Laptop bevriest

[n73user]

Hallo bedankt voor jullie tijd alvast

malware programma had ik inderdaad ook al maar hieronder een logfile ervan

Malwarebytes Anti-Malware 1.65.1.1000

Malwarebytes : Free anti-malware download

Databaseversie: v2012.12.16.08

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 9.0.8112.16421

MikeDeb :: MIKEDEB-PC [administrator]

16-12-2012 18:38:35

mbam-log-2012-12-16 (18-38-35).txt

Scantype: Snelle scan

Ingeschakelde scanopties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM

Uitgeschakelde scanopties: P2P

Objecten gescand: 213857

Verstreken tijd: 5 minuut/minuten, 38 seconde(n)

Geheugenprocessen gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

Geheugenmodulen gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

Registersleutels gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

Registerwaarden gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

Registerdata gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

Mappen gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

Bestanden gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

(einde)

- - - Updated - - -

Hier nog een file van de hijackthis

Malwarebytes Anti-Malware 1.65.1.1000

www.malwarebytes.org

Databaseversie: v2012.12.16.08

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 9.0.8112.16421

MikeDeb :: MIKEDEB-PC [administrator]

16-12-2012 18:38:35

mbam-log-2012-12-16 (18-38-35).txt

Scantype: Snelle scan

Ingeschakelde scanopties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM

Uitgeschakelde scanopties: P2P

Objecten gescand: 213857

Verstreken tijd: 5 minuut/minuten, 38 seconde(n)

Geheugenprocessen gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

Geheugenmodulen gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

Registersleutels gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

Registerwaarden gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

Registerdata gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

Mappen gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

Bestanden gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

(einde)

- - - Updated - - -

Hier nog een logfile van de hijackthis

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 18:46:23, on 16-12-2012

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v9.00 (9.00.8112.16457)

Boot mode: Normal

Running processes:

C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe

C:\Program Files (x86)\Launch Manager\LManager.exe

C:\Program Files (x86)\AVG\AVG2013\avgui.exe

C:\Program Files (x86)\AVG\AVG2013\avgcfgex.exe

C:\Program Files (x86)\Twonky\TwonkyServer\twonkytray.exe

C:\Program Files (x86)\Windows Live\Mail\wlmail.exe

C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

C:\Program Files (x86)\Mozilla Firefox\firefox.exe

C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe

C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe

C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_5_502_135.exe

C:\Program Files (x86)\Windows Media Player\wmplayer.exe

C:\Users\MikeDeb\Downloads\HijackThis.exe

C:\Windows\SysWOW64\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&m=aspire_7740&r=27360912e226l0428z115t4411c866

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=110824&tt=031012_ccp_4012_6&babsrc=HP_ss&mntrId=3458623b0000000000000017c4e417ba

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&m=aspire_7740&r=27360912e226l0428z115t4411c866

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&m=aspire_7740&r=27360912e226l0428z115t4411c866

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

F2 - REG:system.ini: UserInit=userinit.exe

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll

O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

O4 - HKLM\..\Run: [backupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k

O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe

O4 - HKLM\..\Run: [switchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} (SysInfo Class) - http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.5.11.0.cab

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Acer\Acer VCM\Skype4COM.dll

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agr64svc.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgfws.exe

O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe

O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe

O23 - Service: Broadcom Management Agent (BrcmMgmtAgent) - Broadcom Corporation - C:\Program Files\Broadcom\MgmtAgent\BrcmMgmtAgent.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: GRegService (Greg_Service) - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GregHSRW.exe

O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: MyWinLocker Service (MWLService) - Egis Technology Inc. - C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Nalpeiron Licensing Service (nlsX86cc) - Nalpeiron Ltd. - C:\Windows\SysWOW64\nlssrv32.exe

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: Raw Socket Service (RS_Service) - Acer Incorporated - C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: TurboBoost - Intel® Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe

O23 - Service: TwonkyProxy - Unknown owner - C:\Program Files (x86)\Twonky\TwonkyServer\twonkyproxy.exe

O23 - Service: TwonkyServer - PacketVideo - C:\Program Files (x86)\Twonky\TwonkyServer\twonkystarter.exe

O23 - Service: TwonkyWebDav - Unknown owner - C:\Program Files (x86)\Twonky\TwonkyServer\twonkywebdav.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: Intel® Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

O23 - Service: Updater Service - Acer - C:\Program Files\Acer\Acer Updater\UpdaterService.exe

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--

End of file - 10540 bytes

[kape]

Heb je iets nieuw gedownload (van bedenkelijk allooi) ? Want nu komt plots ook Babylon opduiken op je PC ?

Verwijder met HijackThis nog volgende lijntje:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?affID=110824&tt=031012_ccp_4012_6&babsrc=HP_ss&mntrId=3458623b0000000000000017c4e417ba

Download AdwCleaner by Xplode naar je bureaublad.

• Sluit alle openstaande vensters.
  
