Stiekemerdje

Blijft ongeveer even traag

Er is enige verbetering merkbaar al blijft het opstarten een relatief lange bedoeling vooral vanaf het balkje begint op en te gaan en er een lange periode een zwart scherm volgt tot ik mijn wachtwoord kan intype. Voor de rest blijft de pc traag bij bevoorbeeld internetadres type in adresbalk of bij tekst typen bij msn duurt het lang vooraleer de getypte tekst verschijnt. Mvg

ComboFix 09-12-08.03 - Nick 08/12/2009 22:10:01.1.1 - x86 Microsoft® Windows Vista™ Home Basic 6.0.6000.0.1252.32.1043.18.1918.1126 [GMT 1:00] Gestart vanuit: C:\Users\Nick\Pictures\koers\Downloads\ComboFix.exe AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF} SP: AVG Anti-Virus Free *enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF} SP: Lavasoft Ad-Watch Live! *disabled* (Updated) {67844DAE-4F77-4D69-9457-98E8CFFDAA22} SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\$RECYCLE.BIN\S-1-5-21-1625969045-2768679110-1835640245-500 C:\$RECYCLE.BIN\S-1-5-21-2365545147-1999384947-2466353664-500 C:\Users\Nick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Logitech . Productregistratie.lnk C:\Users\Nick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Videos.url C:\Users\Nick\FAVORI~1\Videos.url C:\Users\Nick\Favorites\Videos.url . (((((((((((((((((((( Bestanden Gemaakt van 2009-11-08 to 2009-12-08 )))))))))))))))))))))))))))))) . 2009-12-08 21:21:56 . 2009-12-08 21:22:36 -------- dc----w- C:\Users\Nick\AppData\Local\temp 2009-12-08 21:21:56 . 2009-12-08 21:21:56 -------- dc----w- C:\Users\Default\AppData\Local\temp 2009-12-08 21:21:54 . 2009-12-08 21:21:54 -------- d-----w- C:\Users\Gast\AppData\Local\temp 2009-12-08 18:34:10 . 2009-12-08 18:34:10 4844295 -c--a-w- C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe 2009-12-02 01:05:08 . 2009-05-26 18:50:14 607472 -c--a-w- C:\ProgramData\Yahoo!\YUpdater\yupdater.exe 2009-12-01 12:26:54 . 2009-11-19 10:48:50 872960 -c--a-w- C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\snv49jm9.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll 2009-12-01 12:26:54 . 2009-11-19 10:48:36 43008 -c--a-w- C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\snv49jm9.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbarloader.dll 2009-12-01 12:26:54 . 2009-11-19 10:48:34 340480 -c--a-w- C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\snv49jm9.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff2.dll 2009-12-01 12:26:54 . 2009-11-19 10:48:10 346624 -c--a-w- C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\snv49jm9.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff3.dll 2009-11-27 08:01:51 . 2009-11-27 08:01:52 -------- dc-h--w- C:\ProgramData\CanonIJMyPrinter 2009-11-26 22:57:49 . 2009-11-26 22:57:49 -------- dc-h--w- C:\ProgramData\CanonIJSolutionMenu 2009-11-26 19:45:24 . 2009-11-26 19:45:24 -------- dc-h--w- C:\Windows\system32\CanonIJ Uninstaller Information 2009-11-26 19:41:07 . 2009-05-26 04:00:00 272384 -c--a-w- C:\Windows\system32\CNMLMA2.DLL 2009-11-26 17:06:53 . 2009-10-29 07:59:17 2048 -c--a-w- C:\Windows\system32\tzres.dll 2009-11-25 15:19:56 . 2009-08-10 13:05:25 2048 -c--a-w- C:\Windows\system32\msxml6r.dll 2009-11-25 15:19:56 . 2009-08-10 13:05:24 1406464 -c--a-w- C:\Windows\system32\msxml6.dll 2009-11-25 15:19:56 . 2009-08-10 13:05:23 2048 -c--a-w- C:\Windows\system32\msxml3r.dll 2009-11-25 15:19:56 . 2009-08-10 13:05:23 1260032 -c--a-w- C:\Windows\system32\msxml3.dll 2009-11-24 16:38:39 . 2009-10-19 13:30:32 43008 ----a-w- C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\dhbasvyj.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbarloader.dll 2009-11-24 16:38:39 . 