Logboeken fouten en waarschuwingen

[thecore166]

wat ik heel raar vindt dat er 1 fout melding

Logboeknaam: System

Bron: Service Control Manager

Datum: 14-9-2011 13:25:31

Gebeurtenis-id:7026

Taakcategorie: Geen

Niveau: Fout

Trefwoorden: Klassiek

Gebruiker: n.v.t.

Computer: John-PC

Beschrijving: De volgende opstartstuurprogramma's zijn niet geladen:

RxFilter

Wat moet ik dan doen

[kweezie wabbit]

Dat is een gekende fout van Roxio 10 op 64 bits systemen van Vista en Windows 7.

Open een kladblokbestand.

Kopieer en plak daarin de onderstaande vetgedrukte tekst.

Folder::

c:\programdata\{4D1C19AE-CC09-4691-A80F-9CCA3846FF67}

FCOPY::

C:\Windows\SysWOW64\drivers\RxFilter.sys |c:\windows\System32\RxFilter.sys

Sla dit bestand op je bureaublad op als CFScript.txt.

Sleep CFScript.txt in ComboFix.exe

Dit zal ComboFix doen herstarten. Start opnieuw op als dat gevraagd wordt.

Post na herstart de inhoud van de Combofix.txt in je volgende bericht samen met een nieuw logje van HijackThis.

[thecore166]

ComboFix 11-09-15.04 - John 15-09-2011 16:31:01.2.6 - x64

Microsoft Windows 7 Professional 6.1.7601.1.1252.31.1043.18.4095.2843 [GMT 2:00]

Gestart vanuit: C:\Users\John\Desktop\ComboFix.exe

gebruikte Opdracht switches :: C:\Users\John\Desktop\CFScript.txt

AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}

SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

* Nieuw herstelpunt werd aangemaakt

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

c:\programdata\{4D1C19AE-CC09-4691-A80F-9CCA3846FF67}

c:\programdata\{4D1C19AE-CC09-4691-A80F-9CCA3846FF67}\1033.MST

c:\programdata\{4D1C19AE-CC09-4691-A80F-9CCA3846FF67}\EMC PowerPath 5.2 SP 1 (64bit).msi

C:\ProgramData\PCDr\5830\Downloads\b3c595f3-948c-4aae-b2a9-7aaa0df99c97.dll

--------------- FCopy ---------------

C:\Windows\SysWOW64\drivers\RxFilter.sys --> c:\windows\System32\RxFilter.sys

(((((((((((((((((((( Bestanden Gemaakt van 2011-08-15 to 2011-09-15 ))))))))))))))))))))))))))))))

2011-09-15 14:34:16 . 2011-09-15 14:34:16 -------- d-----w- C:\Users\Default\AppData\Local\temp

2011-09-15 14:30:58 . 2009-06-26 09:27:28 65520 ----a-w- C:\Windows\system32\RxFilter.sys

2011-09-14 09:34:45 . 2011-09-14 09:34:45 -------- d-----w- C:\ProgramData\Malwarebytes

2011-09-14 09:34:42 . 2011-09-14 09:34:46 -------- d-----w- C:\Program Files (x86)\Malwarebytes' Anti-Malware

2011-09-14 09:34:42 . 2011-08-31 15:00:50 25416 ----a-w- C:\Windows\system32\drivers\mbam.sys

2011-09-12 17:53:48 . 2011-09-12 17:53:48 -------- d-----w- C:\Windows\system32\appmgmt

2011-09-12 16:55:19 . 2011-09-12 16:55:19 -------- d-----w- C:\Windows\Downloaded Installations

2011-09-12 16:33:06 . 2000-07-14 22:00:00 434252 ----a-w- C:\Windows\SysWow64\MSVCRTD.DLL

2011-09-12 16:33:05 . 2005-08-27 11:38:56 1435272 ----a-w- C:\Windows\SysWow64\Flash8.ocx

