frank1976

ik denk het niet , want het gebeurt ook als ik via start afsluit.

na een keer of 5 kan ik weer gewoon opstarten en doet hij het weer normaal en na een tijdje begint het weer.

ja ook in veilige modus kan ik niet opstarten

ik snap het nu niet meer,maar nu begint het dus weer opnieuw!! kan weer geen taakbeheer openen enz. ook kan ik nu heel slecht afsluiten dan blijft de pc hangen in het afmelden, en dan moet ik hem handmatig opstarten. krijg ik hem natuurlijk weer niet opgestart heb ik alleen een zwart beeld en een muisaanwijzer en kan ik niks doen. wat kan ik nu nog doen?

zo het is gelukt!! hopen dat hu alles weer goed blijft. zo te lezen ben je net zoals mij geen grote fan van vista. ik hoop dat ik snel kan overstappen naar de nieuwe windows.

als ik naar start uitvoeren ga dan wordt er alleen een pagina van google geopend met zoekresultaten. moet ik hier nog iets veranderen?

ja het verwijderen van registerybooster heeft tot nu wel invloed, ik heb geen beperkingen meer. bedankt voor de hulp frank

ja de 2 bestandjes die je had opgegeven

ik weet niet meer waar ik heb het gedownload dus ik zal het maar verwijderen. 2 files kan ik niet vinden op mijn c schijf. maar als ik het bij uitvoeren intype heb ik geen toegang. hoe kan ik deze verwijderen?

