Ga naar inhoud

Internet Zéér Traag...

Gast

Door Gast
in Archief Internet & Netwerk

 Delen

Aanbevolen berichten

Gast

Gast

Geplaatst:
Geplaatst:

Hallo,

Ik heb sinds een week zeer traag internet. Ik heb al een aantal mogelijke opties zelf geprobeerd: Stekker v/d modem eruittrekken en er weer in, cookies deleten, pc scannen op virussen maar dit gaf allemaal niet. Mijn internet browser: Google Chrome(erg traag)/ Internet Explorer(zéér traag). Dus nu gebruik ik Google Chrome die het het beste doet (de browser laadt google in 4 minuten, héél snel..). Als ik iets probeer te downloaden, (laatste keer was bijv. de patches van Call of Duty WaW, op de laptop die beneden staat doet hij er per patch downloaden 2 min. over en op de computer die boven staat opeens 9 uur!) Ik hoop dat jullie mij kunnen helpen met mijn probleem. (als ik kijk bij de status v/d verbinding staat er eerst 36,0 mbps dan 2 sec. daarna 1,0 mbps.)

Met vriendelijke groet,

Brian

Link naar reactie
Delen op andere sites
Kurtt Grootmeester

Kurtt

Geplaatst:
Geplaatst:

Dag Brian, welkom op dit forum!

We gaan voor alle zekerheid toch eens testen op de aanwezigheid van virussen en/of malware. Dan kunnen we dat al uitsluiten. Volg onderstaande procedure om een logje te maken:

1. Download HijackThis.

Klik bij "HijackThis Downloads" op "Installer".

Bestand HijackThis.msi opslaan. Daarna kiezen voor "uitvoeren".

Hijackthis wordt nu op je PC geïnstalleerd, een snelkoppeling wordt op je bureaublad geplaatst.

Als je geen netwerkverbinding meer hebt, kan je de download doen met een andere pc en het bestand met een usb stick overbrengen

Als je enkel nog in veilige modus kan werken, moet je de executable downloaden.

Sla deze op in een nieuwe map op de C schijf (bvb C:\hijackthis) en start hijackthis dan vanaf deze map.

De logjes kan je dan ook in die map terugvinden.

2. Klik op de snelkoppeling om HijackThis te starten. (lees eerst de rode tekst hieronder!)

Klik ofwel op "Do a systemscan and save a logfile", ofwel eerst op "Scan" en dan op "Savelog".

Er opent een kladblokvenster, hou gelijktijdig de CTRL en A-toets ingedrukt, nu is alles geselecteerd. Hou gelijktijdig de CTRL en C-toets ingedrukt, nu is alles gekopieerd. Plak nu het HJT logje in je bericht door CTRL en V-toets.

Krijg je een melding ""For some reason your system denied writing to the Host file ....", klik dan gewoon door op de OK-toets.

Let op : Windows Vista & 7 gebruikers dienen HijackThis als “administrator” uit te voeren via rechtermuisknop “als administrator uitvoeren". Indien dit via de snelkoppeling niet lukt voer je HijackThis als administrator uit in de volgende map : C:\Program Files\Trend Micro\HiJackThis of C:\Program Files (x86)\Trend Micro\HiJackThis. (Bekijk hier de afbeelding ---> Klik hier)

3. Na het plaatsen van je logje wordt dit door een expert (Kape of Kweezie Wabbit) nagekeken en begeleidt hij jou verder door het ganse proces.

Tip!

Wil je in woord en beeld weten hoe je een logje met HijackThis maakt en plaatst op het forum, klik dan HIER.

