sofianmaster

Nou ja, ik ga eens een HJT-Logje maken en misschien lost dat het wel op. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 17:09:00, on 19/02/2010 Platform: Windows Vista SP3 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.18882) Boot mode: Normal Running processes: C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe C:\Program Files (x86)\Windows Sidebar\sidebar.exe C:\Program Files (x86)\VoipBuster.com\VoipBuster\VoipBuster.exe C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe C:\Program Files\Alwil Software\Avast4\ashDisp.exe C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe C:\Windows\ffpext\ffpsrv.exe C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe C:\Program Files (x86)\Windows Sidebar\sidebar.exe C:\Program Files (x86)\Xfire\Xfire.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Windows Live\Toolbar\wltuser.exe C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Dell / MSN R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O1 - Hosts: ::1 localhost O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll O4 - HKLM\..\Run: [Dell DataSafe Online] "C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe" /m O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [dellsupportcenter] "C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe" /P dellsupportcenter O4 - HKLM\..\Run: [ffpsrv] c:\windows\ffpext\ffpsrv.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\RunOnce: [sTToasterLauncher] C:\program files (x86)\Dell DataSafe Local Backup\toasterLauncher.exe O4 - HKCU\..\Run: [sidebar] C:\Program Files (x86)\Windows Sidebar\sidebar.exe O4 - HKCU\..\Run: [VoipBuster] "C:\Program Files (x86)\VoipBuster.com\VoipBuster\VoipBuster.exe" -nosplash -minimized O4 - HKCU\..\Run: [iSUSPM Startup] C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKCU\..\Run: [iSUSScheduler] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') O4 - .DEFAULT User Startup: Dell Dock First Run.lnk = C:\Program Files\Dell\DellDock\DellDock.exe (User 'Default user') O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe O4 - Startup: LogMeIn Hamachi.lnk = C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe O4 - Global Startup: Logitech SetPoint.lnk = ? O4 - Global Startup: Xfire.lnk = C:\Program Files (x86)\Xfire\Xfire.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Formulieren opslaan - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html O8 - Extra context menu item: Invul Formulieren - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html O8 - Extra context menu item: Menu aanpassen - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html O8 - Extra context menu item: RoboForm Werkbalk - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Formulier Invullen - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html O9 - Extra 'Tools' menuitem: Invul Formulieren - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html O9 - Extra button: Opslaan - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html O9 - Extra 'Tools' menuitem: Formulieren opslaan - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O9 - Extra 'Tools' menuitem: RoboForm Werkbalk - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL O13 - Gopher Prefix: O16 - DPF: {C212D449-8B3C-41F2-BD9A-047BD770550F} (Perparer Class) - http://www.fiaa.eu/OPLauncher.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Andrea RT Filters Service (AERTFilters) - Andrea Electronics Corporation - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Dell AIO Center Service (deMntrService) - Dell - C:\Program Files\Dell\MFP_DELL\deMntrService.exe O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing) O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe O23 - Service: Process Monitor (LVPrcS64) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe O23 - Service: SoftThinks Agent Service (SftService) - SoftThinks - C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: SupportSoft Sprocket Service (DellSupportCenter) (sprtsvc_DellSupportCenter) - SupportSoft, Inc. - C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files (x86)\Common Files\SureThing Shared\stllssvr.exe O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Windows\System32\WLTRYSVC.EXE (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 12480 bytes

Werkt zonder enkel probleem

Al bedankt voor je reactie, maar als ik op de explorer.exe druk dan komt er ee nieuw scherm naar mijn documenten

Goeiendag allemaal Ik heb al zo'n ongeveer 2 maanden een nieuwe pc. Het enige probleem hierbij is als ik configuratiescherm open staat er dan explorer.exe werkt niet meer. Kunnen jullie mij hierbij helpen? (Deze error kwam ook al van toen ik de computer net kreeg)

Vroeger alleen bij sommige games(pes 2010, Crossfire). Nu altijd. Zelfs als ik een video bekijk op youtube komt er een BSOD. Maar ik wil iets anders vragen. Vandaag krijg ik een nieuwe pc en ik wil graag deze computer(met dell restore manager) terug krijgen naar de fabrieksinstellingen. Zou deze BSOD dan hersteld zijn of niet? Dank u

Na een paar weken testen heb ik ondervonden dat de BSOD nog steeds voorkomt.

Ik heb systeemherstel uitgevoerd tot 5 dagen geleden(heb toen veel drivers van Dell gedownload). De 2de BSOD is verdwenen, alleen de 1ste komt nog vaak voor

neen, jammer genoeg nog steeds de BSOD. Ik heb het programma ook opnieuw geïnstalleerd maar zonder succes

DirectX versie: 11 wat eigenlijk vreemd is. Ik had nl. DirectX 10

Merk: Dell Type: PP29L Serie nr: 07146 Misschien heb je deze codes ook nodig: ServiceTag: FR39M3J Express Code: 342-898-091-83 P/N: HT588 A00 Alvast bedankt

Ik heb een intel xD en het probleem is dat ik een laptop heb. M.a.w de videokaart is geïntegreerd op het moederbord.

Bij apparaatbeheer zie ik niet wat ik zou moeten verwijderen. Ik heb hier nog een afbeelding. Misschien zie je wat ik moet verwijderen

Mijn vriend speelt dit spel al heel lang zonder problemen. En zoals je me nu vertelt is het wel degelijk de videokaart. Het kan aan de update liggen. Weet je misschien hoe ik de update van de videokaart kan verwijderen?

