laptop loopt vaak vast

wouterter · 24 maart 2012

sorry voor de late reactie

ik dacht dat het probleem opgelost was, maar laatst begon het weer.

heb Windows opnieuw geinstalleerd, en dat loste ook niks op, drivers werken allemaal goed, heb gescand op virussen, niks gevonden.

nu zat ik in mijn logboeken te kijken, en ik zag dat:

Logboeknaam: Application

Bron: Microsoft-Windows-WMI

Datum: 24-3-2012 17:27:03

Gebeurtenis-id:10

Taakcategorie: Geen

Niveau: Fout

Trefwoorden: Klassiek

Gebruiker: n.v.t.

Computer: Vastloper

Beschrijving:

Gebeurtenisfilter met query SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 kan niet opnieuw worden geactiveerd in naamruimte //./root/CIMV2 vanwege fout 0x80041003. Mogelijk worden er geen gebeurtenissen via dit filter doorgegeven totdat het probleem is verholpen.

Gebeurtenis-XML:

<Channel>Application</Channel>

<Computer>Vastloper</Computer>

</System>

<Data>SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99</Data>

</EventData>

</Event>

zou dit de vastloper kunnen zijn? want dat is het tijdstip dat ie vastliep

Asus · 24 maart 2012

Volgens deze info van Microsoft valt deze foutmelding te negeren.

De nog resterende mogelijkheden zijn dus nog : Combofix of opnieuw gebruik maken van je garantie.

wouterter · 24 maart 2012

dan ga ik combofix doen.

ben nog even een scan aan het doen met Spybot - Search & Destroy

ik neem aan dat ik combofix beter kan doen als ik geen progamma's heb draaien?

Asus · 24 maart 2012

Klopt, best alle schermen sluiten na de download van Combofix...schakel dan eveneens alle antivirus- en antispywareprogramma's uit, zie bericht 9 van Kweezie Wabbit in dit topic.

wouterter · 24 maart 2012

hier is die:

ComboFix 12-03-22.01 - Wouter 24-03-2012 18:21:59.1.4 - x64

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.4022.2201 [GMT 1:00]

Gestart vanuit: c:\users\Wouter\Desktop\ComboFix.exe

AV: avast! Internet Security *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}

FW: avast! Internet Security *Disabled* {131692B0-0864-D491-4E21-3A3A1D8BBB47}

SP: avast! Internet Security *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

(((((((((((((((((((( Bestanden Gemaakt van 2012-02-24 to 2012-03-24 ))))))))))))))))))))))))))))))

.

2012-03-24 17:25 . 2012-03-24 17:25 -------- d-----w- c:\users\Default\AppData\Local\temp

2012-03-24 16:47 . 2012-03-24 17:12 -------- d-----w- c:\programdata\Spybot - Search & Destroy

2012-03-24 16:47 . 2012-03-24 16:49 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy

2012-03-24 16:06 . 2012-03-24 16:06 -------- d-----w- c:\program files (x86)\GrabIt

2012-03-24 15:05 . 2012-03-24 15:06 -------- d-----w- c:\program files (x86)\ophcrack

2012-03-24 14:41 . 2012-03-24 14:41 -------- d-----w- c:\program files (x86)\Microsoft Silverlight

2012-03-24 14:20 . 2012-03-24 14:38 -------- d-----w- C:\wbfs

2012-03-24 02:33 . 2012-03-24 16:45 69000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{5A723811-78CC-42DF-BDDE-3ABC30DF43ED}\offreg.dll

2012-03-24 01:12 . 2012-03-24 01:17 -------- d-----w- c:\program files (x86)\JDownloader

2012-03-23 17:19 . 2009-10-21 16:16 243200 ----a-w- c:\windows\system32\drivers\ewusbnet.sys

2012-03-23 17:19 . 2009-10-12 14:23 114304 ----a-w- c:\windows\system32\drivers\ewusbdev.sys

2012-03-23 17:19 . 2009-09-10 14:31 117248 ----a-w- c:\windows\system32\drivers\ewusbmdm.sys

2012-03-23 17:19 . 2007-08-09 03:10 29696 ----a-w- c:\windows\system32\drivers\ewdcsc.sys

2012-03-23 17:19 . 2012-03-23 17:26 -------- d-----w- c:\program files (x86)\Mobile Partner

