patrickvan71

had voor de log al een systeemherstel moeten doen want pc reageerde op niets ook niet op hijackthis op het minste dat je probeerde blokkeerde het programma dat heb pc een week terug gezet en dan kon ik pas een log doen

Logfile of Trend Micro HijackThis v2.0.3 (BETA) Scan saved at 19:19:27, on 28/02/2011 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Google\Update\GoogleUpdate.exe C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe C:\Program Files\HP\QuickPlay\QPService.exe C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe C:\Documents and Settings\Patrick\Local Settings\Application Data\Google\Update\GoogleUpdate.exe C:\WINDOWS\system32\ctfmon.exe C:\Documents and Settings\Patrick\Local Settings\Application Data\Google\Update\GoogleUpdate.exe C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe C:\PROGRA~1\HPQ\SHARED\HPQTOA~1.EXE C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Documents and Settings\Patrick\Local Settings\Application Data\Google\Update\Download\{BA89F706-2F2C-403D-9BF2-013DBB15F43F}\chrome_updater.exe C:\Documents and Settings\Patrick\Local Settings\Temp\CR_1E.tmp\setup.exe C:\Program Files\internet explorer\iexplore.exe C:\Program Files\internet explorer\iexplore.exe C:\Program Files\Windows Live\Toolbar\wltuser.exe C:\Program Files\Microsoft\Search Enhancement Pack\SCServer\SCServer.exe C:\Program Files\TrendMicro\HiJackThis\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen R3 - URLSearchHook: Musicbario Toolbar - {4924fded-cb88-443f-9d2d-75bf1043dccc} - C:\Program Files\Musicbario\tbMusi.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll O2 - BHO: Musicbario - {4924fded-cb88-443f-9d2d-75bf1043dccc} - C:\Program Files\Musicbario\tbMusi.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Musicbario Toolbar - {4924fded-cb88-443f-9d2d-75bf1043dccc} - C:\Program Files\Musicbario\tbMusi.dll O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /nodetect O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] CHDAudPropShortcut.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe" O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Patrick\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Adobe Gamma Loader.lnk = ? O4 - Global Startup: Adobe Reader Snelle start.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: HP Photosmart Premier Snelstart.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: &Google Zoeken - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: &Woord vertalen in het Nederlands - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200 O8 - Extra context menu item: Add to Windows &Live Favorites - Welcome to Windows Live O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Free YouTube Download - C:\Documents and Settings\Patrick\Application Data\DVDVideoSoftIEHelpers\freeyoutubedownload.htm O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Documents and Settings\Patrick\Application Data\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm O8 - Extra context menu item: Gelijkwaardige pagina's - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Koppelingspagina's - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Opgeslagen momentopname van de pagina - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- End of file - 11385 bytes

telkens ik internet wil opstarten gaat het niet als ik pc opstart start er telkens een programma genaamd system tools dit programma scant de pc en blokkeerd alles het zegt dan dat pc geinfecteerd is en je het programma moet kopen hoe kan ik dit oplossen kan enkel nog op internet via veilige modus

ok bedankt allemaal

achteraan op pc staat w5000

neen is de originele dvd schrijver nog is een hp computer Pavilion Pentium 4 CPU 3.20 GHz als ik bij apparaatbeheer kijk geeft hij aan voor de schrijver TSSTcorp cd/DVDW TS-H552L is met Lightscribe maar de pc is al wel een 5 tal jaar oud maar er zijn nog geen 20 cd geschreven met de schrijver want gebruikte meestal de gewone dvdspeler om programma's te installeren ik gebruik windows Xp

Hallo, allereerst iedereen een gelukkig nieuwjaar nu mijn probleem ik heb een dvd-station en een dvd-rw-station mijn dvd-rw-station herkend geen enkele cd dvd of data als ik naar apparaatbeheer ga en ik kontroleer mijn beide stations zijn ze alle 2 ingeschakeld en ze werken volgens windows correct maar mijn dvd herkent wel cd data maar dvdrw niet wie kan mij helpen dank bij voorbaat

oke bedankt voor alles

avg goed verwijderd gekregen Malwarebytes' Anti-Malware 1.50 www.malwarebytes.org Databaseversie: 5301 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 12/12/2010 17:45:19 mbam-log-2010-12-12 (17-45-19).txt Scantype: Snelle scan Objecten gescand: 153464 Verstreken tijd: 8 minuut/minuten, 2 seconde(n) Geheugenprocessen geïnfecteerd: 0 Geheugenmodulen geïnfecteerd: 0 Registersleutels geïnfecteerd: 0 Registerwaarden geïnfecteerd: 0 Registerdata geïnfecteerd: 0 Mappen geïnfecteerd: 0 Bestanden geïnfecteerd: 0 Geheugenprocessen geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Geheugenmodulen geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Registersleutels geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Registerwaarden geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Registerdata geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Mappen geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Bestanden geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 17:48:38, on 12/12/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\windows\system\hpsysdrv.exe C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\ALCWZRD.EXE C:\WINDOWS\system32\rundll32.exe C:\Program Files\ASUS\ASUS Remote\RemoteControlAppl.exe C:\HP\KBD\KBD.EXE C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe C:\Program Files\InterVideo\Common\Bin\WinRemote.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\SilverCrest OMC807 Driver\MouClient_FD2_9063RL.exe C:\Program Files\Belgium Identity Card\beid35gui.exe C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\ElsaWin\bin\LcSvrAdm.exe C:\ElsaWin\bin\LcSvrDba.exe C:\ElsaWin\bin\LcSvrHis.exe C:\ElsaWin\bin\LcSvrPas.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\wscntfy.exe C:\ElsaWin\bin\LcSvrAuf.exe C:\Program Files\PC Connectivity Solution\ServiceLayer.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe C:\Program Files\Common Files\Nokia\NoA\nokiaaserver.exe C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe O4 - HKLM\..\Run: [snelkoppeling naar eigenschappenvenster voor High Definition Audio] HDAShCut.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE O4 - HKLM\..\Run: [RemoteControl] C:\Program Files\ASUS\ASUS Remote\RemoteControlAppl.exe O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE O4 - HKLM\..\Run: [Home Theater SchSvr] "C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe" O4 - HKLM\..\Run: [WINREMOTE] "C:\Program Files\InterVideo\Common\Bin\WinRemote.exe" O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [Launch SilverCrest OMC807] C:\Program Files\SilverCrest OMC807 Driver\MouClient_FD2_9063RL.exe O4 - HKLM\..\Run: [beid] "C:\Program Files\Belgium Identity Card\beid35gui.exe" /startup O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [NokiaOviSuite2] C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice') O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html O8 - Extra context menu item: Verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O9 - Extra button: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra 'Tools' menuitem: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: vw-wi - {0F3C833F-FB28-40EA-8CB9-6A55B996C3F6} - C:\ElsaWin\bin\wiProt.dll O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: iPod-service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: ELSA Administration Service (LcSvrAdm) - Volkswagen AG - C:\ElsaWin\bin\LcSvrAdm.exe O23 - Service: ELSA Auftragsverwaltungs Service (LcSvrAuf) - Volkswagen AG - C:\ElsaWin\bin\LcSvrAuf.exe O23 - Service: ELSA DBA Server (LcSvrDba) - Volkswagen AG - C:\ElsaWin\bin\LcSvrDba.exe O23 - Service: ELSA Historie Server (LcSvrHis) - Volkswagen AG - C:\ElsaWin\bin\LcSvrHis.exe O23 - Service: ELSA PASS Server (LcSvrPAS) - Volkswagen AG - C:\ElsaWin\bin\LcSvrPas.exe O23 - Service: ELSA xTime Server (LcSvrSaz) - Unknown owner - C:\ElsaWin\bin\LcSvrSaz.exe (file missing) O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- End of file - 12392 bytes