• Vista en Windows 7 gebruikers: Rechtsklik op AdwCleaner en selecteer als Administrator uitvoeren...
  
• Voor XP: Gewoon dubbelklikken op AdwCleaner.
  
• Klik vervolgens op Verwijderen.
  
• Klik bij AdwCleaner – Informatie op OK
  
• Klik bij AdwCleaner – Herstarten Noodzakelijk op OK
  

Dat tijdens de actie de snelkoppelingen verdwijnen, is normaal. Nadat de PC opnieuw is opgestart, opent een logfile. Post de inhoud van dit log in je volgende bericht.

[n73user]

Hallo, bedankt weer voor je tijd en reactie

Ik heb naar mijn weten niets gedownload, ging ook weer goed tot een half uur geleden, bevroor het beeld terwijl ik aan het marktplaatsen was.

Nu dus de regel verwijderd in hijack this die je aangaf en nu een nieuwe log file gemaakt met dat nieuwe programma

Hoor graag van jullie

# AdwCleaner v2.101 - Verslag gemaakt op 17/12/2012 om 19:00:34

# Geactualiseerd op 16/12/2012 door Xplode

# Besturingssysteem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Gebruiker : MikeDeb - MIKEDEB-PC

# Opstarten Modus : Normale modus

# Gelanceerd vanaf : C:\Users\MikeDeb\Desktop\adwcleaner.exe

# Optie [Verwijderen]

***** [Diensten] *****

***** [Files / Mappen] *****

File Verwijdert : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml

File Verwijdert : C:\Users\MikeDeb\AppData\Roaming\Mozilla\Firefox\Profiles\886e2vjg.default\searchplugins\browsemngr.xml

File Verwijdert : C:\Users\MikeDeb\AppData\Roaming\Mozilla\Firefox\Profiles\886e2vjg.default\searchplugins\SweetIm.xml

Map Verwijdert : C:\ProgramData\Babylon

Map Verwijdert : C:\ProgramData\Partner

Map Verwijdert : C:\Users\MikeDeb\AppData\Roaming\Babylon

***** [Register] *****

Sleutel Verwijdert : HKCU\Software\AppDataLow\Software\Crossrider

Sleutel Verwijdert : HKCU\Software\DataMngr

Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings

Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}

Sleutel Verwijdert : HKCU\Software\SweetIM

Sleutel Verwijdert : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Sleutel Verwijdert : HKLM\Software\Babylon

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Prod.cap

Sleutel Verwijdert : HKLM\Software\DataMngr

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011441179}

Sleutel Verwijdert : HKLM\Software\SweetIM

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohd****efph

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011441179}

Waarde Verwijdert : HKCU\Software\Microsoft\Internet Explorer\New Windows\Allow [*.crossrider.com]

Waarde Verwijdert : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]

Waarde Verwijdert : HKLM\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow [*.crossrider.com]

***** [browsers] *****

-\\ Internet Explorer v9.0.8112.16457

[OK] Het register bevat geen enkele ongeoorloofde invoer.

-\\ Mozilla Firefox v17.0.1 (nl)

Profielnaam : default

File : C:\Users\MikeDeb\AppData\Roaming\Mozilla\Firefox\Profiles\886e2vjg.default\prefs.js

C:\Users\MikeDeb\AppData\Roaming\Mozilla\Firefox\Profiles\886e2vjg.default\user.js ... Verwijdert !

Verwijdert : user_pref("browser.newtab.url", "hxxp://home.sweetim.com/?src=97&barid={4568F84C-E687-40AF-A3E2-A35F[...]

Verwijdert : user_pref("browser.search.defaultenginename", "SweetIM Search");

Verwijdert : user_pref("extensions.BabylonToolbar.admin", false);

Verwijdert : user_pref("extensions.BabylonToolbar.aflt", "babsst");

Verwijdert : user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");

Verwijdert : user_pref("extensions.BabylonToolbar.dfltLng", "en");

Verwijdert : user_pref("extensions.BabylonToolbar.excTlbr", false);

Verwijdert : user_pref("extensions.BabylonToolbar.id", "3458623b0000000000000017c4e417ba");

Verwijdert : user_pref("extensions.BabylonToolbar.instlDay", "15616");

Verwijdert : user_pref("extensions.BabylonToolbar.instlRef", "sst");

Verwijdert : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");

Verwijdert : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");

Verwijdert : user_pref("extensions.BabylonToolbar.tlbrId", "tb9");

Verwijdert : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=[...]

Verwijdert : user_pref("extensions.BabylonToolbar.vrsn", "1.8.0.7");

Verwijdert : user_pref("extensions.BabylonToolbar.vrsni", "1.8.0.7");

Verwijdert : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");

Verwijdert : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.8.0.720:58:01");

Verwijdert : user_pref("keyword.URL", "hxxp://search.sweetim.com/search.asp?barid={4568F84C-E687-40AF-A3E2-A35F09[...]

