Ga naar inhoud

enjoy

Lid
 Bekijk profiel  Bekijk hun activiteit

  • Items

    25

  • Registratiedatum

  • Laatst bezocht

 Inhoudstype 

Berichten die geplaatst zijn door enjoy

    Internet in veilige modus, maar niet in normale modus

    in Archief Internet & Netwerk

    Geplaatst: · aangepast door enjoy

    hmm, nadat ik dubbelklikt op combofix heb ik 1x ja en 1x ok moeten drukken

    pc werd herstart en nu staat hij zeker al een kwartier op "welkom"

    is dit normaal?

    EDIT: het is dan dus toch gelukt

    ComboFix 09-12-17.03 - Bieke 18/12/2009 17:08:03.1.2 - x86

    Gestart vanuit: c:\documents and settings\Bieke\Bureaublad\KittyFix.exe

    WAARSCHUWING - DE RECOVERY CONSOLE IS NIET OP DIT SYSTEEM GEINSTALLEERD !!

    .

    (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    c:\docume~1\Bieke\LOCALS~1\Temp\wscsvc32.exe

    c:\recycler\S-1-5-21-364636953-3927251393-2100580992-1003

    c:\windows\system32\drivers\H8SRTuyabwwxvns.sys

    c:\windows\system32\H8SRTiigrrhixmt.dll

    c:\windows\system32\H8SRTqrgsntjlkl.dll

    c:\windows\system32\H8SRTtiqjxjxfmo.dat

    c:\windows\system32\krl32mainweq.dll

    c:\windows\system32\oem1.inf

    c:\windows\system32\srcr.dat

    .

    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    -------\Service_H8SRTd.sys

    -------\Legacy_H8SRTd.sys

    (((((((((((((((((((( Bestanden Gemaakt van 2009-11-18 to 2009-12-18 ))))))))))))))))))))))))))))))

    .

    2009-12-18 16:02 . 2009-08-29 01:24 784752 ----a-r- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\coFFPlgn\components\coFFPlgn.dll

    2009-12-18 16:02 . 2009-08-30 00:16 164216 ----a-r- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\IPSFFPlgn\components\IPSFFPl.dll

    2009-12-18 12:08 . 2009-12-18 12:08 388096 ----a-r- c:\documents and settings\Bieke\Application Data\Microsoft\Installer\{0761C9A8-8F3A-4216-B4A7-B7AFBF24A24A}\HiJackThis.exe

    2009-12-18 12:08 . 2009-12-18 12:08 -------- d-----w- c:\program files\TrendMicro

    2009-12-17 21:17 . 2009-12-17 21:17 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\Mozilla

    2009-12-17 20:25 . 2009-12-17 20:26 -------- d-----w- c:\documents and settings\Bieke\Local Settings\Application Data\Tific

    2009-12-17 20:21 . 2009-12-17 20:21 -------- d-----w- c:\documents and settings\Bieke\Application Data\Tific

    2009-12-17 20:17 . 2009-12-17 20:17 0 ----a-w- c:\windows\nsreg.dat

    2009-12-17 20:17 . 2009-12-17 20:17 -------- d-----w- c:\documents and settings\Bieke\Local Settings\Application Data\Mozilla

    2009-12-17 20:12 . 2009-12-17 21:19 -------- d-----w- c:\program files\Common Files\Symantec Shared

    2009-12-17 20:12 . 2009-12-17 20:16 60808 ----a-w- c:\windows\system32\S32EVNT1.DLL

    2009-12-17 20:12 . 2009-12-17 20:16 124976 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS

    2009-12-17 20:12 . 2009-12-17 20:16 -------- d-----w- c:\program files\Symantec

    2009-12-17 20:10 . 2009-12-17 20:10 -------- d-----w- c:\program files\NortonInstaller

    2009-12-17 00:45 . 2009-12-17 00:45 79488 ----a-w- c:\documents and settings\Bieke\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll

    2009-12-16 22:21 . 2009-12-16 22:21 -------- d-----w- c:\windows\Sun

    2009-12-08 16:03 . 2009-12-08 16:04 -------- d-----w- c:\documents and settings\Bieke\Local Settings\Application Data\Adobe

