdk.sys
0xB8258000 \SystemRoot\System32\Drivers\Fips.SYS
0xB8370000 \SystemRoot\system32\DRIVERS\usbccgp.sys
0xB70E5000 \SystemRoot\system32\DRIVERS\mouhid.sys
0xB8378000 \SystemRoot\system32\DRIVERS\usbprint.sys
0xB8380000 \SystemRoot\system32\DRIVERS\HPZius12.sys
0xB8388000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS
0xB70D9000 \SystemRoot\system32\DRIVERS\kbdhid.sys
0xB8278000 \SystemRoot\system32\DRIVERS\HPZid412.sys
0xB7C71000 \SystemRoot\system32\DRIVERS\HPZipr12.sys
0xB8298000 \SystemRoot\System32\Drivers\Cdfs.SYS
0xB3CD7000 \SystemRoot\System32\Drivers\dump_atapi.sys
0xB864E000 \SystemRoot\System32\Drivers\dump_WMILIB.SYS
0xBF800000 \SystemRoot\System32\win32k.sys
0xB3DC3000 \SystemRoot\System32\drivers\Dxapi.sys
0xB83D0000 \SystemRoot\System32\watchdog.sys
0xBD000000 \SystemRoot\System32\drivers\dxg.sys
0xB86EC000 \SystemRoot\System32\drivers\dxgthk.sys
0xBD012000 \SystemRoot\System32\nv4_disp.dll
0xBD62C000 \SystemRoot\System32\ATMFD.DLL
0xB3175000 \??\C:\WINDOWS\system32\drivers\mbam.sys
0xB3025000 \SystemRoot\system32\DRIVERS\ndisuio.sys
0xB2D0C000 \SystemRoot\system32\drivers\wdmaud.sys
0xB3DA7000 \SystemRoot\system32\drivers\sysaudio.sys
0xB866E000 \SystemRoot\System32\Drivers\ParVdm.SYS
0xB2942000 \SystemRoot\system32\DRIVERS\srv.sys
0xB255A000 \SystemRoot\system32\drivers\mfehidk.sys
0xB8390000 \SystemRoot\system32\drivers\mfebopk.sys
0xB25B2000 \SystemRoot\system32\drivers\mfeapfk.sys
0xB870A000 \??\C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys
0xB273A000 \SystemRoot\system32\drivers\mfeavfk.sys
0xB21F9000 \SystemRoot\System32\Drivers\HTTP.sys
0xB2111000 \SystemRoot\system32\DRIVERS\ipfltdrv.sys
0xB2E5D000 \SystemRoot\system32\DRIVERS\asyncmac.sys
0xB0E68000 \SystemRoot\system32\drivers\kmixer.sys
0x7C900000 \WINDOWS\system32\ntdll.dll

Processes (total 46):
0 System Idle Process
4 System
792 C:\WINDOWS\system32\smss.exe
1764 csrss.exe
1820 C:\WINDOWS\system32\winlogon.exe
1896 C:\WINDOWS\system32\services.exe
1908 C:\WINDOWS\system32\lsass.exe
220 C:\Program Files\COMODO\COMODO GeekBuddy\CLPSLS.exe
232 C:\WINDOWS\system32\nvsvc32.exe
296 C:\WINDOWS\system32\svchost.exe
468 svchost.exe
584 C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
664 C:\WINDOWS\system32\svchost.exe
864 svchost.exe
1028 svchost.exe
1156 C:\WINDOWS\system32\spoolsv.exe
1184 C:\WINDOWS\explorer.exe
1224 C:\Program Files\Java\jre6\bin\jqs.exe
1292 C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
1732 C:\Program Files\McAfee\Common Framework\FrameworkService.exe
1840 C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe
1912 naPrdMgr.exe
2040 C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
600 C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
1040 C:\WINDOWS\system32\IoctlSvc.exe
900 C:\WINDOWS\system32\HPZipm12.exe
1324 C:\WINDOWS\system32\svchost.exe
1460 C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
3368 alg.exe
3748 C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
2292 C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
2300 C:\Program Files\McAfee\VirusScan Enterprise\shstat.exe
2308 C:\Program Files\McAfee\Common Framework\UdaterUI.exe
1508 C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
1384 C:\Program Files\COMODO\COMODO GeekBuddy\CLPS.exe
2584 C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
2916 C:\Program Files\McAfee\Common Framework\Mctray.exe
4092 C:\WINDOWS\system32\ctfmon.exe
1708 C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
2216 C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
428 C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
2200 unsecapp.exe
924 C:\PROGRA~1\MICROS~2\Office12\OUTLOOK.EXE
2544 C:\Program Files\QuickPar\QuickPar.exe
1564 C:\Program Files\Internet Explorer\iexplore.exe
3520 C:\Documents and Settings\richard\Local Settings\Temporary Internet Files\Content.IE5\O82XMT3B\MBRCheck[1].exe

