Laptop loopt vast

[Mennno]

Gister is mijn laptop 1x vastgelopen, aantal uren na mijn laatste post van het logje. Vandaag aankijken of het weer gebeurd en zal dan laten weten hoe het verlopen is.

[Mennno]

Gister 1x dat hij vast liep (een paar uur nadat ik mijn laatste logje had gepost), vandaag even aankijken wat mijn laptop doet en zal dan posten of er nog wat gebeurd is.

Heb wel het idee dat de laptop sneller is geworden, niet dat hij hiervoor traag was, maar nu is het opstarten zo gedaan.

PS: Sorry voor dubbele post, zag die pagina 2 niet.

31 juli 2012 aangepast door Mennno

[kape]

Download ComboFix van één van deze locaties:

Link 1

Link 2

* BELANGRIJK !!! Sla ComboFix.exe op je Bureaublad op

1. Schakel alle antivirus- en antispywareprogramma's uit, want anders kunnen ze misschien conflicteren met ComboFix. Hier is een handleiding over hoe je ze kan uitschakelen:

Klik hier

2. Het kan voorkomen dat de computer meerdere malen opnieuw gestart moet worden, dit is normaal.

3. Dubbelklik op "Combofix.exe" om de tool te starten.

4. Klik niet in het scherm van Combofix als deze actief is, hierdoor kan de 'tool' vastlopen.

Noot !!! Als er een error wordt getoond met de melding "Illegal operation attempted on a registery key that has been marked for deletion", herstart dan de computer.

5. Wanneer ComboFix klaar is, zal het het een logbestand voor je maken. Post de inhoud van dit logbestand (te vinden als C:\ComboFix.txt) in je volgende bericht.

[Mennno]

ComboFix 12-07-30.03 - Menno 31-07-2012 18:00:22.1.2 - x64

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.4026.2576 [GMT 2:00]

Gestart vanuit: c:\users\Menno\Downloads\ComboFix.exe

AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

C:\Install.exe

c:\program files (x86)\Common Files\packardbell.ico

c:\programdata\FullRemove.exe

c:\users\Menno\AppData\Roaming\.#

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\chrome.manifest

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\chrome\content\background.html

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\chrome\content\browser.xul

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\chrome\content\crossrider.js

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\chrome\content\crossriderapi.js

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\chrome\content\dialog.js

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\chrome\content\lib\faye-browser-min.js

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\chrome\content\manage-apps-style.css

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\chrome\content\manage-apps.html

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\chrome\content\messaging.js

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\chrome\content\options.js

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\chrome\content\options.xul

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\chrome\content\push.html

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\chrome\content\search_dialog.xul

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\chrome\content\update.html

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\defaults\preferences\prefs.js

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\install.rdf

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\locale\en-US\translations.dtd

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\skin\button1.png

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\skin\button2.png

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\skin\button3.png

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\skin\button4.png

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\skin\button5.png

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\skin\crossrider_statusbar.png

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\skin\icon128.png

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\skin\icon16.png

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\skin\icon24.png

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\skin\icon48.png

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\skin\panelarrow-up.png

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\skin\popup.css

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\skin\popup.html

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\skin\popup_binding.xml

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\skin\skin.css

c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\extensions\crossriderapp498@crossrider.com\skin\update.css

c:\users\Menno\AppData\Roaming\RSBot.db

c:\users\Menno\videos\SRTtoSUBv11.exe

c:\windows\iun6002.exe

c:\windows\SysWow64\weber

.

.

(((((((((((((((((((( Bestanden Gemaakt van 2012-06-28 to 2012-07-31 ))))))))))))))))))))))))))))))

.

.

2012-07-31 16:20 . 2012-07-31 16:20 -------- d-----w- c:\users\Het Gezin\AppData\Local\temp

2012-07-31 16:20 . 2012-07-31 16:20 -------- d-----w- c:\users\Default\AppData\Local\temp

2012-07-31 10:39 . 2012-06-29 10:04 9133488 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{96E7FE92-A23A-4405-B270-3D2A6114F114}\mpengine.dll

2012-07-30 18:04 . 2012-07-30 18:04 -------- d-----w- c:\program files (x86)\YTD Toolbar

2012-07-30 10:45 . 2012-07-30 10:45 388096 ----a-r- c:\users\Menno\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