Ik begrijp niet helemaal hoe je die memtest moet runnen. Ook heb ik sinds vandaag een andere BSOD. Microsoft ® Windows Debugger Version 6.11.0001.404 X86 Copyright © Microsoft Corporation. All rights reserved. Loading Dump File [C:\Windows\Minidump\Mini122409-02.dmp] Mini Kernel Dump File: Only registers and stack trace are available Symbol search path is: SRV*DownstreamStore*Symbol information Executable search path is: Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x86 compatible Product: WinNt, suite: TerminalServer SingleUserTS Personal Built by: 6002.18082.x86fre.vistasp2_gdr.090803-2339 Machine Name: Kernel base = 0x8244e000 PsLoadedModuleList = 0x82565c70 Debug session time: Thu Dec 24 11:13:55.704 2009 (GMT+1) System Uptime: 0 days 0:09:29.465 Loading Kernel Symbols ............................................................... ................................................................ ................................................................ Loading User Symbols Loading unloaded module list ...... ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck D1, {8a3e2c50, ff, 0, c4845167} Unable to load image \??\C:\Windows\system32\XDva317.sys, Win32 error 0n2 *** WARNING: Unable to verify timestamp for XDva317.sys *** ERROR: Module load completed but symbols could not be loaded for XDva317.sys Probably caused by : XDva317.sys ( XDva317+8167 ) Followup: MachineOwner --------- 0: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1) An attempt was made to access a pageable (or completely invalid) address at an interrupt request level (IRQL) that is too high. This is usually caused by drivers using improper addresses. If kernel debugger is available get stack backtrace. Arguments: Arg1: 8a3e2c50, memory referenced Arg2: 000000ff, IRQL Arg3: 00000000, value 0 = read operation, 1 = write operation Arg4: c4845167, address which referenced memory Debugging Details: ------------------ READ_ADDRESS: GetPointerFromAddress: unable to read from 82585868 Unable to read MiSystemVaType memory at 82565420 8a3e2c50 CURRENT_IRQL: 0 FAULTING_IP: XDva317+8167 c4845167 ?? ??? ADDITIONAL_DEBUG_TEXT: The trap occurred when interrupts are disabled on the target. BUGCHECK_STR: DISABLED_INTERRUPT_FAULT CUSTOMER_CRASH_COUNT: 2 DEFAULT_BUCKET_ID: VERIFIER_ENABLED_VISTA_MINIDUMP PROCESS_NAME: crossfire.exe TRAP_FRAME: b5692620 -- (.trap 0xffffffffb5692620) ErrCode = 00000000 eax=85801f50 ebx=c4848790 ecx=8a3e2c50 edx=8a3e2c50 esi=00000050 edi=b5692714 eip=c4845167 esp=b5692694 ebp=b56926d0 iopl=0 nv up di pl zr na pe nc cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010046 XDva317+0x8167: c4845167 ?? ??? Resetting default scope LAST_CONTROL_TRANSFER: from c4845167 to 8249bfb9 STACK_TEXT: b5692620 c4845167 badb0d00 8a3e2c50 00000060 nt!KiTrap0E+0x2e1 WARNING: Stack unwind information not available. Following frames may be wrong. b5692690 b5692714 c484a00c 9625c000 b5692cf0 XDva317+0x8167 b56926d0 c4843ed1 82585b00 82585b40 c484a00c 0xb5692714 b56926f8 c484564d b5692738 b5692714 d8492e58 XDva317+0x6ed1 b56928e4 c483e075 d8492e58 000001a8 d8492e58 XDva317+0x864d b5692bd0 c484011a d8076f68 c77e9358 00000001 XDva317+0x1075 b5692c0c 827306be d5846448 d8076f68 c77e9358 XDva317+0x311a b5692c30 8249292d d8076fd8 d8076f68 d5846448 nt!IovCallDriver+0x23f b5692c44 826946a1 c77e9358 d8076f68 d8076fd8 nt!IofCallDriver+0x1b b5692c64 82694e46 d5846448 c77e9358 0012cb00 nt!IopSynchronousServiceTail+0x1d9 b5692d00 82695f10 d5846448 d8076f68 00000000 nt!IopXxxControlFile+0x6b7 b5692d34 82498c7a 000005a0 00000000 00000000 nt!NtDeviceIoControlFile+0x2a b5692d34 773d5e74 000005a0 00000000 00000000 nt!KiFastCallEntry+0x12a 0012cb7c 00000000 00000000 00000000 00000000 0x773d5e74 STACK_COMMAND: kb FOLLOWUP_IP: XDva317+8167 c4845167 ?? ??? SYMBOL_STACK_INDEX: 1 SYMBOL_NAME: XDva317+8167 FOLLOWUP_NAME: MachineOwner MODULE_NAME: XDva317 IMAGE_NAME: XDva317.sys DEBUG_FLR_IMAGE_TIMESTAMP: 4b18ac6d FAILURE_BUCKET_ID: DISABLED_INTERRUPT_FAULT_VRF_XDva317+8167 BUCKET_ID: DISABLED_INTERRUPT_FAULT_VRF_XDva317+8167 Followup: MachineOwner ---------- Post toegevoegd om 11:26 ---------- Vorige post was om 11:25 ---------- Wat ik nog vergeten te melden ben is dat deze 2 BSOD's maar in één spel voorkomen nl. Crossfire

Ik heb een Intel GM965 Express Chipset Family. En de videokaart is up-to-date.

Goeiedag allemaal, Ik heb regelmatig last van BSOD's en dankzij Dell's hulp heb ik iets met Windows Debugger kunnen maken. Na het probleem gezien te hebben(dxgkrnl) zat ik opeens vast. Wat zou ik nu moeten doen? Hier is nog het dump filetje. Loading Dump File [C:\Windows\Minidump\Mini122209-01.dmp] Mini Kernel Dump File: Only registers and stack trace are available Symbol search path is: SRV*DownstreamStore*Symbol information Executable search path is: Windows Server 2008/Windows Vista Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x86 compatible Product: WinNt, suite: TerminalServer SingleUserTS Personal Built by: 6002.18082.x86fre.vistasp2_gdr.090803-2339 Machine Name: Kernel base = 0x82444000 PsLoadedModuleList = 0x8255bc70 Debug session time: Tue Dec 22 19:14:16.658 2009 (GMT+1) System Uptime: 0 days 9:59:19.617 Loading Kernel Symbols ............................................................... ................................................................ ................................................................ . Loading User Symbols Loading unloaded module list ...... ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* Use !analyze -v to get detailed debugging information. BugCheck D1, {4, 2, 1, 8e66f8ce} Unable to load image \SystemRoot\System32\drivers\dxgkrnl.sys, Win32 error 0n2 *** WARNING: Unable to verify timestamp for dxgkrnl.sys *** ERROR: Module load completed but symbols could not be loaded for dxgkrnl.sys Probably caused by : dxgkrnl.sys ( dxgkrnl+198ce ) Followup: MachineOwner --------- 0: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* DRIVER_IRQL_NOT_LESS_OR_EQUAL (d1) An attempt was made to access a pageable (or completely invalid) address at an interrupt request level (IRQL) that is too high. This is usually caused by drivers using improper addresses. If kernel debugger is available get stack backtrace. Arguments: Arg1: 00000004, memory referenced Arg2: 00000002, IRQL Arg3: 00000001, value 0 = read operation, 1 = write operation Arg4: 8e66f8ce, address which referenced memory Debugging Details: ------------------ WRITE_ADDRESS: GetPointerFromAddress: unable to read from 8257b868 Unable to read MiSystemVaType memory at 8255b420 00000004 CURRENT_IRQL: 2 FAULTING_IP: dxgkrnl+198ce 8e66f8ce ?? ??? CUSTOMER_CRASH_COUNT: 1 DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT BUGCHECK_STR: 0xD1 PROCESS_NAME: dwm.exe TRAP_FRAME: 9766a6ec -- (.trap 0xffffffff9766a6ec) ErrCode = 00000002 eax=00000000 ebx=919c18b8 ecx=b3121850 edx=8553f334 esi=00000000 edi=84d42008 eip=8e66f8ce esp=9766a760 ebp=9766a770 iopl=0 nv up ei ng nz na pe cy cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010287 dxgkrnl+0x198ce: 8e66f8ce ?? ??? Resetting default scope LAST_CONTROL_TRANSFER: from 8e66f8ce to 82491fb9 STACK_TEXT: 9766a6ec 8e66f8ce badb0d00 8553f334 919c1800 nt!KiTrap0E+0x2e1 WARNING: Stack unwind information not available. Following frames may be wrong. 9766a75c b31216d0 00000000 919c1c66 919c1b00 dxgkrnl+0x198ce 9766a770 8e6e8a9f 919c1c64 b3121850 b3121858 0xb31216d0 9766a7f0 8e6e629a 919c1c64 00000001 c4725210 dxgkrnl+0x92a9f 9766a818 8e699059 b31216d0 9766aa30 c4725210 dxgkrnl+0x9029a 9766a9b0 8e69b088 00000000 c000ff40 00000000 dxgkrnl+0x43059 9766aba4 8e69bbf9 ac06ec58 00000000 1901efcb dxgkrnl+0x45088 9766ad58 8248ec7a 004d0027 01b3f5d0 775e5e74 dxgkrnl+0x45bf9 9766ad58 775e5e74 004d0027 01b3f5d0 775e5e74 nt!KiFastCallEntry+0x12a 01b3f5d0 00000000 00000000 00000000 00000000 0x775e5e74 STACK_COMMAND: kb FOLLOWUP_IP: dxgkrnl+198ce 8e66f8ce ?? ??? SYMBOL_STACK_INDEX: 1 SYMBOL_NAME: dxgkrnl+198ce FOLLOWUP_NAME: MachineOwner MODULE_NAME: dxgkrnl IMAGE_NAME: dxgkrnl.sys DEBUG_FLR_IMAGE_TIMESTAMP: 4abc1c72 FAILURE_BUCKET_ID: 0xD1_dxgkrnl+198ce BUCKET_ID: 0xD1_dxgkrnl+198ce Followup: MachineOwner ---------

