Ga naar inhoud

breyton

Lid
  • Items

    48
  • Registratiedatum

  • Laatst bezocht

Berichten die geplaatst zijn door breyton

  1. Beste fixers,

    Ik heb sinds vandaag het 'live security platinum' virus op m'n pc.

    Ik heb eerst proberen het zelf op te lossen, maar helaas...

    Pc in veilige modus + netwerkmogelijkheden gezet

    Een Malwarebytes scan gedaan. Het virus gevonden en ook verwijderd.

    Pc terug opgestart en het virus was daar terug.

    Heb het programma TDSSKiller gedownload en een scan laten uitvoeren.

    Resultaat van de scan:

    23:56:14.0237 1824 TDSS rootkit removing tool 2.7.45.0 Jul 9 2012 12:46:35

    23:56:14.0674 1824 ============================================================

    23:56:14.0674 1824 Current date / time: 2012/07/09 23:56:14.0674

    23:56:14.0674 1824 SystemInfo:

    23:56:14.0674 1824

    23:56:14.0674 1824 OS Version: 6.1.7601 ServicePack: 1.0

    23:56:14.0674 1824 Product type: Workstation

    23:56:14.0674 1824 ComputerName: GLENN-HP

    23:56:14.0674 1824 UserName: Glenn

    23:56:14.0674 1824 Windows directory: C:\Windows

    23:56:14.0674 1824 System windows directory: C:\Windows

    23:56:14.0674 1824 Running under WOW64

    23:56:14.0674 1824 Processor architecture: Intel x64

    23:56:14.0674 1824 Number of processors: 4

    23:56:14.0674 1824 Page size: 0x1000

    23:56:14.0674 1824 Boot type: Safe boot with network

    23:56:14.0674 1824 ============================================================

    23:56:15.0376 1824 Drive \Device\Harddisk0\DR0 - Size: 0x1D1C1116000 (1863.02 Gb), SectorSize: 0x200, Cylinders: 0x3B601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

    23:56:15.0392 1824 ============================================================

    23:56:15.0392 1824 \Device\Harddisk0\DR0:

    23:56:15.0392 1824 MBR partitions:

    23:56:15.0392 1824 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000

    23:56:15.0392 1824 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0xE70B7000

    23:56:15.0392 1824 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0xE70E9800, BlocksNum 0x1D1E800

    23:56:15.0392 1824 ============================================================

    23:56:15.0438 1824 C: <-> \Device\Harddisk0\DR0\Partition1

    23:56:15.0548 1824 D: <-> \Device\Harddisk0\DR0\Partition2

    23:56:15.0548 1824 ============================================================

    23:56:15.0548 1824 Initialize success

    23:56:15.0548 1824 ============================================================

    23:56:34.0392 1656 ============================================================

    23:56:34.0392 1656 Scan started

    23:56:34.0392 1656 Mode: Manual;

    23:56:34.0392 1656 ============================================================

    23:56:34.0564 1656 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys

    23:56:34.0564 1656 1394ohci - ok

    23:56:34.0580 1656 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys

    23:56:34.0580 1656 ACPI - ok

    23:56:34.0595 1656 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys

    23:56:34.0595 1656 AcpiPmi - ok

    23:56:34.0611 1656 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\drivers\adp94xx.sys

    23:56:34.0626 1656 adp94xx - ok

    23:56:34.0642 1656 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\drivers\adpahci.sys

    23:56:34.0642 1656 adpahci - ok

    23:56:34.0673 1656 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\drivers\adpu320.sys

    23:56:34.0673 1656 adpu320 - ok

    23:56:34.0689 1656 AeLookupSvc (4b78b431f225fd8624c5655cb1de7b61) C:\Windows\System32\aelupsvc.dll

    23:56:34.0689 1656 AeLookupSvc - ok

    23:56:34.0736 1656 AFD (1c7857b62de5994a75b054a9fd4c3825) C:\Windows\system32\drivers\afd.sys

    23:56:34.0736 1656 AFD - ok

    23:56:34.0767 1656 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys

    23:56:34.0767 1656 agp440 - ok

    23:56:34.0782 1656 ALG (3290d6946b5e30e70414990574883ddb) C:\Windows\System32\alg.exe

    23:56:34.0782 1656 ALG - ok

    23:56:34.0798 1656 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys

    23:56:34.0798 1656 aliide - ok

    23:56:34.0814 1656 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys

    23:56:34.0814 1656 amdide - ok

    23:56:34.0829 1656 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\drivers\amdk8.sys

    23:56:34.0829 1656 AmdK8 - ok

    23:56:34.0829 1656 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\drivers\amdppm.sys

    23:56:34.0829 1656 AmdPPM - ok

    23:56:34.0860 1656 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys

    23:56:34.0860 1656 amdsata - ok

    23:56:34.0876 1656 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\drivers\amdsbs.sys

    23:56:34.0876 1656 amdsbs - ok

    23:56:34.0892 1656 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys

    23:56:34.0892 1656 amdxata - ok

    23:56:34.0923 1656 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys

    23:56:34.0923 1656 AppID - ok

    23:56:34.0938 1656 AppIDSvc (0bc381a15355a3982216f7172f545de1) C:\Windows\System32\appidsvc.dll

    23:56:34.0938 1656 AppIDSvc - ok

    23:56:34.0954 1656 Appinfo (3977d4a871ca0d4f2ed1e7db46829731) C:\Windows\System32\appinfo.dll

    23:56:34.0954 1656 Appinfo - ok

    23:56:34.0970 1656 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\drivers\arc.sys

    23:56:34.0970 1656 arc - ok

    23:56:34.0985 1656 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\drivers\arcsas.sys

    23:56:34.0985 1656 arcsas - ok

    23:56:35.0048 1656 aspnet_state (9217d874131ae6ff8f642f124f00a555) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe

    23:56:35.0063 1656 aspnet_state - ok

    23:56:35.0079 1656 aswFsBlk (ce6d8bcc4787704ea4feeb92b0d0caf8) C:\Windows\system32\drivers\aswFsBlk.sys

    23:56:35.0079 1656 aswFsBlk - ok

    23:56:35.0110 1656 aswMonFlt (0debeb2e3fbd0bf5343125cce617f105) C:\Windows\system32\drivers\aswMonFlt.sys

    23:56:35.0110 1656 aswMonFlt - ok

    23:56:35.0126 1656 aswRdr (952edc2e81f85d1781958d4128bf59f8) C:\Windows\system32\drivers\aswRdr.sys

    23:56:35.0126 1656 aswRdr - ok

    23:56:35.0157 1656 aswSnx (dd383e2ac941c545a85ab72503da6c12) C:\Windows\system32\drivers\aswSnx.sys

    23:56:35.0157 1656 aswSnx - ok

    23:56:35.0172 1656 aswSP (ef5403fb8b2dcb791ec365fdf6040a4a) C:\Windows\system32\drivers\aswSP.sys

    23:56:35.0172 1656 aswSP - ok

    23:56:35.0188 1656 aswTdi (34165da5c6b30c0f9d61246bf8a28040) C:\Windows\system32\drivers\aswTdi.sys

    23:56:35.0188 1656 aswTdi - ok

    23:56:35.0204 1656 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys

    23:56:35.0204 1656 AsyncMac - ok

    23:56:35.0235 1656 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys

    23:56:35.0235 1656 atapi - ok

    23:56:35.0282 1656 AudioEndpointBuilder (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll

    23:56:35.0282 1656 AudioEndpointBuilder - ok

    23:56:35.0282 1656 AudioSrv (f23fef6d569fce88671949894a8becf1) C:\Windows\System32\Audiosrv.dll

    23:56:35.0297 1656 AudioSrv - ok

    23:56:35.0328 1656 avast! Antivirus (996e6d052438e8d8dfd501f31560b2e0) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

    23:56:35.0344 1656 avast! Antivirus - ok

    23:56:35.0360 1656 AxInstSV (a6bf31a71b409dfa8cac83159e1e2aff) C:\Windows\System32\AxInstSV.dll

    23:56:35.0375 1656 AxInstSV - ok

    23:56:35.0391 1656 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\drivers\bxvbda.sys

    23:56:35.0406 1656 b06bdrv - ok

    23:56:35.0422 1656 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys

    23:56:35.0422 1656 b57nd60a - ok

    23:56:35.0484 1656 BBSvc (93ee7d9c35ae7e9ffda148d7805f1421) C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE

    23:56:35.0484 1656 BBSvc - ok

    23:56:35.0500 1656 BDESVC (fde360167101b4e45a96f939f388aeb0) C:\Windows\System32\bdesvc.dll

    23:56:35.0500 1656 BDESVC - ok

    23:56:35.0531 1656 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys

    23:56:35.0531 1656 Beep - ok

    23:56:35.0562 1656 BFE (82974d6a2fd19445cc5171fc378668a4) C:\Windows\System32\bfe.dll

    23:56:35.0562 1656 BFE - ok

    23:56:35.0594 1656 BITS (1ea7969e3271cbc59e1730697dc74682) C:\Windows\System32\qmgr.dll

    23:56:35.0672 1656 BITS - ok

    23:56:35.0718 1656 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\drivers\blbdrive.sys

    23:56:35.0718 1656 blbdrive - ok

    23:56:35.0750 1656 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys

    23:56:35.0765 1656 bowser - ok

    23:56:35.0765 1656 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\drivers\BrFiltLo.sys

    23:56:35.0781 1656 BrFiltLo - ok

    23:56:35.0796 1656 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\drivers\BrFiltUp.sys

    23:56:35.0796 1656 BrFiltUp - ok

    23:56:35.0812 1656 Browser (8ef0d5c41ec907751b8429162b1239ed) C:\Windows\System32\browser.dll

    23:56:35.0812 1656 Browser - ok

    23:56:35.0828 1656 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys

    23:56:35.0828 1656 Brserid - ok

    23:56:35.0859 1656 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys

    23:56:35.0859 1656 BrSerWdm - ok

    23:56:35.0859 1656 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys

    23:56:35.0874 1656 BrUsbMdm - ok

    23:56:35.0890 1656 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys

    23:56:35.0890 1656 BrUsbSer - ok

    23:56:35.0906 1656 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\drivers\bthmodem.sys

    23:56:35.0906 1656 BTHMODEM - ok

    23:56:35.0921 1656 bthserv (95f9c2976059462cbbf227f7aab10de9) C:\Windows\system32\bthserv.dll

    23:56:35.0921 1656 bthserv - ok

    23:56:35.0937 1656 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys

    23:56:35.0937 1656 cdfs - ok

    23:56:35.0968 1656 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\DRIVERS\cdrom.sys

    23:56:35.0968 1656 cdrom - ok

    23:56:35.0984 1656 CertPropSvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll

    23:56:35.0999 1656 CertPropSvc - ok

    23:56:35.0999 1656 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\drivers\circlass.sys

    23:56:35.0999 1656 circlass - ok

    23:56:36.0046 1656 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys

    23:56:36.0046 1656 CLFS - ok

    23:56:36.0077 1656 clr_optimization_v2.0.50727_32 (d88040f816fda31c3b466f0fa0918f29) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

    23:56:36.0093 1656 clr_optimization_v2.0.50727_32 - ok

    23:56:36.0124 1656 clr_optimization_v2.0.50727_64 (d1ceea2b47cb998321c579651ce3e4f8) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe

    23:56:36.0124 1656 clr_optimization_v2.0.50727_64 - ok

    23:56:36.0171 1656 clr_optimization_v4.0.30319_32 (c5a75eb48e2344abdc162bda79e16841) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

    23:56:36.0202 1656 clr_optimization_v4.0.30319_32 - ok

    23:56:36.0233 1656 clr_optimization_v4.0.30319_64 (c6f9af94dcd58122a4d7e89db6bed29d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

    23:56:36.0233 1656 clr_optimization_v4.0.30319_64 - ok

    23:56:36.0249 1656 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\drivers\CmBatt.sys

    23:56:36.0249 1656 CmBatt - ok

    23:56:36.0264 1656 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys

    23:56:36.0264 1656 cmdide - ok

    23:56:36.0296 1656 CNG (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys

    23:56:36.0296 1656 CNG - ok

    23:56:36.0327 1656 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\drivers\compbatt.sys

    23:56:36.0327 1656 Compbatt - ok

    23:56:36.0327 1656 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys

    23:56:36.0327 1656 CompositeBus - ok

    23:56:36.0342 1656 COMSysApp - ok

    23:56:36.0358 1656 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\drivers\crcdisk.sys

    23:56:36.0358 1656 crcdisk - ok

    23:56:36.0405 1656 CryptSvc (4f5414602e2544a4554d95517948b705) C:\Windows\system32\cryptsvc.dll

    23:56:36.0405 1656 CryptSvc - ok

    23:56:36.0467 1656 cvhsvc (72794d112cbaff3bc0c29bf7350d4741) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

    23:56:36.0483 1656 cvhsvc - ok

    23:56:36.0514 1656 DcomLaunch (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll

    23:56:36.0514 1656 DcomLaunch - ok

    23:56:36.0545 1656 defragsvc (3cec7631a84943677aa8fa8ee5b6b43d) C:\Windows\System32\defragsvc.dll

    23:56:36.0545 1656 defragsvc - ok

    23:56:36.0576 1656 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys

    23:56:36.0576 1656 DfsC - ok

    23:56:36.0592 1656 Dhcp (43d808f5d9e1a18e5eeb5ebc83969e4e) C:\Windows\system32\dhcpcore.dll

    23:56:36.0608 1656 Dhcp - ok

    23:56:36.0623 1656 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys

    23:56:36.0623 1656 discache - ok

    23:56:36.0654 1656 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\drivers\disk.sys

    23:56:36.0654 1656 Disk - ok

    23:56:36.0670 1656 Dnscache (16835866aaa693c7d7fceba8fff706e4) C:\Windows\System32\dnsrslvr.dll

    23:56:36.0686 1656 Dnscache - ok

    23:56:36.0686 1656 dot3svc (b1fb3ddca0fdf408750d5843591afbc6) C:\Windows\System32\dot3svc.dll

    23:56:36.0701 1656 dot3svc - ok

    23:56:36.0701 1656 DPS (b26f4f737e8f9df4f31af6cf31d05820) C:\Windows\system32\dps.dll

    23:56:36.0701 1656 DPS - ok

    23:56:36.0732 1656 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys

    23:56:36.0732 1656 drmkaud - ok

    23:56:36.0779 1656 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys

    23:56:36.0779 1656 DXGKrnl - ok

    23:56:36.0795 1656 EapHost (e2dda8726da9cb5b2c4000c9018a9633) C:\Windows\System32\eapsvc.dll

    23:56:36.0795 1656 EapHost - ok

    23:56:36.0888 1656 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\drivers\evbda.sys

    23:56:36.0966 1656 ebdrv - ok

    23:56:37.0044 1656 EFS (c118a82cd78818c29ab228366ebf81c3) C:\Windows\System32\lsass.exe

    23:56:37.0044 1656 EFS - ok

    23:56:37.0091 1656 ehRecvr (c4002b6b41975f057d98c439030cea07) C:\Windows\ehome\ehRecvr.exe

    23:56:37.0091 1656 ehRecvr - ok

    23:56:37.0122 1656 ehSched (4705e8ef9934482c5bb488ce28afc681) C:\Windows\ehome\ehsched.exe

    23:56:37.0122 1656 ehSched - ok

    23:56:37.0169 1656 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\drivers\elxstor.sys

    23:56:37.0185 1656 elxstor - ok

    23:56:37.0185 1656 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys

    23:56:37.0185 1656 ErrDev - ok

    23:56:37.0216 1656 EventSystem (4166f82be4d24938977dd1746be9b8a0) C:\Windows\system32\es.dll

    23:56:37.0216 1656 EventSystem - ok

    23:56:37.0232 1656 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys

    23:56:37.0232 1656 exfat - ok

    23:56:37.0247 1656 ezSharedSvc - ok

    23:56:37.0263 1656 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys

    23:56:37.0278 1656 fastfat - ok

    23:56:37.0294 1656 Fax (dbefd454f8318a0ef691fdd2eaab44eb) C:\Windows\system32\fxssvc.exe

    23:56:37.0310 1656 Fax - ok

    23:56:37.0325 1656 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\drivers\fdc.sys

    23:56:37.0325 1656 fdc - ok

    23:56:37.0325 1656 fdPHost (0438cab2e03f4fb61455a7956026fe86) C:\Windows\system32\fdPHost.dll

