Ga naar inhoud

probleem met haperende laptop


Aanbevolen berichten

Hallo iedereen,

nieuw hier op dit forum en meteen ook mijn eerste vraag.

Sinds kort is mijn laptop een stuk trager geworden en dan vooral bij het laden van een pagina in IE.

Soms duurt het een 10 tal seconden of langer vooraleer de nieuwe pagina is geladen.

Soms stopt de cursor ook met bewegen en kan ik niks meer doen .

Dit duurt soms meer dan een minuut tot opeens alles terug werkt.

Ook het openen van windows live mail duurt nu langer dan vroeger.Eens hij geopend is werkt hij dan wel normaal .

Heb ondertussen hier al wat rondgeneusd op het forum en meteen maar een hijack log aangemaakt (zie hieronder).

Heb ook al gescand op spyware en virussen,niks gevonden en ook ccleaner al gebruikt.

De laptop werkt nog wel goed maar het is toch redelijk frustrerend dat hij regelmatig blijft hangen.

Ik hoop dat er mij iemand kan helpen.

Alvast bedankt.

Mvg,eric

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 18:54:45, on 23/01/2013

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v9.00 (9.00.8112.16457)

Boot mode: Normal

Running processes:

C:\Program Files (x86)\Skype\Phone\Skype.exe

C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_5_502_146_ActiveX.exe

C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Users\Eric\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

F2 - REG:system.ini: UserInit=userinit.exe,

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

O4 - HKLM\..\Run: [CommonToolkitTray] C:\Program Files (x86)\Fighters\Tray\FightersTray.exe

O4 - HKLM\..\Run: [sWPROguard] C:\Program Files (x86)\Fighters\SPYWAREfighter\swprotray.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O15 - Trusted Zone: QQLive (HKLM)

O15 - Trusted Zone: http://qqlivecaption.qq.com (HKLM)

O15 - Trusted Zone: http://qqlivehabit.qq.com (HKLM)

O15 - Trusted Zone: http://qqlivesearch.qq.com (HKLM)

O15 - Trusted Zone: http://video_1.qq.com (HKLM)

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: AV Engine Scanning Service - Preventon Technologies Limited - C:/Program Files (x86)/Common Files/Common Toolkit Suite/AVEngine/AVScanningService.exe

O23 - Service: AV Watch Service - Preventon Technologies Limited - C:/Program Files (x86)/Common Files/Common Toolkit Suite/AVEngine/AVWatchService.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: SafeBox - Bitdefender - C:\Program Files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: Suite Service - SPAMfighter ApS - C:\Program Files (x86)\Fighters\FighterSuiteService.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: Bitdefender Desktop Update Service (UPDATESRV) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: Bitdefender Virus Shield (VSSERV) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--

End of file - 6783 bytes

Link naar reactie
Delen op andere sites

Is QQLive een bekende en vertrouwde locatie voor jou ?

Download ComboFix van één van deze locaties:

Link 1

Link 2

* BELANGRIJK !!! Sla ComboFix.exe op je Bureaublad op

1. Schakel alle antivirus- en antispywareprogramma's uit, want anders kunnen ze misschien conflicteren met ComboFix. Hier is een handleiding over hoe je ze kan uitschakelen:

Klik hier

2. Het kan voorkomen dat de computer meerdere malen opnieuw gestart moet worden, dit is normaal.

3. Dubbelklik op "Combofix.exe" om de tool te starten.

4. Klik niet in het scherm van Combofix als deze actief is, hierdoor kan de 'tool' vastlopen.

Noot !!! Als er een error wordt getoond met de melding "Illegal operation attempted on a registery key that has been marked for deletion", herstart dan de computer.

5. Wanneer ComboFix klaar is, zal het het een logbestand voor je maken. Post de inhoud van dit logbestand (te vinden als C:\ComboFix.txt) in je volgende bericht.

Link naar reactie
Delen op andere sites

Hallo,

QQlive is me bekend.

Dat is een chinese versie/mix van skype en msn die mijn vrouw gebruikt.

Hieronder het logbestand van combofix.

Mvg,eric

ComboFix 13-01-24.02 - Eric 24/01/2013 18:13:56.1.4 - x64

Microsoft Windows 7 Ultimate 6.1.7601.1.1252.32.1043.18.8104.6193 [GMT 1:00]

Gestart vanuit: c:\users\Eric\Desktop\ComboFix.exe

AV: Bitdefender Antivirus *Disabled/Updated* {98CD50CE-5097-4098-9669-6C401FB3969C}

FW: Bitdefender Firewall *Disabled* {A0F6D1EB-1AF8-41C0-BD36-C575E160D1E7}

SP: Bitdefender Antispyware *Disabled/Updated* {23ACB12A-76AD-4F16-ACD9-57326434DC21}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\favoritevideo\InvisibleFolder

c:\favoritevideo\InvisibleFolder\20111109181426_tongyisucaib111110huanchong.swf

c:\favoritevideo\InvisibleFolder\20111111174415_tongyisucaic111113zanting.swf

c:\favoritevideo\InvisibleFolder\20111111174652_tongyisucaic111113huanchong15.swf

c:\favoritevideo\InvisibleFolder\20111111180522_tongyisucaid111113kehuduanhuanchong.swf

c:\favoritevideo\InvisibleFolder\20111111180809_tongyisucaid111113kehuduanzanting.swf

