[OPGELOST] Traag opstarten van Windows XP SP1

Lorent · 6 februari 2008

Hallo iedereen, het opstarten van mijn windows duurt een tijdje vooraleer ik op windows mag beginnen werken, weet iemand soms de boosdoener of kan iemand me helpen ?

Dank bij voorbaat

CPU : 2.40Ghz

RAM : 768Mb

Alvast hier een log van hijackthis :

Logfile of HijackThis v1.99.1

Scan saved at 16:22:37, on 6/02/2008

Platform: Windows XP SP1 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

C:\Program Files\Norton AntiVirus\navapsvc.exe

C:\Program Files\NewDotNet\nnrun.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\System32\WLTRYSVC.EXE

C:\WINDOWS\System32\bcmwltry.exe

C:\WINDOWS\System32\hkcmd.exe

C:\Program Files\NewDotNet\nnrun.exe

C:\Program Files\Dell\Media Experience\PCMService.exe

C:\Program Files\Common Files\Symantec Shared\ccApp.exe

C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe

C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe

C:\WINDOWS\CTHELPER.EXE

C:\WINDOWS\System32\CTXFIHLP.EXE

C:\WINDOWS\SYSTEM32\CTXFISPI.EXE

C:\WINDOWS\System32\WLTRAY.exe

C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE

C:\Program Files\Common Files\SchijfBewaker\strpmon.exe

C:\Program Files\Creative\Sound Blaster X-Fi\DVDAudio\CTDVDDET.EXE

C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe

C:\WINDOWS\System32\ctfmon.exe

C:\Program Files\Netlog 24\Notifier\Netlog24Notifier.exe

C:\Program Files\Macrogaming\SweetIM\SweetIM.exe

C:\Program Files\Creative\ShareDLL\CADI\NotiMan.exe

C:\WINDOWS\explorer.exe

C:\Program Files\Messenger\msmsgs.exe

C:\Program Files\Internet Explorer\IEXPLORE.EXE

C:\Documents and Settings\Di-Angelo\Bureaublad\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Dell BelgiÃ« - startpagina - Computers, computerapparatuur, electronics en services.

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx

O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\System32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe

O4 - HKLM\..\Run: [storageGuard] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r

O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"

O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"

O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe

O4 - HKLM\..\Run: [AudioDrvEmulator] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "C:\Program Files\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll"

O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE

O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE

O4 - HKLM\..\Run: [updReg] C:\WINDOWS\UpdReg.EXE

O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe -CheckReg

O4 - HKLM\..\Run: [u.S. Robotics Wireless Manager UI] C:\WINDOWS\System32\WLTRAY

O4 - HKLM\..\Run: [EPSON Stylus C64 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P23 "EPSON Stylus C64 Series" /O5 "LPT1:" /M "Stylus C64"

O4 - HKLM\..\Run: [salestart] "C:\Program Files\Common Files\SchijfBewaker\strpmon.exe" dm=http://schijfbewaker.com ad=http://schijfbewaker.com sd=http://inlog.schijfbewaker.com

O4 - HKLM\..\Run: [CTDVDDET] "C:\Program Files\Creative\Sound Blaster X-Fi\DVDAudio\CTDVDDET.EXE"

O4 - HKLM\..\Run: [RCSystem] "C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" RCSystem * -Startup

O4 - HKLM\..\Run: [VolPanel] "C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe" /r

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe

O4 - HKCU\..\Run: [Netlog 24] C:\Program Files\Netlog 24\Notifier\Netlog24Notifier.exe

O4 - HKCU\..\Run: [sweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe

O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE

O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll

O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/games/hamsterball/en/raptisoftgameloader.cab

O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://go.divx.com/plugin/DivXBrowserPlugin.cab

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe

O23 - Service: Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe

O23 - Service: NNServ - Unknown owner - C:\Program Files\NewDotNet\nnrun.exe" "C:\Program Files\NewDotNet\nncore.dll" ServiceStart (file missing)

O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe

O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

O23 - Service: U.S. Robotics Wireless LAN Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

aarondk1 · 6 februari 2008

Oké laat ons beginnen met de programma's die Windows laat opstarten te verminderen.

Maar ik zie dat je Norton hebt staat ie er al lang op?