Link naar reactie
Delen op andere sites
Gast

Gast

Geplaatst:
Geplaatst:

Bedankt dat je me wil helpen,

Hier is het Logfile:

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 20:15:30, on 9-2-2012

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\PnkBstrA.exe

C:\Program Files\Sitecom\Common\RaRegistry.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\WINDOWS\system32\JMRaidTool.exe

C:\WINDOWS\RTHDCPL.EXE

C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\WINDOWS\system32\RUNDLL32.EXE

C:\Program Files\Microsoft Security Client\msseces.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program Files\Sitecom\Common\RaUI.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe

C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe

C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

C:\Documents and Settings\Bosma\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\Bosma\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\Bosma\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\Bosma\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\Bosma\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\Bosma\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\Bosma\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\Bosma\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\Bosma\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\Bosma\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Documents and Settings\Bosma\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O4 - HKLM\..\Run: [JMB36X Configure] C:\WINDOWS\system32\JMRaidTool.exe boot

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nview\nwiz.exe /installquiet

O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background

O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Bosma\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

O4 - Global Startup: Sitecom Wireless Utility.lnk = C:\Program Files\Sitecom\Common\RaUI.exe

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Documents and Settings\Bosma\Application Data\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL

O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1164212309943

O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: Lavasoft Ad-Aware Service - Lavasoft Limited - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe

O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)

O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

O23 - Service: Ralink Registry Writer (RalinkRegistryWriter) - Ralink Technology, Corp. - C:\Program Files\Sitecom\Common\RaRegistry.exe

O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--

End of file - 9671 bytes

Link naar reactie
Delen op andere sites
kape Grootmeester

kape

Geplaatst:
Geplaatst:

Dit logje ziet er probleemloos uit. Volgende stap dan :

Download ComboFix van één van deze locaties:

Link 1

Link 2

* BELANGRIJK !!! Sla ComboFix.exe op je Bureaublad op

1. Schakel alle antivirus- en antispywareprogramma's uit, want anders kunnen ze misschien conflicteren met ComboFix. Hier is een handleiding over hoe je ze kan uitschakelen:

Klik hier

Als het je niet lukt om ze uit te schakelen, ga dan gewoon door naar de volgende stap.

2. Dubbelklik op ComboFix.exe en volg de meldingen op het scherm.

3. ComboFix zal controleren of dat de Microsoft Windows Recovery Console reeds is geïnstalleerd.

**Let op: Als de Microsoft Windows Recovery Console al is geïnstalleerd, dan krijg je de volgende schermen niet te zien en zal ComboFix automatisch verder gaan met het scannen naar malware.

4. Volg de meldingen op het scherm om ComboFix de Microsoft Windows Recovery Console te laten downloaden en installeren.

cf-rc-auto.jpg

Je krijgt de volgende melding te zien wanneer ComboFix de Microsoft Windows Recovery Console succesvol heeft geïnstalleerd:

rc-auto-done.jpg

Klik op Ja om verder te gaan met het scannen naar malware.

5. Wanneer ComboFix klaar is, zal het een logbestand voor je maken. Post de inhoud van dit logbestand (te vinden als C:\ComboFix.txt) in je volgende bericht.

Link naar reactie
Delen op andere sites
Gast

Gast

Geplaatst:
Geplaatst:

Ik heb ComboFix uitgevoerd en hier is de Logfile:

ComboFix 12-02-09.04 - Bosma 09-02-2012 20:54:09.1.2 - x86

Microsoft Windows XP Home Edition 5.1.2600.3.1252.31.1043.18.3198.2420 [GMT 1:00]

Gestart vanuit: c:\documents and settings\Bosma\Bureaublad\ComboFix.exe

AV: Lavasoft Ad-Watch Live! Anti-Virus *Disabled/Updated* {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}

AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}

.

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\windows\IsUn0413.exe

c:\windows\system\oeminfo.ini

D:\Autorun.inf

D:\install.exe

.

.

(((((((((((((((((((( Bestanden Gemaakt van 2012-01-09 to 2012-02-09 ))))))))))))))))))))))))))))))

.

.