hier de logjes Malwarebytes' Anti-Malware 1.38 Database versie: 2363 Windows 6.0.6001 Service Pack 1 9-7-2009 23:37:19 mbam-log-2009-07-09 (23-37-19).txt Scan type: Snelle Scan Objecten gescand: 83815 Verstreken tijd: 3 minute(s), 1 second(s) Geheugenprocessen geïnfecteerd: 0 Geheugenmodulen geïnfecteerd: 0 Registersleutels geïnfecteerd: 0 Registerwaarden geïnfecteerd: 0 Registerdata bestanden geïnfecteerd: 0 Mappen geïnfecteerd: 0 Bestanden geïnfecteerd: 0 Geheugenprocessen geïnfecteerd: (Geen kwaadaardige items gevonden) Geheugenmodulen geïnfecteerd: (Geen kwaadaardige items gevonden) Registersleutels geïnfecteerd: (Geen kwaadaardige items gevonden) Registerwaarden geïnfecteerd: (Geen kwaadaardige items gevonden) Registerdata bestanden geïnfecteerd: (Geen kwaadaardige items gevonden) Mappen geïnfecteerd: (Geen kwaadaardige items gevonden) Bestanden geïnfecteerd: (Geen kwaadaardige items gevonden) ComboFix 09-07-09.04 - cursist 10-07-2009 20:53.4.2 - NTFSx86 Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.31.1043.18.2037.1268 [GMT 2:00] Gestart vanuit: c:\users\cursist\Desktop\ComboFix.exe AV: McAfee VirusScan Enterprise *On-access scanning enabled* (Outdated) {918A2B0B-2C60-4016-A4AB-E868DEABF7F0} SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\windows\Installer\79d44ce.msi . (((((((((((((((((((( Bestanden Gemaakt van 2009-06-10 to 2009-07-10 )))))))))))))))))))))))))))))) . 2009-07-10 18:57 . 2009-07-10 18:57 -------- d-----w- c:\users\frank en miriam\AppData\Local\temp 2009-07-09 21:43 . 2009-07-09 21:43 -------- d-----w- C:\QUARANTINE 2009-07-05 20:31 . 2008-04-02 00:52 408064 ----a-w- c:\windows\system32\msinfo32.exe 2009-07-05 17:09 . 2008-08-26 16:48 99624 -c--a-w- c:\programdata\{81D4BDA8-1F33-4633-B176-8A7E942ABDE1}\registrybooster2\7390E4F0\6383BC9B\StartRegistryBooster.exe 2009-07-05 17:09 . 2008-08-26 16:48 757760 -c--a-w- c:\programdata\{81D4BDA8-1F33-4633-B176-8A7E942ABDE1}\registrybooster2\2B86F085\6383BC9B\UBVarRB.dll 2009-07-05 17:09 . 2008-08-26 16:48 6676480 -c--a-w- c:\programdata\{81D4BDA8-1F33-4633-B176-8A7E942ABDE1}\registrybooster2\4E45A1A4\6383BC9B\RegistryBooster.dll 2009-07-05 17:09 . 2008-08-26 16:48 497496 -c--a-w- c:\programdata\{81D4BDA8-1F33-4633-B176-8A7E942ABDE1}\registrybooster2\AF01B0B\6383BC9B\XceedZip.dll 2009-07-05 17:09 . 2008-08-26 16:48 413696 -c--a-w- c:\programdata\{81D4BDA8-1F33-4633-B176-8A7E942ABDE1}\registrybooster2\52CD59C9\6383BC9B\update.dll 2009-07-05 17:09 . 2008-08-26 16:48 2019624 -c--a-w- c:\programdata\{81D4BDA8-1F33-4633-B176-8A7E942ABDE1}\registrybooster2\7CE1607E\6383BC9B\RegistryBooster.exe 2009-07-05 17:09 . 2008-08-26 16:48 111912 -c--a-w- c:\programdata\{81D4BDA8-1F33-4633-B176-8A7E942ABDE1}\registrybooster2\65B92A91\6383BC9B\KillRBProcess.exe 2009-07-05 17:09 . 2009-07-05 17:09 -------- d-----w- c:\programdata\{81D4BDA8-1F33-4633-B176-8A7E942ABDE1} 2009-07-04 17:50 . 2009-07-04 17:50 -------- d-----w- c:\program files\CCleaner 2009-07-04 06:59 . 2009-07-04 06:59 -------- d-----w- c:\program files\Security Task Manager 2009-07-03 18:53 . 2009-07-05 20:45 -------- d-----w- C:\systeminfo 2009-07-03 18:53 . 2009-07-03 18:53 -------- d-----w- C:\8c5941c07c50bb52b968547091 2009-07-03 18:51 . 2009-07-03 18:53 -------- d-----w- c:\program files\Agics 2009-06-29 20:31 . 2009-06-29 20:31 5972 ----a-w- c:\users\frank en miriam\AppData\Local\d3d9caps.dat 2009-06-29 19:59 . 2009-06-29 19:59 -------- d-----w- c:\users\frank en miriam\AppData\Roaming\Motive 2009-06-29 19:55 . 2009-06-29 19:55 -------- d-----w- c:\users\frank en miriam\AppData\Local\MediaDirect 2009-06-29 19:55 . 2009-06-29 19:55 -------- d-----w- c:\users\frank en miriam\AppData\Local\Google 2009-06-28 19:20 . 2009-06-28 19:20 -------- d-----w- c:\program files\VS Revo Group 2009-06-28 11:08 . 2009-06-28 11:08 -------- d-----w- c:\programdata\DAEMON Tools Lite 2009-06-28 06:51 . 2009-06-28 06:51 -------- d-----w- c:\program files\SysShield Tools 2009-06-27 21:59 . 