Je kan dit via een appart programma of via Windows.

Ik zal uitleggen hoe je het via een programma doet namelijk Ccleaner.

CCleaner - Home

Nadat je Ccleaner hebt geinstalleerd zet je het programma'tje op.

Dan zie je links Cleaner daar klik je op opschoen en laat je de PC zijn werk doen.

Daarna klik je op register en dan op scan naar problemen.

Herstelde geselecteerde problemen........moet je op klikken.

maar dan vraagt Ccleaner of je een back-up wilt maken en dat kan je ook best doen.

Na alles min of meer schoon is kan je op gereedsschap klikken dat staat onder register.

Onder deïnstalleer programma's staat er opstarten.

Daar staan alle programma's die niet nodig zijn bij het opstarten.

LEt op! Sommig programma's moeten blijven opstaan om ze nog te laten functioneren!

Als je dat gedaan hebt moet je je PC is herstarten en kijken of het wat sneller gaat.Kijk ook eens na of er geen super zware bestanden op je Bureaublad staan.

Laat je virusscan eens draaien.

En je computer defragmenteren!

Nog veel succes!

grtz

Sarah · 6 februari 2008

Onze medewerker 'Kape' al uw logje analyseren en laten weten of er iets overbodig is.

Norton vertraagt inderdaad het systeem wel.

- Ook zie ik dat je gebruik maakt van SweetIM, dit raad ik aan om te verwijderen omdat deze een twijfelachtige reputatie heeft.

- Ik zie ook New.net, verwijder deze ook aub. Deze wordt ook al riskant aanzien:

1) Ga naar Configuratiescherm > Software. Kijk of New.net Domains of New.net Application in de softwarelijst staat en, zo ja, deïnstalleer dit.
Staat het niet in de softwarelijst of lukt het deïnstalleren niet, ga dan naar 2).

2) Kijk in de map C:\Program Files\NewDotNet of daarin een uninstaller staat. Die uninstaller heet uninstallX_XX.exe (waarbij de X'en staan voor cijfers). Zo ja, dubbelklik daarop om New.net te verwijderen.
Lukt het op deze manier niet, ga dan naar 3).

3) Kijk in de map C:\Windows of daarin een uninstaller staat. Die uninstaller heet NDNuninstallx_xx.exe (waarbij de X'en staan voor cijfers). Zo ja, dubbelklik daarop om New.net te verwijderen.

Mvg Karel

Lorent · 6 februari 2008

Hallo aarondk1 en bedankt voor je antwoord,ik heb alles gedaan wat je me vroeg en computer heropgestart,niks te merken, alles ziet er goed uit.

Maar tijdens de bewerkingen kreeg ik het volgende bericht :

Ook heb ik Spyware Doctor, en ik krijg constant waarschuwingen, zoals je kan merken op deze afbeelding :

die blijven constant opkomen, tot gans boven het scherm (zoals msn aanmeldingen)

Ook heb ik een ComboFix log :

ComboFix 08-02.05.3 - Di-Angelo 2008-02-06 19:11:11.1 - NTFSx86

Gestart vanuit: C:\Documents and Settings\Di-Angelo\Bureaublad\ComboFix.exe

* Nieuw herstelpunt werd aangemaakt

WAARSCHUWING - DE RECOVERY CONSOLE IS NIET OP DIT SYSTEEM GEINSTALLEERD !!

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

C:\WINDOWS\cookies.ini

C:\WINDOWS\system32\drivers\fad.sys

C:\WINDOWS\system32\lsprst7.dll

C:\WINDOWS\system32\mcrh.tmp

C:\WINDOWS\system32\opjhylwr.dll

C:\WINDOWS\SYSTEM32\rwlyhjpo.ini

C:\WINDOWS\system32\ssprs.dll

C:\WINDOWS\SYSTEM32\stutv.ini

C:\WINDOWS\SYSTEM32\stutv.ini2

.

((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

-------\LEGACY_NNSERV

-------\NNServ

(((((((((((((((((((( Bestanden Gemaakt van 2008-01-06 to 2008-02-06 ))))))))))))))))))))))))))))))

.