    23:56:37.0325 1656 fdPHost - ok

    23:56:37.0325 1656 FDResPub (802496cb59a30349f9a6dd22d6947644) C:\Windows\system32\fdrespub.dll

    23:56:37.0341 1656 FDResPub - ok

    23:56:37.0356 1656 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys

    23:56:37.0356 1656 FileInfo - ok

    23:56:37.0356 1656 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys

    23:56:37.0372 1656 Filetrace - ok

    23:56:37.0372 1656 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\drivers\flpydisk.sys

    23:56:37.0372 1656 flpydisk - ok

    23:56:37.0403 1656 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys

    23:56:37.0403 1656 FltMgr - ok

    23:56:37.0450 1656 FontCache (5c4cb4086fb83115b153e47add961a0c) C:\Windows\system32\FntCache.dll

    23:56:37.0466 1656 FontCache - ok

    23:56:37.0512 1656 FontCache3.0.0.0 (a8b7f3818ab65695e3a0bb3279f6dce6) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

    23:56:37.0512 1656 FontCache3.0.0.0 - ok

    23:56:37.0575 1656 FPLService (71cdc1d7f58d5ec49ebc2e2332ad3fae) C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe

    23:56:37.0575 1656 FPLService - ok

    23:56:37.0637 1656 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys

    23:56:37.0637 1656 FsDepends - ok

    23:56:37.0668 1656 Fs_Rec (6bd9295cc032dd3077c671fccf579a7b) C:\Windows\system32\drivers\Fs_Rec.sys

    23:56:37.0668 1656 Fs_Rec - ok

    23:56:37.0700 1656 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys

    23:56:37.0700 1656 fvevol - ok

    23:56:37.0731 1656 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\drivers\gagp30kx.sys

    23:56:37.0731 1656 gagp30kx - ok

    23:56:37.0762 1656 GamesAppService (c403c5db49a0f9aaf4f2128edc0106d8) C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe

    23:56:37.0762 1656 GamesAppService - ok

    23:56:37.0793 1656 gpsvc (277bbc7e1aa1ee957f573a10eca7ef3a) C:\Windows\System32\gpsvc.dll

    23:56:37.0793 1656 gpsvc - ok

    23:56:37.0871 1656 gusvc (c1b577b2169900f4cf7190c39f085794) C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

    23:56:37.0871 1656 gusvc - ok

    23:56:37.0902 1656 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys

    23:56:37.0902 1656 hcw85cir - ok

    23:56:37.0918 1656 HdAudAddService (975761c778e33cd22498059b91e7373a) C:\Windows\system32\drivers\HdAudio.sys

    23:56:37.0918 1656 HdAudAddService - ok

    23:56:37.0949 1656 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys

    23:56:37.0949 1656 HDAudBus - ok

    23:56:37.0949 1656 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\drivers\HidBatt.sys

    23:56:37.0965 1656 HidBatt - ok

    23:56:37.0980 1656 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\drivers\hidbth.sys

    23:56:37.0980 1656 HidBth - ok

    23:56:37.0996 1656 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\drivers\hidir.sys

    23:56:37.0996 1656 HidIr - ok

    23:56:37.0996 1656 hidserv (bd9eb3958f213f96b97b1d897dee006d) C:\Windows\system32\hidserv.dll

    23:56:37.0996 1656 hidserv - ok

    23:56:38.0012 1656 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\DRIVERS\hidusb.sys

    23:56:38.0012 1656 HidUsb - ok

    23:56:38.0043 1656 hkmsvc (387e72e739e15e3d37907a86d9ff98e2) C:\Windows\system32\kmsvc.dll

    23:56:38.0043 1656 hkmsvc - ok

    23:56:38.0058 1656 HomeGroupListener (efdfb3dd38a4376f93e7985173813abd) C:\Windows\system32\ListSvc.dll

    23:56:38.0058 1656 HomeGroupListener - ok

    23:56:38.0074 1656 HomeGroupProvider (908acb1f594274965a53926b10c81e89) C:\Windows\system32\provsvc.dll

    23:56:38.0074 1656 HomeGroupProvider - ok

    23:56:38.0152 1656 HP Support Assistant Service (531d1843c7a411f4e41ec6786f291e5f) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe

    23:56:38.0152 1656 HP Support Assistant Service - ok

    23:56:38.0214 1656 HPAuto (7b8c1b09c11e8db7c4480abd7d17e821) C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe

    23:56:38.0230 1656 HPAuto - ok

    23:56:38.0261 1656 HPClientSvc (6a181452d4e240b8ecc7614b9a19bde9) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe

    23:56:38.0261 1656 HPClientSvc - ok

    23:56:38.0308 1656 HPDrvMntSvc.exe (bcc4a8b2e2e902f52e7f2e7d8e125765) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe

    23:56:38.0308 1656 HPDrvMntSvc.exe - ok

    23:56:38.0339 1656 hpqwmiex (ec9739a46f1f83c6e52a7a4697f44a65) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe

    23:56:38.0355 1656 hpqwmiex - ok

    23:56:38.0433 1656 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys

    23:56:38.0433 1656 HpSAMD - ok

    23:56:38.0464 1656 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys

    23:56:38.0480 1656 HTTP - ok

    23:56:38.0495 1656 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys

    23:56:38.0495 1656 hwpolicy - ok

    23:56:38.0526 1656 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys

    23:56:38.0526 1656 i8042prt - ok

    23:56:38.0558 1656 iaStor (26cf4275034214ecedd8ec17b0a18a99) C:\Windows\system32\drivers\iaStor.sys

    23:56:38.0558 1656 iaStor - ok

    23:56:38.0589 1656 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys

    23:56:38.0589 1656 iaStorV - ok

    23:56:38.0651 1656 idsvc (5988fc40f8db5b0739cd1e3a5d0d78bd) C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe

    23:56:38.0667 1656 idsvc - ok

    23:56:38.0948 1656 igfx (efe5a0af39a8e179624117c521f1e012) C:\Windows\system32\DRIVERS\igdkmd64.sys

    23:56:39.0119 1656 igfx - ok

    23:56:39.0197 1656 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\drivers\iirsp.sys

    23:56:39.0197 1656 iirsp - ok

    23:56:39.0244 1656 IKEEXT (fcd84c381e0140af901e58d48882d26b) C:\Windows\System32\ikeext.dll

    23:56:39.0244 1656 IKEEXT - ok

    23:56:39.0260 1656 Impcd (dd587a55390ed2295bce6d36ad567da9) C:\Windows\system32\drivers\Impcd.sys

    23:56:39.0260 1656 Impcd - ok

    23:56:39.0353 1656 IntcAzAudAddService (c7124da48e557d8f88d0d7f1254557f4) C:\Windows\system32\drivers\RTKVHD64.sys

    23:56:39.0400 1656 IntcAzAudAddService - ok

    23:56:39.0447 1656 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys

    23:56:39.0447 1656 intelide - ok

    23:56:39.0478 1656 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys

    23:56:39.0478 1656 intelppm - ok

    23:56:39.0478 1656 IPBusEnum (098a91c54546a3b878dad6a7e90a455b) C:\Windows\system32\ipbusenum.dll

    23:56:39.0478 1656 IPBusEnum - ok

    23:56:39.0494 1656 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys

    23:56:39.0494 1656 IpFilterDriver - ok

    23:56:39.0525 1656 iphlpsvc (a34a587fffd45fa649fba6d03784d257) C:\Windows\System32\iphlpsvc.dll

    23:56:39.0525 1656 iphlpsvc - ok

    23:56:39.0540 1656 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys

    23:56:39.0540 1656 IPMIDRV - ok

    23:56:39.0556 1656 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys

    23:56:39.0556 1656 IPNAT - ok

    23:56:39.0572 1656 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys

    23:56:39.0572 1656 IRENUM - ok

    23:56:39.0603 1656 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys

    23:56:39.0603 1656 isapnp - ok

    23:56:39.0618 1656 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys

    23:56:39.0618 1656 iScsiPrt - ok

    23:56:39.0681 1656 jhi_service (6c85719a21b3f62c2c76280f4bd36c7b) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe

    23:56:39.0681 1656 jhi_service - ok

    23:56:39.0696 1656 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\DRIVERS\kbdclass.sys

    23:56:39.0696 1656 kbdclass - ok

    23:56:39.0696 1656 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\DRIVERS\kbdhid.sys

    23:56:39.0696 1656 kbdhid - ok

    23:56:39.0728 1656 KeyIso (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe

    23:56:39.0728 1656 KeyIso - ok

    23:56:39.0743 1656 KSecDD (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys

    23:56:39.0743 1656 KSecDD - ok

    23:56:39.0743 1656 KSecPkg (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys

    23:56:39.0743 1656 KSecPkg - ok

    23:56:39.0759 1656 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys

    23:56:39.0759 1656 ksthunk - ok

    23:56:39.0790 1656 KtmRm (6ab66e16aa859232f64deb66887a8c9c) C:\Windows\system32\msdtckrm.dll

    23:56:39.0790 1656 KtmRm - ok

    23:56:39.0821 1656 LanmanServer (d9f42719019740baa6d1c6d536cbdaa6) C:\Windows\system32\srvsvc.dll

    23:56:39.0821 1656 LanmanServer - ok

    23:56:39.0837 1656 LanmanWorkstation (851a1382eed3e3a7476db004f4ee3e1a) C:\Windows\System32\wkssvc.dll

    23:56:39.0837 1656 LanmanWorkstation - ok

    23:56:39.0852 1656 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys

    23:56:39.0852 1656 lltdio - ok

    23:56:39.0884 1656 lltdsvc (c1185803384ab3feed115f79f109427f) C:\Windows\System32\lltdsvc.dll

    23:56:39.0884 1656 lltdsvc - ok

    23:56:39.0899 1656 lmhosts (f993a32249b66c9d622ea5592a8b76b8) C:\Windows\System32\lmhsvc.dll

    23:56:39.0899 1656 lmhosts - ok

    23:56:39.0962 1656 LMS (d75c4b4a8fe6d7fd74a7eecdbaec729f) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

    23:56:39.0977 1656 LMS - ok

    23:56:39.0993 1656 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\drivers\lsi_fc.sys

    23:56:39.0993 1656 LSI_FC - ok

    23:56:40.0008 1656 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\drivers\lsi_sas.sys

    23:56:40.0008 1656 LSI_SAS - ok

    23:56:40.0024 1656 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\drivers\lsi_sas2.sys

    23:56:40.0024 1656 LSI_SAS2 - ok

    23:56:40.0040 1656 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\drivers\lsi_scsi.sys

    23:56:40.0040 1656 LSI_SCSI - ok

    23:56:40.0071 1656 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys

    23:56:40.0071 1656 luafv - ok

    23:56:40.0102 1656 MBAMProtector (dbc08862a71459e74f7538b432c114cc) C:\Windows\system32\drivers\mbam.sys

    23:56:40.0102 1656 MBAMProtector - ok

    23:56:40.0149 1656 MBAMService (ba400ed640bca1eae5c727ae17c10207) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

    23:56:40.0149 1656 MBAMService - ok

    23:56:40.0180 1656 Mcx2Svc (0be09cd858abf9df6ed259d57a1a1663) C:\Windows\system32\Mcx2Svc.dll

    23:56:40.0180 1656 Mcx2Svc - ok

    23:56:40.0196 1656 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\drivers\megasas.sys

    23:56:40.0196 1656 megasas - ok

    23:56:40.0227 1656 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\drivers\MegaSR.sys

    23:56:40.0227 1656 MegaSR - ok

    23:56:40.0242 1656 MEIx64 (a6518dcc42f7a6e999bb3bea8fd87567) C:\Windows\system32\drivers\HECIx64.sys

    23:56:40.0242 1656 MEIx64 - ok

    23:56:40.0258 1656 MMCSS (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll

    23:56:40.0258 1656 MMCSS - ok

    23:56:40.0258 1656 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys

    23:56:40.0258 1656 Modem - ok

    23:56:40.0352 1656 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys

    23:56:40.0352 1656 monitor - ok

    23:56:40.0367 1656 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\DRIVERS\mouclass.sys

    23:56:40.0367 1656 mouclass - ok

    23:56:40.0430 1656 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys

    23:56:40.0445 1656 mouhid - ok

    23:56:40.0445 1656 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys

    23:56:40.0445 1656 mountmgr - ok

    23:56:40.0508 1656 MozillaMaintenance (15d5398eed42c2504bb3d4fc875c15d1) C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

    23:56:40.0508 1656 MozillaMaintenance - ok

    23:56:40.0539 1656 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys

    23:56:40.0539 1656 mpio - ok

    23:56:40.0554 1656 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys

    23:56:40.0554 1656 mpsdrv - ok

    23:56:40.0586 1656 MpsSvc (54ffc9c8898113ace189d4aa7199d2c1) C:\Windows\system32\mpssvc.dll

    23:56:40.0586 1656 MpsSvc - ok

    23:56:40.0617 1656 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys

    23:56:40.0617 1656 MRxDAV - ok

    23:56:40.0632 1656 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys

    23:56:40.0632 1656 mrxsmb - ok

    23:56:40.0648 1656 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys

    23:56:40.0648 1656 mrxsmb10 - ok

    23:56:40.0664 1656 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys

    23:56:40.0679 1656 mrxsmb20 - ok

    23:56:40.0679 1656 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys

    23:56:40.0679 1656 msahci - ok

    23:56:40.0695 1656 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys

    23:56:40.0695 1656 msdsm - ok

    23:56:40.0710 1656 MSDTC (de0ece52236cfa3ed2dbfc03f28253a8) C:\Windows\System32\msdtc.exe

    23:56:40.0726 1656 MSDTC - ok

    23:56:40.0726 1656 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys

    23:56:40.0726 1656 Msfs - ok

    23:56:40.0742 1656 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys

    23:56:40.0742 1656 mshidkmdf - ok

    23:56:40.0757 1656 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys

    23:56:40.0757 1656 msisadrv - ok

    23:56:40.0773 1656 MSiSCSI (808e98ff49b155c522e6400953177b08) C:\Windows\system32\iscsiexe.dll

    23:56:40.0788 1656 MSiSCSI - ok

    23:56:40.0788 1656 msiserver - ok

    23:56:40.0804 1656 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys

    23:56:40.0804 1656 MSKSSRV - ok

    23:56:40.0820 1656 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys

    23:56:40.0820 1656 MSPCLOCK - ok

    23:56:40.0820 1656 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys

    23:56:40.0820 1656 MSPQM - ok

    23:56:40.0851 1656 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys

    23:56:40.0851 1656 MsRPC - ok

    23:56:40.0866 1656 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys

    23:56:40.0866 1656 mssmbios - ok

    23:56:40.0866 1656 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys

    23:56:40.0866 1656 MSTEE - ok

    23:56:40.0866 1656 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\drivers\MTConfig.sys

    23:56:40.0866 1656 MTConfig - ok

    23:56:40.0882 1656 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys

    23:56:40.0882 1656 Mup - ok

    23:56:40.0898 1656 napagent (582ac6d9873e31dfa28a4547270862dd) C:\Windows\system32\qagentRT.dll

    23:56:40.0898 1656 napagent - ok

    23:56:40.0929 1656 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys

    23:56:40.0929 1656 NativeWifiP - ok

    23:56:41.0007 1656 NAUpdate (e4534bccdd1ea7a7a256bb9d6688a5fc) C:\Program Files (x86)\Nero\Update\NASvc.exe

    23:56:41.0007 1656 NAUpdate - ok

    23:56:41.0069 1656 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys

    23:56:41.0085 1656 NDIS - ok

    23:56:41.0100 1656 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys

    23:56:41.0100 1656 NdisCap - ok

    23:56:41.0100 1656 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys

    23:56:41.0100 1656 NdisTapi - ok

    23:56:41.0116 1656 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys

    23:56:41.0116 1656 Ndisuio - ok

    23:56:41.0132 1656 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys

    23:56:41.0132 1656 NdisWan - ok

    23:56:41.0147 1656 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys

    23:56:41.0147 1656 NDProxy - ok

    23:56:41.0163 1656 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys

    23:56:41.0163 1656 NetBIOS - ok

    23:56:41.0178 1656 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys

    23:56:41.0178 1656 NetBT - ok

    23:56:41.0194 1656 Netlogon (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe

    23:56:41.0194 1656 Netlogon - ok

    23:56:41.0225 1656 Netman (847d3ae376c0817161a14a82c8922a9e) C:\Windows\System32\netman.dll

    23:56:41.0225 1656 Netman - ok

    23:56:41.0288 1656 NetMsmqActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

    23:56:41.0319 1656 NetMsmqActivator - ok

    23:56:41.0319 1656 NetPipeActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

    23:56:41.0319 1656 NetPipeActivator - ok

    23:56:41.0334 1656 netprofm (5f28111c648f1e24f7dbc87cdeb091b8) C:\Windows\System32\netprofm.dll

    23:56:41.0334 1656 netprofm - ok

    23:56:41.0350 1656 NetTcpActivator (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

    23:56:41.0350 1656 NetTcpActivator - ok

    23:56:41.0350 1656 NetTcpPortSharing (d22cd77d4f0d63d1169bb35911bff12d) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

    23:56:41.0350 1656 NetTcpPortSharing - ok

    23:56:41.0381 1656 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\drivers\nfrd960.sys

    23:56:41.0397 1656 nfrd960 - ok

    23:56:41.0428 1656 NlaSvc (1ee99a89cc788ada662441d1e9830529) C:\Windows\System32\nlasvc.dll

    23:56:41.0428 1656 NlaSvc - ok

    23:56:41.0444 1656 nmwcd (5fe6f8c05f0769bbb74afac11453b182) C:\Windows\system32\drivers\ccdcmbx64.sys

    23:56:41.0444 1656 nmwcd - ok

    23:56:41.0475 1656 nmwcdc (73c929945c0850b8d1fe2fea05fdf05d) C:\Windows\system32\drivers\ccdcmbox64.sys

    23:56:41.0475 1656 nmwcdc - ok

    23:56:41.0475 1656 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys

    23:56:41.0475 1656 Npfs - ok

    23:56:41.0490 1656 nsi (d54bfdf3e0c953f823b3d0bfe4732528) C:\Windows\system32\nsisvc.dll

    23:56:41.0490 1656 nsi - ok

    23:56:41.0506 1656 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys

    23:56:41.0506 1656 nsiproxy - ok

    23:56:41.0568 1656 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys

    23:56:41.0584 1656 Ntfs - ok

    23:56:42.0255 1656 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys

    23:56:42.0255 1656 Null - ok

    23:56:42.0286 1656 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys

    23:56:42.0286 1656 nvraid - ok

    23:56:42.0302 1656 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys

    23:56:42.0302 1656 nvstor - ok

    23:56:42.0317 1656 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys

    23:56:42.0333 1656 nv_agp - ok

    23:56:42.0348 1656 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys

    23:56:42.0348 1656 ohci1394 - ok

    23:56:42.0411 1656 ose (9d10f99a6712e28f8acd5641e3a7ea6b) C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE

    23:56:42.0411 1656 ose - ok

    23:56:42.0567 1656 osppsvc (61bffb5f57ad12f83ab64b7181829b34) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

    23:56:42.0660 1656 osppsvc - ok

    23:56:42.0738 1656 p2pimsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll

    23:56:42.0738 1656 p2pimsvc - ok

    23:56:42.0770 1656 p2psvc (927463ecb02179f88e4b9a17568c63c3) C:\Windows\system32\p2psvc.dll

    23:56:42.0770 1656 p2psvc - ok

    23:56:42.0801 1656 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\drivers\parport.sys

    23:56:42.0801 1656 Parport - ok

    23:56:42.0832 1656 partmgr (e9766131eeade40a27dc27d2d68fba9c) C:\Windows\system32\drivers\partmgr.sys

    23:56:42.0832 1656 partmgr - ok

    23:56:42.0848 1656 PcaSvc (3aeaa8b561e63452c655dc0584922257) C:\Windows\System32\pcasvc.dll

    23:56:42.0848 1656 PcaSvc - ok

    23:56:42.0879 1656 pccsmcfd (bc0018c2d29f655188a0ed3fa94fdb24) C:\Windows\system32\DRIVERS\pccsmcfdx64.sys

    23:56:42.0879 1656 pccsmcfd - ok

    23:56:42.0894 1656 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys

    23:56:42.0894 1656 pci - ok

    23:56:42.0910 1656 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys

    23:56:42.0910 1656 pciide - ok

    23:56:42.0941 1656 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\drivers\pcmcia.sys

    23:56:42.0941 1656 pcmcia - ok

    23:56:42.0957 1656 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys

    23:56:42.0957 1656 pcw - ok

    23:56:42.0988 1656 pdfcDispatcher - ok

    23:56:43.0019 1656 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys

    23:56:43.0035 1656 PEAUTH - ok

    23:56:43.0066 1656 PerfHost (e495e408c93141e8fc72dc0c6046ddfa) C:\Windows\SysWow64\perfhost.exe

    23:56:43.0097 1656 PerfHost - ok

    23:56:43.0144 1656 pla (c7cf6a6e137463219e1259e3f0f0dd6c) C:\Windows\system32\pla.dll

    23:56:43.0175 1656 pla - ok

    23:56:43.0206 1656 PlugPlay (25fbdef06c4d92815b353f6e792c8129) C:\Windows\system32\umpnpmgr.dll

    23:56:43.0206 1656 PlugPlay - ok

    23:56:43.0238 1656 pmxdrv (0bee791c7c7ace453c134e73633c497d) C:\Windows\system32\drivers\pmxdrv.sys

    23:56:43.0238 1656 pmxdrv - ok

    23:56:43.0253 1656 PNRPAutoReg (7195581cec9bb7d12abe54036acc2e38) C:\Windows\system32\pnrpauto.dll

    23:56:43.0253 1656 PNRPAutoReg - ok

    23:56:43.0269 1656 PNRPsvc (3eac4455472cc2c97107b5291e0dcafe) C:\Windows\system32\pnrpsvc.dll

    23:56:43.0284 1656 PNRPsvc - ok

    23:56:43.0316 1656 PolicyAgent (4f15d75adf6156bf56eced6d4a55c389) C:\Windows\System32\ipsecsvc.dll

    23:56:43.0316 1656 PolicyAgent - ok

    23:56:43.0331 1656 Power (6ba9d927dded70bd1a9caded45f8b184) C:\Windows\system32\umpo.dll

    23:56:43.0331 1656 Power - ok

    23:56:43.0362 1656 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys

    23:56:43.0362 1656 PptpMiniport - ok

    23:56:43.0394 1656 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\drivers\processr.sys

    23:56:43.0394 1656 Processor - ok

    23:56:43.0425 1656 ProfSvc (53e83f1f6cf9d62f32801cf66d8352a8) C:\Windows\system32\profsvc.dll

    23:56:43.0425 1656 ProfSvc - ok

    23:56:43.0440 1656 ProtectedStorage (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe

    23:56:43.0456 1656 ProtectedStorage - ok

    23:56:43.0472 1656 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys

    23:56:43.0472 1656 Psched - ok

    23:56:43.0534 1656 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\drivers\ql2300.sys

    23:56:43.0550 1656 ql2300 - ok

    23:56:43.0628 1656 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\drivers\ql40xx.sys

    23:56:43.0628 1656 ql40xx - ok

    23:56:43.0643 1656 QWAVE (906191634e99aea92c4816150bda3732) C:\Windows\system32\qwave.dll

    23:56:43.0659 1656 QWAVE - ok

    23:56:43.0659 1656 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys

    23:56:43.0659 1656 QWAVEdrv - ok

    23:56:43.0674 1656 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys

    23:56:43.0674 1656 RasAcd - ok

    23:56:43.0690 1656 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys

    23:56:43.0690 1656 RasAgileVpn - ok

    23:56:43.0706 1656 RasAuto (8f26510c5383b8dbe976de1cd00fc8c7) C:\Windows\System32\rasauto.dll

    23:56:43.0706 1656 RasAuto - ok

    23:56:43.0737 1656 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys

    23:56:43.0737 1656 Rasl2tp - ok

    23:56:43.0752 1656 RasMan (ee867a0870fc9e4972ba9eaad35651e2) C:\Windows\System32\rasmans.dll

    23:56:43.0752 1656 RasMan - ok

    23:56:43.0768 1656 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys

    23:56:43.0768 1656 RasPppoe - ok

    23:56:43.0784 1656 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys

    23:56:43.0784 1656 RasSstp - ok

    23:56:43.0799 1656 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys

    23:56:43.0799 1656 rdbss - ok

    23:56:43.0815 1656 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\drivers\rdpbus.sys

    23:56:43.0815 1656 rdpbus - ok

    23:56:43.0830 1656 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys

    23:56:43.0830 1656 RDPCDD - ok

    23:56:43.0846 1656 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys

    23:56:43.0846 1656 RDPENCDD - ok

    23:56:43.0862 1656 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys

    23:56:43.0862 1656 RDPREFMP - ok

    23:56:43.0893 1656 RDPWD (e61608aa35e98999af9aaeeea6114b0a) C:\Windows\system32\drivers\RDPWD.sys

    23:56:43.0893 1656 RDPWD - ok

    23:56:43.0908 1656 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys

    23:56:43.0908 1656 rdyboost - ok

    23:56:43.0924 1656 RemoteAccess (254fb7a22d74e5511c73a3f6d802f192) C:\Windows\System32\mprdim.dll

    23:56:43.0924 1656 RemoteAccess - ok

    23:56:43.0940 1656 RemoteRegistry (e4d94f24081440b5fc5aa556c7c62702) C:\Windows\system32\regsvc.dll

    23:56:43.0940 1656 RemoteRegistry - ok

    23:56:44.0002 1656 RichVideo (1d4061cc5bc8e823d05e1e6e6c1224e3) C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe

    23:56:44.0002 1656 RichVideo - ok

    23:56:44.0033 1656 RpcEptMapper (e4dc58cf7b3ea515ae917ff0d402a7bb) C:\Windows\System32\RpcEpMap.dll

    23:56:44.0033 1656 RpcEptMapper - ok

    23:56:44.0049 1656 RpcLocator (d5ba242d4cf8e384db90e6a8ed850b8c) C:\Windows\system32\locator.exe

    23:56:44.0049 1656 RpcLocator - ok

    23:56:44.0064 1656 RpcSs (5c627d1b1138676c0a7ab2c2c190d123) C:\Windows\system32\rpcss.dll

    23:56:44.0064 1656 RpcSs - ok

    23:56:44.0064 1656 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys

    23:56:44.0080 1656 rspndr - ok

    23:56:44.0111 1656 RTL8167 (f4c374b1c46de294b573bb43723ac3f6) C:\Windows\system32\DRIVERS\Rt64win7.sys

    23:56:44.0127 1656 RTL8167 - ok

    23:56:44.0142 1656 SamSs (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe

    23:56:44.0142 1656 SamSs - ok

    23:56:44.0158 1656 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys

    23:56:44.0158 1656 sbp2port - ok

    23:56:44.0174 1656 SCardSvr (9b7395789e3791a3b6d000fe6f8b131e) C:\Windows\System32\SCardSvr.dll

    23:56:44.0189 1656 SCardSvr - ok

    23:56:44.0189 1656 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys

    23:56:44.0189 1656 scfilter - ok

    23:56:44.0236 1656 Schedule (262f6592c3299c005fd6bec90fc4463a) C:\Windows\system32\schedsvc.dll

    23:56:44.0252 1656 Schedule - ok

    23:56:44.0267 1656 SCPolicySvc (f17d1d393bbc69c5322fbfafaca28c7f) C:\Windows\System32\certprop.dll

    23:56:44.0267 1656 SCPolicySvc - ok

    23:56:44.0283 1656 SDRSVC (6ea4234dc55346e0709560fe7c2c1972) C:\Windows\System32\SDRSVC.dll

    23:56:44.0283 1656 SDRSVC - ok

    23:56:44.0330 1656 SeaPort (cc781378e7eda615d2cdca3b17829fa4) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE

    23:56:44.0330 1656 SeaPort - ok

    23:56:44.0361 1656 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys

    23:56:44.0361 1656 secdrv - ok

    23:56:44.0376 1656 seclogon (bc617a4e1b4fa8df523a061739a0bd87) C:\Windows\system32\seclogon.dll

    23:56:44.0376 1656 seclogon - ok

    23:56:44.0392 1656 SENS (c32ab8fa018ef34c0f113bd501436d21) C:\Windows\System32\sens.dll

    23:56:44.0392 1656 SENS - ok

    23:56:44.0423 1656 SensrSvc (0336cffafaab87a11541f1cf1594b2b2) C:\Windows\system32\sensrsvc.dll

    23:56:44.0423 1656 SensrSvc - ok

    23:56:44.0454 1656 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\drivers\serenum.sys

    23:56:44.0454 1656 Serenum - ok

    23:56:44.0454 1656 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\drivers\serial.sys

    23:56:44.0470 1656 Serial - ok

    23:56:44.0486 1656 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\drivers\sermouse.sys

    23:56:44.0486 1656 sermouse - ok

    23:56:44.0564 1656 ServiceLayer (f31e9531af225ca25350d5e87e999b31) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe

    23:56:44.0610 1656 ServiceLayer - ok

    23:56:44.0610 1656 SessionEnv (0b6231bf38174a1628c4ac812cc75804) C:\Windows\system32\sessenv.dll

    23:56:44.0610 1656 SessionEnv - ok

    23:56:44.0642 1656 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys

    23:56:44.0642 1656 sffdisk - ok

    23:56:44.0657 1656 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys

    23:56:44.0657 1656 sffp_mmc - ok

    23:56:44.0657 1656 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys

    23:56:44.0657 1656 sffp_sd - ok

    23:56:44.0673 1656 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\drivers\sfloppy.sys

    23:56:44.0673 1656 sfloppy - ok

    23:56:44.0720 1656 Sftfs (c6cc9297bd53e5229653303e556aa539) C:\Windows\system32\DRIVERS\Sftfslh.sys

    23:56:44.0735 1656 Sftfs - ok

    23:56:44.0782 1656 sftlist (13693b6354dd6e72dc5131da7d764b90) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

    23:56:44.0798 1656 sftlist - ok

    23:56:44.0798 1656 Sftplay (390aa7bc52cee43f6790cdea1e776703) C:\Windows\system32\DRIVERS\Sftplaylh.sys

    23:56:44.0813 1656 Sftplay - ok

    23:56:44.0829 1656 Sftredir (617e29a0b0a2807466560d4c4e338d3e) C:\Windows\system32\DRIVERS\Sftredirlh.sys

    23:56:44.0829 1656 Sftredir - ok

    23:56:44.0844 1656 Sftvol (8f571f016fa1976f445147e9e6c8ae9b) C:\Windows\system32\DRIVERS\Sftvollh.sys

    23:56:44.0844 1656 Sftvol - ok

    23:56:44.0844 1656 sftvsa (c3cddd18f43d44ab713cf8c4916f7696) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

    23:56:44.0860 1656 sftvsa - ok

    23:56:44.0891 1656 SharedAccess (b95f6501a2f8b2e78c697fec401970ce) C:\Windows\System32\ipnathlp.dll

    23:56:44.0891 1656 SharedAccess - ok

    23:56:44.0922 1656 ShellHWDetection (aaf932b4011d14052955d4b212a4da8d) C:\Windows\System32\shsvcs.dll

    23:56:44.0922 1656 ShellHWDetection - ok

    23:56:44.0954 1656 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\drivers\SiSRaid2.sys

    23:56:44.0954 1656 SiSRaid2 - ok

    23:56:44.0969 1656 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\drivers\sisraid4.sys

    23:56:44.0969 1656 SiSRaid4 - ok

    23:56:45.0000 1656 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys

    23:56:45.0000 1656 Smb - ok

    23:56:45.0032 1656 SNMPTRAP (6313f223e817cc09aa41811daa7f541d) C:\Windows\System32\snmptrap.exe

    23:56:45.0032 1656 SNMPTRAP - ok

    23:56:45.0047 1656 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys

    23:56:45.0047 1656 spldr - ok

    23:56:45.0063 1656 Spooler (b96c17b5dc1424d56eea3a99e97428cd) C:\Windows\System32\spoolsv.exe

    23:56:45.0078 1656 Spooler - ok

    23:56:45.0172 1656 sppsvc (e17e0188bb90fae42d83e98707efa59c) C:\Windows\system32\sppsvc.exe