2011-09-12 16:33:05 . 2004-01-09 02:54:26 188416 ----a-w- C:\Windows\SysWow64\actsplash.ocx

2011-09-12 16:33:05 . 2001-04-26 14:12:10 57399 ----a-w- C:\Windows\SysWow64\Registry.ocx

2011-09-12 16:33:05 . 2000-05-21 20:00:00 83144 ----a-w- C:\Windows\SysWow64\picclp32.ocx

2011-09-12 16:33:05 . 1998-06-16 22:00:00 929844 ----a-w- C:\Windows\SysWow64\MFC42D.DLL

2011-09-12 16:33:05 . 1998-06-16 22:00:00 798773 ----a-w- C:\Windows\SysWow64\MFCO42D.DLL

2011-09-11 22:39:59 . 2011-09-11 23:01:55 1652 ----a-w- C:\Windows\system32\ASOROSet.bin

2011-09-11 18:56:42 . 2011-09-11 18:56:42 -------- d-----w- C:\Windows\SysWow64\Dell

2011-09-11 18:56:42 . 2011-09-11 18:56:42 -------- d-----w- C:\Program Files (x86)\Dell

2011-09-11 18:16:44 . 2011-09-11 18:16:44 -------- d-----w- C:\ProgramData\Driver Tool

2011-09-10 17:40:57 . 2011-07-28 11:06:44 18816 ----a-w- C:\Windows\system32\roboot64.exe

2011-09-10 16:36:22 . 2011-09-10 16:36:22 -------- d-----w- C:\Program Files (x86)\TeamViewer

2011-09-10 10:54:01 . 2011-09-10 10:54:07 -------- d-----w- C:\Program Files (x86)\Common Files\Adobe

2011-09-10 10:43:47 . 2011-09-10 10:43:47 -------- d-----w- C:\Program Files\Google

2011-09-10 10:43:26 . 2011-09-10 10:43:47 -------- d-----w- C:\Program Files (x86)\Google

2011-09-10 10:43:25 . 2011-09-10 10:43:25 404640 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

2011-09-09 18:52:39 . 2011-09-09 18:53:01 -------- d-----w- C:\Program Files\Dell Support Center

2011-09-09 18:39:41 . 2011-08-11 19:10:02 8862544 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll

2011-09-09 18:30:55 . 2011-09-14 08:39:35 -------- d-----w- C:\ProgramData\PCDr

2011-09-09 18:24:03 . 2011-02-19 12:05:15 1139200 ----a-w- C:\Windows\system32\FntCache.dll

2011-09-09 18:24:03 . 2011-02-19 12:04:17 902656 ----a-w- C:\Windows\system32\d2d1.dll

2011-09-09 18:24:03 . 2011-02-19 06:30:51 1076736 ----a-w- C:\Windows\SysWow64\DWrite.dll

2011-09-09 18:24:02 . 2011-02-19 12:04:37 1544192 ----a-w- C:\Windows\system32\DWrite.dll

2011-09-09 18:24:02 . 2011-02-19 06:30:50 739840 ----a-w- C:\Windows\SysWow64\d2d1.dll

2011-09-09 16:06:30 . 2011-09-09 16:06:30 -------- d-----w- C:\Windows\system32\SPReview

2011-09-09 15:24:53 . 2011-09-09 15:24:54 -------- d-----w- C:\Program Files\CCleaner

2011-09-09 15:15:23 . 2011-09-09 15:15:23 -------- d-----w- C:\Program Files (x86)\MSXML 4.0

2011-09-09 15:13:24 . 2010-02-23 08:16:17 294912 ----a-w- C:\Windows\system32\browserchoice.exe

2011-09-09 14:35:27 . 2011-09-09 14:35:27 -------- d-----w- C:\ProgramData\Panda Security

2011-09-09 14:35:27 . 2011-09-08 20:32:34 -------- d-----w- C:\Program Files (x86)\Panda Security