*************************

AdwCleaner[s1].txt - [4460 octets] - [17/12/2012 19:00:34]

########## EOF - C:\AdwCleaner[s1].txt - [4520 octets] ##########

[kape]

Download ComboFix van één van deze locaties:

Link 1

Link 2

* BELANGRIJK !!! Sla ComboFix.exe op je Bureaublad op

1. Schakel alle antivirus- en antispywareprogramma's uit, want anders kunnen ze misschien conflicteren met ComboFix. Hier is een handleiding over hoe je ze kan uitschakelen:

Klik hier

2. Het kan voorkomen dat de computer meerdere malen opnieuw gestart moet worden, dit is normaal.

3. Dubbelklik op "Combofix.exe" om de tool te starten.

4. Klik niet in het scherm van Combofix als deze actief is, hierdoor kan de 'tool' vastlopen.

Noot !!! Als er een error wordt getoond met de melding "Illegal operation attempted on a registery key that has been marked for deletion", herstart dan de computer.

5. Wanneer ComboFix klaar is, zal het het een logbestand voor je maken. Post de inhoud van dit logbestand (te vinden als C:\ComboFix.txt) in je volgende bericht.

[n73user]

alsjeblieft log file van combofix

ComboFix 12-12-17.02 - MikeDeb 17-12-2012 20:04:47.1.4 - x64

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.3765.2156 [GMT 1:00]

Gestart vanuit: c:\users\MikeDeb\Desktop\ComboFix.exe

AV: AVG Internet Security 2013 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}

FW: AVG Internet Security 2013 *Disabled* {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2}

SP: AVG Internet Security 2013 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664}

SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\program files (x86)\Common Files\Acer GameZone online.ico

c:\windows\wininit.ini

.

.

(((((((((((((((((((( Bestanden Gemaakt van 2012-11-17 to 2012-12-17 ))))))))))))))))))))))))))))))

.

.

2012-12-17 19:09 . 2012-12-17 19:09 -------- d-----w- c:\users\Default\AppData\Local\temp

2012-12-16 11:41 . 2012-07-24 09:00 3718144 ----a-w- c:\windows\system32\drivers\athrx.sys

2012-12-16 11:33 . 2012-12-16 11:33 -------- d-----w- c:\programdata\Atheros

2012-12-16 10:56 . 2012-12-16 11:00 -------- d-----w- c:\program files (x86)\SystemRequirementsLab

2012-12-12 07:49 . 2012-11-09 05:45 2048 ----a-w- c:\windows\system32\tzres.dll

2012-12-09 15:57 . 2012-12-09 15:57 -------- d-----w- c:\users\Default\AppData\Roaming\TuneUp Software

2012-12-02 12:21 . 2012-12-02 12:21 -------- d-----w- c:\program files\Broadcom

2012-12-02 12:20 . 2012-12-02 12:20 -------- d-----w- c:\windows\Dell

2012-12-02 12:19 . 2012-12-02 12:19 -------- d-----w- c:\users\MikeDeb\AppData\Local\Downloaded Installations

2012-12-02 12:14 . 2012-12-02 12:15 -------- d-----w- c:\program files\Microsoft Mouse and Keyboard Center

2012-12-02 11:59 . 2012-12-02 11:59 -------- d-----w- c:\program files\Realtek

2012-12-02 11:59 . 2012-12-02 11:59 -------- d-----w- c:\windows\SysWow64\RTCOM

2012-12-02 11:57 . 2005-11-13 22:19 5632 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\DotNetInstaller.exe

2012-12-02 11:54 . 2012-12-02 11:54 -------- d-----w- c:\program files (x86)\Realtek

2012-12-02 11:52 . 2012-12-02 11:52 -------- d-----w- c:\program files\Synaptics

2012-12-02 11:41 . 2012-12-02 11:41 -------- d-----w- c:\program files (x86)\Driver-Soft

2012-12-02 11:33 . 2012-12-16 11:34 -------- d-----w- c:\programdata\DriverGenius

2012-12-02 11:26 . 2012-12-02 19:55 -------- d-----w- c:\users\MikeDeb\AppData\Roaming\Systweak

2012-11-29 18:36 . 2012-11-29 18:36 -------- d-----w- c:\users\MikeDeb\AppData\Roaming\AVG2013

2012-11-29 18:33 . 2012-11-29 18:34 -------- d-----w- c:\programdata\AVG2013

2012-11-29 18:31 . 2012-12-01 21:04 -------- d-----w- c:\users\MikeDeb\AppData\Local\Avg2013

2012-11-29 18:31 . 2012-11-29 18:31 -------- d-----w- c:\users\MikeDeb\AppData\Local\MFAData

2012-11-29 15:40 . 2012-11-29 15:40 -------- d-----w- c:\program files\Yamicsoft

2012-11-28 16:06 . 2012-12-12 09:04 -------- d-----w- c:\program files (x86)\SpeedFan

2012-11-28 16:04 . 2000-01-04 05:39 212992 ----a-w- c:\program files (x86)\Common Files\InstallShield\Engine\6\Intel 32\ILog.dll