    23:56:45.0219 1656 sppsvc - ok

    23:56:45.0266 1656 sppuinotify (93d7d61317f3d4bc4f4e9f8a96a7de45) C:\Windows\system32\sppuinotify.dll

    23:56:45.0266 1656 sppuinotify - ok

    23:56:45.0312 1656 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys

    23:56:45.0328 1656 srv - ok

    23:56:45.0344 1656 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys

    23:56:45.0344 1656 srv2 - ok

    23:56:45.0359 1656 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys

    23:56:45.0359 1656 srvnet - ok

    23:56:45.0390 1656 SSDPSRV (51b52fbd583cde8aa9ba62b8b4298f33) C:\Windows\System32\ssdpsrv.dll

    23:56:45.0390 1656 SSDPSRV - ok

    23:56:45.0406 1656 SstpSvc (ab7aebf58dad8daab7a6c45e6a8885cb) C:\Windows\system32\sstpsvc.dll

    23:56:45.0406 1656 SstpSvc - ok

    23:56:45.0422 1656 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\drivers\stexstor.sys

    23:56:45.0422 1656 stexstor - ok

    23:56:45.0437 1656 stisvc (8dd52e8e6128f4b2da92ce27402871c1) C:\Windows\System32\wiaservc.dll

    23:56:45.0453 1656 stisvc - ok

    23:56:45.0468 1656 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys

    23:56:45.0468 1656 swenum - ok

    23:56:45.0484 1656 swprv (e08e46fdd841b7184194011ca1955a0b) C:\Windows\System32\swprv.dll

    23:56:45.0500 1656 swprv - ok

    23:56:45.0531 1656 SysMain (bf9ccc0bf39b418c8d0ae8b05cf95b7d) C:\Windows\system32\sysmain.dll

    23:56:45.0578 1656 SysMain - ok

    23:56:45.0640 1656 TabletInputService (e3c61fd7b7c2557e1f1b0b4cec713585) C:\Windows\System32\TabSvc.dll

    23:56:45.0640 1656 TabletInputService - ok

    23:56:45.0656 1656 TapiSrv (40f0849f65d13ee87b9a9ae3c1dd6823) C:\Windows\System32\tapisrv.dll

    23:56:45.0656 1656 TapiSrv - ok

    23:56:45.0671 1656 TBS (1be03ac720f4d302ea01d40f588162f6) C:\Windows\System32\tbssvc.dll

    23:56:45.0671 1656 TBS - ok

    23:56:45.0749 1656 Tcpip (acb82bda8f46c84f465c1afa517dc4b9) C:\Windows\system32\drivers\tcpip.sys

    23:56:45.0780 1656 Tcpip - ok

    23:56:45.0905 1656 TCPIP6 (acb82bda8f46c84f465c1afa517dc4b9) C:\Windows\system32\DRIVERS\tcpip.sys

    23:56:45.0921 1656 TCPIP6 - ok

    23:56:45.0968 1656 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys

    23:56:45.0968 1656 tcpipreg - ok

    23:56:45.0968 1656 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys

    23:56:45.0968 1656 TDPIPE - ok

    23:56:45.0999 1656 TDTCP (51c5eceb1cdee2468a1748be550cfbc8) C:\Windows\system32\drivers\tdtcp.sys

    23:56:45.0999 1656 TDTCP - ok

    23:56:46.0014 1656 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys

    23:56:46.0014 1656 tdx - ok

    23:56:46.0030 1656 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys

    23:56:46.0030 1656 TermDD - ok

    23:56:46.0046 1656 TermService (2e648163254233755035b46dd7b89123) C:\Windows\System32\termsrv.dll

    23:56:46.0061 1656 TermService - ok

    23:56:46.0061 1656 Themes (f0344071948d1a1fa732231785a0664c) C:\Windows\system32\themeservice.dll

    23:56:46.0061 1656 Themes - ok

    23:56:46.0092 1656 THREADORDER (e40e80d0304a73e8d269f7141d77250b) C:\Windows\system32\mmcss.dll

    23:56:46.0092 1656 THREADORDER - ok

    23:56:46.0108 1656 TrkWks (7e7afd841694f6ac397e99d75cead49d) C:\Windows\System32\trkwks.dll

    23:56:46.0124 1656 TrkWks - ok

    23:56:46.0139 1656 TrustedInstaller (773212b2aaa24c1e31f10246b15b276c) C:\Windows\servicing\TrustedInstaller.exe

    23:56:46.0139 1656 TrustedInstaller - ok

    23:56:46.0155 1656 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys

    23:56:46.0155 1656 tssecsrv - ok

    23:56:46.0170 1656 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys

    23:56:46.0170 1656 TsUsbFlt - ok

    23:56:46.0202 1656 TsUsbGD (9cc2ccae8a84820eaecb886d477cbcb8) C:\Windows\system32\drivers\TsUsbGD.sys

    23:56:46.0202 1656 TsUsbGD - ok

    23:56:46.0217 1656 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys

    23:56:46.0217 1656 tunnel - ok

    23:56:46.0233 1656 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\drivers\uagp35.sys

    23:56:46.0233 1656 uagp35 - ok

    23:56:46.0248 1656 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys

    23:56:46.0248 1656 udfs - ok

    23:56:46.0264 1656 UI0Detect (3cbdec8d06b9968aba702eba076364a1) C:\Windows\system32\UI0Detect.exe

    23:56:46.0264 1656 UI0Detect - ok

    23:56:46.0280 1656 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys

    23:56:46.0280 1656 uliagpkx - ok

    23:56:46.0311 1656 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\DRIVERS\umbus.sys

    23:56:46.0311 1656 umbus - ok

    23:56:46.0326 1656 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\drivers\umpass.sys

    23:56:46.0326 1656 UmPass - ok

    23:56:46.0436 1656 UNS (758c2ce427c343f780a205e28555c98d) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

    23:56:46.0514 1656 UNS - ok

    23:56:46.0560 1656 upnphost (d47ec6a8e81633dd18d2436b19baf6de) C:\Windows\System32\upnphost.dll

    23:56:46.0576 1656 upnphost - ok

    23:56:46.0607 1656 upperdev (34afb83c7bba370e404e52cc2290350c) C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys

    23:56:46.0607 1656 upperdev - ok

    23:56:46.0623 1656 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys

    23:56:46.0623 1656 usbccgp - ok

    23:56:46.0638 1656 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys

    23:56:46.0654 1656 usbcir - ok

    23:56:46.0654 1656 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\drivers\usbehci.sys

    23:56:46.0654 1656 usbehci - ok

    23:56:46.0670 1656 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys

    23:56:46.0685 1656 usbhub - ok

    23:56:46.0685 1656 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\drivers\usbohci.sys

    23:56:46.0685 1656 usbohci - ok

    23:56:46.0701 1656 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\drivers\usbprint.sys

    23:56:46.0701 1656 usbprint - ok

    23:56:46.0732 1656 usbser (4acee387fa8fd39f83564fcd2fc234f2) C:\Windows\system32\drivers\usbser.sys

    23:56:46.0732 1656 usbser - ok

    23:56:46.0748 1656 UsbserFilt (aa75e1efbee7186b4cbaaacf1f15e6ca) C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys

    23:56:46.0748 1656 UsbserFilt - ok

    23:56:46.0779 1656 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS

    23:56:46.0779 1656 USBSTOR - ok

    23:56:46.0794 1656 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys

    23:56:46.0794 1656 usbuhci - ok

    23:56:46.0810 1656 UxSms (edbb23cbcf2cdf727d64ff9b51a6070e) C:\Windows\System32\uxsms.dll

    23:56:46.0810 1656 UxSms - ok

    23:56:46.0826 1656 VaultSvc (c118a82cd78818c29ab228366ebf81c3) C:\Windows\system32\lsass.exe

    23:56:46.0826 1656 VaultSvc - ok

    23:56:46.0857 1656 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys

    23:56:46.0857 1656 vdrvroot - ok

    23:56:46.0888 1656 vds (8d6b481601d01a456e75c3210f1830be) C:\Windows\System32\vds.exe

    23:56:46.0888 1656 vds - ok

    23:56:46.0904 1656 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys

    23:56:46.0904 1656 vga - ok

    23:56:46.0919 1656 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys

    23:56:46.0919 1656 VgaSave - ok

    23:56:46.0935 1656 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys

    23:56:46.0935 1656 vhdmp - ok

    23:56:46.0950 1656 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys

    23:56:46.0950 1656 viaide - ok

    23:56:46.0966 1656 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys

    23:56:46.0966 1656 volmgr - ok

    23:56:46.0982 1656 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys

    23:56:46.0982 1656 volmgrx - ok

    23:56:46.0997 1656 volsnap (df8126bd41180351a093a3ad2fc8903b) C:\Windows\system32\drivers\volsnap.sys

    23:56:46.0997 1656 volsnap - ok

    23:56:47.0013 1656 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\drivers\vsmraid.sys

    23:56:47.0013 1656 vsmraid - ok

    23:56:47.0060 1656 VSS (b60ba0bc31b0cb414593e169f6f21cc2) C:\Windows\system32\vssvc.exe

    23:56:47.0075 1656 VSS - ok

    23:56:47.0169 1656 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys

    23:56:47.0169 1656 vwifibus - ok

    23:56:47.0184 1656 W32Time (1c9d80cc3849b3788048078c26486e1a) C:\Windows\system32\w32time.dll

    23:56:47.0184 1656 W32Time - ok

    23:56:47.0200 1656 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\drivers\wacompen.sys

    23:56:47.0200 1656 WacomPen - ok

    23:56:47.0231 1656 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys

    23:56:47.0231 1656 WANARP - ok

    23:56:47.0231 1656 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys

    23:56:47.0231 1656 Wanarpv6 - ok

    23:56:47.0278 1656 WatAdminSvc (3cec96de223e49eaae3651fcf8faea6c) C:\Windows\system32\Wat\WatAdminSvc.exe

    23:56:47.0294 1656 WatAdminSvc - ok

    23:56:47.0340 1656 wbengine (78f4e7f5c56cb9716238eb57da4b6a75) C:\Windows\system32\wbengine.exe

    23:56:47.0356 1656 wbengine - ok

    23:56:47.0418 1656 WbioSrvc (3aa101e8edab2db4131333f4325c76a3) C:\Windows\System32\wbiosrvc.dll

    23:56:47.0418 1656 WbioSrvc - ok

    23:56:47.0434 1656 wcncsvc (7368a2afd46e5a4481d1de9d14848edd) C:\Windows\System32\wcncsvc.dll

    23:56:47.0434 1656 wcncsvc - ok

    23:56:47.0450 1656 WcsPlugInService (20f7441334b18cee52027661df4a6129) C:\Windows\System32\WcsPlugInService.dll

    23:56:47.0450 1656 WcsPlugInService - ok

    23:56:47.0465 1656 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\drivers\wd.sys

    23:56:47.0465 1656 Wd - ok

    23:56:47.0496 1656 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys

    23:56:47.0496 1656 Wdf01000 - ok

    23:56:47.0512 1656 WdiServiceHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll

    23:56:47.0512 1656 WdiServiceHost - ok

    23:56:47.0512 1656 WdiSystemHost (bf1fc3f79b863c914687a737c2f3d681) C:\Windows\system32\wdi.dll

    23:56:47.0512 1656 WdiSystemHost - ok

    23:56:47.0528 1656 WebClient (3db6d04e1c64272f8b14eb8bc4616280) C:\Windows\System32\webclnt.dll

    23:56:47.0528 1656 WebClient - ok

    23:56:47.0543 1656 Wecsvc (c749025a679c5103e575e3b48e092c43) C:\Windows\system32\wecsvc.dll

    23:56:47.0543 1656 Wecsvc - ok

    23:56:47.0559 1656 wercplsupport (7e591867422dc788b9e5bd337a669a08) C:\Windows\System32\wercplsupport.dll

    23:56:47.0574 1656 wercplsupport - ok

    23:56:47.0590 1656 WerSvc (6d137963730144698cbd10f202e9f251) C:\Windows\System32\WerSvc.dll

    23:56:47.0590 1656 WerSvc - ok

    23:56:47.0621 1656 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys

    23:56:47.0621 1656 WfpLwf - ok

    23:56:47.0621 1656 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys

    23:56:47.0621 1656 WIMMount - ok

    23:56:47.0652 1656 WinDefend - ok

    23:56:47.0652 1656 WinHttpAutoProxySvc - ok

    23:56:47.0684 1656 Winmgmt (19b07e7e8915d701225da41cb3877306) C:\Windows\system32\wbem\WMIsvc.dll

    23:56:47.0699 1656 Winmgmt - ok

    23:56:47.0762 1656 WinRM (bcb1310604aa415c4508708975b3931e) C:\Windows\system32\WsmSvc.dll

    23:56:47.0777 1656 WinRM - ok

    23:56:47.0855 1656 Wlansvc (4fada86e62f18a1b2f42ba18ae24e6aa) C:\Windows\System32\wlansvc.dll

    23:56:47.0855 1656 Wlansvc - ok

    23:56:47.0902 1656 wlcrasvc (06c8fa1cf39de6a735b54d906ba791c6) C:\Program Files\Windows Live\Mesh\wlcrasvc.exe

    23:56:47.0918 1656 wlcrasvc - ok

    23:56:47.0996 1656 wlidsvc (2bacd71123f42cea603f4e205e1ae337) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

    23:56:48.0058 1656 wlidsvc - ok

    23:56:48.0105 1656 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys

    23:56:48.0105 1656 WmiAcpi - ok

    23:56:48.0136 1656 wmiApSrv (38b84c94c5a8af291adfea478ae54f93) C:\Windows\system32\wbem\WmiApSrv.exe

    23:56:48.0136 1656 wmiApSrv - ok

    23:56:48.0152 1656 WMPNetworkSvc - ok

    23:56:48.0183 1656 WPCSvc (96c6e7100d724c69fcf9e7bf590d1dca) C:\Windows\System32\wpcsvc.dll

    23:56:48.0183 1656 WPCSvc - ok

    23:56:48.0198 1656 WPDBusEnum (93221146d4ebbf314c29b23cd6cc391d) C:\Windows\system32\wpdbusenum.dll

    23:56:48.0198 1656 WPDBusEnum - ok

    23:56:48.0198 1656 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys

    23:56:48.0198 1656 ws2ifsl - ok

    23:56:48.0214 1656 wscsvc (e8b1fe6669397d1772d8196df0e57a9e) C:\Windows\System32\wscsvc.dll

    23:56:48.0230 1656 wscsvc - ok

    23:56:48.0230 1656 WSearch - ok

    23:56:48.0308 1656 wuauserv (d9ef901dca379cfe914e9fa13b73b4c4) C:\Windows\system32\wuaueng.dll

    23:56:48.0339 1656 wuauserv - ok

    23:56:48.0370 1656 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys

    23:56:48.0370 1656 WudfPf - ok

    23:56:48.0401 1656 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys

    23:56:48.0401 1656 WUDFRd - ok

    23:56:48.0417 1656 wudfsvc (7a95c95b6c4cf292d689106bcae49543) C:\Windows\System32\WUDFSvc.dll

    23:56:48.0417 1656 wudfsvc - ok

    23:56:48.0432 1656 WwanSvc (9a3452b3c2a46c073166c5cf49fad1ae) C:\Windows\System32\wwansvc.dll

    23:56:48.0432 1656 WwanSvc - ok

    23:56:48.0495 1656 {95808DC4-FA4A-4c74-92FE-5B863F82066B} (b8d9be4059fdbf868b4009b5449f33cb) C:\Program Files (x86)\CyberLink\PowerDVD\000.fcl

    23:56:48.0495 1656 {95808DC4-FA4A-4c74-92FE-5B863F82066B} - ok

    23:56:48.0526 1656 MBR (0x1B8) (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0

    23:56:48.0651 1656 \Device\Harddisk0\DR0 - ok

    23:56:48.0666 1656 Boot (0x1200) (179f06764b950f0dde3032e6b443c0e4) \Device\Harddisk0\DR0\Partition0

    23:56:48.0666 1656 \Device\Harddisk0\DR0\Partition0 - ok

    23:56:48.0682 1656 Boot (0x1200) (d2bf1e109d104fa1ab2e3cc38c9b200a) \Device\Harddisk0\DR0\Partition1

    23:56:48.0682 1656 \Device\Harddisk0\DR0\Partition1 - ok

    23:56:48.0713 1656 Boot (0x1200) (ff11e687e29ebc32e2baf7d4c7a8859b) \Device\Harddisk0\DR0\Partition2

    23:56:48.0713 1656 \Device\Harddisk0\DR0\Partition2 - ok

    23:56:48.0713 1656 ============================================================

    23:56:48.0713 1656 Scan finished

    23:56:48.0713 1656 ============================================================

    23:56:48.0713 1320 Detected object count: 0

    23:56:48.0713 1320 Actual detected object count: 0

    --------------------------

    Verder 'durf' ik niks meer ondernemen.