Dit is het logje Results of screen317's Security Check version 0.99.1 Windows Vista Service Pack 2 (UAC is enabled) `````````````````````````````` Antivirus/Firewall Check: avast! Antivirus Antivirus up to date! (On Access scanning disabled!) `````````````````````````````` Anti-malware/Other Utilities Check: Ad-Aware Spybot - Search & Destroy HijackThis 2.0.2 CCleaner Eusing Free Registry Cleaner Java 6 Update 17 Adobe Flash Player 10 Adobe Reader 9.2 Adobe Reader 9.2 - Nederlands `````````````````````````````` Process Check: objlist.exe by Laurent Ad-Aware AAWService.exe Ad-Aware AAWTray.exe is disabled! `````````````````````````````` DNS Vulnerability Check: Unknown. This method cannot test your vulnerability to DNS cache poisoning. `````````End of Log```````````

Combofix ComboFix 09-11-28.04 - Sofian 29/11/2009 14:39.10.2 - x86 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.32.1043.18.2037.899 [GMT 1:00] Gestart vanuit: c:\users\Sofian\Desktop\ComboFix.exe gebruikte Opdracht switches :: c:\users\Sofian\Desktop\CFScript.txt AV: avast! antivirus 4.8.1351 [VPS 091121-1] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D} AV: Lavasoft Ad-Watch Live! Anti-virus *On-access scanning disabled* (Updated) {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33} SP: avast! antivirus 4.8.1351 [VPS 091121-1] *enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D} SP: Lavasoft Ad-Watch Live! *enabled* (Updated) {67844DAE-4F77-4D69-9457-98E8CFFDAA22} SP: Spybot - Search and Destroy *disabled* (Outdated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9} SP: Windows Defender *disabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} FILE :: "c:\windows\SDE9B2FEC(285).tmp" "c:\windows\SDE9B2FEC(559).tmp" "c:\windows\SDE9B2FEC.tmp" "c:\windows\svcadmin.exe" "c:\windows\System32\658BC72326.sys" "c:\windows\system32\GameMon.des" . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\LOG.TXT c:\windows\SDE9B2FEC(285).tmp c:\windows\SDE9B2FEC(559).tmp c:\windows\SDE9B2FEC.tmp c:\windows\svcadmin.exe c:\windows\System32\658BC72326.sys c:\windows\system32\GameMon.des . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Service_npggsvc -------\Service_Anyplace Control Security (((((((((((((((((((( Bestanden Gemaakt van 2009-10-28 to 2009-11-29 )))))))))))))))))))))))))))))) . 2009-11-29 14:01 . 2009-11-29 14:01 -------- d-----w- c:\users\Public\AppData\Local\temp 2009-11-29 14:01 . 2009-11-29 14:01 -------- d-----w- c:\users\Default\AppData\Local\temp 2009-11-28 16:52 . 2009-11-29 14:08 4096 d-----w- c:\users\Sofian\AppData\Local\temp 2009-11-28 12:49 . 2009-11-26 16:41 52224 ----a-w- c:\users\Sofian\AppData\Roaming\Mozilla\Firefox\Profiles\yo9qwklf.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\FFExternalAlert.dll 2009-11-28 12:49 . 2009-11-26 16:41 114688 ----a-w- c:\users\Sofian\AppData\Roaming\Mozilla\Firefox\Profiles\yo9qwklf.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\npmozax.dll 2009-11-27 19:21 . 2009-11-27 19:21 -------- d-----w- c:\users\Sofian\AppData\Roaming\Paquet Builder 2009-11-27 19:21 . 2009-11-27 19:21 4096 d-----w- c:\program files\Paquet Builder 2009-11-27 19:15 . 2009-11-27 19:15 4096 d-----w- c:\program files\7-Zip 2009-11-26 20:56 . 2009-11-26 20:56 4096 d-----w- c:\program files\gBurner 2009-11-25 17:51 . 2009-10-29 09:17 2048 ----a-w- c:\windows\system32\tzres.dll 2009-11-25 17:50 . 2009-11-25 17:50 -------- d-----w- c:\program files\MSXML 4.0 2009-11-25 12:31 . 2009-08-11 16:44 1401856 ----a-w- c:\windows\system32\msxml6.dll 2009-11-25 12:31 . 2009-08-11 16:44 1248768 ----a-w- c:\windows\system32\msxml3.dll 2009-11-24 18:42 . 2009-11-24 18:42 247296 ----a-w- c:\users\Sofian\AppData\Roaming\SystemRequirementsLab\SRLProxy_srl_4_0_11_0_d_ind.dll 2009-11-24 18:42 . 2009-11-24 18:42 247296 ----a-w- c:\users\Sofian\AppData\Roaming\SystemRequirementsLab\SRLProxy_srl_4_0_11_0_c_ind.dll 2009-11-24 18:42 . 2009-11-24 18:42 247296 ----a-w- c:\users\Sofian\AppData\Roaming\SystemRequirementsLab\SRLProxy_srl_4_0_11_0_b_ind.dll 2009-11-24 18:42 . 2009-11-24 18:42 247296 ----a-w- c:\users\Sofian\AppData\Roaming\SystemRequirementsLab\SRLProxy_srl_4_0_11_0_a_ind.dll 2009-11-23 17:45 . 2001-10-28 16:42 116224 ----a-w- c:\windows\system32\pdfcmnnt.dll 2009-11-23 17:45 . 2009-11-23 17:46 4096 d-----w- c:\program files\PDFCreator 2009-11-23 17:45 . 1998-07-06 00:00 23552 ----a-w- c:\windows\system32\MSMPIDE.DLL 2009-11-23 15:13 . 2009-11-02 19:42 195456 ------w- c:\windows\system32\MpSigStub.exe 2009-11-22 20:40 . 2009-11-22 20:40 -------- d-----w- c:\program files\Windows Portable Devices 2009-11-22 20:35 . 2009-11-22 20:35 -------- d-----w- c:\windows\'Full Speed' Internet Booster + Performance Tests 2009-11-22 19:49 . 2009-09-10 02:00 92672 ----a-w- c:\windows\system32\UIAnimation.dll 2009-11-22 19:49 . 2009-09-10 02:01 3023360 ----a-w- c:\windows\system32\UIRibbon.dll 2009-11-22 19:49 . 2009-09-10 02:00 1164800 ----a-w- c:\windows\system32\UIRibbonRes.dll 2009-11-22 19:47 . 2009-10-08 21:07 4096 ----a-w- c:\windows\system32\oleaccrc.dll 2009-11-22 19:47 . 2009-10-08 21:08 234496 ----a-w- c:\windows\system32\oleacc.dll 2009-11-22 19:47 . 2009-10-08 21:08 555520 ----a-w- c:\windows\system32\UIAutomationCore.dll 2009-11-22 19:19 . 2009-11-22 19:20 -------- d-----w- c:\windows\system32\ca-ES 2009-11-22 19:19 . 2009-11-22 19:20 -------- d-----w- c:\windows\system32\eu-ES 2009-11-22 19:19 . 2009-11-22 19:20 -------- d-----w- c:\windows\system32\vi-VN 2009-11-22 17:54 . 2009-11-22 17:54 -------- d-----w- c:\windows\system32\EventProviders 2009-11-22 12:56 . 2009-04-11 06:28 289792 ----a-w- c:\windows\system32\spinstall.exe 2009-11-22 12:55 . 