2012-11-27 15:40 . 2012-05-04 11:00 366592 ----a-w- c:\windows\system32\qdvd.dll

2012-11-27 15:40 . 2012-05-04 09:59 514560 ----a-w- c:\windows\SysWow64\qdvd.dll

2012-11-27 15:40 . 2012-08-24 18:13 154480 ----a-w- c:\windows\system32\drivers\ksecpkg.sys

2012-11-27 15:40 . 2012-08-24 18:09 458712 ----a-w- c:\windows\system32\drivers\cng.sys

2012-11-27 15:40 . 2012-08-24 18:05 340992 ----a-w- c:\windows\system32\schannel.dll

2012-11-27 15:40 . 2012-08-24 18:04 307200 ----a-w- c:\windows\system32\ncrypt.dll

2012-11-27 15:40 . 2012-08-24 16:57 247808 ----a-w- c:\windows\SysWow64\schannel.dll

2012-11-27 15:40 . 2012-08-24 16:57 220160 ----a-w- c:\windows\SysWow64\ncrypt.dll

2012-11-27 15:40 . 2012-08-24 18:03 1448448 ----a-w- c:\windows\system32\lsasrv.dll

2012-11-27 15:40 . 2012-08-24 16:57 22016 ----a-w- c:\windows\SysWow64\secur32.dll

2012-11-27 15:40 . 2012-08-24 16:53 96768 ----a-w- c:\windows\SysWow64\sspicli.dll

2012-11-27 15:30 . 2012-11-27 15:30 -------- d-----w- c:\programdata\Intel

2012-11-25 13:01 . 2012-08-21 21:01 245760 ----a-w- c:\windows\system32\OxpsConverter.exe

2012-11-19 12:53 . 2012-11-19 12:53 -------- d-----w- c:\windows\system32\SPReview

2012-11-19 12:51 . 2012-11-19 12:51 -------- d-----w- c:\windows\system32\EventProviders

2012-11-19 12:50 . 2010-11-05 01:57 48976 ----a-w- c:\windows\system32\netfxperf.dll

2012-11-19 12:50 . 2010-11-05 01:57 1942856 ----a-w- c:\windows\system32\dfshim.dll

2012-11-19 12:48 . 2010-11-20 13:27 303616 ----a-w- c:\windows\system32\scansetting.dll

2012-11-19 12:47 . 2010-11-20 13:34 2560 ----a-w- c:\windows\system32\drivers\nl-NL\rdpwd.sys.mui

2012-11-19 12:47 . 2010-11-20 13:27 3072 ----a-w- c:\windows\system32\drivers\nl-NL\Dot4usb.sys.mui

2012-11-19 12:47 . 2010-11-20 13:26 399872 ----a-w- c:\windows\system32\dpx.dll

2012-11-19 12:47 . 2010-11-20 12:21 189952 ----a-w- c:\windows\SysWow64\wdscore.dll

2012-11-19 12:47 . 2010-11-20 12:21 189952 ----a-w- c:\windows\SysWow64\sqmapi.dll

2012-11-19 12:47 . 2010-11-20 12:21 363008 ----a-w- c:\windows\SysWow64\wbemcomn.dll

2012-11-19 12:47 . 2010-11-20 12:21 189952 ----a-w- c:\program files (x86)\Windows Portable Devices\sqmapi.dll

2012-11-19 12:47 . 2010-11-20 12:19 606208 ----a-w- c:\windows\SysWow64\wbem\fastprox.dll

2012-11-19 12:45 . 2010-11-20 13:27 529408 ----a-w- c:\windows\system32\wbemcomn.dll

2012-11-19 12:45 . 2010-11-20 13:27 244736 ----a-w- c:\program files\Windows Portable Devices\sqmapi.dll

2012-11-19 12:45 . 2010-11-20 13:27 244736 ----a-w- c:\windows\system32\sqmapi.dll

2012-11-19 12:37 . 2012-12-12 10:01 67413224 ----a-w- c:\windows\system32\MRT.exe

2012-11-19 10:32 . 2012-11-30 10:55 -------- d-----w- c:\users\MikeDeb\AppData\Roaming\GrabIt

2012-11-19 10:30 . 2012-11-19 10:30 -------- d-----w- c:\program files (x86)\GrabIt

2012-11-19 09:50 . 2012-11-19 09:50 -------- d-----w- c:\users\MikeDeb\AppData\Roaming\Malwarebytes

2012-11-19 09:50 . 2012-11-19 09:50 -------- d-----w- c:\programdata\Malwarebytes

2012-11-19 09:50 . 2012-11-19 09:51 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware

2012-11-19 09:50 . 2012-09-29 18:54 25928 ----a-w- c:\windows\system32\drivers\mbam.sys

2012-11-19 08:14 . 2012-11-19 08:14 -------- d-----w- c:\program files\CCleaner

.

.