zoals titel het zegt heb ik avg free 2011 proberen te installeren maar zit nu met 2 versies en krijg oude 9.0 niet verwijderd heb mij al zot gegoogeld en elke oplossong geprobeerd maar niets gaat heb ook maar een hijackthis logje gemaakt pc is nu heel traag Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 21:23:42, on 11/12/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\windows\system\hpsysdrv.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\ALCWZRD.EXE C:\WINDOWS\ALCMTR.EXE C:\Program Files\ASUS\ASUS Remote\RemoteControlAppl.exe C:\HP\KBD\KBD.EXE C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe C:\Program Files\InterVideo\Common\Bin\WinRemote.exe C:\Program Files\iTunes\iTunesHelper.exe C:\ElsaWin\bin\LcSvrAdm.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\QuickTime\qttask.exe C:\ElsaWin\bin\LcSvrDba.exe C:\Program Files\SilverCrest OMC807 Driver\MouClient_FD2_9063RL.exe C:\Program Files\Belgium Identity Card\beid35gui.exe C:\ElsaWin\bin\LcSvrHis.exe C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe C:\ElsaWin\bin\LcSvrPas.exe C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe C:\WINDOWS\system32\svchost.exe C:\ElsaWin\bin\LcSvrAuf.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\PC Connectivity Solution\ServiceLayer.exe C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe C:\Program Files\Common Files\Nokia\NoA\nokiaaserver.exe C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Program Files\AVG\AVG10\avgrsx.exe C:\Program Files\AVG\AVG10\avgcsrvx.exe C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe C:\Program Files\AVG\AVG10\avgwdsvc.exe C:\Program Files\AVG\AVG10\avgnsx.exe C:\Program Files\AVG\AVG10\avgemcx.exe C:\Program Files\AVG\AVG10\avgchsvx.exe C:\Program Files\AVG\AVG9\avgtray.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe C:\WINDOWS\system32\msiexec.exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: MediaBar - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - C:\PROGRA~1\BEARSH~1\MediaBar\ToolBar\BearshareMediabarDx.dll (file missing) O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file) O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: MediaBar - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - C:\PROGRA~1\BEARSH~1\MediaBar\ToolBar\BearshareMediabarDx.dll (file missing) O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe O4 - HKLM\..\Run: [snelkoppeling naar eigenschappenvenster voor High Definition Audio] HDAShCut.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKLM\..\Run: [RemoteControl] C:\Program Files\ASUS\ASUS Remote\RemoteControlAppl.exe O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE O4 - HKLM\..\Run: [Home Theater SchSvr] "C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe" O4 - HKLM\..\Run: [WINREMOTE] "C:\Program Files\InterVideo\Common\Bin\WinRemote.exe" O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [Launch SilverCrest OMC807] C:\Program Files\SilverCrest OMC807 Driver\MouClient_FD2_9063RL.exe O4 - HKLM\..\Run: [beid] "C:\Program Files\Belgium Identity Card\beid35gui.exe" /startup O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup O4 - HKLM\..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\HP_Eigenaar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [NokiaOviSuite2] C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice') O4 - Global Startup: BTTray.lnk = ? O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html O8 - Extra context menu item: Verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O9 - Extra button: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra 'Tools' menuitem: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll O18 - Protocol: vw-wi - {0F3C833F-FB28-40EA-8CB9-6A55B996C3F6} - C:\ElsaWin\bin\wiProt.dll O20 - Winlogon Notify: avgrsstarter - avgrsstx.dll (file missing) O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\avgwdsvc.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: iPod-service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: ELSA Administration Service (LcSvrAdm) - Volkswagen AG - C:\ElsaWin\bin\LcSvrAdm.exe O23 - Service: ELSA Auftragsverwaltungs Service (LcSvrAuf) - Volkswagen AG - C:\ElsaWin\bin\LcSvrAuf.exe O23 - Service: ELSA DBA Server (LcSvrDba) - Volkswagen AG - C:\ElsaWin\bin\LcSvrDba.exe O23 - Service: ELSA Historie Server (LcSvrHis) - Volkswagen AG - C:\ElsaWin\bin\LcSvrHis.exe O23 - Service: ELSA PASS Server (LcSvrPAS) - Volkswagen AG - C:\ElsaWin\bin\LcSvrPas.exe O23 - Service: ELSA xTime Server (LcSvrSaz) - Unknown owner - C:\ElsaWin\bin\LcSvrSaz.exe (file missing) O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- End of file - 13712 bytes

heb het geprobeerd maar krijg dan venster dat windows het niet kan installeren

Heb deze aangeklikt maar wat moet ik er mee doen vind het raar als ik in mijn configuratie ga zien en bij apparaatbeheer dan staat er bij ovirige apparaten 5 aparaten met vraagteken 4 keer bluetooth peripheral device en 1 maal ethernet-controller

het is een laptop van acer travelmate 7730 intel core 2 Duo cpu 5670 1,80 GHZ 4,0 Gb ram

hallo, telkens ik opstart krijg ik de melding HET STUURPROGRAMMA VOOR UW ETHERNET-CONTROLLER MOET WORDEN GEINSTALLEERD dan staan er 3 opties onder 1ste stuurprogramma's zoeken en installeren(aanbevolen) als ik dit aanklik vraagt hij installatieschijf, maar die heb ik niet( toch niet dat ik weet) als ik dan aanklik dat ik schijf niet heb en op pc laat zoeken vind hij niets dan klik ik naar oplossing zoeken dan verwijzen ze mij door dat ik bij fabrikant moet gaan zoeken 2 keuze is later opnieuw vragen 3 keuze is niet meer vragen om dit te installeren maar telkens ik opstart vraagt hij het terug Wat is dit wie kan mij helpen dank bij voorbaat

ok bedankt het is mij geluk met de programma's

Ja de 2 de optie heb ik ook geprobeert Maar de afbeeldingen worden niet juist omgezet naar word de tekst loopt gewoon door de afbeeldingen door

heb het juist geprobeerd, maar krijg niets aan op mijn email vroeger kon ik dit wel kopieeren via adobe en ik had geen licentie aangekocht hoe kan dit

hier mijn vraag ik heb een samenvatting in adobe reader bestand dit is een bestand dat op 1 a4 blad twee naast elkaar geplaatste a5 bladen zijn maar de tekst is de klein om te lezen nu zou ik de helft willen selecteren om zo te kopieeren naar word om van 1 a5 bestand een groter exemplaar te maken op een a4 hoe kan ik dit doen Het a4 blad ligt plat met links en rechts een a5 blad op er staan ook afbeeldingen bij Dank bij voorbaat

ok bedankt

ik heb mijn gsm nokia n95 8Gb aangesloten aan pc toen ik een binbestand van op het geheugen van de gsm wilde openen kreeg de pc het niet open en is er gevraagt om op internet te zoeken naar een compatibel programma dit heb ik gedaan en kwam ik op Uniblue registerbooster terecht eenmaal dit programma geinstalleerd deed dit programma een scan en vermelde het programma dat ik 411 registerfouten had deze konden hersteld worden tegen betaling natuurlijk hoe en wat zijn deze fouten

ik heb alles uitgevoerd en pc is terug sneller af en toe is hij nog wel trager maar zal normaal zijn denk ik moet ik nu nog iets doen of mag ik het als opgelost aanduiden

ik heb de mappen verwijderd, internet werkt nu terug vlugger maar blijft soms nog hangen.

