djdanvan

Hallo, Ik had hier een zeer trage computer (traag in het openen van aplicaties, programma's) die ik heb laten scannen met de meest gebruikte scanners met een beter resultaat als gevolg maar niet dit wat ik wilde Wil er aub iemand kijken naar bijgaande logjes? Alvast hartelijk dank djdanvan Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 15:27:15, on 23/03/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\AVG\AVG9\avgchsvx.exe C:\Program Files\AVG\AVG9\avgrsx.exe C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\AVG\AVG9\avgcsrvx.exe C:\Program Files\AVG\AVG9\avgwdsvc.exe C:\Program Files\Google\Update\1.2.183.23\GoogleCrashHandler.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\PnkBstrB.exe C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\Program Files\AVG\AVG9\avgnsx.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\AVG\AVG9\avgemc.exe C:\Program Files\AVG\AVG9\avgcsrvx.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Java\jre6\bin\jusched.exe C:\PROGRA~1\AVG\AVG9\avgtray.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = HalfLemon.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = Symantec Security Response R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O15 - Trusted Zone: Jetair vakantie, goedkope reizen, vakantie,vliegvakantie,Superdeals,Last Minutes,zonvakantie,strandvakantie,autovakantie,citytrips,minitrips,sneeuwvakantie,vliegvakanties,autovakanties,sneeuwvakanties,citytrip,zomervakantie O15 - Trusted Zone: www.kbc.be O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe O23 - Service: Google Updateservice (gupdate1c98edec4418262) (gupdate1c98edec4418262) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe -- End of file - 8260 bytes ---------------------------------------------------------------- ComboFix 10-03-22.03 - Eigenaar 23/03/2010 11:42:20.1.1 - x86 Microsoft Windows XP Home Edition 5.1.2600.3.1252.32.1043.18.766.362 [GMT 1:00] Gestart vanuit: c:\documents and settings\Eigenaar\Bureaublad\ComboFix\ComboFix.exe . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\documents and settings\All Users\Menu Start\Programma's\D-Link AirPlus G+ Access Point c:\documents and settings\All Users\Menu Start\Programma's\D-Link AirPlus G+ Access Point \D-Link AirPlus G+ Access Point Manager.lnk c:\documents and settings\All Users\Menu Start\Programma's\D-Link AirPlus G+ Access Point \Uninstall .lnk c:\documents and settings\Eigenaar\Menu Start\Programma's\Videos.url c:\progra~1\COMMON~1\{4CA80~1 c:\program files\asembl~1 c:\program files\Common Files\asks~1 c:\program files\Common Files\crosof~1.net c:\program files\Common Files\dobe~1 c:\program files\Common Files\racle~1 c:\program files\Common Files\smante~1 c:\program files\Common Files\sstem~1 c:\program files\Common Files\ystem3~1 c:\program files\fnts~1 c:\program files\icroso~1 c:\program files\pppatc~1 c:\program files\ystem3~1 c:\windows\dobe~1 c:\windows\icroso~1.net c:\windows\pppatc~1 c:\windows\racle~1 c:\windows\smante~1 c:\windows\ssembl~1 c:\windows\sstem~1 c:\windows\system32\stem~1 c:\windows\system32\stem32~1 c:\windows\system32\wnsapicc.exe c:\windows\system32\ymbols~1 c:\windows\wnsxs~1 c:\windows\ystem~1 . (((((((((((((((((((( Bestanden Gemaakt van 2010-02-23 to 2010-03-23 )))))))))))))))))))))))))))))) . 2010-03-23 10:33 . 2010-03-23 10:33 399872 ----a-w- c:\windows\system32\CF12522.exe 2010-03-23 09:10 . 2010-03-23 09:10 -------- d-----w- c:\program files\D-Link AirPlus G+ Access Point 2010-03-23 08:25 . 2010-03-23 07:11 15880 ----a-w- c:\windows\system32\lsdelete.exe 2010-03-23 07:12 . 2009-09-23 12:55 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys 2010-03-23 07:10 . 2010-03-23 07:10 -------- dc-h--w- c:\documents and settings\All Users\Application Data\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6} 2010-03-23 07:10 . 2009-10-03 08:15 2924848 -c--a-w- c:\documents and settings\All Users\Application Data\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}\Ad-AwareInstallation.exe 2010-03-23 07:10 . 2010-03-23 07:10 -------- d-----w- c:\program files\Lavasoft 2010-03-22 22:03 . 2010-03-23 04:31 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2010-03-22 22:03 . 2010-03-22 22:04 -------- d-----w- c:\program files\Spybot - Search & Destroy 2010-03-22 19:45 . 2010-03-22 19:45 5115823 ----a-w- c:\documents and settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe 2010-03-22 19:45 . 2010-03-22 19:45 -------- d-----w- c:\documents and settings\Eigenaar\Application Data\Malwarebytes 2010-03-22 19:44 . 2010-01-07 15:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys 2010-03-22 19:44 . 2010-01-07 15:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2010-03-22 19:44 . 2010-03-22 19:44 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes 2010-03-22 19:44 . 2010-03-22 19:45 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2010-03-22 15:42 . 2010-03-22 15:42 -------- d--h--r- c:\documents and settings\Eigenaar\Onlangs geopend 2010-03-22 15:19 . 2010-03-22 15:19 -------- d-----w- c:\documents and settings\Eigenaar\Local Settings\Application Data\VS Revo Group 2010-03-22 15:18 . 