\\.\C: –> \\.\PhysicalDrive0 at offset 0x00000000`00007e00 (NTFS)
\\.\F: –> \\.\PhysicalDrive1 at offset 0x00000000`00007e00 (NTFS)
\\.\G: –> \\.\PhysicalDrive2 at offset 0x00000000`00007e00 (NTFS)
\\.\H: –> \\.\PhysicalDrive1 at offset 0x00000006`93925200 (NTFS)

PhysicalDrive0 Model Number: ST3500320AS, Rev: SD1A
PhysicalDrive1 Model Number: SAMSUNGHD502IJ, Rev: 1AA01112
PhysicalDrive2 Model Number: SAMSUNGHD502HJ, Rev: 1AJ100E4

Size Device Name MBR Status
——————————————–
465 GB \\.\PhysicalDrive0 Windows XP MBR code detected
SHA1: F238F1FE114296B6DC7716517DC1DADB3FF3D5C6
465 GB \\.\PhysicalDrive1 Windows XP MBR code detected
SHA1: F238F1FE114296B6DC7716517DC1DADB3FF3D5C6
465 GB \\.\PhysicalDrive2 Windows XP MBR code detected
SHA1: F238F1FE114296B6DC7716517DC1DADB3FF3D5C6


Done!


TDSSKILLER


2011/06/21 16:01:33.0906 1420 TDSS rootkit removing tool 2.5.5.0 Jun 16 2011 15:25:15
2011/06/21 16:01:34.0359 1420 ================================================================================
2011/06/21 16:01:34.0359 1420 SystemInfo:
2011/06/21 16:01:34.0359 1420
2011/06/21 16:01:34.0359 1420 OS Version: 5.1.2600 ServicePack: 3.0
2011/06/21 16:01:34.0359 1420 Product type: Workstation
2011/06/21 16:01:34.0359 1420 ComputerName: RICHARD-42D4D14
2011/06/21 16:01:34.0359 1420 UserName: richard
2011/06/21 16:01:34.0359 1420 Windows directory: C:\WINDOWS
2011/06/21 16:01:34.0359 1420 System windows directory: C:\WINDOWS
2011/06/21 16:01:34.0359 1420 Processor architecture: Intel x86
2011/06/21 16:01:34.0359 1420 Number of processors: 2
2011/06/21 16:01:34.0359 1420 Page size: 0x1000
2011/06/21 16:01:34.0359 1420 Boot type: Normal boot
2011/06/21 16:01:34.0359 1420 ================================================================================
2011/06/21 16:01:35.0359 1420 Initialize success
2011/06/21 16:01:43.0734 3668 ================================================================================
2011/06/21 16:01:43.0734 3668 Scan started
2011/06/21 16:01:43.0734 3668 Mode: Manual;
2011/06/21 16:01:43.0734 3668 ================================================================================
2011/06/21 16:01:44.0500 3668 ACPI (02273a448ba21a7d447daeb47810d40c) C:\WINDOWS\system32\DRIVERS\ACPI.sys
2011/06/21 16:01:44.0531 3668 ACPIEC (63f517b1a87dabf3f5acb8a7952fc1d1) C:\WINDOWS\system32\drivers\ACPIEC.sys
2011/06/21 16:01:44.0609 3668 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
2011/06/21 16:01:44.0640 3668 AFD (355556d9e580915118cd7ef736653a89) C:\WINDOWS\System32\drivers\afd.sys
2011/06/21 16:01:44.0812 3668 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
2011/06/21 16:01:44.0828 3668 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
2011/06/21 16:01:44.0859 3668 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
2011/06/21 16:01:44.0875 3668 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
2011/06/21 16:01:44.0921 3668 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
2011/06/21 16:01:44.0953 3668 Ca533av (a8eae8e358de3a21e6eb54f4fc7f65ec) C:\WINDOWS\system32\Drivers\Ca533av.sys
2011/06/21 16:01:45.0031 3668 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
2011/06/21 16:01:45.0062 3668 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
2011/06/21 16:01:45.0109 3668 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
2011/06/21 16:01:45.0125 3668 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
2011/06/21 16:01:45.0156 3668 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
2011/06/21 16:01:45.0203 3668 cmdGuard (cc56fa45ba18904cb04382ae9f52b1a5) C:\WINDOWS\system32\DRIVERS\cmdguard.sys
2011/06/21 16:01:45.0296 3668 cmdHlp (3a70948ab6e966bdaef2baec1f8ef9d1) C:\WINDOWS\system32\DRIVERS\cmdhlp.sys
2011/06/21 16:01:45.0421 3668 ctljystk (71007bd2e1e26927fe3e4eb00c0beedf) C:\WINDOWS\system32\DRIVERS\ctljystk.sys
2011/06/21 16:01:45.0484 3668 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
2011/06/21 16:01:45.0531 3668 dmboot (dec123e0c75971d0cc7a6c6a75e28429) C:\WINDOWS\system32\drivers\dmboot.sys
2011/06/21 16:01:45.0625 3668 dmio (7268e66259722f6228c730685b201092) C:\WINDOWS\system32\DRIVERS\dmio.sys
2011/06/21 16:01:45.0640 3668 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
2011/06/21 16:01:45.0671 3668 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
2011/06/21 16:01:45.0718 3668 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
2011/06/21 16:01:45.0765 3668 emu10k (01f83e1b5dce05f5cb7d99113ca9e890) C:\WINDOWS\system32\drivers\emu10k1m.sys
