paradijsvogel

Kom er morgen op terug ! Het is te laat nu ! (23:50 uur)

Hr. Stegisoft, Heeft U misschien nog verdere suggesties na ons laatste mailcontact ? Ik zou graag advies inzake het aanpassen van de BIOS van America Megatrends versie 6.01. Daarin worden de schijven vermeld. Mogelijk huist daar de oplossing ! Op de bonnevooi daarin gaan wijzigen vraagt toch om deskundigheid. Misschien een update proberen te krijgen, maar hoe werkt dat ??

De boottime stond reeds op 30s. Wat nu ? Misschien BIOS aanpassen ?

Heer Stefisoft, Dit las ik op de onderkant: MSN: 50041692 MD: 90148.14 SN: 790148.14002496 Articl.nr.: 5751

Beste Hr. Wabbit, Hartelijk dank in deze sessie voor Uw steun. Dat geld uiteraard ook voor dhr. Stegisoft. Ik neem aan dat hier het zoeken naar een oplossing wordt gestopt ?? Misschien heeft U nog een laatste advies waar ik verder kan zoeken ? Dan sluit ik hierbij onze discussie af met een positief gevoel !! Met vriendelijke groeten, Jan

De hele voorjaarsschoonmaakactie heeft gewerkt ! De PC is sneller geworden. Nog nooit ontving ik zo'n fijn verjaardagscadeau!!. Al Uw suggesties heb ik opgevolgd. Het oorspronkelijke probleem: Herkenning van de externe USB-harddisk van 2Tb kon ik nog niet oplossen ! Mogelijk heeft U of een van collegae een passende oplossing hiervoor. Ik vermoed, dat e.e.a. toch in de BIOS (America Megatrends) moet worden aangepast. Maar waar en hoe ? In afwachting, Jan p.s. Blijven de gegevens op deze site staan, zodat ik mogelijk in de toekomst bepaalde links kan blijven gebruiken ?? (ComboFix of Malware e.d.)