2009-04-11 06:28 1143296 ----a-w- c:\windows\system32\wercon.exe 2009-11-22 12:54 . 2009-04-11 06:28 177664 ----a-w- c:\windows\system32\WSDMon.dll 2009-11-22 12:53 . 2009-04-11 06:28 218624 ----a-w- c:\windows\system32\wdscore.dll 2009-11-22 12:53 . 2009-04-11 06:27 130560 ----a-w- c:\windows\system32\PkgMgr.exe 2009-11-22 12:52 . 2009-04-11 06:28 247808 ----a-w- c:\windows\system32\drvstore.dll 2009-11-22 11:26 . 2009-11-22 21:30 20480 d-----w- c:\program files\Eusing Free Registry Cleaner 2009-11-21 19:05 . 2008-05-27 04:59 18904 ----a-w- c:\windows\system32\StructuredQuerySchemaTrivial.bin 2009-11-21 18:25 . 2009-11-21 18:25 -------- dc----w- C:\PerfLogs 2009-11-21 17:36 . 2008-01-18 22:36 6656 ----a-w- c:\windows\system32\sdspres.dll 2009-11-21 17:36 . 2008-01-18 22:33 193024 ----a-w- c:\windows\system32\recdisc.exe 2009-11-21 17:35 . 2008-01-18 22:36 28160 ----a-w- c:\windows\system32\sxproxy.dll 2009-11-21 17:25 . 2008-01-18 22:42 94776 ----a-w- c:\windows\system32\MigAutoPlay.exe 2009-11-21 17:24 . 2008-01-18 22:38 155704 ----a-w- c:\windows\system32\dssenh.dll 2009-11-21 17:23 . 2008-01-18 22:33 96768 ----a-w- c:\windows\system32\wininit.exe 2009-11-21 16:59 . 2009-11-21 16:59 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help 2009-11-21 15:05 . 2009-11-21 15:05 61440 ----a-w- c:\windows\system32\winipsec.dll 2009-11-21 15:05 . 2009-11-21 15:05 272896 ----a-w- c:\windows\system32\polstore.dll 2009-11-21 15:01 . 2009-11-21 15:01 9728 ----a-w- c:\windows\system32\TCPSVCS.EXE 2009-11-21 15:01 . 2009-11-21 15:01 8704 ----a-w- c:\windows\system32\HOSTNAME.EXE 2009-11-21 15:01 . 2009-11-21 15:01 17920 ----a-w- c:\windows\system32\netevent.dll 2009-11-21 15:01 . 2009-11-21 15:01 11264 ----a-w- c:\windows\system32\MRINFO.EXE 2009-11-21 15:01 . 2009-11-21 15:01 904776 ----a-w- c:\windows\system32\drivers\tcpip.sys 2009-11-21 15:01 . 2009-11-21 15:01 27136 ----a-w- c:\windows\system32\NETSTAT.EXE 2009-11-21 15:01 . 2009-11-21 15:01 19968 ----a-w- c:\windows\system32\ARP.EXE 2009-11-21 15:01 . 2009-11-21 15:01 17920 ----a-w- c:\windows\system32\ROUTE.EXE 2009-11-21 15:01 . 2009-11-21 15:01 105984 ----a-w- c:\windows\system32\netiohlp.dll 2009-11-21 15:01 . 2009-11-21 15:01 10240 ----a-w- c:\windows\system32\finger.exe 2009-11-21 15:01 . 2009-11-21 15:01 30720 ----a-w- c:\windows\system32\drivers\tcpipreg.sys 2009-11-21 14:58 . 2009-11-21 14:58 127488 ----a-w- c:\windows\system32\L2SecHC.dll 2009-11-21 14:58 . 2009-11-21 14:58 68096 ----a-w- c:\windows\system32\wlanhlp.dll 2009-11-21 14:58 . 2009-11-21 14:58 65024 ----a-w- c:\windows\system32\wlanapi.dll 2009-11-21 14:58 . 2009-11-21 14:58 513536 ----a-w- c:\windows\system32\wlansvc.dll 2009-11-21 14:58 . 2009-11-21 14:58 302592 ----a-w- c:\windows\system32\wlansec.dll 2009-11-21 14:58 . 2009-11-21 14:58 293376 ----a-w- c:\windows\system32\wlanmsm.dll 2009-11-21 14:54 . 2009-11-21 14:54 34304 ----a-w- c:\windows\system32\atmlib.dll 2009-11-21 14:54 . 2009-11-21 14:54 289792 ----a-w- c:\windows\system32\atmfd.dll 2009-11-21 14:54 . 2009-11-21 14:54 156672 ----a-w- c:\windows\system32\t2embed.dll 2009-11-21 14:54 . 2009-11-21 14:54 23552 ----a-w- c:\windows\system32\lpk.dll 2009-11-21 14:54 . 2009-11-21 14:54 72704 ----a-w- c:\windows\system32\fontsub.dll 2009-11-21 14:54 . 2009-11-21 14:54 10240 ----a-w- c:\windows\system32\dciman32.dll 2009-11-21 14:52 . 2009-11-21 14:52 218624 ----a-w- c:\windows\system32\msv1_0.dll 2009-11-21 14:51 . 2009-11-21 14:51 9728 ----a-w- c:\windows\system32\infoctrs.dll 2009-11-21 14:51 . 2009-11-21 14:51 16384 ----a-w- c:\windows\system32\infoadmn.dll 2009-11-21 14:45 . 2009-11-21 14:45 98816 ----a-w- c:\windows\system32\mfps.dll 2009-11-21 14:45 . 2009-11-21 14:45 53248 ----a-w- c:\windows\system32\rrinstaller.exe 2009-11-21 14:45 . 2009-11-21 14:45 2868224 ----a-w- c:\windows\system32\mf.dll 2009-11-21 14:45 . 2009-11-21 14:45 24576 ----a-w- c:\windows\system32\mfpmp.exe 2009-11-21 14:45 . 2009-11-21 14:45 2048 ----a-w- c:\windows\system32\mferror.dll 2009-11-21 14:38 . 2009-11-21 14:38 71680 ----a-w- c:\windows\system32\atl.dll 2009-11-21 14:34 . 2009-11-21 14:34 3600456 ----a-w- c:\windows\system32\ntkrnlpa.exe 2009-11-21 14:34 . 2009-11-21 14:34 3548216 ----a-w- c:\windows\system32\ntoskrnl.exe 2009-11-21 14:33 . 2009-11-21 14:33 36864 ----a-w- c:\windows\system32\mqise.dll 2009-11-21 14:33 . 2009-11-21 14:33 126464 ----a-w- c:\windows\system32\drivers\mqac.sys 2009-11-21 14:32 . 2009-11-21 14:32 917504 ----a-w- c:\windows\system32\mqqm.dll 2009-11-21 14:32 . 2009-11-21 14:32 89600 ----a-w- c:\windows\system32\mqlogmgr.dll 2009-11-21 14:32 . 2009-11-21 14:32 8704 ----a-w- c:\windows\system32\mqsvc.exe 2009-11-21 14:32 . 2009-11-21 14:32 37888 ----a-w- c:\windows\system32\mqbkup.exe 2009-11-21 14:32 . 2009-11-21 14:32 154112 ----a-w- c:\windows\system32\mqtrig.dll 2009-11-21 14:32 . 2009-11-21 14:32 125440 ----a-w- c:\windows\system32\mqtgsvc.exe 2009-11-21 14:29 . 2009-11-21 14:29 160256 ----a-w- c:\windows\system32\wkssvc.dll 2009-11-21 14:28 . 2009-11-21 14:28 53248 ----a-w- c:\windows\system32\tsgqec.dll 2009-11-21 14:28 . 2009-11-21 14:28 136192 ----a-w- c:\windows\system32\aaclient.dll 2009-11-21 14:28 . 2009-11-21 14:28 2066432 ----a-w- c:\windows\system32\mstscax.dll 2009-11-21 14:27 . 2009-11-21 14:27 2048 ----a-w- c:\windows\system32\msxml3r.dll 2009-11-21 14:15 . 2009-11-21 14:15 623616 ----a-w- c:\windows\system32\localspl.dll 2009-11-21 14:14 . 2009-11-21 14:14 91136 ----a-w- c:\windows\system32\avifil32.dll 2009-11-21 14:14 . 2009-11-21 14:14 82944 ----a-w- c:\windows\system32\mciavi32.dll 2009-11-21 14:14 . 2009-11-21 14:14 65024 ----a-w- c:\windows\system32\avicap32.dll 2009-11-21 14:14 . 