2009-10-19 13:30:30 340480 ----a-w- C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\dhbasvyj.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff2.dll 2009-11-24 16:38:39 . 2009-10-19 13:30:06 346624 ----a-w- C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\dhbasvyj.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff3.dll 2009-11-24 16:38:38 . 2009-10-19 13:30:46 872960 ----a-w- C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\dhbasvyj.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll 2009-11-24 14:33:27 . 2009-10-07 08:43:30 416280 -c--a-w- C:\Windows\system32\LVCodec2.dll 2009-11-11 20:22:55 . 2009-08-14 14:01:34 2031104 -c--a-w- C:\Windows\system32\win32k.sys 2009-11-11 20:22:36 . 2009-08-10 13:08:14 321536 -c--a-w- C:\Windows\system32\WSDApi.dll . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-12-08 18:35:12 . 2009-02-09 19:42:04 -------- dc----w- C:\Program Files\Malwarebytes' Anti-Malware 2009-12-08 17:20:00 . 2009-06-02 22:09:05 0 -c--a-w- C:\Users\Nick\AppData\Local\prvlcl.dat 2009-12-08 12:44:01 . 2008-02-03 19:34:12 -------- dc----w- C:\Users\Nick\AppData\Roaming\OpenOffice.org2 2009-12-04 00:53:06 . 2009-08-23 21:39:40 -------- dc----w- C:\Users\Nick\AppData\Roaming\Skype 2009-12-04 00:23:56 . 2009-08-23 21:40:57 -------- dc----w- C:\Users\Nick\AppData\Roaming\skypePM 2009-12-03 15:14:06 . 2009-02-09 19:42:06 38224 -c--a-w- C:\Windows\system32\drivers\mbamswissarmy.sys 2009-12-03 15:13:56 . 2009-02-09 19:42:09 19160 -c--a-w- C:\Windows\system32\drivers\mbam.sys 2009-12-02 16:15:37 . 2008-02-12 11:44:49 -------- dc----w- C:\Program Files\Common Files\Adobe 2009-12-02 01:05:09 . 2009-04-13 17:43:47 -------- dc----w- C:\Program Files\Yahoo! 2009-12-01 23:58:50 . 2009-11-26 20:50:30 -------- dc----w- C:\ProgramData\CanonIJPLM 2009-11-30 22:26:48 . 2009-10-12 21:26:41 3695616 -c--a-w- C:\ProgramData\Lavasoft\Ad-Aware\Update\AutoLaunch.exe 2009-11-26 20:50:38 . 2009-11-26 19:48:54 -------- dc----w- C:\Program Files\Canon 2009-11-26 20:03:26 . 2009-11-26 20:03:26 -------- dc----w- C:\Program Files\Common Files\CANON 2009-11-26 19:51:05 . 2009-11-26 19:51:05 -------- dc-h--w- C:\Program Files\CanonBJ 2009-11-26 19:44:42 . 2009-11-26 19:44:42 -------- dc-h--w- C:\ProgramData\CanonBJ 2009-11-24 14:29:32 . 2007-12-25 14:36:53 -------- dc----w- C:\Program Files\Common Files\LogiShrd 2009-11-18 22:14:36 . 2008-01-27 13:59:56 118568 ----a-w- C:\Users\Gast\AppData\Local\GDIPFONTCACHEV1.DAT 2009-11-18 00:43:56 . 2008-10-16 17:37:38 -------- dc----w- C:\Program Files\Windows Live 2009-11-12 20:10:48 . 2008-10-16 15:30:08 -------- dc----w- C:\Program Files\Messenger Plus! Live 2009-11-12 09:01:38 . 2006-11-02 11:18:33 -------- dc----w- C:\Program Files\Windows Mail 2009-11-10 08:39:43 . 2007-07-23 21:34:10 -------- dc----w- C:\ProgramData\Roxio 2009-11-09 22:05:27 . 2007-07-24 06:41:21 699276 -c--a-w- C:\Windows\system32\perfh013.dat 2009-11-09 22:05:27 . 2007-07-24 06:41:21 127416 -c--a-w- C:\Windows\system32\perfc013.dat 2009-11-08 22:06:41 . 2007-12-15 18:01:11 -------- dc----w- C:\Program Files\Java 2009-11-05 16:29:50 . 2009-11-05 16:29:50 -------- dc----w- C:\Users\Nick\AppData\Roaming\Unity 2009-11-02 19:42:06 . 2009-10-03 09:25:16 195456 -c----w- C:\Windows\system32\MpSigStub.exe 2009-10-31 20:01:40 . 2009-10-30 16:46:27 -------- dc----w- C:\Users\Nick\AppData\Roaming\Microgaming 2009-10-31 17:29:51 . 2009-10-31 17:29:16 -------- dc----w- C:\Program Files\Everest Poker 2009-10-31 17:13:16 . 2009-10-31 17:13:16 -------- dc----w- C:\ProgramData\Cake Poker 2009-10-31 17:11:43 . 2009-10-30 19:07:05 -------- dc--a-w- C:\Program Files\Cake Poker 2009-10-31 16:13:07 . 