2012-03-23 15:33 . 2012-03-14 03:27 8669240 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{5A723811-78CC-42DF-BDDE-3ABC30DF43ED}\mpengine.dll

2012-03-23 01:28 . 2012-03-23 01:28 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help

2012-03-22 20:51 . 2012-03-22 20:55 -------- d-----w- c:\program files (x86)\Microsoft Works

2012-03-22 20:49 . 2012-03-22 20:49 -------- d-----w- c:\windows\PCHEALTH

2012-03-22 20:47 . 2012-03-22 20:47 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8

2012-03-22 20:46 . 2012-03-24 02:04 -------- d-----w- c:\programdata\Microsoft Help

2012-03-22 20:44 . 2012-03-22 20:44 -------- d-----r- C:\MSOCache

2012-03-21 22:44 . 2012-03-21 22:44 -------- d-----w- c:\programdata\Rockstar Games

2012-03-21 22:43 . 2012-03-21 23:26 -------- d-----w- c:\program files (x86)\Rockstar Games

2012-03-21 21:51 . 2012-03-21 21:51 -------- d-----w- c:\windows\SysWow64\RTCOM

2012-03-21 21:34 . 2012-03-21 21:34 -------- d-----w- c:\programdata\ATI

2012-03-21 21:28 . 2012-03-21 21:28 -------- d-----w- c:\programdata\AMD

2012-03-21 21:28 . 2012-03-21 21:28 -------- d-----w- c:\program files (x86)\AMD AVT

2012-03-21 21:28 . 2012-03-21 21:28 -------- d-----w- c:\program files (x86)\AMD APP

2012-03-21 21:28 . 2012-03-21 21:28 -------- d-----w- c:\program files\Common Files\ATI Technologies

2012-03-21 21:28 . 2012-03-21 21:28 -------- d-----w- c:\program files (x86)\Common Files\ATI Technologies

2012-03-21 21:28 . 2009-07-17 23:52 1799680 ----a-w- c:\windows\system32\drivers\snp2uvc.sys

2012-03-21 21:28 . 2009-05-20 19:01 305152 ----a-w- c:\windows\SysWow64\vsnp2uvc.dll

2012-03-21 21:28 . 2009-05-20 19:01 374784 ----a-w- c:\windows\system32\vsnp2uvc.dll

2012-03-21 21:28 . 2009-02-17 01:33 306176 ----a-w- c:\windows\system32\csnp2uvc.dll

2012-03-21 21:28 . 2008-12-30 00:14 35456 ----a-w- c:\windows\system32\drivers\sncduvc.sys

2012-03-21 21:28 . 2009-07-21 17:15 2400477 ----a-w- c:\windows\snuninst.exe

2012-03-21 21:27 . 2012-03-21 21:27 -------- d-----w- c:\program files (x86)\Atheros

2012-03-21 21:27 . 2012-03-21 21:27 -------- d-----w- c:\windows\Options

2012-03-21 21:27 . 2012-01-10 20:38 2801664 ----a-w- c:\windows\system32\drivers\athrx.sys

2012-03-21 21:25 . 2012-03-21 21:27 -------- d-----w- c:\programdata\Atheros

2012-03-21 21:24 . 2012-03-21 21:24 -------- d-----w- c:\program files (x86)\ATI Technologies

2012-03-21 21:24 . 2012-03-21 21:24 -------- d-----w- c:\windows\SysWow64\Atheros_L1e

2012-03-21 21:23 . 2012-03-21 23:26 -------- d--h--w- c:\program files (x86)\InstallShield Installation Information

2012-03-21 21:22 . 2012-01-16 14:49 103536 ----a-w- c:\windows\system32\drivers\L1C62x64.sys

2012-03-21 21:21 . 2012-03-21 21:21 -------- d-----w- c:\program files (x86)\Realtek

2012-03-21 21:18 . 2012-03-21 21:18 -------- d-----w- C:\AMD

2012-03-21 21:15 . 2012-03-21 21:15 -------- d-----w- C:\swsetup

2012-03-21 20:58 . 2012-03-21 20:59 -------- d-----w- c:\programdata\DriverGenius

2012-03-21 20:56 . 2012-03-21 20:56 -------- d-----w- c:\program files (x86)\Driver-Soft

2012-03-21 09:27 . 2012-03-21 09:27 -------- d-----w- c:\program files (x86)\2K Games