Hier is de file: ComboFix 12-04-16.01 - Jan 17-04-2012 15:39:22.3.2 - x86 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.31.1043.18.2047.1165 [GMT 2:00] Gestart vanuit: c:\users\Jan\Desktop\ComboFix.exe gebruikte Opdracht switches :: c:\users\Jan\Desktop\CFScript.txt AV: AVG Internet Security 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0} FW: AVG Firewall *Enabled* {621CC794-9486-F902-D092-0484E8EA828B} SP: AVG Internet Security 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\program files\BabylonToolbar c:\program files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarApp.dll c:\program files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarEng.dll c:\program files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarsrv.exe c:\program files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll c:\program files\BabylonToolbar\BabylonToolbar\1.5.3.17\uninstall.exe c:\program files\BabylonToolbar\BabylonToolbar\BabylonTB.xpi c:\program files\DealPly c:\program files\DealPly\DealPly.crx c:\program files\DealPly\DealPlyIE.dll c:\program files\DealPly\DealPlyUpdate.exe c:\program files\DealPly\DealPlyUpdate.log c:\program files\DealPly\DealPlyUpdateRun.exe c:\program files\DealPly\icon.ico c:\program files\DealPly\sqlite3.dll c:\program files\DealPly\uninst.exe c:\program files\Norton AntiVirus c:\program files\Norton AntiVirus\Branding\19.5.0.145\13\01\isbrand.loc c:\program files\Norton AntiVirus\Engine\19.6.1.8\appmgr32.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\avifc.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\avmodule.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\avpapp32.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\avscntsk.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\bhclient.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\bhsvcplg.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\ccemlpxy.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\ccgevt.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\ccglog.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\ccipc.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\ccjobmgr.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\ccl110u.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\ccset.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\ccsubeng.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\ccsvc.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\ccsvchst.exe c:\program files\Norton AntiVirus\Engine\19.6.1.8\ccvrtrst.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\cltaldis.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\cltlmh.exe c:\program files\Norton AntiVirus\Engine\19.6.1.8\cltlmj.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\cltlms.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\cltpe.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\comm.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\datastor.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\dimaster.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\distrptr.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\dscli.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\efacli.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\fwcore.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\fwsesal.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\hncore.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\ipsplug.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\iron.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\isdatapr.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\isdatasv.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\mcstatus.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\nahelper.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\ncw.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\qbackup.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\scd.dat c:\program files\Norton AntiVirus\Engine\19.6.1.8\sdkcmn.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\service.dat c:\program files\Norton AntiVirus\Engine\19.6.1.8\spocclnt.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\sqlite.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\sqsvc.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\srtsp32.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\symneti.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\symredir.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\uialert.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\userctxt.dll c:\program files\Norton AntiVirus\Engine\19.6.1.8\userlog.dll c:\program files\Norton AntiVirus\MUI\19.6.1.8\13\01\avpapp32.loc c:\program files\Norton AntiVirus\MUI\19.6.1.8\13\01\avscntsk.loc c:\program files\Norton AntiVirus\MUI\19.6.1.8\13\01\cltres.loc c:\program files\Norton AntiVirus\MUI\19.6.1.8\13\01\cssbase.loc c:\program files\Norton AntiVirus\MUI\19.6.1.8\13\01\fwres.loc c:\program files\Norton AntiVirus\MUI\19.6.1.8\13\01\isres.loc c:\program files\Norton AntiVirus\MUI\19.6.1.8\13\01\ncwres.loc c:\program files\Norton AntiVirus\MUI\19.6.1.8\13\01\sqres.loc c:\program files\Norton AntiVirus\MUI\19.6.1.8\13\01\uialert.loc c:\program files\Norton AntiVirus\MUI\19.6.1.8\images\cssbase.dll c:\programdata\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1} c:\programdata\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}\{09FF4DB8-7DE9-4D47-B7DB-915DB7D9A8CA}.native.bitness.log c:\programdata\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}\{09FF4DB8-7DE9-4D47-B7DB-915DB7D9A8CA}.native.data.log c:\programdata\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}\{09FF4DB8-7DE9-4D47-B7DB-915DB7D9A8CA}.native.elements.log c:\programdata\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}\{09FF4DB8-7DE9-4D47-B7DB-915DB7D9A8CA}.native.weight.log c:\users\Jan\{140f0a73-de1f-4d89-99bb-34d0ff1d6598} c:\users\Jan\{140f0a73-de1f-4d89-99bb-34d0ff1d6598}\AtihdLH3.cat c:\users\Jan\{140f0a73-de1f-4d89-99bb-34d0ff1d6598}\AtihdLH3.INF c:\users\Jan\{140f0a73-de1f-4d89-99bb-34d0ff1d6598}\atihdlh3.sys c:\users\Jan\AppData\Local\Temp\ppcrlui_4864_2 c:\windows\system32\drivers\NAV c:\windows\system32\drivers\NAV\1306010.008\Cat.DB c:\windows\system32\drivers\NAV\1306010.008\ccsetx86.cat c:\windows\system32\drivers\NAV\1306010.008\ccsetx86.inf c:\windows\system32\drivers\NAV\1306010.008\ccsetx86.sys c:\windows\system32\drivers\NAV\1306010.008\iron.cat c:\windows\system32\drivers\NAV\1306010.008\iron.inf c:\windows\system32\drivers\NAV\1306010.008\ironx86.sys c:\windows\system32\drivers\NAV\1306010.008\isolate.ini c:\windows\system32\drivers\NAV\1306010.008\srtsp.cat c:\windows\system32\drivers\NAV\1306010.008\srtsp.inf c:\windows\system32\drivers\NAV\1306010.008\srtsp.sys c:\windows\system32\drivers\NAV\1306010.008\srtspx.cat c:\windows\system32\drivers\NAV\1306010.008\srtspx.inf c:\windows\system32\drivers\NAV\1306010.008\srtspx.sys c:\windows\system32\drivers\NAV\1306010.008\symds.cat c:\windows\system32\drivers\NAV\1306010.008\symds.inf c:\windows\system32\drivers\NAV\1306010.008\symds.sys c:\windows\system32\drivers\NAV\1306010.008\symefa.cat c:\windows\system32\drivers\NAV\1306010.008\symefa.inf c:\windows\system32\drivers\NAV\1306010.008\symefa.sys c:\windows\system32\drivers\NAV\1306010.008\symnet.cat c:\windows\system32\drivers\NAV\1306010.008\symnet.inf c:\windows\system32\drivers\NAV\1306010.008\symnets.sys c:\windows\system32\drivers\NAV\1306010.008\symnetv.cat c:\windows\system32\drivers\NAV\1306010.008\symnetv.inf c:\windows\system32\drivers\NAV\1306010.008\symtdiv.sys c:\windows\system32\drivers\NAV\1306010.008\symvtcer.dat c:\windows\system32\drivers\NAV\1306010.008\VT20111023.024 . . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . . -------\Legacy_ccSet_NAV -------\Legacy_SRTSP -------\Legacy_SRTSPX -------\Legacy_SymDS -------\Legacy_SymEFA -------\Legacy_SymIRON -------\Legacy_SYMTDIv -------\Legacy_ccSet_NAV -------\Legacy_SRTSP -------\Legacy_SRTSPX -------\Legacy_SymDS -------\Legacy_SymEFA -------\Legacy_SymIRON -------\Legacy_SYMTDIv -------\Service_ccSet_NAV -------\Service_NAV -------\Service_SRTSP -------\Service_SRTSPX -------\Service_SymDS -------\Service_SymEFA -------\Service_SymIRON -------\Service_SYMTDIv -------\Service_ccSet_NAV -------\Service_NAV -------\Service_SRTSP -------\Service_SRTSPX -------\Service_SymDS -------\Service_SymEFA -------\Service_SymIRON -------\Service_SYMTDIv . . (((((((((((((((((((( Bestanden Gemaakt van 2012-03-17 to 2012-04-17 )))))))))))))))))))))))))))))) . . 2012-04-17 13:47 . 2012-04-17 13:52 -------- d-----w- c:\users\Jan\AppData\Local\temp 2012-04-17 13:47 . 2012-04-17 13:47 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-04-16 08:35 . 2012-04-16 08:35 -------- d-----w- c:\users\Jan\AppData\Local\ElevatedDiagnostics 2012-04-16 07:39 . 2012-04-16 07:39 -------- d-----w- c:\users\Jan\AppData\Roaming\Malwarebytes 2012-04-16 07:39 . 2012-04-16 07:39 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2012-04-16 07:39 . 2012-04-16 07:39 -------- d-----w- c:\programdata\Malwarebytes 2012-04-16 07:39 . 2012-04-04 13:56 22344 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-04-15 12:05 . 2012-04-15 12:05 388096 ----a-r- c:\users\Jan\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2012-04-15 12:05 . 2012-04-15 12:05 -------- d-----w- c:\program files\Trend Micro 2012-04-15 11:12 . 2012-04-15 11:12 -------- d-----w- c:\program files\WiseConvert_2.1 2012-04-15 11:10 . 2012-04-15 11:10 -------- d-----w- c:\users\Jan\AppData\Roaming\SumatraPDF 2012-04-15 11:08 . 2012-04-15 11:08 -------- d-----w- c:\program files\FoxTabPDFReader 2012-04-14 12:14 . 2012-04-14 12:14 -------- d-----w- c:\program files\Speccy 2012-04-12 19:53 . 2012-02-29 15:11 5120 ----a-w- c:\windows\system32\wmi.dll 2012-04-12 19:53 . 2012-02-29 15:11 172032 ----a-w- c:\windows\system32\wintrust.dll 2012-04-12 19:53 . 2012-02-29 15:09 157696 ----a-w- c:\windows\system32\imagehlp.dll 2012-04-12 19:53 . 2012-02-29 13:32 12800 ----a-w- c:\windows\system32\drivers\fs_rec.sys 2012-04-12 19:52 . 2012-03-06 06:39 3602816 ----a-w- c:\windows\system32\ntkrnlpa.exe 2012-04-12 19:52 . 2012-03-06 06:39 3550080 ----a-w- c:\windows\system32\ntoskrnl.exe 2012-04-09 17:08 . 2012-04-09 17:08 -------- d-----w- c:\users\Jan\AppData\Roaming\Acoustica 2012-04-09 17:08 . 2012-04-09 17:09 -------- d-----w- c:\program files\Acoustica CD Label Maker 2012-04-09 10:22 . 2011-12-19 16:55 31552 ----a-w- c:\windows\system32\TURegOpt.exe 2012-04-09 10:22 . 