2012-07-30 10:45 . 2012-07-30 10:45 -------- d-----w- c:\program files (x86)\Trend Micro

2012-07-30 10:29 . 2012-07-30 10:29 -------- d-----w- c:\program files\Speccy

2012-07-22 12:24 . 2012-07-22 12:24 -------- d-----w- c:\program files (x86)\uTorrent

2012-07-22 12:24 . 2012-07-31 15:59 -------- d-----w- c:\users\Menno\AppData\Roaming\uTorrent

2012-07-20 23:14 . 2012-07-21 13:09 -------- d-----w- c:\users\Menno\AppData\Roaming\Systweak

2012-07-20 23:14 . 2012-07-16 12:25 18856 ----a-w- c:\windows\system32\roboot64.exe

2012-07-20 23:10 . 2012-07-20 23:10 22528 ----a-w- c:\windows\system32\drivers\nhcDriver.sys

2012-07-20 23:10 . 2012-07-20 23:10 -------- d-----w- c:\program files (x86)\Notebook Hardware Control

2012-07-20 14:36 . 2012-07-20 14:36 -------- d-----w- c:\program files\CCleaner

2012-07-20 10:39 . 2012-06-12 03:08 3148800 ----a-w- c:\windows\system32\win32k.sys

2012-07-04 14:36 . 2012-07-04 14:36 -------- d-----w- c:\programdata\YTD Video Downloader

.

.

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-07-28 15:29 . 2012-04-23 20:30 426184 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe

2012-07-28 15:29 . 2011-06-08 19:29 70344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2012-07-20 10:33 . 2010-12-15 01:28 59701280 ----a-w- c:\windows\system32\MRT.exe

2012-06-28 18:23 . 2012-05-05 11:13 476976 ----a-w- c:\windows\SysWow64\npdeployJava1.dll

2012-06-28 18:23 . 2011-01-29 19:41 472880 ----a-w- c:\windows\SysWow64\deployJava1.dll

2012-06-17 08:56 . 2012-06-17 08:56 283200 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys

2012-06-02 22:19 . 2012-06-22 10:23 38424 ----a-w- c:\windows\system32\wups.dll

2012-06-02 22:19 . 2012-06-22 10:24 2428952 ----a-w- c:\windows\system32\wuaueng.dll

2012-06-02 22:19 . 2012-06-22 10:24 57880 ----a-w- c:\windows\system32\wuauclt.exe

2012-06-02 22:19 . 2012-06-22 10:24 44056 ----a-w- c:\windows\system32\wups2.dll

2012-06-02 22:19 . 2012-06-22 10:23 701976 ----a-w- c:\windows\system32\wuapi.dll

2012-06-02 22:15 . 2012-06-22 10:24 2622464 ----a-w- c:\windows\system32\wucltux.dll

2012-06-02 22:15 . 2012-06-22 10:23 99840 ----a-w- c:\windows\system32\wudriver.dll

2012-06-02 13:19 . 2012-06-22 10:22 186752 ----a-w- c:\windows\system32\wuwebv.dll

2012-06-02 13:15 . 2012-06-22 10:22 36864 ----a-w- c:\windows\system32\wuapp.exe

2012-05-31 10:25 . 2010-12-14 20:39 279656 ------w- c:\windows\system32\MpSigStub.exe

2012-05-08 13:18 . 2011-10-22 13:10 98848 ----a-w- c:\windows\system32\drivers\avgntflt.sys

2012-05-08 13:18 . 2011-10-22 13:10 132832 ----a-w- c:\windows\system32\drivers\avipbb.sys

2012-05-04 11:06 . 2012-06-13 08:35 5559664 ----a-w- c:\windows\system32\ntoskrnl.exe

2012-05-04 10:03 . 2012-06-13 08:35 3968368 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe

2012-05-04 10:03 . 2012-06-13 08:35 3913072 ----a-w- c:\windows\SysWow64\ntoskrnl.exe

.