2012-03-18 00:53 . 2007-07-19 23:57 411496 ----a-w- c:\windows\system32\xactengine2_9.dll

2012-03-18 00:52 . 2012-03-18 00:52 -------- d-----w- c:\program files (x86)\Common Files\Wise Installation Wizard

2012-03-18 00:20 . 2012-03-18 00:21 -------- d-----w- c:\program files (x86)\PowerISO

2012-03-18 00:20 . 2012-02-09 06:06 125376 ----a-w- c:\windows\system32\drivers\scdemu.sys

2012-03-17 21:38 . 2012-03-17 21:38 -------- d-----w- c:\program files (x86)\Common Files\Java

2012-03-17 21:37 . 2012-03-17 21:37 -------- d-----w- c:\program files (x86)\Java

2012-03-17 21:33 . 2012-03-22 20:49 -------- d-----w- c:\program files (x86)\Microsoft.NET

2012-03-17 20:45 . 2012-03-17 21:38 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll

2012-03-17 20:38 . 2012-03-17 20:38 0 ----a-w- c:\windows\ativpsrm.bin

2012-03-17 20:35 . 2012-03-17 20:35 -------- d-----w- c:\program files\Realtek

2012-03-17 20:35 . 2010-03-09 10:21 123408 ----a-w- c:\windows\system32\drivers\AtiHdmi.sys

2012-03-17 20:35 . 2009-12-02 07:01 64032 ----a-w- c:\windows\system32\RHCoInst64.dll

2012-03-17 20:35 . 2009-12-02 07:01 213280 ----a-w- c:\windows\system32\drivers\RtHDMIVX.sys

2012-03-17 20:35 . 2009-12-02 07:01 1691680 ----a-w- c:\windows\system32\RHDMEx64.dll

2012-03-17 20:35 . 2009-12-02 07:01 1638432 ----a-w- c:\windows\system32\RtkHDM64.dll

2012-03-17 20:35 . 2009-03-08 21:32 304640 ----a-w- c:\windows\system32\RH3DAA64.dll

2012-03-17 20:35 . 2009-03-08 21:31 304640 ----a-w- c:\windows\system32\RH3DHT64.dll

2012-03-17 20:34 . 2012-02-15 02:16 58880 ----a-w- c:\windows\system32\coinst.dll

2012-03-17 20:34 . 2012-03-21 21:51 -------- d--h--w- c:\program files (x86)\Temp

2012-03-17 20:34 . 2011-12-13 10:01 1698408 ----a-w- c:\windows\RtlExUpd.dll

2012-03-17 20:30 . 2012-03-17 20:30 -------- d-----w- c:\program files (x86)\Intel

2012-03-17 20:30 . 2012-01-16 10:06 53248 ----a-w- c:\windows\SysWow64\CSVer.dll

2012-03-17 20:30 . 2012-03-17 20:30 -------- d-----w- C:\Intel

2012-03-17 20:24 . 2012-03-17 20:24 -------- d-----w- c:\windows\SysWow64\wbem\en-US

2012-03-17 20:24 . 2012-03-17 20:24 -------- d-----w- c:\windows\system32\wbem\en-US

2012-03-17 20:24 . 2012-03-17 20:24 -------- d-----w- c:\windows\SysWow64\Wat

2012-03-17 20:24 . 2012-03-17 20:24 -------- d-----w- c:\windows\system32\Wat

2012-03-17 20:23 . 2012-03-07 00:01 24408 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys

2012-03-17 20:23 . 2012-03-07 00:04 337240 ----a-w- c:\windows\system32\drivers\aswSP.sys

2012-03-17 20:22 . 2012-03-07 00:04 141144 ----a-w- c:\windows\system32\drivers\aswFW.sys

2012-03-17 20:22 . 2012-03-07 00:03 258904 ----a-w- c:\windows\system32\drivers\aswNdis2.sys

2012-03-17 20:22 . 2012-03-07 00:02 53080 ----a-w- c:\windows\system32\drivers\aswRdr2.sys

2012-03-17 20:22 . 2012-03-07 00:04 819032 ----a-w- c:\windows\system32\drivers\aswSnx.sys

2012-03-17 20:22 . 2012-03-07 00:02 28504 ----a-w- c:\windows\system32\drivers\aswKbd.sys

2012-03-17 20:22 . 2012-03-07 00:01 59224 ----a-w- c:\windows\system32\drivers\aswTdi.sys