2012-02-09 19:45 . 2012-02-09 19:45 8646 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\TILEBOX.JS

2012-02-09 19:45 . 2012-02-09 19:45 6429 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\UICORE.JS

2012-02-09 19:45 . 2012-02-09 19:45 63115 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\USERTILE.JS

2012-02-09 19:45 . 2012-02-09 19:45 4599 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\UIRESOURCE.JS

2012-02-09 19:45 . 2012-02-09 19:45 9310 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\TEXTBOX.JS

2012-02-09 19:45 . 2012-02-09 19:45 8613 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\SAVEDUSER.JS

2012-02-09 19:45 . 2012-02-09 19:45 5927 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\TEXT.JS

2012-02-09 19:45 . 2012-02-09 19:45 1651 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\QUERYSTRING.JS

2012-02-09 19:45 . 2012-02-09 19:45 6910 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\NEWUSERCOMM.JS

2012-02-09 19:45 . 2012-02-09 19:45 8288 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\IMAGE.JS

2012-02-09 19:45 . 2012-02-09 19:45 6208 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\LINK.JS

2012-02-09 19:45 . 2012-02-09 19:45 18541 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\LOCALIZATION.JS

2012-02-09 19:44 . 2012-02-09 19:44 51852 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\EXTERNALWRAPPER.JS

2012-02-09 19:44 . 2012-02-09 19:44 20719 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\DIVWRAPPER.JS

2012-02-09 19:44 . 2012-02-09 19:44 23327 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\COMBOBOX.JS

2012-02-09 19:44 . 2012-02-09 19:44 8782 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\BUTTON.JS

2012-02-09 19:44 . 2012-02-09 19:44 7271 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\IdentityCRL\production\temp\wlidui_WLIDSVC\CHECKBOX.JS

2012-02-09 19:17 . 2010-08-22 12:48 114176 ----a-w- c:\windows\system32\PCWizard.cpl

2012-02-09 19:17 . 2012-02-09 19:17 -------- d-----w- c:\program files\CPUID

2012-02-09 19:03 . 2012-01-05 19:19 6557240 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{0021C783-ADF6-4088-90C2-B861DA2A67FA}\mpengine.dll

2012-02-08 20:31 . 2012-02-09 19:04 -------- d--h--r- c:\documents and settings\Bosma\Onlangs geopend

2012-02-08 20:22 . 2012-02-08 20:22 388096 ----a-r- c:\documents and settings\Bosma\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

2012-02-08 20:22 . 2012-02-08 20:22 -------- d-----w- c:\program files\Trend Micro

2012-02-06 10:01 . 2012-02-06 10:01 -------- d--h--r- c:\documents and settings\Bosma\Application Data\SecuROM

2012-02-05 19:33 . 2012-02-05 19:33 2434856 ----a-w- c:\windows\system32\pbsvc_bc2.exe

2012-02-05 18:48 . 2012-02-05 18:48 -------- d-----w- c:\program files\Electronic Arts

2012-02-05 18:23 . 2012-02-05 18:33 -------- d-----w- c:\program files\GameSpy Arcade

2012-02-05 18:18 . 2012-02-05 18:42 -------- d-----w- c:\program files\EA GAMES

2012-02-05 17:41 . 2012-02-05 17:41 -------- d-----w- c:\documents and settings\Bosma\Local Settings\Application Data\Activision

2012-02-05 17:38 . 2012-02-05 17:38 682280 ----a-w- c:\windows\system32\pbsvc.exe

2012-02-04 19:45 . 2012-02-04 19:45 -------- d-----w- c:\program files\Microsoft Games

2012-01-31 18:59 . 2012-01-31 18:59 -------- d-----w- c:\program files\Google

2012-01-31 18:51 . 2012-01-31 18:51 237 ----a-w- C:\user.js

2012-01-31 15:32 . 2012-01-31 15:32 -------- d-----w- c:\documents and settings\Bosma\Local Settings\Application Data\Babylon

2012-01-31 15:32 . 2012-01-31 15:32 -------- d-----w- c:\documents and settings\All Users\Application Data\Babylon