2011-12-19 16:50 21312 ----a-w- c:\windows\system32\authuitu.dll 2012-04-09 10:22 . 2011-12-19 16:50 29504 ----a-w- c:\windows\system32\uxtuneup.dll 2012-04-08 14:43 . 2012-04-08 14:43 -------- d-----w- c:\program files\AVG PC TuneUp 10.0.0.27 PreCracked 2012-04-08 10:53 . 2012-04-08 10:53 -------- d-----w- c:\programdata\dvdfab 2012-04-08 10:49 . 2012-04-08 14:34 -------- d-----w- c:\program files\DVDFab 8 Qt 2012-04-08 09:48 . 2012-04-08 09:53 -------- d-----w- c:\program files\SubDownloader2 2012-04-08 09:44 . 2012-04-14 18:28 -------- d-----w- c:\users\Jan\AppData\Roaming\Ahead 2012-04-08 09:44 . 2012-04-08 09:44 -------- d-----w- c:\programdata\Ahead 2012-04-08 09:38 . 2012-04-08 09:42 -------- d-----w- c:\program files\Common Files\Ahead 2012-04-05 21:51 . 2012-04-05 21:51 -------- d-----w- c:\users\Jan\AppData\Local\Nero_AG 2012-04-05 20:22 . 2012-04-14 09:49 418464 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2012-04-04 07:32 . 2009-09-04 15:29 1974616 ----a-w- c:\windows\system32\D3DCompiler_42.dll 2012-04-04 07:30 . 2009-09-04 15:29 1892184 ----a-w- c:\windows\system32\D3DX9_42.dll 2012-04-04 07:26 . 2007-07-19 16:14 3727720 ----a-w- c:\windows\system32\d3dx9_35.dll 2012-04-04 05:53 . 2012-04-04 05:53 182160 ----a-w- c:\program files\Internet Explorer\Plugins\nppdf32.dll 2012-04-02 13:13 . 2012-04-02 13:13 -------- d-----w- c:\users\Jan\AppData\Local\APN 2012-03-31 12:56 . 2012-04-08 14:20 -------- d-----w- c:\programdata\vsosdk 2012-03-28 17:53 . 2012-03-28 17:53 -------- d-----w- c:\users\Jan\Ubreakable 2012-03-27 13:08 . 2012-03-27 13:08 -------- d-----w- c:\users\Jan\AppData\Local\Tipard Studio 2012-03-27 08:47 . 2012-03-27 08:47 -------- d-----w- c:\program files\WinAVI Video Converter(1) 2012-03-26 10:49 . 2012-03-27 09:50 -------- d-----w- c:\users\Jan\AppData\Local\WinAVI 2012-03-26 10:48 . 2012-03-26 10:48 -------- d-----w- c:\programdata\ATI 2012-03-22 19:12 . 2012-03-22 19:12 4435968 ----a-w- c:\windows\system32\GPhotos.scr 2012-03-22 10:02 . 2012-04-17 09:27 -------- d-----w- c:\windows\system32\drivers\AVG 2012-03-22 05:35 . 2012-03-22 05:35 -------- d-----w- c:\windows\system32\%LOCALAPPDATA% 2012-03-21 20:52 . 2012-04-09 10:22 -------- d-----w- c:\program files\TuneUp Utilities 2011 2012-03-18 20:18 . 2002-10-03 04:17 253952 ----a-w- c:\windows\MSSP3NL.DLL . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-04-15 09:11 . 2011-07-04 10:02 16400 ----a-w- c:\windows\system32\drivers\LNonPnP.sys 2012-04-14 09:49 . 2011-05-27 14:59 70304 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2012-03-13 16:24 . 2011-09-03 08:25 141944 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS 2012-03-10 10:39 . 2012-03-10 10:39 53248 ----a-r- c:\users\Jan\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe 2012-02-23 08:18 . 2011-05-27 10:25 237072 ------w- c:\windows\system32\MpSigStub.exe 2012-02-22 09:07 . 2011-05-28 19:49 472808 ----a-w- c:\windows\system32\deployJava1.dll 2012-02-15 03:47 . 2012-02-15 03:47 9182208 ----a-w- c:\windows\system32\drivers\atikmdag.sys 2012-02-15 03:18 . 2012-02-15 03:18 159744 ----a-w- c:\windows\system32\atiapfxx.exe 2012-02-15 03:18 . 2011-12-06 03:17 791040 ----a-w- c:\windows\system32\aticfx32.dll 2012-02-15 03:13 . 2011-12-06 03:12 442368 ----a-w- c:\windows\system32\ATIDEMGX.dll 2012-02-15 03:13 . 2012-02-15 03:13 405504 ----a-w- c:\windows\system32\atieclxx.exe 2012-02-15 03:12 . 2012-02-15 03:12 163328 ----a-w- c:\windows\system32\atiesrxx.exe 2012-02-15 03:11 . 2012-02-15 03:11 159744 ----a-w- c:\windows\system32\atitmmxx.dll 2012-02-15 03:10 . 2012-02-15 03:10 20992 ----a-w- c:\windows\system32\atimuixx.dll 2012-02-15 03:10 . 2012-02-15 03:10 43520 ----a-w- c:\windows\system32\ati2edxx.dll 2012-02-15 03:07 . 2012-02-15 03:07 6200320 ----a-w- c:\windows\system32\atidxx32.dll 2012-02-15 02:58 . 2012-02-15 02:58 19392000 ----a-w- c:\windows\system32\atioglxx.dll 2012-02-15 02:40 . 2012-02-15 02:40 1828864 ----a-w- c:\windows\system32\atiumdmv.dll 2012-02-15 02:34 . 2012-02-15 02:34 46080 ----a-w- c:\windows\system32\aticalrt.dll 2012-02-15 02:34 . 2012-02-15 02:34 44032 ----a-w- c:\windows\system32\aticalcl.dll 2012-02-15 02:34 . 2011-12-06 02:33 5954048 ----a-w- c:\windows\system32\atiumdag.dll 2012-02-15 02:29 . 2011-12-06 02:28 5062656 ----a-w- c:\windows\system32\atiumdva.dll 2012-02-15 02:29 . 2012-02-15 02:29 11561984 ----a-w- c:\windows\system32\aticaldd.dll 2012-02-15 02:16 . 2011-04-20 01:26 51200 ----a-w- c:\windows\system32\coinst.dll 2012-02-15 02:13 . 2011-12-06 02:12 356352 ----a-w- c:\windows\system32\atiadlxx.dll 2012-02-15 02:13 . 2012-02-15 02:13 14336 ----a-w- c:\windows\system32\atiglpxx.dll 2012-02-15 02:13 . 2012-02-15 02:13 33280 ----a-w- c:\windows\system32\atigktxx.dll 2012-02-15 02:12 . 2012-02-15 02:12 264704 ----a-w- c:\windows\system32\drivers\atikmpag.sys 2012-02-15 02:12 . 2012-02-15 02:12 33280 ----a-w- c:\windows\system32\atiuxpag.dll 2012-02-15 02:12 . 2011-04-20 01:21 30208 ----a-w- c:\windows\system32\atiu9pag.dll 2012-02-15 02:11 . 2011-04-20 01:21 37376 ----a-w- c:\windows\system32\atitmpxx.dll 2012-02-15 02:11 . 2012-02-15 02:11 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll 2012-02-15 02:11 . 2012-02-15 02:11 53760 ----a-w- c:\windows\system32\atimpc32.dll 2012-02-15 02:11 . 2012-02-15 02:11 53760 ----a-w- c:\windows\system32\amdpcom32.dll 2012-02-14 15:45 . 2012-03-13 19:25 219648 ----a-w- c:\windows\system32\d3d10_1core.dll 2012-02-14 15:45 . 2012-03-13 19:25 160768 ----a-w- c:\windows\system32\d3d10_1.dll 2012-02-13 14:12 . 2012-03-13 19:25 1172480 ----a-w- c:\windows\system32\d3d10warp.dll 2012-02-13 13:47 . 2012-03-13 19:25 683008 ----a-w- c:\windows\system32\d2d1.dll 2012-02-13 13:44 . 2012-03-13 19:25 1068544 ----a-w- c:\windows\system32\DWrite.dll 2012-02-11 05:02 . 2012-02-11 05:02 41680 ----a-w- c:\windows\system32\drivers\ifymgbvm.sys 2012-02-08 06:03 . 2012-03-06 13:54 6552120 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{CDEBA1B0-B56B-48AD-9991-C8BE6BE4AF2B}\mpengine.dll 2012-02-07 09:02 . 2012-02-07 09:02 1070352 ----a-w- c:\windows\system32\MSCOMCTL.OCX 2012-02-02 15:16 . 2012-03-13 19:25 2044416 ----a-w- c:\windows\system32\win32k.sys . . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952] "uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2012-04-01 742264] "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-12-05 343168] "EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2011-10-07 1387288] "AVG_TRAY"="c:\program files\AVG\AVG2012\avgtray.exe" [2012-01-24 2416480] "NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2008-05-28 570664] . c:\users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OneNote 2007 Schermopname en Snel starten.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "DisableStartupSound"= 1 (0x1) "HideFastUserSwitching"= 1 (0x1) . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~1\AVG\AVG2012\avgrsx.exe /sync /restart . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE] @="" . [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "Picasa Media Detector"=c:\program files\Picasa2\PicasaMediaDetector.exe "Adobe Reader Synchronizer"="c:\program files\Adobe\Reader 10.0\Reader\AdobeCollabSync.exe" "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 10.0\Reader\Reader_sl.exe" "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" "ExpressFiles"="c:\program files\ExpressFiles\ExpressFiles.exe" -tray "KPN Assistent"=c:\program files\KPN\KPN Assistent\KPN_Assistent.exe /auto . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-2048313135-3420160357-1514597478-1000] "EnableNotificationsRef"=dword:00000007 . R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-14 253088] S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928] . . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . Inhoud van de 'Gedeelde Taken' map . 2012-04-17 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-05 09:49] . 2012-04-17 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2011-06-12 09:55] . 2012-04-17 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2011-06-12 09:55] . 2012-04-17 c:\windows\Tasks\User_Feed_Synchronization-{2AB5C67B-E8A2-44DE-A072-4D08CA0670E7}.job - c:\windows\system32\msfeedssync.exe [2012-04-10 08:09] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.google.nl/ TCP: DhcpNameServer = 195.121.1.34 195.121.1.66 . - - - - ORPHANS VERWIJDERD - - - - . AddRemove-BabylonToolbar - c:\program files\BabylonToolbar\BabylonToolbar\1.5.3.17\uninstall.exe AddRemove-DealPly - c:\program files\DealPly\uninst.exe . . . ************************************************************************** scannen van verborgen processen ... . scannen van verborgen autostart items ... . scannen van verborgen bestanden ... . Scan succesvol afgerond verborgen bestanden: . ************************************************************************** . [HKEY_LOCAL_MACHINE\system\ControlSet002\Services\Iomega Activity Disk2] "ImagePath"="\"\"" . ------------------------ Andere Aktieve Processen ------------------------ . c:\program files\AVG\AVG2012\avgrsx.exe c:\program files\AVG\AVG2012\avgcsrvx.exe c:\windows\system32\atiesrxx.exe c:\windows\system32\atieclxx.exe c:\program files\AVG\AVG2012\avgfws.exe c:\program files\AVG\AVG2012\avgwdsvc.exe c:\windows\system32\inetsrv\inetinfo.exe c:\progra~1\Iomega\System32\AppServices.exe c:\windows\system32\mqsvc.exe c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe c:\windows\system32\IoctlSvc.exe c:\windows\System32\tcpsvcs.exe c:\windows\System32\snmp.exe c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE c:\program files\AVG\AVG2012\avgnsx.exe c:\windows\system32\WUDFHost.exe c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe c:\windows\system32\mqtgsvc.exe c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe c:\program files\AVG\AVG2012\AVGIDSAgent.exe c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe c:\windows\system32\conime.exe c:\program files\AVG\AVG2012\avgcsrvx.exe c:\windows\system32\wbem\unsecapp.exe c:\windows\ehome\ehmsas.exe c:\program files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE . ************************************************************************** . Voltooingstijd: 2012-04-17 15:58:14 - machine werd herstart ComboFix-quarantined-files.txt 2012-04-17 13:58 ComboFix2.txt 2012-04-16 13:02 . Pre-Run: 18.026.508.288 bytes beschikbaar Post-Run: 18.188.455.936 bytes beschikbaar . - - End Of File - - 9305919799B1A20D5B7FEB2B5EA7902E