    2009-11-19 18:38 . 2009-08-06 18:23 215920 ----a-w- c:\windows\system32\muweb.dll

    2009-11-19 18:38 . 2009-08-06 18:23 274288 ----a-w- c:\windows\system32\mucltui.dll

    2009-11-18 21:07 . 2009-12-18 15:07 -------- d-----w- c:\documents and settings\Bieke\Tracing

    2009-11-18 21:06 . 2009-11-18 21:06 -------- d-----w- c:\program files\Microsoft Silverlight

    2009-11-18 21:06 . 2009-11-18 21:06 -------- d-----w- c:\program files\Microsoft Office Outlook Connector

    2009-11-18 21:05 . 2009-08-05 21:48 54752 ----a-w- c:\windows\system32\drivers\fssfltr_tdi.sys

    2009-11-18 21:04 . 2009-11-18 21:04 -------- d-----w- c:\program files\Microsoft Sync Framework

    2009-11-18 21:03 . 2006-11-29 12:06 3426072 ----a-w- c:\windows\system32\d3dx9_32.dll

    2009-11-18 21:02 . 2009-11-18 21:02 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition

    2009-11-18 21:00 . 2009-11-18 21:06 -------- d-----w- c:\program files\Microsoft

    2009-11-18 20:59 . 2009-11-18 20:59 -------- d-----w- c:\program files\Windows Live SkyDrive

    2009-11-18 20:59 . 2009-11-18 21:05 -------- d-----w- c:\program files\Windows Live

    2009-11-18 20:53 . 2009-11-18 20:53 -------- d-----w- c:\program files\Common Files\Windows Live

    .

    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2009-12-17 20:16 . 2009-12-17 20:12 805 ----a-w- c:\windows\system32\drivers\SYMEVENT.INF

    2009-12-17 20:16 . 2009-12-17 20:12 7443 ----a-w- c:\windows\system32\drivers\SYMEVENT.CAT

    2009-12-17 20:11 . 2009-12-17 20:11 -------- d-----w- c:\program files\Windows Sidebar

    2009-12-17 20:11 . 2009-12-17 20:11 -------- d-----w- c:\program files\Norton Internet Security

    2009-12-17 20:11 . 2009-11-14 22:13 -------- d-----w- c:\documents and settings\All Users\Application Data\Norton

    2009-12-17 20:08 . 2009-11-17 20:46 -------- d-----w- c:\documents and settings\All Users\Application Data\McAfee

    2009-12-17 20:07 . 2009-11-14 22:12 -------- d-----w- c:\documents and settings\All Users\Application Data\AOL

    2009-11-19 18:45 . 2008-08-05 16:03 81896 ----a-w- c:\windows\system32\perfc013.dat

    2009-11-19 18:45 . 2008-08-05 16:03 466512 ----a-w- c:\windows\system32\perfh013.dat

    2009-11-18 20:52 . 2009-11-14 14:32 70448 ----a-w- c:\documents and settings\Bieke\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

    2009-11-17 22:06 . 2009-11-17 22:06 -------- d-----w- c:\program files\K-Lite Codec Pack

    2009-11-17 22:04 . 2009-11-17 22:04 -------- d-----w- c:\program files\Common Files\Webroot Shared

    2009-11-17 22:04 . 2009-11-17 22:04 -------- d-----w- c:\documents and settings\Bieke\Application Data\Webroot

    2009-11-17 22:04 . 2009-11-17 22:04 -------- d-----w- c:\program files\Webroot

    2009-11-17 22:04 . 2009-11-17 22:04 -------- d-----w- c:\documents and settings\All Users\Application Data\Webroot

    2009-11-17 22:02 . 2009-11-17 22:01 -------- d-----w- c:\program files\jv16 PowerTools

    2009-11-17 21:59 . 2009-11-17 21:16 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help

    2009-11-17 21:49 . 2009-11-14 22:13 -------- d-----w- c:\program files\Microsoft Works