Sorry, hopelijk heb ik het nu juist gedaan ComboFix 10-06-10.04 - HP_Eigenaar 11/06/2010 12:24:31.8.2 - x86 Microsoft Windows XP Home Edition 5.1.2600.3.1252.31.1043.18.1023.604 [GMT 2:00] Gestart vanuit: c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Bureaublad\ComboFix.exe gebruikte Opdracht switches :: c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Bureaublad\CFScript.txt..txt AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF} . (((((((((((((((((((( Bestanden Gemaakt van 2010-05-11 to 2010-06-11 )))))))))))))))))))))))))))))) . 2010-10-17 10:00 . 2010-10-17 10:00 -------- d-----w- C:\9bfe8073ddcad9580456b772 2010-10-17 10:00 . 2010-10-17 10:04 -------- d-----w- C:\963d7796bcda1ddaf65528d43bd98c 2010-06-10 10:34 . 2010-05-06 10:36 743424 ------w- c:\windows\system32\dllcache\iedvtool.dll 2010-06-03 19:36 . 2010-06-03 19:36 242896 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgtdix.sys 2010-06-03 19:36 . 2010-06-03 19:36 29512 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgmfx86.sys 2010-05-28 13:53 . 2010-05-28 13:53 503808 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-59982f6f-n\msvcp71.dll 2010-05-28 13:53 . 2010-05-28 13:53 499712 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-59982f6f-n\jmc.dll 2010-05-28 13:53 . 2010-05-28 13:53 348160 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-59982f6f-n\msvcr71.dll 2010-05-28 13:53 . 2010-05-28 13:53 61440 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-7b5267dd-n\decora-sse.dll 2010-05-28 13:53 . 2010-05-28 13:53 12800 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-7b5267dd-n\decora-d3d.dll 2010-05-27 12:09 . 2010-05-27 12:09 -------- d-----w- c:\windows\system32\drivers\NSS 2010-05-27 12:09 . 2010-05-27 12:09 -------- d-----w- c:\program files\NortonInstaller 2010-05-26 12:04 . 2010-05-26 12:04 1956656 ----a-w- c:\documents and settings\All Users\Application Data\NOS\Adobe_Downloads\install_flash_player_ax.exe 2010-05-23 18:31 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2010-05-23 18:31 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys 2010-05-23 18:31 . 2010-05-23 18:31 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2010-05-17 18:08 . 2010-05-17 19:36 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\DoctorWeb 2010-05-16 16:57 . 2010-05-23 18:24 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\AskToolbar 2010-05-16 16:53 . 2010-05-17 18:32 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Ahead 2010-05-16 16:49 . 2010-05-23 18:42 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Ahead 2010-05-16 13:47 . 2010-06-11 10:14 -------- d--h--r- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Onlangs geopend 2010-05-15 05:29 . 2010-05-15 05:29 -------- d-----w- c:\program files\VAG-COM . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-10-17 10:10 . 2010-01-18 09:52 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225.010\Application Data\HpUpdate 2010-08-02 11:00 . 2010-01-09 18:20 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\HpUpdate 2010-06-11 08:56 . 2010-05-10 16:02 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\HPAppData 2010-06-10 16:47 . 2010-05-16 16:29 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\LimeWire 2010-06-03 19:35 . 2010-02-12 16:31 242896 ----a-w- c:\windows\system32\drivers\avgtdix.sys 2010-06-03 19:35 . 2010-02-12 16:31 29584 ----a-w- c:\windows\system32\drivers\avgmfx86.sys 2010-05-27 12:21 . 2005-10-11 15:50 -------- d-----w- c:\program files\Common Files\Symantec Shared 2010-05-27 12:09 . 2009-07-31 09:10 -------- d-----w- c:\documents and settings\All Users\Application Data\Norton 2010-05-27 12:09 . 2009-07-06 16:48 -------- d-----w- c:\program files\Norton Security Scan 2010-05-27 12:09 . 2005-10-11 15:49 -------- d-----w- c:\documents and settings\All Users\Application Data\Symantec 2010-05-27 12:08 . 2008-10-06 13:01 -------- d-----w- c:\documents and settings\All Users\Application Data\NOS 2010-05-16 16:44 . 2005-10-11 15:33 -------- d---a-w- c:\program files\Common Files\LightScribe 2010-05-16 16:28 . 2006-05-04 21:09 -------- d-----w- c:\program files\LimeWire 2010-05-10 14:29 . 2010-05-10 14:29 -------- d-----w- c:\documents and settings\All Users\Application Data\WEBREG 2010-05-10 14:29 . 2010-01-08 16:15 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\HP 2010-05-10 14:29 . 2010-05-10 14:06 210007 ----a-w- c:\windows\hpoins39.dat 2010-05-10 14:28 . 2005-10-11 15:18 -------- d-----w- c:\program files\HP 2010-05-10 14:26 . 2005-10-11 15:20 -------- d-----w- c:\documents and settings\All Users\Application Data\HP 2010-05-10 14:25 . 2010-01-08 16:15 31672 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2010-05-10 14:21 . 2009-02-03 19:29 -------- d-----w- c:\documents and settings\All Users\Application Data\HP Product Assistant 2010-05-06 10:37 . 2004-08-04 11:00 916480 ----a-w- c:\windows\system32\wininet.dll 2010-05-04 05:42 . 2005-10-11 15:04 -------- d-----w- c:\program files\Common Files\Java 2010-05-04 05:42 . 2010-05-04 05:42 503808 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-3e50dd3c-n\msvcp71.dll 2010-05-04 05:42 . 2010-05-04 05:42 499712 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-3e50dd3c-n\jmc.dll 2010-05-04 05:42 . 2010-05-04 05:42 348160 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-3e50dd3c-n\msvcr71.dll 2010-05-04 05:42 . 2010-05-04 05:42 61440 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-7e535e7c-n\decora-sse.dll 2010-05-04 05:42 . 2010-05-04 05:42 12800 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-7e535e7c-n\decora-d3d.dll 2010-05-04 05:41 . 2010-05-04 05:41 411368 ----a-w- c:\windows\system32\deployJava1.dll 2010-05-02 08:10 . 2006-02-01 04:30 1851392 ----a-w- c:\windows\system32\win32k.sys 2010-04-20 05:35 . 2006-02-01 04:27 285696 ----a-w- c:\windows\system32\atmfd.dll 2010-04-14 12:00 . 2010-04-14 12:00 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Uniblue 2010-04-14 11:55 . 2005-10-11 15:36 -------- d-----w- c:\program files\Common Files\Adobe 2010-04-01 17:33 . 2004-12-03 17:15 70546 ----a-w- c:\windows\system32\perfc013.dat 2010-04-01 17:33 . 2004-12-03 17:15 443836 ----a-w- c:\windows\system32\perfh013.dat 2010-03-16 13:41 . 2010-01-08 17:08 152576 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\jre1.6.0_17\lzma.dll 2010-03-16 13:41 . 2010-01-08 17:08 79488 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll 2004-08-09 21:30 . 2006-07-05 20:03 40960 ----a-w- c:\program files\Uninstall_CDS.exe 2006-02-01 07:02 . 2006-01-31 23:02 22 -csha-w- c:\windows\SMINST\HPCD.sys . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks] "{A3BC75A2-1F87-4686-AA43-5347D756017C}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2009-11-25 1230080] [HKEY_CLASSES_ROOT\clsid\{a3bc75a2-1f87-4686-aa43-5347d756017c}] [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}] 2009-11-25 12:01 1230080 ----a-w- c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2009-11-25 1230080] [HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser] "{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2009-11-25 1230080] [HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-01-04 68856] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2006-05-09 94208] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040] "hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 52736] "Snelkoppeling naar eigenschappenvenster voor High Definition Audio"="HDAShCut.exe" [2005-01-07 61952] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-08-02 7110656] "SoundMan"="SOUNDMAN.EXE" [2005-05-04 90112] "AlcWzrd"="ALCWZRD.EXE" [2005-05-04 2805248] "RemoteControl"="c:\program files\ASUS\ASUS Remote\RemoteControlAppl.exe" [2005-06-10 61440] "HPHUPD08"="c:\program files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe" [2005-06-02 49152] "KBD"="c:\hp\KBD\KBD.EXE" [2005-02-02 61440] "Home Theater SchSvr"="c:\program files\Common Files\InterVideo\SchSvr\SchSvr.exe" [2005-07-18 106496] "WINREMOTE"="c:\program files\InterVideo\Common\Bin\WinRemote.exe" [2005-07-18 262144] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2005-05-04 278528] "PS2"="c:\windows\system32\ps2.exe" [2004-10-25 90112] "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-04-04 36272] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-03-24 952768] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2005-10-11 98304] "NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648] c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Menu Start\Programma's\Opstarten\ LimeWire On Startup.lnk - c:\program files\LimeWire\LimeWire.exe [2010-3-30 503808] c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\ BTTray.