Internet herstellen is gelukt.

Op advies van Kweezie Wabbit Internet Explorer opnieuw ingesteld: De instellingen voor Internet Explorer opnieuw instellen Daar staat Fixit.

Hier is die eindelijk ! ComboFix 12-04-16.01 - Jan 16-04-2012 14:52:10.2.2 - x86 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.31.1043.18.2047.1020 [GMT 2:00] Gestart vanuit: c:\users\Jan\Desktop\ComboFix.exe AV: AVG Internet Security 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0} FW: AVG Firewall *Enabled* {621CC794-9486-F902-D092-0484E8EA828B} SP: AVG Internet Security 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\Jan\AppData\Local\Temp\ppcrlui_5436_2 . ---- Voorgaande Run ------- . C:\DFR2B3B.tmp C:\prefs.js c:\program files\FilmFanatic c:\program files\FilmFanatic\bar\1.bin\CHROME.MANIFEST c:\program files\FilmFanatic\bar\1.bin\chrome\paffxtbr.jar c:\program files\FilmFanatic\bar\1.bin\INSTALL.RDF c:\program files\FilmFanatic\bar\1.bin\LOGO.BMP c:\program files\FilmFanatic\bar\1.bin\paimpipe.exe c:\program files\FilmFanatic\bar\IE9Mesg\COMMON.T8S c:\program files\FilmFanatic\bar\Message\COMMON.T8S c:\program files\FilmFanatic\bar\Settings\s_pid.dat c:\program files\FilmFanaticEI c:\program files\TelevisionFanaticEI c:\users\Jan\AppData\Local\Temp\{2E615810-DF16-4048-ADE5-526E2A990E8D}\fpb.tmp c:\users\Jan\AppData\Local\Temp\ppcrlui_2072_2 c:\users\Jan\Desktop\Setup.exe c:\windows\IsUn0413.exe c:\windows\logboot_09.04.2012.tureg.log c:\windows\system32\drivers\etc\hosts.ics c:\windows\system32\office2003-kb838022-client-nld.exe c:\windows\system32\office2003-kb838022-fullfile-nld.exe c:\windows\system32\SET9D44.tmp c:\windows\system32\SETA498.tmp c:\windows\system32\SETAAA1.tmp c:\windows\system32\SETB4FA.tmp c:\windows\system32\SETCB48.tmp c:\windows\system32\SETCD16.tmp c:\windows\system32\SETD213.tmp c:\windows\system32\SETD36E.tmp c:\windows\system32\uxt30CF.tmp c:\windows\system32\uxtF057.tmp c:\windows\unin0413.exe . . (((((((((((((((((((( Bestanden Gemaakt van 2012-03-16 to 2012-04-16 )))))))))))))))))))))))))))))) . . 2012-04-16 13:00 . 2012-04-16 13:00 -------- d-----w- c:\users\Jan\AppData\Local\temp 2012-04-16 13:00 . 2012-04-16 13:00 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-04-16 08:35 . 2012-04-16 08:35 -------- d-----w- c:\users\Jan\AppData\Local\ElevatedDiagnostics 2012-04-16 07:39 . 2012-04-16 07:39 -------- d-----w- c:\users\Jan\AppData\Roaming\Malwarebytes 2012-04-16 07:39 . 2012-04-16 07:39 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2012-04-16 07:39 . 2012-04-16 07:39 -------- d-----w- c:\programdata\Malwarebytes 2012-04-16 07:39 . 2012-04-04 13:56 22344 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-04-15 12:05 . 2012-04-15 12:05 388096 ----a-r- c:\users\Jan\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2012-04-15 12:05 . 2012-04-15 12:05 -------- d-----w- c:\program files\Trend Micro 2012-04-15 11:12 . 2012-04-15 11:12 -------- d-----w- c:\program files\WiseConvert_2.1 2012-04-15 11:10 . 2012-04-15 11:10 -------- d-----w- c:\users\Jan\AppData\Roaming\SumatraPDF 2012-04-15 11:09 . 2012-04-16 11:10 -------- d-----w- c:\program files\DealPly 2012-04-15 11:08 . 2012-04-15 11:08 -------- d-----w- c:\program files\BabylonToolbar 2012-04-15 11:08 . 2012-04-15 11:08 -------- d-----w- c:\program files\FoxTabPDFReader 2012-04-14 12:14 . 2012-04-14 12:14 -------- d-----w- c:\program files\Speccy 2012-04-12 19:53 . 2012-02-29 15:11 5120 ----a-w- c:\windows\system32\wmi.dll 2012-04-12 19:53 . 2012-02-29 15:11 172032 ----a-w- c:\windows\system32\wintrust.dll 2012-04-12 19:53 . 2012-02-29 15:09 157696 ----a-w- c:\windows\system32\imagehlp.dll 2012-04-12 19:53 . 2012-02-29 13:32 12800 ----a-w- c:\windows\system32\drivers\fs_rec.sys 2012-04-12 19:52 . 2012-03-06 06:39 3602816 ----a-w- c:\windows\system32\ntkrnlpa.exe 2012-04-12 19:52 . 2012-03-06 06:39 3550080 ----a-w- c:\windows\system32\ntoskrnl.exe 2012-04-09 17:08 . 2012-04-09 17:08 -------- d-----w- c:\users\Jan\AppData\Roaming\Acoustica 2012-04-09 17:08 . 2012-04-09 17:09 -------- d-----w- c:\program files\Acoustica CD Label Maker 2012-04-09 10:22 . 2011-12-19 16:55 31552 ----a-w- c:\windows\system32\TURegOpt.exe 2012-04-09 10:22 . 2011-12-19 16:50 21312 ----a-w- c:\windows\system32\authuitu.dll 2012-04-09 10:22 . 2011-12-19 16:50 29504 ----a-w- c:\windows\system32\uxtuneup.dll 2012-04-08 14:43 . 2012-04-08 14:43 -------- d-----w- c:\program files\AVG PC TuneUp 10.0.0.27 PreCracked 2012-04-08 10:53 . 2012-04-08 10:53 -------- d-----w- c:\programdata\dvdfab 2012-04-08 10:49 . 2012-04-08 14:34 -------- d-----w- c:\program files\DVDFab 8 Qt 2012-04-08 09:48 . 2012-04-08 09:53 -------- d-----w- c:\program files\SubDownloader2 2012-04-08 09:44 . 2012-04-14 18:28 -------- d-----w- c:\users\Jan\AppData\Roaming\Ahead 2012-04-08 09:44 . 2012-04-08 09:44 -------- d-----w- c:\programdata\Ahead 2012-04-08 09:38 . 2012-04-08 09:42 -------- d-----w- c:\program files\Common Files\Ahead 2012-04-05 21:51 . 2012-04-05 21:51 -------- d-----w- c:\users\Jan\AppData\Local\Nero_AG 2012-04-05 20:22 . 2012-04-14 09:49 418464 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2012-04-04 07:32 . 2009-09-04 15:29 1974616 ----a-w- c:\windows\system32\D3DCompiler_42.dll 2012-04-04 07:30 . 2009-09-04 15:29 1892184 ----a-w- c:\windows\system32\D3DX9_42.dll 2012-04-04 07:26 . 2007-07-19 16:14 3727720 ----a-w- c:\windows\system32\d3dx9_35.dll 2012-04-04 05:53 . 2012-04-04 05:53 182160 ----a-w- c:\program files\Internet Explorer\Plugins\nppdf32.dll 2012-04-02 13:13 . 2012-04-02 13:13 -------- d-----w- c:\users\Jan\AppData\Local\APN 2012-03-31 12:56 . 2012-04-08 14:20 -------- d-----w- c:\programdata\vsosdk 2012-03-28 17:53 . 2012-03-28 17:53 -------- d-----w- c:\users\Jan\Ubreakable 2012-03-27 13:08 . 2012-03-27 13:08 -------- d-----w- c:\users\Jan\AppData\Local\Tipard Studio 2012-03-27 08:47 . 2012-03-27 08:47 -------- d-----w- c:\program files\WinAVI Video Converter(1) 2012-03-26 10:49 . 2012-03-27 09:50 -------- d-----w- c:\users\Jan\AppData\Local\WinAVI 2012-03-26 10:48 . 2012-03-26 10:48 -------- d-----w- c:\programdata\ATI 2012-03-24 10:14 . 2012-03-28 14:19 -------- d-----w- c:\users\Jan\{140f0a73-de1f-4d89-99bb-34d0ff1d6598} 2012-03-22 19:12 . 2012-03-22 19:12 4435968 ----a-w- c:\windows\system32\GPhotos.scr 2012-03-22 10:02 . 2012-04-16 09:27 -------- d-----w- c:\windows\system32\drivers\AVG 2012-03-22 05:35 . 2012-03-22 05:35 -------- d-----w- c:\windows\system32\%LOCALAPPDATA% 2012-03-21 20:52 . 2012-04-09 10:22 -------- d-----w- c:\program files\TuneUp Utilities 2011 2012-03-18 20:18 . 2002-10-03 04:17 253952 ----a-w- c:\windows\MSSP3NL.DLL 2012-03-17 20:14 . 2012-03-17 20:14 -------- d-----w- c:\programdata\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1} . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-04-15 09:11 . 2011-07-04 10:02 16400 ----a-w- c:\windows\system32\drivers\LNonPnP.sys 2012-04-14 09:49 . 2011-05-27 14:59 70304 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2012-03-13 16:24 . 2011-09-03 08:25 141944 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS 2012-03-10 10:39 . 2012-03-10 10:39 53248 ----a-r- c:\users\Jan\AppData\Roaming\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe 2012-02-23 08:18 . 2011-05-27 10:25 237072 ------w- c:\windows\system32\MpSigStub.exe 2012-02-22 09:07 . 