2009-10-31 16:13:07 159744 -c--a-w- C:\Users\Nick\AppData\Roaming\UltimateBet\DownLoad\liveupdate.exe 2009-10-31 16:12:24 . 2009-10-31 16:07:28 -------- dc----w- C:\Users\Nick\AppData\Roaming\UltimateBet 2009-10-30 18:43:02 . 2009-10-30 18:43:02 -------- dc----w- C:\ProgramData\Boss Media 2009-10-29 16:28:22 . 2009-02-13 17:43:46 -------- dc----w- C:\ProgramData\TrackMania 2009-10-29 16:27:52 . 2008-02-06 20:46:10 7268 -c--a-w- C:\Users\Nick\AppData\Local\d3d9caps.dat 2009-10-24 14:53:44 . 2007-12-11 11:51:32 -------- dc----w- C:\Program Files\PKR 2009-10-24 13:14:16 . 2009-10-24 13:12:44 -------- dc----w- C:\Program Files\Red Kings Poker 2009-10-19 21:26:28 . 2009-06-22 21:29:02 2353992 -c--a-w- C:\ProgramData\Lavasoft\Ad-Aware\Update\Ad-Aware.exe 2009-10-17 11:01:21 . 2008-11-30 15:53:37 -------- dc----w- C:\ProgramData\Microsoft Help 2009-10-14 12:40:44 . 2009-10-14 12:40:44 296280 -c--a-w- C:\ProgramData\Logishrd\LQCVFX\Filters\VMSEF.dll 2009-10-14 12:37:30 . 2009-10-14 12:37:30 6781272 -c--a-w- C:\ProgramData\Logishrd\LQCVFX\Filters\MMSEF.dll 2009-10-11 11:50:34 . 2009-10-11 11:50:34 -------- dc----w- C:\Program Files\mp3DirectCut 2009-10-11 11:44:40 . 2009-03-04 18:53:51 -------- dc----w- C:\Program Files\HooTech 2009-10-11 03:17:27 . 2008-12-02 15:53:37 411368 -c--a-w- C:\Windows\system32\deploytk.dll 2009-10-07 08:48:52 . 2009-04-30 21:02:32 539160 -c--a-w- C:\Windows\system32\LVUI2RC.dll 2009-10-07 08:48:30 . 2009-04-30 21:02:10 539160 -c--a-w- C:\Windows\system32\LVUI2.dll 2009-10-07 00:46:36 . 2009-10-07 00:46:36 25752 -c--a-w- C:\Windows\system32\drivers\LVPr2Mon.sys 2009-10-07 00:23:08 . 2009-10-07 00:23:08 13584 -c--a-w- C:\Windows\system32\drivers\iKeyLFT2.dll 2009-09-23 13:32:57 . 2007-12-01 17:31:19 118568 -c--a-w- C:\Users\Nick\AppData\Local\GDIPFONTCACHEV1.DAT 2009-09-14 09:50:54 . 2009-10-16 12:45:30 130048 -c--a-w- C:\Windows\system32\drivers\srv2.sys 2009-09-10 17:40:11 . 2009-10-27 18:43:06 4096 -c--a-w- C:\Windows\system32\dxmasf.dll 2009-09-10 17:39:44 . 2009-10-27 18:43:06 7680 -c--a-w- C:\Windows\system32\spwmp.dll 2009-09-10 17:38:29 . 2009-10-16 12:46:15 216576 -c--a-w- C:\Windows\system32\msv1_0.dll 2009-09-10 15:29:54 . 2009-10-27 18:42:45 8147968 -c--a-w- C:\Windows\system32\wmploc.DLL 2009-09-10 15:29:34 . 2009-10-27 18:43:07 311296 -c--a-w- C:\Windows\system32\unregmp2.exe 2007-07-23 21:36:07 . 2007-07-23 21:36:07 141824 -c--a-w- C:\Program Files\mozilla firefox\components\GoogleDesktopMozilla.dll 2006-05-03 09:06:54 . 2009-08-31 15:33:43 163328 -csh--r- C:\Windows\System32\flvDX.dll 2007-02-21 10:47:16 . 2009-08-31 15:33:43 31232 -csh--r- C:\Windows\System32\msfDX.dll 2008-03-16 12:30:52 . 2009-08-31 15:33:43 216064 -csh--r- C:\Windows\System32\nbDX.dll 2007-07-24 06:50:54 . 2007-07-24 06:50:54 8192 --sha-w- C:\Windows\Users\Default\NTUSER.DAT . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2009-07-26 15:44:30 3883856] "Messenger (Yahoo!)"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" [2009-05-26 20:06:32 4351216] "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 12:34:59 201728] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "WorksFUD"="C:\Program Files\Microsoft Works\wkfud.exe" [2000-07-12 11:59:18 24576] "Microsoft Works Portfolio"="C:\Program Files\Microsoft Works\WksSb.exe" [2000-07-12 13:14:18 311350] "Microsoft Works Update Detection"="C:\Program Files\Microsoft Works\WkDetect.exe" [2000-08-29 16:56:34 28739] "Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2007-07-24 06:45:59 1006264] "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2006-11-16 06:45:30 