c:\favoritevideo\InvisibleFolder\20111118162412_tongyisucaif111119zanting.swf

c:\favoritevideo\InvisibleFolder\20111118162556_tongyisucaif111119zhu15s.swf

c:\favoritevideo\InvisibleFolder\20111205165100_zhenqiao111205zanting.swf

c:\favoritevideo\InvisibleFolder\20120105095046_sanxingi929zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120113133550_bmw120116zhu15slanguang.swf

c:\favoritevideo\InvisibleFolder\20120116174022_haerbinpijiu120116chunwanzhu15s.swf

c:\favoritevideo\InvisibleFolder\20120117175725_moyu120122zanting.swf

c:\favoritevideo\InvisibleFolder\20120118114531_91wan120122zhuzt.swf

c:\favoritevideo\InvisibleFolder\20120118114538_91wan120125zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120118133022_jiangsuyidong120120Bzhu15s.swf

c:\favoritevideo\InvisibleFolder\20120118174717_suunmo120125zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120119100328_youju37wanbu120122zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120119103214_37wan120130zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120119103407_37wan120130zhu15sbu.swf

c:\favoritevideo\InvisibleFolder\20120119103417_youju37wanbu120124zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120119103804_37wan120126zhuhuanchong15sbu.swf

c:\favoritevideo\InvisibleFolder\20120119103848_37wan120130zanting.swf

c:\favoritevideo\InvisibleFolder\20120119103932_37wan120126zhuzt.swf

c:\favoritevideo\InvisibleFolder\20120119104535_37wan120128zhuhuanchong15s.swf

c:\favoritevideo\InvisibleFolder\20120119104815_37wan120128zhuzt.swf

c:\favoritevideo\InvisibleFolder\20120119111246_maoxianwang120121zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120119112809_maoxianwang120121zanting.swf

c:\favoritevideo\InvisibleFolder\20120119113108_shengshisanguo120124zhuhuanchong15s.swf

c:\favoritevideo\InvisibleFolder\20120119113414_shengshisanguo120124zhuzt.swf

c:\favoritevideo\InvisibleFolder\20120119113715_shengshisanguo120124fuceng.swf

c:\favoritevideo\InvisibleFolder\20120119114020_maoxianwang120121chabo.swf

c:\favoritevideo\InvisibleFolder\20120119114031_zhengtu20121zanting.swf

c:\favoritevideo\InvisibleFolder\20120119120030_wendao120125zanting.swf

c:\favoritevideo\InvisibleFolder\20120119132433_wolingyin120127zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120119133653_wolingyin120127zanting.swf

c:\favoritevideo\InvisibleFolder\20120119133729_baidu120125zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120119134713_wolingyin120127chabo.swf

c:\favoritevideo\InvisibleFolder\20120119140747_huoyingshijie120129zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120119141149_huoyingshijie120129zanting15s.swf

c:\favoritevideo\InvisibleFolder\20120119151205_hupyingshijie120129cha15s.swf

c:\favoritevideo\InvisibleFolder\20120119161139_shenlongji120125zhuzt.swf

c:\favoritevideo\InvisibleFolder\20120119170721_37wan120128zhu15sa.swf

c:\favoritevideo\InvisibleFolder\20120119170929_37wan120130zhu15sa.swf

c:\favoritevideo\InvisibleFolder\20120119171413_37wan120128zantinga.swf

c:\favoritevideo\InvisibleFolder\20120119171643_37wan120130zantinga.swf

c:\favoritevideo\InvisibleFolder\20120119181431_haoshiku120121zanting.swf

c:\favoritevideo\InvisibleFolder\20120119181706_haoshiku120121cha15s.swf

c:\favoritevideo\InvisibleFolder\20120119182338_haoshiku120121zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120120102602_guangdongyinlian120130zanting.swf

c:\favoritevideo\InvisibleFolder\20120120102651_guangdongyinlian120130chabo.swf

c:\favoritevideo\InvisibleFolder\20120120165721_hongji120130zanting.swf

c:\favoritevideo\InvisibleFolder\20120130115919_fanren5fu120131zhuhuanchong15s.swf

c:\favoritevideo\InvisibleFolder\20120130132324_fanren5fu120131zhufuceng.swf

c:\favoritevideo\InvisibleFolder\20120130132852_fanren5fu120131zhuzt.swf

c:\favoritevideo\InvisibleFolder\20120130143830_37wan120131zhu15sa.swf

c:\favoritevideo\InvisibleFolder\20120130143954_37wan120131zhu15sb.swf

c:\favoritevideo\InvisibleFolder\20120130144143_37wan120131zhu15sbu.swf

c:\favoritevideo\InvisibleFolder\20120130144700_37wan120131zantinga.swf

c:\favoritevideo\InvisibleFolder\20120130144849_37wan120131zantingb.swf

c:\favoritevideo\InvisibleFolder\20120130181331_dongfengbiaozhi308120201zanting.swf

c:\favoritevideo\InvisibleFolder\20120131145853_37wan120201zhu15sb.swf

c:\favoritevideo\InvisibleFolder\20120131150504_37wan120201zanting.swf

c:\favoritevideo\InvisibleFolder\20120131150631_37wan120201cha15s.swf

c:\favoritevideo\InvisibleFolder\20120131161134_vaspmall120131zanting.swf

c:\favoritevideo\InvisibleFolder\20120131161533_vaspmall120131qipao.swf

c:\favoritevideo\InvisibleFolder\20120201112148_pinganchexian120201zhuhuanchong15s.swf

c:\favoritevideo\InvisibleFolder\20120201141331_summnofangchan120201zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120201154950_37wan120202zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120201160028_37wan120202cha15s.swf