    Alvast bedankt.

    mvg,

  2. Dit weekend zal ik een uitgebreide brain scan uitvoeren dan.

    Trouwens, als ik iets in vraag stel, is dat eerder om iets bij te leren, dan dat ik je deskundigheid in twijfel zou trekken é.

    Kan zo misschien overkomen en ik wil je daardoor zeker niet ontmoedigen. We zijn samen op de trein gesprongen en we gaan samen de eindhalte bereiken. xD

    Alle hulp ten spijt, maar ik heb m'n pc sinds m'n laatste bericht hier, niet meer opgestart gekregen.

    Ik heb toen m'n pc bij een hersteller gedaan en de kosten die aan m'n pc waren (nieuw moederboard, processor) hebben me toen maar besloten gewoon een nieuwe pc te kopen.

    Na een tijdje ziek, 2 maanden, te zijn geweest. (Ben nu volledig hersteld) Heb ik sinds vandaag een nieuwe pc.

    Je mag mijn probleem dus als OPGELOST markeren.

  3. Dit weekend zal ik een uitgebreide brain scan uitvoeren dan.

    Trouwens, als ik iets in vraag stel, is dat eerder om iets bij te leren, dan dat ik je deskundigheid in twijfel zou trekken é.

    Kan zo misschien overkomen en ik wil je daardoor zeker niet ontmoedigen. We zijn samen op de trein gesprongen en we gaan samen de eindhalte bereiken. xD

  4. Even ter verduidelijking:

    2 mogelijkheden:

    1) power knop indrukken-->piep-toon en fans draaien en windows start normaal op

    2) power knop indrukken-->geen piep-toon en fans draaien-->scherm is inderdaad zwart en het power lampje van m'n scherm knippert.

    Wat me opvalt. M'n pc start iedere dag normaal op. Wil je het de 2e keer die dag proberen, heb je meestal die problemen.

    ---------- Post toegevoegd om 22:49 ---------- Vorige post was om 22:45 ----------

    Lees net dat de Windows Anytime Upgrade voor Vista niet meer zou bestaan.

    Het artikel van Microsoft >> Windows Anytime Upgrade voor Windows Vista - Microsoft Windows

    Dat is goed mogelijk alleen heb ik deze cd-rom bij de aankoop van m'n pc gekregen. Ze mochten toch wel de originele cd-rom met Vista er op er bijgeleverd hebben. Nochtans heb ik via deze upgrade cd-rom wel Vista op iemand z'n laptop gekregen.

  5. Ijdele hoop...

    Ik kom thuis van m'n werk en steek zonder problemen de pc aan.

    Dan zijn we even het huis uit en nu rond 21h wil ik m'n pc terug opstarten en ik moet 15 keer proberen eer ik m'n windows gestart krijg. Ik heb gemerkt dat ik enkel de 'Windows Anytime Upgrade' voor Vista 32-bit cd-rom heb.

    Is er nu een mogelijkheid om m'n Windows te herstellen?

    Ik word hier dus echt gek van.

    mvg,

    Breyton

  6. Beste Dasle,

    Het zal je wel niet verwonderen dat ik met dit tropisch weer dit weekend geen seconde de pc heb aangezet. xD

    Vandaag weer wel. In het 'post-scherm' krijg ik gewoon processor gevonden etc... (Alles is normaal)

    Ik heb gisterennacht de pc aangezet en windows begon direct op te starten.

    Vandaag weer alles opgestart zonder de minste problemen.

    Ik stel anders voor dit topic 'in de frigo' te steken, tot ik eventueel weer enige problemen ondervind.

    Dan wil ik demonteren al wat jij nodig acht, maar ik zit zelf in de techniek en achter een fout zoeken als alles werkt, is compleet nutteloos. (If it ain't broke, don't fix it)

    mvg,

    Breyton

  7. Hallo,

    Ik zal m'n probleem eens nader toelichten.

    Als ik m'n pc aanzet (power knop) dan hoor je normaal een piep-toon en zie je dat Windows opstart.

    Maar als ik bijvoorbeeld een programma heb geïnstalleerd en ze verplichten mij de pc te heropstarten, dan krijg je de melding dat 'de pc bezig is met afsluiten' en vervolgens hoor je de pc draaien, maar komt er niks op het scherm.

    Dan blijf ik op de power knop drukken tot de pc uitvalt en zet ik de schakelaar van de voeding af.

    Dan een paar minuutjes wachten en druk ik terug op m'n power knop. Soms krijg ik direct de piep-toon en start de pc normaal op.

    Maar soms moet ik m'n bovenstaand ritueel een paar keer herhalen eer m'n Windows wilt opstarten.

    Niet te geloven hoe gelukkig een mens kan zijn als hij die piep-toon hoort.

    Dan had ik gedacht misschien zit er ergens een kabeltje los. Pc opengevezen en alle kabeltjes die op m'n videokaart zijn aangesloten eens extra gechecked. Maar helaas, het probleem was niet opgelost.

    Dan na een mogelijke tip van een vriend een nieuwe videokaart gekocht en met de hoop het nu zelf opgelost te hebben.

    Helaas, toen ik m'n driver van m'n videokaart had geïnstallleerd moest ik natuurlijk terug rebooten.

    Jullie raden het al, akelig stil en geen zaligmakende PIEP te horen.

    Hmmz, leuk die videokaart voor niks gekocht, maar toch niet besloten die terug te brengen. (Aanzienlijke upgrade.)

    Ik hoop dat jullie misschien zouden weten wat het probleem zou zijn, want zoals ik nu bezig ben zal m'n moederbord het abrupt afsluiten ook niet blijven overleven.

    Alvast bedankt!

    mvg,

    Breyton

  8. Beste Kape hier is m'n ComboFix log dan:

    ComboFix 11-09-22.03 - Naam 29/09/2011 17:22:05.2.2 - x86

    Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.32.1043.18.1022.301 [GMT 2:00]

    Gestart vanuit: c:\users\Naam\Desktop\ComboFix.exe

    gebruikte Opdracht switches :: c:\users\Naam\Desktop\CFScript.txt

    AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}

    SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}

    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    .

    .

    (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    C:\b903dee1b9492d5eadd5

    c:\b903dee1b9492d5eadd5\$shtdwn$.req

    c:\b903dee1b9492d5eadd5\mrt.exe._p

    c:\b903dee1b9492d5eadd5\mrtstub.exe

    c:\programdata\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}

    c:\programdata\nG21703EbCkJ21703

    c:\programdata\nG21703EbCkJ21703\nG21703EbCkJ21703

    c:\users\Naam\AppData\Local\Temp\ppcrlui_5420_2

    .

    .

    (((((((((((((((((((( Bestanden Gemaakt van 2011-08-28 to 2011-09-29 ))))))))))))))))))))))))))))))

    .

    .

    2011-09-29 15:24 . 2011-09-29 15:24 -------- d-----w- c:\users\Default\AppData\Local\temp

    2011-09-29 15:06 . 2011-09-29 15:06 56200 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BA6F3595-B4E0-4DD4-ACAE-90AACE190F5E}\offreg.dll

    2011-09-28 17:50 . 2011-09-28 17:50 -------- d-----w- c:\program files\Microsoft Silverlight

    2011-09-28 17:37 . 2011-09-28 17:37 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

    2011-09-27 15:33 . 2011-09-12 23:14 7269712 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BA6F3595-B4E0-4DD4-ACAE-90AACE190F5E}\mpengine.dll

    2011-09-25 10:01 . 2011-09-25 10:01 -------- d-----w- c:\users\Naam\AppData\Local\PowerCinema

    2011-09-26 10:01 . 2011-09-26 10:01 -------- d-----w- c:\program files\ASUS

    2011-09-24 12:49 . 2011-03-03 15:59 139368 ----a-w- c:\windows\system32\drivers\nvhda32v.sys

    2011-09-24 12:49 . 2011-03-03 15:59 837224 ----a-w- c:\windows\system32\nvhdagenco322040.dll

    2011-09-24 12:49 . 2011-03-03 15:59 26216 ----a-w- c:\windows\system32\nvhdap32.dll

    2011-09-24 12:48 . 2011-09-29 15:06 -------- d-----w- c:\programdata\NVIDIA

    2011-09-24 12:43 . 2011-09-24 12:43 -------- d-----w- c:\programdata\NVIDIA Corporation

    2011-09-24 12:43 . 2011-03-28 10:27 941160 ----a-w- c:\windows\system32\nvdispco322090.dll

    2011-09-24 12:43 . 2011-03-28 10:28 837736 ----a-w- c:\windows\system32\nvgenco322040.dll

    2011-09-24 12:42 . 2011-03-28 10:28 57960 ----a-w- c:\windows\system32\OpenCL.dll

    2011-09-24 12:42 . 2011-03-28 10:28 6049384 ----a-w- c:\windows\system32\nvwgf2um.dll

    2011-09-24 12:42 . 2011-03-28 10:28 15063656 ----a-w- c:\windows\system32\nvoglv32.dll

    2011-09-24 12:42 . 2011-03-28 10:28 10518248 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys

    2011-09-24 12:42 . 2011-03-28 10:27 10084968 ----a-w- c:\windows\system32\nvd3dum.dll

    2011-09-24 12:42 . 2011-03-28 10:27 4943976 ----a-w- c:\windows\system32\nvcuda.dll

    2011-09-24 12:42 . 2011-03-28 10:27 2897512 ----a-w- c:\windows\system32\nvcuvid.dll

    2011-09-24 12:42 . 2011-03-28 10:27 2252904 ----a-w- c:\windows\system32\nvcuvenc.dll

    2011-09-24 12:42 . 2011-03-28 10:27 13011560 ----a-w- c:\windows\system32\nvcompiler.dll

    2011-09-24 12:41 . 2011-09-24 12:49 -------- d-----w- c:\program files\NVIDIA Corporation

    2011-09-22 16:12 . 2011-09-22 16:12 -------- d-----w- c:\users\Naam\AppData\Roaming\Malwarebytes

    2011-09-22 16:11 . 2011-09-22 16:11 -------- d-----w- c:\programdata\Malwarebytes

    2011-09-22 16:11 . 2011-08-31 15:00 22216 ----a-w- c:\windows\system32\drivers\mbam.sys

    2011-09-22 16:11 . 2011-09-22 16:11 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

    2011-09-21 22:30 . 2011-09-06 20:36 20568 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys

    2011-09-21 22:30 . 2011-09-06 20:37 320856 ----a-w- c:\windows\system32\drivers\aswSP.sys

    2011-09-21 22:29 . 2011-09-06 20:36 34392 ----a-w- c:\windows\system32\drivers\aswRdr.sys

    2011-09-21 22:29 . 2011-09-06 20:36 52568 ----a-w- c:\windows\system32\drivers\aswTdi.sys

    2011-09-21 22:29 . 2011-09-06 20:38 442200 ----a-w- c:\windows\system32\drivers\aswSnx.sys

    2011-09-21 22:29 . 2011-09-06 20:36 54616 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys

    2011-09-21 22:25 . 2011-09-06 20:45 41184 ----a-w- c:\windows\avastSS.scr

    2011-09-21 22:25 . 2011-09-06 20:45 199304 ----a-w- c:\windows\system32\aswBoot.exe

    2011-09-21 22:24 . 2011-09-21 22:24 -------- d-----w- c:\programdata\AVAST Software

    2011-09-21 22:24 . 2011-09-21 22:24 -------- d-----w- c:\program files\AVAST Software

    2011-09-21 20:26 . 2011-09-21 20:26 388096 ----a-r- c:\users\Naam\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

    2011-09-21 20:26 . 2011-09-21 20:26 -------- d-----w- c:\program files\Trend Micro

    2011-09-08 01:01 . 2010-09-20 09:25 231936 ----a-w- c:\windows\system32\msshsq.dll

    2011-09-07 15:56 . 2011-03-03 14:56 28672 ----a-w- c:\windows\system32\Apphlpdm.dll

    2011-09-07 15:56 . 2011-03-03 13:01 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll

    2011-09-06 16:32 . 2010-04-14 17:46 80896 ----a-w- c:\windows\system32\MSNP.ax

    2011-09-06 16:32 . 2010-04-14 17:47 293376 ----a-w- c:\windows\system32\psisdecd.dll

    2011-09-06 16:32 . 2010-04-14 17:47 217088 ----a-w- c:\windows\system32\psisrndr.ax

    2011-09-06 15:57 . 2009-10-09 21:56 2048 ----a-w- c:\windows\system32\winrsmgr.dll

    2011-09-05 16:41 . 2011-04-21 13:16 273408 ----a-w- c:\windows\system32\drivers\afd.sys

    2011-09-05 16:40 . 2010-09-10 16:35 168960 ----a-w- c:\program files\Windows Media Player\wmplayer.exe

    2011-09-05 16:40 . 2010-09-10 16:37 8147456 ----a-w- c:\windows\system32\wmploc.DLL

    2011-09-05 16:40 . 2010-09-06 16:24 125952 ----a-w- c:\windows\system32\srvsvc.dll

    2011-09-05 16:40 . 2010-09-06 16:23 17920 ----a-w- c:\windows\system32\netevent.dll

    2011-09-05 16:39 . 2010-04-16 16:10 501760 ----a-w- c:\windows\system32\usp10.dll

    2011-09-05 16:39 . 2010-10-12 15:48 33280 ----a-w- c:\program files\Windows Mail\wabfind.dll

    2011-09-05 16:39 . 2010-10-12 13:52 66048 ----a-w- c:\program files\Windows Mail\wabmig.exe

    2011-09-05 16:39 . 2010-10-12 13:52 515584 ----a-w- c:\program files\Windows Mail\wab.exe

    2011-09-05 16:39 . 2011-02-16 13:24 292864 ----a-w- c:\windows\system32\atmfd.dll

    2011-09-05 16:39 . 2011-02-16 15:29 34304 ----a-w- c:\windows\system32\atmlib.dll

    2011-09-05 16:39 . 2010-06-16 15:12 72704 ----a-w- c:\windows\system32\fontsub.dll

    2011-09-05 16:37 . 2011-04-14 14:24 75264 ----a-w- c:\windows\system32\drivers\dfsc.sys

    2011-09-05 16:37 . 2010-10-15 14:08 3600272 ----a-w- c:\windows\system32\ntkrnlpa.exe

    2011-09-05 16:37 . 2010-10-15 14:08 3548048 ----a-w- c:\windows\system32\ntoskrnl.exe

    2011-09-05 16:37 . 2010-10-15 13:48 1205080 ----a-w- c:\windows\system32\ntdll.dll

    2011-09-05 16:37 . 2011-03-10 16:12 1136640 ----a-w- c:\windows\system32\mfc42.dll

    2011-09-05 16:37 . 2011-03-10 16:12 1161728 ----a-w- c:\windows\system32\mfc42u.dll

    2011-09-05 16:37 . 2010-01-29 16:22 1616384 ----a-w- c:\program files\Windows Mail\msoe.dll

    2011-09-05 16:37 . 2010-05-27 19:16 81920 ----a-w- c:\windows\system32\iccvid.dll

    2011-09-05 16:37 . 2008-04-05 03:34 15360 ----a-w- c:\windows\system32\pacerprf.dll

    2011-09-05 16:37 . 2008-04-05 01:21 72192 ----a-w- c:\windows\system32\drivers\pacer.sys

    2011-09-05 16:35 . 2010-04-05 16:08 317952 ----a-w- c:\windows\system32\MP4SDECD.DLL

    2011-09-05 16:32 . 2010-12-14 15:49 1169408 ----a-w- c:\windows\system32\sdclt.exe

    2011-09-05 16:32 . 2010-06-17 17:15 10926592 ----a-w- c:\program files\Movie Maker\MOVIEMK.dll