2009-12-20 16:40 27064 ----a-w- c:\windows\system32\drivers\revoflt.sys 2010-03-22 15:18 . 2010-03-22 15:18 -------- d-----w- c:\program files\VS Revo Group 2010-03-22 14:45 . 2010-03-22 14:45 -------- d-----w- c:\windows\system32\wbem\Repository 2010-03-11 06:10 . 2009-10-23 15:28 3558912 -c----w- c:\windows\system32\dllcache\moviemk.exe 2010-03-09 17:02 . 2010-03-09 17:02 -------- d-sh--w- c:\documents and settings\Gilles\PrivacIE 2010-03-01 09:30 . 2010-02-12 10:03 293376 ------w- c:\windows\system32\browserchoice.exe 2010-02-26 16:59 . 2010-02-26 16:59 -------- d-----w- c:\windows\.titana_cache_32 2010-02-26 16:31 . 2010-02-26 16:35 -------- d-----w- C:\Es_E6 . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-03-23 10:19 . 2005-01-12 17:05 33304 ----a-w- c:\documents and settings\Eigenaar\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2010-03-23 09:10 . 2005-01-12 15:41 -------- d--h--w- c:\program files\InstallShield Installation Information 2010-03-22 19:34 . 2005-01-12 17:07 -------- d-----w- c:\program files\Sonic 2010-03-22 19:33 . 2010-01-11 11:38 -------- d-----w- c:\documents and settings\All Users\Application Data\SwiftKit 2010-03-22 19:26 . 2006-03-10 17:28 -------- d-----w- c:\program files\Google 2010-03-22 19:17 . 2009-02-14 19:58 -------- d-----w- c:\documents and settings\All Users\Application Data\Google Updater 2010-03-22 15:27 . 2005-01-12 15:50 -------- d-----w- c:\program files\Symantec 2010-03-22 15:23 . 2005-01-12 15:50 -------- d-----w- c:\program files\Common Files\Symantec Shared 2010-03-08 17:24 . 2008-07-03 09:20 41 ----a-w- c:\documents and settings\Eigenaar\jagex_runescape_preferences.dat 2010-02-27 09:31 . 2008-08-20 12:22 -------- d-----w- c:\documents and settings\Eigenaar\Application Data\LimeWirePlus 2010-02-26 17:09 . 2009-12-11 16:28 69 ----a-w- c:\documents and settings\Eigenaar\jagex_runescape_preferences2.dat 2010-02-24 09:16 . 2009-10-03 07:01 181632 ------w- c:\windows\system32\MpSigStub.exe 2009-12-31 16:50 . 2003-07-23 21:24 353792 ----a-w- c:\windows\system32\drivers\srv.sys . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-05-14 68856] "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 204288] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2003-10-02 118784] "IntelliPoint"="c:\program files\Microsoft IntelliPoint\point32.exe" [2004-06-03 204800] "PPort11reminder"="c:\program files\ScanSoft\PaperPort\Ereg\Ereg.exe" [2007-02-01 255528] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2006-10-25 282624] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360] "DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-02-25 437160] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service] @="Service" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend] @="Service" [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^Adobe Reader Snelle start.lnk] path=c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\Adobe Reader Snelle start.lnk backup=c:\windows\pss\Adobe Reader Snelle start.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AME_CSA] 2002-10-30 02:26 757760 ----a-w- c:\windows\system32\AmeCSA.cpl [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BrMfcWnd] 2007-03-12 13:51 663552 ------w- c:\program files\Brother\Brmfcmon\BrMfcWnd.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ControlCenter3] 2007-01-26 14:58 65536 ------w- c:\program files\Brother\ControlCenter3\BrCtrCen.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\dla] 2003-08-06 00:04 114741 ----a-w- c:\windows\system32\dla\tfswctrl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray] 2003-10-02 12:37 155648 ----a-w- c:\windows\system32\igfxtray.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndexSearch] 2007-01-29 20:10 46632 ----a-w- c:\program files\ScanSoft\PaperPort\IndexSearch.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LDM] 2007-03-24 07:56 67128 ----a-w- c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechSoftwareUpdate] 2004-10-08 10:06 196608 ----a-w- c:\program files\Logitech\Video\ManifestEngine.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideoRepair] 2004-10-08 10:31 458752 ----a-w- c:\program files\Logitech\Video\ISStart.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideoTray] 2004-10-08 10:24 217088 ----a-w- c:\program files\Logitech\Video\LogiTray.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LVCOMSX] 2004-10-08 09:52 221184 ----a-w- c:\windows\system32\LVCOMSX.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PaperPort PTD] 2007-01-29 20:12 30248 ----a-w- c:\program files\ScanSoft\PaperPort\pptd40nt.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] 2006-10-25 17:58 282624 ----a-w- c:\program files\QuickTime\qttask.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] 2008-08-11 15:46 21741864 ----a-r- c:\program files\Skype\Phone\Skype.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSBkgdUpdate] 2006-10-25 08:03 210472 ----a-w- c:\program files\Common Files\ScanSoft Shared\SSBkgdUpdate\SSBkgdUpdate.