c:\favoritevideo\InvisibleFolder\20120202101934_yinyueyazhou120202zhuzt.jpg

c:\favoritevideo\InvisibleFolder\20120202113002_tianzhiren120203zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120202113203_tianzhiren120203zanting.swf

c:\favoritevideo\InvisibleFolder\20120202114445_tianzhiren120203chabo.swf

c:\favoritevideo\InvisibleFolder\20120202144347_37wan120203zhu15sa.swf

c:\favoritevideo\InvisibleFolder\20120202144548_37wan120203zhu15sb.swf

c:\favoritevideo\InvisibleFolder\20120202144828_37wan120203zanting.swf

c:\favoritevideo\InvisibleFolder\20120202145009_37wan120203cha15s.swf

c:\favoritevideo\InvisibleFolder\20120202154941_zhengtu20203zanting.swf

c:\favoritevideo\InvisibleFolder\20120202155310_zhengtu2120204zanting.swf

c:\favoritevideo\InvisibleFolder\20120202163834_shengui120203zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120202164635_shengui120203zanting.swf

c:\favoritevideo\InvisibleFolder\20120202165029_shengui120203cha15s.swf

c:\favoritevideo\InvisibleFolder\20120203141133_tongyisucai120206zhuzt.swf

c:\favoritevideo\InvisibleFolder\20120203141429_tongyisucai120206zhuhuanchong15s.swf

c:\favoritevideo\InvisibleFolder\20120203141936_shenmozhetian12026zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120203142707_shenmozhetian120206zanting.swf

c:\favoritevideo\InvisibleFolder\20120203143114_shenmozhetian120206cha15s.swf

c:\favoritevideo\InvisibleFolder\20120203153758_youju37wan120206zhufuceng.swf

c:\favoritevideo\InvisibleFolder\20120203154638_37wan120206zhu15sa.swf

c:\favoritevideo\InvisibleFolder\20120203154812_37wan120206zhu15sb.swf

c:\favoritevideo\InvisibleFolder\20120203154846_51job120219zanting.swf

c:\favoritevideo\InvisibleFolder\20120203173122_jiangsuyidong120204zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120203174047_haiershangcheng120206zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120203204216_yangshengtang120206zanting.swf

c:\favoritevideo\InvisibleFolder\20120203204430_yangshengtang120206chabo.swf

c:\favoritevideo\InvisibleFolder\20120206103537_91wan120206zanting.swf

c:\favoritevideo\InvisibleFolder\20120206180131_91wan120206zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120206182035_vaspmall120206zanting.swf

c:\favoritevideo\InvisibleFolder\20120206182057_vaspmall120206qipao.swf

c:\favoritevideo\InvisibleFolder\20120206182800_jiangsuyidong120207zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120207165743_fenzhong120207zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120207165913_fenzhong1202007qipao.swf

c:\favoritevideo\InvisibleFolder\20120207171738_kelaisileqita120208zanting.swf

c:\favoritevideo\InvisibleFolder\20120207182205_kelaisik120208zanting.swf

c:\favoritevideo\InvisibleFolder\20120207190427_kelaisile120208zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120208141425_huanlongqishi120209zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120208142601_37wan120209zhu15sa.swf

c:\favoritevideo\InvisibleFolder\20120208142609_huanlongqishi120209zhuzt.swf

c:\favoritevideo\InvisibleFolder\20120208142802_37wan120209zhu15sb.swf

c:\favoritevideo\InvisibleFolder\20120208142927_huanlongqishi120209zhufuceng.swf

c:\favoritevideo\InvisibleFolder\20120208143053_37wan120209zanting.swf

c:\favoritevideo\InvisibleFolder\20120208143321_37wan120209cha15s.swf

c:\favoritevideo\InvisibleFolder\20120208161055_tgc120208zanting.swf

c:\favoritevideo\InvisibleFolder\20120208172501_baidushuihu120209zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120208172630_baidushuihu120209zanting.swf

c:\favoritevideo\InvisibleFolder\20120209141539_lvan120210zanting.swf

c:\favoritevideo\InvisibleFolder\20120209165621_youju37wan120210zantingb.swf

c:\favoritevideo\InvisibleFolder\20120209173343_zhengtu120210zhuzt.swf

c:\favoritevideo\InvisibleFolder\20120209173436_sanxing120210zanting.swf

c:\favoritevideo\InvisibleFolder\20120210141002_zhengtu2120211zanting.swf

c:\favoritevideo\InvisibleFolder\20120210141458_fanren120212zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120210142428_fanren120212zanting.swf

c:\favoritevideo\InvisibleFolder\20120210144351_fanren120212chabo.swf

c:\favoritevideo\InvisibleFolder\20120210144700_langtaojin120213zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120210144915_langtaojin120213zanting.swf

c:\favoritevideo\InvisibleFolder\20120210164053_jurenzhengtu2120212zanting.swf

c:\favoritevideo\InvisibleFolder\20120210165341_37wan120211zhuhuanchong15s.swf

c:\favoritevideo\InvisibleFolder\20120210165842_37wan120211zhuztb.swf

c:\favoritevideo\InvisibleFolder\20120210170232_37wan120213zhuhuanchong15sa.swf

c:\favoritevideo\InvisibleFolder\20120210170348_37wan120213zhuhuanchongb.swf

c:\favoritevideo\InvisibleFolder\20120210170456_37120213zhuzta.swf

c:\favoritevideo\InvisibleFolder\20120210170721_37wan120213zhufuceng.swf

c:\favoritevideo\InvisibleFolder\20120210182456_longzhigu120211zanting.swf

c:\favoritevideo\InvisibleFolder\20120212121530_haier120213zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120213110337_zhonglianghaoshiku120213zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120213111104_zhonglianghaoshiku120213zanting.swf