2012-03-17 20:22 . 2012-03-07 00:01 69976 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys

2012-03-17 20:22 . 2012-03-07 00:15 258520 ----a-w- c:\windows\system32\aswBoot.exe

2012-03-17 20:22 . 2012-03-17 20:22 162664 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10140.bin

2012-03-17 20:17 . 2012-03-19 00:11 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2012-03-17 20:17 . 2012-03-17 20:17 -------- d-----w- c:\windows\SysWow64\Macromed

2012-03-17 20:17 . 2012-03-17 20:17 -------- d-----w- c:\windows\system32\Macromed

2012-03-17 20:17 . 2012-03-24 14:41 -------- d-sh--w- c:\windows\Installer

2012-03-17 20:17 . 2011-11-19 15:20 5559152 ----a-w- c:\windows\system32\ntoskrnl.exe

2012-03-17 20:17 . 2012-03-06 23:44 12368 ----a-w- c:\windows\system32\drivers\aswNdis.sys

2012-03-17 20:17 . 2011-11-19 14:50 3968368 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe

2012-03-17 20:17 . 2011-11-19 14:50 3913584 ----a-w- c:\windows\SysWow64\ntoskrnl.exe

2012-03-17 20:16 . 2012-03-07 00:15 41184 ----a-w- c:\windows\avastSS.scr

2012-03-17 20:16 . 2012-03-07 00:15 201352 ----a-w- c:\windows\SysWow64\aswBoot.exe

2012-03-17 20:16 . 2012-03-17 20:16 -------- d-----w- c:\programdata\AVAST Software

2012-03-17 20:16 . 2012-03-17 20:16 -------- d-----w- c:\program files\AVAST Software

2012-03-17 20:10 . 2012-03-17 20:10 -------- d-----w- c:\program files\Protector Suite

2012-03-17 20:06 . 2011-05-04 05:25 2315776 ----a-w- c:\windows\system32\tquery.dll

2012-03-17 20:05 . 2011-11-17 06:41 1731920 ----a-w- c:\windows\system32\ntdll.dll

2012-03-17 20:05 . 2011-11-17 05:38 1292080 ----a-w- c:\windows\SysWow64\ntdll.dll

2012-03-17 20:02 . 2011-11-19 14:58 77312 ----a-w- c:\windows\system32\packager.dll

2012-03-17 20:02 . 2011-11-19 14:01 67072 ----a-w- c:\windows\SysWow64\packager.dll

2012-03-17 20:01 . 2012-03-17 20:01 -------- d-----w- c:\program files (x86)\uTorrent

2012-03-17 19:56 . 2012-02-17 06:38 1031680 ----a-w- c:\windows\system32\rdpcore.dll

2012-03-17 19:56 . 2012-02-17 05:34 826880 ----a-w- c:\windows\SysWow64\rdpcore.dll

2012-03-17 19:56 . 2012-02-17 04:58 210944 ----a-w- c:\windows\system32\drivers\rdpwd.sys

2012-03-17 19:56 . 2012-02-17 04:57 23552 ----a-w- c:\windows\system32\drivers\tdtcp.sys

2012-03-17 19:56 . 2012-01-25 06:38 77312 ----a-w- c:\windows\system32\rdpwsx.dll

2012-03-17 19:56 . 2012-01-25 06:38 149504 ----a-w- c:\windows\system32\rdpcorekmts.dll

2012-03-17 19:56 . 2012-01-25 06:33 9216 ----a-w- c:\windows\system32\rdrmemptylst.exe

2012-03-17 19:54 . 2012-03-22 21:13 -------- d-----w- c:\users\Wouter

2012-03-17 19:54 . 2012-03-17 19:54 -------- d-sh--we c:\programdata\Sjablonen

2012-03-17 19:54 . 2012-03-17 19:54 -------- d-sh--we c:\programdata\Menu Start

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-02-23 08:18 . 2010-11-21 03:27 279656 ------w- c:\windows\system32\MpSigStub.exe

2012-02-15 03:48 . 2012-02-15 03:48 10856960 ----a-w- c:\windows\system32\drivers\atikmdag.sys

2012-02-15 03:21 . 2012-02-15 03:21 25839104 ----a-w- c:\windows\system32\atio6axx.dll

2012-02-15 03:18 . 2012-02-15 03:18 159744 ----a-w- c:\windows\system32\atiapfxx.exe