2009-11-21 14:14 123904 ----a-w- c:\windows\system32\msvfw32.dll 2009-11-21 14:14 . 2009-11-21 14:14 31232 ----a-w- c:\windows\system32\msvidc32.dll 2009-11-21 14:14 . 2009-11-21 14:14 12800 ----a-w- c:\windows\system32\msrle32.dll 2009-11-21 14:09 . 2009-11-21 14:09 499712 ----a-w- c:\windows\system32\kerberos.dll 2009-11-21 14:09 . 2009-11-21 14:09 175104 ----a-w- c:\windows\system32\wdigest.dll 2009-11-21 14:09 . 2009-11-21 14:09 9728 ----a-w- c:\windows\system32\lsass.exe 2009-11-21 14:09 . 2009-11-21 14:09 72704 ----a-w- c:\windows\system32\secur32.dll 2009-11-21 14:09 . 2009-11-21 14:09 439864 ----a-w- c:\windows\system32\drivers\ksecdd.sys 2009-11-21 14:09 . 2009-11-21 14:09 1259008 ----a-w- c:\windows\system32\lsasrv.dll 2009-11-21 14:09 . 2009-11-21 14:09 270848 ----a-w- c:\windows\system32\schannel.dll 2009-11-21 14:05 . 2009-11-21 14:05 9847296 ----a-w- c:\windows\system32\NlsData000a.dll 2009-11-21 14:05 . 2009-11-21 14:05 2643456 ----a-w- c:\windows\system32\NlsData000c.dll 2009-11-21 14:05 . 2009-11-21 14:05 2342912 ----a-w- c:\windows\system32\NlsData000d.dll 2009-11-21 14:05 . 2009-11-21 14:05 1965056 ----a-w- c:\windows\system32\NlsData000f.dll 2009-11-21 14:05 . 2009-11-21 14:05 4495360 ----a-w- c:\windows\system32\NlsData0416.dll 2009-11-21 14:05 . 2009-11-21 14:05 4495360 ----a-w- c:\windows\system32\NlsData0414.dll 2009-11-21 14:05 . 2009-11-21 14:05 4495360 ----a-w- c:\windows\system32\NlsData0816.dll 2009-11-21 14:05 . 2009-11-21 14:05 1965056 ----a-w- c:\windows\system32\NlsData081a.dll 2009-11-21 14:05 . 2009-11-21 14:05 6917120 ----a-w- c:\windows\system32\NlsLexicons0c1a.dll 2009-11-21 14:05 . 2009-11-21 14:05 1965056 ----a-w- c:\windows\system32\NlsData0c1a.dll 2009-11-21 14:03 . 2009-11-21 14:03 6656 ----a-w- c:\windows\system32\kbd106n.dll 2009-11-21 13:59 . 2009-11-21 13:59 88576 ----a-w- c:\windows\system32\tlntsess.exe 2009-11-21 13:59 . 2009-11-21 13:59 206848 ----a-w- c:\windows\system32\telnet.exe . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-11-29 14:02 . 2008-11-30 00:16 8011 ----a-w- c:\windows\bthservsdp.dat 2009-11-28 21:13 . 2008-05-22 20:34 118784 d-----w- c:\users\Sofian\AppData\Roaming\uTorrent 2009-11-27 17:54 . 2009-09-12 16:16 4096 d-----w- c:\users\Sofian\AppData\Roaming\Skype 2009-11-27 17:03 . 2009-02-06 20:48 -------- d-----w- c:\users\Sofian\AppData\Roaming\skypePM 2009-11-25 15:56 . 2006-11-02 16:11 755280 ----a-w- c:\windows\system32\perfh013.dat 2009-11-25 15:56 . 2006-11-02 16:11 162068 ----a-w- c:\windows\system32\perfc013.dat 2009-11-24 18:42 . 2008-12-10 11:32 8192 d-----w- c:\users\Sofian\AppData\Roaming\SystemRequirementsLab 2009-11-22 20:40 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat 2009-11-22 20:40 . 2009-11-22 20:40 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_07_00.Wdf 2009-11-22 19:40 . 2009-11-22 19:40 56 ---ha-w- c:\programdata\ezsidmv.dat 2009-11-22 19:20 . 2006-11-02 12:37 4096 d-----w- c:\program files\Windows Sidebar 2009-11-22 19:20 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Calendar 2009-11-22 19:20 . 2006-11-02 11:18 4096 d-----w- c:\program files\Windows Mail 2009-11-22 19:20 . 2006-11-02 12:37 4096 d-----w- c:\program files\Windows Photo Gallery 2009-11-22 19:20 . 2006-11-02 12:37 4096 d-----w- c:\program files\Windows Journal 2009-11-22 19:20 . 2006-11-02 12:37 4096 d-----w- c:\program files\Windows Collaboration 2009-11-22 19:20 . 2006-11-02 12:37 4096 d-----w- c:\program files\Windows Defender 2009-11-21 19:33 . 2009-01-17 23:25 16384 d-----w- c:\program files\Paint.NET 2009-11-21 19:00 . 2009-02-11 12:20 4096 d-----w- c:\users\Sofian\AppData\Roaming\FileZilla 2009-11-21 18:12 . 2006-11-02 10:32 101888 ----a-w- c:\windows\system32\ifxcardm.dll 2009-11-21 18:12 . 2006-11-02 10:32 82432 ----a-w- c:\windows\system32\axaltocm.dll 2009-11-21 17:13 . 2008-11-30 08:40 124064 ----a-w- c:\users\Sofian\AppData\Local\GDIPFONTCACHEV1.DAT 2009-11-21 16:59 . 2009-01-23 23:01 24576 d-----w- c:\programdata\Microsoft Help 2009-11-21 14:49 . 2008-04-15 23:40 24576 d-----w- c:\program files\Microsoft Works 2009-11-14 11:47 . 2008-12-14 17:59 -------- d-----w- c:\users\Sofian\AppData\Roaming\Yahoo! 2009-11-13 18:35 . 2008-12-09 21:35 411368 ----a-w- c:\windows\system32\deploytk.dll 2009-11-11 17:36 . 2008-05-04 09:42 4096 d-----w- c:\users\Sofian\AppData\Roaming\VoipBuster 2009-11-11 14:48 . 2008-04-19 19:38 4096 d-----w- c:\program files\dvdSanta 2009-11-07 17:17 . 2009-03-18 19:12 4096 d-----w- c:\users\Sofian\AppData\Roaming\MessengerDiscovery 2 2009-11-07 17:17 . 2008-06-11 10:58 4096 d-----w- c:\program files\MessengerDiscovery 2 2009-11-07 15:57 . 2008-06-11 11:26 4096 d-----w- c:\program files\Messenger Plus! Live 2009-11-07 15:42 . 2008-04-23 18:53 -------- d-----w- c:\program files\Windows Live 2009-11-06 21:46 . 2009-05-15 18:31 4096 d-----w- c:\program files\Recuva 2009-11-06 21:46 . 2008-07-09 22:13 4096 d-----w- c:\program files\DAEMON Tools Lite 2009-11-06 19:20 . 2008-04-15 23:17 12288 d--h--w- c:\program files\InstallShield Installation Information 2009-11-02 08:48 . 2009-08-21 07:48 314712 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\threatwork.exe 2009-11-02 08:48 . 2009-08-21 07:48 25440 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\savapibridge.dll 2009-11-02 08:48 . 2009-08-21 07:48 168800 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\lavamessage.dll 2009-11-02 08:48 . 2009-08-21 07:48 15688 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\lsdelete.exe 2009-11-02 08:48 . 2009-08-21 07:48 349008 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\lavalicense.dll 2009-11-02 08:48 . 