c:\favoritevideo\InvisibleFolder\20120213111328_zhonglianghaoshiku120213cha15s.swf

c:\favoritevideo\InvisibleFolder\20120213174053_longzhigu120214zhuzt.swf

c:\favoritevideo\InvisibleFolder\20120213180742_zhengtu120214zhuzt.swf

c:\favoritevideo\InvisibleFolder\20120213181906_baidushuihuzhuan120214zhuhuanchong15s.swf

c:\favoritevideo\InvisibleFolder\20120213182015_baidushuihuzhuan120214zhuzt.swf

c:\favoritevideo\InvisibleFolder\20120214143235_huaixazhizhan120215zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120214143520_huaixazhizhan120215zanting2.swf

c:\favoritevideo\InvisibleFolder\20120214150605_huaixazhizhan120215chabo.swf

c:\favoritevideo\InvisibleFolder\20120214163739_37wan120215zhuhuanchong15s.swf

c:\favoritevideo\InvisibleFolder\20120214164033_37wan120215fuceng.swf

c:\favoritevideo\InvisibleFolder\20120214164235_37wan120215zhuzt.swf

c:\favoritevideo\InvisibleFolder\20120214164359_37wan120215zhuhuanchong15sb.swf

c:\favoritevideo\InvisibleFolder\20120214164456_37wan120215zhuztb.swf

c:\favoritevideo\InvisibleFolder\20120214172942_baidushuihu120215zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120214173126_baidushuihu120215zanting.swf

c:\favoritevideo\InvisibleFolder\20120214181423_tongyisucaie120215zanting.swf

c:\favoritevideo\InvisibleFolder\20120214181452_tongyisucaie120215zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120215134429_vaspmall120215zanting.swf

c:\favoritevideo\InvisibleFolder\20120215134534_vaspmall120215qipao.swf

c:\favoritevideo\InvisibleFolder\20120215162226_37wan120216zanting.swf

c:\favoritevideo\InvisibleFolder\20120215205346_guangqibentian120216zhuhuanchong15s.swf

c:\favoritevideo\InvisibleFolder\20120216144328_dongfeng308120216zanting.swf

c:\favoritevideo\InvisibleFolder\20120216162844_37wan120216zantingb.swf

c:\favoritevideo\InvisibleFolder\20120216175845_sehnxiandao120219zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120216180234_jinglundianziceshi120217chabo.jpg

c:\favoritevideo\InvisibleFolder\20120216180854_zhengtu2120217zanting.swf

c:\favoritevideo\InvisibleFolder\20120217114502_sehnxiandao120219zanting.swf

c:\favoritevideo\InvisibleFolder\20120217120248_sehnxiandao120219chabo.swf

c:\favoritevideo\InvisibleFolder\20120217153424_moshou120224jiaobiao.swf

c:\favoritevideo\InvisibleFolder\20120217163353_ximenzi120220zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120217163942_ximenzi120220zanting.swf

c:\favoritevideo\InvisibleFolder\20120217173046_37wan120218zhuztc.swf

c:\favoritevideo\InvisibleFolder\20120217174816_37wan120220cha15s.swf

c:\favoritevideo\InvisibleFolder\20120217175210_youju37wan120219zantingA.swf

c:\favoritevideo\InvisibleFolder\20120217175606_37wan120220zantinga.swf

c:\favoritevideo\InvisibleFolder\20120217175730_37wan120220zantingb.swf

c:\favoritevideo\InvisibleFolder\20120217203229_mairuibao120220jiaobiao.jpg

c:\favoritevideo\InvisibleFolder\20120220144402_mairuibao120220zantingbudianjia.swf

c:\favoritevideo\InvisibleFolder\20120220151454_shengshi120221zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120220152216_shengshi120221zanting.swf

c:\favoritevideo\InvisibleFolder\20120220153811_shengshi120221chabo.swf

c:\favoritevideo\InvisibleFolder\20120220164455_youju37wanzhu15sA.swf

c:\favoritevideo\InvisibleFolder\20120221145604_37wan120221zhu15sanew.swf

c:\favoritevideo\InvisibleFolder\20120221153410_youju37wan120222zhu15sB.swf

c:\favoritevideo\InvisibleFolder\20120221153436_youju37wan120222zhu15sA.swf

c:\favoritevideo\InvisibleFolder\20120221153657_youju37wan120222zantingA.swf

c:\favoritevideo\InvisibleFolder\20120221153715_youju37wan120222zantingB.swf

c:\favoritevideo\InvisibleFolder\20120221172741_baidu120222zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120221172928_baidu120222zanting.swf