2012-01-31 15:21 . 2012-01-31 15:21 -------- d-----w- c:\documents and settings\Bosma\Application Data\Publish Providers

2012-01-31 15:12 . 2012-01-31 15:12 -------- d-----w- c:\documents and settings\Bosma\Local Settings\Application Data\Sony

2012-01-31 15:11 . 2012-01-31 15:11 -------- d-----w- c:\documents and settings\All Users\Application Data\Sony

2012-01-31 15:09 . 2012-01-31 15:09 -------- d-----w- c:\windows\system32\drivers\UMDF

2012-01-31 14:47 . 2010-09-18 06:53 953856 -c----w- c:\windows\system32\dllcache\mfc40u.dll

2012-01-31 14:43 . 2010-08-23 16:13 617472 -c----w- c:\windows\system32\dllcache\comctl32.dll

2012-01-30 16:53 . 2010-11-02 15:17 40960 -c----w- c:\windows\system32\dllcache\ndproxy.sys

2012-01-30 16:43 . 2011-06-24 14:10 139656 -c----w- c:\windows\system32\dllcache\rdpwd.sys

2012-01-30 16:42 . 2011-04-21 13:37 105472 -c----w- c:\windows\system32\dllcache\mup.sys

2012-01-30 16:18 . 2011-07-08 14:02 10496 -c----w- c:\windows\system32\dllcache\ndistapi.sys

2012-01-30 16:17 . 2010-10-11 14:59 45568 -c----w- c:\windows\system32\dllcache\wab.exe

2012-01-29 11:32 . 2012-01-29 11:32 -------- d-----w- c:\windows\system32\nl

2012-01-29 11:32 . 2012-01-29 11:32 -------- d-----w- c:\windows\system32\bits

2012-01-29 11:32 . 2012-01-29 11:32 -------- d-----w- c:\windows\l2schemas

2012-01-29 11:26 . 2012-01-29 11:26 -------- d-----w- c:\windows\EHome

2012-01-27 19:16 . 2012-01-27 19:19 -------- d-----w- c:\program files\TweakNow PowerPack 2011

2012-01-27 19:16 . 2012-01-27 19:16 -------- d-----w- c:\documents and settings\Bosma\Application Data\TweakNow PowerPack 2011

2012-01-26 17:10 . 2012-01-26 17:10 -------- d-----w- c:\program files\MSXML 4.0

2012-01-26 12:30 . 2012-01-26 12:30 -------- d-----w- c:\documents and settings\All Users\Application Data\Nexon

2012-01-26 11:22 . 2012-01-26 11:22 -------- d-----w- C:\Nexon

2012-01-25 17:52 . 2012-01-25 17:52 -------- d-----w- c:\documents and settings\All Users\Application Data\WEBREG

2012-01-25 17:51 . 2012-01-25 17:51 -------- d-----w- c:\documents and settings\Bosma\Local Settings\Application Data\HP

2012-01-25 17:51 . 2012-01-25 17:53 -------- d-----w- c:\documents and settings\Bosma\Application Data\HP

2012-01-25 17:50 . 2009-10-21 14:29 320512 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\hpfpp101.dll

2012-01-25 17:50 . 2009-10-22 00:55 452736 ----a-r- c:\windows\system32\hpzids01.dll

2012-01-25 17:50 . 2009-10-21 14:29 125440 ----a-w- c:\windows\system32\hpf3l101.dll

2012-01-25 17:49 . 2009-10-30 04:15 372736 ----a-r- c:\windows\system32\hppldcoi.dll

2012-01-25 17:49 . 2009-09-10 17:44 966656 ----a-r- c:\windows\system32\hpost_p04b.dll

2012-01-25 17:49 . 2009-09-10 17:44 887296 ----a-r- c:\windows\system32\hposwia_p04b.dll