    2009-11-17 21:38 . 2009-11-17 21:38 -------- d-----w- c:\program files\MSBuild

    2009-11-17 21:29 . 2009-11-17 21:29 -------- d-----w- c:\program files\Microsoft.NET

    2009-11-17 21:22 . 2009-11-17 21:22 -------- d-----w- c:\program files\Microsoft Visual Studio 8

    2009-11-17 21:13 . 2009-11-17 21:07 -------- d-----w- c:\documents and settings\Bieke\Application Data\DAEMON Tools Lite

    2009-11-17 21:11 . 2009-11-17 21:11 -------- d-----w- c:\documents and settings\All Users\Application Data\DAEMON Tools Lite

    2009-11-17 21:11 . 2009-11-17 21:11 -------- d-----w- c:\program files\DAEMON Tools Toolbar

    2009-11-17 21:11 . 2009-11-17 21:10 -------- d-----w- c:\program files\DAEMON Tools Lite

    2009-11-17 21:07 . 2009-11-17 21:07 721904 ----a-w- c:\windows\system32\drivers\sptd.sys

    2009-11-14 15:19 . 2009-11-14 15:19 -------- d-----w- c:\documents and settings\Bieke\Application Data\Template

    2009-11-14 15:19 . 2009-11-14 15:19 0 ----a-w- c:\documents and settings\Bieke\Application Data\wklnhst.dat

    2009-11-14 14:30 . 2009-11-14 14:30 259584 --sha-r- C:\BCDEDIT.EXE

    2009-11-14 14:30 . 2009-11-14 14:30 259584 ----a-w- c:\windows\system32\bcdedit.exe

    2009-11-14 14:30 . 2009-11-14 14:30 102400 --sha-r- C:\bootsect.exe

    2009-11-14 14:26 . 2009-11-14 14:26 -------- d-----w- c:\program files\WIDCOMM

    2009-11-14 14:18 . 2009-11-14 22:13 -------- d-----w- c:\program files\HPQ

    .

    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "MsnMsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]

    "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-16 15360]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-02-15 135168]

    "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-02-15 159744]

    "Persistence"="c:\windows\system32\igfxpers.exe" [2008-02-15 131072]

    "IDTSysTrayApp"="sttray.exe" [2008-09-11 446556]

    "SysTrayApp"="c:\program files\IDT\WDM\sttray.exe" [2008-09-11 446556]

    "AESTFltr"="c:\windows\system32\AESTFltr.exe" [2008-12-03 729088]

    "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-12-04 1410344]

    "SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-08-02 144784]

    "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]

    "HP Mobile Broadband"="c:\swsetup\HPQWWAN\HPMobileBroadband.exe" [2008-07-08 439600]

    "hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2008-04-15 488752]

    "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

    "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-16 15360]

    c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\

    Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2008-9-2 604776]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

    @="Driver"

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=

    "%windir%\\system32\\sessmgr.exe"=

    "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

    "c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=

    "c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=

    "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=

    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

    "c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=

    R0 SahdIa32;HDD Filter Driver;c:\windows\system32\drivers\SahdIa32.sys [10-2-2009 6:27 21488]

    R0 SaibIa32;Volume Filter Driver;c:\windows\system32\drivers\SaibIa32.sys [10-2-2009 6:27 15856]

    R0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NIS\1100000.088\SymDS.sys [17-12-2009 21:11 328752]

    R0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NIS\1100000.088\SymEFA.sys [17-12-2009 21:11 169008]

    R0 SysCow;SysCow;c:\windows\system32\drivers\syscow32x.sys [24-9-2008 22:09 103792]

    R1 BHDrvx86;BHDrvx86;c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\BASHDefs\20090829.001\BHDrvx86.sys [17-12-2009 21:11 506928]

    R1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\NIS\1100000.088\ccHPx86.sys [17-12-2009 21:11 501888]

    R1 SaibVd32;Virtual Disk Driver;c:\windows\system32\drivers\SaibVd32.sys [10-2-2009 6:27 25584]

    R1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NIS\1100000.088\Ironx86.sys [17-12-2009 21:11 114736]