2011/06/21 16:01:45.0796 3668 emu10k1 (7ffa171cce6a8bfc774862a578ba39a2) C:\WINDOWS\system32\drivers\ctlfacem.sys
2011/06/21 16:01:45.0875 3668 ethgfscx (c17c9e41619823ce5afc3db33c14b0c1) C:\WINDOWS\system32\drivers\ethgfscx.sys
2011/06/21 16:01:45.0953 3668 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
2011/06/21 16:01:46.0015 3668 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys
2011/06/21 16:01:46.0140 3668 Fips (8bfffb5ac954e19dfdb96d56512aa518) C:\WINDOWS\system32\drivers\Fips.sys
2011/06/21 16:01:46.0265 3668 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys
2011/06/21 16:01:46.0312 3668 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
2011/06/21 16:01:46.0328 3668 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
2011/06/21 16:01:46.0375 3668 Ftdisk (fa8ca22e70245c81ff29c36af56292fc) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
2011/06/21 16:01:46.0421 3668 gameenum (065639773d8b03f33577f6cdaea21063) C:\WINDOWS\system32\DRIVERS\gameenum.sys
2011/06/21 16:01:46.0468 3668 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
2011/06/21 16:01:46.0500 3668 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
2011/06/21 16:01:46.0546 3668 hidusb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
2011/06/21 16:01:46.0609 3668 HPZid412 (d03d10f7ded688fecf50f8fbf1ea9b8a) C:\WINDOWS\system32\DRIVERS\HPZid412.sys
2011/06/21 16:01:46.0656 3668 HPZipr12 (89f41658929393487b6b7d13c8528ce3) C:\WINDOWS\system32\DRIVERS\HPZipr12.sys
2011/06/21 16:01:46.0703 3668 HPZius12 (abcb05ccdbf03000354b9553820e39f8) C:\WINDOWS\system32\DRIVERS\HPZius12.sys
2011/06/21 16:01:46.0765 3668 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
2011/06/21 16:01:46.0812 3668 i8042prt (c43372d0682f8e32e4ec21117e089ec0) C:\WINDOWS\system32\drivers\i8042prt.sys
2011/06/21 16:01:46.0875 3668 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
2011/06/21 16:01:46.0921 3668 Inspect (28c95218d0c19db3a86bb4e53d6586e9) C:\WINDOWS\system32\DRIVERS\inspect.sys
2011/06/21 16:01:46.0984 3668 intelppm (2d2254fac267e6b1c7865e8ebef60c6d) C:\WINDOWS\system32\DRIVERS\intelppm.sys
2011/06/21 16:01:47.0078 3668 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
2011/06/21 16:01:47.0109 3668 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
2011/06/21 16:01:47.0140 3668 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
2011/06/21 16:01:47.0171 3668 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
2011/06/21 16:01:47.0218 3668 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
2011/06/21 16:01:47.0250 3668 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
2011/06/21 16:01:47.0281 3668 isapnp (0b78e1a31340e1fb1e389d5633f7c3a0) C:\WINDOWS\system32\DRIVERS\isapnp.sys
2011/06/21 16:01:47.0343 3668 Kbdclass (380397621e94b32c744e7b2cc1330390) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
2011/06/21 16:01:47.0390 3668 kbdhid (b833b70fe639f01fb36cedabe57ef031) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
2011/06/21 16:01:47.0453 3668 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
2011/06/21 16:01:47.0500 3668 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
2011/06/21 16:01:47.0531 3668 L1e (101457d884e3dd4636baefb9b7e7d3f3) C:\WINDOWS\system32\DRIVERS\l1e51x86.sys
2011/06/21 16:01:47.0593 3668 MBAMProtector (3d2c13377763eeac0ca6fb46f57217ed) C:\WINDOWS\system32\drivers\mbam.sys
2011/06/21 16:01:47.0687 3668 MBAMSwissArmy (b309912717c29fc67e1ba4730a82b6dd) C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2011/06/21 16:01:47.0765 3668 mfeapfk (b5c306c5b5e7417b9d2b410894678069) C:\WINDOWS\system32\drivers\mfeapfk.sys
2011/06/21 16:01:47.0812 3668 mfeavfk (87b28198b308af3469d6e0b81d86c1fa) C:\WINDOWS\system32\drivers\mfeavfk.sys
2011/06/21 16:01:47.0875 3668 mfebopk (cf37784dd24c83f62626bc0ea3f5e386) C:\WINDOWS\system32\drivers\mfebopk.sys
2011/06/21 16:01:47.0906 3668 mfehidk (241c09c7d8c589ea1d72a36e6578e42c) C:\WINDOWS\system32\drivers\mfehidk.sys
2011/06/21 16:01:47.0968 3668 mferkdk (37b5228bea6b4429ffb90dfa77af4431) C:\Program Files\McAfee\VirusScan Enterprise\mferkdk.sys
2011/06/21 16:01:48.0031 3668 mfetdik (19c2d8af421e96d12e4004ca2162dbe9) C:\WINDOWS\system32\drivers\mfetdik.sys
2011/06/21 16:01:48.0078 3668 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
2011/06/21 16:01:48.0109 3668 Modem (8114eeac353f549331ab73e9af4219ed) C:\WINDOWS\system32\drivers\Modem.sys
2011/06/21 16:01:48.0171 3668 monfilt (9fa7207d1b1adead88ae8eed9cdbbaa5) C:\WINDOWS\system32\drivers\monfilt.sys