2012-01-25 17:49 . 2009-09-10 17:44 315392 ----a-r- c:\windows\system32\hposc_p04a.dll

2012-01-25 17:49 . 2009-08-05 15:22 309760 ----a-r- c:\windows\system32\difxapi.dll

2012-01-25 17:49 . 2001-09-06 19:47 6912 -c--a-w- c:\windows\system32\dllcache\serscan.sys

2012-01-25 17:49 . 2001-09-06 19:47 6912 ----a-w- c:\windows\system32\drivers\serscan.sys

2012-01-25 17:47 . 2012-01-27 19:23 -------- d-----w- c:\program files\Microsoft

2012-01-25 17:47 . 2012-01-26 19:00 -------- d-----w- c:\documents and settings\Bosma\Application Data\HpUpdate

2012-01-25 17:46 . 2012-01-25 17:46 -------- d-----w- c:\documents and settings\All Users\Application Data\HP Product Assistant

2012-01-25 17:44 . 2012-01-25 17:51 -------- d-----w- c:\documents and settings\All Users\Application Data\HP

2012-01-25 17:44 . 2012-01-25 17:44 -------- d-----w- c:\program files\Common Files\HP

2012-01-25 17:44 . 2012-01-25 17:44 -------- d-----w- c:\program files\Common Files\Hewlett-Packard

2012-01-25 17:42 . 2012-01-25 17:47 -------- d-----w- c:\program files\HP

2012-01-25 17:42 . 2008-04-13 18:45 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys

2012-01-25 17:42 . 2008-04-13 18:47 25856 ----a-w- c:\windows\system32\drivers\usbprint.sys

2012-01-25 15:29 . 2008-11-10 10:41 32656 ----a-w- c:\windows\system32\msonpmon.dll

2012-01-25 15:29 . 2006-10-26 18:56 33104 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\msonpppr.dll

2012-01-25 15:29 . 2012-01-26 17:11 -------- d-----w- c:\program files\Microsoft Works

2012-01-25 15:27 . 2012-01-25 15:27 -------- d-----w- c:\windows\SHELLNEW

2012-01-25 15:26 . 2012-01-25 15:26 -------- d-----w- c:\documents and settings\Bosma\Local Settings\Application Data\Microsoft Help

2012-01-25 15:26 . 2012-01-27 21:49 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help

2012-01-25 15:26 . 2012-01-25 15:26 -------- d-----r- C:\MSOCache

2012-01-24 16:49 . 2011-07-17 16:04 4390376 ----a-w- c:\windows\system32\GameMon.des

2012-01-24 16:49 . 2004-12-31 15:43 4682 ----a-w- c:\windows\system32\npptNT2.sys

2012-01-24 16:49 . 2003-07-17 00:17 5174 ----a-w- c:\windows\system32\nppt9x.vxd

2012-01-24 16:48 . 2012-01-24 16:48 -------- d-----w- c:\program files\Common Files\INCA Shared

2012-01-23 10:19 . 2012-01-23 10:19 -------- d-----w- c:\program files\DVDVideoSoft

2012-01-23 10:04 . 2012-01-23 10:20 -------- d-----w- c:\documents and settings\Bosma\Application Data\DVDVideoSoft

2012-01-23 10:04 . 2012-01-23 10:20 -------- d-----w- c:\program files\Common Files\DVDVideoSoft

2012-01-20 18:40 . 2012-01-05 19:19 6557240 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll

2012-01-20 18:32 . 2012-01-28 16:23 271200 ----a-w- c:\windows\system32\PnkBstrB.xtr

2012-01-20 14:41 . 2012-02-02 17:04 -------- d-----w- c:\documents and settings\Bosma\Application Data\.minecraft

2012-01-20 14:32 . 2012-01-20 14:32 -------- d-----w- c:\documents and settings\Bosma\Application Data\NVIDIA

2012-01-20 14:29 . 2012-02-05 17:42 -------- d-----w- c:\documents and settings\Bosma\Application Data\Skype