2008-02-06 19:00 . 2008-02-06 19:19 <DIR> dr-h----- C:\Documents and Settings\Di-Angelo\Onlangs geopend

2008-02-06 18:54 . 2008-02-06 19:17 <DIR> d--h----- C:\WINDOWS\$hf_mig$

2008-02-06 18:54 . 2005-02-25 04:35 22,752 --a------ C:\WINDOWS\SYSTEM32\spupdsvc.exe

2008-02-06 18:53 . 2008-02-06 18:53 <DIR> d-------- C:\WINDOWS\SYSTEM32\bits

2008-02-06 18:50 . 2004-07-01 23:10 360,448 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\qmgr.dll

2008-02-06 18:50 . 2004-07-01 23:10 331,776 --a------ C:\WINDOWS\SYSTEM32\winhttp.dll

2008-02-06 18:50 . 2004-07-01 23:10 331,776 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\winhttp.dll

2008-02-06 18:50 . 2004-06-30 17:00 192,512 --------- C:\WINDOWS\SYSTEM32\xpob2res.dll

2008-02-06 18:50 . 2004-07-01 23:10 17,408 --a------ C:\WINDOWS\SYSTEM32\qmgrprxy.dll

2008-02-06 18:50 . 2004-07-01 23:10 17,408 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\qmgrprxy.dll

2008-02-06 18:50 . 2004-07-01 23:10 7,680 -----c--- C:\WINDOWS\SYSTEM32\DLLCACHE\bitsprx2.dll

2008-02-06 18:50 . 2004-07-01 23:10 7,680 --------- C:\WINDOWS\SYSTEM32\bitsprx2.dll

2008-02-06 18:50 . 2004-07-01 23:10 7,168 -----c--- C:\WINDOWS\SYSTEM32\DLLCACHE\bitsprx3.dll

2008-02-06 18:50 . 2004-07-01 23:10 7,168 --------- C:\WINDOWS\SYSTEM32\bitsprx3.dll

2008-02-06 18:46 . 2008-02-06 18:46 <DIR> d-------- C:\Program Files\CCleaner

2008-02-06 17:02 . 2008-02-06 17:02 <DIR> d-------- C:\Documents and Settings\Di-Angelo\Application Data\PC Tools

2008-02-06 17:02 . 2007-12-10 14:53 81,288 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\iksyssec.sys

2008-02-06 17:02 . 2007-12-10 14:53 66,952 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\iksysflt.sys

2008-02-06 17:02 . 2007-12-10 14:53 41,864 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\ikfilesec.sys

2008-02-06 17:02 . 2007-12-10 14:53 29,576 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\kcom.sys

2008-02-06 16:25 . 2008-02-06 18:53 <DIR> d-------- C:\WINDOWS\LastGood

2008-02-06 16:25 . 2007-07-30 19:19 216,408 --a------ C:\WINDOWS\SYSTEM32\wuaucpl.cpl

2008-02-06 15:58 . 2008-02-06 19:22 64,988 --a------ C:\WINDOWS\SYSTEM32\DVCState-{00000001-00000000-00000004-00001102-00000005-00231102}.rfx

2008-02-06 15:58 . 2008-02-06 19:22 54,904 --a------ C:\WINDOWS\SYSTEM32\BMXStateBkp-{00000001-00000000-00000004-00001102-00000005-00231102}.rfx

2008-02-06 15:58 . 2008-02-06 19:22 54,904 --a------ C:\WINDOWS\SYSTEM32\BMXState-{00000001-00000000-00000004-00001102-00000005-00231102}.rfx

2008-02-06 15:58 . 2008-02-06 19:22 1,080 --a------ C:\WINDOWS\SYSTEM32\settingsbkup.sfm

2008-02-06 15:58 . 2008-02-06 19:22 1,080 --a------ C:\WINDOWS\SYSTEM32\settings.sfm

2008-02-06 15:57 . 2005-07-13 10:18 340,704 -ra------ C:\WINDOWS\SYSTEM32\DRIVERS\ctdvda2k.sys