2012-02-15 03:18 . 2012-02-15 03:18 791040 ----a-w- c:\windows\SysWow64\aticfx32.dll

2012-02-15 03:17 . 2010-01-22 13:47 957952 ----a-w- c:\windows\system32\aticfx64.dll

2012-02-15 03:13 . 2012-02-15 03:13 442368 ----a-w- c:\windows\system32\ATIDEMGX.dll

2012-02-15 03:13 . 2012-02-15 03:13 496128 ----a-w- c:\windows\system32\atieclxx.exe

2012-02-15 03:13 . 2012-02-15 03:13 235520 ----a-w- c:\windows\system32\atiesrxx.exe

2012-02-15 03:11 . 2012-02-15 03:11 120320 ----a-w- c:\windows\system32\atitmm64.dll

2012-02-15 03:10 . 2012-02-15 03:10 21504 ----a-w- c:\windows\system32\atimuixx.dll

2012-02-15 03:10 . 2012-02-15 03:10 59392 ----a-w- c:\windows\system32\atiedu64.dll

2012-02-15 03:10 . 2012-02-15 03:10 43520 ----a-w- c:\windows\SysWow64\ati2edxx.dll

2012-02-15 03:07 . 2012-02-15 03:07 6200320 ----a-w- c:\windows\SysWow64\atidxx32.dll

2012-02-15 02:58 . 2012-02-15 02:58 19392000 ----a-w- c:\windows\SysWow64\atioglxx.dll

2012-02-15 02:52 . 2010-01-22 13:48 7646208 ----a-w- c:\windows\system32\atidxx64.dll

2012-02-15 02:41 . 2012-02-15 02:41 1113088 ----a-w- c:\windows\system32\atiumd6v.dll

2012-02-15 02:40 . 2012-02-15 02:40 1828864 ----a-w- c:\windows\SysWow64\atiumdmv.dll

2012-02-15 02:40 . 2012-02-15 02:40 4958208 ----a-w- c:\windows\system32\atiumd6a.dll

2012-02-15 02:34 . 2012-02-15 02:34 51200 ----a-w- c:\windows\system32\aticalrt64.dll

2012-02-15 02:34 . 2012-02-15 02:34 46080 ----a-w- c:\windows\SysWow64\aticalrt.dll

2012-02-15 02:34 . 2012-02-15 02:34 44544 ----a-w- c:\windows\system32\aticalcl64.dll

2012-02-15 02:34 . 2012-02-15 02:34 44032 ----a-w- c:\windows\SysWow64\aticalcl.dll

2012-02-15 02:34 . 2010-01-22 13:39 5954048 ----a-w- c:\windows\SysWow64\atiumdag.dll

2012-02-15 02:34 . 2012-02-15 02:34 13859840 ----a-w- c:\windows\system32\aticaldd64.dll

2012-02-15 02:29 . 2010-01-22 13:21 5062656 ----a-w- c:\windows\SysWow64\atiumdva.dll

2012-02-15 02:29 . 2012-02-15 02:29 11561984 ----a-w- c:\windows\SysWow64\aticaldd.dll

2012-02-15 02:25 . 2012-02-15 02:25 7551488 ----a-w- c:\windows\system32\atiumd64.dll

2012-02-15 02:14 . 2012-02-15 02:14 512000 ----a-w- c:\windows\system32\atiadlxx.dll

2012-02-15 02:13 . 2010-01-22 13:08 356352 ----a-w- c:\windows\SysWow64\atiadlxy.dll

2012-02-15 02:13 . 2012-02-15 02:13 17408 ----a-w- c:\windows\system32\atig6pxx.dll

2012-02-15 02:13 . 2012-02-15 02:13 14336 ----a-w- c:\windows\SysWow64\atiglpxx.dll

2012-02-15 02:13 . 2012-02-15 02:13 14336 ----a-w- c:\windows\system32\atiglpxx.dll

2012-02-15 02:13 . 2012-02-15 02:13 39936 ----a-w- c:\windows\system32\atig6txx.dll

2012-02-15 02:13 . 2012-02-15 02:13 33280 ----a-w- c:\windows\SysWow64\atigktxx.dll

2012-02-15 02:13 . 2012-02-15 02:13 327680 ----a-w- c:\windows\system32\drivers\atikmpag.sys