2011/06/21 16:01:48.0250 3668 Mouclass (1a4e2214dd63e4a876463d3427ee8261) C:\WINDOWS\system32\DRIVERS\mouclass.sys
2011/06/21 16:01:48.0312 3668 mouhid (18017899254e01371e1a39754d6bf98c) C:\WINDOWS\system32\DRIVERS\mouhid.sys
2011/06/21 16:01:48.0375 3668 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
2011/06/21 16:01:48.0406 3668 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
2011/06/21 16:01:48.0453 3668 MRxSmb (0dc719e9b15e902346e87e9dcd5751fa) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
2011/06/21 16:01:48.0546 3668 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
2011/06/21 16:01:48.0578 3668 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
2011/06/21 16:01:48.0609 3668 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2011/06/21 16:01:48.0625 3668 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
2011/06/21 16:01:48.0656 3668 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
2011/06/21 16:01:48.0687 3668 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys
2011/06/21 16:01:48.0718 3668 MTsensor (d48659bb24c48345d926ecb45c1ebdf5) C:\WINDOWS\system32\DRIVERS\ASACPI.sys
2011/06/21 16:01:48.0750 3668 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
2011/06/21 16:01:48.0812 3668 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
2011/06/21 16:01:48.0828 3668 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
2011/06/21 16:01:48.0859 3668 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
2011/06/21 16:01:48.0890 3668 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
2011/06/21 16:01:48.0906 3668 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
2011/06/21 16:01:48.0937 3668 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
2011/06/21 16:01:49.0031 3668 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
2011/06/21 16:01:49.0093 3668 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
2011/06/21 16:01:49.0125 3668 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
2011/06/21 16:01:49.0171 3668 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
2011/06/21 16:01:49.0218 3668 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
2011/06/21 16:01:49.0250 3668 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
2011/06/21 16:01:49.0437 3668 nv (18c9b152da7bea76b2f9e4b6412e0aaf) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
2011/06/21 16:01:49.0703 3668 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
2011/06/21 16:01:49.0718 3668 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
2011/06/21 16:01:49.0765 3668 Parport (e3934ccc20a4d24f1924e13d36d2a5bd) C:\WINDOWS\system32\DRIVERS\parport.sys
2011/06/21 16:01:49.0843 3668 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
2011/06/21 16:01:49.0859 3668 ParVdm (1eade28746a64c21e0a808bb12a63326) C:\WINDOWS\system32\drivers\ParVdm.sys
2011/06/21 16:01:49.0921 3668 PCI (3b166f9f753c21aedaa9a6bd76b49655) C:\WINDOWS\system32\DRIVERS\pci.sys
2011/06/21 16:01:49.0968 3668 PCIIde (b31edeba4da28283f6b8dc4756fb9585) C:\WINDOWS\system32\DRIVERS\pciide.sys
2011/06/21 16:01:50.0015 3668 Pcmcia (2137ffd65f8e609a3a5acd487c56cce0) C:\WINDOWS\system32\drivers\Pcmcia.sys
2011/06/21 16:01:50.0078 3668 pcouffin (5b6c11de7e839c05248ced8825470fef) C:\WINDOWS\system32\Drivers\pcouffin.sys
2011/06/21 16:01:50.0250 3668 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
2011/06/21 16:01:50.0281 3668 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
2011/06/21 16:01:50.0312 3668 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
2011/06/21 16:01:50.0406 3668 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
2011/06/21 16:01:50.0421 3668 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
2011/06/21 16:01:50.0453 3668 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
2011/06/21 16:01:50.0484 3668 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
2011/06/21 16:01:50.0531 3668 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
2011/06/21 16:01:50.0562 3668 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
2011/06/21 16:01:50.0609 3668 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
2011/06/21 16:01:50.0640 3668 RDPWD (6728e45b66f93c08f11de2e316fc70dd) C:\WINDOWS\system32\drivers\RDPWD.sys
2011/06/21 16:01:50.0671 3668 redbook (4173bc66e485fd77a03c4819f60bd0da) C:\WINDOWS\system32\DRIVERS\redbook.sys
2011/06/21 16:01:50.0796 3668 rtl8139 (d507c1400284176573224903819ffda3) C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