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-12-12 14:32 . 2012-09-30 12:29 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2012-12-12 14:32 . 2012-09-30 12:29 697272 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe

2012-11-19 13:00 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll

2012-11-19 13:00 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll

2012-11-03 01:41 . 2009-11-05 00:36 53248 ----a-w- c:\windows\SysWow64\CSVer.dll

2012-11-02 14:38 . 2012-11-02 14:38 862664 ----a-w- c:\windows\SysWow64\msvcr110.dll

2012-11-02 14:38 . 2012-11-02 14:38 828872 ----a-w- c:\windows\system32\msvcr110.dll

2012-11-02 14:38 . 2012-11-02 14:38 75928 ----a-w- c:\windows\system32\drivers\dc3d.sys

2012-11-02 14:38 . 2012-11-02 14:38 661448 ----a-w- c:\windows\system32\msvcp110.dll

2012-11-02 14:38 . 2012-11-02 14:38 534480 ----a-w- c:\windows\SysWow64\msvcp110.dll

2012-11-02 14:38 . 2012-11-02 14:38 50856 ----a-w- c:\windows\system32\drivers\point64.sys

2012-11-02 14:38 . 2012-11-02 14:38 354264 ----a-w- c:\windows\system32\vccorlib110.dll

2012-11-02 14:38 . 2012-11-02 14:38 251864 ----a-w- c:\windows\SysWow64\vccorlib110.dll

2012-11-02 14:38 . 2012-11-02 14:38 2177688 ----a-w- c:\windows\system32\coin92.dll

2012-11-02 14:38 . 2012-11-02 14:38 1795952 ----a-w- c:\windows\system32\WdfCoInstaller01011.dll

2012-10-22 12:02 . 2012-10-22 12:02 154464 ----a-w- c:\windows\system32\drivers\avgidsdrivera.sys

2012-10-22 11:12 . 2012-10-22 11:12 108008 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll

2012-10-22 11:12 . 2012-10-22 11:13 289768 ----a-w- c:\windows\system32\javaws.exe

2012-10-22 11:12 . 2012-10-22 11:12 189416 ----a-w- c:\windows\system32\javaw.exe

2012-10-22 11:12 . 2012-10-22 11:13 916456 ----a-w- c:\windows\system32\deployJava1.dll

2012-10-22 11:12 . 2012-10-22 11:13 1034216 ----a-w- c:\windows\system32\npDeployJava1.dll

2012-10-22 11:12 . 2012-10-22 11:12 188904 ----a-w- c:\windows\system32\java.exe

2012-10-16 08:38 . 2012-11-28 06:50 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll

2012-10-16 08:38 . 2012-11-28 06:50 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll

2012-10-16 07:39 . 2012-11-28 06:50 561664 ----a-w- c:\windows\apppatch\AcLayers.dll

2012-10-15 02:48 . 2012-10-15 02:48 63328 ----a-w- c:\windows\system32\drivers\avgidsha.sys

2012-10-09 17:11 . 2012-10-09 17:12 746984 ----a-w- c:\windows\SysWow64\deployJava1.dll

2012-10-09 17:11 . 2012-10-09 17:12 821736 ----a-w- c:\windows\SysWow64\npDeployJava1.dll

2012-10-09 17:11 . 2012-10-09 17:12 95208 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll

2012-10-05 02:32 . 2012-10-05 02:32 111456 ----a-w- c:\windows\system32\drivers\avgmfx64.sys

2012-10-04 16:40 . 2012-12-12 07:49 44032 ----a-w- c:\windows\apppatch\acwow64.dll

2012-10-02 02:30 . 2012-10-02 02:30 185696 ----a-w- c:\windows\system32\drivers\avgldx64.sys

2012-10-01 21:11 . 2012-10-01 21:11 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe

2012-10-01 21:11 . 2012-10-01 21:11 161792 ----a-w- c:\windows\SysWow64\msls31.dll

2012-10-01 21:11 . 2012-10-01 21:11 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll

2012-10-01 21:11 . 2012-10-01 21:11 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll

2012-10-01 21:11 . 2012-10-01 21:11 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe

2012-10-01 21:11 . 2012-10-01 21:11 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll

2012-10-01 21:11 . 2012-10-01 21:11 63488 ----a-w- c:\windows\SysWow64\tdc.ocx

2012-10-01 21:11 . 2012-10-01 21:11 367104 ----a-w- c:\windows\SysWow64\html.iec

2012-10-01 21:11 . 2012-10-01 21:11 74752 ----a-w- c:\windows\SysWow64\iesetup.dll

2012-10-01 21:11 . 2012-10-01 21:11 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll

2012-10-01 21:11 . 2012-10-01 21:11 152064 ----a-w- c:\windows\SysWow64\wextract.exe

2012-10-01 21:11 . 2012-10-01 21:11 150528 ----a-w- c:\windows\SysWow64\iexpress.exe