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] 2008-06-10 02:27 144784 ----a-w- c:\program files\Java\jre1.6.0_07\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] 2008-05-14 10:12 68856 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Symantec NetDriver Monitor] 2005-04-27 08:21 100056 ----a-w- c:\progra~1\SYMNET~1\SNDMon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\type32] 2004-06-03 08:51 172032 ----a-w- c:\program files\Microsoft IntelliType Pro\type32.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender] 2006-11-03 17:20 866584 ----a-w- c:\program files\Windows Defender\MSASCui.exe [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"= "c:\\Program Files\\LimeWire\\LimeWire.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\LimeWire Plus\\LimeWire.exe"= "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= "c:\\WINDOWS\\system32\\mmc.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"= "c:\\Program Files\\D-Link AirPlus G+ Access Point\\AirPlus_Manager.exe"= R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [23/03/2010 8:12 64288] R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [24/09/2009 12:17 1181328] R2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [3/11/2006 18:19 13592] S2 gupdate1c98edec4418262;Google Updateservice (gupdate1c98edec4418262);c:\program files\Google\Update\GoogleUpdate.exe [14/02/2009 20:59 133104] S3 AmeAtmPc;AmeAtmPc;c:\windows\system32\drivers\ameatmpc.sys [12/01/2005 16:57 118391] S3 AtmElan;ATM geëmuleerde LAN;c:\windows\system32\drivers\atmlane.sys [23/07/2003 22:00 55808] S3 AtmLane;ATM LAN-emulatie;c:\windows\system32\drivers\atmlane.sys [23/07/2003 22:00 55808] S3 Revoflt;Revoflt;c:\windows\system32\drivers\revoflt.sys [22/03/2010 16:18 27064] --- Andere Services/Drivers In Geheugen --- *NewlyCreated* - RASAUTO . Inhoud van de 'Gedeelde Taken' map 2010-03-23 c:\windows\Tasks\Ad-Aware Update (Daily 1).job - c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-10-01 07:11] 2010-03-23 c:\windows\Tasks\Ad-Aware Update (Daily 2).job - c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-10-01 07:11] 2010-03-23 c:\windows\Tasks\Ad-Aware Update (Daily 3).job - c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-10-01 07:11] 2010-03-23 c:\windows\Tasks\Ad-Aware Update (Daily 4).job - c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-10-01 07:11] 2010-03-23 c:\windows\Tasks\Ad-Aware Update (Weekly).job - c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-10-01 07:11] 2006-11-27 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2006-10-10 16:13] 2010-03-23 c:\windows\Tasks\Google Software Updater.job - c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-03-08 10:04] 2010-03-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2009-02-14 19:59] 2010-03-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2009-02-14 19:59] 2010-03-23 c:\windows\Tasks\MP Scheduled Scan.job - c:\program files\Windows Defender\MpCmdRun.exe [2006-11-03 17:20] 2010-03-22 c:\windows\Tasks\OGADaily.job - c:\windows\system32\OGAVerify.exe [2008-12-31 15:04] 2010-03-23 c:\windows\Tasks\OGALogon.job - c:\windows\system32\OGAVerify.exe [2008-12-31 15:04] 2010-03-23 c:\windows\Tasks\User_Feed_Synchronization-{984BAC8B-C993-4DD4-9379-4B4C310F5733}.job - c:\windows\system32\msfeedssync.exe [2009-03-08 02:31] 2010-03-23 c:\windows\Tasks\User_Feed_Synchronization-{CA03A935-A23E-433E-9FAD-D2AB6E787000}.job - c:\windows\system32\msfeedssync.exe [2009-03-08 02:31] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.google.be/ uDefault_Search_URL = hxxp://www.google.com/ie mSearch Bar = hxxp://www.www-start-page.com/search.html uInternet Connection Wizard,ShellNext = hxxp://www.sarc.com/region/nl/avcenter/ uInternet Settings,ProxyOverride = localhost uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://www.google.com/search?q=%s IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html Trusted Zone: jetair.be\www Trusted Zone: kbc.be\www Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll . - - - - ORPHANS VERWIJDERD - - - - HKCU-RunServices-Windows Updater - iexplorerrs.exe HKU-Default-Run-Windows Updater - iexplorerrs.exe HKU-Default-RunServices-Windows Updater - iexplorerrs.exe ShellExecuteHooks-{0E2867A6-D430-4DAD-A494-A2BE1C9AB38B} - (no file) MSConfigStartUp-ALUAlert - c:\program files\Symantec\LiveUpdate\ALUNOTIFY.EXE MSConfigStartUp-Microsofts MediaScope - winmedplay.exe MSConfigStartUp-Windows Updater - iexplorerrs.exe MSConfigStartUp-{4CA800E6-0A62-2067-1202-030512200020} - c:\program files\Common Files\{4CA800E6-0A62-2067-1202-030512200020}\Update.exe ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2010-03-23 11:48 Windows 5.1.2600 Service Pack 3 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: 0 ************************************************************************** . Voltooingstijd: 2010-03-23 11:52:34 ComboFix-quarantined-files.txt 2010-03-23 10:52 Pre-Run: 13.399.031.808 bytes beschikbaar Post-Run: 13.382.619.136 bytes beschikbaar - - End Of File - - 4A670756E22E2B0A3A3AF17CE82E7BCB