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-2-27 561213] HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768] Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360] [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"= "c:\\Program Files\\iTunes\\iTunes.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\AVG\\AVG9\\avgupd.exe"= "c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"= "c:\\Program Files\\Common Files\\HP\\Digital Imaging\\Bin\\hpqPhotoCrm.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxs08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe"= "c:\\Program Files\\HP\\HP Software Update\\hpwucli.exe"= "c:\\Program Files\\HP\\Digital Imaging\\smart web printing\\SmartWebPrintExe.exe"= "c:\\Program Files\\LimeWire\\LimeWire.exe"= R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [12/02/2010 18:31 216200] R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [12/02/2010 18:31 242896] R2 avg9wd;AVG Free WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [11/03/2010 19:23 308064] R2 LcSvrAdm;ELSA Administration Service;c:\elsawin\bin\LcSvrAdm.exe [29/03/2010 18:11 147456] R2 LcSvrDba;ELSA DBA Server;c:\elsawin\bin\LcSvrDba.exe [29/03/2010 18:11 233472] R2 LcSvrHis;ELSA Historie Server;c:\elsawin\bin\LcSvrHis.exe [29/03/2010 18:11 217088] R2 LcSvrPAS;ELSA PASS Server;c:\elsawin\bin\LcSvrPas.exe [29/03/2010 18:11 368640] R3 3xHybrid;3xHybrid service;c:\windows\system32\drivers\3xHybrid.sys [11/10/2005 17:14 2786176] R3 LcSvrAuf;ELSA Auftragsverwaltungs Service;c:\elsawin\bin\LcSvrAuf.exe [29/03/2010 18:11 1302528] S2 gupdate;Google Updateservice (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [8/01/2010 22:45 135664] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] HPService REG_MULTI_SZ HPSLPSVC HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc . Inhoud van de 'Gedeelde Taken' map 2010-06-10 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-01-08 20:45] 2010-06-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-01-08 20:45] 2010-06-10 c:\windows\Tasks\Norton Security Scan for HP_Eigenaar.job - c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.3.34\Nss.exe [2010-05-27 12:09] 2010-06-11 c:\windows\Tasks\User_Feed_Synchronization-{4602B838-EAFE-414F-BBB5-BB70560C1395}.job - c:\windows\system32\msfeedssync.exe [2009-03-08 03:31] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.google.com/ IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~3\Office10\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2EC7709873947E87.dll/cmsidewiki.html IE: Verzenden naar &Bluetooth-apparaat... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game.zylom.com/activex/zylomgamesplayer.cab . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2010-06-11 12:32 Windows 5.1.2600 Service Pack 3 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: 0 ************************************************************************** . --------------------- DLLs Geladen Onder Lopende Processen --------------------- - - - - - - - > 'explorer.exe'(1104) c:\windows\system32\btmmhook.dll c:\program files\Common Files\Ahead\Lib\NeroSearchBar.dll c:\program files\Common Files\Ahead\Lib\NeroSearchTrayHook.dll c:\program files\Common Files\Ahead\Lib\MFC71U.DLL c:\program files\Common Files\Ahead\Lib\BCGCBPRO800u.dll c:\windows\system32\webcheck.dll . Voltooingstijd: 2010-06-11 12:35:05 ComboFix-quarantined-files.txt 2010-06-11 10:35 ComboFix2.txt 2010-06-11 08:50 ComboFix3.txt 2010-06-09 12:58 Pre-Run: 97.232.912.384 bytes beschikbaar Post-Run: 97.304.129.536 bytes beschikbaar - - End Of File - - E35CC623972459FE3817FE0C5F4C6FF8 Logfile of Trend Micro HijackThis v2.0.3 (BETA) Scan saved at 12:42:02, on 11/06/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\windows\system\hpsysdrv.exe C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\ALCWZRD.EXE C:\Program Files\ASUS\ASUS Remote\RemoteControlAppl.exe C:\HP\KBD\KBD.EXE C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe C:\Program Files\InterVideo\Common\Bin\WinRemote.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\AVG\AVG9\avgwdsvc.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\ElsaWin\bin\LcSvrAdm.exe C:\ElsaWin\bin\LcSvrDba.exe C:\ElsaWin\bin\LcSvrHis.exe C:\ElsaWin\bin\LcSvrPas.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\Program Files\AVG\AVG9\avgnsx.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\AVG\AVG9\avgchsvx.exe C:\Program Files\AVG\AVG9\avgrsx.exe C:\Program Files\AVG\AVG9\avgcsrvx.exe C:\Program Files\iPod\bin\iPodService.exe C:\ElsaWin\bin\LcSvrAuf.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\explorer.exe C:\WINDOWS\system32\notepad.exe C:\Program Files\internet explorer\iexplore.exe C:\Program Files\internet explorer\iexplore.exe C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe C:\Program Files\TrendMicro\HiJackThis\HiJackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe O4 - HKLM\..\Run: [snelkoppeling naar eigenschappenvenster voor High Definition Audio] HDAShCut.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE O4 - HKLM\..\Run: [RemoteControl] C:\Program Files\ASUS\ASUS Remote\RemoteControlAppl.exe O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE O4 - HKLM\..\Run: [Home Theater SchSvr] "C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe" O4 - HKLM\..\Run: [WINREMOTE] "C:\Program Files\InterVideo\Common\Bin\WinRemote.exe" O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe O4 - Global Startup: BTTray.lnk = ? O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2EC7709873947E87.dll/cmsidewiki.html O8 - Extra context menu item: Verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O9 - Extra button: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra 'Tools' menuitem: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1262981069093 O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game.zylom.com/activex/zylomgamesplayer.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll O18 - Protocol: vw-wi - {0F3C833F-FB28-40EA-8CB9-6A55B996C3F6} - C:\ElsaWin\bin\wiProt.dll O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: iPod-service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: ELSA Administration Service (LcSvrAdm) - Volkswagen AG - C:\ElsaWin\bin\LcSvrAdm.exe O23 - Service: ELSA Auftragsverwaltungs Service (LcSvrAuf) - Volkswagen AG - C:\ElsaWin\bin\LcSvrAuf.exe O23 - Service: ELSA DBA Server (LcSvrDba) - Volkswagen AG - C:\ElsaWin\bin\LcSvrDba.exe O23 - Service: ELSA Historie Server (LcSvrHis) - Volkswagen AG - C:\ElsaWin\bin\LcSvrHis.exe O23 - Service: ELSA PASS Server (LcSvrPAS) - Volkswagen AG - C:\ElsaWin\bin\LcSvrPas.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe -- End of file - 11003 bytes