    R2 9734BF6A-2DCD-40f0-BAB0-5AAFEEBE1269;Roxio SAIB Service;c:\program files\Roxio\BackOnTrack\Disaster Recovery\SaibSVC.exe [11-12-2008 22:46 125424]

    R2 BOTService;BOTService;c:\program files\Roxio\BackOnTrack\Instant Restore\BOTService.exe [25-12-2008 18:28 203248]

    R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [18-11-2009 22:05 54752]

    R2 NIS;Norton Internet Security;c:\program files\Norton Internet Security\Engine\17.0.0.136\ccSvcHst.exe [17-12-2009 21:11 126392]

    R2 wwEngineSvc;Window Washer Engine;c:\program files\Webroot\Washer\WasherSvc.exe [17-11-2009 23:04 598856]

    R3 AESTAud;AE Audio Service;c:\windows\system32\drivers\AESTAud.sys [10-2-2009 6:11 112128]

    R3 IDSxpx86;IDSxpx86;c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\Definitions\IPSDefs\20090828.002\IDSxpx86.sys [17-12-2009 21:11 329080]

    S3 EraserUtilRebootDrv;EraserUtilRebootDrv;\??\c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys --> c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [?]

    S3 fsssvc;De service Windows Live Family Safety;c:\program files\Windows Live\Family Safety\fsssvc.exe [5-8-2009 22:48 704864]

    S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [17-11-2009 22:07 721904]

    .

    ------- Bijkomende Scan -------

    .

    uStart Page = hxxp://www.google.be/

    mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=nl_be&c=91&bd=minipavilion&pf=cnnb

    IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

    IE: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

    IE: Send To Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

    FF - ProfilePath - c:\documents and settings\Bieke\Application Data\Mozilla\Firefox\Profiles\c7016tl9.default\

    FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll

    FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll

    .

    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

    Rootkit scan 2009-12-18 17:18

    Windows 5.1.2600 Service Pack 3 NTFS

    scannen van verborgen processen ...

    scannen van verborgen autostart items ...

    scannen van verborgen bestanden ...

    Scan succesvol afgerond

    verborgen bestanden: 0

    **************************************************************************

    [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\NIS]

    "ImagePath"="\"c:\program files\Norton Internet Security\Engine\17.0.0.136\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files\Norton Internet Security\Engine\17.0.0.136\diMaster.dll\" /prefetch:1"

    .

    --------------------- DLLs Geladen Onder Lopende Processen ---------------------

    - - - - - - - > 'explorer.exe'(2420)

    c:\windows\system32\btmmhook.dll

    c:\windows\system32\WPDShServiceObj.dll

    c:\windows\system32\btncopy.dll

    c:\windows\system32\PortableDeviceTypes.dll

    c:\windows\system32\PortableDeviceApi.dll

    c:\program files\Microsoft Office\Office12\1043\GrooveIntlResource.dll

    .

    ------------------------ Andere Aktieve Processen ------------------------

    .

    c:\program files\idt\wdm\stacsv.exe

    c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

    c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

    c:\windows\system32\igfxsrvc.exe

    c:\program files\Hewlett-Packard\Shared\hpqwmiex.exe

    c:\progra~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE

    c:\program files\Hewlett-Packard\Shared\HpqToaster.exe

    .

    **************************************************************************

    .

    Voltooingstijd: 2009-12-18 17:24:36 - machine werd herstart

    ComboFix-quarantined-files.txt 2009-12-18 16:24

    Pre-Run: 68.212.871.168 bytes beschikbaar

    Post-Run: 68.160.671.744 bytes beschikbaar

    - - End Of File - - 6A6B4E5B9259DFC9902123435A84EFE7

    Internet in veilige modus, maar niet in normale modus

    in Archief Internet & Netwerk

    Geplaatst:

    Hey, ik heb mcafee gezocht tussen de program files en die stond er niet meer tussen

    AntiMalware wel en die heb ik verwijderd

    dit heb ik dan ook verwijderd

    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

    O4 - HKCU\..\Run: [clspackxq.exe] C:\DOCUME~1\Bieke\LOCALS~1\Temp\clspackxq.exe

    O4 - HKCU\..\Run: [AntiMalware] "C:\Program Files\AntiMalware\antimalware.exe" -noscan