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Spotify Web Helper"="c:\users\Menno\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2012-06-04 932528]

"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-04-17 3671872]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe" [2010-03-08 258560]

"OOTag"="c:\program files (x86)\Packard Bell\OOBEOffer\OOTag.exe" [2010-02-23 13856]

"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2009-08-18 1157640]

"VideoWebCamera"="c:\program files (x86)\VideoWebCamera\VideoWebCamera.exe" [2010-03-11 1541472]

"IJNetworkScanUtility"="c:\program files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe" [2009-05-19 136544]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]

"RIMBBLaunchAgent.exe"="c:\program files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe" [2011-11-02 90448]

"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-05-30 59280]

"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2012-05-08 348624]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]

"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2012-04-18 421888]

"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-06-07 421776]

.

c:\users\Menno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

OneNote 2010 Schermopname en Snel starten.lnk - c:\program files (x86)\Microsoft Office\Office14\ONENOTEM.EXE [2010-12-21 227712]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"aux1"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R2 gupdate;Google Updateservice (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-14 135664]

R2 HsfXAudioService;HsfXAudioService;c:\windows\system32\svchost.exe [2009-07-14 27136]

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-02-29 158856]

R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-28 250056]

R3 gupdatem;Google Update-service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-14 135664]

R3 NETw5s64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;c:\windows\system32\DRIVERS\NETw5s64.sys [2009-10-05 6952960]

R3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]

R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]

R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2009-09-02 225280]

R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]

R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]

R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]

R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-02-15 52736]

R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-12-15 1255736]

R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2008-06-16 55024]

S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2011-09-15 27760]

S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-06-17 283200]

S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]

S2 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;c:\program files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe [2009-10-09 169312]

S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]

S2 AntiVirSchedulerService;Avira Scheduler;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2012-05-08 86224]

S2 ePowerSvc;Acer ePower Service;c:\program files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [2010-02-26 841248]

S2 GREGService;GREGService;c:\program files (x86)\Packard Bell\Registration\GREGsvc.exe [2010-01-08 23584]

S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe [2010-03-08 250368]

S2 Updater Service;Updater Service;c:\program files\Packard Bell\Packard Bell Updater\UpdaterService.exe [2010-01-28 243232]

S3 IntcHdmiAddService;Intel® High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [2009-07-09 139264]

S3 k57nd60a;Broadcom NetLink Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [2009-06-06 317480]

S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]

.

.

--- Andere Services/Drivers In Geheugen ---

.

*NewlyCreated* - WS2IFSL

.

Inhoud van de 'Gedeelde Taken' map

.

2012-07-31 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-23 15:29]

.

2012-07-31 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-14 20:48]

.

2012-07-31 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-12-14 20:48]

.

2012-07-31 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-470499141-1940763738-2483332497-1001Core.job

- c:\users\Menno\AppData\Local\Google\Update\GoogleUpdate.exe [2010-12-15 20:54]

.

2012-07-31 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-470499141-1940763738-2483332497-1001UA.job

- c:\users\Menno\AppData\Local\Google\Update\GoogleUpdate.exe [2010-12-15 20:54]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-07-28 7982112]

"Acer ePower Management"="c:\program files\Packard Bell\Packard Bell Power Management\ePowerTray.exe" [2010-02-26 818720]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-03-15 165912]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-03-15 387608]

"Persistence"="c:\windows\system32\igfxpers.exe" [2010-03-15 365592]

"PLFSetI"="c:\windows\PLFSetI.exe" [2009-12-16 206208]

"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2009-07-26 2184520]

"CanonSolutionMenu"="c:\program files (x86)\Canon\SolutionMenu\CNSLMAIN.exe" [2009-03-17 767312]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"LoadAppInit_DLLs"=0x0

.

------- Bijkomende Scan -------

.

uLocal Page = c:\windows\system32\blank.htm

mStart Page = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0413&m=easynote_lj65&r=27361210r215l0434z175f47n2r750

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyOverride = *.local

IE: &Verzenden naar OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105

IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000

IE: E&xporteren naar Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000

IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html

TCP: DhcpNameServer = 213.46.228.196 62.179.104.196

FF - ProfilePath - c:\users\Menno\AppData\Roaming\Mozilla\Firefox\Profiles\pke2uvtt.default\

FF - prefs.js: browser.search.selectedEngine - Yahoo

FF - prefs.js: keyword.URL - hxxp://nl.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=937811&p=

.

- - - - ORPHANS VERWIJDERD - - - -

.