2009-08-21 07:48 298336 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\UpdateManager.dll 2009-11-02 08:48 . 2009-08-21 07:48 84320 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\ShellExt.dll 2009-11-02 08:48 . 2009-08-21 07:48 1630560 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\Resources.dll 2009-11-02 08:48 . 2009-08-21 07:48 246640 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\RPAPI.dll 2009-11-02 08:48 . 2009-08-21 07:48 40288 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\PrivacyClean.dll 2009-11-02 08:48 . 2009-08-21 07:48 664936 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\CEAPI.dll 2009-11-02 08:47 . 2009-08-21 07:48 566632 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\Ad-AwareAdmin.exe 2009-11-02 08:47 . 2009-08-21 07:48 562552 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\Ad-AwareCommand.exe 2009-11-02 08:47 . 2009-08-21 07:48 2353992 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\Ad-Aware.exe 2009-11-02 08:47 . 2009-08-21 07:48 640760 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\AAWWSC.exe 2009-11-02 08:47 . 2009-08-21 07:48 520024 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\AAWTray.exe 2009-11-02 08:47 . 2009-08-21 07:48 1028432 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\AAWService.exe 2009-11-02 08:46 . 2008-06-24 14:31 691696 ----a-w- c:\windows\system32\drivers\sptd.sys 2009-11-02 08:44 . 2009-02-25 16:35 -------- d-----w- c:\programdata\DAEMON Tools Lite 2009-11-01 09:37 . 2009-07-04 17:11 4096 d-----w- c:\program files\Unlocker 2009-10-30 16:07 . 2009-05-24 12:54 4096 d-----w- c:\programdata\TrackMania 2009-10-28 22:17 . 2008-12-27 19:07 1 ----a-w- c:\users\Sofian\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys 2009-10-24 17:43 . 2008-04-15 23:36 4096 d-----w- c:\program files\Common Files\Adobe 2009-10-24 13:58 . 2009-10-24 12:26 -------- d-----w- c:\program files\Assassin's Creed 2009-10-24 13:47 . 2009-10-24 13:47 -------- d-----w- c:\users\Sofian\AppData\Roaming\Ubisoft 2009-10-24 13:47 . 2008-11-30 17:10 4096 d-----w- c:\programdata\Ubisoft 2009-10-21 10:43 . 2009-09-28 14:27 -------- d-----w- c:\program files\KONAMI 2009-10-21 09:17 . 2009-10-21 09:17 -------- d-----w- c:\programdata\KONAMI 2009-10-20 17:29 . 2009-05-30 09:59 -------- d-----w- c:\program files\Hamachi 2009-10-20 17:21 . 2008-06-18 14:05 4096 d-----w- c:\users\Sofian\AppData\Roaming\Hamachi 2009-10-20 16:26 . 2008-10-28 20:10 8192 d-----w- c:\program files\PES 2009 2009-10-18 13:08 . 2008-11-22 17:43 4096 d-----w- c:\program files\SystemRequirementsLab 2009-10-18 13:07 . 2009-10-18 13:07 138240 ----a-w- c:\users\Sofian\AppData\Roaming\SystemRequirementsLab\SRLProxy_srl_4_1_14_0_d.dll 2009-10-18 13:07 . 2009-10-18 13:07 138240 ----a-w- c:\users\Sofian\AppData\Roaming\SystemRequirementsLab\SRLProxy_srl_4_1_14_0_c.dll 2009-10-18 13:07 . 2009-10-18 13:07 138240 ----a-w- c:\users\Sofian\AppData\Roaming\SystemRequirementsLab\SRLProxy_srl_4_1_14_0_b.dll 2009-10-18 13:07 . 2009-10-18 13:07 138240 ----a-w- c:\users\Sofian\AppData\Roaming\SystemRequirementsLab\SRLProxy_srl_4_1_14_0_a.dll 2009-10-11 11:50 . 2009-10-11 11:50 -------- d-----w- c:\program files\Loquendo 2009-10-10 11:22 . 2009-10-10 11:20 -------- d-----w- c:\users\Sofian\AppData\Roaming\ISP Monitor 2009-10-10 11:20 . 2009-10-10 11:20 4096 d-----w- c:\program files\ISP Monitor 2009-10-10 11:20 . 2009-10-10 11:20 737280 ----a-w- c:\windows\iun6002.exe 2009-10-06 19:56 . 2008-04-15 23:36 4096 d-----w- c:\program files\Google 2009-10-05 14:32 . 2009-10-05 14:30 -------- d-----w- c:\programdata\DriverScanner 2009-10-05 14:30 . 2009-10-05 14:29 4096 dc-h--w- c:\programdata\{D5ABFFAD-D592-4F98-B02B-587125B4801F} 2009-10-05 14:30 . 2008-11-29 09:39 -------- d-----w- c:\program files\Uniblue 2009-10-05 14:30 . 2008-10-25 07:43 -------- d-----w- c:\users\Sofian\AppData\Roaming\Uniblue 2009-10-04 20:25 . 2008-04-30 13:05 8192 d-----w- c:\users\Sofian\AppData\Roaming\LimeWire 2009-10-04 18:07 . 2009-10-04 18:07 4096 d-----w- c:\program files\Auto Clicker 2009-10-03 21:19 . 2009-10-03 21:11 -------- d-----w- c:\program files\Foxit Software 2009-10-03 11:19 . 2009-03-27 18:44 4096 d-----w- c:\program files\LimeWire 2009-10-01 01:02 . 2009-11-22 19:48 2537472 ----a-w- c:\windows\system32\wpdshext.dll 2009-10-01 01:02 . 2009-11-22 19:48 30208 ----a-w- c:\windows\system32\WPDShextAutoplay.exe 2009-10-01 01:02 . 2009-11-22 19:48 334848 ----a-w- c:\windows\system32\PortableDeviceApi.dll 2009-10-01 01:02 . 2009-11-22 19:48 87552 ----a-w- c:\windows\system32\WPDShServiceObj.dll 2009-10-01 01:02 . 2009-11-22 19:48 31232 ----a-w- c:\windows\system32\BthMtpContextHandler.dll 2009-10-01 01:01 . 2009-11-22 19:48 546816 ----a-w- c:\windows\system32\wpd_ci.dll 2009-10-01 01:01 . 2009-11-22 19:48 160256 ----a-w- c:\windows\system32\PortableDeviceTypes.dll 2009-10-01 01:01 . 2009-11-22 19:48 60928 ----a-w- c:\windows\system32\PortableDeviceConnectApi.dll 2009-10-01 01:01 . 2009-11-22 19:48 350208 ----a-w- c:\windows\system32\WPDSp.dll 2009-10-01 01:01 . 2009-11-22 19:48 196608 ----a-w- c:\windows\system32\PortableDeviceWMDRM.dll 2009-10-01 01:01 . 2009-11-22 19:48 100864 ----a-w- c:\windows\system32\PortableDeviceClassExtension.dll 2009-10-01 01:01 . 2009-11-22 19:48 81920 ----a-w- c:\windows\system32\wpdbusenum.dll 2009-09-25 18:37 . 2009-09-25 18:37 247296 ----a-w- c:\users\Sofian\AppData\Roaming\SystemRequirementsLab\SRLProxy_srl_4_0_6_0_d_ind.dll 2009-09-25 18:37 . 2009-09-25 18:37 247296 ----a-w- c:\users\Sofian\AppData\Roaming\SystemRequirementsLab\SRLProxy_srl_4_0_6_0_c_ind.dll 2009-09-25 18:37 . 