815104] "Ad-Watch"="C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe" [2009-10-12 21:26:37 520024] "AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2009-11-26 20:18:43 2029336] "Windows Mobile-based device management"="C:\Windows\WindowsMobile\wmdSync.exe" [2006-11-02 09:45:59 215552] "SunJavaUpdateSched"="C:\Program Files\Java\jre6\bin\jusched.exe" [2009-10-11 03:17:36 149280] "LogitechQuickCamRibbon"="C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" [2009-10-14 12:36:56 2793304] "CanonMyPrinter"="C:\Program Files\Canon\MyPrinter\BJMyPrt.exe" [2009-03-23 17:00:00 1983816] "CanonSolutionMenu"="C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe" [2009-03-17 16:40:00 767312] "IJNetworkScanUtility"="C:\Program Files\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe" [2009-05-19 17:39:44 136544] "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 03:08:38 35696] "Adobe ARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-09-04 11:08:30 935288] "Malwarebytes Anti-Malware (reboot)"="C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" [2009-12-03 15:14:00 1394000] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ Herinneringen van Microsoft Works Agenda.lnk - C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe [2000-7-12 24633] Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=C:\PROGRA~1\Google\GOOGLE~3\GoogleDesktopNetwork3.dll C:\Windows\System32\avgrsstx.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service] @="Service" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend] @="Service" [HKLM\~\startupfolder\C:^Users^Nick^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 2.3 .lnk] path=C:\Users\Nick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 2.3 .lnk backup=C:\Windows\pss\OpenOffice.org 2.3 .lnk.Startup backupExtension=.Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICCC] 2006-07-11 15:12:58 90112 -c--a-w- C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search] 2007-07-23 21:36:07 227328 -c--a-w- C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IntelliPoint] 2007-02-05 23:52:10 849280 -c--a-w- C:\Program Files\Microsoft IntelliPoint\ipoint.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCMService] 2007-02-14 18:45:48 159744 -c--a-w- c:\Program Files\Powercinema\PCMService.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] 2008-01-10 14:27:36 385024 -c--a-w- C:\Program Files\QuickTime\QTTask.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxWatchTray] 2007-01-11 09:40:22 232184 -c--a-w- C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl] 2006-11-09 02:57:00 3784704 -c--a-w- C:\Windows\RtHDVCpl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmpcSys] 2007-05-03 13:44:10 1116728 -c--a-w- C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] 2009-10-11 03:17:36 149280 -c--a-w- C:\Program Files\Java\jre6\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh] 2006-11-16 06:45:30 815104 ----a-w- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe] 2008-11-21 17:19:13 185872 ----a-w- C:\Program Files\Common Files\Real\Update_OB\realsched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\toolbar_eula_launcher] 2007-02-20 16:20:56 28672 -c--a-w- C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WindowsWelcomeCenter] 2006-11-02 12:34:06 2159104 ----a-w- C:\Windows\System32\oobefldr.dll [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 R0 Lbd;Lbd;C:\Windows\System32\drivers\Lbd.sys [4/05/2009 22:29:31 64160] R1 AvgLdx86;AVG Free AVI Loader Driver x86;C:\Windows\System32\drivers\avgldx86.sys [31/05/2009 12:24:00 335240] R1 AvgTdiX;AVG Free8 Network Redirector;C:\Windows\System32\drivers\avgtdix.sys [31/05/2009 12:24:07 