2011-09-09 01:07:59 . 2010-12-23 10:42:53 1118720 ----a-w- C:\Windows\system32\sbe.dll

2011-09-09 01:06:59 . 2011-07-16 05:41:49 13312 ----a-w- C:\Windows\system32\wow64cpu.dll

2011-09-09 01:03:09 . 2011-06-23 05:43:12 5561216 ----a-w- C:\Windows\system32\ntoskrnl.exe

2011-09-09 01:03:08 . 2011-06-23 04:33:57 3912576 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe

2011-09-09 01:03:07 . 2011-06-23 04:33:57 3967872 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe

2011-09-08 18:29:34 . 2011-09-08 18:29:34 -------- d-----w- C:\Program Files (x86)\Gadwin Systems

2011-09-08 17:01:05 . 2011-09-08 17:01:05 -------- d-----w- C:\Windows\system32\EventProviders

2011-09-08 16:44:06 . 2011-09-08 16:43:55 601424 ------w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{C389D9CD-038C-4046-85D0-CCFD426B90A3}\gapaengine.dll

2011-09-08 16:38:54 . 2011-09-08 16:39:18 -------- d-----w- C:\Program Files (x86)\Microsoft Security Client

2011-09-08 16:38:40 . 2011-09-08 16:39:19 -------- d-----w- C:\Program Files\Microsoft Security Client

2011-09-08 16:04:00 . 2010-11-05 01:57:12 48976 ----a-w- C:\Windows\system32\netfxperf.dll

2011-09-08 16:04:00 . 2010-11-05 01:57:10 1942856 ----a-w- C:\Windows\system32\dfshim.dll

2011-09-08 16:02:59 . 2010-11-20 13:33:38 52096 ----a-w- C:\Windows\system32\drivers\winhv.sys

2011-09-08 16:01:58 . 2010-11-20 12:21:34 363008 ----a-w- C:\Windows\SysWow64\wbemcomn.dll

2011-09-08 16:01:58 . 2010-11-20 12:21:25 189952 ----a-w- C:\Program Files (x86)\Windows Portable Devices\sqmapi.dll

2011-09-08 16:01:58 . 2010-11-20 12:19:02 606208 ----a-w- C:\Windows\SysWow64\wbem\fastprox.dll

2011-09-08 16:00:27 . 2010-11-20 13:27:27 529408 ----a-w- C:\Windows\system32\wbemcomn.dll

2011-09-08 16:00:27 . 2010-11-20 13:27:26 244736 ----a-w- C:\Program Files\Windows Portable Devices\sqmapi.dll

2011-09-08 16:00:16 . 2010-11-20 13:27:26 244736 ----a-w- C:\Windows\system32\sqmapi.dll

2011-09-08 15:41:36 . 2011-09-08 15:41:38 84718440 ----a-w- C:\Program Files (x86)\Common Files\Windows Live\.cache\wlc7FFA.tmp

2011-09-08 15:33:51 . 2011-09-08 15:33:51 -------- d-----w- C:\Windows\SysWow64\wbem\en-US

2011-09-08 15:33:49 . 2011-09-08 15:33:49 -------- d-----w- C:\Windows\system32\wbem\en-US

2011-09-08 15:33:40 . 2011-09-08 15:33:40 -------- d-----w- C:\Windows\SysWow64\Wat

2011-09-08 15:33:40 . 2011-09-08 15:33:40 -------- d-----w- C:\Windows\system32\Wat

2011-09-08 14:12:50 . 2011-08-16 06:48:40 8862544 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{BDB9EC28-45E7-4ED3-801B-AE8379464AAC}\mpengine.dll

2011-09-08 14:12:50 . 2010-10-19 20:51:33 270720 ------w- C:\Windows\system32\MpSigStub.exe