2008-02-06 15:54 . 2005-08-07 23:18 11,776 --a------ C:\WINDOWS\INRES.DLL

2008-02-06 15:54 . 2005-08-07 23:10 3,072 --a------ C:\WINDOWS\CTXFIRES.DLL

2008-02-06 00:02 . 2008-02-06 00:02 347 --a------ C:\WINDOWS\CTWave32.INI

2008-02-05 23:53 . 2008-02-05 23:53 29 --a------ C:\WINDOWS\sfbm.INI

2008-02-05 22:22 . 2008-02-05 22:22 1,374 --a------ C:\WINDOWS\SYSTEM32\wpa.bak

2008-02-05 21:25 . 2003-10-02 14:17 155,648 --a------ C:\WINDOWS\SYSTEM32\igfxres.dll

2008-02-05 17:00 . 2003-07-23 21:58 150,016 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\winzm.ime

2008-02-05 17:00 . 2003-07-23 21:58 150,016 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\winsp.ime

2008-02-05 16:58 . 2003-07-23 21:57 13,463,552 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\hwxjpn.dll

2008-02-05 16:57 . 2003-07-23 21:57 10,096,640 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\hwxcht.dll

2008-02-05 16:56 . 2002-11-14 14:02 848,384 --a------ C:\WINDOWS\SYSTEM32\ir41_32.ax

2008-02-05 16:55 . 2003-07-23 22:02 561,152 --a------ C:\WINDOWS\SYSTEM32\crypt32.dll

2008-02-05 16:54 . 2003-07-23 22:33 318,976 --a------ C:\WINDOWS\SYSTEM32\zipfldr.dll

2008-02-05 16:52 . 2003-07-23 22:22 129,536 --a------ C:\WINDOWS\SYSTEM32\shmedia.dll

2008-02-05 16:51 . 2003-07-23 22:17 1,635,840 --a------ C:\WINDOWS\SYSTEM32\netshell.dll

2008-02-05 16:51 . 2003-03-06 11:29 532,992 --a------ C:\WINDOWS\SYSTEM32\xpsp2res.dll

2008-02-05 16:51 . 2003-07-23 22:24 264,704 --a------ C:\WINDOWS\SYSTEM32\wzcsvc.dll

2008-02-05 16:51 . 2003-07-23 22:16 167,552 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\ndis.sys

2008-02-05 16:51 . 2003-07-23 22:31 57,344 --a------ C:\WINDOWS\SYSTEM32\wzcdlg.dll

2008-02-05 16:51 . 2003-07-23 22:24 23,552 --a------ C:\WINDOWS\SYSTEM32\wzcsapi.dll

2008-02-05 16:51 . 2003-07-23 22:24 12,288 --a------ C:\WINDOWS\SYSTEM32\DRIVERS\ndisuio.sys

2008-02-05 16:49 . 2003-07-23 22:06 511,560 --a------ C:\WINDOWS\SYSTEM32\hhctrl.ocx

2008-02-05 16:49 . 2003-07-23 22:09 143,872 --a------ C:\WINDOWS\SYSTEM32\itircl.dll

2008-02-05 16:49 . 2003-07-23 22:09 122,368 --a------ C:\WINDOWS\SYSTEM32\itss.dll

2008-02-05 16:49 . 2003-07-23 22:06 37,888 --a------ C:\WINDOWS\SYSTEM32\hhsetup.dll

2008-02-05 16:49 . 2003-07-23 22:06 10,752 --a------ C:\WINDOWS\hh.exe

2008-02-05 16:48 . 2003-07-23 22:18 212,992 --a------ C:\WINDOWS\SYSTEM32\osk.exe

2008-02-05 16:47 . 2003-07-23 22:21 530,432 --a------ C:\WINDOWS\SYSTEM32\rpcrt4.dll

2008-02-05 16:42 . 2008-02-05 16:42 749 -rah----- C:\WINDOWS\WindowsShell.Manifest

2008-02-05 16:42 . 2008-02-05 16:42 749 -rah----- C:\WINDOWS\SYSTEM32\wuaucpl.cpl.manifest

2008-02-05 16:42 . 2008-02-05 16:42 749 -rah----- C:\WINDOWS\SYSTEM32\sapi.cpl.manifest

2008-02-05 16:42 . 2008-02-05 16:42 749 -rah----- C:\WINDOWS\SYSTEM32\ncpa.cpl.manifest

2008-02-05 16:42 . 2008-02-05 16:42 488 -rah----- C:\WINDOWS\SYSTEM32\logonui.exe.manifest