ComboFix 10-06-10.03 - HP_Eigenaar 11/06/2010 10:39:05.7.2 - x86 Microsoft Windows XP Home Edition 5.1.2600.3.1252.31.1043.18.1023.494 [GMT 2:00] Gestart vanuit: c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Bureaublad\ComboFix.exe gebruikte Opdracht switches :: c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Bureaublad\CFScript.txt..txt AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF} . (((((((((((((((((((( Bestanden Gemaakt van 2010-05-11 to 2010-06-11 )))))))))))))))))))))))))))))) . 2010-10-17 10:00 . 2010-10-17 10:00 -------- d-----w- C:\9bfe8073ddcad9580456b772 2010-10-17 10:00 . 2010-10-17 10:04 -------- d-----w- C:\963d7796bcda1ddaf65528d43bd98c 2010-06-10 10:34 . 2010-05-06 10:36 743424 ------w- c:\windows\system32\dllcache\iedvtool.dll 2010-06-03 19:36 . 2010-06-03 19:36 242896 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgtdix.sys 2010-06-03 19:36 . 2010-06-03 19:36 29512 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgmfx86.sys 2010-05-28 13:53 . 2010-05-28 13:53 503808 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-59982f6f-n\msvcp71.dll 2010-05-28 13:53 . 2010-05-28 13:53 499712 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-59982f6f-n\jmc.dll 2010-05-28 13:53 . 2010-05-28 13:53 348160 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-59982f6f-n\msvcr71.dll 2010-05-28 13:53 . 2010-05-28 13:53 61440 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-7b5267dd-n\decora-sse.dll 2010-05-28 13:53 . 2010-05-28 13:53 12800 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-7b5267dd-n\decora-d3d.dll 2010-05-27 12:09 . 2010-05-27 12:09 -------- d-----w- c:\windows\system32\drivers\NSS 2010-05-27 12:09 . 2010-05-27 12:09 -------- d-----w- c:\program files\NortonInstaller 2010-05-26 12:04 . 2010-05-26 12:04 1956656 ----a-w- c:\documents and settings\All Users\Application Data\NOS\Adobe_Downloads\install_flash_player_ax.exe 2010-05-23 18:31 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2010-05-23 18:31 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys 2010-05-23 18:31 . 2010-05-23 18:31 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2010-05-17 18:08 . 2010-05-17 19:36 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\DoctorWeb 2010-05-16 16:57 . 2010-05-23 18:24 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\AskToolbar 2010-05-16 16:53 . 2010-05-17 18:32 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Ahead 2010-05-16 16:49 . 2010-05-23 18:42 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Ahead 2010-05-16 13:47 . 2010-06-11 08:34 -------- d--h--r- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Onlangs geopend 2010-05-15 05:29 . 2010-05-15 05:29 -------- d-----w- c:\program files\VAG-COM . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-10-17 10:10 . 2010-01-18 09:52 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225.010\Application Data\HpUpdate 2010-08-02 11:00 . 2010-01-09 18:20 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\HpUpdate 2010-06-11 08:35 . 2010-05-10 16:02 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\HPAppData 2010-06-10 16:47 . 2010-05-16 16:29 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\LimeWire 2010-06-03 19:35 . 2010-02-12 16:31 242896 ----a-w- c:\windows\system32\drivers\avgtdix.sys 2010-06-03 19:35 . 2010-02-12 16:31 29584 ----a-w- c:\windows\system32\drivers\avgmfx86.sys 2010-05-27 12:21 . 2005-10-11 15:50 -------- d-----w- c:\program files\Common Files\Symantec Shared 2010-05-27 12:09 . 2009-07-31 09:10 -------- d-----w- c:\documents and settings\All Users\Application Data\Norton 2010-05-27 12:09 . 2009-07-06 16:48 -------- d-----w- c:\program files\Norton Security Scan 2010-05-27 12:09 . 2005-10-11 15:49 -------- d-----w- c:\documents and settings\All Users\Application Data\Symantec 2010-05-27 12:08 . 2008-10-06 13:01 -------- d-----w- c:\documents and settings\All Users\Application Data\NOS 2010-05-16 16:44 . 2005-10-11 15:33 -------- d---a-w- c:\program files\Common Files\LightScribe 2010-05-16 16:28 . 2006-05-04 21:09 -------- d-----w- c:\program files\LimeWire 2010-05-10 14:29 . 2010-05-10 14:29 -------- d-----w- c:\documents and settings\All Users\Application Data\WEBREG 2010-05-10 14:29 . 2010-01-08 16:15 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\HP 2010-05-10 14:29 . 2010-05-10 14:06 210007 ----a-w- c:\windows\hpoins39.dat 2010-05-10 14:28 . 2005-10-11 15:18 -------- d-----w- c:\program files\HP 2010-05-10 14:26 . 2005-10-11 15:20 -------- d-----w- c:\documents and settings\All Users\Application Data\HP 2010-05-10 14:25 . 2010-01-08 16:15 31672 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2010-05-10 14:21 . 2009-02-03 19:29 -------- d-----w- c:\documents and settings\All Users\Application Data\HP Product Assistant 2010-05-06 10:37 . 2004-08-04 11:00 916480 ----a-w- c:\windows\system32\wininet.dll 2010-05-04 05:42 . 2005-10-11 15:04 -------- d-----w- c:\program files\Common Files\Java 2010-05-04 05:42 . 2010-05-04 05:42 503808 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-3e50dd3c-n\msvcp71.dll 2010-05-04 05:42 . 2010-05-04 05:42 499712 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-3e50dd3c-n\jmc.dll 2010-05-04 05:42 . 2010-05-04 05:42 348160 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-3e50dd3c-n\msvcr71.dll 2010-05-04 05:42 . 2010-05-04 05:42 61440 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-7e535e7c-n\decora-sse.dll 2010-05-04 05:42 . 2010-05-04 05:42 12800 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-7e535e7c-n\decora-d3d.dll 2010-05-04 05:41 . 2010-05-04 05:41 411368 ----a-w- c:\windows\system32\deployJava1.dll 2010-05-02 08:10 . 2006-02-01 04:30 1851392 ----a-w- c:\windows\system32\win32k.sys 2010-04-20 05:35 . 2006-02-01 04:27 285696 ----a-w- c:\windows\system32\atmfd.dll 2010-04-14 12:00 . 2010-04-14 12:00 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Uniblue 2010-04-14 11:55 . 2005-10-11 15:36 -------- d-----w- c:\program files\Common Files\Adobe 2010-04-01 17:33 . 2004-12-03 17:15 70546 ----a-w- c:\windows\system32\perfc013.dat 2010-04-01 17:33 . 2004-12-03 17:15 443836 ----a-w- c:\windows\system32\perfh013.dat 2010-03-16 13:41 . 2010-01-08 17:08 152576 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\jre1.6.0_17\lzma.dll 2010-03-16 13:41 . 2010-01-08 17:08 79488 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll 2004-08-09 21:30 . 2006-07-05 20:03 40960 ----a-w- c:\program files\Uninstall_CDS.exe 2006-02-01 07:02 . 2006-01-31 23:02 22 -csha-w- c:\windows\SMINST\HPCD.sys . ((((((((((((((((((((((((((((( SnapShot@2010-06-09_12.55.52 ))))))))))))))))))))))))))))))))))))))))) . + 2010-06-10 16:46 . 2010-06-10 16:46 16384 c:\windows\temp\Perflib_Perfdata_468.dat + 2009-11-05 20:17 . 2009-11-05 20:17 11600 c:\windows\system32\mui\0409\mscorees.dll + 2009-03-08 03:31 . 2010-05-06 10:36 55296 c:\windows\system32\msfeedsbs.dll - 2009-03-08 03:31 . 2010-02-25 06:20 55296 c:\windows\system32\msfeedsbs.dll - 2006-02-01 04:28 . 2010-02-25 06:20 25600 c:\windows\system32\jsproxy.dll + 2006-02-01 04:28 . 2010-05-06 10:36 25600 c:\windows\system32\jsproxy.dll - 2010-01-08 20:27 . 2010-02-25 06:20 12800 c:\windows\system32\dllcache\xpshims.dll + 2010-01-08 20:27 . 2010-05-06 10:37 12800 c:\windows\system32\dllcache\xpshims.dll - 2010-01-08 20:27 . 2010-02-25 06:20 55296 c:\windows\system32\dllcache\msfeedsbs.dll + 2010-01-08 20:27 . 2010-05-06 10:36 55296 c:\windows\system32\dllcache\msfeedsbs.dll - 2009-03-08 03:33 . 2010-02-25 06:20 25600 c:\windows\system32\dllcache\jsproxy.dll + 2009-03-08 03:33 . 2010-05-06 10:36 25600 c:\windows\system32\dllcache\jsproxy.dll + 2010-03-05 14:42 . 2010-03-05 14:42 65536 c:\windows\system32\dllcache\asycfilt.dll + 2006-02-01 04:27 . 2010-03-05 14:42 65536 c:\windows\system32\asycfilt.dll + 2010-04-01 09:42 . 2010-04-01 09:42 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Security.dll + 2010-03-31 12:51 . 2010-03-31 12:51 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll - 2008-05-27 23:49 . 2008-05-27 23:49 77824 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll + 2010-03-31 12:51 . 2010-03-31 12:51 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll - 2008-05-27 23:49 . 2008-05-27 23:49 86016 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorie.dll + 2010-03-31 12:51 . 2010-03-31 12:51 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll - 2008-05-27 23:49 . 2008-05-27 23:49 81920 c:\windows\Microsoft.NET\Framework\v1.1.4322\CORPerfMonExt.dll + 2010-03-31 13:32 . 2010-03-31 13:32 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe - 2008-05-28 00:30 . 2008-05-28 00:30 32768 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe + 2010-03-31 13:32 . 2010-03-31 13:32 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll - 2003-02-21 00:19 . 2003-02-21 00:19 24576 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_filter.dll + 2010-06-10 10:59 . 2010-06-10 10:59 34632 c:\windows\Installer\{90120000-0020-0413-0000-0000000FF1CE}\O12ConvIcon.exe - 2010-04-14 10:40 . 2010-04-14 10:40 34632 c:\windows\Installer\{90120000-0020-0413-0000-0000000FF1CE}\O12ConvIcon.exe - 2009-02-26 20:25 . 2010-05-12 12:03 90112 c:\windows\Installer\{90110413-6000-11D3-8CFE-0050048383C9}\xlicons.exe + 2009-02-26 20:25 . 2010-06-10 10:55 90112 c:\windows\Installer\{90110413-6000-11D3-8CFE-0050048383C9}\xlicons.exe + 2009-02-26 20:25 . 2010-06-10 10:55 45056 c:\windows\Installer\{90110413-6000-11D3-8CFE-0050048383C9}\wordicon.exe - 2009-02-26 20:25 . 2010-05-12 12:03 45056 c:\windows\Installer\{90110413-6000-11D3-8CFE-0050048383C9}\wordicon.exe - 2009-02-26 20:25 . 2010-05-12 12:03 22528 c:\windows\Installer\{90110413-6000-11D3-8CFE-0050048383C9}\unbndico.exe + 2009-02-26 20:25 . 2010-06-10 10:55 22528 c:\windows\Installer\{90110413-6000-11D3-8CFE-0050048383C9}\unbndico.exe - 2009-02-26 20:25 . 2010-05-12 12:03 30720 c:\windows\Installer\{90110413-6000-11D3-8CFE-0050048383C9}\pptico.exe + 2009-02-26 20:25 . 2010-06-10 10:55 30720 c:\windows\Installer\{90110413-6000-11D3-8CFE-0050048383C9}\pptico.exe - 2009-02-26 20:25 . 