2009-06-27 21:59 -------- d-----w- c:\users\cursist\AppData\Roaming\flashpaste 2009-06-24 19:52 . 2009-06-24 19:52 -------- d-----w- c:\windows\system32\Dell 2009-06-24 09:45 . 2009-06-24 09:45 -------- d-sh--w- C:\found.001 2009-06-24 09:37 . 2009-06-27 13:12 -------- d-----w- c:\users\cursist\AppData\Roaming\GlarySoft 2009-06-24 09:33 . 2009-06-24 09:33 -------- d-----w- c:\program files\Glary Utilities 2009-06-23 13:38 . 2009-06-23 13:38 -------- d-----w- c:\program files\Fotoservice 2009-06-19 22:16 . 2009-06-17 09:27 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2009-06-19 22:16 . 2009-07-02 17:05 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2009-06-19 22:16 . 2009-06-17 09:27 19096 ----a-w- c:\windows\system32\drivers\mbam.sys 2009-06-19 22:10 . 2009-06-24 20:07 -------- d-----w- c:\users\cursist\Option 2009-06-19 18:12 . 2009-06-19 18:12 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard 2009-06-19 15:25 . 2009-06-19 16:03 183 ----a-w- c:\users\cursist\AppData\Roaming\Azureus\restart.bat 2009-06-19 14:56 . 2009-06-19 15:03 -------- d-s---w- C:\frank1 2009-06-19 14:48 . 2009-06-19 14:48 -------- d-----w- c:\users\cursist\AppData\Roaming\Malwarebytes 2009-06-19 14:48 . 2009-06-19 14:48 -------- d-----w- c:\programdata\Malwarebytes 2009-06-18 20:05 . 2008-06-19 15:24 28544 ----a-w- c:\windows\system32\drivers\pavboot.sys 2009-06-18 20:05 . 2009-07-09 17:18 -------- d-----w- c:\program files\Panda Security 2009-06-17 20:10 . 2009-06-17 20:10 -------- d-----w- c:\windows\BDOSCAN8 2009-06-14 20:47 . 2009-06-14 20:47 456304 ----a-w- c:\programdata\Google\Google Toolbar\Update\gtbE6B8.tmp.exe 2009-06-14 15:53 . 2009-06-14 15:53 -------- d-----w- c:\program files\Common Files\muvee Technologies 2009-06-14 03:35 . 2009-04-30 12:37 428544 ----a-w- c:\windows\system32\EncDec.dll 2009-06-14 03:34 . 2009-04-30 12:37 293376 ----a-w- c:\windows\system32\psisdecd.dll 2009-06-13 04:59 . 2009-04-21 11:55 2033152 ----a-w- c:\windows\system32\win32k.sys 2009-06-12 18:47 . 2009-06-12 18:47 -------- d-sh--w- C:\found.000 2009-06-10 21:56 . 2009-04-27 12:21 17152 ----a-w- c:\windows\system32\authuitu.dll 2009-06-10 21:56 . 2009-04-27 12:21 28928 ----a-w- c:\windows\system32\uxtuneup.dll 2009-06-10 21:56 . 2009-06-10 21:56 361216 ----a-w- c:\windows\system32\TuneUpDefragService.exe . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-07-10 08:54 . 2009-02-17 16:53 -------- d-----w- c:\programdata\Google Updater 2009-07-09 21:27 . 2009-02-02 20:34 -------- d-----w- c:\users\cursist\AppData\Roaming\Azureus 2009-07-09 18:37 . 2008-10-20 16:44 5972 ----a-w- c:\users\cursist\AppData\Local\d3d9caps.dat 2009-07-09 13:21 . 2008-01-21 06:47 667352 ----a-w- c:\windows\system32\perfh013.dat 2009-07-09 13:21 . 2008-01-21 06:47 126854 ----a-w- c:\windows\system32\perfc013.dat 2009-07-08 20:40 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Sidebar 2009-06-29 20:30 . 2009-06-29 19:54 106304 ----a-w- c:\users\frank en miriam\AppData\Local\GDIPFONTCACHEV1.DAT 2009-06-29 19:54 . 2009-06-29 19:54 -------- d-----w- c:\users\frank en miriam\AppData\Roaming\Dell 2009-06-28 19:42 . 2009-04-02 21:27 -------- d-sh--w- c:\programdata\{55A29068-F2CE-456C-9148-C869879E2357} 2009-06-28 19:35 . 2008-10-08 19:40 -------- d-----w- c:\program files\Google 2009-06-28 11:08 . 2008-10-08 19:44 -------- d-----w- c:\programdata\Dell 2009-06-24 20:07 . 2009-03-08 22:14 -------- d-----w- c:\program files\NewTech Infosystems 2009-06-24 20:07 . 2008-10-08 19:29 -------- d--h--w- c:\program files\InstallShield Installation Information 2009-06-24 19:52 . 2008-10-08 19:32 -------- d-----w- c:\program files\Dell 2009-06-22 21:34 . 2009-03-31 20:58 -------- d-----w- c:\program files\PC Wizard 2008 2009-06-19 16:04 . 2009-02-02 20:32 -------- d-----w- c:\program files\Azureus 2009-06-16 20:50 . 2008-10-17 07:25 1 ----a-w- c:\users\cursist\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys 2009-06-14 07:13 . 