2011/06/21 16:01:50.0828 3668 SCDEmu (ee7a1b6e155258288d99be61190e1112) C:\WINDOWS\system32\drivers\SCDEmu.sys
2011/06/21 16:01:50.0890 3668 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
2011/06/21 16:01:50.0921 3668 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
2011/06/21 16:01:50.0968 3668 Serial (92c21762653bb2ce51147eb8a9aa654f) C:\WINDOWS\system32\DRIVERS\serial.sys
2011/06/21 16:01:51.0031 3668 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
2011/06/21 16:01:51.0062 3668 sfman (0b1a5e9cacb5cdd54a2815107bd7c772) C:\WINDOWS\system32\drivers\sfmanm.sys
2011/06/21 16:01:51.0140 3668 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys
2011/06/21 16:01:51.0187 3668 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
2011/06/21 16:01:51.0218 3668 sr (64d2a7640e0767ecd3bcb38d3200e7ce) C:\WINDOWS\system32\DRIVERS\sr.sys
2011/06/21 16:01:51.0265 3668 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
2011/06/21 16:01:51.0359 3668 ssadbus (48f44a1be434830b7c90fb730745f65a) C:\WINDOWS\system32\DRIVERS\ssadbus.sys
2011/06/21 16:01:51.0437 3668 ssadmdfl (9630b486b62cc0adb0a89152ed0218d7) C:\WINDOWS\system32\DRIVERS\ssadmdfl.sys
2011/06/21 16:01:51.0500 3668 ssadmdm (9afaa23421622c392b55508fa9613949) C:\WINDOWS\system32\DRIVERS\ssadmdm.sys
2011/06/21 16:01:51.0562 3668 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
2011/06/21 16:01:51.0609 3668 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
2011/06/21 16:01:51.0640 3668 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
2011/06/21 16:01:51.0718 3668 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
2011/06/21 16:01:51.0765 3668 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
2011/06/21 16:01:51.0796 3668 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
2011/06/21 16:01:51.0828 3668 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
2011/06/21 16:01:51.0843 3668 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
2011/06/21 16:01:51.0937 3668 TuneUpUtilitiesDrv (f2107c9d85ec0df116939ccce06ae697) C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys
2011/06/21 16:01:52.0031 3668 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
2011/06/21 16:01:52.0078 3668 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
2011/06/21 16:01:52.0140 3668 USBCamera (bba58cf6e4c5818ed1e9f3eaddb47f12) C:\WINDOWS\system32\Drivers\Bulk533.sys
2011/06/21 16:01:52.0187 3668 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
2011/06/21 16:01:52.0218 3668 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
2011/06/21 16:01:52.0265 3668 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
2011/06/21 16:01:52.0296 3668 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
2011/06/21 16:01:52.0328 3668 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
2011/06/21 16:01:52.0359 3668 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
2011/06/21 16:01:52.0390 3668 VClone (94d73b62e458fb56c9ce60aa96d914f9) C:\WINDOWS\system32\DRIVERS\VClone.sys
2011/06/21 16:01:52.0484 3668 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
2011/06/21 16:01:52.0546 3668 VIAHdAudAddService (29cc58050804de6c3a900045ea2dd564) C:\WINDOWS\system32\drivers\viahduaa.sys
2011/06/21 16:01:52.0687 3668 VolSnap (8ab662b3c4691e6ddf61c96bb5b7d103) C:\WINDOWS\system32\drivers\VolSnap.sys
2011/06/21 16:01:52.0765 3668 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
2011/06/21 16:01:52.0812 3668 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
2011/06/21 16:01:52.0906 3668 WpdUsb (c60dc16d4e406810fad54b98dc92d5ec) C:\WINDOWS\system32\Drivers\wpdusb.sys
2011/06/21 16:01:53.0000 3668 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
2011/06/21 16:01:53.0046 3668 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
2011/06/21 16:01:53.0062 3668 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
2011/06/21 16:01:53.0125 3668 MBR (0x1B8) (3051207086651214e435112e51817dc5) \Device\Harddisk0\DR0
2011/06/21 16:01:53.0187 3668 MBR (0x1B8) (3051207086651214e435112e51817dc5) \Device\Harddisk1\DR1
2011/06/21 16:01:53.0218 3668 MBR (0x1B8) (3051207086651214e435112e51817dc5) \Device\Harddisk2\DR2
2011/06/21 16:01:53.0250 3668 ================================================================================
2011/06/21 16:01:53.0250 3668 Scan finished
2011/06/21 16:01:53.0250 3668 ================================================================================
2011/06/21 16:01:53.0250 3752 Detected object count: 0
2011/06/21 16:01:53.0250 3752 Actual detected object count: 0