2011-09-08 14:04:44 . 2011-09-08 16:54:19 -------- d-----w- C:\Emergency

2011-09-08 14:03:57 . 2011-09-08 14:03:57 -------- d-----w- C:\ProgramData\ATI

2011-09-08 13:58:28 . 2011-09-11 23:02:59 -------- d-----w- C:\Users\John

2011-09-08 13:58:20 . 2011-09-08 13:58:20 -------- d-sh--we C:\ProgramData\Sjablonen

2011-09-08 13:58:20 . 2011-09-08 13:58:20 -------- d-sh--we C:\ProgramData\Menu Start

2011-09-08 13:58:19 . 2011-09-08 13:58:19 -------- d-sh--we C:\Users\Default\Sjablonen

2011-09-08 13:58:19 . 2011-09-08 13:58:19 -------- d-sh--we C:\Users\Default\Netwerkprinteromgeving

2011-09-08 13:58:19 . 2011-09-08 13:58:19 -------- d-sh--we C:\Users\Default\Mijn documenten

2011-09-08 13:58:19 . 2011-09-08 13:58:19 -------- d-sh--we C:\Users\Default\Menu Start

2011-09-08 13:58:19 . 2011-09-08 13:58:19 -------- d-sh--we C:\Users\Default\AppData\Local\Geschiedenis

2011-09-08 13:58:19 . 2011-09-08 13:58:19 -------- d-sh--we C:\ProgramData\Favorieten

2011-09-08 13:58:19 . 2011-09-08 13:58:19 -------- d-sh--we C:\ProgramData\Documenten

2011-09-08 13:58:19 . 2011-09-08 13:58:19 -------- d-sh--we C:\ProgramData\Bureaublad

2011-09-08 13:53:21 . 2011-09-08 14:04:44 -------- d-----w- C:\Windows\SMINST

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

2011-09-09 16:13:21 . 2009-07-14 02:36:51 175616 ----a-w- C:\Windows\system32\msclmd.dll

2011-09-09 16:13:21 . 2009-07-14 02:36:51 152576 ----a-w- C:\Windows\SysWow64\msclmd.dll

2011-07-16 04:26:00 . 2011-09-09 01:07:00 44032 ----a-w- C:\Windows\apppatch\acwow64.dll

((((((((((((((((((((((((((((( SnapShot@2011-09-14_11.05.21 )))))))))))))))))))))))))))))))))))))))))

- 2009-07-14 04:54:17 . 2011-09-14 11:04:43 16384 C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat

+ 2009-07-14 04:54:17 . 2011-09-15 14:35:33 16384 C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat

- 2009-07-14 04:54:17 . 2011-09-14 11:04:43 32768 C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat

+ 2009-07-14 04:54:17 . 2011-09-15 14:35:33 32768 C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat

- 2009-07-14 04:54:17 . 2011-09-14 11:04:43 16384 C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat

+ 2009-07-14 04:54:17 . 2011-09-15 14:35:33 16384 C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat

+ 2010-11-12 17:32:42 . 2011-09-14 11:27:04 34960 C:\Windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin

+ 2009-07-14 05:10:35 . 2011-09-14 11:27:04 29096 C:\Windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin

+ 2011-09-08 15:54:57 . 2011-09-14 18:18:26 16384 C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat

- 2011-09-08 15:54:57 . 2011-09-13 22:29:55 16384 C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat

+ 2011-09-08 15:54:57 . 2011-09-14 18:18:26 32768 C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat

- 2011-09-08 15:54:57 . 2011-09-13 22:29:55 32768 C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat

- 2009-07-14 04:54:19 . 2011-09-13 22:29:55 16384 C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat

+ 2009-07-14 04:54:19 . 2011-09-14 18:18:26 16384 C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat

+ 2011-09-08 15:38:05 . 2011-09-14 11:27:04 5174 C:\Windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3132947631-963072419-2759836860-1001_UserData.bin

- 2011-09-14 11:04:33 . 2011-09-14 11:04:33 2048 C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat

+ 2011-09-15 14:35:22 . 2011-09-15 14:35:22 2048 C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat

- 2011-09-14 11:04:33 . 2011-09-14 11:04:33 2048 C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