2008-10-28 21:29 -------- d-----w- c:\programdata\Microsoft Help 2009-06-14 01:05 . 2008-10-08 19:45 -------- d-----w- c:\program files\Microsoft Works 2009-06-12 18:52 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail 2009-06-10 21:56 . 2009-04-02 21:31 604416 ----a-w- c:\windows\system32\TUProgSt.exe 2009-05-14 20:01 . 2009-01-10 22:00 -------- d-----w- c:\users\cursist\AppData\Roaming\Belastingdienst 2009-05-14 19:52 . 2008-10-16 10:25 106304 ----a-w- c:\users\cursist\AppData\Local\GDIPFONTCACHEV1.DAT 2009-05-09 05:50 . 2009-06-13 04:58 915456 ----a-w- c:\windows\system32\wininet.dll 2009-05-09 05:34 . 2009-06-13 04:58 71680 ----a-w- c:\windows\system32\iesetup.dll 2009-04-23 12:43 . 2009-06-13 04:58 784896 ----a-w- c:\windows\system32\rpcrt4.dll 2009-04-23 12:42 . 2009-06-13 04:58 636928 ----a-w- c:\windows\system32\localspl.dll 2009-03-07 13:08 . 2009-03-07 13:08 24 --sh--w- c:\windows\S90565EE9.tmp 2008-10-09 05:04 . 2008-10-09 05:04 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952] "DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-12-29 687560] "DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2008-08-13 206064] "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Apoint"="c:\program files\DellTPad\Apoint.exe" [2008-05-04 167936] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-03-06 141848] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-03-06 166424] "Persistence"="c:\windows\system32\igfxpers.exe" [2008-03-06 133656] "Broadcom Wireless Manager UI"="c:\windows\system32\WLTRAY.exe" [2007-12-08 3444736] "Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-10-08 29744] "PCMService"="c:\program files\Dell\MediaDirect\PCMService.exe" [2007-12-21 184320] "ShStatEXE"="c:\program files\McAfee\VirusScan Enterprise\SHSTAT.EXE" [2006-11-30 112216] "McAfeeUpdaterUI"="c:\program files\McAfee\Common Framework\UdaterUI.exe" [2006-11-17 136768] "dellsupportcenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2008-08-13 206064] "dscactivate"="c:\program files\Dell Support Center\gs_agent\custom\dsca.exe" [2008-03-11 16384] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\GoToAssist] 2008-10-08 19:47 10536 ----a-w- c:\program files\Citrix\GoToAssist\514\g2awinlogon.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=c:\progra~1\Google\GOOGLE~2\GoogleDesktopNetwork3.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend] @="Service" [HKLM\~\startupfolder\C:^Users^cursist^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dell Dock.lnk] backup=c:\windows\pss\Dell Dock.lnk.Startup backupExtension=.Startup [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules] "{6EAA832B-2A83-4E26-B419-774F567F6BA4}"= c:\program files\Dell\MediaDirect\MediaDirect.exe:Dell MediaDirect "{35D4DD5B-75F1-4C9D-AC87-0CD830966753}"= c:\program files\Dell\MediaDirect\PCMService.exe:CyberLink PowerCinema Resident Program "{588B66FE-46EE-460D-A40B-FB972CD0B7B6}"= c:\program files\Dell\MediaDirect\Kernel\DMP\CLBrowserEngine.exe:Cyberlink Media Server Browser Engine "{57B62AE0-3B47-443D-8627-EF38A0F50F27}"= c:\program files\Dell\MediaDirect\Kernel\DMS\CLMSService.exe:CyberLink Media Server "{15BA1721-23D4-4270-9B13-4E6B1BD39567}"= UDP:c:\program files\McAfee\Common Framework\FrameworkService.exe:McAfee Framework Service "{DD70BD67-AF24-40F9-95AE-2C861360E270}"= TCP:c:\program files\McAfee\Common Framework\FrameworkService.exe:McAfee Framework Service "TCP Query User{1BDFB7CF-CFE1-4CD9-AF44-F4FA37D0796F}c:\\program files\\internet explorer\\iexplore.exe"= UDP:c:\program files\internet explorer\iexplore.exe:Internet Explorer "UDP Query User{BB080937-2143-4985-962F-18E4A9D7AE74}c:\\program files\\internet explorer\\iexplore.exe"= TCP:c:\program files\internet explorer\iexplore.exe:Internet Explorer "TCP Query User{9FEB1575-3C20-42CF-B549-C853CAE7B50B}c:\\program files\\netloader\\netviewer.exe"= UDP:c:\program files\netloader\netviewer.exe:Viewer3D with multi-play "UDP