MALWARE

ww.malwarebytes.org

Databaseversie: 6907

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

21-6-2011 16:19:17
mbam-log-2011-06-21 (16-19-17).txt

Scantype: Snelle scan
Objecten gescand: 194763
Verstreken tijd: 14 minuut/minuten, 14 seconde(n)

Geheugenprocessen geïnfecteerd: 0
Geheugenmodulen geïnfecteerd: 0
Registersleutels geïnfecteerd: 0
Registerwaarden geïnfecteerd: 0
Registerdata geïnfecteerd: 0
Mappen geïnfecteerd: 0
Bestanden geïnfecteerd: 0

Geheugenprocessen geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Geheugenmodulen geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Registersleutels geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Registerwaarden geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Registerdata geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Mappen geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)

Bestanden geïnfecteerd:
(Geen kwaadaardige objecten gedetecteerd)


SYSTEEM

Win XP pro SP 3 legaal
E7500
Nvidia geforce 8600
Asustek P5KPL-AM EPU GB geheugen
3 hd van 500GB


Hoop dat je hier iets mee kan.

Het MBRCheck-log mist iets.

Graag volledig posten.

ik heb de desktop ondertussen volledig opnieuw geinstalleerd. HD ook geformateerd dus deze zal in ieder geval geen probleem meer geven.

Wel direct een extra firewall geinstalleerd (comodo)
mc affee internet protection plus
malware bytes nog niet aan toegekomen

Alvast bedankt voor de hulp

Waarom heb je de Commodo firewall geïnstalleerd, terwijl McAfee ook over een firewall beschikt.

En mogelijk is de Windows firewall ook aktief - dat alles bij elkaar betekent, dat door onderlinge conflicten de beschermende factor afgenomen is.