Hmmmm...

Alvast dank om me op het goede spoor te loodsen, maar dit is iets voor morgen Dank aan allen die me geholpen hebben groeten djdanvan

Ja het is een 32bit. Dus ik maak die diskette aan (langgeleden) en moet ik deze eerst installeren voor ik de WindowsXp CD opstart? of hoe ga ik te werk? grtn djdanvan

Bij driver staan twee mappen 1common en 2 Intel bij Intel terug 2 mappen (RAID en G45_G43_P45) verder bij RAID/Driver, Utility, Floppy/32 of 64bit/nu krijg ik een .exe.file (RaidTool.exe). Wat dit mag zijn weet ik niet. Ook bij de 64bit hetzelfde kweet nie of ik op het juiste spoor zit. grtn djdanvan

Na wat diepergaande info op de CD ben ik op "Tool map"/SP1 map/BIOS2SPI.EXE en in de readme "Please under rear DOS mode run command as: => a:\BIOS2SPI.EXE" gekomen, kweet niet of dit van belang voor u is? het betreft een MB "FOXCONN" www.foxconnchannel.com

Ja Jean-Pierre die heb ik, het betreft een MB "FOXCONN" www.foxconnchannel.com Na het verkennen van die CD zou ik bij god niet kunnen zeggen welk een tool het is om die sata driver diskette aan te maken? grtn djdanvan

Stegisoft, Allereerst dank voor het vlugge antwoord, ik denkt via uw antwoord dat we het probleem gevonden hebben, het is inderdaad sata. En dat de CD WindowsXP zonder SP2 niet opstart de sata HD Hoe zou ik verder kunnen met die sata hd? op het MB zit er geen IDE enkel Sata groeten djdanvan ---------- Post toegevoegd om 16:58 ---------- Vorige post was om 16:56 ---------- Ja Jurgen dat is een CD met enkel WindowsXP (eerste generatie XP)

Inderdaad ik weet dat SP2 en 3 nodig zijn maar ik zit wel vastgepint op de installatie key die aan die welbepaalde WindowsXP gekoppelt zijn.