108552] R2 avg8emc;AVG Free8 E-mail Scanner;C:\PROGRA~1\AVG\AVG8\avgemc.exe [31/05/2009 12:23:59 908056] R2 avg8wd;AVG Free8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [31/05/2009 12:23:59 297752] R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [18/01/2009 22:34:37 1028432] R3 rt61x86;Ralink RT61 Wireless Driver for Windows Vista;C:\Windows\System32\drivers\netr61.sys [11/05/2007 16:28:30 357376] R3 X10Hid;X10 Hid Device;C:\Windows\System32\drivers\x10hid.sys [23/07/2007 22:23:29 13976] S0 sptd;sptd;C:\Windows\System32\drivers\sptd.sys [6/02/2008 14:11:39 716272] S3 stusb2ir;USB 2.0 IrDA-brug;C:\Windows\System32\drivers\stusb2ir.sys [2/11/2006 11:25:42 41728] S3 TucbAudio;TucbAudio;C:\Windows\System32\drivers\TucbAudio.sys [4/03/2009 18:36:19 23096] S3 TucbVideo;TucbVideo;C:\Windows\System32\drivers\TucbVideo.sys [4/03/2009 18:36:19 3768] S3 WSDPrintDevice;WSD-ondersteuning voor afdrukken via UMB;C:\Windows\System32\drivers\WSDPrint.sys [2/11/2006 11:25:52 16896] S3 WSDScan;Ondersteuning voor WSD-scan via UMB;C:\Windows\System32\drivers\WSDScan.sys [2/11/2006 11:25:24 19968] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc WindowsMobile REG_MULTI_SZ wcescomm rapimgr LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr . ------- Bijkomende Scan ------- . IE: Add to Google Photos Screensa&ver - C:\Windows\system32\GPhotos.scr/200 Trusted Zone: msn.com\be Trusted Zone: msn.com\zone DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} - hxxps://secure.gopetslive.com/dev/GoPetsWeb.cab FF - ProfilePath - C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\snv49jm9.default\ FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q= FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - hxxp://nl.netlog.com/go/logs/visitors FF - component: C:\Program Files\AVG\AVG8\Firefox\components\avgssff.dll FF - component: C:\Program Files\Mozilla Firefox\components\GoogleDesktopMozilla.dll FF - component: C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\snv49jm9.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll FF - plugin: C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL FF - plugin: C:\Program Files\Google\Picasa3\npPicasa3.dll FF - plugin: C:\Program Files\Microsoft\Office Live\npOLW.dll FF - plugin: C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll FF - plugin: C:\Users\Nick\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ ---- FIREFOX POLICIES ---- C:\Program Files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true); . - - - - ORPHANS VERWIJDERD - - - - HKCU-Run-Polar Sync - (no file) MSConfigStartUp-Adobe Reader Speed Launcher - C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe MSConfigStartUp-ICSDCLT - C:\Windows\rundll32.exe MSConfigStartUp-LogitechCommunicationsManager - C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe MSConfigStartUp-LogitechQuickCamRibbon - C:\Program Files\Logitech\QuickCam\Quickcam.exe MSConfigStartUp-Picasa Media Detector - C:\Program Files\Picasa2\PicasaMediaDetector.exe MSConfigStartUp-Symantec PIF AlertEng - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe MSConfigStartUp-zango - c:\program files\zango\zango.exe AddRemove-FoneSync - C:\Windows\IsUninst.exe -fC:\Program Files\FoneSync\Uninst.isu -cC:\Program Files\FoneSync\UninstSupport.dll AddRemove-legacyqcam_10.51 - C:\Program Files\Common Files\LogiShrd\LogiDriverStore\legacyqcam\10.51.2023\LgDrvInst.exe -remove -instdirC:\Program Files\Common Files\LogiShrd\LogiDriverStore\legacyqcam -enumdelay=2000 -enabledifx -forcedelete -usbhubsfirst -forceremove -cumulativeremove -arpregkeylegacyqcam_10.51 AddRemove-lvdrivers_12.10 - C:\Program Files\Common Files\LogiShrd\LogiDriverStore\lvdrivers\12.10.1110\LgDrvInst.exe -remove -instdirC:\Program Files\Common Files\LogiShrd\LogiDriverStore\lvdrivers -enumdelay=200 -enabledifx -forcedelete -usbhubsfirst -forceremove -cumulativeremove -arpregkeylvdrivers_12.10