2011-05-28 19:49 472808 ----a-w- c:\windows\system32\deployJava1.dll 2012-02-15 03:47 . 2012-02-15 03:47 9182208 ----a-w- c:\windows\system32\drivers\atikmdag.sys 2012-02-15 03:18 . 2012-02-15 03:18 159744 ----a-w- c:\windows\system32\atiapfxx.exe 2012-02-15 03:18 . 2011-12-06 03:17 791040 ----a-w- c:\windows\system32\aticfx32.dll 2012-02-15 03:13 . 2011-12-06 03:12 442368 ----a-w- c:\windows\system32\ATIDEMGX.dll 2012-02-15 03:13 . 2012-02-15 03:13 405504 ----a-w- c:\windows\system32\atieclxx.exe 2012-02-15 03:12 . 2012-02-15 03:12 163328 ----a-w- c:\windows\system32\atiesrxx.exe 2012-02-15 03:11 . 2012-02-15 03:11 159744 ----a-w- c:\windows\system32\atitmmxx.dll 2012-02-15 03:10 . 2012-02-15 03:10 20992 ----a-w- c:\windows\system32\atimuixx.dll 2012-02-15 03:10 . 2012-02-15 03:10 43520 ----a-w- c:\windows\system32\ati2edxx.dll 2012-02-15 03:07 . 2012-02-15 03:07 6200320 ----a-w- c:\windows\system32\atidxx32.dll 2012-02-15 02:58 . 2012-02-15 02:58 19392000 ----a-w- c:\windows\system32\atioglxx.dll 2012-02-15 02:40 . 2012-02-15 02:40 1828864 ----a-w- c:\windows\system32\atiumdmv.dll 2012-02-15 02:34 . 2012-02-15 02:34 46080 ----a-w- c:\windows\system32\aticalrt.dll 2012-02-15 02:34 . 2012-02-15 02:34 44032 ----a-w- c:\windows\system32\aticalcl.dll 2012-02-15 02:34 . 2011-12-06 02:33 5954048 ----a-w- c:\windows\system32\atiumdag.dll 2012-02-15 02:29 . 2011-12-06 02:28 5062656 ----a-w- c:\windows\system32\atiumdva.dll 2012-02-15 02:29 . 2012-02-15 02:29 11561984 ----a-w- c:\windows\system32\aticaldd.dll 2012-02-15 02:16 . 2011-04-20 01:26 51200 ----a-w- c:\windows\system32\coinst.dll 2012-02-15 02:13 . 2011-12-06 02:12 356352 ----a-w- c:\windows\system32\atiadlxx.dll 2012-02-15 02:13 . 2012-02-15 02:13 14336 ----a-w- c:\windows\system32\atiglpxx.dll 2012-02-15 02:13 . 2012-02-15 02:13 33280 ----a-w- c:\windows\system32\atigktxx.dll 2012-02-15 02:12 . 2012-02-15 02:12 264704 ----a-w- c:\windows\system32\drivers\atikmpag.sys 2012-02-15 02:12 . 2012-02-15 02:12 33280 ----a-w- c:\windows\system32\atiuxpag.dll 2012-02-15 02:12 . 2011-04-20 01:21 30208 ----a-w- c:\windows\system32\atiu9pag.dll 2012-02-15 02:11 . 2011-04-20 01:21 37376 ----a-w- c:\windows\system32\atitmpxx.dll 2012-02-15 02:11 . 2012-02-15 02:11 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll 2012-02-15 02:11 . 2012-02-15 02:11 53760 ----a-w- c:\windows\system32\atimpc32.dll 2012-02-15 02:11 . 2012-02-15 02:11 53760 ----a-w- c:\windows\system32\amdpcom32.dll 2012-02-14 15:45 . 2012-03-13 19:25 219648 ----a-w- c:\windows\system32\d3d10_1core.dll 2012-02-14 15:45 . 2012-03-13 19:25 160768 ----a-w- c:\windows\system32\d3d10_1.dll 2012-02-13 14:12 . 2012-03-13 19:25 1172480 ----a-w- c:\windows\system32\d3d10warp.dll 2012-02-13 13:47 . 2012-03-13 19:25 683008 ----a-w- c:\windows\system32\d2d1.dll 2012-02-13 13:44 . 2012-03-13 19:25 1068544 ----a-w- c:\windows\system32\DWrite.dll 2012-02-11 05:02 . 2012-02-11 05:02 41680 ----a-w- c:\windows\system32\drivers\ifymgbvm.sys 2012-02-08 06:03 . 2012-03-06 13:54 6552120 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{CDEBA1B0-B56B-48AD-9991-C8BE6BE4AF2B}\mpengine.dll 2012-02-07 09:02 . 2012-02-07 09:02 1070352 ----a-w- c:\windows\system32\MSCOMCTL.OCX 2012-02-02 15:16 . 2012-03-13 19:25 2044416 ----a-w- c:\windows\system32\win32k.sys 2012-01-17 23:46 . 2012-03-08 23:36 345208 ----a-w- c:\windows\system32\drivers\NAV\1306010.008\symtdiv.sys 2012-01-17 23:46 . 2012-03-08 23:36 318584 ----a-w- c:\windows\system32\drivers\NAV\1306010.008\symnets.sys 2012-01-17 23:45 . 2012-03-08 23:36 905336 ----a-w- c:\windows\system32\drivers\NAV\1306010.008\symefa.sys 2012-01-17 23:35 . 2012-03-08 23:36 149624 ----a-w- c:\windows\system32\drivers\NAV\1306010.008\ironx86.sys 2012-01-17 23:33 . 2012-03-08 23:36 574584 ----a-w- c:\windows\system32\drivers\NAV\1306010.008\srtsp.sys 2012-01-17 23:33 . 2012-03-08 23:36 32888 ----a-w- c:\windows\system32\drivers\NAV\1306010.008\srtspx.sys . . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952] "uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2012-04-01 742264] "WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-12-05 343168] "EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2011-10-07 1387288] "AVG_TRAY"="c:\program files\AVG\AVG2012\avgtray.exe" [2012-01-24 2416480] "NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2008-05-28 570664] . c:\users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OneNote 2007 Schermopname en Snel starten.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "DisableStartupSound"= 1 (0x1) "HideFastUserSwitching"= 1 (0x1) . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~1\AVG\AVG2012\avgrsx.exe /sync /restart . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE] @="" . [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "Picasa Media Detector"=c:\program files\Picasa2\PicasaMediaDetector.exe "Adobe Reader Synchronizer"="c:\program files\Adobe\Reader 10.0\Reader\AdobeCollabSync.exe" "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 10.0\Reader\Reader_sl.exe" "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" "ExpressFiles"="c:\program files\ExpressFiles\ExpressFiles.exe" -tray "KPN Assistent"=c:\program files\KPN\KPN Assistent\KPN_Assistent.exe /auto . [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-2048313135-3420160357-1514597478-1000] "EnableNotificationsRef"=dword:00000007 . R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-14 253088] S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928] . . --- Andere Services/Drivers In Geheugen --- . *NewlyCreated* - WS2IFSL . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache . HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . Inhoud van de 'Gedeelde Taken' map . 2012-04-16 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-05 09:49] . 2012-04-16 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2011-06-12 09:55] . 2012-04-16 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2011-06-12 09:55] . 2012-04-16 c:\windows\Tasks\User_Feed_Synchronization-{2AB5C67B-E8A2-44DE-A072-4D08CA0670E7}.job - c:\windows\system32\msfeedssync.exe [2012-04-10 08:09] . . ------- Bijkomende Scan ------- . TCP: DhcpNameServer = 195.121.1.34 195.121.1.66 . - - - - ORPHANS VERWIJDERD - - - - . WebBrowser-{ECCE0073-A837-45A2-95B9-600420505F7E} - (no file) ShellExecuteHooks-{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - (no file) . . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2012-04-16 15:00 Windows 6.0.6002 Service Pack 2 NTFS . scannen van verborgen processen ... . scannen van verborgen autostart items ... . scannen van verborgen bestanden ... . Scan succesvol afgerond verborgen bestanden: 0 . ************************************************************************** . [HKEY_LOCAL_MACHINE\system\ControlSet002\Services\NAV] "ImagePath"="\"c:\program files\Norton AntiVirus\Engine\19.6.1.8\ccSvcHst.exe\" /s \"NAV\" /m \"c:\program files\Norton AntiVirus\Engine\19.6.1.8\diMaster.dll\" /prefetch:1" . [HKEY_LOCAL_MACHINE\system\ControlSet002\Services\Iomega Activity Disk2] "ImagePath"="\"\"" . Voltooingstijd: 2012-04-16 15:02:58 ComboFix-quarantined-files.txt 2012-04-16 13:02 . Pre-Run: 19.461.099.520 bytes beschikbaar Post-Run: 19.275.796.480 bytes beschikbaar . - - End Of File - - 6DC65230A2DD615DC505AFA533AF673E

Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 13:13:13, on 16-4-2012 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.19222) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe C:\Program Files\Logitech\SetPointP\SetPoint.exe C:\Program Files\AVG\AVG2012\avgtray.exe C:\Windows\ehome\ehtray.exe C:\Program Files\uTorrent\uTorrent.exe C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Windows Mail\WinMail.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Windows\system32\conime.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Windows\system32\Macromed\Flash\FlashUtil32_11_2_202_233_ActiveX.exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = Internet Explorer 9 - Microsoft Windows R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer wordt aangeboden door MSN and Bing O1 - Hosts: ::1 localhost O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [startCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files\AVG\AVG2012\avgtray.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL O10 - Broken Internet access because of LSP provider 'c:\program files\bonjour\mdnsnsp.dll' missing O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} - http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.4.24.0.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgfws.exe O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgwdsvc.exe O23 - Service: Bonjour-service (Bonjour Service) - Unknown owner - C:\Program Files\Bonjour\mDNSResponder.exe (file missing) O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe O23 - Service: Norton AntiVirus (NAV) - Symantec Corporation - C:\Program Files\Norton AntiVirus\Engine\19.6.1.8\ccSvcHst.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe O23 - Service: ZipToA - Unknown owner - C:\Windows\System32\ZIPTOA.EXE -- End of file - 6218 bytes Vroeger inderdaad Norton Antivirus gebruikt totdat AVG Internetsecurity werd aanbevolen. Werkt m.i. ook goed. Combofix.txt volgt nog ! ---------- Post toegevoegd om 14:11 ---------- Vorige post was om 14:00 ---------- Combofix.txt......op C:\comboFix.txt niet te vinden. Heeft wel e.e.a. verwijderd !

Geachte heer Stegisoft, Het probleem met printen is verholpen ! Nadat ik Fixit heb gebruikt en Internet Explorer opnieuw is ingesteld. Nu krijg ik vóór het printen dit te zien.. Dat is wat ik bedoelde graag te zien...... Weer voor elkaar ! Nu rest nog de BIOS aanpassing zodat een herstart met de externe harddisk zonder problemen verloopt. De PDF handleiding heb ik gedownload, maar veel wijzer word ik er persoonlijk niet van.