c:\favoritevideo\InvisibleFolder\20120221183158_wushen120222zhu15s.swf

c:\favoritevideo\InvisibleFolder\20120221183330_wushen120222zanting.swf

c:\favoritevideo\InvisibleFolder\externtab(3.1.2.22).zip

c:\favoritevideo\InvisibleFolder\tipsdone.dll

c:\favoritevideo\InvisibleFolder\tipsstatistic.dll

c:\program files (x86)\Common Files\Tencent\Paycenter

c:\program files (x86)\Common Files\Tencent\Paycenter\qqedit.dll

c:\programdata\1343835585.bdinstall.bin

c:\programdata\1344277371.bdinstall.bin

c:\programdata\1344281306.bdinstall.bin

c:\programdata\1344281319.bdinstall.bin

c:\programdata\1344281389.bdinstall.bin

c:\programdata\1344281391.bdinstall.bin

c:\programdata\1344281407.bdinstall.bin

c:\programdata\1344281452.bdinstall.bin

c:\programdata\1344281453.bdinstall.bin

c:\programdata\1344281815.bdinstall.bin

c:\programdata\1344281882.bdinstall.bin

c:\programdata\1344282338.bdinstall.bin

c:\programdata\1346951912.bdinstall.bin

c:\programdata\1347032543.bdinstall.bin

c:\users\Eric\AppData\Roaming\iasna_FAB01109-C336-401f-BDE4-AB192674410E.dll

c:\windows\7Loader.TAG

.

.

(((((((((((((((((((( Bestanden Gemaakt van 2012-12-24 to 2013-01-24 ))))))))))))))))))))))))))))))

.

.

2013-01-24 17:17 . 2013-01-24 17:17 -------- d-----w- c:\users\Default\AppData\Local\temp

2013-01-23 18:07 . 2013-01-23 18:07 -------- d-----w- c:\users\Eric\AppData\Local\Secunia PSI

2013-01-23 18:06 . 2013-01-23 18:06 -------- d-----w- c:\program files (x86)\Secunia

2013-01-22 16:48 . 2013-01-15 01:45 9161176 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BACAFCD9-BA23-44FC-90B7-9315665DAB89}\mpengine.dll

2013-01-20 22:41 . 2013-01-20 22:41 -------- d-----w- c:\users\Eric\AppData\Roaming\Malwarebytes

2013-01-20 22:41 . 2013-01-20 22:41 -------- d-----w- c:\programdata\Malwarebytes

2013-01-20 22:41 . 2013-01-20 22:41 -------- d-----w- c:\users\Eric\AppData\Local\Programs

2013-01-20 16:31 . 2013-01-21 16:12 -------- d-----w- c:\programdata\clp

2013-01-20 16:06 . 2013-01-20 16:06 -------- d-----w- c:\program files\CCleaner

2013-01-19 15:19 . 2012-06-05 07:37 256904 ----a-w- c:\windows\SysWow64\drivers\tmcomm.sys

2013-01-19 00:49 . 2013-01-24 17:11 -------- d-----w- c:\users\Eric\AppData\Roaming\Fighters

2013-01-19 00:48 . 2013-01-24 17:11 -------- d-----w- c:\program files (x86)\Fighters

2013-01-19 00:48 . 2013-01-24 17:11 -------- d-----w- c:\programdata\Fighters

2013-01-19 00:48 . 2013-01-19 00:48 -------- d-----w- c:\program files\Fighters

2013-01-17 21:29 . 2013-01-12 02:30 95648 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll

2013-01-17 21:25 . 2013-01-17 21:25 -------- d-----w- c:\users\Eric\AppData\Local\ericmoerman

2013-01-09 16:18 . 2012-11-30 05:41 424448 ----a-w- c:\windows\system32\KernelBase.dll

2013-01-08 16:36 . 2013-01-08 16:36 -------- d-----w- c:\program files (x86)\Common Files\Java

2013-01-08 16:36 . 2013-01-08 16:35 859072 ----a-w- c:\windows\SysWow64\npDeployJava1.dll

2013-01-07 21:49 . 2013-01-14 22:24 -------- d-----w- c:\users\Eric\applogs

2013-01-07 21:49 . 2013-01-08 16:35 779704 ----a-w- c:\windows\SysWow64\deployJava1.dll

2013-01-07 21:48 . 2013-01-17 21:29 -------- d-----w- c:\program files (x86)\Java

2012-12-27 17:19 . 2013-01-17 21:11 -------- d-----w- c:\users\Eric\AppData\Roaming\SystemRequirementsLab

2012-12-27 17:19 . 2012-12-27 17:19 959976 ----a-w- c:\windows\system32\deployJava1.dll

2012-12-27 17:19 . 2012-12-27 17:19 308200 ----a-w- c:\windows\system32\javaws.exe

2012-12-27 17:19 . 2012-12-27 17:19 1081320 ----a-w- c:\windows\system32\npDeployJava1.dll

2012-12-27 17:19 . 2012-12-27 17:19 188392 ----a-w- c:\windows\system32\javaw.exe

2012-12-27 17:19 . 2012-12-27 17:19 188392 ----a-w- c:\windows\system32\java.exe

2012-12-27 17:19 . 2012-12-27 17:19 108008 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll

2012-12-27 17:19 . 2012-12-27 17:19 -------- d-----w- c:\program files\Java

2012-12-27 16:50 . 2012-12-27 17:01 -------- d-----w- c:\users\Eric\AppData\Roaming\FreshDiagnose

2012-12-27 12:12 . 2013-01-08 15:52 -------- d-----w- c:\program files\Google

2012-12-27 12:12 . 2013-01-08 21:28 74248 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2012-12-27 12:12 . 2013-01-08 21:28 697864 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe

.

.