2010-05-12 12:03 16384 c:\windows\Installer\{90110413-6000-11D3-8CFE-0050048383C9}\PEicons.exe + 2009-02-26 20:25 . 2010-06-10 10:55 16384 c:\windows\Installer\{90110413-6000-11D3-8CFE-0050048383C9}\PEicons.exe - 2009-02-26 20:25 . 2010-05-12 12:03 34304 c:\windows\Installer\{90110413-6000-11D3-8CFE-0050048383C9}\misc.exe + 2009-02-26 20:25 . 2010-06-10 10:55 34304 c:\windows\Installer\{90110413-6000-11D3-8CFE-0050048383C9}\misc.exe + 2010-06-10 10:58 . 2010-02-25 06:20 12800 c:\windows\ie8updates\KB982381-IE8\xpshims.dll + 2010-06-10 10:58 . 2010-02-25 06:20 55296 c:\windows\ie8updates\KB982381-IE8\msfeedsbs.dll + 2010-06-10 10:58 . 2010-02-25 06:20 25600 c:\windows\ie8updates\KB982381-IE8\jsproxy.dll + 2010-06-10 11:00 . 2010-06-10 11:00 90112 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing.Design\1.0.5000.0__b03f5f7f11d50a3a_29ee4ada\System.Drawing.Design.dll + 2010-06-10 11:00 . 2010-06-10 11:00 61440 c:\windows\assembly\NativeImages1_v1.1.4322\CustomMarshalers\1.0.5000.0__b03f5f7f11d50a3a_2b4f8aaa\CustomMarshalers.dll + 2010-06-10 10:59 . 2010-06-10 10:59 81920 c:\windows\assembly\GAC\System.Security\1.0.5000.0__b03f5f7f11d50a3a\System.Security.dll + 2009-02-26 20:25 . 2010-06-10 10:55 3584 c:\windows\Installer\{90110413-6000-11D3-8CFE-0050048383C9}\opwicon.exe - 2009-02-26 20:25 . 2010-05-12 12:03 3584 c:\windows\Installer\{90110413-6000-11D3-8CFE-0050048383C9}\opwicon.exe - 2009-02-26 20:25 . 2010-05-12 12:03 8192 c:\windows\Installer\{90110413-6000-11D3-8CFE-0050048383C9}\mspicons.exe + 2009-02-26 20:25 . 2010-06-10 10:55 8192 c:\windows\Installer\{90110413-6000-11D3-8CFE-0050048383C9}\mspicons.exe - 2009-02-26 20:25 . 2010-05-12 12:03 2560 c:\windows\Installer\{90110413-6000-11D3-8CFE-0050048383C9}\cagicon.exe + 2009-02-26 20:25 . 2010-06-10 10:55 2560 c:\windows\Installer\{90110413-6000-11D3-8CFE-0050048383C9}\cagicon.exe + 2006-02-01 04:29 . 2010-05-06 10:37 206848 c:\windows\system32\occache.dll - 2006-02-01 04:29 . 2010-02-25 06:20 206848 c:\windows\system32\occache.dll + 2006-02-01 04:29 . 2010-05-06 10:37 611840 c:\windows\system32\mstime.dll - 2006-02-01 04:29 . 2010-02-25 06:20 611840 c:\windows\system32\mstime.dll + 2009-03-08 03:32 . 2010-05-06 10:36 599040 c:\windows\system32\msfeeds.dll + 2004-08-04 11:00 . 2010-05-06 10:36 184320 c:\windows\system32\iepeers.dll - 2004-08-04 11:00 . 2010-02-25 06:20 184320 c:\windows\system32\iepeers.dll + 2006-02-01 04:28 . 2010-05-06 10:36 387584 c:\windows\system32\iedkcs32.dll - 2006-02-01 04:28 . 2010-02-25 06:20 387584 c:\windows\system32\iedkcs32.dll - 2006-02-01 04:28 . 2010-02-24 09:56 173056 c:\windows\system32\ie4uinit.exe + 2006-02-01 04:28 . 2010-05-05 13:30 173056 c:\windows\system32\ie4uinit.exe + 2004-12-03 17:12 . 2010-06-10 16:46 151584 c:\windows\system32\FNTCACHE.DAT - 2004-12-03 17:12 . 2010-05-12 17:36 151584 c:\windows\system32\FNTCACHE.DAT - 2009-03-08 03:34 . 2010-02-25 06:20 916480 c:\windows\system32\dllcache\wininet.dll + 2009-03-08 03:34 . 2010-05-06 10:37 916480 c:\windows\system32\dllcache\wininet.dll + 2009-03-08 03:34 . 2010-05-06 10:37 206848 c:\windows\system32\dllcache\occache.dll - 2009-03-08 03:34 . 2010-02-25 06:20 206848 c:\windows\system32\dllcache\occache.dll + 2009-03-08 03:32 . 2010-05-06 10:37 611840 c:\windows\system32\dllcache\mstime.dll - 2009-03-08 03:32 . 2010-02-25 06:20 611840 c:\windows\system32\dllcache\mstime.dll + 2010-01-08 20:27 . 2010-05-06 10:36 599040 c:\windows\system32\dllcache\msfeeds.dll - 2010-01-08 20:27 . 2010-02-25 06:20 247808 c:\windows\system32\dllcache\ieproxy.dll + 2010-01-08 20:27 . 2010-05-06 10:36 247808 c:\windows\system32\dllcache\ieproxy.dll - 2009-03-08 03:31 . 2010-02-25 06:20 184320 c:\windows\system32\dllcache\iepeers.dll + 2009-03-08 03:31 . 2010-05-06 10:36 184320 c:\windows\system32\dllcache\iepeers.dll + 2009-03-08 13:09 . 2010-05-06 10:36 387584 c:\windows\system32\dllcache\iedkcs32.dll - 2009-03-08 13:09 . 2010-02-25 06:20 387584 c:\windows\system32\dllcache\iedkcs32.dll - 2009-03-08 03:32 . 2010-02-24 09:56 173056 c:\windows\system32\dllcache\ie4uinit.exe + 2009-03-08 03:32 . 2010-05-05 13:30 173056 c:\windows\system32\dllcache\ie4uinit.exe + 2010-04-20 05:35 . 2010-04-20 05:35 285696 c:\windows\system32\dllcache\atmfd.dll - 2008-05-27 23:49 . 2008-05-27 23:49 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll + 2010-03-31 12:51 . 2010-03-31 12:51 102400 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorld.dll - 2008-05-27 23:48 . 2008-05-27 23:48 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll + 2010-03-31 12:49 . 2010-03-31 12:49 315392 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorjit.dll + 2010-03-31 13:32 . 2010-03-31 13:32 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll - 2008-05-28 00:30 . 2008-05-28 00:30 258048 c:\windows\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll - 2009-02-26 20:25 . 2010-05-12 12:03 114688 c:\windows\Installer\{90110413-6000-11D3-8CFE-0050048383C9}\outicon.exe + 2009-02-26 20:25 . 2010-06-10 10:55 114688 c:\windows\Installer\{90110413-6000-11D3-8CFE-0050048383C9}\outicon.exe - 2006-04-26 13:32 . 2010-05-12 12:03 167936 c:\windows\Installer\{90110413-6000-11D3-8CFE-0050048383C9}\accicons.exe + 2006-04-26 13:32 . 2010-06-10 10:55 167936 c:\windows\Installer\{90110413-6000-11D3-8CFE-0050048383C9}\accicons.exe + 2010-06-10 10:58 . 2010-02-25 06:20 916480 c:\windows\ie8updates\KB982381-IE8\wininet.dll + 2010-06-10 10:58 . 2010-02-22 14:29 401272 c:\windows\ie8updates\KB982381-IE8\spuninst\updspapi.dll + 2010-06-10 10:58 . 2008-07-08 13:07 234872 c:\windows\ie8updates\KB982381-IE8\spuninst\spuninst.exe + 2010-06-10 10:58 . 2010-02-25 06:20 206848 c:\windows\ie8updates\KB982381-IE8\occache.dll + 2010-06-10 10:58 . 2010-02-25 06:20 611840 c:\windows\ie8updates\KB982381-IE8\mstime.dll + 2010-06-10 10:58 . 2010-02-25 06:20 594432 c:\windows\ie8updates\KB982381-IE8\msfeeds.dll + 2010-06-10 10:58 . 2010-02-25 06:20 247808 c:\windows\ie8updates\KB982381-IE8\ieproxy.dll + 2010-06-10 10:58 . 2010-02-25 06:20 184320 c:\windows\ie8updates\KB982381-IE8\iepeers.dll + 2010-06-10 10:58 . 2009-03-08 02:35 742912 c:\windows\ie8updates\KB982381-IE8\iedvtool.dll + 2010-06-10 10:58 . 2010-02-25 06:20 387584 c:\windows\ie8updates\KB982381-IE8\iedkcs32.dll + 2010-06-10 10:58 . 2010-02-24 09:56 173056 c:\windows\ie8updates\KB982381-IE8\ie4uinit.exe + 2010-06-10 16:47 . 2010-06-10 16:47 835584 c:\windows\assembly\NativeImages1_v1.1.4322\System.Drawing\1.0.5000.0__b03f5f7f11d50a3a_d506c038\System.Drawing.dll + 2004-08-04 11:00 . 2010-04-03 01:33 2365288 c:\windows\system32\WMVCore.dll + 2004-08-04 11:00 . 2010-05-06 10:37 1209344 c:\windows\system32\urlmon.dll - 2004-08-04 11:00 . 2010-02-25 06:20 1209344 c:\windows\system32\urlmon.dll + 2006-02-01 04:29 . 2010-02-05 18:27 1295872 c:\windows\system32\quartz.dll - 2006-02-01 04:29 . 2009-11-27 17:14 1295872 c:\windows\system32\quartz.dll + 2004-08-04 11:00 . 2010-05-06 10:37 5950976 c:\windows\system32\mshtml.dll - 2009-03-08 03:32 . 2010-02-25 06:20 1985536 c:\windows\system32\iertutil.dll + 2009-03-08 03:32 . 2010-05-06 10:36 1985536 c:\windows\system32\iertutil.dll + 2004-08-04 11:00 . 2010-04-03 01:33 2365288 c:\windows\system32\dllcache\WMVCore.dll + 2009-08-14 15:16 . 2010-05-02 08:10 1851392 c:\windows\system32\dllcache\win32k.sys - 2009-03-08 03:34 . 2010-02-25 06:20 1209344 c:\windows\system32\dllcache\urlmon.dll + 2009-03-08 03:34 . 2010-05-06 10:37 1209344 c:\windows\system32\dllcache\urlmon.dll - 2009-06-03 19:11 . 2009-11-27 17:14 1295872 c:\windows\system32\dllcache\quartz.dll + 2009-06-03 19:11 . 2010-02-05 18:27 1295872 c:\windows\system32\dllcache\quartz.dll + 2009-03-08 03:41 . 2010-05-06 10:37 5950976 c:\windows\system32\dllcache\mshtml.dll - 2010-01-08 20:27 . 2010-02-25 06:20 1985536 c:\windows\system32\dllcache\iertutil.dll + 2010-01-08 20:27 . 2010-05-06 10:36 1985536 c:\windows\system32\dllcache\iertutil.dll + 2010-04-01 09:42 . 2010-04-01 09:42 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll - 2008-05-28 00:35 . 2008-05-28 00:35 1265664 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.Web.dll + 2010-04-01 09:42 . 2010-04-01 09:42 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll - 2008-05-28 00:35 . 2008-05-28 00:35 1232896 c:\windows\Microsoft.NET\Framework\v1.1.4322\System.dll - 2008-05-27 23:48 . 2008-05-27 23:48 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll + 2010-03-31 12:50 . 2010-03-31 12:50 2514944 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll + 2010-03-31 12:50 . 2010-03-31 12:50 2527232 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll + 2010-04-01 09:42 . 2010-04-01 09:42 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll - 2008-05-27 23:43 . 2008-05-27 23:43 2142208 c:\windows\Microsoft.NET\Framework\v1.1.4322\mscorlib.dll + 2010-04-24 15:10 . 2010-04-24 15:10 8486400 c:\windows\Installer\71866c.msp + 2010-06-10 10:58 . 2010-02-25 06:20 1209344 c:\windows\ie8updates\KB982381-IE8\urlmon.dll + 2010-06-10 10:58 . 2010-02-25 06:20 5944832 c:\windows\ie8updates\KB982381-IE8\mshtml.dll + 2010-06-10 10:58 . 2010-02-25 06:20 1985536 c:\windows\ie8updates\KB982381-IE8\iertutil.dll + 2010-06-10 11:00 . 2010-06-10 11:00 1966080 c:\windows\assembly\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_f2fc7944\System.dll + 2010-06-10 11:00 . 2010-06-10 11:00 2088960 c:\windows\assembly\NativeImages1_v1.1.4322\System.Xml\1.0.5000.0__b77a5c561934e089_7e08d48b\System.Xml.dll + 2010-06-10 11:00 . 2010-06-10 11:00 3018752 c:\windows\assembly\NativeImages1_v1.1.4322\System.Windows.Forms\1.0.5000.0__b77a5c561934e089_84b088c3\System.Windows.Forms.dll + 2010-06-10 16:47 . 2010-06-10 16:47 1466368 c:\windows\assembly\NativeImages1_v1.1.4322\System.Design\1.0.5000.0__b03f5f7f11d50a3a_7819b25a\System.Design.dll + 2010-06-10 16:48 . 2010-06-10 16:48 3391488 c:\windows\assembly\NativeImages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_4a4513d7\mscorlib.dll - 2010-01-08 20:29 . 2010-01-08 20:29 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll + 2010-06-10 10:59 . 