Query User{D8D50286-B1C6-4E4A-B95E-900B0DF6E302}c:\\program files\\netloader\\netviewer.exe"= TCP:c:\program files\netloader\netviewer.exe:Viewer3D with multi-play "TCP Query User{CAEBBB7E-618E-43EB-A94D-6FE0F3738E9A}c:\\program files\\azureus\\azureus.exe"= UDP:c:\program files\azureus\azureus.exe:Azureus "UDP Query User{EC9798BD-C977-4840-83BA-B828D264DDD4}c:\\program files\\azureus\\azureus.exe"= TCP:c:\program files\azureus\azureus.exe:Azureus "{C280ABFD-248D-4E95-A244-2E3BA930CBEC}"= c:\program files\Windows Live\Sync\WindowsLiveSync.exe:Windows Live Sync "{FFAA3A55-D5A9-475C-BC49-243815401C0E}"= UDP:c:\program files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe:AgentSvc.exe "{4F74C9F0-75EE-44C9-B539-B14889D22043}"= UDP:c:\program files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe:BackupSvc.exe "{47C721A0-12E3-414D-AA56-5CCFCF35F6CF}"= UDP:c:\program files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe:SchedulerSvc.exe "{8917C5F5-A968-46B2-94A9-27DA592B9846}"= TCP:c:\program files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe:AgentSvc.exe "{9C4BB3D7-3486-4B5E-858F-DB733383B2BB}"= TCP:c:\program files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe:BackupSvc.exe "{2A15F35C-39A0-4E22-96DE-AB9527807EAC}"= TCP:c:\program files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe:SchedulerSvc.exe R0 pavboot;pavboot;c:\windows\System32\drivers\pavboot.sys [18-6-2009 22:05 28544] R2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\AEstSrv.exe [8-10-2008 23:17 73728] R2 DockLoginService;Dock Login Service;c:\program files\Dell\DellDock\DockLogin.exe [2-5-2008 14:09 161048] R3 IntcHdmiAddService;Intel® High Definition Audio HDMI Service;c:\windows\System32\drivers\IntcHdmi.sys [9-10-2008 7:12 111616] S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files\ALDI Foto Service\Common\Database\bin\fbserver.exe [17-2-2009 21:06 1527900] S3 fssfltr;FssFltr;c:\windows\System32\drivers\fssfltr.sys [10-3-2009 17:38 55280] S3 fsssvc;Windows Live Family Safety;c:\program files\Windows Live\Family Safety\fsssvc.exe [6-2-2009 19:08 533360] S4 gupdate1c991205d12adc0;Google Updateservice (gupdate1c991205d12adc0);c:\program files\Google\Update\GoogleUpdate.exe [17-2-2009 18:54 133104] S4 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\System32\TUProgSt.exe [2-4-2009 23:31 604416] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}] "c:\windows\System32\rundll32.exe" "c:\windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP . Inhoud van de 'Gedeelde Taken' map 2009-07-10 c:\windows\Tasks\GlaryInitialize.job - c:\program files\Glary Utilities\initialize.exe [2009-06-24 09:39] 2009-07-10 c:\windows\Tasks\Google Software Updater.job - c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-10-23 14:36] 2009-07-10 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2009-02-17 16:54] 2009-07-10 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2009-02-17 16:54] 2009-07-10 c:\windows\Tasks\User_Feed_Synchronization-{7A05C95E-D112-4399-864B-157D41C5F5EF}.job - c:\windows\system32\msfeedssync.exe [2009-05-01 11:31] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.startpagina.nl/ Trusted Zone: ziggo.nl\thuishelp DPF: {741747F6-83B4-4FB9-A268-8CA4010762C8} - hxxp://www3.snapfish.nl/SnapfishActivia2.cab DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} - hxxps://asp.photoprintit.de/microsite/10535//defaults/activex/IPSUploader.cab . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2009-07-10 20:57 Windows 6.0.6001 Service Pack 1 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: 0 ************************************************************************** . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . Voltooingstijd: 2009-07-10 20:59 ComboFix-quarantined-files.txt 2009-07-10 18:59 ComboFix2.txt 2009-03-22 18:09 Pre-Run: 143.355.617.280 bytes beschikbaar Post-Run: 143.437.340.672 bytes beschikbaar 212 --- E O F --- 2009-07-09 17:12