2012-01-20 14:29 . 2012-01-20 14:29 -------- d-----r- c:\program files\Skype

2012-01-20 14:29 . 2012-01-20 14:29 -------- d-----w- c:\documents and settings\All Users\Application Data\Skype

2012-01-19 20:36 . 2012-02-06 10:01 -------- d-----w- c:\documents and settings\Bosma\Local Settings\Application Data\PunkBuster

2012-01-19 19:59 . 2012-01-19 19:59 -------- d-----w- c:\documents and settings\Bosma\Local Settings\Application Data\Temp

2012-01-19 19:27 . 2012-02-07 19:25 138464 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys

2012-01-19 19:27 . 2012-02-05 19:33 138056 ----a-w- c:\documents and settings\Bosma\Application Data\PnkBstrK.sys

2012-01-19 19:27 . 2012-02-07 19:25 111928 ----a-w- c:\windows\system32\PnkBstrB.exe

2012-01-19 19:27 . 2012-01-20 18:32 271200 ----a-w- c:\windows\system32\PnkBstrB.ex0

2012-01-19 19:27 . 2012-02-06 10:02 75064 ----a-w- c:\windows\system32\PnkBstrA.exe

2012-01-19 19:27 . 2012-01-31 15:09 -------- d-----w- c:\windows\system32\LogFiles

2012-01-19 19:17 . 2012-02-05 17:27 -------- d-----w- c:\program files\Activision

2012-01-19 19:16 . 2012-01-19 19:16 -------- d-sh--w- c:\windows\ftpcache

2012-01-19 18:50 . 2012-01-19 18:50 -------- d-----w- c:\documents and settings\Bosma\Application Data\SystemRequirementsLab

2012-01-19 18:49 . 2012-01-19 18:49 -------- d-----w- c:\windows\Sun

2012-01-19 18:36 . 2005-05-26 14:34 2297552 ----a-w- c:\windows\system32\d3dx9_26.dll

2012-01-19 18:36 . 2012-02-06 18:37 -------- d-----w- c:\windows\Logs

2012-01-19 18:29 . 2012-02-02 16:19 -------- d-----w- c:\program files\Common Files\Steam

2012-01-19 18:25 . 2012-01-19 18:25 -------- d-----w- c:\program files\CCleaner

2012-01-19 18:25 . 2012-01-19 18:25 -------- d-----w- c:\documents and settings\Bosma\Application Data\Malwarebytes

2012-01-19 18:25 . 2012-01-19 18:25 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes

2012-01-19 18:25 . 2012-01-19 18:25 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2012-01-19 18:25 . 2011-12-10 14:24 20464 ----a-w- c:\windows\system32\drivers\mbam.sys

2012-01-19 18:23 . 2012-01-19 18:23 101720 ----a-w- c:\windows\system32\drivers\SBREDrv.sys

2012-01-19 18:18 . 2011-12-23 06:12 64512 ----a-w- c:\windows\system32\drivers\Lbd.sys

2012-01-19 18:18 . 2012-01-19 18:18 -------- d-----w- c:\program files\Lavasoft

2012-01-19 18:18 . 2012-01-19 18:18 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft

2012-01-19 17:57 . 2012-01-19 17:58 -------- d-----w- c:\documents and settings\Bosma\Local Settings\Application Data\Google

2012-01-19 17:57 . 2012-01-19 17:57 -------- d-----w- c:\documents and settings\Bosma\Local Settings\Application Data\Deployment

2012-01-19 17:56 . 2012-01-19 17:56 -------- d-sh--w- c:\documents and settings\Bosma\IECompatCache

.