+ 2011-09-15 14:35:22 . 2011-09-15 14:35:22 2048 C:\Windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

- 2009-07-14 05:01:48 . 2011-09-14 11:03:43 271816 C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat

+ 2009-07-14 05:01:48 . 2011-09-15 14:34:31 271816 C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat

+ 2011-09-08 15:32:50 . 2011-09-15 14:34:31 1120792 C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat

- 2011-09-08 15:32:50 . 2011-09-14 09:43:52 1120792 C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat

+ 2011-09-08 16:10:13 . 2011-09-15 14:34:32 4355356 C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3132947631-963072419-2759836860-1001-8192.dat

- 2011-09-08 16:10:14 . 2011-09-14 09:43:53 2156572 C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3132947631-963072419-2759836860-1001-12288.dat

+ 2011-09-08 16:10:14 . 2011-09-15 14:34:32 2156572 C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3132947631-963072419-2759836860-1001-12288.dat

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"swg"="C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2011-09-10 10:43:47 39408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"VolPanel"="C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" [2009-02-03 10:48:32 237693]

"SPIRunE"="SPIRunE.dll" [2009-07-27 06:50:14 18432]

"ShwiconXP9106"="C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe" [2010-03-10 15:26:30 237568]

"StartCCC"="c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-05-17 16:33:02 98304]

"Dell DataSafe Online"="C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe" [2010-02-09 12:34:00 1807680]

"THX Audio Control Panel"="C:\Program Files (x86)\Creative\THX TruStudio PC\THXAudioCP\THXAudio.exe" [2009-12-01 13:13:44 963584]

"UpdReg"="C:\Windows\UpdReg.EXE" [2000-05-11 00:00:00 90112]

"Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 10:55:28 937920]

"Malwarebytes' Anti-Malware"="C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-08-31 15:00:48 449608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]

"C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe"="C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe" [2010-08-20 23:56:26 566232]

"Launcher"="C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe" [2011-01-13 18:39:30 165184]

C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Dell Dock First Run.lnk - C:\Program Files\Dell\DellDock\DellDock.exe [N/A]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"aux1"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

@="Service"

R2 gupdate;Google Updateservice (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-09-10 10:43:30 136176]

R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-08-31 15:00:48 366152]

R3 ahcix64s;ahcix64s;C:\Windows\system32\DRIVERS\ahcix64s.sys [x]

R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2010-11-12 17:02:34 79360]

R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2010-11-12 17:02:11 79360]

R3 gupdatem;Google Update-service (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-09-10 10:43:30 136176]

R3 MBAMProtector;MBAMProtector;C:\Windows\system32\drivers\mbam.sys [x]

R3 PCDSRVC{1E208CE0-FB7451FF-06020101}_0;PCDSRVC{1E208CE0-FB7451FF-06020101}_0 - PCDR Kernel Mode Service Helper Driver;c:\program files\dell support center\pcdsrvc_x64.pkms [2011-08-22 19:23:28 25072]

R3 RoxMediaDB10;RoxMediaDB10;c:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [2009-06-26 10:19:12 1124848]

R3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys [x]

R3 WatAdminSvc;Windows Activation Technologies-service;C:\Windows\system32\Wat\WatAdminSvc.exe [x]

S0 PxHlpa64;PxHlpa64;C:\Windows\System32\Drivers\PxHlpa64.sys [x]

S2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 10:55:28 64952]

S2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe [x]

S2 AMD_RAIDXpert;AMD RAIDXpert;C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe [2009-03-15 23:47:22 122880]

S2 AMDFusionSVC;AMD Fusion Utility Service;c:\Program Files (x86)\AMD\AMD Fusion Utility for Desktops\FusionSVC.exe [2009-09-08 11:48:24 383544]

S2 SftService;SoftThinks Agent Service;C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE [2011-01-13 18:37:02 705856]