2012-02-15 02:12 . 2010-01-22 13:07 43008 ----a-w- c:\windows\system32\atiuxp64.dll

2012-02-15 02:12 . 2012-02-15 02:12 33280 ----a-w- c:\windows\SysWow64\atiuxpag.dll

2012-02-15 02:12 . 2012-02-15 02:12 39936 ----a-w- c:\windows\system32\atiu9p64.dll

2012-02-15 02:12 . 2010-01-22 13:07 30208 ----a-w- c:\windows\SysWow64\atiu9pag.dll

2012-02-15 02:11 . 2012-02-15 02:11 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll

2012-02-15 02:11 . 2012-02-15 02:11 54784 ----a-w- c:\windows\system32\atimpc64.dll

2012-02-15 02:11 . 2012-02-15 02:11 54784 ----a-w- c:\windows\system32\amdpcom64.dll

2012-02-15 02:11 . 2012-02-15 02:11 53760 ----a-w- c:\windows\SysWow64\atimpc32.dll

2012-02-15 02:11 . 2012-02-15 02:11 53760 ----a-w- c:\windows\SysWow64\amdpcom32.dll

2012-02-14 21:05 . 2012-02-14 21:05 69632 ----a-w- c:\windows\system32\OpenVideo64.dll

2012-02-14 21:05 . 2012-02-14 21:05 59904 ----a-w- c:\windows\SysWow64\OpenVideo.dll

2012-02-14 21:05 . 2012-02-14 21:05 61952 ----a-w- c:\windows\system32\OVDecode64.dll

2012-02-14 21:05 . 2012-02-14 21:05 54784 ----a-w- c:\windows\SysWow64\OVDecode.dll

2012-02-14 21:05 . 2012-02-14 21:05 16507904 ----a-w- c:\windows\system32\amdocl64.dll

2012-02-14 21:04 . 2012-02-14 21:04 13238272 ----a-w- c:\windows\SysWow64\amdocl.dll

2012-02-14 21:03 . 2012-02-14 21:03 54272 ----a-w- c:\windows\system32\OpenCL.dll

2012-02-14 21:03 . 2012-02-14 21:03 48128 ----a-w- c:\windows\SysWow64\OpenCL.dll

2012-01-31 05:02 . 2012-01-31 05:02 21504 ----a-w- c:\windows\system32\kdbsdk64.dll

2012-01-31 05:00 . 2012-01-31 05:00 16896 ----a-w- c:\windows\SysWow64\kdbsdk32.dll

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"uTorrent"="c:\program files (x86)\uTorrent\uTorrent.exe" [2012-03-17 742264]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-03-07 4241512]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]

"PWRISOVM.EXE"="c:\program files (x86)\PowerISO\PWRISOVM.EXE" [2012-02-09 312376]

"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-02-14 636032]

"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

AML Device Install.lnk - c:\program files (x86)\AMD AVT\bin\kdbsync.exe [2012-1-31 10752]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]

R3 ewusbnet;HUAWEI USB-NDIS miniport;c:\windows\system32\DRIVERS\ewusbnet.sys [x]

R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\DRIVERS\ewusbdev.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]

R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [x]

R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [x]

S0 aswNdis;avast! Firewall NDIS Filter Service;c:\windows\system32\DRIVERS\aswNdis.sys [x]

S0 aswNdis2;avast! Firewall Core Firewall Service; [x]

S1 aswFW;avast! TDI Firewall driver; [x]

S1 aswKbd;aswKbd; [x]

S1 aswSnx;aswSnx; [x]

S1 aswSP;aswSP; [x]

S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]

S2 aswFsBlk;aswFsBlk; [x]

S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]

S2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe [2012-03-07 134920]

S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [x]

S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]

S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [x]

S3 enecir;ENE CIR Receiver;c:\windows\system32\DRIVERS\enecir.sys [x]

S3 L1C;NDIS Miniport Driver for Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys [x]

.

--------- x86-64 -----------

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]

@="{472083B0-C522-11CF-8763-00608CC02F24}"

[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]

2012-03-07 00:15 135408 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-12-13 13374568]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"LoadAppInit_DLLs"=0x0

.

------- Bijkomende Scan -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = Games at BigSamo.com - Play Free Online Games

mLocal Page = c:\windows\SysWOW64\blank.htm

IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000

TCP: DhcpNameServer = 192.168.1.254

FF - ProfilePath - c:\users\Wouter\AppData\Roaming\Mozilla\Firefox\Profiles\z2kkn903.default\

.