2008-02-05 16:41 . 2003-07-23 22:07 159,744 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\icwhelp.dll

2008-02-05 16:41 . 2003-07-23 22:07 73,728 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\icwtutor.exe

2008-02-05 16:41 . 2003-07-23 22:07 65,536 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\icwres.dll

2008-02-05 16:41 . 2003-07-23 22:07 57,344 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\icwconn.dll

2008-02-05 16:41 . 2003-07-23 22:07 45,056 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\icwutil.dll

2008-02-05 16:41 . 2003-07-23 22:26 40,960 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\trialoc.dll

2008-02-05 16:41 . 2003-07-23 22:07 24,576 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\icwrmind.exe

2008-02-05 16:40 . 2007-07-30 19:19 1,712,984 --a------ C:\WINDOWS\SYSTEM32\wuaueng.dll

2008-02-05 16:40 . 2007-07-30 19:19 1,712,984 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\wuaueng.dll

2008-02-05 16:40 . 2007-07-30 19:19 53,080 --a------ C:\WINDOWS\SYSTEM32\wuauclt.exe

2008-02-05 16:40 . 2007-07-30 19:19 53,080 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\wuauclt.exe

2008-02-05 16:30 . 2003-07-23 22:24 24,661 --a------ C:\WINDOWS\SYSTEM32\spxcoins.dll

2008-02-05 16:30 . 2003-07-23 22:24 24,661 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\spxcoins.dll

2008-02-05 16:30 . 2003-07-23 22:08 13,312 --a------ C:\WINDOWS\SYSTEM32\irclass.dll

2008-02-05 16:30 . 2003-07-23 22:08 13,312 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\irclass.dll

2008-02-05 15:27 . 2008-02-05 14:23 <DIR> d--h----- C:\Documents and Settings\Administrator.ANGELO\Sjablonen

2008-02-05 15:27 . 2004-01-23 01:16 <DIR> dr-h----- C:\Documents and Settings\Administrator.ANGELO\Onlangs geopend

2008-02-05 15:27 . 2004-01-23 01:16 <DIR> d--h----- C:\Documents and Settings\Administrator.ANGELO\Netwerkprinteromgeving

2008-02-05 15:27 . 2004-01-23 01:55 <DIR> dr------- C:\Documents and Settings\Administrator.ANGELO\Mijn documenten

2008-02-05 15:27 . 2004-01-23 01:16 <DIR> dr------- C:\Documents and Settings\Administrator.ANGELO\Menu Start

2008-02-05 15:27 . 2004-01-23 01:16 <DIR> dr------- C:\Documents and Settings\Administrator.ANGELO\Favorieten

2008-02-05 15:27 . 2008-02-05 14:39 <DIR> dr------- C:\Documents and Settings\Administrator.ANGELO\Bureaublad

2008-02-05 15:27 . 2004-01-23 01:56 <DIR> d-------- C:\Documents and Settings\Administrator.ANGELO\Application Data\Symantec

2008-02-05 15:27 . 2004-01-23 01:58 <DIR> d-------- C:\Documents and Settings\Administrator.ANGELO\Application Data\Sonic

2008-02-05 15:15 . 2008-02-05 15:15 <DIR> d-------- C:\WINDOWS\java

2008-02-05 14:35 . 2003-07-23 22:17 157,696 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\npdrmv2.dll

2008-02-05 14:35 . 2003-07-23 22:17 8,223 --a--c--- C:\WINDOWS\SYSTEM32\DLLCACHE\npwmsdrm.dll

2008-02-05 14:23 . 2003-07-23 22:18 1,086,182 -ra------ C:\WINDOWS\SET5C.tmp

2008-02-05 14:23 . 2003-07-23 21:55 415,154 -ra------ C:\WINDOWS\SET8A.tmp

2008-02-05 14:23 . 2003-07-23 22:08 13,923 -ra------ C:\WINDOWS\SET68.tmp

2008-02-05 14:23 . 2003-07-23 22:33 7,046 -ra------ C:\WINDOWS\SET7A.tmp

2008-02-05 14:23 . 2008-02-05 16:30 34 --a------ C:\WINDOWS\SYSTEM\oeminfo.ini

2008-02-05 14:22 . 2008-02-05 16:14 1,222,321 --a------ C:\WINDOWS\setupapi.old

2008-02-05 02:55 . 2008-02-05 03:04 <DIR> d-------- C:\Program Files\Auslogics

2008-02-05 00:43 . 2008-02-05 00:43 <DIR> d-------- C:\Documents and Settings\Di-Angelo\Application Data\TuneUp Software