2010-06-10 10:59 1232896 c:\windows\assembly\GAC\System\1.0.5000.0__b77a5c561934e089\System.dll - 2010-01-08 20:29 . 2010-01-08 20:29 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll + 2010-06-10 10:59 . 2010-06-10 10:59 1265664 c:\windows\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\System.Web.dll + 2010-01-08 20:23 . 2010-05-28 19:37 32472008 c:\windows\system32\MRT.exe + 2009-03-08 03:39 . 2010-05-06 10:36 11076096 c:\windows\system32\ieframe.dll + 2010-01-08 20:27 . 2010-05-06 10:36 11076096 c:\windows\system32\dllcache\ieframe.dll + 2010-04-02 17:29 . 2010-04-02 17:29 11413504 c:\windows\Microsoft.NET\Framework\v1.1.4322\Updates\M979906\M979906Uninstall.msp + 2010-04-02 10:30 . 2010-04-02 10:30 17456640 c:\windows\Installer\718694.msp + 2010-04-24 15:09 . 2010-04-24 15:09 11750912 c:\windows\Installer\718675.msp + 2010-04-15 19:34 . 2010-04-15 19:34 17510912 c:\windows\Installer\718663.msp + 2010-06-10 10:58 . 2010-02-25 09:50 11070976 c:\windows\ie8updates\KB982381-IE8\ieframe.dll . -- Snapshot teruggezet naar huidige datum -- . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks] "{A3BC75A2-1F87-4686-AA43-5347D756017C}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2009-11-25 1230080] [HKEY_CLASSES_ROOT\clsid\{a3bc75a2-1f87-4686-aa43-5347d756017c}] [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}] 2009-11-25 12:01 1230080 ----a-w- c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2009-11-25 1230080] [HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser] "{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2009-11-25 1230080] [HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-01-04 68856] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2006-05-09 94208] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040] "hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 52736] "Snelkoppeling naar eigenschappenvenster voor High Definition Audio"="HDAShCut.exe" [2005-01-07 61952] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-08-02 7110656] "SoundMan"="SOUNDMAN.EXE" [2005-05-04 90112] "AlcWzrd"="ALCWZRD.EXE" [2005-05-04 2805248] "RemoteControl"="c:\program files\ASUS\ASUS Remote\RemoteControlAppl.exe" [2005-06-10 61440] "HPHUPD08"="c:\program files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe" [2005-06-02 49152] "KBD"="c:\hp\KBD\KBD.EXE" [2005-02-02 61440] "Home Theater SchSvr"="c:\program files\Common Files\InterVideo\SchSvr\SchSvr.exe" [2005-07-18 106496] "WINREMOTE"="c:\program files\InterVideo\Common\Bin\WinRemote.exe" [2005-07-18 262144] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2005-05-04 278528] "PS2"="c:\windows\system32\ps2.exe" [2004-10-25 90112] "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-04-04 36272] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-03-24 952768] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2005-10-11 98304] "NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648] c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Menu Start\Programma's\Opstarten\ LimeWire On Startup.lnk - c:\program files\LimeWire\LimeWire.exe [2010-3-30 503808] c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\ BTTray.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-2-27 561213] HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768] Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360] [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"= "c:\\Program Files\\iTunes\\iTunes.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\AVG\\AVG9\\avgupd.exe"= "c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"= "c:\\Program Files\\Common Files\\HP\\Digital Imaging\\Bin\\hpqPhotoCrm.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxs08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe"= "c:\\Program Files\\HP\\HP Software Update\\hpwucli.exe"= "c:\\Program Files\\HP\\Digital Imaging\\smart web printing\\SmartWebPrintExe.exe"= "c:\\Program Files\\LimeWire\\LimeWire.exe"= R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [12/02/2010 18:31 216200] R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [12/02/2010 18:31 242896] R2 avg9wd;AVG Free WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [11/03/2010 19:23 308064] R2 LcSvrAdm;ELSA Administration Service;c:\elsawin\bin\LcSvrAdm.exe [29/03/2010 18:11 147456] R2 LcSvrDba;ELSA DBA Server;c:\elsawin\bin\LcSvrDba.exe [29/03/2010 18:11 233472] R2 LcSvrHis;ELSA Historie Server;c:\elsawin\bin\LcSvrHis.exe [29/03/2010 18:11 217088] R2 LcSvrPAS;ELSA PASS Server;c:\elsawin\bin\LcSvrPas.exe [29/03/2010 18:11 368640] R3 3xHybrid;3xHybrid service;c:\windows\system32\drivers\3xHybrid.sys [11/10/2005 17:14 2786176] R3 LcSvrAuf;ELSA Auftragsverwaltungs Service;c:\elsawin\bin\LcSvrAuf.exe [29/03/2010 18:11 1302528] S2 gupdate;Google Updateservice (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [8/01/2010 22:45 135664] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] HPService REG_MULTI_SZ HPSLPSVC HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc . Inhoud van de 'Gedeelde Taken' map 2010-06-10 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-01-08 20:45] 2010-06-10 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-01-08 20:45] 2010-06-10 c:\windows\Tasks\Norton Security Scan for HP_Eigenaar.job - c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.3.34\Nss.exe [2010-05-27 12:09] 2010-06-11 c:\windows\Tasks\User_Feed_Synchronization-{4602B838-EAFE-414F-BBB5-BB70560C1395}.job - c:\windows\system32\msfeedssync.exe [2009-03-08 03:31] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.google.com/ IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~3\Office10\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2EC7709873947E87.dll/cmsidewiki.html IE: Verzenden naar &Bluetooth-apparaat... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game.zylom.com/activex/zylomgamesplayer.cab . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2010-06-11 10:48 Windows 5.1.2600 Service Pack 3 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: 0 ************************************************************************** . --------------------- DLLs Geladen Onder Lopende Processen --------------------- - - - - - - - > 'explorer.exe'(3432) c:\windows\system32\btmmhook.dll c:\program files\Common Files\Ahead\Lib\NeroSearchBar.dll c:\program files\Common Files\Ahead\Lib\NeroSearchTrayHook.dll c:\program files\Common Files\Ahead\Lib\MFC71U.DLL c:\program files\Common Files\Ahead\Lib\BCGCBPRO800u.dll c:\windows\system32\webcheck.dll . Voltooingstijd: 2010-06-11 10:50:49 ComboFix-quarantined-files.txt 2010-06-11 08:50 ComboFix2.txt 2010-06-09 12:58 Pre-Run: 97.261.674.496 bytes beschikbaar Post-Run: 97.318.817.792 bytes beschikbaar - - End Of File - - FE7FF67A0C4D4FDCA1884247B55E2BE4 Logfile of Trend Micro HijackThis v2.0.3 (BETA) Scan saved at 10:52:32, on 11/06/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\windows\system\hpsysdrv.exe C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\ALCWZRD.EXE C:\Program Files\ASUS\ASUS Remote\RemoteControlAppl.exe C:\HP\KBD\KBD.EXE C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe C:\Program Files\InterVideo\Common\Bin\WinRemote.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\AVG\AVG9\avgwdsvc.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\ElsaWin\bin\LcSvrAdm.exe C:\ElsaWin\bin\LcSvrDba.exe C:\ElsaWin\bin\LcSvrHis.exe C:\ElsaWin\bin\LcSvrPas.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\Program Files\AVG\AVG9\avgnsx.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\AVG\AVG9\avgchsvx.exe C:\Program Files\AVG\AVG9\avgrsx.exe C:\Program Files\AVG\AVG9\avgcsrvx.exe C:\Program Files\iPod\bin\iPodService.exe C:\ElsaWin\bin\LcSvrAuf.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\explorer.exe C:\Program Files\internet explorer\iexplore.exe C:\Program Files\internet explorer\iexplore.exe C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe C:\Program Files\TrendMicro\HiJackThis\HiJackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.5126.1836\swg.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe O4 - HKLM\..\Run: [snelkoppeling naar eigenschappenvenster voor High Definition Audio] HDAShCut.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE O4 - HKLM\..\Run: [RemoteControl] C:\Program Files\ASUS\ASUS Remote\RemoteControlAppl.exe O4 - HKLM\..\Run: [HPHUPD08] c:\Program Files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE O4 - HKLM\..\Run: [Home Theater SchSvr] "C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe" O4 - HKLM\..\Run: [WINREMOTE] "C:\Program Files\InterVideo\Common\Bin\WinRemote.exe" O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" O4 - Startup: LimeWire On Startup.lnk = C:\Program Files\LimeWire\LimeWire.exe O4 - Global Startup: BTTray.lnk = ? O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2EC7709873947E87.dll/cmsidewiki.html O8 - Extra context menu item: Verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O9 - Extra button: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra 'Tools' menuitem: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1262981069093 O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game.zylom.com/activex/zylomgamesplayer.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll O18 - Protocol: vw-wi - {0F3C833F-FB28-40EA-8CB9-6A55B996C3F6} - C:\ElsaWin\bin\wiProt.dll O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: iPod-service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: ELSA Administration Service (LcSvrAdm) - Volkswagen AG - C:\ElsaWin\bin\LcSvrAdm.exe O23 - Service: ELSA Auftragsverwaltungs Service (LcSvrAuf) - Volkswagen AG - C:\ElsaWin\bin\LcSvrAuf.exe O23 - Service: ELSA DBA Server (LcSvrDba) - Volkswagen AG - C:\ElsaWin\bin\LcSvrDba.exe O23 - Service: ELSA Historie Server (LcSvrHis) - Volkswagen AG - C:\ElsaWin\bin\LcSvrHis.exe O23 - Service: ELSA PASS Server (LcSvrPAS) - Volkswagen AG - C:\ElsaWin\bin\LcSvrPas.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe -- End of file - 10970 bytes