Goede morgen Kweezie Wabbit, U was er vroeg bij ! Hijack aangepast en opnieuw gedraaid. Malware gedownload en gebruikt. Resultaten bijgevoegd. Naar ik hoop heb ik goed uitgevoerd. Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 10:17:30, on 16-4-2012 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.19222) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe C:\Program Files\Logitech\SetPointP\SetPoint.exe C:\Program Files\AVG\AVG2012\avgtray.exe C:\Windows\ehome\ehtray.exe C:\Program Files\uTorrent\uTorrent.exe C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Windows Mail\WinMail.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = O1 - Hosts: ::1 localhost O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll O2 - BHO: WinZip Courier BHO - {A8FB70FA-0FDF-4601-9DC4-BFA1B357204F} - C:\PROGRA~1\WINZIP~1\wzwmcie.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: NetAssistantBHO - {E38FA08E-F56A-4169-ABF5-5C71E3C153A1} - C:\Program Files\Freeze.com\NetAssistant\NetAssistant.dll O2 - BHO: SimpleAdblock Class - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Common Files\Simple Adblock\SimpleAdblock.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [startCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files\AVG\AVG2012\avgtray.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL O10 - Broken Internet access because of LSP provider 'c:\program files\bonjour\mdnsnsp.dll' missing O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} - http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.4.24.0.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgfws.exe O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgwdsvc.exe O23 - Service: Bonjour-service (Bonjour Service) - Unknown owner - C:\Program Files\Bonjour\mDNSResponder.exe (file missing) O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe O23 - Service: Norton AntiVirus (NAV) - Symantec Corporation - C:\Program Files\Norton AntiVirus\Engine\19.6.1.8\ccSvcHst.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe O23 - Service: ZipToA - Unknown owner - C:\Windows\System32\ZIPTOA.EXE -- End of file - 7254 bytes Malwarebytes Anti-Malware 1.61.0.1400 www.malwarebytes.org Databaseversie: v2012.04.16.01 Windows Vista Service Pack 2 x86 NTFS Internet Explorer 8.0.6001.19222 Jan :: PC_VAN_JAN [administrator] 16-4-2012 9:41:43 mbam-log-2012-04-16 (09-41-43).txt Scantype: Snelle scan Ingeschakelde scanopties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM Uitgeschakelde scanopties: P2P Objecten gescand: 189019 Verstreken tijd: 7 minuut/minuten, 20 seconde(n) Geheugenprocessen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Geheugenmodulen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registersleutels gedetecteerd: 54 HKCR\FilmFanatic.DynamicBarButton (PUP.MyWebSearch) -> Geen actie ondernomen. HKCR\FilmFanatic.DynamicBarButton.1 (PUP.MyWebSearch) -> Geen actie ondernomen. HKCR\FilmFanatic.HTMLMenu (PUP.MyWebSearch) -> Geen actie ondernomen. HKCR\FilmFanatic.HTMLMenu.1 (PUP.MyWebSearch) -> Geen actie ondernomen. HKCR\FilmFanatic.MultipleButton (PUP.MyWebSearch) -> Geen actie ondernomen. HKCR\FilmFanatic.Radio (PUP.MyWebSearch) -> Geen actie ondernomen. HKCR\FilmFanatic.ScriptButton (PUP.MyWebSearch) -> Geen actie ondernomen. HKCR\FilmFanatic.UrlAlertButton (PUP.MyWebSearch) -> Geen actie ondernomen. HKLM\SOFTWARE\MozillaPlugins\@FilmFanatic.com/Plugin (PUP.MyWebSearch) -> Geen actie ondernomen. HKCR\CLSID\{07d09e63-294f-4aa3-ab44-e61331aec6a3} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\CLSID\{147A976F-EEE1-4377-8EA7-4716E4CDD239} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\CLSID\{1da22a28-324d-4dd4-b2dc-66a3cebf447f} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\FilmFanatic.ThirdPartyInstaller.1 (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\FilmFanatic.ThirdPartyInstaller (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1DA22A28-324D-4DD4-B2DC-66A3CEBF447F} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\CLSID\{2f38d624-ac5d-4096-88cc-a58d2ac806e1} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\FilmFanatic.PseudoTransparentPlugin.1 (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\FilmFanatic.PseudoTransparentPlugin (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{2F38D624-AC5D-4096-88CC-A58D2AC806E1} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\CLSID\{3e9be71d-a3fa-4224-ab29-2602acd577ff} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\FilmFanatic.HTMLPanel.1 (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\FilmFanatic.HTMLPanel (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3E9BE71D-A3FA-4224-AB29-2602ACD577FF} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\CLSID\{4c2743f0-a2e2-41a0-9e65-798943109f42} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\FilmFanatic.SettingsPlugin.1 (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\FilmFanatic.SettingsPlugin (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{4C2743F0-A2E2-41A0-9E65-798943109F42} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4C2743F0-A2E2-41A0-9E65-798943109F42} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\CLSID\{5ce76f81-af51-4aad-8d83-5a28e163530e} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\FilmFanatic.RadioSettings.1 (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\FilmFanatic.RadioSettings (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\CLSID\{7f4a94dc-2191-4ee3-9f0b-c8a12199d22c} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\CLSID\{93fc722b-ab04-4ce2-b1a5-5b6889a72830} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\CLSID\{946653ac-5e9d-4c95-bf99-ae5b0b0dd4c6} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\FilmFanatic.ToolbarPlugin.1 (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\FilmFanatic.ToolbarPlugin (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\CLSID\{9549f17f-105d-4802-96cb-6113acc2cb53} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\FilmFanatic.FeedManager.1 (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\FilmFanatic.FeedManager (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\CLSID\{99b340f7-76e0-44ab-9948-b95a1b475d39} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\CLSID\{a876a1c1-d9f6-4562-8dbc-d98b61b3f281} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\FilmFanatic.XMLSessionPlugin.1 (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\FilmFanatic.XMLSessionPlugin (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A876A1C1-D9F6-4562-8DBC-D98B61B3F281} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\CLSID\{efbf47aa-3c29-4c00-9225-6001e6a0b1ac} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{0B84B4B4-8AF8-4F1F-91FE-074A666F6425} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{0B84B4B4-8AF8-4F1F-91FE-074A666F6425} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{631ACB68-57C3-48AF-9CC5-FCEC0837FFD3} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{631ACB68-57C3-48AF-9CC5-FCEC0837FFD3} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{796B75F6-6187-47E2-8F1F-C16E059E6E19} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{796B75F6-6187-47E2-8F1F-C16E059E6E19} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{D5E9B421-C309-41DE-9014-800A2ADCDEB0} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{D5E9B421-C309-41DE-9014-800A2ADCDEB0} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{37A2255C-D173-4B54-A455-13DE1DDA9F44} (PUP.MyWebSearch) -> Succesvol in quarantaine geplaatst en verwijderd. Registerwaarden gedetecteerd: 1 HKLM\SOFTWARE\Mozilla\Firefox\Extensions|paffxtbr@FilmFanatic.com (PUP.MyWebSearch) -> Data: C:\Program Files\FilmFanatic\bar\1.bin -> Geen actie ondernomen. Registerdata gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Mappen gedetecteerd: 2 C:\Program Files\FilmFanatic\bar\1.bin (PUP.MyWebSearch) -> Geen actie ondernomen. C:\Program Files\FilmFanatic\bar\1.bin\chrome (PUP.MyWebSearch) -> Geen actie ondernomen. Bestanden gedetecteerd: 20 C:\Program Files\FilmFanatic\bar\1.bin\LOGO.BMP (PUP.MyWebSearch) -> Geen actie ondernomen. C:\Program Files\FilmFanatic\bar\1.bin\CHROME.MANIFEST (PUP.MyWebSearch) -> Geen actie ondernomen. C:\Program Files\FilmFanatic\bar\1.bin\INSTALL.RDF (PUP.MyWebSearch) -> Geen actie ondernomen. C:\Program Files\FilmFanatic\bar\1.bin\paimpipe.exe (PUP.MyWebSearch) -> Geen actie ondernomen. C:\Program Files\FilmFanatic\bar\1.bin\chrome\paffxtbr.jar (PUP.MyWebSearch) -> Geen actie ondernomen. C:\Users\Jan\AppData\Local\Temp\is1373634743\IWantThis_ROW.exe (Adware.GamePlayLabs) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Jan\Downloads\SoftonicDownloader_voor_revo-uninstaller.exe (PUP.OfferBundler.ST) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Jan\Downloads\DownloadSetup (21)incredi.exe (Affiliate.Downloader) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Jan\Downloads\DownloadSetup (23).exe (Affiliate.Downloader) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Jan\Downloads\DownloadSetup (38).exe (Affiliate.Downloader) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Jan\Downloads\DownloadSetup (46) (1).exe (Affiliate.Downloader) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Jan\Downloads\DownloadSetup (46).exe (Affiliate.Downloader) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Jan\Downloads\DownloadSetup (66).exe (Affiliate.Downloader) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Jan\Downloads\DownloadSetup (71).exe (Affiliate.Downloader) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Jan\Downloads\DownloadSetup (75).exe (Affiliate.Downloader) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Jan\Downloads\DownloadSetup (76).exe (Affiliate.Downloader) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Jan\Downloads\DownloadSetup (78).exe (Affiliate.Downloader) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Jan\Downloads\DownloadSetup (99)Incredi.exe (Affiliate.Downloader) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Jan\Downloads\DownloadSetup.exe (Affiliate.Downloader) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Jan\Downloads\svchost_int.exe (Heuristics.Reserved.Word.Exploit) -> Succesvol in quarantaine geplaatst en verwijderd. (einde)