- - - - ORPHANS VERWIJDERD - - - -

.

Wow6432Node-HKLM-Run-Driver Genius - (no file)

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11g_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11g_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11g.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.10"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11g.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11g.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11g.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Voltooingstijd: 2012-03-24 18:27:39

ComboFix-quarantined-files.txt 2012-03-24 17:27

.

Pre-Run: 173.489.192.960 bytes beschikbaar

Post-Run: 173.515.149.312 bytes beschikbaar

.

- - End Of File - - 8C0EBD8E8C6AB20DCC900A4AB64C3700

kweezie wabbit · 25 maart 2012

Enig idee waar onderstaande mappen voor dienen of wat er in staat:

C:\wbfs

C:\swsetup

c:\windows\Installer

wouterter · 25 maart 2012

wbfs is van mijn WII

swsetup van mijn ENE CIR Driver

en die installer zie ik niet staan

kweezie wabbit · 26 maart 2012

Open een nieuw kladblokbestand.

Kopieer en plak daarin de onderstaande vetgedrukte tekst.

File::

c:\windows\ativpsrm.bin

Sla dit bestand op je bureaublad op als CFScript

Sleep CFScript.txt in ComboFix.exe

Dit zal ComboFix doen herstarten. Start opnieuw op als dat gevraagd wordt.

Post na herstart de inhoud van de Combofix.txt in je volgende bericht

wouterter · 26 maart 2012

volgensmij moet dit goed zijn:

ComboFix 12-03-22.01 - Wouter 26-03-2012 13:54:13.2.4 - x64

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.4022.2630 [GMT 2:00]

Gestart vanuit: c:\users\Wouter\Desktop\ComboFix.exe

gebruikte Opdracht switches :: c:\users\Wouter\Desktop\CFScript.txt

AV: avast! Internet Security *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}

FW: avast! Internet Security *Disabled* {131692B0-0864-D491-4E21-3A3A1D8BBB47}

SP: avast! Internet Security *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

FILE ::

"c:\windows\ativpsrm.bin"

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\windows\ativpsrm.bin

.

(((((((((((((((((((( Bestanden Gemaakt van 2012-02-26 to 2012-03-26 ))))))))))))))))))))))))))))))

.

2012-03-26 11:57 . 2012-03-26 11:57 -------- d-----w- c:\users\Default\AppData\Local\temp

2012-03-26 11:53 . 2012-03-26 11:53 69000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{5A723811-78CC-42DF-BDDE-3ABC30DF43ED}\offreg.dll

2012-03-25 22:05 . 2012-03-25 22:05 -------- d-sh--w- c:\windows\SysWow64\%APPDATA%

2012-03-24 22:52 . 2012-03-25 22:27 -------- d-----w- c:\program files (x86)\Cities In Motion

2012-03-24 21:35 . 2012-03-24 21:35 -------- d-----w- c:\program files (x86)\Foxit Software

2012-03-24 21:24 . 2012-03-24 21:24 -------- d-sh--w- c:\windows\system32\%APPDATA%

2012-03-24 21:24 . 2012-03-24 21:24 -------- d-----w- c:\program files (x86)\Firefly Studios

2012-03-24 21:10 . 2012-01-19 07:23 339320 ----a-w- c:\windows\SysWow64\HMIPCore.dll

2012-03-24 21:10 . 2012-03-24 21:10 -------- d-----w- c:\program files (x86)\Hide My IP

2012-03-24 20:51 . 2012-03-24 20:51 -------- d-----w- c:\program files (x86)\BBS Tools

2012-03-24 20:51 . 2012-03-24 20:51 -------- d-----w- c:\windows\BBS Tools

2012-03-24 16:47 . 2012-03-24 17:12 -------- d-----w- c:\programdata\Spybot - Search & Destroy

2012-03-24 16:47 . 2012-03-24 16:49 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy

2012-03-24 16:06 . 2012-03-24 16:06 -------- d-----w- c:\program files (x86)\GrabIt

2012-03-24 15:05 . 2012-03-24 15:06 -------- d-----w- c:\program files (x86)\ophcrack

2012-03-24 14:41 . 2012-03-26 11:36 -------- d-----w- c:\program files (x86)\Microsoft Silverlight