ik heb horen zeggen dat combofix niet voor windows vista is. is dat ook zo? of kan ik het gewoon downloaden?

hallo, ik heb een probleem met mijn laptop, hij is erg traag en kan sommige programma`s soms niet openen. ook opent hij soms taakbeheer niet. als ik dan toch in mijn taakbeheer kan kijken dan zie ik programma : conime.exe en dwm.exe, en nog wat andere . als ik op google kijk dan zegt de ene dat conime een virus is en de ander zegt dat het windows hoort. hebben jullie mischien een idee wat het zou kunnen zijn. ik heb een logje bijgevoegd. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:34:21, on 9-7-2009 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Dell\DellDock\DellDock.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\taskeng.exe C:\Program Files\DellTPad\Apoint.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Windows\System32\WLTRAY.EXE C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\Dell\MediaDirect\PCMService.exe C:\Program Files\Dell Support Center\bin\sprtcmd.exe C:\Windows\ehome\ehtray.exe C:\Program Files\McAfee\Common Framework\McTray.exe C:\Windows\ehome\ehmsas.exe C:\Windows\system32\igfxsrvc.exe C:\Program Files\DAEMON Tools Lite\daemon.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\Digital Line Detect\DLG.exe C:\Program Files\Dell\QuickSet\quickset.exe C:\Windows\system32\conime.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\PROGRA~1\OPENOF~1.ORG\program\soffice.exe C:\PROGRA~1\OPENOF~1.ORG\program\soffice.bin C:\Program Files\DellTPad\ApMsgFwd.exe C:\Program Files\DellTPad\HidFind.exe C:\Program Files\DellTPad\Apntex.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Google\Google Toolbar\GoogleToolbarUser.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Startpagina.nl - alles op een rijtje! (ook op mobiel) R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer aangeboden door Dell R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan Enterprise\Scriptcl.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe O4 - HKLM\..\Run: [broadcom Wireless Manager UI] C:\Windows\system32\WLTRAY.exe O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe" O4 - HKLM\..\Run: [shStatEXE] "C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\McAfee\Common Framework\UdaterUI.exe" /StartedFromRunKey O4 - HKLM\..\Run: [dellsupportcenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - .DEFAULT User Startup: Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (User 'Default user') O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe O4 - Global Startup: QuickSet.lnk = C:\Program Files\Dell\QuickSet\quickset.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O13 - Gopher Prefix: O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} (WMI Class) - http://support.euro.dell.com/systemprofiler/SysProExe.CAB O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://dafotoservice.da.nl/DA/UserControls/Part/Upload/ImageUploader5.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab O16 - DPF: {741747F6-83B4-4FB9-A268-8CA4010762C8} (Snapfish Activia2) - http://www3.snapfish.nl/SnapfishActivia2.cab O16 - DPF: {80AEEC0E-A2BE-4B8D-985F-350FE869DC40} (HPDDClientExec Class) - http://h20264.www2.hp.com/ediags/dd/install/HPDriverDiagnosticsVista.cab O16 - DPF: {B1E2B96C-12FE-45E2-BEF1-44A219113CDD} (SABScanProcesses Class) - http://www.superadblocker.com/activex/sabspx.cab O16 - DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} (IPSUploader Control) - https://asp.photoprintit.de/microsite/10535//defaults/activex/IPSUploader.cab O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GoogleDesktopNetwork3.dll O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\system32\aestsrv.exe O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\ALDI Foto Service\Common\Database\bin\fbserver.exe O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: McAfee Framework Service (McAfeeFramework) - McAfee, Inc. - C:\Program Files\McAfee\Common Framework\FrameworkService.exe O23 - Service: McciCMService - Motive Communications, Inc. - C:\Program Files\Common Files\Motive\McciCMService.exe O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe O23 - Service: McAfee Task Manager (McTaskManager) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\STacSV.exe O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Windows\System32\WLTRYSVC.EXE -- End of file - 9642 bytes