    2011-09-05 16:32 . 2010-06-17 15:49 150016 ----a-w- c:\program files\Movie Maker\MOVIEMK.exe

    2011-09-05 16:32 . 2010-06-18 16:43 36352 ----a-w- c:\windows\system32\rtutils.dll

    2011-09-05 16:32 . 2011-04-29 12:49 146432 ----a-w- c:\windows\system32\drivers\srv2.sys

    2011-09-05 16:32 . 2011-04-29 12:49 102400 ----a-w- c:\windows\system32\drivers\srvnet.sys

    2011-09-05 16:32 . 2011-05-02 16:00 766464 ----a-w- c:\program files\Common Files\Microsoft Shared\vgx\VGX.dll

    2011-09-05 16:32 . 2011-02-16 15:35 430080 ----a-w- c:\windows\system32\vbscript.dll

    2011-09-05 16:32 . 2010-12-20 15:39 563200 ----a-w- c:\windows\system32\oleaut32.dll

    2011-09-05 16:32 . 2010-08-31 15:41 954752 ----a-w- c:\windows\system32\mfc40.dll

    2011-09-05 16:32 . 2010-08-31 15:41 954288 ----a-w- c:\windows\system32\mfc40u.dll

    2011-09-05 16:28 . 2010-10-18 14:01 81920 ----a-w- c:\windows\system32\consent.exe

    2011-09-05 16:26 . 2008-05-08 21:59 90112 ----a-w- c:\windows\system32\wshext.dll

    2011-09-05 16:26 . 2008-05-08 21:59 155648 ----a-w- c:\windows\system32\wscript.exe

    2011-09-05 16:26 . 2008-05-08 21:58 135168 ----a-w- c:\windows\system32\wshom.ocx

    2011-09-05 16:26 . 2008-05-08 21:59 180224 ----a-w- c:\windows\system32\scrobj.dll

    2011-09-05 16:26 . 2008-05-08 21:59 172032 ----a-w- c:\windows\system32\scrrun.dll

    2011-09-05 16:26 . 2008-05-08 21:58 135168 ----a-w- c:\windows\system32\cscript.exe

    2011-09-05 16:26 . 2010-06-16 15:59 898952 ----a-w- c:\windows\system32\drivers\tcpip.sys

    2011-09-05 16:26 . 2011-04-20 14:47 375808 ----a-w- c:\windows\system32\winsrv.dll

    2011-09-05 16:26 . 2011-04-20 14:44 49152 ----a-w- c:\windows\system32\csrsrv.dll

    2011-09-05 16:26 . 2010-08-31 15:40 531968 ----a-w- c:\windows\system32\comctl32.dll

    2011-09-05 16:00 . 2011-09-05 16:00 -------- d-----w- c:\programdata\WindowsSearch

    2011-09-05 15:54 . 2011-04-29 14:54 276992 ----a-w- c:\windows\system32\schannel.dll

    2011-09-03 14:52 . 2011-09-03 14:52 -------- d-----w- C:\PerfLogs

    .

    .

    .

    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2011-09-26 19:28 . 2009-12-20 15:35 249856 ------w- c:\windows\Setup1.exe

    2011-09-26 19:28 . 2009-12-20 15:35 73216 ----a-w- c:\windows\ST6UNST.EXE

    2011-09-03 14:27 . 2006-11-02 10:32 101888 ----a-w- c:\windows\system32\ifxcardm.dll

    2011-09-03 14:26 . 2006-11-02 10:32 82432 ----a-w- c:\windows\system32\axaltocm.dll

    2011-09-08 00:05 . 2011-08-18 10:28 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll

    .

    .

    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

    REGEDIT4

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]

    @="{472083B0-C522-11CF-8763-00608CC02F24}"

    [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]

    2011-09-06 20:45 122512 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll

    .

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920]

    "PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2009-06-25 1414144]

    "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]

    "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "JMB36X IDE Setup"="c:\windows\JM\JMInsIDE.exe" [2006-10-30 36864]

    "RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2006-12-06 69216]

    "LanguageShortcut"="c:\program files\CyberLink\PowerDVD\Language\Language.exe" [2006-12-05 54832]

    "WinampAgent"="c:\program files\Winamp\winampa.exe" [2008-04-01 36352]

    "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-11-10 417792]

    "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-11-12 141600]

    "NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-02-18 2221352]

    "TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2010-03-31 202256]

    "DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-03-05 1135912]

    "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]

    "ledpointer"="CNYHKey.exe" [2006-11-09 5585408]

    "MoLed"="ModLEDKey.exe" [2006-11-09 53248]

    "SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2006-12-18 868352]

    "avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-09-06 3722416]

    "Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2011-08-31 1047208]

    .

    c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

    Adobe Reader Snelle start.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-9-23 29696]

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

    "EnableUIADesktopToggle"= 0 (0x0)

    .

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]

    BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~1\AVG\AVG10\avgchsvx.exe /sync\0c:\progra~1\AVG\AVG10\avgrsx.exe /sync /restart

    .

    R2 CheckStage2_svc;CheckStage2_svc;c:\windows\CheckStage2.exe [2007-03-12 462848]

    R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

    R3 athrusb;Atheros Wireless LAN USB device driver;c:\windows\system32\DRIVERS\athrusb.sys [2006-12-22 449536]

    R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [x]

    R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]

    S1 aswSnx;aswSnx; [x]

    S1 aswSP;aswSP; [x]

    S2 aswFsBlk;aswFsBlk; [x]

    S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-09-06 54616]

    S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-03-23 378472]

    S3 3xHybrid;ASUSTek SAA713x PCI Card;c:\windows\system32\DRIVERS\3xHybrid.sys [2006-10-27 2814080]

    S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32v.sys [2011-03-03 139368]

    S3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys [2010-04-19 47360]

    .

    .

    Inhoud van de 'Gedeelde Taken' map

    .

    2011-09-28 c:\windows\Tasks\User_Feed_Synchronization-{A00DB71E-D82E-415A-9205-46B51548DBF9}.job

    - c:\windows\system32\msfeedssync.exe [2009-01-01 07:33]

    .

    .

    ------- Bijkomende Scan -------

    .

    uInternet Settings,ProxyOverride = *.local

    IE: &Download All with FlashGet - c:\program files\FlashGet\jc_all.htm

    IE: &Download with FlashGet - c:\program files\FlashGet\jc_link.htm

    IE: &Winamp Search - c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html

    IE: Open with WordPerfect - c:\program files\WordPerfect Office X3\Programs\WPLauncher.hta

    TCP: DhcpNameServer = 195.130.130.133 195.130.131.133

    FF - ProfilePath - c:\users\Naam\AppData\Roaming\Mozilla\Firefox\Profiles\4jikr7k2.default\

    FF - prefs.js: browser.search.selectedEngine - Web Search

    FF - prefs.js: browser.startup.homepage - hxxp://www.google.be/

    FF - prefs.js: keyword.URL - hxxp://startsear.ch/?aff=1&q=

    FF - prefs.js: network.proxy.http - 196.30.133.146

    FF - prefs.js: network.proxy.http_port - 8080

    FF - prefs.js: network.proxy.type - 0

    .

    .

    **************************************************************************

    .

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

    Rootkit scan 2011-09-29 17:25

    Windows 6.0.6001 Service Pack 1 NTFS

    .

    scannen van verborgen processen ...

    .

    scannen van verborgen autostart items ...

    .

    scannen van verborgen bestanden ...

    .

    Scan succesvol afgerond

    verborgen bestanden: 0

    .

    **************************************************************************

    .

    --------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

    @Denied: (A) (Users)

    @Denied: (A) (Everyone)

    @Allowed: (B 1 2 3 4 5) (S-1-5-20)

    "BlindDial"=dword:00000000

    "MSCurrentCountry"=dword:0000000f

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

    @Denied: (A) (Users)

    @Denied: (A) (Everyone)

    @Allowed: (B 1 2 3 4 5) (S-1-5-20)

    "BlindDial"=dword:00000000

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]

    @Denied: (A) (Users)

    @Denied: (A) (Everyone)

    @Allowed: (B 1 2 3 4 5) (S-1-5-20)

    "BlindDial"=dword:00000000

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]

    @Denied: (A) (Users)

    @Denied: (A) (Everyone)

    @Allowed: (B 1 2 3 4 5) (S-1-5-20)

    "BlindDial"=dword:00000000

    .

    Voltooingstijd: 2011-09-29 17:31:25

    ComboFix-quarantined-files.txt 2011-09-29 15:31

    .

    Pre-Run: 62.726.672.384 bytes beschikbaar

    Post-Run: 62.703.194.112 bytes beschikbaar

    .

    - - End Of File - - 43304D1B52B2B4C502CF07A10E414CEC

    Voor m'n opstart probleem zal ik wel een nieuw topic aanmaken.

    (http://www.pc-helpforum.be/f167/windows-vista-start-soms-niet-op-36962/#post243467)

    mvg,

    Breyton

  9. Beste Kape,

    Zoals beloofd heb je hier de ComboFix-log:

    ComboFix 11-09-22.03 - Naam 27/09/2011 18:57:49.1.2 - x86

    Gestart vanuit: c:\users\Naam\Desktop\ComboFix.exe

    AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}

    SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}

    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    .

    .

    (((((((((((((((((((( Bestanden Gemaakt van 2011-08-27 to 2011-09-27 ))))))))))))))))))))))))))))))

    .

    .

    2011-09-27 17:08 . 2011-09-27 17:08 -------- d-----w- c:\users\Default\AppData\Local\temp

    2011-09-27 15:34 . 2011-09-27 15:34 56200 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BA6F3595-B4E0-4DD4-ACAE-90AACE190F5E}\offreg.dll

    2011-09-27 15:33 . 2011-09-12 23:14 7269712 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{BA6F3595-B4E0-4DD4-ACAE-90AACE190F5E}\mpengine.dll

    2011-09-26 10:01 . 2011-09-26 10:01 -------- d-----w- c:\program files\ASUS

    2011-09-23 12:49 . 2011-03-03 15:59 139368 ----a-w- c:\windows\system32\drivers\nvhda32v.sys

    2011-09-23 12:49 . 2011-03-03 15:59 837224 ----a-w- c:\windows\system32\nvhdagenco322040.dll

    2011-09-23 12:49 . 2011-03-03 15:59 26216 ----a-w- c:\windows\system32\nvhdap32.dll

    2011-09-23 12:48 . 2011-09-27 15:22 -------- d-----w- c:\programdata\NVIDIA

    2011-09-23 12:43 . 2011-09-23 12:43 -------- d-----w- c:\programdata\NVIDIA Corporation

    2011-09-23 12:43 . 2011-03-28 10:27 941160 ----a-w- c:\windows\system32\nvdispco322090.dll

    2011-09-23 12:43 . 2011-03-28 10:28 837736 ----a-w- c:\windows\system32\nvgenco322040.dll

    2011-09-23 12:42 . 2011-03-28 10:28 57960 ----a-w- c:\windows\system32\OpenCL.dll

    2011-09-23 12:42 . 2011-03-28 10:28 6049384 ----a-w- c:\windows\system32\nvwgf2um.dll

    2011-09-23 12:42 . 2011-03-28 10:28 15063656 ----a-w- c:\windows\system32\nvoglv32.dll

    2011-09-23 12:42 . 2011-03-28 10:28 10518248 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys

    2011-09-23 12:42 . 2011-03-28 10:27 10084968 ----a-w- c:\windows\system32\nvd3dum.dll

    2011-09-23 12:42 . 2011-03-28 10:27 4943976 ----a-w- c:\windows\system32\nvcuda.dll

    2011-09-23 12:42 . 2011-03-28 10:27 2897512 ----a-w- c:\windows\system32\nvcuvid.dll

    2011-09-23 12:42 . 2011-03-28 10:27 2252904 ----a-w- c:\windows\system32\nvcuvenc.dll

    2011-09-23 12:42 . 2011-03-28 10:27 13011560 ----a-w- c:\windows\system32\nvcompiler.dll

    2011-09-23 12:41 . 2011-09-23 12:49 -------- d-----w- c:\program files\NVIDIA Corporation

    2011-09-22 16:12 . 2011-09-22 16:12 -------- d-----w- c:\users\Naam\AppData\Roaming\Malwarebytes

    2011-09-22 16:11 . 2011-09-22 16:11 -------- d-----w- c:\programdata\Malwarebytes

    2011-09-22 16:11 . 2011-08-31 15:00 22216 ----a-w- c:\windows\system32\drivers\mbam.sys

    2011-09-22 16:11 . 2011-09-22 16:11 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

    2011-09-21 22:30 . 2011-09-06 20:36 20568 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys

    2011-09-21 22:30 . 2011-09-06 20:37 320856 ----a-w- c:\windows\system32\drivers\aswSP.sys

    2011-09-21 22:29 . 2011-09-06 20:36 34392 ----a-w- c:\windows\system32\drivers\aswRdr.sys

    2011-09-21 22:29 . 2011-09-06 20:36 52568 ----a-w- c:\windows\system32\drivers\aswTdi.sys

    2011-09-21 22:29 . 2011-09-06 20:38 442200 ----a-w- c:\windows\system32\drivers\aswSnx.sys

    2011-09-21 22:29 . 2011-09-06 20:36 54616 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys

    2011-09-21 22:25 . 2011-09-06 20:45 41184 ----a-w- c:\windows\avastSS.scr

    2011-09-21 22:25 . 2011-09-06 20:45 199304 ----a-w- c:\windows\system32\aswBoot.exe

    2011-09-21 22:24 . 2011-09-21 22:24 -------- d-----w- c:\programdata\AVAST Software

    2011-09-21 22:24 . 2011-09-21 22:24 -------- d-----w- c:\program files\AVAST Software

    2011-09-21 20:26 . 2011-09-21 20:26 388096 ----a-r- c:\users\Naam\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

    2011-09-21 20:26 . 2011-09-21 20:26 -------- d-----w- c:\program files\Trend Micro

    2011-09-20 23:36 . 2011-09-20 23:36 -------- dc-h--w- c:\programdata\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}

    2011-09-20 22:37 . 2011-09-20 22:37 -------- d-----w- c:\programdata\nG21703EbCkJ21703

    2011-09-15 15:41 . 2011-09-15 15:41 -------- d-----w- C:\b903dee1b9492d5eadd5

    2011-09-08 01:01 . 2010-09-20 09:25 231936 ----a-w- c:\windows\system32\msshsq.dll

    2011-09-07 15:56 . 2011-03-03 14:56 28672 ----a-w- c:\windows\system32\Apphlpdm.dll

    2011-09-07 15:56 . 2011-03-03 13:01 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll

    2011-09-06 16:32 . 2010-04-14 17:46 80896 ----a-w- c:\windows\system32\MSNP.ax

    2011-09-06 16:32 . 2010-04-14 17:47 293376 ----a-w- c:\windows\system32\psisdecd.dll

    2011-09-06 16:32 . 2010-04-14 17:47 217088 ----a-w- c:\windows\system32\psisrndr.ax

    2011-09-06 15:57 . 2009-10-09 21:56 2048 ----a-w- c:\windows\system32\winrsmgr.dll

    2011-09-05 16:41 . 2011-04-21 13:16 273408 ----a-w- c:\windows\system32\drivers\afd.sys

    2011-09-05 16:40 . 2010-09-10 16:35 168960 ----a-w- c:\program files\Windows Media Player\wmplayer.exe

    2011-09-05 16:40 . 2010-09-10 16:37 8147456 ----a-w- c:\windows\system32\wmploc.DLL

    2011-09-05 16:40 . 2010-09-06 16:24 125952 ----a-w- c:\windows\system32\srvsvc.dll

    2011-09-05 16:40 . 2010-09-06 16:23 17920 ----a-w- c:\windows\system32\netevent.dll

    2011-09-05 16:39 . 2010-04-16 16:10 501760 ----a-w- c:\windows\system32\usp10.dll

    2011-09-05 16:39 . 2010-10-12 15:48 33280 ----a-w- c:\program files\Windows Mail\wabfind.dll

    2011-09-05 16:39 . 2010-10-12 13:52 66048 ----a-w- c:\program files\Windows Mail\wabmig.exe

    2011-09-05 16:39 . 2010-10-12 13:52 515584 ----a-w- c:\program files\Windows Mail\wab.exe

    2011-09-05 16:39 . 2011-02-16 13:24 292864 ----a-w- c:\windows\system32\atmfd.dll