2012-10-01 21:11 . 2012-10-01 21:11 11776 ----a-w- c:\windows\SysWow64\mshta.exe

2012-10-01 21:11 . 2012-10-01 21:11 101888 ----a-w- c:\windows\SysWow64\admparse.dll

2012-10-01 21:11 . 2012-10-01 21:11 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe

2012-10-01 21:11 . 2012-10-01 21:11 35840 ----a-w- c:\windows\SysWow64\imgutil.dll

2012-10-01 21:11 . 2012-10-01 21:11 222208 ----a-w- c:\windows\system32\msls31.dll

2012-10-01 21:11 . 2012-10-01 21:11 197120 ----a-w- c:\windows\system32\msrating.dll

2012-10-01 21:11 . 2012-10-01 21:11 65024 ----a-w- c:\windows\system32\pngfilt.dll

2012-10-01 21:11 . 2012-10-01 21:11 267776 ----a-w- c:\windows\system32\ieaksie.dll

2012-10-01 21:11 . 2012-10-01 21:11 149504 ----a-w- c:\windows\system32\occache.dll

2012-10-01 21:11 . 2012-10-01 21:11 12288 ----a-w- c:\windows\system32\mshta.exe

2012-10-01 21:11 . 2012-10-01 21:11 114176 ----a-w- c:\windows\system32\admparse.dll

2012-10-01 21:11 . 2012-10-01 21:11 49664 ----a-w- c:\windows\system32\imgutil.dll

2012-10-01 21:11 . 2012-10-01 21:11 163840 ----a-w- c:\windows\system32\ieakui.dll

2012-10-01 21:11 . 2012-10-01 21:11 145920 ----a-w- c:\windows\system32\iepeers.dll

2012-10-01 21:11 . 2012-10-01 21:11 55296 ----a-w- c:\windows\system32\msfeedsbs.dll

2012-10-01 21:11 . 2012-10-01 21:11 160256 ----a-w- c:\windows\system32\ieakeng.dll

2012-10-01 21:11 . 2012-10-01 21:11 135168 ----a-w- c:\windows\system32\IEAdvpack.dll

2012-10-01 21:11 . 2012-10-01 21:11 10752 ----a-w- c:\windows\system32\msfeedssync.exe

2012-10-01 21:11 . 2012-10-01 21:11 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe

2012-10-01 21:11 . 2012-10-01 21:11 48640 ----a-w- c:\windows\system32\mshtmler.dll

2012-10-01 21:11 . 2012-10-01 21:11 111616 ----a-w- c:\windows\system32\iesysprep.dll

2012-10-01 21:11 . 2012-10-01 21:11 76800 ----a-w- c:\windows\system32\tdc.ocx

2012-10-01 21:11 . 2012-10-01 21:11 452608 ----a-w- c:\windows\system32\dxtmsft.dll

2012-10-01 21:11 . 2012-10-01 21:11 448512 ----a-w- c:\windows\system32\html.iec

2012-10-01 21:11 . 2012-10-01 21:11 282112 ----a-w- c:\windows\system32\dxtrans.dll

2012-10-01 21:11 . 2012-10-01 21:11 89088 ----a-w- c:\windows\system32\ie4uinit.exe

2012-10-01 21:11 . 2012-10-01 21:11 82432 ----a-w- c:\windows\system32\icardie.dll

2012-10-01 21:11 . 2012-10-01 21:11 534528 ----a-w- c:\windows\system32\ieapfltr.dll

2012-10-01 21:11 . 2012-10-01 21:11 39936 ----a-w- c:\windows\system32\iernonce.dll

2012-10-01 21:11 . 2012-10-01 21:11 3695416 ----a-w- c:\windows\system32\ieapfltr.dat

2012-10-01 21:11 . 2012-10-01 21:11 85504 ----a-w- c:\windows\system32\iesetup.dll

2012-10-01 21:11 . 2012-10-01 21:11 403248 ----a-w- c:\windows\system32\iedkcs32.dll

2012-10-01 21:11 . 2012-10-01 21:11 30720 ----a-w- c:\windows\system32\licmgr10.dll

2012-10-01 21:11 . 2012-10-01 21:11 249344 ----a-w- c:\windows\system32\webcheck.dll

2012-10-01 21:11 . 2012-10-01 21:11 103936 ----a-w- c:\windows\system32\inseng.dll

2012-10-01 21:11 . 2012-10-01 21:11 165888 ----a-w- c:\windows\system32\iexpress.exe

2012-10-01 21:11 . 2012-10-01 21:11 160256 ----a-w- c:\windows\system32\wextract.exe

2012-09-30 20:01 . 2012-09-30 20:01 2560 ----a-w- c:\windows\SysWow64\drivers\nl-NL\qwavedrv.sys.mui

2012-09-30 20:01 . 2012-09-30 20:01 5632 ----a-w- c:\windows\SysWow64\drivers\nl-NL\ndiscap.sys.mui

2012-09-30 20:01 . 2012-09-30 20:01 50688 ----a-w- c:\windows\SysWow64\drivers\nl-NL\tcpip.sys.mui