    O4 - HKCU\..\Run: [McAfee Update] C:\DOCUME~1\Bieke\LOCALS~1\Temp\mcupdate_1261079446.exe /insfin C:\DOCUME~1\Bieke\LOCALS~1\Temp\mcupdate_1261079446.ini /syncfin

    ik heb ook MBAM gedownload zoals je zei, maar die wil niet openen

    er komt een zandlopertje, die gaat weg en er gebeurd nix

    + het updaten zal dan waarschijnlijk niet lukken aangezien het internet er niet op werkt.

    Alvast bedankt

    Internet in veilige modus, maar niet in normale modus

    in Archief Internet & Netwerk

    Geplaatst:

    Logfile of Trend Micro HijackThis v2.0.3 (BETA)

    Scan saved at 13:08:27, on 18/12/2009

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v7.00 (7.00.6000.16640)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\Roxio\BackOnTrack\Instant Restore\BOTService.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    c:\program files\idt\wdm\stacsv.exe

    C:\WINDOWS\Explorer.EXE

    C:\WINDOWS\system32\ctfmon.exe

    C:\WINDOWS\system32\igfxtray.exe

    C:\WINDOWS\system32\hkcmd.exe

    C:\Program Files\Windows Live\Toolbar\wltuser.exe

    C:\WINDOWS\system32\igfxsrvc.exe

    C:\WINDOWS\system32\igfxpers.exe

    C:\Program Files\IDT\WDM\sttray.exe

    C:\WINDOWS\system32\AESTFltr.exe

    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

    C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe

    C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe

    C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

    C:\Program Files\Windows Live\Messenger\msnmsgr.exe

    C:\DOCUME~1\Bieke\LOCALS~1\Temp\clspackxq.exe

    C:\DOCUME~1\Bieke\LOCALS~1\Temp\mcupdate_1261079446.exe

    C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

    C:\Program Files\Roxio\BackOnTrack\Disaster Recovery\SaibSVC.exe

    C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE

    C:\DOCUME~1\Bieke\LOCALS~1\Temp\wscsvc32.exe

    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\Webroot\Washer\WasherSvc.exe

    C:\WINDOWS\system32\wuauclt.exe

    C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

    C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe

    C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe

    C:\Program Files\Internet Explorer\Iexplore.exe

    C:\WINDOWS\system32\msiexec.exe

    C:\WINDOWS\system32\wuauclt.exe

    C:\Program Files\TrendMicro\HiJackThis\HiJackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = mijnAOL | HP

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = mijnAOL | HP

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = mijnAOL | HP

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

    O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\17.0.0.136\coIEPlg.dll

    O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\17.0.0.136\IPSBHO.DLL

    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll

    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

    O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

    O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\17.0.0.136\coIEPlg.dll

    O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe

    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe

    O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe

    O4 - HKLM\..\Run: [iDTSysTrayApp] sttray.exe

    O4 - HKLM\..\Run: [sysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe

    O4 - HKLM\..\Run: [AESTFltr] %SystemRoot%\system32\AESTFltr.exe /NoDlg

    O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"

    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

    O4 - HKLM\..\Run: [HP Mobile Broadband] c:\SWsetup\HPQWWAN\HPMobileBroadband.exe /TrayMode

    O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

    O4 - HKCU\..\Run: [clspackxq.exe] C:\DOCUME~1\Bieke\LOCALS~1\Temp\clspackxq.exe

    O4 - HKCU\..\Run: [AntiMalware] "C:\Program Files\AntiMalware\antimalware.exe" -noscan

    O4 - HKCU\..\Run: [McAfee Update] C:\DOCUME~1\Bieke\LOCALS~1\Temp\mcupdate_1261079446.exe /insfin C:\DOCUME~1\Bieke\LOCALS~1\Temp\mcupdate_1261079446.ini /syncfin

    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service')

    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')

    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

    O4 - Global Startup: Bluetooth.lnk = ?