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2011-11-25 21:57 . 2006-03-02 12:00 293888 ----a-w- c:\windows\system32\winsrv.dll

2011-11-23 14:40 . 2006-03-02 12:00 1859712 ----a-w- c:\windows\system32\win32k.sys

2011-11-20 06:12 . 2006-03-02 12:00 60928 ----a-w- c:\windows\system32\packager.exe

2011-11-16 14:22 . 2006-03-02 12:00 354816 ----a-w- c:\windows\system32\winhttp.dll

2011-11-16 14:22 . 2006-03-02 12:00 152064 ----a-w- c:\windows\system32\schannel.dll

.

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"JMB36X Configure"="c:\windows\system32\JMRaidTool.exe" [2006-04-20 385024]

"RTHDCPL"="RTHDCPL.EXE" [2006-05-04 16206848]

"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2005-01-12 32768]

"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2011-10-08 16744256]

"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2011-10-08 203072]

"nwiz"="c:\program files\NVIDIA Corporation\nview\nwiz.exe" [2011-10-08 1632360]

"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2011-06-15 997920]

"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-12-24 460872]

"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2009-11-18 54576]

.

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2008-11-04 435096]

.

c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\

HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-11-18 275072]

Sitecom Wireless Utility.lnk - c:\program files\Sitecom\Common\RaUI.exe [2012-1-19 1642496]

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

@="Service"

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

@="Service"

.

[HKEY_LOCAL_MACHINE\software\microsoft\security center]

"AntiVirusOverride"=dword:00000001

.

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"d:\\Steam\\Steam.exe"=

"d:\\Steam\\SteamApps\\common\\call of duty modern warfare 2\\iw4sp.exe"=

"d:\\Steam\\SteamApps\\common\\call of duty modern warfare 2\\iw4mp.exe"=

"d:\\Steam\\SteamApps\\common\\call of duty black ops\\BlackOps.exe"=

"c:\\WINDOWS\\system32\\PnkBstrA.exe"=

"c:\\WINDOWS\\system32\\PnkBstrB.exe"=

"c:\\Program Files\\Activision\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=

"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=

"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfcCopy.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe"=

"c:\\Program Files\\HP\\HP Software Update\\hpwucli.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\smart web printing\\SmartWebPrintExe.exe"=

"c:\\Documents and Settings\\All Users\\Application Data\\NexonEU\\NGM\\NGM.exe"=

"c:\nexon\Combat Arms EU\CombatArms.exe"= c:\nexon\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe

"c:\\Nexon\\Combat Arms EU\\NMService.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"d:\\Steam\\SteamApps\\common\\call of duty modern warfare 3\\iw5mp_server.exe"=

"d:\\Steam\\SteamApps\\common\\call of duty modern warfare 3\\iw5sp.exe"=

"d:\\Steam\\SteamApps\\common\\call of duty modern warfare 3\\iw5mp.exe"=

"c:\\Program Files\\Electronic Arts\\Battlefield Bad Company 2\\BFBC2Updater.exe"=

"c:\\Nexon\\Combat Arms EU\\Engine.exe"=

"c:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaW.exe"=

"c:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaWmp.exe"=

.

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [19-1-2012 19:18 64512]

R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [19-1-2012 19:25 652872]

R2 Scutum50;Scutum50 NDIS Protocol Driver;c:\windows\system32\drivers\Scutum50.sys [19-1-2012 17:51 19072]

R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [19-1-2012 19:25 20464]

R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32.sys [19-1-2012 16:48 119656]

S2 gupdate;Google Update-service (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [31-1-2012 19:59 136176]

S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [23-12-2011 7:12 2152152]

S3 cpuz134;cpuz134;c:\program files\CPUID\PC Wizard 2010\pcwiz_x32.sys [9-2-2012 20:17 20328]

S3 EagleXNt;EagleXNt;\??\c:\windows\system32\drivers\EagleXNt.sys --> c:\windows\system32\drivers\EagleXNt.sys [?]

S3 gupdatem;Google Update-service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [31-1-2012 19:59 136176]

S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des -service --> c:\windows\system32\GameMon.des -service [?]

.

--- Andere Services/Drivers In Geheugen ---

.