2012-09-30 20:01 . 2012-09-30 20:01 26624 ----a-w- c:\windows\SysWow64\drivers\nl-NL\bfe.dll.mui

2012-09-30 20:01 . 2012-09-30 20:01 16896 ----a-w- c:\windows\SysWow64\drivers\nl-NL\pacer.sys.mui

2012-09-30 20:01 . 2012-09-30 20:01 2560 ----a-w- c:\windows\SysWow64\drivers\nl-NL\scfilter.sys.mui

2012-09-25 22:47 . 2012-11-14 07:00 78336 ----a-w- c:\windows\SysWow64\synceng.dll

2012-09-25 22:46 . 2012-11-14 07:00 95744 ----a-w- c:\windows\system32\synceng.dll

2012-09-21 02:46 . 2012-09-21 02:46 200032 ----a-w- c:\windows\system32\drivers\avgtdia.sys

2012-09-21 02:46 . 2012-09-21 02:46 225120 ----a-w- c:\windows\system32\drivers\avgloga.sys

2012-09-18 22:58 . 2012-09-30 12:02 9308616 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{F001EA0B-FDDE-4F59-A771-E1FC8749ADB9}\mpengine.dll

.

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]

@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"

[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]

2009-09-11 05:41 120104 ----a-w- c:\program files (x86)\EgisTec\MyWinLocker 3\x86\PSDProtect.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2009-09-24 261888]

"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2009-11-01 1094736]

"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]

"AVG_UI"="c:\program files (x86)\AVG\AVG2013\avgui.exe" [2012-11-06 3143800]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"LoadAppInit_DLLs"=1 (0x1)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]

"EgisTecLiveUpdate"="c:\program files (x86)\EgisTec Egis Software Update\EgisUpdate.exe"

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R3 k57nd60a;Broadcom NetLink Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [2012-09-04 433976]

R3 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [2009-09-11 305448]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]

R3 TurboBoost;TurboBoost;c:\program files\Intel\TurboBoost\TurboBoost.exe [2009-11-02 126352]

R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2012-10-01 1255736]

R4 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2009-09-24 62720]

R4 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys [2012-10-15 63328]

S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys [2012-09-21 225120]

S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [2012-10-05 111456]

S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [2012-09-14 40800]

S1 Avgfwfd;AVG network filter service;c:\windows\system32\DRIVERS\avgfwd6a.sys [2012-09-04 50296]

S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys [2012-10-22 154464]

S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [2012-10-02 185696]

S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [2012-09-21 200032]

S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-03 22576]

S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-03 20016]

S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-03 60464]

S2 avgfws;AVG Firewall;c:\program files (x86)\AVG\AVG2013\avgfws.exe [2012-11-01 1340976]

S2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2013\avgidsagent.exe [2012-11-06 5814392]

S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2013\avgwdsvc.exe [2012-10-22 196664]

S2 BrcmMgmtAgent;Broadcom Management Agent;c:\program files\Broadcom\MgmtAgent\BrcmMgmtAgent.exe [2012-08-02 204288]

S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2009-09-30 844320]

S2 Greg_Service;GRegService;c:\program files (x86)\Acer\Registration\GregHSRW.exe [2009-08-28 1150496]

S2 nlsX86cc;Nalpeiron Licensing Service;c:\windows\SysWOW64\nlssrv32.exe [2012-09-05 66560]

S2 RS_Service;Raw Socket Service;c:\program files (x86)\Acer\Acer VCM\RS_Service.exe [2009-07-10 253952]

S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [2009-11-02 13784]

S2 TwonkyProxy;TwonkyProxy;c:\program files (x86)\Twonky\TwonkyServer\twonkyproxy.exe [2012-07-09 545608]

S2 TwonkyServer;TwonkyServer;c:\program files (x86)\Twonky\TwonkyServer\twonkystarter.exe [2012-07-09 549704]

S2 TwonkyWebDav;TwonkyWebDav;c:\program files (x86)\Twonky\TwonkyServer\twonkywebdav.exe [2012-07-09 271176]

S2 UNS;Intel® Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2009-10-01 2320920]

S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2009-07-04 240160]

S3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS [2009-07-22 40448]

S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys [2012-11-02 75928]

S3 HECIx64;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]

S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [2010-02-26 158976]

S3 IntcDAud;Intel® Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2011-08-23 317440]

S3 Point64;Microsoft Mouse and Keyboard Center Filter Driver;c:\windows\system32\DRIVERS\point64.sys [2012-11-02 50856]

.

.

Inhoud van de 'Gedeelde Taken' map

.