    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

    O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

    O8 - Extra context menu item: Send To Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

    O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

    O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

    O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

    O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

    O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

    O23 - Service: Roxio SAIB Service (9734BF6A-2DCD-40f0-BAB0-5AAFEEBE1269) - Unknown owner - C:\Program Files\Roxio\BackOnTrack\Disaster Recovery\SaibSVC.exe

    O23 - Service: BOTService - Sonic Solutions - C:\Program Files\Roxio\BackOnTrack\Instant Restore\BOTService.exe

    O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

    O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe

    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe

    O23 - Service: McAfee Network Agent (McNASvc) - Unknown owner - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe (file missing)

    O23 - Service: McAfee Real-time Scanner (McShield) - Unknown owner - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe (file missing)

    O23 - Service: McAfee SystemGuards (McSysmon) - Unknown owner - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe (file missing)

    O23 - Service: McAfee Personal Firewall Service (MpfService) - Unknown owner - C:\Program Files\McAfee\MPF\MPFSrv.exe (file missing)

    O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files\Norton Internet Security\Engine\17.0.0.136\ccSvcHst.exe

    O23 - Service: Audio Service (STacSV) - IDT, Inc. - c:\program files\idt\wdm\stacsv.exe

    O23 - Service: Window Washer Engine (wwEngineSvc) - Webroot Software, Inc. - C:\Program Files\Webroot\Washer\WasherSvc.exe

    --

    End of file - 10507 bytes

    Internet in veilige modus, maar niet in normale modus

    in Archief Internet & Netwerk

    Geplaatst:

    Hey, ik heb hier een compaq mini van een vriendin. Ze vroeg of ik eens kon kijken om alle virussen er af te krijgen.

    Ik heb Norton 2010 erop gezet, via usb stick.

    Maar ik heb internet nodig om up te daten en te kunnen scannen.

    Ik probeerde eerst draadloos, die gaf uitstekende verbinding..maar hij wou niet op internet en dus ook niet updaten.

    Ik heb dan internet via kabel geprobeerd, windows toonde mij ook dat ik verbinding had

    Maar internet ging niet, firefox en IE heb ik geprobeerd.

    Toen ben ik in veilige modus geweest, daar werkte internet wel.

    Ik heb Norton daar proberen updaten maar dat lukte niet. Hoewel ik in veilige modus wel kon scannen, vond hij enkel 2 tracking cookies, meer niet.

    Maar er staan wel virussen/spyware op de pc want ik krijg allerlij pop ups in windows.

    Iemand enig idee wat hier de oorzaak van zou kunnen zijn?

    Groetjes, enjoy.

    onderdelen wisselen

    in Archief Hardware algemeen

    Geplaatst:

    Dit is letterlijk je eigen ouders bestelen, en over die pc die je krijgt hoef je niet te klagen, er zijn vele kinderen die het met minder moeten stellen.

    Dit vind ik een lelijke topic, en hoort eigelijk gesloten te worden.

    Er is een spreekwoord dat luid 'jaloezie is het oorkussen van de duivel'.

    Jij hebt geen raad nodig, maar een degelijke opvoeding, en toon wat meer respect voor je ouders, dat zal je nog van pas komen.

    Ik heb mijn eigen pc moeten betalen:)

    en mijn stiefpa heeft heel wat geld, en heeft daar nooit 1 cent van aan mij gegeven, voor eender wat (zijn keuze), en hij kan mij niet zien, dan moet die geen respect ofzo terug verwachten...

    en een degelijke opvoeding nodig???

    nu beledig je mijn moeder, die me een heel goede opvoeding heeft gegeven :)

    onderdelen wisselen

    in Archief Hardware algemeen

    Geplaatst:

    dit is van mijn pa:

    ------------------

    System Information

    ------------------

    Time of this report: 2/5/2008, 12:57:01

    Machine name: PATRICK-A8UYB6G

    Operating System: Windows XP Professional (5.1, Build 2600) Service Pack 2 (2600.xpsp_sp2_rtm.040803-2158)

    Language: Dutch (Regional Setting: Dutch)