internet is na deze scan iets vlugger maar nog niet zoals normaal heb alle kabels nagekeken en deze zijn goed heb ze verwisseld met een andere omdat ik dat al eens eerder heb gehad, maar met andere kabel hetzelfde hier dan het resultaat van de scan ComboFix 10-06-08.05 - HP_Eigenaar 09/06/2010 14:41:10.6.2 - x86 Microsoft Windows XP Home Edition 5.1.2600.3.1252.31.1043.18.1023.591 [GMT 2:00] Gestart vanuit: c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Bureaublad\ComboFix.exe AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF} * Nieuw herstelpunt werd aangemaakt . (((((((((((((((((((( Bestanden Gemaakt van 2010-05-09 to 2010-06-09 )))))))))))))))))))))))))))))) . 2010-10-17 10:00 . 2010-10-17 10:00 -------- d-----w- C:\9bfe8073ddcad9580456b772 2010-10-17 10:00 . 2010-10-17 10:04 -------- d-----w- C:\963d7796bcda1ddaf65528d43bd98c 2010-06-03 19:36 . 2010-06-03 19:36 242896 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgtdix.sys 2010-06-03 19:36 . 2010-06-03 19:36 29512 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgmfx86.sys 2010-05-28 13:53 . 2010-05-28 13:53 503808 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-59982f6f-n\msvcp71.dll 2010-05-28 13:53 . 2010-05-28 13:53 499712 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-59982f6f-n\jmc.dll 2010-05-28 13:53 . 2010-05-28 13:53 348160 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\46\f84c6ae-59982f6f-n\msvcr71.dll 2010-05-28 13:53 . 2010-05-28 13:53 61440 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-7b5267dd-n\decora-sse.dll 2010-05-28 13:53 . 2010-05-28 13:53 12800 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\50\5535ab32-7b5267dd-n\decora-d3d.dll 2010-05-27 12:09 . 2010-05-27 12:09 -------- d-----w- c:\windows\system32\drivers\NSS 2010-05-27 12:09 . 2010-05-27 12:09 -------- d-----w- c:\program files\NortonInstaller 2010-05-26 12:04 . 2010-05-26 12:04 1956656 ----a-w- c:\documents and settings\All Users\Application Data\NOS\Adobe_Downloads\install_flash_player_ax.exe 2010-05-23 18:31 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2010-05-23 18:31 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys 2010-05-23 18:31 . 2010-05-23 18:31 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2010-05-17 18:08 . 2010-05-17 19:36 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\DoctorWeb 2010-05-16 16:57 . 2010-05-23 18:24 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\AskToolbar 2010-05-16 16:53 . 2010-05-17 18:32 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Ahead 2010-05-16 16:49 . 2010-05-23 18:42 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Ahead 2010-05-16 13:47 . 2010-05-30 12:29 -------- d--h--r- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Onlangs geopend 2010-05-15 05:29 . 2010-05-15 05:29 -------- d-----w- c:\program files\VAG-COM 2010-05-10 16:02 . 2010-06-09 09:56 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\HPAppData 2010-05-10 14:29 . 2010-05-10 14:29 -------- d-----w- c:\documents and settings\All Users\Application Data\WEBREG 2010-05-10 14:24 . 2009-04-20 10:23 315904 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\hpfpp70w.dll 2010-05-10 14:24 . 2009-04-20 10:23 123904 ----a-w- c:\windows\system32\hpf3l70w.dll 2010-05-10 14:24 . 2009-04-15 21:53 452408 ----a-r- c:\windows\system32\hpzids01.dll 2010-05-10 14:24 . 2009-02-10 20:03 966656 ----a-r- c:\windows\system32\hpost_p02f.dll 2010-05-10 14:24 . 2009-02-10 20:03 712704 ----a-r- c:\windows\system32\hposwia_p02f.dll 2010-05-10 14:24 . 2009-02-10 20:03 315392 ----a-r- c:\windows\system32\hposc_p02a.dll 2010-05-10 14:24 . 2008-10-28 10:27 372736 ----a-r- c:\windows\system32\hppldcoi.dll 2010-05-10 14:24 . 2008-10-28 10:27 309760 ----a-r- c:\windows\system32\difxapi.dll 2010-05-10 14:06 . 2010-05-10 14:29 210007 ----a-w- c:\windows\hpoins39.dat 2010-05-10 14:06 . 2009-06-05 00:03 703 ------w- c:\windows\hpomdl39.dat . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-10-17 10:10 . 2010-01-18 09:52 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225.010\Application Data\HpUpdate 2010-08-02 11:00 . 2010-01-09 18:20 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\HpUpdate 2010-06-09 09:49 . 2010-05-16 16:29 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\LimeWire 2010-06-03 19:35 . 2010-02-12 16:31 242896 ----a-w- c:\windows\system32\drivers\avgtdix.sys 2010-06-03 19:35 . 2010-02-12 16:31 29584 ----a-w- c:\windows\system32\drivers\avgmfx86.sys 2010-05-27 12:21 . 2005-10-11 15:50 -------- d-----w- c:\program files\Common Files\Symantec Shared 2010-05-27 12:09 . 2009-07-31 09:10 -------- d-----w- c:\documents and settings\All Users\Application Data\Norton 2010-05-27 12:09 . 2009-07-06 16:48 -------- d-----w- c:\program files\Norton Security Scan 2010-05-27 12:09 . 2005-10-11 15:49 -------- d-----w- c:\documents and settings\All Users\Application Data\Symantec 2010-05-27 12:08 . 2008-10-06 13:01 -------- d-----w- c:\documents and settings\All Users\Application Data\NOS 2010-05-16 16:44 . 2005-10-11 15:33 -------- d---a-w- c:\program files\Common Files\LightScribe 2010-05-16 16:28 . 2006-05-04 21:09 -------- d-----w- c:\program files\LimeWire 2010-05-10 14:29 . 2010-01-08 16:15 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\HP 2010-05-10 14:28 . 2005-10-11 15:18 -------- d-----w- c:\program files\HP 2010-05-10 14:26 . 2005-10-11 15:20 -------- d-----w- c:\documents and settings\All Users\Application Data\HP 2010-05-10 14:25 . 2010-01-08 16:15 31672 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2010-05-10 14:21 . 2009-02-03 19:29 -------- d-----w- c:\documents and settings\All Users\Application Data\HP Product Assistant 2010-05-04 05:42 . 2005-10-11 15:04 -------- d-----w- c:\program files\Common Files\Java 2010-05-04 05:42 . 2010-05-04 05:42 503808 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-3e50dd3c-n\msvcp71.dll 2010-05-04 05:42 . 2010-05-04 05:42 499712 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-3e50dd3c-n\jmc.dll 2010-05-04 05:42 . 2010-05-04 05:42 348160 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-3e50dd3c-n\msvcr71.dll 2010-05-04 05:42 . 2010-05-04 05:42 61440 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-7e535e7c-n\decora-sse.dll 2010-05-04 05:42 . 2010-05-04 05:42 12800 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-7e535e7c-n\decora-d3d.dll 2010-05-04 05:41 . 2010-05-04 05:41 411368 ----a-w- c:\windows\system32\deployJava1.dll 2010-04-14 12:00 . 2010-04-14 12:00 -------- d-----w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Uniblue 2010-04-14 11:55 . 2005-10-11 15:36 -------- d-----w- c:\program files\Common Files\Adobe 2010-04-01 17:33 . 2004-12-03 17:15 70546 ----a-w- c:\windows\system32\perfc013.dat 2010-04-01 17:33 . 2004-12-03 17:15 443836 ----a-w- c:\windows\system32\perfh013.dat 2010-03-16 13:41 . 2010-01-08 17:08 152576 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\jre1.6.0_17\lzma.dll 2010-03-16 13:41 . 2010-01-08 17:08 79488 ----a-w- c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll 2010-03-11 17:23 . 2010-03-11 17:23 12464 ----a-w- c:\windows\system32\avgrsstx.dll 2010-03-11 17:23 . 2010-02-12 16:31 216200 ----a-w- c:\windows\system32\drivers\avgldx86.sys 2004-08-09 21:30 . 2006-07-05 20:03 40960 ----a-w- c:\program files\Uninstall_CDS.exe 2006-02-01 07:02 . 2006-01-31 23:02 22 -csha-w- c:\windows\SMINST\HPCD.sys . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks] "{A3BC75A2-1F87-4686-AA43-5347D756017C}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2009-11-25 1230080] [HKEY_CLASSES_ROOT\clsid\{a3bc75a2-1f87-4686-aa43-5347d756017c}] [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}] 2009-11-25 12:01 1230080 ----a-w- c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] "{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2009-11-25 1230080] [HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser] "{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2009-11-25 1230080] [HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-01-04 68856] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2006-05-09 94208] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040] "hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 52736] "Snelkoppeling naar eigenschappenvenster voor High Definition Audio"="HDAShCut.exe" [2005-01-07 61952] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-08-02 7110656] "SoundMan"="SOUNDMAN.EXE" [2005-05-04 90112] "AlcWzrd"="ALCWZRD.EXE" [2005-05-04 2805248] "RemoteControl"="c:\program files\ASUS\ASUS Remote\RemoteControlAppl.exe" [2005-06-10 61440] "HPHUPD08"="c:\program files\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe" [2005-06-02 49152] "KBD"="c:\hp\KBD\KBD.EXE" [2005-02-02 61440] "Home Theater SchSvr"="c:\program files\Common Files\InterVideo\SchSvr\SchSvr.exe" [2005-07-18 106496] "WINREMOTE"="c:\program files\InterVideo\Common\Bin\WinRemote.exe" [2005-07-18 262144] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2005-05-04 278528] "PS2"="c:\windows\system32\ps2.exe" [2004-10-25 90112] "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-04-04 36272] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-03-24 952768] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2005-10-11 98304] "NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648] c:\documents and settings\HP_Eigenaar.UW-4B58D8528225\Menu Start\Programma's\Opstarten\ LimeWire On Startup.lnk - c:\program files\LimeWire\LimeWire.exe [2010-3-30 503808] c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\ BTTray.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-2-27 561213] HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768] Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360] [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"= "c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"= "c:\\Program Files\\iTunes\\iTunes.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\AVG\\AVG9\\avgupd.exe"= "c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"= "c:\\Program Files\\Common Files\\HP\\Digital Imaging\\Bin\\hpqPhotoCrm.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxs08.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe"= "c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe"= "c:\\Program Files\\HP\\HP Software Update\\hpwucli.exe"= "c:\\Program Files\\HP\\Digital Imaging\\smart web printing\\SmartWebPrintExe.exe"= "c:\\Program Files\\LimeWire\\LimeWire.exe"= R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [12/02/2010 18:31 216200] R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [12/02/2010 18:31 242896] R2 avg9wd;AVG Free WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [11/03/2010 19:23 308064] R2 LcSvrAdm;ELSA Administration Service;c:\elsawin\bin\LcSvrAdm.exe [29/03/2010 18:11 147456] R2 LcSvrDba;ELSA DBA Server;c:\elsawin\bin\LcSvrDba.exe [29/03/2010 18:11 233472] R2 LcSvrHis;ELSA Historie Server;c:\elsawin\bin\LcSvrHis.exe [29/03/2010 18:11 217088] R2 LcSvrPAS;ELSA PASS Server;c:\elsawin\bin\LcSvrPas.exe [29/03/2010 18:11 368640] R3 3xHybrid;3xHybrid service;c:\windows\system32\drivers\3xHybrid.sys [11/10/2005 17:14 2786176] R3 LcSvrAuf;ELSA Auftragsverwaltungs Service;c:\elsawin\bin\LcSvrAuf.exe [29/03/2010 18:11 1302528] S2 gupdate;Google Updateservice (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [8/01/2010 22:45 135664] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] HPService REG_MULTI_SZ HPSLPSVC HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12 hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc . Inhoud van de 'Gedeelde Taken' map 2010-06-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-01-08 20:45] 2010-06-09 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2010-01-08 20:45] 2010-06-07 c:\windows\Tasks\Norton Security Scan for HP_Eigenaar.job - c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.3.34\Nss.exe [2010-05-27 12:09] 2010-06-09 c:\windows\Tasks\User_Feed_Synchronization-{4602B838-EAFE-414F-BBB5-BB70560C1395}.job - c:\windows\system32\msfeedssync.exe [2009-03-08 03:31] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.google.com/ IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~3\Office10\EXCEL.EXE/3000 IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2EC7709873947E87.dll/cmsidewiki.html IE: Verzenden naar &Bluetooth-apparaat... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game.zylom.com/activex/zylomgamesplayer.cab . - - - - ORPHANS VERWIJDERD - - - - WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) HKLM-Run-NWEReboot - (no file) ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2010-06-09 14:55 Windows 5.1.2600 Service Pack 3 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: 0 ************************************************************************** . --------------------- DLLs Geladen Onder Lopende Processen --------------------- - - - - - - - > 'explorer.exe'(4976) c:\windows\system32\btmmhook.dll c:\program files\Common Files\Ahead\Lib\NeroSearchBar.dll c:\program files\Common Files\Ahead\Lib\NeroSearchTrayHook.dll c:\program files\Common Files\Ahead\Lib\MFC71U.DLL c:\program files\Common Files\Ahead\Lib\BCGCBPRO800u.dll c:\windows\system32\webcheck.dll . Voltooingstijd: 2010-06-09 14:58:13 ComboFix-quarantined-files.txt 2010-06-09 12:58 Pre-Run: 97.271.918.592 bytes beschikbaar Post-Run: 97.816.272.896 bytes beschikbaar - - End Of File - - 5F14A48BD130A3454E48568E7C7BB38F