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2013-01-14 16:37 . 2011-11-25 13:00 261056 ------w- c:\windows\system32\drivers\avchv.sys

2013-01-14 16:37 . 2012-10-18 15:30 350160 ----a-w- c:\windows\system32\drivers\trufos.sys

2013-01-09 22:58 . 2011-10-08 14:49 67599240 ----a-w- c:\windows\system32\MRT.exe

2012-12-16 17:11 . 2012-12-22 00:57 46080 ----a-w- c:\windows\system32\atmlib.dll

2012-12-16 14:45 . 2012-12-22 00:57 367616 ----a-w- c:\windows\system32\atmfd.dll

2012-12-16 14:13 . 2012-12-22 00:57 295424 ----a-w- c:\windows\SysWow64\atmfd.dll

2012-12-16 14:13 . 2012-12-22 00:57 34304 ----a-w- c:\windows\SysWow64\atmlib.dll

2012-11-30 04:45 . 2013-01-09 16:18 44032 ----a-w- c:\windows\apppatch\acwow64.dll

2012-11-14 07:06 . 2012-12-13 23:31 17811968 ----a-w- c:\windows\system32\mshtml.dll

2012-11-14 06:32 . 2012-12-13 23:31 10925568 ----a-w- c:\windows\system32\ieframe.dll

2012-11-14 06:11 . 2012-12-13 23:31 2312704 ----a-w- c:\windows\system32\jscript9.dll

2012-11-14 06:04 . 2012-12-13 23:31 1346048 ----a-w- c:\windows\system32\urlmon.dll

2012-11-14 06:04 . 2012-12-13 23:31 1392128 ----a-w- c:\windows\system32\wininet.dll

2012-11-14 06:02 . 2012-12-13 23:31 1494528 ----a-w- c:\windows\system32\inetcpl.cpl

2012-11-14 06:02 . 2012-12-13 23:31 237056 ----a-w- c:\windows\system32\url.dll

2012-11-14 05:59 . 2012-12-13 23:31 85504 ----a-w- c:\windows\system32\jsproxy.dll

2012-11-14 05:58 . 2012-12-13 23:31 816640 ----a-w- c:\windows\system32\jscript.dll

2012-11-14 05:57 . 2012-12-13 23:31 599040 ----a-w- c:\windows\system32\vbscript.dll

2012-11-14 05:57 . 2012-12-13 23:31 173056 ----a-w- c:\windows\system32\ieUnatt.exe

2012-11-14 05:55 . 2012-12-13 23:31 2144768 ----a-w- c:\windows\system32\iertutil.dll

2012-11-14 05:55 . 2012-12-13 23:31 729088 ----a-w- c:\windows\system32\msfeeds.dll

2012-11-14 05:53 . 2012-12-13 23:31 96768 ----a-w- c:\windows\system32\mshtmled.dll

2012-11-14 05:52 . 2012-12-13 23:31 2382848 ----a-w- c:\windows\system32\mshtml.tlb

2012-11-14 05:46 . 2012-12-13 23:31 248320 ----a-w- c:\windows\system32\ieui.dll

2012-11-14 02:09 . 2012-12-13 23:31 1800704 ----a-w- c:\windows\SysWow64\jscript9.dll

2012-11-14 01:58 . 2012-12-13 23:31 1427968 ----a-w- c:\windows\SysWow64\inetcpl.cpl

2012-11-14 01:57 . 2012-12-13 23:31 1129472 ----a-w- c:\windows\SysWow64\wininet.dll

2012-11-14 01:49 . 2012-12-13 23:31 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe

2012-11-14 01:48 . 2012-12-13 23:31 420864 ----a-w- c:\windows\SysWow64\vbscript.dll

2012-11-14 01:44 . 2012-12-13 23:31 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb

2012-11-09 05:45 . 2012-12-13 06:39 2048 ----a-w- c:\windows\system32\tzres.dll

2012-11-09 04:42 . 2012-12-13 06:39 2048 ----a-w- c:\windows\SysWow64\tzres.dll

2012-11-07 23:25 . 2012-10-18 15:30 705552 ------w- c:\windows\system32\drivers\avc3.sys

2012-11-07 23:23 . 2012-10-18 15:30 82384 ------w- c:\windows\system32\drivers\bdsandbox.sys

2012-11-07 23:22 . 2012-10-18 15:30 587024 ------w- c:\windows\system32\drivers\avckf.sys

2012-11-02 05:59 . 2012-12-13 06:38 478208 ----a-w- c:\windows\system32\dpnet.dll

2012-11-02 05:11 . 2012-12-13 06:38 376832 ----a-w- c:\windows\SysWow64\dpnet.dll

.

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"CommonToolkitTray"="c:\program files (x86)\Fighters\Tray\FightersTray.exe" [2012-11-13 1405544]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Secunia PSI Tray.lnk - c:\program files (x86)\Secunia\PSI\psi_tray.exe [2012-11-26 573024]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]

"Userinit"="userinit.exe"

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]

"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" -atboottime

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R3 avckf;avckf;c:\windows\system32\DRIVERS\avckf.sys [2012-11-07 587024]

R3 AVFSFilter;AVFSFilter;c:\windows\system32\DRIVERS\avfsfilter.sys [x]

R3 BDSandBox;BDSandBox;c:\windows\system32\drivers\bdsandbox.sys [2012-11-07 82384]

R3 camdrv42;Philips SPC 900NC PC Camera;c:\windows\system32\DRIVERS\camdrv42.sys [2007-05-04 1533952]

R3 DCamUSBVM;Lenovo Q350 USB PC Camera;c:\windows\system32\Drivers\usbVM31b.sys [2005-09-19 142336]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 20992]

R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]

R3 TcHardWare;TcHardWare;c:\program files (x86)\Tencent\QQPCMgr\6.8.2385.401\QQPCHW-x64.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]

R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]