Ja dat is waar dat de SP's met een reden zijn gekomen maar waarom deze zonder SP omdat deze er oorspronkelijk heeft opgestaan en daarna SP1, 2 , 3 eropgeplaatst is. Nu de comp aan een groot onderhoud toe is terug die oorspronkelijke die dus NIET gaat. Kan dt niet meer? of wat doe ik verkeerd? groeten djdanvan

De CD lijkt proper en van alle stof ontdaan maar dit helpt niet. Het eigenaardige is ik kom niet aan het keuze scherm "intalleren" met enter of "herstellen" of "afsluiten" met F3 Maar als ik een CD gebruik met SP2 dan lukt dit wel en de CD zonder SP2 niet. Maar ik wil die zonder SP2 installeren. groeten djdanvan ---------- Post toegevoegd om 15:51 ---------- Vorige post was om 15:49 ---------- Vroeger stond er WindXP op

Bijlage, stopvenster

:ciao:Beste, Ik wil mijn PC opnieuw installeren met WindowsXP maar steeds na het kopiëren van de cd bestanden kom ik steeds op een bleuscreen met volgende info (zie bijlage) HD is geformatteerd in NTFS Het is nog een WindowsXp versie zonder service pack2 Alles in de BIOS blijkt goed te staan. Vroeger werkte dit zonder problemen nu blijkbaar niet meer, is er hiervoor een verklaring? Dank djdanvan ---------- Post toegevoegd om 13:25 ---------- Vorige post was om 13:14 ---------- Blijlage lukt blijkbaar niet om mee te sturen

Alles blijkt goed te werken. Mijn laptop krijgt nu 81.165.252.7 en staat los van het thuisnetwerk. Mijn Vaste PC hangt aan mijn router (xxx.xxx.xxx.xxx) en de router heeft xxx.xxx.xxx.xxx t'is dit dat ik wilde. Bedankt voor alles. grtn djdanvan

Dank voor het snelle antwoord, Zoals ik het nu gedaan heb moeten beide PC's een afzonderlijk IP krijgen of niet? ---------- Post toegevoegd om 11:37 ---------- Vorige post was om 11:34 ---------- Ja, nog iets Ik weet dat mijn laptop een IP adres krijgt van mijn WiFi router (in de range van 192.168.X.X Maar het is dan mijn WiFi router die een andere moet krijgen

Hallo, Ik ben thuis gabonneerd bij Telenet met de formule " Goldshake " Ik zou graag twee ip adressen bekomen, wie weet of dit in deze formule is inbegrepen? Of hoe ik daar moet aanbeginnen Van uit mijn Telenet modem ben ik aangesloten op een D-Link swith die van daaruit naar PC1 vertrekt en ook naar mijn WiFi router waar mijn Laptop is geconnecteerd. Of moet dit worden aangevraagd bij Telenet? Alvast hartelijke dank djdanvan

OK, Dat probeer ik altijd te doen Sorry, als ik het eens vergeet groeten djdanvan

Hoe bedoel je OPGELOST!!!

Stegisoft, Ja inderdaad, vandeneerste keer prijs. (Broadcom) "Free PC Audit" kende ik niet. Leuk hoor, Dank u Ik doe verder grtn djdanvan

Beste Stegisoft, Inderdaad deze heb ik ook gelezen in de manual van Acer maar niets heeft mij verder geholpen. Nu ik zal de Laptop helemaal opnieuw voorzien van het OS systeem. Maar een vraagje nog, bij de Wireless drivers staan er twee drivers nl. Atheros en Broadcom weet jij welke ik zou moeten gebruiken? groeten djdanvan

Hallo!!! Een laptop van Acer Aspire 5040 waarvan ik alles opnieuw geinstalleerd heb maar ik geraak er maar niet ingeslaagd de aanboord zijnde draadloze netwerkkaart in te stellen nochtans heb ik al de drivers van Acer afgehaald en geinstalleerd. De vaste LAN kaart is in orde en werkt. Blijkbaar is het een Broadcom 802.11g zo te zien in apparaatbeheer. Vooraan de laptop zijn er twee knoppen die bestemd zijn om de Wireless en de Blootooth on/off te schakelen maar deze werken niet, ik weet niet hoe ik deze moet activeren of instellen? Wie kan mij helpen? groeten djdanvan.