S2 TeamViewer6;TeamViewer 6;C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-08-30 16:18:30 2358656]

S3 amdkmdag;amdkmdag;C:\Windows\system32\DRIVERS\atikmdag.sys [x]

S3 amdkmdap;amdkmdap;C:\Windows\system32\DRIVERS\atikmpag.sys [x]

S3 AmdLLD64;AMD Low Level Device Driver;C:\Windows\system32\DRIVERS\AmdLLD64.sys [x]

S3 k57nd60a;Broadcom NetLink Gigabit Ethernet - NDIS 6.0;C:\Windows\system32\DRIVERS\k57nd60a.sys [x]

S3 MpNWMon;Microsoft Malware Protection Network Driver;C:\Windows\system32\DRIVERS\MpNWMon.sys [x]

S3 NisDrv;Microsoft Network Inspection System;C:\Windows\system32\DRIVERS\NisDrvWFP.sys [x]

S3 NisSrv;Microsoft Network Inspection;c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-04-27 15:21:18 288272]

S3 t3;Sound Blaster X-Fi Xtreme Audio;C:\Windows\system32\drivers\t3.sys [x]

Inhoud van de 'Gedeelde Taken' map

2011-09-15 C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-09-10 10:43:33 . 2011-09-10 10:43:30]

2011-09-15 C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-09-10 10:43:33 . 2011-09-10 10:43:30]

2011-09-10 C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job

- C:\Program Files\Dell Support Center\uaclauncher.exe [2011-08-24 17:26:36 . 2011-08-24 17:26:36]

2011-09-15 C:\Windows\Tasks\SystemToolsDailyTest.job

- C:\Program Files\Dell Support Center\uaclauncher.exe [2011-08-24 17:26:36 . 2011-08-24 17:26:36]

--------- x86-64 -----------

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RunDLLEntry_THXCfg"="C:\Windows\system32\RunDLL32.exe" [2009-07-14 01:39:31 45568]

"RunDLLEntry_EptMon"="C:\Windows\system32\RunDLL32.exe" [2009-07-14 01:39:31 45568]

"MSC"="c:\Program Files\Microsoft Security Client\msseces.exe" [2011-06-15 12:35:24 1436736]

------- Bijkomende Scan -------

uLocal Page = C:\Windows\system32\blank.htm

uStart Page = hxxp://google.nl/

mLocal Page = C:\Windows\SysWOW64\blank.htm

IE: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html

TCP: DhcpNameServer = 212.54.40.25 212.54.35.25

- - - - ORPHANS VERWIJDERD - - - -

Toolbar-Locked - (no file)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 16:43:15, on 15-9-2011

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v9.00 (9.00.8112.16421)

Boot mode: Normal

Running processes:

C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE

C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe

C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe

C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe

C:\WINDOWS\SysWOW64\rundll32.exe

C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe

C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

C:\Users\John\Desktop\HijackThis.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll

O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll

O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O4 - HKLM\..\Run: [VolPanel] "C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" /r

O4 - HKLM\..\Run: [sPIRunE] Rundll32 SPIRunE.dll,RunDLLEntry

O4 - HKLM\..\Run: [shwiconXP9106] C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe

O4 - HKLM\..\Run: [startCCC] "c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [Dell DataSafe Online] "C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe" /m

O4 - HKLM\..\Run: [THX Audio Control Panel] "C:\Program Files (x86)\Creative\THX TruStudio PC\THXAudioCP\THXAudio.exe" /r

O4 - HKLM\..\Run: [updReg] C:\Windows\UpdReg.EXE

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray

O4 - HKLM\..\RunOnce: ["C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe"] "C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe"

O4 - HKLM\..\RunOnce: [Launcher] C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe

O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

O4 - .DEFAULT User Startup: Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (User 'Default user')

O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html

O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} (WMI Class) - http://support.euro.dell.com/systemprofiler/SysProExe.CAB

O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)