    System Manufacturer: n/a

    System Model: n/a

    BIOS: Award Modular BIOS v6.0

    Processor: AMD Athlon XP 3200+, MMX, 3DNow, ~2.2GHz

    Memory: 1024MB RAM

    Page File: 176MB used, 2285MB available

    Windows Dir: C:\WINDOWS

    DirectX Version: DirectX 9.0c (4.09.0000.0904)

    DX Setup Parameters: Not found

    DxDiag Version: 5.03.2600.2180 32bit Unicode

    ---------------

    Display Devices

    ---------------

    Card name: NVIDIA GeForce 6800 Ultra

    Manufacturer: NVIDIA

    Chip type: GeForce 6800 Ultra

    DAC type: Integrated RAMDAC

    Device Key: Enum\PCI\VEN_10DE&DEV_0040&SUBSYS_02051462&REV_A1

    Display Memory: 256.0 MB

    Current Mode: 1024 x 768 (16 bit) (60Hz)

    Monitor: Plug en Play-monitor

    Monitor Max Res: 1600,1200

    Driver Name: nv4_disp.dll

    Driver Version: 6.14.0010.9371 (English)

    DDI Version: 9 (or higher)

    Driver Attributes: Final Retail

    Driver Date/Size: 10/22/2006 12:22:00, 4527488 bytes

    WHQL Logo'd: Yes

    WHQL Date Stamp: n/a

    VDD: n.v.t.

    Mini VDD: nv4_mini.sys

    Mini VDD Date: 10/22/2006 12:22:00, 3994624 bytes

    Device Identifier: {D7B71E3E-4300-11CF-4953-0F2200C2CB35}

    Vendor ID: 0x10DE

    Device ID: 0x0040

    SubSys ID: 0x02051462

    Revision ID: 0x00A1

    Revision ID: 0x00A1

    -------------

    Sound Devices

    -------------

    Description: SB Audigy 2 ZS Audio [D800]

    Default Sound Playback: Yes

    Default Voice Playback: Yes

    Hardware ID: PCI\VEN_1102&DEV_0004&SUBSYS_20021102&REV_04

    Manufacturer ID: 1

    Product ID: 100

    Type: WDM

    Driver Name: ctaud2k.sys

    Driver Version: 5.12.0001.0442 (English)

    Driver Attributes: Final Retail

    WHQL Logo'd: Yes

    Date and Size: 11/19/2003 03:13:54, 366160 bytes

    Other Files:

    Driver Provider: Creative

    HW Accel Level: Full

    Cap Flags: 0xF5F

    Min/Max Sample Rate: 4000, 192000

    Static/Strm HW Mix Bufs: 64, 62

    Static/Strm HW 3D Bufs: 64, 62

    HW Memory: 0

    Voice Management: Yes

    EAX 2.0 Listen/Src: Yes, Yes

    I3DL2 Listen/Src: No, No

    Sensaura ZoomFX: No

    Registry: OK

    Sound Test Result: Not run

    ---------------------

    Sound Capture Devices

    ---------------------

    Description: SB Audigy 2 ZS Audio [D800]

    Default Sound Capture: Yes

    Default Voice Capture: Yes

    Driver Name: ctaud2k.sys

    Driver Version: 5.12.0001.0442 (English)

    Driver Attributes: Final Retail

    Date and Size: 11/19/2003 03:13:54, 366160 bytes

    Cap Flags: 0x41

    Format Flags: 0xFFF

    en dit is van mij :

    ------------------

    System Information

    ------------------

    Time of this report: 2/5/2008, 13:01:21

    Machine name: AENEAS

    Operating System: Windows XP Professional (5.1, Build 2600) Service Pack 2 (2600.xpsp_sp2_gdr.070227-2254)

    Language: Dutch (Regional Setting: Dutch)

    System Manufacturer: NVIDIA

    System Model: AWRDACPI

    BIOS: Phoenix - AwardBIOS v6.00PG

    Processor: AMD Sempron Processor 2600+, MMX, 3DNow, ~1.6GHz

    Memory: 1024MB RAM

    Page File: 289MB used, 2170MB available

    Windows Dir: C:\WINDOWS

    DirectX Version: DirectX 9.0c (4.09.0000.0904)

    DX Setup Parameters: Not found

    DxDiag Version: 5.03.2600.2180 32bit Unicode

    ---------------

    Display Devices

    ---------------

    Card name: ATI Radeon 9600 / X1050 Series

    Manufacturer: ATI Technologies Inc.