R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]

R3 vpcuxd;Stubservice voor USB-virtualisatie;c:\windows\system32\DRIVERS\vpcuxd.sys [2010-11-20 16384]

R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2011-10-08 1255736]

R4 BdDesktopParental;Bitdefender Desktop Parental Control;c:\program files\Bitdefender\Bitdefender 2013\bdparentalservice.exe [2013-01-14 68440]

R4 CoordinatorServiceHost;SW Distributed TS Coordinator Service;c:\program files\SolidWorks Corp\SolidWorks\swScheduler\DTSCoordinatorService.exe [2010-10-05 87336]

R4 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-10-08 1431888]

R4 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-11-09 160944]

S0 avc3;avc3;c:\windows\system32\DRIVERS\avc3.sys [2012-11-07 705552]

S0 gzflt;gzflt;c:\windows\system32\DRIVERS\gzflt.sys [2012-10-18 145696]

S1 BdfNdisf;BitDefender Firewall NDIS 6 Filter Driver;c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [2012-09-07 93160]

S1 bdfwfpf;bdfwfpf;c:\program files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [2011-11-14 103504]

S1 BDVEDISK;BDVEDISK;c:\windows\system32\DRIVERS\bdvedisk.sys [2012-04-17 76944]

S2 SafeBox;SafeBox;c:\program files\Bitdefender\Bitdefender SafeBox\safeboxservice.exe [2013-01-14 95184]

S2 Secunia PSI Agent;Secunia PSI Agent;c:\program files (x86)\Secunia\PSI\PSIA.exe [2012-11-26 1225312]

S2 Secunia Update Agent;Secunia Update Agent;c:\program files (x86)\Secunia\PSI\sua.exe [2012-11-26 659040]

S2 UPDATESRV;Bitdefender Desktop Update Service;c:\program files\Bitdefender\Bitdefender 2013\updatesrv.exe [2013-01-14 68416]

S3 avchv;avchv Function Driver;c:\windows\system32\DRIVERS\avchv.sys [2013-01-14 261056]

S3 PSI;PSI;c:\windows\system32\DRIVERS\psi_mf.sys [2010-09-01 17976]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-01-13 413800]

S3 RTL8192Ce;Realtek Wireless LAN 802.11n PCI-E NIC Driver;c:\windows\system32\DRIVERS\rtl8192Ce.sys [2011-04-22 1143400]

.

.

Inhoud van de 'Gedeelde Taken' map

c:\windows\Tasks\Adobe Flash Player Updater.job

c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1204391042-3033201888-2859419247-1000Core.job

c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1204391042-3033201888-2859419247-1000UA.job

c:\windows\Tasks\SLOW-PCfighter64-Eric-Notification.job

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\__SafeBox1]

@="{152C96EB-288E-4EDC-B7C6-D21F8250ADF3}"

[HKEY_CLASSES_ROOT\CLSID\{152C96EB-288E-4EDC-B7C6-D21F8250ADF3}]

2013-01-14 16:37 268760 ----a-w- c:\program files\Bitdefender\Bitdefender Safebox\safeboxshell.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\__SafeBox2]

@="{342DAA0B-D796-460D-8566-901E08A1CCAD}"

[HKEY_CLASSES_ROOT\CLSID\{342DAA0B-D796-460D-8566-901E08A1CCAD}]

2013-01-14 16:37 268760 ----a-w- c:\program files\Bitdefender\Bitdefender Safebox\safeboxshell.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\__SafeBox3]

@="{57595DAE-1AE1-4D97-A49E-67CBB53B52DF}"

[HKEY_CLASSES_ROOT\CLSID\{57595DAE-1AE1-4D97-A49E-67CBB53B52DF}]

2013-01-14 16:37 268760 ----a-w- c:\program files\Bitdefender\Bitdefender Safebox\safeboxshell.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\__SafeBox4]

@="{33816773-98AE-4723-ADE0-EBE54C8B5A67}"

[HKEY_CLASSES_ROOT\CLSID\{33816773-98AE-4723-ADE0-EBE54C8B5A67}]

2013-01-14 16:37 268760 ----a-w- c:\program files\Bitdefender\Bitdefender Safebox\safeboxshell.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Bdagent"="c:\program files\Bitdefender\Bitdefender 2013\bdagent.exe" [2013-01-14 1571656]

.

------- Bijkomende Scan -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = about:blank

mStart Page = about:blank

mLocal Page = c:\windows\SysWOW64\blank.htm

Trusted Zone: qq.com\cache.tv

Trusted Zone: qq.com\qqlivecaption

Trusted Zone: qq.com\qqlivehabit

Trusted Zone: qq.com\qqlivesearch

Trusted Zone: qq.com\video_1

TCP: DhcpNameServer = 195.130.131.2 195.130.130.130

FF - ProfilePath - c:\users\Eric\AppData\Roaming\Mozilla\Firefox\Profiles\o4wko9js.default\

FF - prefs.js: browser.startup.homepage - hxxp://www.google.be/

.

- - - - ORPHANS VERWIJDERD - - - -

.

WebBrowser-{55D7C7BC-12A7-4F9B-81C0-600D9A182395} - (no file)

AddRemove-RegiStax 6.1.0.8 update - 0:\program files (x86)\RegiStax 6\Uninstal.exe

.

.

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

.

[HKEY_USERS\S-1-5-21-1204391042-3033201888-2859419247-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]

@Denied: (2) (S-1-5-21-1204391042-3033201888-2859419247-1000)

@Denied: (2) (LocalSystem)

"Progid"="WindowsLiveMail.Email.1"

.