O23 - Service: AMD Fusion Utility Service (AMDFusionSVC) - Advanced Micro Devices - c:\Program Files (x86)\AMD\AMD Fusion Utility for Desktops\FusionSVC.exe

O23 - Service: AMD RAIDXpert (AMD_RAIDXpert) - AMD - C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe

O23 - Service: Creative ALchemy AL6 Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe

O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe

O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: RoxMediaDB10 - Sonic Solutions - c:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks SAS - C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe

O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Virtual Disk (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--

End of file - 10522 bytes

[thecore166]

Buiten die meldingen in de logboeken, werkt je pc verder normaal?

helaas heb ik nog steeds zwart beeld scherm na het opstarten gaat ie knipperen daarna gaat het windows icoon staan dan zien ik een zwart beeld even rond 2 a 4 minuten ben ik weer bij windows

ik heb er even na gekeken waarom die aan het knipperen als ik f8 drukt dan komt het bij de veilige modus mijn vraag is hoe krijg ik hem weg

ik zag net dat er steeds hetzelfde fout melding als een boven staande

ps

ik ga maandag weer aan de slag

16 september 2011 aangepast door kweezie wabbit

[kweezie wabbit]

Bedoel je de foutmelding ivm RxFilter?

[thecore166]

nee dat bedoelde ik niet

het is hetzelfde toen ik de eerste reactie schreef

maar er scheen weer Fxfilter fout melding te zijn

19 september 2011 aangepast door thecore166

[thecore166]

het is me bijna gelukt

wat was er fout gegaan

ik heb ergens op de forum gelezen

als ik opstart staat ie te knipperen dan moet het meteen enter drukken dat is niet goed, de oplossing was: als ik opnieuw start dan moet je meteen f2 drukken, daar onderaan druk op enter dan zien je

bijv. 1 ste boot device

ik heb de 3de device weg gezet

mijn vraag is kan ik daar een ongewent doen om terug te gaan ik heb misschien wel een fout gemaakt of kan het aan mijn beeld scherm leggen

er is nog steeds de fout melding van fxfliter

19 september 2011 aangepast door thecore166

[kweezie wabbit]

Je moet dus F2 drukken onmiddellijk na het indrukken van de startknop om naar het bios te gaan.

Daar zoek je de boot order en zet deze als volgt.

1 ste boot device: het cd/dvd station.

2 de boot device: het 2de cd/dvd station (eventueel)

3 de boot device: de harde schijf waar windows op staat.

4 de boot device: usb apparaat

Als er ook een boot via netwerk beschikbaar is, mag je dit uitschakelen.

Sla de instellingen op en verlaat het bios.

De pc zal nu verder opstarten.

Probeer of je het bastand C:\Windows\SysWOW64\drivers\RxFilter.sys kan kopieren naar de map c:\windows\System32\

Als dit lukt, kijk dan of je nog steeds de foutmelding krijgt in de logboeken over die RxFilter.

[thecore166]

bedankt het is me gelukt maar er voorkomt nog steeds zwart scherm

helaas heb ik sinds gisteren roxio 10 verwijderd

dat programma is een brander dat heb ik een andere programma voor nodig toen zag ik dat het weg was die fxfilter

nu heb ik sinds gisteren de volgende waarschwing gekregen

Logboeknaam: System

Bron: Microsoft-Windows-Wininit

Datum: 20-9-2011 16:14:33

Gebeurtenis-id:11

Taakcategorie: Geen

Niveau: Waarschuwing

Trefwoorden:

Gebruiker: SYSTEM

Computer: John-PC

Beschrijving:

Aangepaste DLL-bestanden worden voor elke toepassing geladen. De systeembeheerder moet de lijst met DLL-bestanden controleren en zorgen dat de bestanden gerelateerd zijn aan vertrouwde toepassingen.

20 september 2011 aangepast door thecore166

[kweezie wabbit]

Kan je nog eens een hijackthis logje plaatsen?

Misschien vinden we zo de ontbtekende DLL bestanden.