    Chip type: ATI Radeon Graphics Processor AGP (0x4152)

    DAC type: Internal DAC(400MHz)

    Device Key: Enum\PCI\VEN_1002&DEV_4152&SUBSYS_C01A1043&REV_00

    Display Memory: 128.0 MB

    Current Mode: 1280 x 1024 (32 bit) (85Hz)

    Monitor: Plug en Play-monitor

    Monitor Max Res: 1600,1200

    Driver Name: ati2dvag.dll

    Driver Version: 6.14.0010.6764 (English)

    DDI Version: 9 (or higher)

    Driver Attributes: Final Retail

    Driver Date/Size: 12/21/2007 04:08:18, 272384 bytes

    WHQL Logo'd: Yes

    WHQL Date Stamp: n/a

    VDD: n.v.t.

    Mini VDD: ati2mtag.sys

    Mini VDD Date: 12/21/2007 04:53:20, 2843136 bytes

    Device Identifier: {D7B71EE2-0212-11CF-9F69-10E0A1C2CB35}

    Vendor ID: 0x1002

    Device ID: 0x4152

    SubSys ID: 0xC01A1043

    Revision ID: 0x0000

    Revision ID: 0x0000

    Video Accel: ModeMPEG2_C ModeMPEG2_D ModeWMV8_B ModeWMV8_A ModeWMV9_B ModeWMV9_A

    -------------

    Sound Devices

    -------------

    Description: Realtek AC97 Audio

    Default Sound Playback: Yes

    Default Voice Playback: Yes

    Hardware ID: PCI\VEN_10DE&DEV_00EA&SUBSYS_75851462&REV_A1

    Manufacturer ID: 1

    Product ID: 100

    Type: WDM

    Driver Name: ALCXWDM.SYS

    Driver Version: 5.10.0000.5760 (English)

    Driver Attributes: Final Retail

    WHQL Logo'd: Yes

    Date and Size: 12/1/2004 13:40:08, 2300928 bytes

    Other Files:

    Driver Provider: Realtek Semiconductor Corp.

    HW Accel Level: Full

    Cap Flags: 0xF5F

    Min/Max Sample Rate: 100, 192000

    Static/Strm HW Mix Bufs: 25, 23

    Static/Strm HW 3D Bufs: 25, 23

    HW Memory: 0

    Voice Management: No

    EAX 2.0 Listen/Src: Yes, Yes

    I3DL2 Listen/Src: Yes, Yes

    Sensaura ZoomFX: No

    Registry: OK

    Sound Test Result: Not run

    ---------------------

    Sound Capture Devices

    ---------------------

    Description: Realtek AC97 Audio

    Default Sound Capture: Yes

    Default Voice Capture: Yes

    Driver Name: ALCXWDM.SYS

    Driver Version: 5.10.0000.5760 (English)

    Driver Attributes: Final Retail

    Date and Size: 12/1/2004 13:40:08, 2300928 bytes

    Cap Flags: 0x41

    Format Flags: 0xFFF

    onderdelen wisselen

    in Archief Hardware algemeen

    Geplaatst:

    Hey, ik zou dus onderdelen van mijn vader zijn pc willen wisselen met mijn pc, omdat zijne beter is, maar hij mag er nix van merken

    ik moet het moederbord, de grafische kaart en de proccesor wisselen.

    als ik die gewisseld heb, blijven zijn gegevens dan op zijn pc staan?

    ik bedoel zijn w8woord om in te loggen, software etc...?

Logo

OVER ONS

PC Helpforum helpt GRATIS computergebruikers sinds juli 2006. Ons team geeft via het forum professioneel antwoord op uw vragen en probeert uw pc problemen zo snel mogelijk op te lossen. Word lid vandaag, plaats je vraag online en het PC Helpforum-team helpt u graag verder!

SITEMAP

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.