Kape, Hartelijk dank, voor het nakijken. groeten djdanvan

Beste PC Help, Ik heb hier een laptop (Acer Aspire 5040 AMD Turion 2.0 met 960 MB) die wat aan de trage kant was geworden en heb hem met de meest voor de handliggende scanners laten scannen met een redelijk resultaat als gevolg. Bij het opstarten van de browser vraagt die soms van mijn standaard browser in te stellen ik werk met IE 8.0 maar die staat als standaard ingesteld waarom die vraag nog? Ook heb ik een HJT logje en een ComboFix logje bijgevoegd. Wil er iemand kijken of er nog iets kan gefixt worden? groeten djdanvan Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 15:21:34, on 2/03/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\AVG\AVG9\avgchsvx.exe C:\Program Files\AVG\AVG9\avgrsx.exe C:\Program Files\AVG\AVG9\avgcsrvx.exe C:\WINDOWS\System32\wltrysvc.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\System32\bcmwltry.exe C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Acer\Empowering Technology\admtray.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\WINDOWS\system32\WLTRAY.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\AVG\AVG9\avgwdsvc.exe C:\Acer\Empowering Technology\admServ.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\AVG\AVG9\avgnsx.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLService.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\WINDOWS\system32\HPZipm12.exe C:\Program Files\CyberLink\Shared Files\RichVideo.exe C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe C:\DOCUME~1\SOPHIE\LOCALS~1\Temp\RtkBtMnt.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe C:\Program Files\internet explorer\iexplore.exe C:\Program Files\internet explorer\iexplore.exe C:\Program Files\Windows Live\Toolbar\wltuser.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O4 - HKLM\..\Run: [CtrlVol] "C:\Program Files\Launch Manager\CtrlVol.exe" O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [ADMTray.exe] "C:\Acer\Empowering Technology\admtray.exe" O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay O4 - HKLM\..\Run: [broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200 O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://virusscanner.telenet.be/fscax.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {CAC677B6-4963-4305-9066-0BD135CD9233} (IPSUploader4 Control) - http://as.photoprintit.de/ips-opdata/layout/default01/activex/IPSUploader4.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O16 - DPF: {D71F9A27-723E-4B8B-B428-B725E47CBA3E} - http://imikimi.com/download/imikimi_plugin_0.5.1.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe O23 - Service: AdminWorks Agent X6 (AWService) - Avocent Inc. - C:\Acer\Empowering Technology\admServ.exe O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: Broadcom Wireless LAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\wltrysvc.exe -- End of file - 10646 bytes ___________________________________________________________ ComboFix 10-03-01.03 - SOPHIE 02/03/2010 14:58:05.3.1 - FAT32x86 Microsoft Windows XP Home Edition 5.1.2600.3.1252.31.1043.18.958.436 [GMT 1:00] Gestart vanuit: c:\documents and settings\SOPHIE\Bureaublad\ComboFix.exe AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF} . (((((((((((((((((((( Bestanden Gemaakt van 2010-02-02 to 2010-03-02 )))))))))))))))))))))))))))))) . 2010-03-02 11:56 . 2010-03-02 11:56 -------- d-----w- c:\windows\LastGood 2010-03-02 09:49 . 2010-03-02 09:49 -------- d--h--r- c:\documents and settings\SOPHIE\Onlangs geopend 2010-03-02 09:35 . 2010-03-02 09:35 -------- d-----w- c:\program files\Trend Micro 2010-03-02 09:11 . 2010-03-02 09:11 399872 ----a-w- c:\windows\system32\CF2426.exe 2010-03-02 07:47 . 2010-03-02 07:47 12464 ----a-w- c:\windows\system32\avgrsstx.dll 2010-03-02 07:47 . 2010-03-02 07:47 360584 ----a-w- c:\windows\system32\drivers\avgtdix.sys 2010-03-02 07:47 . 2010-03-02 07:47 333192 ----a-w- c:\windows\system32\drivers\avgldx86.sys 2010-03-02 07:47 . 2010-03-02 07:47 28424 ----a-w- c:\windows\system32\drivers\avgmfx86.sys 2010-03-02 07:47 . 2010-03-02 07:47 -------- d-----w- c:\windows\system32\drivers\Avg 2010-03-02 07:47 . 2010-03-02 07:47 -------- d-----w- c:\program files\AVG 2010-03-02 07:47 . 2010-03-02 07:47 -------- d-----w- c:\documents and settings\All Users\Application Data\avg9 2010-03-02 07:29 . 2010-03-02 07:29 -------- d-----w- C:\fsaua.data 2010-03-01 23:55 . 2010-03-01 23:55 -------- d-----w- c:\documents and settings\All Users\Application Data\Office Genuine Advantage 2010-03-01 23:33 . 