2008-02-05 00:43 . 2008-02-05 00:43 306,432 --a------ C:\WINDOWS\SYSTEM32\TuneUpDefragService.exe

2008-02-05 00:43 . 2007-12-20 10:41 29,440 --a------ C:\WINDOWS\SYSTEM32\uxtuneup.dll

2008-02-05 00:42 . 2008-02-05 00:43 <DIR> d-------- C:\Program Files\TuneUp Utilities 2008

2008-02-05 00:42 . 2008-02-05 00:42 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\TuneUp Software

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2008-02-06 18:26 --------- d-----w C:\Program Files\Common Files\Symantec Shared

2008-02-06 14:57 81,920 ----a-w C:\WINDOWS\SYSTEM32\OpenAL32.dll

2008-02-06 14:57 233,472 ----a-w C:\WINDOWS\SYSTEM32\wrap_oal.dll

2008-02-05 23:11 --------- d-----w C:\Program Files\Creative

2008-02-05 22:52 --------- d-----w C:\Documents and Settings\All Users\Application Data\Creative

2008-02-05 03:42 --------- d--h--w C:\Program Files\InstallShield Installation Information

2008-02-05 03:42 --------- d-----w C:\Program Files\Atari

2008-02-05 03:40 --------- d-----w C:\Documents and Settings\Di-Angelo\Application Data\Atari

2008-02-04 22:34 --------- d-----w C:\Documents and Settings\Di-Angelo\Application Data\uTorrent

2007-12-27 16:30 314,752 ----a-w C:\WINDOWS\SYSTEM32\vtuts.dll

2007-12-27 16:25 24,288 ----a-w C:\WINDOWS\SYSTEM32\mljighe.dll

2007-12-23 14:28 --------- d-----w C:\Documents and Settings\Di-Angelo\Application Data\Raptisoft

2007-12-23 13:50 --------- d-----w C:\Program Files\MSN Messenger

2007-12-23 13:50 --------- d-----w C:\Program Files\Messenger Plus! Live

2007-12-21 21:37 --------- d-----w C:\Program Files\SchijfBewaker

2007-12-20 18:23 --------- d-----w C:\Documents and Settings\Di-Angelo\Application Data\schijfbewaker

2007-12-20 18:18 --------- d-----w C:\Program Files\Common Files\SchijfBewaker

2007-12-20 18:18 --------- d-----r C:\Documents and Settings\All Users\Application Data\schijfbewaker

2007-12-20 18:18 --------- d-----r C:\Documents and Settings\All Users\Application Data\SalesMon

2007-12-20 18:14 257,552 ----a-w C:\Documents and Settings\Di-Angelo\Application Data\setup_nl[1].exe

2007-12-18 17:24 --------- d-----w C:\Program Files\Macrogaming

2007-12-15 20:30 --------- d-----w C:\Program Files\VirtualDJ

2007-12-15 14:12 --------- d-----w C:\Documents and Settings\All Users\Application Data\Messenger Plus!

2007-12-15 13:45 159,744 ----a-w C:\WINDOWS\SYSTEM32\Netlog24Uninstaller.exe

2007-12-15 13:45 --------- d-----w C:\Program Files\Netlog 24

2007-12-15 13:44 --------- d-----w C:\Program Files\Windows Live

2007-07-02 17:21 745,694 ----a-w C:\Program Files\SFX_Machine_Pro_1.10.exe

2007-06-18 11:49 17,874,288 ----a-w C:\Program Files\Install_Messenger.exe

2005-04-09 16:10 2,204 ----a-w C:\Program Files\unins000.dat

2003-06-16 13:23 131,072 -c--a-w C:\Program Files\T2DXi.dll

2003-06-16 13:17 4,317,184 ----a-w C:\Program Files\Triangle II.dll

2003-06-03 10:33 90,112 ----a-w C:\Program Files\Triangle II.exe

2002-12-17 01:00 82,253 ----a-w C:\Program Files\unins000.exe

2004-01-23 00:57 32 --sha-w C:\WINDOWS\{E64CC7F2-30BC-41F9-AE18-42A7D6B141F7}.dat