[HKEY_USERS\S-1-5-21-1204391042-3033201888-2859419247-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]

@Denied: (2) (S-1-5-21-1204391042-3033201888-2859419247-1000)

@Denied: (2) (LocalSystem)

"Progid"="WindowsLiveMail.VCard.1"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_146_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_146_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_146_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_146_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_146.ocx, 1"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Voltooingstijd: 2013-01-24 18:19:26

ComboFix-quarantined-files.txt 2013-01-24 17:19

.

Pre-Run: 124.638.957.568 bytes beschikbaar

Post-Run: 124.161.929.216 bytes beschikbaar

.

- - End Of File - - 99D1B33514875E728E61F02D65289AB4

Link naar reactie
Delen op andere sites

Hallo,

het openen van pagina's in IE gaat sneller eenmaal IE opgestart is.

Het haperen lijkt verdwenen.

Maar het opstarten zelf van IE en ook andere progr. zoals Skype gaat een pak trager.

Eenmaal opgestart gaan ze normaal.

Het opstarten van de computer duurt ookl langer.

Het bureaublad kom er op een normale tijd op maar dan duurt het zeker nog een 5 tal minuten vooraleer ik een progr.kan openen.

Wat ik verder ook merk is dat in sommige windows mappen zoals mijn documenten het icoontje van de map is verdwenen,ik zie enkel nog de omtrek van de map en de map kan ook nog normaal geopend worden.

Alvast bedankt voor alle hulp.

Mvg,eric

Link naar reactie
Delen op andere sites

Download de Emsisoft Emergency Kit naar het bureaublad en pak het ZIP bestand uit.

  • Open de map "EmsisoftEmergencyKit" en dubbelklik op "Start.exe"
  • Klik nu op "Emergency Kit Scanner" u krijg nu een melding dat het is aanbevolen om eerst te updaten sta dit toe door te klikken op "Ja"
    4f8d1a3bd3fbd-EmsisoftEK11.jpg
  • Als de update gereed is en de melding "Update process is succesvol afgerond" verschijnt klikt u op "menu" en dan op "Scan PC"
  • Selecteer de optie "Diep" als deze niet standaard al zo is ingesteld.
  • Klik Nu op de knop "Scan" en doe verder niets op de computer tijdens het scannen, deze scan kan een geruime tijd in beslag nemen dus wacht dit geduldig af.
  • Het venster met de waarschuwing over een verhoogd risico kunt u sluiten als de scan gereed is.
  • Zorg ervoor dat alle gevonden items zijn aangevinkt en druk dan op de knop "verwijder geselecteerde" u zal nu de volgende melding krijgen maar klik hier op "Ja"
    4f8d1a4d61ffa-EmsisoftEK2.jpg
  • Als het verwijderen gereed is klikt u op de knop "View report" en selecteert u het tekstbestand van deze scan met de naam zoals: a2scan_110730-111615.txt
  • Plaats de inhoud van dit LOG bestand straks in uw volgende bericht.
  • Herstart nu de computer.

Link naar reactie
Delen op andere sites

hallo,

net gedaan met scannen maar niks gevonden.

zie log hieronder.

Emsisoft Emergency Kit - Versie 3.0

Laatste Update: 26/01/2013 9:39:11

Scaninstellingen:

Scantype: Diepe scan

Objecten: Rootkits, Geheugen, Sporen, C:\, D:\

Detecteer riskware: Uit

Scan archieven: Aan

ADS Scan: Aan

Bestandsextensiefilter: Uit

Geavanceerde cache: Aan

Directe schijftoegang: Uit

Scan gestart: 26/01/2013 9:40:16

Gescand 489628

Gevonden 0

Scan geëindigd: 26/01/2013 12:09:38

Scantijd: 2:29:22

Link naar reactie
Delen op andere sites

Heb ik gedaan en was i.d.d beter.

Heb daarna de pc terug gewoon opgestart en ook daar was het al beter maar niet zoals in veilige modus.

Ik heb toen bitdefender zichzelf laten herstellen(is een optie wanneer je probeert om bitdefender probeert te verwijderen) en nu lijkt alles terug normaal te werken.

Enkel één klein probleem.

Wanneer ik IE opstart krijg ik telkens het schermpje voor de invoegtoepassingen te zien .

Ik kan dit gewoon wegklikken maar telkens ik een nieuwe pagina open komt het terug .

Dit is enkel als je een nieuw tabblad opent of IE volledig opnieuw opent.

Wanneer je IE opent en vandaar verder surft naar andere site's is het niet.

Het grootste probleem lijkt in elk geval al opgelost waarvoor mijn dank.

Mvg,eric

Link naar reactie
Delen op andere sites

Probeer dit eens.

- Open Internet explorer.

- Druk op de Alt toets op je toetsenbord. Er verschijnt een menu.

- Ga naar het menu Extra en kies Internetopties.

- Op de tab Geavanceerd klik je onderaan op de knop Opnieuw instellen...

- Klik nogmaals op Opnieuw instellen.

- Klik op Sluiten en herstart internet explorer.

Opmerking:

Bovenstaande procedure kan ook volautomatisch gebeuren, door dit programma te downloaden en uit te voeren: reset IE naar standaardinstellingen (klik erop).

Meer info over het opnieuw instellen van IE, vindt u hier.

Link naar reactie
Delen op andere sites

Gast
Dit topic is nu gesloten voor nieuwe reacties.
×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.