2010-03-01 23:33 -------- d-----w- c:\documents and settings\All Users\Application Data\Nero 2010-03-01 23:08 . 2010-03-01 23:08 -------- d-----w- C:\Beveiliging 2010-03-01 22:28 . 2010-03-01 22:28 -------- d-----w- c:\program files\Spybot - Search & Destroy 2010-03-01 22:28 . 2010-03-01 22:28 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy 2010-03-01 22:21 . 2010-03-01 21:32 15880 ----a-w- c:\windows\system32\lsdelete.exe 2010-03-01 21:31 . 2010-03-01 21:31 -------- d--h--w- c:\documents and settings\All Users\Application Data\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6} 2010-03-01 21:31 . 2009-10-03 08:15 2924848 ----a-w- c:\documents and settings\All Users\Application Data\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}\Ad-AwareInstallation.exe 2010-03-01 21:30 . 2010-03-01 21:30 -------- d-----w- c:\program files\Lavasoft 2010-03-01 21:30 . 2010-03-01 21:30 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft 2010-03-01 21:02 . 2010-03-01 21:02 5115823 ----a-w- c:\documents and settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe 2010-03-01 20:11 . 2010-03-01 20:12 -------- d-----w- c:\documents and settings\SOPHIE\Application Data\VS Revo Group 2010-03-01 19:57 . 2010-03-01 19:57 -------- d-----w- c:\program files\CCleaner 2010-03-01 18:37 . 2010-03-01 18:37 -------- d-----w- c:\documents and settings\SOPHIE\Local Settings\Application Data\VS Revo Group 2010-03-01 18:36 . 2009-12-20 16:40 27064 ----a-w- c:\windows\system32\drivers\revoflt.sys 2010-02-21 08:15 . 2010-02-21 08:15 -------- d-----w- c:\documents and settings\SOPHIE\Local Settings\Application Data\Temp . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-02-26 06:30 . 2009-11-11 08:09 79488 ----a-w- c:\documents and settings\SOPHIE\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll 2010-01-30 16:13 . 2010-01-30 09:01 62125 ----a-w- c:\documents and settings\SOPHIE\Application Data\mdbu.bin 2010-01-07 15:07 . 2009-11-12 13:57 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2010-01-07 15:07 . 2009-11-12 13:57 19160 ----a-w- c:\windows\system32\drivers\mbam.sys 2010-01-05 06:27 . 2008-08-13 00:10 111968 ----a-w- c:\documents and settings\SOPHIE\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2010-01-04 17:33 . 2010-01-04 17:33 -------- d-sh--w- c:\documents and settings\All Users\Application Data\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC} 2009-12-31 16:50 . 2004-08-04 04:00 353792 ----a-w- c:\windows\system32\drivers\srv.sys 2009-12-21 19:10 . 2006-01-09 19:08 916480 ------w- c:\windows\system32\wininet.dll 2009-12-17 07:42 . 2004-08-04 04:00 345600 ----a-w- c:\windows\system32\mspaint.exe 2009-12-14 07:10 . 2004-08-04 04:00 33280 ----a-w- c:\windows\system32\csrsrv.dll 2009-12-09 15:41 . 2009-12-09 15:41 1700352 ----a-w- c:\windows\system32\gdiplus.dll 2009-12-09 10:12 . 2004-08-04 04:00 2193536 ------w- c:\windows\system32\ntoskrnl.exe 2009-12-09 10:12 . 2004-08-04 04:00 2070400 ------w- c:\windows\system32\ntkrnlpa.exe 2009-12-04 18:22 . 2004-08-04 04:00 455424 ----a-w- c:\windows\system32\drivers\mrxsmb.sys . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter] 2010-03-02 07:47 12464 ----a-w- c:\windows\system32\avgrsstx.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service] @="Service" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Broadcom Wireless Manager UI] c:\windows\system32\WLTRAY [X] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ADMTray.exe] 2005-10-24 15:45 2462208 ----a-w- c:\acer\Empowering Technology\admtray.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICCC] 2005-08-12 13:43 45056 ----a-w- c:\program files\ATI Technologies\ATI.ACE\CLI.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe] 2008-04-14 21:32 15360 ------w- c:\windows\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL] 2006-01-11 16:23 15961088 ----a-w- c:\windows\RTHDCPL.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] 2009-03-15 16:08 136600 ----a-w- c:\program files\Java\jre6\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh] 2004-10-05 15:24 688218 ----a-w- c:\program files\Synaptics\SynTP\SynTPEnh.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPLpr] 2004-10-05 15:25 98394 ----a-w- c:\program files\Synaptics\SynTP\SynTPLpr.exe [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Acer\\Acer Arcade\\PCMService.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\iTunes\\iTunes.