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 21:10:18, on 8/12/2009 Platform: Windows Vista (WinNT 6.00.1904) MSIE: Internet Explorer v8.00 (8.00.6001.18828) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe C:\Program Files\AVG\AVG8\avgtray.exe C:\Windows\WindowsMobile\wmdSync.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe c:\Users\Nick\Pictures\koers\Downloads\HijackThis.exe C:\Windows\system32\SearchFilterHost.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = O1 - Hosts: ::1 localhost O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe O4 - HKLM\..\Run: [MSConfig] "C:\Windows\system32\msconfig.exe" /auto O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKLM\..\Run: [Windows Mobile-based device management] %windir%\WindowsMobile\wmdSync.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon O4 - HKLM\..\Run: [iJNetworkScanUtility] C:\Program Files\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') O4 - Startup: Logitech . Productregistratie.lnk = C:\Program Files\Logitech\Logitech WebCam Software\eReg.exe O4 - Global Startup: Herinneringen van Microsoft Works Agenda.lnk = ? O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra button: PokerTime - {00000000-0000-0000-0000-000000000000} - C:\MicroGaming\Poker\PokerTimeMPP\MPPoker.exe (HKCU) O9 - Extra button: UltimateBet - {1FBA04EE-3024-11d2-8F1F-0000F87ABD16} - C:\Users\Nick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UltimateBet\UltimateBet.lnk (HKCU) O9 - Extra 'Tools' menuitem: UltimateBet - {1FBA04EE-3024-11d2-8F1F-0000F87ABD16} - C:\Users\Nick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UltimateBet\UltimateBet.lnk (HKCU) O13 - Gopher Prefix: O15 - Trusted Zone: MSN | Hotmail | Messenger | Nieuws, entertainment, concerten, video, sport, lifestyle, auto en nog veel meer, dat is MSN ! O15 - Trusted Zone: MSN Games - Free Online Games O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/VistaMSNPUpldnl-be.cab O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL,avgrsstx.dll O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\Program Files\Powercinema\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\Program Files\Powercinema\Kernel\TV\CLSched.exe O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe O23 - Service: Planner voor Automatische LiveUpdate - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing) O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe -- End of file - 10255 bytes Malwarebytes' Anti-Malware 1.42 Database versie: 3289 Windows 6.0.6000 Internet Explorer 8.0.6001.18828 8/12/2009 20:50:56 mbam-log-2009-12-08 (20-50-56).txt Scan type: Snelle Scan Objecten gescand: 110297 Verstreken tijd: 1 hour(s), 9 minute(s), 36 second(s) Geheugenprocessen geïnfecteerd: 0 Geheugenmodulen geïnfecteerd: 0 Registersleutels geïnfecteerd: 1 Registerwaarden geïnfecteerd: 0 Registerdata bestanden geïnfecteerd: 0 Mappen geïnfecteerd: 2 Bestanden geïnfecteerd: 3 Geheugenprocessen geïnfecteerd: (Geen kwaadaardige items gevonden) Geheugenmodulen geïnfecteerd: (Geen kwaadaardige items gevonden) Registersleutels geïnfecteerd: HKEY_CURRENT_USER\SOFTWARE\ErrorFix (Rogue.ErrorFix) -> Quarantined and deleted successfully. Registerwaarden geïnfecteerd: (Geen kwaadaardige items gevonden) Registerdata bestanden geïnfecteerd: (Geen kwaadaardige items gevonden) Mappen geïnfecteerd: C:\Users\Nick\AppData\Roaming\ErrorFix (Rogue.ErrorFix) -> Quarantined and deleted successfully. C:\Users\Nick\AppData\Roaming\ErrorFix\Logs (Rogue.ErrorFix) -> Quarantined and deleted successfully. Bestanden geïnfecteerd: C:\Users\Nick\AppData\Roaming\ErrorFix\Logs\2009-02-11 20-35-440.log (Rogue.ErrorFix) -> Quarantined and deleted successfully. C:\Users\Nick\AppData\Roaming\ErrorFix\Logs\2009-02-11 20-36-280.log (Rogue.ErrorFix) -> Quarantined and deleted successfully. C:\Users\Nick\AppData\Roaming\ErrorFix\Logs\2009-02-11 20-39-550.log (Rogue.ErrorFix) -> Quarantined and deleted successfully.

Laptop is heel traag en start traag op. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 17:49:28, on 8/12/2009 Platform: Windows Vista (WinNT 6.00.1904) MSIE: Internet Explorer v8.00 (8.00.6001.18828) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe C:\Program Files\AVG\AVG8\avgtray.exe C:\Windows\WindowsMobile\wmdSync.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe C:\Windows\system32\taskeng.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Windows\system32\NOTEPAD.EXE C:\Windows\system32\SearchFilterHost.exe c:\Users\Nick\Pictures\koers\Downloads\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file) O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe O4 - HKLM\..\Run: [MSConfig] "C:\Windows\system32\msconfig.exe" /auto O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKLM\..\Run: [Windows Mobile-based device management] %windir%\WindowsMobile\wmdSync.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon O4 - HKLM\..\Run: [iJNetworkScanUtility] C:\Program Files\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') O4 - Startup: Logitech . Productregistratie.lnk = C:\Program Files\Logitech\Logitech WebCam Software\eReg.exe O4 - Global Startup: Herinneringen van Microsoft Works Agenda.lnk = ? O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-BE11-137C18D3E543} - C:\Poker\Titan Poker\casino.exe O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra button: PokerTime - {00000000-0000-0000-0000-000000000000} - C:\MicroGaming\Poker\PokerTimeMPP\MPPoker.exe (HKCU) O9 - Extra button: UltimateBet - {1FBA04EE-3024-11d2-8F1F-0000F87ABD16} - C:\Users\Nick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UltimateBet\UltimateBet.lnk (HKCU) O9 - Extra 'Tools' menuitem: UltimateBet - {1FBA04EE-3024-11d2-8F1F-0000F87ABD16} - C:\Users\Nick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UltimateBet\UltimateBet.lnk (HKCU) O13 - Gopher Prefix: O15 - Trusted Zone: MSN | Hotmail | Messenger | Nieuws, entertainment, concerten, video, sport, lifestyle, auto en nog veel meer, dat is MSN ! O15 - Trusted Zone: MSN Games - Free Online Games O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/VistaMSNPUpldnl-be.cab O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL,avgrsstx.dll O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\Program Files\Powercinema\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\Program Files\Powercinema\Kernel\TV\CLSched.exe O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe O23 - Service: Planner voor Automatische LiveUpdate - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing) O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe -- End of file - 10597 bytes Alvast bedankt

Wanneer ik een spel wel starten op windows live messenger dan verschijnt er na het inloggen het volgende: You have reached this page due to errors in your authentication. You may choose among the following Zone sites to continue. I don't know, or none of the above. I was trying to buy a game. I was trying to play a game on Zone.com. I was trying to play a game in MSN Messenger.