    2011-09-05 16:39 . 2011-02-16 15:29 34304 ----a-w- c:\windows\system32\atmlib.dll

    2011-09-05 16:39 . 2010-06-16 15:12 72704 ----a-w- c:\windows\system32\fontsub.dll

    2011-09-05 16:37 . 2011-04-14 14:24 75264 ----a-w- c:\windows\system32\drivers\dfsc.sys

    2011-09-05 16:37 . 2010-10-15 14:08 3600272 ----a-w- c:\windows\system32\ntkrnlpa.exe

    2011-09-05 16:37 . 2010-10-15 14:08 3548048 ----a-w- c:\windows\system32\ntoskrnl.exe

    2011-09-05 16:37 . 2010-10-15 13:48 1205080 ----a-w- c:\windows\system32\ntdll.dll

    2011-09-05 16:37 . 2011-03-10 16:12 1136640 ----a-w- c:\windows\system32\mfc42.dll

    2011-09-05 16:37 . 2011-03-10 16:12 1161728 ----a-w- c:\windows\system32\mfc42u.dll

    2011-09-05 16:37 . 2010-01-29 16:22 1616384 ----a-w- c:\program files\Windows Mail\msoe.dll

    2011-09-05 16:37 . 2010-05-27 19:16 81920 ----a-w- c:\windows\system32\iccvid.dll

    2011-09-05 16:37 . 2008-04-05 03:34 15360 ----a-w- c:\windows\system32\pacerprf.dll

    2011-09-05 16:37 . 2008-04-05 01:21 72192 ----a-w- c:\windows\system32\drivers\pacer.sys

    2011-09-05 16:35 . 2010-04-05 16:08 317952 ----a-w- c:\windows\system32\MP4SDECD.DLL

    2011-09-05 16:32 . 2010-12-14 15:49 1169408 ----a-w- c:\windows\system32\sdclt.exe

    2011-09-05 16:32 . 2010-06-17 17:15 10926592 ----a-w- c:\program files\Movie Maker\MOVIEMK.dll

    2011-09-05 16:32 . 2010-06-17 15:49 150016 ----a-w- c:\program files\Movie Maker\MOVIEMK.exe

    2011-09-05 16:32 . 2010-06-18 16:43 36352 ----a-w- c:\windows\system32\rtutils.dll

    2011-09-05 16:32 . 2011-04-29 12:49 146432 ----a-w- c:\windows\system32\drivers\srv2.sys

    2011-09-05 16:32 . 2011-04-29 12:49 102400 ----a-w- c:\windows\system32\drivers\srvnet.sys

    2011-09-05 16:32 . 2011-05-02 16:00 766464 ----a-w- c:\program files\Common Files\Microsoft Shared\vgx\VGX.dll

    2011-09-05 16:32 . 2011-02-16 15:35 430080 ----a-w- c:\windows\system32\vbscript.dll

    2011-09-05 16:32 . 2010-12-20 15:39 563200 ----a-w- c:\windows\system32\oleaut32.dll

    2011-09-05 16:32 . 2010-08-31 15:41 954752 ----a-w- c:\windows\system32\mfc40.dll

    2011-09-05 16:32 . 2010-08-31 15:41 954288 ----a-w- c:\windows\system32\mfc40u.dll

    2011-09-05 16:28 . 2010-10-18 14:01 81920 ----a-w- c:\windows\system32\consent.exe

    2011-09-05 16:26 . 2008-05-08 21:59 90112 ----a-w- c:\windows\system32\wshext.dll

    2011-09-05 16:26 . 2008-05-08 21:59 155648 ----a-w- c:\windows\system32\wscript.exe

    2011-09-05 16:26 . 2008-05-08 21:58 135168 ----a-w- c:\windows\system32\wshom.ocx

    2011-09-05 16:26 . 2008-05-08 21:59 180224 ----a-w- c:\windows\system32\scrobj.dll

    2011-09-05 16:26 . 2008-05-08 21:59 172032 ----a-w- c:\windows\system32\scrrun.dll

    2011-09-05 16:26 . 2008-05-08 21:58 135168 ----a-w- c:\windows\system32\cscript.exe

    2011-09-05 16:26 . 2010-06-16 15:59 898952 ----a-w- c:\windows\system32\drivers\tcpip.sys

    2011-09-05 16:26 . 2011-04-20 14:47 375808 ----a-w- c:\windows\system32\winsrv.dll

    2011-09-05 16:26 . 2011-04-20 14:44 49152 ----a-w- c:\windows\system32\csrsrv.dll

    2011-09-05 16:26 . 2010-08-31 15:40 531968 ----a-w- c:\windows\system32\comctl32.dll

    2011-09-05 16:00 . 2011-09-05 16:00 -------- d-----w- c:\programdata\WindowsSearch

    2011-09-05 15:54 . 2011-04-29 14:54 276992 ----a-w- c:\windows\system32\schannel.dll

    2011-09-03 14:52 . 2011-09-03 14:52 -------- d-----w- C:\PerfLogs

    .

    .

    .

    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2011-09-26 19:28 . 2009-12-20 15:35 249856 ------w- c:\windows\Setup1.exe

    2011-09-26 19:28 . 2009-12-20 15:35 73216 ----a-w- c:\windows\ST6UNST.EXE

    2011-09-15 15:32 . 2011-06-28 22:41 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

    2011-09-03 14:27 . 2006-11-02 10:32 101888 ----a-w- c:\windows\system32\ifxcardm.dll

    2011-09-03 14:26 . 2006-11-02 10:32 82432 ----a-w- c:\windows\system32\axaltocm.dll

    2011-09-08 00:05 . 2011-08-18 10:28 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll

    .

    .

    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

    REGEDIT4

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]

    @="{472083B0-C522-11CF-8763-00608CC02F24}"

    [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]

    2011-09-06 20:45 122512 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll

    .

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920]

    "PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2009-06-25 1414144]

    "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]

    "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "JMB36X IDE Setup"="c:\windows\JM\JMInsIDE.exe" [2006-10-30 36864]

    "RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2006-12-06 69216]

    "LanguageShortcut"="c:\program files\CyberLink\PowerDVD\Language\Language.exe" [2006-12-05 54832]

    "WinampAgent"="c:\program files\Winamp\winampa.exe" [2008-04-01 36352]

    "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-11-10 417792]

    "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-11-12 141600]

    "NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-02-18 2221352]

    "TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2010-03-31 202256]

    "DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2010-03-05 1135912]

    "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]

    "ledpointer"="CNYHKey.exe" [2006-11-09 5585408]

    "MoLed"="ModLEDKey.exe" [2006-11-09 53248]

    "SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2006-12-18 868352]

    "avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-09-06 3722416]

    "Malwarebytes' Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2011-08-31 1047208]

    .

    c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

    Adobe Reader Snelle start.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-9-23 29696]

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

    "EnableUIADesktopToggle"= 0 (0x0)

    .

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]

    BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~1\AVG\AVG10\avgchsvx.exe /sync\0c:\progra~1\AVG\AVG10\avgrsx.exe /sync /restart

    .

    R2 CheckStage2_svc;CheckStage2_svc;c:\windows\CheckStage2.exe [2007-03-12 462848]

    R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

    R3 athrusb;Atheros Wireless LAN USB device driver;c:\windows\system32\DRIVERS\athrusb.sys [2006-12-22 449536]

    R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [x]

    R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]

    S1 aswSnx;aswSnx; [x]

    S1 aswSP;aswSP; [x]

    S2 aswFsBlk;aswFsBlk; [x]

    S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-09-06 54616]

    S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-03-23 378472]

    S3 3xHybrid;ASUSTek SAA713x PCI Card;c:\windows\system32\DRIVERS\3xHybrid.sys [2006-10-27 2814080]

    S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32v.sys [2011-03-03 139368]

    S3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys [2010-04-19 47360]

    .

    .

    Inhoud van de 'Gedeelde Taken' map

    .

    2011-09-26 c:\windows\Tasks\User_Feed_Synchronization-{A00DB71E-D82E-415A-9205-46B51548DBF9}.job

    - c:\windows\system32\msfeedssync.exe [2009-01-01 07:33]

    .

    .

    ------- Bijkomende Scan -------

    .

    uStart Page = about:blank

    mStart Page = about:blank

    uInternet Settings,ProxyOverride = *.local

    IE: &Download All with FlashGet - c:\program files\FlashGet\jc_all.htm

    IE: &Download with FlashGet - c:\program files\FlashGet\jc_link.htm

    IE: &Winamp Search - c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html

    IE: Open with WordPerfect - c:\program files\WordPerfect Office X3\Programs\WPLauncher.hta

    TCP: DhcpNameServer = 195.130.130.133 195.130.131.133

    FF - ProfilePath - c:\users\Naam\AppData\Roaming\Mozilla\Firefox\Profiles\4jikr7k2.default\

    FF - prefs.js: browser.search.selectedEngine - Web Search

    FF - prefs.js: browser.startup.homepage - hxxp://www.google.be/

    FF - prefs.js: keyword.URL - hxxp://startsear.ch/?aff=1&q=

    FF - prefs.js: network.proxy.http - 196.30.133.146

    FF - prefs.js: network.proxy.http_port - 8080

    FF - prefs.js: network.proxy.type - 0

    .

    - - - - ORPHANS VERWIJDERD - - - -

    .

    Toolbar-{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - c:\program files\vShare.tv plugin\BarLcher.dll

    .

    .

    .

    **************************************************************************

    .

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

    Rootkit scan 2011-09-27 19:10

    Windows 6.0.6001 Service Pack 1 NTFS

    .

    scannen van verborgen processen ...

    .

    scannen van verborgen autostart items ...

    .

    scannen van verborgen bestanden ...

    .

    Scan succesvol afgerond

    verborgen bestanden: 0

    .

    **************************************************************************

    .

    --------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

    @Denied: (A) (Users)

    @Denied: (A) (Everyone)

    @Allowed: (B 1 2 3 4 5) (S-1-5-20)

    "BlindDial"=dword:00000000

    "MSCurrentCountry"=dword:0000000f

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

    @Denied: (A) (Users)

    @Denied: (A) (Everyone)

    @Allowed: (B 1 2 3 4 5) (S-1-5-20)

    "BlindDial"=dword:00000000

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]

    @Denied: (A) (Users)

    @Denied: (A) (Everyone)

    @Allowed: (B 1 2 3 4 5) (S-1-5-20)

    "BlindDial"=dword:00000000

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]

    @Denied: (A) (Users)

    @Denied: (A) (Everyone)

    @Allowed: (B 1 2 3 4 5) (S-1-5-20)

    "BlindDial"=dword:00000000

    .

    Voltooingstijd: 2011-09-27 19:15:38

    ComboFix-quarantined-files.txt 2011-09-27 17:15

    .

    Pre-Run: 59.730.911.232 bytes beschikbaar

    Post-Run: 61.965.185.024 bytes beschikbaar

    .

    - - End Of File - - 620FF81175C82B8E9BCFA8A9A7A8E5A1

    M'n pc wou weer niet heropstarten. Na een paar keer m'n powerknop in te drukken en opnieuw in te drukken is het na 5 keer proberen dan eindelijk gelukt om windows op te starten. Echt om gek van te worden! Net nu ik een nieuwe videokaart heb gekocht om zo het probleem op te lossen.

    mvg,

    Breyton

  10. Beste Kape,

    Ik heb HijackThis via m'n snelkoppeling opgestart, daar had ik niet de keuze het als administrator uit te voeren.

    Heb het nu nog eens via .exe gedaan.

    Scan--->fix checked the files die je opgaf--->terug scan

    en dit is m'n log-file

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 21:18:52, on 22/09/2011

    Platform: Windows Vista SP1 (WinNT 6.00.1905)

    MSIE: Internet Explorer v7.00 (7.00.6001.18639)

    Boot mode: Normal

    Running processes:

    C:\PROGRAM FILES\PANDA SECURITY\PANDA ANTIVIRUS PRO 2011\WebProxy.exe

    C:\Windows\SYSTEM32\taskeng.exe

    C:\Windows\system32\Dwm.exe

    C:\Windows\Explorer.EXE

    C:\Program Files\Windows Defender\MSASCui.exe

    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe

    C:\Program Files\CyberLink\TV Enhance\TVEService.exe

    C:\Program Files\Winamp\winampa.exe

    C:\Program Files\iTunes\iTunesHelper.exe

    C:\Program Files\Common Files\Real\Update_OB\realsched.exe

    C:\Program Files\DivX\DivX Update\DivXUpdate.exe

    C:\Program Files\Panda Security\Panda Antivirus Pro 2011\ApVxdWin.exe

    C:\Program Files\Common Files\Java\Java Update\jusched.exe

    C:\Windows\CNYHKey.exe

    C:\Windows\ModLEDKey.exe

    C:\Program Files\Analog Devices\Core\smax4pnp.exe

    C:\Windows\System32\rundll32.exe

    C:\Windows\System32\rundll32.exe

    C:\Program Files\AVAST Software\Avast\AvastUI.exe

    C:\Program Files\Windows Sidebar\sidebar.exe

    C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe

    C:\Program Files\Windows Media Player\wmpnscfg.exe

    C:\Windows\ehome\ehtray.exe

    C:\Program Files\Targa VFD Display\Targa VFD Display.exe

    C:\Program Files\Windows Live\Messenger\msnmsgr.exe

    C:\Windows\ehome\ehmsas.exe

    C:\Program Files\Mozilla Firefox\firefox.exe

    C:\Program Files\Windows Sidebar\sidebar.exe

    C:\Windows\system32\wuauclt.exe

    C:\Program Files\Mozilla Firefox\plugin-container.exe

    C:\Program Files\Windows Mail\WinMail.exe

    C:\Users\Glenn\Desktop\USB\09-2011\Varia\crack\Tools\Charon\Charon.exe

    C:\Windows\System32\notepad.exe

    C:\Windows\system32\NOTEPAD.EXE

    C:\Program Files\Panda Security\Panda Antivirus Pro 2011\avciman.exe

    C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

    O1 - Hosts: ::1 localhost #[iPv6]

    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

    O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll

    O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

    O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll

    O3 - Toolbar: VShareToolBar - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\vShare.tv plugin\BarLcher.dll (file missing)

    O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

    O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\JM\JMInsIDE.exe

    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"

    O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"

    O4 - HKLM\..\Run: [TVEService] "C:\Program Files\CyberLink\TV Enhance\TVEService.exe"

    O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

    O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"

    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

    O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW

    O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Security\Panda Antivirus Pro 2011\APVXDWIN.EXE" /s

    O4 - HKLM\..\Run: [sCANINICIO] "C:\Program Files\Panda Security\Panda Antivirus Pro 2011\Inicio.exe"

    O4 - HKLM\..\Run: [MSConfig] "C:\Windows\system32\msconfig.exe" /auto

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

    O4 - HKLM\..\Run: [ledpointer] CNYHKey.exe

    O4 - HKLM\..\Run: [MoLed] ModLEDKey.exe

    O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe

    O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart

    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup

    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit

    O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui

    O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript

    O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

    O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray

    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe

    O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')

    O4 - Global Startup: Adobe Reader Snelle start.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

    O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files\FlashGet\jc_all.htm

    O8 - Extra context menu item: &Download with FlashGet - C:\Program Files\FlashGet\jc_link.htm

    O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html

    O8 - Extra context menu item: Open with WordPerfect - C:\Program Files\WordPerfect Office X3\Programs\WPLauncher.hta

    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

    O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

    O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe

    O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

    O23 - Service: CheckStage2_svc - Unknown owner - C:\Windows\CheckStage2.exe

    O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

    O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

    O23 - Service: Panda Software Controller - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PsCtrls.exe

    O23 - Service: Panda Function Service (PAVFNSVR) - Unknown owner - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PavFnSvr.exe

    O23 - Service: Panda Process Protection Service (PavPrSrv) - Unknown owner - C:\Program Files\Common Files\Panda Security\PavShld\pavprsrv.exe

    O23 - Service: Panda On-Access Anti-Malware Service (PAVSRV) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\pavsrvx86.exe

    O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe

    O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe

    O23 - Service: Panda IManager Service (PSIMSVC) - Panda Security S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PsImSvc.exe

    O23 - Service: Panda PSK service (PskSvcRetail) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PskSvc.exe

    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

    O23 - Service: Panda TPSrv (TPSrv) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\TPSrv.exe

    O23 - Service: TVEnhance Background Capture Service (TBCS) (TVECapSvc) - Unknown owner - C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVECapSvc.exe

    O23 - Service: TVEnhance Task Scheduler (TTS)) (TVESched) - Unknown owner - C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVESched.exe

    --

    End of file - 9431 bytes

    De files blijven blijkbaar bestaan. Heb wel geen heropstart gedaan, omwille van de miserie die ik heb om windows opgestart te krijgen.