2012-12-17 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-30 14:32]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]

@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"

[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]

2009-09-11 05:44 137512 ----a-w- c:\program files (x86)\EgisTec\MyWinLocker 3\x64\PSDProtect.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2009-07-22 323072]

"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-05 186904]

"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2009-05-22 295936]

"Acer ePower Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2009-09-30 823840]

"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-11-06 13219984]

"IntelliType Pro"="c:\program files\Microsoft Mouse and Keyboard Center\itype.exe" [2012-11-02 1464944]

"IntelliPoint"="c:\program files\Microsoft Mouse and Keyboard Center\ipoint.exe" [2012-11-02 2076272]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-08-09 167744]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-08-09 392512]

"Persistence"="c:\windows\system32\igfxpers.exe" [2012-08-09 417088]

.

------- Bijkomende Scan -------

.

mDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&m=aspire_7740&r=27360912e226l0428z115t4411c866

mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&m=aspire_7740&r=27360912e226l0428z115t4411c866

IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000

TCP: DhcpNameServer = 192.168.192.1

FF - ProfilePath - c:\users\MikeDeb\AppData\Roaming\Mozilla\Firefox\Profiles\886e2vjg.default\

FF - prefs.js: browser.search.defaulturl -

FF - prefs.js: browser.search.selectedEngine - Google

FF - prefs.js: browser.startup.homepage - about:home

FF - ExtSQL: 2012-11-29 18:44; {2d3fbcf7-be69-4433-8858-c621a8d0e58d}; c:\users\MikeDeb\AppData\Roaming\Mozilla\Firefox\Profiles\886e2vjg.default\extensions\{2d3fbcf7-be69-4433-8858-c621a8d0e58d}

.

- - - - ORPHANS VERWIJDERD - - - -

.

Toolbar-Locked - (no file)

SafeBoot-mcmscsvc

SafeBoot-MCODS

Toolbar-Locked - (no file)

HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe

.

.

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10c.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.10"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]

@Denied: (A 2) (Everyone)

@="IFlashBroker3"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*]

@="?????????????????? v1"

.

[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*1*\CLSID]

@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"

.

[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*]

@="?????????????????? v2"

.

[HKEY_LOCAL_MACHINE\software\Classes\VideoLAN.VLCPlugin.*2*\CLSID]

@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

"MSCurrentCountry"=dword:000000b5

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Voltooingstijd: 2012-12-17 20:11:19

ComboFix-quarantined-files.txt 2012-12-17 19:11

.

Pre-Run: 576.485.777.408 bytes beschikbaar

Post-Run: 580.072.886.272 bytes beschikbaar

.

- - End Of File - - 9E29FF83F89D326FA595DDE523C028C8

[kape]

Hoe gedraagt de PC zich na deze laatste behandelingen met AdwCleaner en Combofix ?

[n73user]

Hallo,

Sorry voor mijn late reactie, maar had geen mail meer gehad met een bericht dat er een reactie is gegeven . .

Denk gaat toch eens kijken en er was dus al gereageerd, maar na het uitvoeren van jullie opdrachten ging de laptop zeker een stuk sneller, alleen de laptop bevriest nog steeds en nu zelfs soms 3 keer op een dag, aan en uit zetten is dan de enige manier om hem weer op te starten.

Word er wel een beetje moedeloos van, het rare is dat de prestaties gewoon goed zijn, heb nooit problemen met vastlopen enzo alles reageert gewoon snel, alleen hij bevriesd gewoon in een keer . .

Hoop dat iemand misschien nog een idee heeft

alvast bedankt

- - - Updated - - -

Hallo ik lees nu ook op een ander forum dat het aan je draadloze internet kan liggen ?

Kan dat kloppen ?

http://www.helpmij.nl/forum/showthread.php/692863-Laptop-bevriest-met-geluid-en-al-what-to-do

[kape]

Verwijder Combofix: Start -> Uitvoeren/Zoekopdracht/Programma’s en bestanden zoeken en typ daar: ComboFix /Uninstall (met spatie voor de /).

Dit zal Combofix verwijderen + gerelateerde mappen en bestanden, herstelt de klokinstellingen opnieuw, verbergt de bestandsextensies, gaat verborgen bestanden en systeembestanden terug verbergen en maakt een nieuw herstelpunt.

Indien aanwezig mag je de map C:\Qoobox manueel verwijderen.

Download en installeer Speccy.

Tijdens de installatie heb je nu de mogelijkheid om Nederlands als taal te selecteren.

Als je niet wil dat Google Chrome op je pc als standaard webbrowser wordt geïnstalleerd, moet je de 2 vinkjes wegdoen !!!

Start nu het programma en er zal een overzicht gemaakt worden van je hardware.

Als dit gereed is selecteer je bovenaan " Bestand - Publiceer Snapshot " en vervolgens bevestig je die keuze met " Ja ".

In het venster dat nu opent krijg je een link te zien, kopieer nu die link en plak die in je volgende bericht.

Wil je in woord en beeld zien hoe je een logje van Speccy maakt en plaatst kun je dat Hier lezen.

Ook Dit (KLIK) filmpje laat zien hoe je een Speccy-logje kan plakken in je antwoord.

Na het plaatsen van je logje wordt dit door een expert nagekeken.