Voordat je uitprint kun je print tonen zoals de afdruk er uit komt te zien.

Veelal maak ik gebruik van geprinte afbeeldingen van cryptogrammen. Nu krijg ik onlangs bij printvoorbeeld een Doctype html public voorbeeld te zien die bij printen ook dat weergeeft. Uiteraard wil ik gewoon het goede model cryptogram uitprinten. Wat is er verkeerd ingesteld ? Heeft dit mogelijk met de instelling van mijn HP PSC500 printer te maken of iets met Java ? Hier kom ik niet uit. Waar kan ik dit weer in de oorspronkelijke situatie herstellen? Met vriendelijke groet, Jan Waltmann

Hier is de bewuste Hijackfile...moest even zoeken hoe hem op te slaan. Nu nog uploaden.. ??Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 15:15:22, on 15-4-2012 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.19222) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Program Files\Logitech\SetPointP\SetPoint.exe C:\Program Files\AVG\AVG2012\avgtray.exe C:\Windows\ehome\ehtray.exe C:\Program Files\uTorrent\uTorrent.exe C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Program Files\Windows Mail\WinMail.exe C:\Windows\system32\conime.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Windows\notepad.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Babylon Search R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: WiseConvert 2.1 Toolbar - {ecce0073-a837-45a2-95b9-600420505f7e} - C:\Program Files\WiseConvert_2.1\prxtbWise.dll O1 - Hosts: ::1 localhost O2 - BHO: Complitly - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Users\Jan\AppData\Roaming\Complitly\Complitly.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll O2 - BHO: DealPly - {A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} - C:\Program Files\DealPly\DealPlyIE.dll O2 - BHO: WinZip Courier BHO - {A8FB70FA-0FDF-4601-9DC4-BFA1B357204F} - C:\PROGRA~1\WINZIP~1\wzwmcie.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: NetAssistantBHO - {E38FA08E-F56A-4169-ABF5-5C71E3C153A1} - C:\Program Files\Freeze.com\NetAssistant\NetAssistant.dll O2 - BHO: WiseConvert 2.1 - {ecce0073-a837-45a2-95b9-600420505f7e} - C:\Program Files\WiseConvert_2.1\prxtbWise.dll O2 - BHO: SimpleAdblock Class - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Common Files\Simple Adblock\SimpleAdblock.dll O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll O3 - Toolbar: WiseConvert 2.1 Toolbar - {ecce0073-a837-45a2-95b9-600420505f7e} - C:\Program Files\WiseConvert_2.1\prxtbWise.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [startCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files\AVG\AVG2012\avgtray.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL O10 - Broken Internet access because of LSP provider 'c:\program files\bonjour\mdnsnsp.dll' missing O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} - http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.4.24.0.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O20 - AppInit_DLLs: O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (file missing) O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgfws.exe O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgwdsvc.exe O23 - Service: Bonjour-service (Bonjour Service) - Unknown owner - C:\Program Files\Bonjour\mDNSResponder.exe (file missing) O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe O23 - Service: Norton AntiVirus (NAV) - Symantec Corporation - C:\Program Files\Norton AntiVirus\Engine\19.6.1.8\ccSvcHst.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe O23 - Service: ZipToA - Unknown owner - C:\Windows\System32\ZIPTOA.EXE -- End of file - 8810 bytes

Bedankt Asus....die werkt. Nu nog doorlezen ! Tot straks !

Heb op de juiste downloadknop geklikt. Krijg vervolgens dit te zien:

Dat werkt niet..krijg alleen allerlei troep op de menubalk(Babylon toolbar e.d.) Zelf heb ik het handboek nooit ontvangen..dus dan houd hierbij op helaas..... Tenzij iemand mij stap voor stap kan zeggen wat ik moet doen in die BIOS.

Bedankt Clarkie...ik ga aan de slag. Downloaden en lezen ! Kom ik er niet uit, kom ik graag terug.

http://speccy.piriform.com/results/37PNSTaEqBpaME3BqZxALkS Is dit het bedoelde bestand ?

Bij opnieuw opstarten loopt het systeem nog steeds vast. Ik denk, dat het de BIOS van MEGATREND moet zijn. Maar wat moet ik verder aanpassen. Volgens Hr. Stegisoft zou het volgende moeten worden aangepast: Zie je daar uw externe harddisk? Zo ja, dan moet je zorgen dat de harddisk (intern) als eerste boot staat. Zo nee, dan moet je de externe harddisk activeren in de bios. Waarschijnlijk in de boot gedeelte anders moet je elders kijken in de bios (mogelijk eerste tab doch dat verschil van bios tot bios). Hoe fix ik dat ??

Beste kweezie wabbit, Heb in Apparatenbeheer USB controlersinstallatie ongedaan gemaakt(vanaf de onderste). Vreemd genoeg werd op menubalk onder direct zichtbaar, dat opnieuw werd geinstalleerd. Heb wat plaatjes voor Uw informatie. De schijven worden allen herkend. Ga nu opnieuw opstarten met de externe harddisk aangesloten en een USB geheugenstick als extra opslagmedium. Kom zo terug met het resultaat !

Beste heer Stegisoft, Zoals U voorstelde heb ik de BIOS geopend en een paar foto's gemaakt van het systeem. Ik ken er biet veel wijs uit worden, maar 1 ding viel me op. Voor het rebooten had ik een USB-geheugenstick geplaatst en daar loopt het systeem gewoon op door ! Bijgaan de opnamen; misschien dat U er wijs uit kan worden. Megatrend is dat bekend bij U ? Dit waren ze.....Naar ik hoop kunt U me straks instructies geven hoe te handelen bij dit BIOS systeem.

Als u het niet erg vind, ga ik daar morgenvroeg direct mee aan de gang ! Ik hoop, dat het me lukt ! Ik laat het U natuurlijk weten. Groet, Jan