2009-09-25 18:37 247296 ----a-w- c:\users\Sofian\AppData\Roaming\SystemRequirementsLab\SRLProxy_srl_4_0_6_0_b_ind.dll 2009-09-25 18:37 . 2009-09-25 18:37 247296 ----a-w- c:\users\Sofian\AppData\Roaming\SystemRequirementsLab\SRLProxy_srl_4_0_6_0_a_ind.dll 2008-04-15 23:28 . 2008-04-15 23:28 76 --sha-w- c:\windows\CT4CET.bin 2008-04-19 11:13 . 2008-04-19 11:13 76 --sha-w- c:\windows\CT5PRET.BIN 2008-12-11 21:38 . 2008-12-11 11:43 2048 --sha-w- c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat 2008-12-11 21:38 . 2008-12-11 11:43 2048 --sha-w- c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat 2009-01-20 20:04 . 2008-11-28 16:46 3036 --sha-w- c:\windows\System32\KGyGaAvL.sys 2007-02-26 18:59 . 2007-02-26 18:59 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-18 125952] "ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2006-09-11 86960] "VoipBuster"="c:\program files\VoipBuster.com\VoipBuster\voipbuster.exe" [2009-11-12 9094448] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-08-22 39408] "Google Update"="c:\users\Sofian\AppData\Local\Google\Update\GoogleUpdate.exe" [2009-11-21 135664] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "DeStatusMon"="c:\program files\Dell\MFP_DELL\deDvcStatus.exe dvcStatusMinimize" [X] "Google Quick Search Box"="c:\program files\Google\Quick Search Box\GoogleQuickSearchBox.exe " [X] "Apoint"="c:\program files\DellTPad\Apoint.exe" [2007-09-07 159744] "OEM02Mon.exe"="c:\windows\OEM02Mon.exe" [2007-05-09 36864] "DELL Webcam Manager"="c:\program files\Dell\Dell Webcam Manager\DellWMgr.exe" [2007-07-27 118784] "DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2009-05-21 206064] "dscactivate"="c:\program files\Dell Support Center\gs_agent\custom\dsca.exe" [2008-02-13 16384] "ECenter"="c:\dell\E-Center\EULALauncher.exe" [2008-01-18 17920] "IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-03-21 174872] "Logitech Hardware Abstraction Layer"="c:\program files\Common Files\Logitech\khalshared\KHALMNPR.EXE" [2007-01-11 101136] "OpwareSE4"="c:\program files\ScanSoft\OmniPageSE4\OpwareSE4.exe" [2007-03-12 79400] "PCMService"="c:\program files\Dell\MediaDirect\PCMService.exe" [2007-12-21 184320] "avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-08-17 81000] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-02-15 141848] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-02-15 166424] "Persistence"="c:\windows\system32\igfxpers.exe" [2008-02-15 133656] "FG_Monitor"="c:\program files\Folder Guard Pro\FGKey.exe" [2007-02-24 132680] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-11-13 149280] "SigmatelSysTrayApp"="c:\program files\SigmaTel\C-Major Audio\WDM\sttray.exe" [2007-11-12 405504] "Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" - c:\windows\KHALMNPR.Exe [2007-01-11 101136] c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ BTTray.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2006-11-3 703280] Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2008-4-16 50688] QuickSet.lnk - c:\program files\Dell\QuickSet\quickset.exe [2007-9-7 1180952] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service] @="Service" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sr.sys] @="FSFilter System Recovery" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend] @="Service" [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc] "VistaSp2"=hex(:7e,c7,31,9a,a9,6b,ca,01 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-991331777-2378318461-4560006-1000] "EnableNotificationsRef"=dword:00000001 R0 Lbd;Lbd;c:\windows\System32\drivers\Lbd.sys [21/08/2009 8:49 64160] R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);c:\windows\System32\drivers\sfdrv01a.sys [5/07/2006 13:46 63352] R1 aswSP;avast! Self Protection;c:\windows\System32\drivers\aswSP.sys [28/03/2009 9:53 114768] R2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\AEstSrv.exe [16/04/2008 0:08 73728] R2 aswFsBlk;aswFsBlk;c:\windows\System32\drivers\aswFsBlk.sys [28/03/2009 9:53 20560] R2 aswMonFlt;aswMonFlt;c:\windows\System32\drivers\aswMonFlt.sys [28/03/2009 9:52 53328] R2 CAMTHWDM;WebcamMax, WDM Video Capture;c:\windows\System32\drivers\CamthWDM.sys [30/11/2008 0:59 941784] R2 deMntrService;Dell AIO Center Service;c:\program files\Dell\MFP_DELL\deMntrService.exe [28/06/2007 14:05 131072] R2 FGUARD32;FGUARD32;c:\program files\Folder Guard Pro\FGUARD32.SYS [5/09/2009 15:53 48896] R2 FsUsbExService;FsUsbExService;c:\windows\System32\FsUsbExService.Exe [22/06/2009 18:56 233472] R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [29/10/2009 12:27 1074568] R2 ISPMonitorSrv;ISP Monitor;c:\program files\ISP Monitor\ISPMonitorSrv.exe [22/08/2007 23:55 36864] R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [18/01/2009 22:34 1028432] R2 litsgt;litsgt;c:\windows\System32\drivers\litsgt.sys [14/02/2009 17:48 137344] R2 sprtsvc_belgacom;SupportSoft Sprocket Service (belgacom);c:\program files\Belgacom\bin\sprtsvc.exe [29/05/2008 10:18 202016] R2 tansgt;tansgt;c:\windows\System32\drivers\tansgt.sys [14/02/2009 17:48 12032] R3 FsUsbExDisk;FsUsbExDisk;c:\windows\System32\FsUsbExDisk.Sys [22/06/2009 18:56 36608] R3 IntcHdmiAddService;Intel® High Definition Audio HDMI Service;c:\windows\System32\drivers\IntcHdmi.sys [30/11/2008 0:59 111616] S3 ASPI;Advanced SCSI Programming Interface Driver;c:\windows\System32\drivers\ASPI32.SYS [15/04/2009 13:13 84832] S3 DESVUSB;Dell service driver;c:\windows\System32\drivers\desrvusb.sys [30/11/2008 0:59 17536] S3 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [21/11/2009 18:23 21504] S3 WMSvc;Web Management-service;c:\windows\System32\inetsrv\WMSvc.exe [2/11/2006 13:36 10752] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LPDService