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"= "c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= "c:\\Program Files\\AVG\\AVG9\\avgupd.exe"= "c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"= R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [1/03/2010 22:32 64288] R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2/03/2010 8:47 333192] R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2/03/2010 8:47 360584] R2 avg9wd;AVG Free WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [2/03/2010 8:47 285392] R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [10/01/2009 7:09 54752] S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [24/09/2009 12:17 1181328] S3 fsssvc;De service Windows Live Family Safety;c:\program files\Windows Live\Family Safety\fsssvc.exe [5/08/2009 22:48 704864] S3 PID_0920;Logitech QuickCam Express(PID_0920);c:\windows\system32\drivers\LV532AV.SYS [9/09/2008 13:31 152576] S3 POWERKEY;POWERKEY;\??\c:\program files\Launch Manager\POWERKEY.sys --> c:\program files\Launch Manager\POWERKEY.sys [?] S3 Revoflt;Revoflt;c:\windows\system32\drivers\revoflt.sys [1/03/2010 19:36 27064] S3 SI15CI;SI15CI;\??\c:\elements\1stboot\SI15CI.SYS --> c:\elements\1stboot\SI15CI.SYS [?] . Inhoud van de 'Gedeelde Taken' map 2010-03-02 c:\windows\Tasks\OGALogon.job - c:\windows\system32\OGAVerify.exe [2008-12-31 16:04] 2010-03-01 c:\windows\Tasks\OGADaily.job - c:\windows\system32\OGAVerify.exe [2008-12-31 16:04] 2010-03-02 c:\windows\Tasks\Ad-Aware Update (Daily 1).job - c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-10-01 21:32] 2010-03-02 c:\windows\Tasks\Ad-Aware Update (Daily 2).job - c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-10-01 21:32] 2010-03-02 c:\windows\Tasks\Ad-Aware Update (Daily 3).job - c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-10-01 21:32] 2010-03-02 c:\windows\Tasks\Ad-Aware Update (Daily 4).job - c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-10-01 21:32] 2010-03-02 c:\windows\Tasks\Ad-Aware Update (Weekly).job - c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-10-01 21:32] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.google.be/ uDefault_Search_URL = hxxp://www.google.com/ie uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://www.google.com/search?q=%s IE: &Search IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html DPF: {D71F9A27-723E-4B8B-B428-B725E47CBA3E} - hxxp://imikimi.com/download/imikimi_plugin_0.5.1.cab . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2010-03-02 15:02 Windows 5.1.2600 Service Pack 3 FAT NTAPI scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: 0 ************************************************************************** . --------------------- DLLs Geladen Onder Lopende Processen --------------------- - - - - - - - > 'winlogon.exe'(840) c:\windows\system32\Ati2evxx.dll c:\windows\System32\BCMLogon.dll - - - - - - - > 'explorer.exe'(5792) c:\windows\system32\webcheck.dll c:\windows\system32\WPDShServiceObj.dll c:\windows\system32\PortableDeviceTypes.dll c:\windows\system32\PortableDeviceApi.dll c:\program files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll . Voltooingstijd: 2010-03-02 15:04:36 ComboFix-quarantined-files.txt 2010-03-02 14:04 ComboFix2.txt 2010-03-02 09:27 Pre-Run: 16.844.029.952 bytes beschikbaar Post-Run: 17.129.603.072 bytes beschikbaar - - End Of File - - 259F25EEDE8CBE0A460AFE638F8BFAA7

Zoals ik al eerder aangaf, het geheugen wat uitgebreid en een merkelijk verschil in alles opstarten. Nu terug een laptop die een acceptabele gebruiksvriendelijkheid heeft. Voldoende om een doorsnee gebruiker van dienst te zijn. Hartelijke groeten djdanvan

Beste Forumleden, Ik heb een netwerk-drive (merk Sinan) die zeer goed draaide maar door een niet aandachtige handeling van mij heb ik de HD geformateerd. Op die drive standen ZEER belangrijke gegevens. Ik moet wel vertellen dat die format disc zeer vlug gedaan was en ook niet om een bevestiging vroeg en ook niet welk type van format ttz Fat32 of NTFS. Daarna heb ik zelf niets meer ondernomen om nog mogelijks iets te redden, ik wacht af. Nu met alle gevolg daarvan kan ik niets meer opvragen. Daarvoor was alles netjes in mappen verdeeld. Wie kan mij een tip geven waar of bij wie ik terecht kan om nog een geformateerde HD de data (gegevens) te recuperen? Ik ben echt radeloos. Het gaat hier over een HD103UJ van Samsung 1Terra (sata) Groeten van een radeloze djdanvan