    Weet je hoe ik het windows opstart probleem kan verhelpen?

    Quote:Een bijkomend probleem is de volgende:

    Als ik m'n pc moet heropstarten weigert hij om windows op te starten (ik hoor niet de gekende 'piep')

    Als ik vervolgens m'n powerknop blijf indrukken, zodat m'n pc uitvalt en m'n voeding uitschakel dan moet ik zeker 10 keer, soms meer proberen vooraleer m'n windows wilt opstarten.

    In het andere geval start ik m'n pc op en hoor wat getik en staat m'n beeldscherm op 'stand by'

    mvg,

    Breyton

  11. Bedankt Kape & Asus:

    Heb alles gedaan zoals je voorgeschreven hebt.

    MBAM-log:

    Malwarebytes' Anti-Malware 1.51.2.1300

    Malwarebytes : Free anti-malware, anti-virus and spyware removal download

    Databaseversie: 7772

    Windows 6.0.6001 Service Pack 1

    Internet Explorer 7.0.6001.18000

    22/09/2011 18:29:39

    mbam-log-2011-09-22 (18-29-39).txt

    Scantype: Snelle scan

    Objecten gescand: 177782

    Verstreken tijd: 14 minuut/minuten, 36 seconde(n)

    Geheugenprocessen geïnfecteerd: 0

    Geheugenmodulen geïnfecteerd: 0

    Registersleutels geïnfecteerd: 0

    Registerwaarden geïnfecteerd: 0

    Registerdata geïnfecteerd: 0

    Mappen geïnfecteerd: 1

    Bestanden geïnfecteerd: 4

    Geheugenprocessen geïnfecteerd:

    (Geen kwaadaardige objecten gedetecteerd)

    Geheugenmodulen geïnfecteerd:

    (Geen kwaadaardige objecten gedetecteerd)

    Registersleutels geïnfecteerd:

    (Geen kwaadaardige objecten gedetecteerd)

    Registerwaarden geïnfecteerd:

    (Geen kwaadaardige objecten gedetecteerd)

    Registerdata geïnfecteerd:

    (Geen kwaadaardige objecten gedetecteerd)

    Mappen geïnfecteerd:

    c:\syte821.bin (Trojan.SpyEyes) -> Quarantined and deleted successfully.

    Bestanden geïnfecteerd:

    c:\Users\Naam\AppData\Local\Temp\jar_cache3834516152992178317.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully.

    c:\Users\Naam\AppData\Local\Temp\kkkkkkkk5k.exe (Trojan.SpyEyes.H) -> Quarantined and deleted successfully.

    c:\syte821.bin\2a7aae47a45ede8 (Trojan.SpyEyes) -> Quarantined and deleted successfully.

    c:\syte821.bin\529778daa05ede8 (Trojan.SpyEyes) -> Quarantined and deleted successfully.

    ------------------------------------------------------------------------------------------------------------------------------

    HiJackThis-log:

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 18:53:36, on 22/09/2011

    Platform: Windows Vista SP1 (WinNT 6.00.1905)

    MSIE: Internet Explorer v7.00 (7.00.6001.18639)

    Boot mode: Normal

    Running processes:

    C:\PROGRAM FILES\PANDA SECURITY\PANDA ANTIVIRUS PRO 2011\WebProxy.exe

    C:\Windows\SYSTEM32\taskeng.exe

    C:\Windows\system32\Dwm.exe

    C:\Windows\Explorer.EXE

    C:\Program Files\Windows Defender\MSASCui.exe

    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe

    C:\Program Files\CyberLink\TV Enhance\TVEService.exe

    C:\Program Files\Winamp\winampa.exe

    C:\Program Files\iTunes\iTunesHelper.exe

    C:\Program Files\Common Files\Real\Update_OB\realsched.exe

    C:\Program Files\DivX\DivX Update\DivXUpdate.exe

    C:\Program Files\Panda Security\Panda Antivirus Pro 2011\ApVxdWin.exe

    C:\Program Files\Common Files\Java\Java Update\jusched.exe

    C:\Windows\CNYHKey.exe

    C:\Windows\ModLEDKey.exe

    C:\Program Files\Analog Devices\Core\smax4pnp.exe

    C:\Windows\System32\rundll32.exe

    C:\Windows\System32\rundll32.exe

    C:\Program Files\AVAST Software\Avast\AvastUI.exe

    C:\Program Files\Windows Sidebar\sidebar.exe

    C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe

    C:\Program Files\Windows Media Player\wmpnscfg.exe

    C:\Windows\ehome\ehtray.exe

    C:\Program Files\Targa VFD Display\Targa VFD Display.exe

    C:\Program Files\Windows Live\Messenger\msnmsgr.exe

    C:\Windows\ehome\ehmsas.exe

    C:\Program Files\Mozilla Firefox\firefox.exe

    C:\Program Files\Windows Sidebar\sidebar.exe

    C:\Windows\system32\wuauclt.exe

    C:\Windows\System32\notepad.exe

    C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

    O1 - Hosts: ::1 localhost #[iPv6]

    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

    O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll

    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

    O2 - BHO: IE5BarLauncherBHO Class - {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} - C:\Program Files\vShare.tv plugin\BarLcher.dll

    O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

    O2 - BHO: SMTTB2009 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\PDF Creator Toolbar\tbcore3.dll

    O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll

    O3 - Toolbar: PDF Creator Toolbar - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files\PDF Creator Toolbar\tbcore3.dll

    O3 - Toolbar: VShareToolBar - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\vShare.tv plugin\BarLcher.dll

    O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

    O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\JM\JMInsIDE.exe

    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"

    O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"

    O4 - HKLM\..\Run: [TVEService] "C:\Program Files\CyberLink\TV Enhance\TVEService.exe"

    O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

    O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"

    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

    O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW

    O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Security\Panda Antivirus Pro 2011\APVXDWIN.EXE" /s

    O4 - HKLM\..\Run: [sCANINICIO] "C:\Program Files\Panda Security\Panda Antivirus Pro 2011\Inicio.exe"

    O4 - HKLM\..\Run: [MSConfig] "C:\Windows\system32\msconfig.exe" /auto

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

    O4 - HKLM\..\Run: [ledpointer] CNYHKey.exe

    O4 - HKLM\..\Run: [MoLed] ModLEDKey.exe

    O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe

    O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart

    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup

    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit

    O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui

    O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript

    O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

    O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray

    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe

    O4 - Global Startup: Adobe Reader Snelle start.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

    O4 - Global Startup: Targa VFD Display.lnk = ?

    O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files\FlashGet\jc_all.htm

    O8 - Extra context menu item: &Download with FlashGet - C:\Program Files\FlashGet\jc_link.htm

    O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html

    O8 - Extra context menu item: Open with WordPerfect - C:\Program Files\WordPerfect Office X3\Programs\WPLauncher.hta

    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

    O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

    O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe

    O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

    O23 - Service: CheckStage2_svc - Unknown owner - C:\Windows\CheckStage2.exe

    O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

    O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

    O23 - Service: Panda Software Controller - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PsCtrls.exe

    O23 - Service: Panda Function Service (PAVFNSVR) - Unknown owner - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PavFnSvr.exe

    O23 - Service: Panda Process Protection Service (PavPrSrv) - Unknown owner - C:\Program Files\Common Files\Panda Security\PavShld\pavprsrv.exe

    O23 - Service: Panda On-Access Anti-Malware Service (PAVSRV) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\pavsrvx86.exe

    O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe

    O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe

    O23 - Service: Panda IManager Service (PSIMSVC) - Panda Security S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PsImSvc.exe

    O23 - Service: Panda PSK service (PskSvcRetail) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PskSvc.exe

    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

    O23 - Service: Panda TPSrv (TPSrv) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\TPSrv.exe

    O23 - Service: TVEnhance Background Capture Service (TBCS) (TVECapSvc) - Unknown owner - C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVECapSvc.exe

    O23 - Service: TVEnhance Task Scheduler (TTS)) (TVESched) - Unknown owner - C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVESched.exe

    --

    End of file - 9280 bytes

    Het valt me wel op dat de files waar ik een 'fix checked' heb gedaan, daar plotseling terug zijn!?

    Een bijkomend probleem is de volgende:

    Als ik m'n pc moet heropstarten weigert hij om windows op te starten (ik hoor niet de gekende 'piep')

    Als ik vervolgens m'n powerknop blijf indrukken, zodat m'n pc uitvalt en m'n voeding uitschakel dan moet ik zeker 10 keer, soms meer proberen vooraleer m'n windows wilt opstarten.

    In het andere geval start ik m'n pc op en hoor wat getik en staat m'n beeldscherm op 'stand by'

    Eigenschappen pc:

    Targa GmbH

    Processor: AMD Athlon 64 X2 Dual Core Processor 5000+ 2,60 GHz

    windows: Vista Home Premium

    Echt vreemd allemaal.

    Indien jullie liever hebben dat ik voor dit probleem een nieuw topic opstart, dan hoef je het me maar te zeggen.

    Nogmaals bedankt voor alles.

    mvg,

  12. Allereerst heel erg bedankt voor de vlugge reactie.

    Ik moet er wel bijvertellen dat ik juist een systeemherstel gedaan heb en de verveelde spyware voorlopig niet meer opduikt.

    Om het in de toekomst niet meer tegen te komen had ik graag geweten welke 'free virusscanner' en spyware scanner jullie mij aanraden.

    Hieronder volgt mijn HiJackThis log:

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 22:37:20, on 21/09/2011

    Platform: Windows Vista SP1 (WinNT 6.00.1905)

    MSIE: Internet Explorer v7.00 (7.00.6001.18639)

    Boot mode: Normal

    Running processes:

    C:\PROGRAM FILES\PANDA SECURITY\PANDA ANTIVIRUS PRO 2011\WebProxy.exe

    C:\Windows\SYSTEM32\taskeng.exe

    C:\Windows\system32\Dwm.exe

    C:\Windows\Explorer.EXE

    C:\Program Files\Windows Defender\MSASCui.exe

    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe

    C:\Program Files\CyberLink\TV Enhance\TVEService.exe

    C:\Program Files\Winamp\winampa.exe

    C:\Program Files\iTunes\iTunesHelper.exe

    C:\Program Files\Common Files\Real\Update_OB\realsched.exe

    C:\Program Files\DivX\DivX Update\DivXUpdate.exe

    C:\Program Files\Panda Security\Panda Antivirus Pro 2011\ApVxdWin.exe

    C:\Program Files\Common Files\Java\Java Update\jusched.exe

    C:\Windows\CNYHKey.exe

    C:\Windows\ModLEDKey.exe

    C:\Program Files\Analog Devices\Core\smax4pnp.exe

    C:\Windows\System32\rundll32.exe

    C:\Program Files\Windows Sidebar\sidebar.exe

    C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe

    C:\Windows\System32\rundll32.exe

    C:\Program Files\Windows Media Player\wmpnscfg.exe

    C:\Windows\ehome\ehtray.exe

    C:\Program Files\Targa VFD Display\Targa VFD Display.exe

    C:\Windows\ehome\ehmsas.exe

    C:\Program Files\Windows Live\Messenger\msnmsgr.exe

    C:\Program Files\Mozilla Firefox\firefox.exe

    C:\Windows\system32\wuauclt.exe

    C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

    O1 - Hosts: ::1 localhost

    O1 - Hosts: 119.42.146.34 Index :: Warez-BB.org

    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

    O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll

    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

    O2 - BHO: IE5BarLauncherBHO Class - {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} - C:\Program Files\vShare.tv plugin\BarLcher.dll

    O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

    O2 - BHO: SMTTB2009 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\PDF Creator Toolbar\tbcore3.dll

    O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll

    O3 - Toolbar: PDF Creator Toolbar - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files\PDF Creator Toolbar\tbcore3.dll

    O3 - Toolbar: VShareToolBar - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\vShare.tv plugin\BarLcher.dll

    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

    O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\JM\JMInsIDE.exe

    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"

    O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"

    O4 - HKLM\..\Run: [TVEService] "C:\Program Files\CyberLink\TV Enhance\TVEService.exe"

    O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

    O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"

    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

    O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW

    O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Security\Panda Antivirus Pro 2011\APVXDWIN.EXE" /s

    O4 - HKLM\..\Run: [sCANINICIO] "C:\Program Files\Panda Security\Panda Antivirus Pro 2011\Inicio.exe"

    O4 - HKLM\..\Run: [MSConfig] "C:\Windows\system32\msconfig.exe" /auto

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

    O4 - HKLM\..\Run: [ledpointer] CNYHKey.exe

    O4 - HKLM\..\Run: [MoLed] ModLEDKey.exe

    O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe

    O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart

    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup

    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit

    O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

    O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray

    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe

    O4 - HKCU\..\Run: [0D6ZYB3E0GUW3G5IMOTOBUZSYXAA] C:\syte821.bin\E1124981AFC.exe /q

    O4 - Global Startup: Adobe Reader Snelle start.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

    O4 - Global Startup: Targa VFD Display.lnk = ?

    O8 - Extra context menu item: &Download All with FlashGet - C:\Program Files\FlashGet\jc_all.htm

    O8 - Extra context menu item: &Download with FlashGet - C:\Program Files\FlashGet\jc_link.htm

    O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html

    O8 - Extra context menu item: Open with WordPerfect - C:\Program Files\WordPerfect Office X3\Programs\WPLauncher.hta

    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

    O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

    O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

    O23 - Service: CheckStage2_svc - Unknown owner - C:\Windows\CheckStage2.exe

    O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

    O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

    O23 - Service: Panda Software Controller - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PsCtrls.exe

    O23 - Service: Panda Function Service (PAVFNSVR) - Unknown owner - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PavFnSvr.exe

    O23 - Service: Panda Process Protection Service (PavPrSrv) - Unknown owner - C:\Program Files\Common Files\Panda Security\PavShld\pavprsrv.exe

    O23 - Service: Panda On-Access Anti-Malware Service (PAVSRV) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\pavsrvx86.exe

    O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe

    O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe

    O23 - Service: Panda IManager Service (PSIMSVC) - Panda Security S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PsImSvc.exe

    O23 - Service: Panda PSK service (PskSvcRetail) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\PskSvc.exe

    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

    O23 - Service: Panda TPSrv (TPSrv) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Antivirus Pro 2011\TPSrv.exe

    O23 - Service: TVEnhance Background Capture Service (TBCS) (TVECapSvc) - Unknown owner - C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVECapSvc.exe

    O23 - Service: TVEnhance Task Scheduler (TTS)) (TVESched) - Unknown owner - C:\Program Files\CyberLink\TV Enhance\Kernel\TV\TVESched.exe

    --

    End of file - 8778 bytes

    Wat staat die warez-bb.org + proxy daar te doen?

    Ik had vorig jaar 'Panda Security 2011' aangekocht, maar die vind ik veel te belastend voor mijn cpu. Vandaar m'n eerder gestelde vraag.

    Nogmaals bedankt.

    mvg,

    Breyton

  13. Hoi,

    Ik heb iets vreemd voor met m'n pc.

    Vista 32bit en audio driver Soundmax.

    Als ik m'n pc opstart en ik wil met winamp een liedje afspelen, krijg ik fout 88780078. Evenals met youtube. Ook geen geluid

    Dan moet ik m'n audio driver herinstalleren en alles werkt terug normaal.

    Het vreemde is als ik m'n pc afsluit en terug opstart, het probleem er terug is en ik weer die audio driver zou moeten installeren.

    Het valt me ook op dat m'n klok en datum totaal niet juist staat. Terwijl dat ik die al voortdurend terug juist heb gezet.

    Ik word hier echt gek van.

    Wie zou me hier mee kunnen helpen?

    Alvast bedankt.

    Greetz,

    Breyton

    reputation.gif

    Edit: vandaag krijg ik bij het opstarten 'CMOS checksum error' en dan moet ik op F1 drukken en start gewoon m'n windows op. Ik denk niet dat het aan de CMOS batterij ligt, want m'n pc is maar een jaar oud. Ik las ergens indien ik m'n pc 24h zou laten aanstaan, die batterij terug opgeladen zou zijn.

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.