*Deregistered* - Lavasoft Kernexplorer

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12

HPService REG_MULTI_SZ HPSLPSVC

hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

.

Inhoud van de 'Gedeelde Taken' map

.

2012-02-09 c:\windows\Tasks\Ad-Aware Update (Weekly).job

- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2011-12-23 18:23]

.

2012-02-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2012-01-31 18:59]

.

2012-02-09 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2012-01-31 18:59]

.

2012-02-08 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1757981266-725345543-1004Core.job

- c:\documents and settings\Bosma\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2012-01-19 17:57]

.

2012-02-09 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1085031214-1757981266-725345543-1004UA.job

- c:\documents and settings\Bosma\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2012-01-19 17:57]

.

2012-02-09 c:\windows\Tasks\MP Scheduled Scan.job

- c:\program files\Microsoft Security Client\Antimalware\MpCmdRun.exe [2011-04-27 14:39]

.

.

------- Bijkomende Scan -------

.

uStart Page = hxxp://www.google.com/

IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000

IE: Free YouTube to MP3 Converter - c:\documents and settings\Bosma\Application Data\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm

TCP: DhcpNameServer = 192.168.0.1

.

- - - - ORPHANS VERWIJDERD - - - -

.

AddRemove-Microsoft Interactive Training - c:\windows\IsUn0413.exe

.

.

.

**************************************************************************

.

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2012-02-09 20:56

Windows 5.1.2600 Service Pack 3 NTFS

.

scannen van verborgen processen ...

.

scannen van verborgen autostart items ...

.

scannen van verborgen bestanden ...

.

Scan succesvol afgerond

verborgen bestanden: 0

.

**************************************************************************

.

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\npggsvc]

"ImagePath"="c:\windows\system32\GameMon.des -service"

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

.

[HKEY_USERS\S-1-5-21-1085031214-1757981266-725345543-1004\Software\SecuROM\License information*]

"datasecu"=hex:a7,01,88,b3,8a,76,e7,08,d0,eb,b9,e5,63,7f,d3,54,29,0c,e7,79,5c,

47,38,49,07,c1,83,00,44,56,7a,3c,3d,86,6e,ca,98,66,79,2e,d7,ba,01,b8,25,8b,\

"rkeysecu"=hex:b4,a5,08,ac,0c,f9,39,d2,a9,2c,b8,49,ab,37,ae,62

.

Voltooingstijd: 2012-02-09 20:57:42

ComboFix-quarantined-files.txt 2012-02-09 19:57

.

Pre-Run: 116.563.787.776 bytes beschikbaar

Post-Run: 116.588.425.216 bytes beschikbaar

.

WindowsXP-KB310994-SP2-Home-BootDisk-NLD.exe

[boot loader]

timeout=2

default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS

[operating systems]

c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

UnsupportedDebug="do not select this" /debug

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect

.

- - End Of File - - 0DE27994FDB0281D9EE6F4DD1CC59075

Link naar reactie
Delen op andere sites
kape Grootmeester

kape

Geplaatst:
Geplaatst:

Combofix heeft zijn werk gedaan. Deze vetgedrukte amppen mag je nog manueel verwijderen :

c:\documents and settings\Bosma\Local Settings\Application Data\Babylon

c:\documents and settings\All Users\Application Data\Babylon

c:\documents and settings\Bosma\Application Data\Publish Providers

... en hoe staat het dan met de snelheid ?

Link naar reactie
Delen op andere sites
Gast
Dit topic is nu gesloten voor nieuwe reacties.
 Delen
Ga naar topic overzicht
Logo

OVER ONS

PC Helpforum helpt GRATIS computergebruikers sinds juli 2006. Ons team geeft via het forum professioneel antwoord op uw vragen en probeert uw pc problemen zo snel mogelijk op te lossen. Word lid vandaag, plaats je vraag online en het PC Helpforum-team helpt u graag verder!

SITEMAP

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.