Toolbar-Locked - (no file)

Wow6432Node-HKCU-Run-EA Core - c:\program files (x86)\Electronic Arts\EADM\Core.exe

Wow6432Node-HKLM-Run-UnlockerAssistant - c:\program files (x86)\Unlocker\UnlockerAssistant.exe

Toolbar-Locked - (no file)

HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe

AddRemove-RewardsArcade - c:\program files (x86)\RewardsArcade\Uninstall.exe

.

.

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

.

[HKEY_USERS\S-1-5-21-470499141-1940763738-2483332497-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="WindowsLiveMail.Email.1"

.

[HKEY_USERS\S-1-5-21-470499141-1940763738-2483332497-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="WindowsLiveMail.VCard.1"

.

[HKEY_USERS\S-1-5-21-470499141-1940763738-2483332497-1001_Classes\Wow6432Node\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]

@Denied: (Full) (Everyone)

@Allowed: (Read) (RestrictedCode)

"scansk"=hex(0):f5,d6,b0,c7,b0,58,08,7f,01,5f,ee,07,5f,4d,63,cf,a0,8d,f1,44,b1,

b1,80,d6,55,9f,1c,31,64,2a,d7,36,b2,16,25,19,c4,53,c0,06,00,00,00,00,00,00,\

.

[HKEY_USERS\S-1-5-21-470499141-1940763738-2483332497-1001_Classes\Wow6432Node\CLSID\{ed28653d-3509-4458-b2b4-6e87e86eb8d7}]

@Denied: (Full) (Everyone)

@Allowed: (Read) (RestrictedCode)

"Model"=dword:000000c9

"Therad"=dword:00000016

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_268_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_3_300_268_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_268.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_268.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_268.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_3_300_268.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*]

@="?????????????????? v1"

.

[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID]

@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"

.

[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*]

@="?????????????????? v2"

.

[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID]

@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"

.

[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]

@Denied: (A) (Everyone)

"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"

.

[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]

@Denied: (A) (Everyone)

.

[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]

"Key"="ActionsPane3"

"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

------------------------ Andere Aktieve Processen ------------------------

.

c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe

c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

c:\program files (x86)\Canon\IJPLM\IJPLMSVC.EXE

.

**************************************************************************

.

Voltooingstijd: 2012-07-31 18:45:18 - machine werd herstart

ComboFix-quarantined-files.txt 2012-07-31 16:45

.

Pre-Run: 220.864.393.216 bytes beschikbaar

Post-Run: 220.685.783.040 bytes beschikbaar

.

- - End Of File - - 866386AB02FF08CFA2C327F82BFB7E5D

[Mennno]

Laptop liep net voor het eerst vast vandaag.

EDIT: In totaal al 4x vast gelopen.

31 juli 2012 aangepast door Mennno

[Mennno]

Opeens verdwijnen er nu ook een aantal afbeeldingen, kan dat door de scans komen?

EDIT: Laat maar, heb er nu geen last van, zal wel een internet fout zijn.

31 juli 2012 aangepast door Mennno

[kape]

Download en installeer Speccy.

Tijdens de installatie heb je nu de mogelijkheid om Nederlands als taal te selecteren.

Als je niet wil dat Google Chrome op je pc als standaard webbrowser wordt geïnstalleerd, moet je de 2 vinkjes wegdoen !!!

Start nu het programma en er zal een overzicht gemaakt worden van je hardware.

Als dit gereed is selecteer je bovenaan " Bestand - Publiceer Snapshot " en vervolgens bevestig je die keuze met " Ja ".

In het venster dat nu opent krijg je een link te zien, kopieer nu die link en plak die in je volgende bericht.

Wil je in woord en beeld zien hoe je een logje van Speccy maakt en plaatst kun je dat Hier lezen.

Ook Dit (KLIK) filmpje laat zien hoe je een Speccy-logje kan plakken in je antwoord.

Na het plaatsen van je logje wordt dit door een expert nagekeken.

[Mennno]

http://speccy.piriform.com/results/8qq0aC2yJTNILntA6716IwY

[Asus]

Download HD Tune en sla het bestand op.

Installeer HD Tune en start deze na de installatie op.

Vervolgens ga je naar het tabblad Error Scan, selecteer de harde schijf die je wil controleren en druk op Start.

De controle kan een hele tijd in beslag nemen afhankelijk van de grootte van de te controleren harde schijf.

Wat is het resultaat van deze test?

[Mennno]

De scan zal over 2 uur klaar zijn.