2006-05-03 09:06 163,328 --sha-r C:\WINDOWS\SYSTEM32\flvDX.dll

2007-02-21 10:47 31,232 --sha-r C:\WINDOWS\SYSTEM32\msfDX.dll

2004-01-23 00:57 32 --sha-w C:\WINDOWS\SYSTEM32\{FF3EBA0E-B375-40B2-9329-EF200E0D6781}.dat

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

REGEDIT4

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C}]

2007-12-27 17:25 24288 --a------ C:\WINDOWS\system32\mljighe.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{8A816CA2-F152-4603-97EA-54DA2CE4C640}]

2007-12-27 17:30 314752 --a------ C:\WINDOWS\System32\vtuts.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="C:\WINDOWS\System32\ctfmon.exe" [2003-07-23 22:02 13312]

"Netlog 24"="C:\Program Files\Netlog 24\Notifier\Netlog24Notifier.exe" [2007-12-15 14:45 1331200]

"SweetIM"="C:\Program Files\Macrogaming\SweetIM\SweetIM.exe" [2007-10-14 18:09 103712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IgfxTray"="C:\WINDOWS\System32\igfxtray.exe" [2003-10-02 14:37 155648]

"HotKeysCmds"="C:\WINDOWS\System32\hkcmd.exe" [2003-10-02 14:19 118784]

"StorageGuard"="C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" [2003-02-13 02:01 155648]

"PCMService"="C:\Program Files\Dell\Media Experience\PCMService.exe" [2003-08-26 20:47 204800]

"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2002-12-06 10:28 54496]

"ccRegVfy"="C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe" [2002-12-06 10:29 58592]

"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 12:50 155648]

"H2O"="C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe" [2005-05-11 02:46 208261]

"AudioDrvEmulator"="C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" [2005-06-16 18:25 49152]

"CTHelper"="CTHELPER.EXE" [2005-08-07 23:10 16384 C:\WINDOWS\CTHELPER.EXE]

"CTxfiHlp"="CTXFIHLP.EXE" [2005-08-07 23:10 18944 C:\WINDOWS\SYSTEM32\CTXFIHLP.EXE]

"UpdReg"="C:\WINDOWS\UpdReg.EXE" [2000-05-11 01:00 90112]

"PinnacleDriverCheck"="C:\WINDOWS\System32\PSDrvCheck.exe" [2003-12-04 12:34 406016]

"U.S. Robotics Wireless Manager UI"="C:\WINDOWS\System32\WLTRAY" [ ]

"EPSON Stylus C64 Series"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.exe" [2003-05-27 04:08 99840]

"CTDVDDET"="C:\Program Files\Creative\Sound Blaster X-Fi\DVDAudio\CTDVDDET.EXE" [2003-06-18 01:00 45056]

"RCSystem"="C:\Program Files\Creative\Shared Files\Module Loader\DLLML.exe" [2005-06-16 18:25 49152]

"VolPanel"="C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanel.exe" [2005-07-11 11:34 122880]

"ISTray"="C:\Program Files\Spyware Doctor\pctsTray.exe" [2007-12-10 14:53 1103752]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2003-07-23 22:02 13312]

C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\

Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [1999-02-17 18:05:56 65588]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]

"{6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C}"= C:\WINDOWS\system32\mljighe.dll [2007-12-27 17:25 24288]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\mljighe]

mljighe.dll 2007-12-27 17:25 24288 C:\WINDOWS\SYSTEM32\mljighe.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Authentication Packages REG_MULTI_SZ msv1_0 C:\WINDOWS\System32\vtuts.dll

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^MA003DMN.LNK]

path=C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\MA003DMN.LNK

backup=C:\WINDOWS\pss\MA003DMN.LNKCommon Startup

.

Inhoud van de 'Gedeelde Taken' map

"2008-02-04 23:43:34 C:\WINDOWS\Tasks\1-Click Maintenance.job"

- C:\Program Files\TuneUp Utilities 2008\OneClick.exe

"2008-02-05 23:03:01 C:\WINDOWS\Tasks\At1.job"