REG_MULTI_SZ LPDSVC rsmsvcs REG_MULTI_SZ ntmssvc ipripsvc REG_MULTI_SZ iprip bthsvcs REG_MULTI_SZ BthServ getPlusHelper REG_MULTI_SZ getPlusHelper LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache . Inhoud van de 'Gedeelde Taken' map 2009-11-02 c:\windows\Tasks\Ad-Aware Update (Weekly).job - c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-01-18 08:47] 2009-11-29 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-991331777-2378318461-4560006-1000Core.job - c:\users\Sofian\AppData\Local\Google\Update\GoogleUpdate.exe [2009-11-21 11:41] 2009-11-29 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-991331777-2378318461-4560006-1000UA.job - c:\users\Sofian\AppData\Local\Google\Update\GoogleUpdate.exe [2009-11-21 11:41] 2009-11-29 c:\windows\Tasks\RegCure Program Check.job - c:\program files\RegCure\RegCure.exe [2007-10-16 09:20] 2008-12-12 c:\windows\Tasks\RegCure.job - c:\program files\RegCure\RegCure.exe [2007-10-16 09:20] 2009-11-29 c:\windows\Tasks\User_Feed_Synchronization-{D130A10C-2448-4567-A8B2-044877608ACE}.job - c:\windows\system32\msfeedssync.exe [2009-11-21 03:41] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.google.be/ mStart Page = hxxp://www.games-fusion.net/ IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 IE: Formulieren opslaan - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComSavePass.html IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html IE: Invul Formulieren - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComFillForms.html IE: Menu aanpassen - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html IE: RoboForm Werkbalk - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm DPF: {C212D449-8B3C-41F2-BD9A-047BD770550F} - hxxp://www.fiaa.eu/OPLauncher.cab FF - ProfilePath - c:\users\Sofian\AppData\Roaming\Mozilla\Firefox\Profiles\yo9qwklf.default\ FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q= FF - prefs.js: browser.search.selectedEngine - Wikipedia (nl) FF - prefs.js: browser.startup.homepage - hxxp://www.google.be/ FF - prefs.js: keyword.URL - FF - component: c:\program files\Siber Systems\AI RoboForm\Firefox\components\rfproxy_31.dll FF - component: c:\users\Sofian\AppData\Roaming\Mozilla\Firefox\Profiles\yo9qwklf.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\FFExternalAlert.dll FF - plugin: c:\progra~1\SONYON~1\npsoe.dll FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npbittorrent.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npOGAPlugin.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\NPOP7PlugIn.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npPandoWebInst.dll FF - plugin: c:\programdata\NexonEU\NGM\npNxGameeu.dll FF - plugin: c:\programdata\NexonUS\NGM\npNxGameUS.dll FF - plugin: c:\users\Sofian\AppData\Local\Google\Update\1.2.183.13\npGoogleOneClick8.dll FF - plugin: c:\users\Sofian\AppData\Roaming\Mozilla\Firefox\Profiles\yo9qwklf.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}\plugins\np_gp.dll FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ ---- FIREFOX POLICIES ---- FF - user.js: network.proxy.type - 0 FF - user.js: network.proxy.http - FF - user.js: network.proxy.http_port - 0 FF - user.js: network.proxy.ssl - FF - user.js: network.proxy.ssl_port - 0 FF - user.js: network.proxy.ftp - FF - user.js: network.proxy.ftp_port - 0 FF - user.js: network.proxy.gopher - FF - user.js: network.proxy.gopher_port - 0 FF - user.js: network.proxy.socks_version - 5 FF - user.js: network.proxy.socks - FF - user.js: network.proxy.socks_port - 0 FF - user.js: nglayout.initialpaint.delay - 100 FF - user.js: content.notify.ontimer - true FF - user.js: content.notify.interval - 100000 FF - user.js: content.notify.backoffcount - 5 FF - user.js: network.http.pipelining - true FF - user.js: network.http.proxy.pipelining - true FF - user.js: network.http.pipelining.maxrequests - 8 FF - user.js: network.http.max-connections - 32 FF - user.js: network.http.max-connections-per-server - 8 FF - user.js: network.http.max-persistent-connections-per-proxy - 4 FF - user.js: network.http.max-persistent-connections-per-server - 2 c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true); . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2009-11-29 15:08 Windows 6.0.6002 Service Pack 2 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... c:\windows\TEMP\TMP000000550DE33B0EDFD09582 524288 bytes executable Scan succesvol afgerond verborgen bestanden: 1 ************************************************************************** Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, GMER - Rootkit Detector and Remover device: opened successfully user: MBR read successfully called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys iastor.sys spwi.sys hal.dll >>UNKNOWN [0x853E7938]<< kernel: MBR read successfully detected MBR rootkit hooks: \Driver\Disk -> CLASSPNP.SYS @ 0x887d1d24 \Driver\ACPI -> acpi.sys @ 0x87fc1d68 \Driver\atapi -> 0x854311f8 \Driver\iaStor -> iastor.sys @ 0x880ce6d0 IoDeviceObjectType ->\Device\Harddisk0\DR0 ->Warning: possible MBR rootkit infection ! user & kernel MBR OK ************************************************************************** . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 "MSCurrentCountry"=dword:00000000 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 "MSCurrentCountry"=dword:00000000 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0007\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0008\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0009\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0010\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . --------------------- DLLs Geladen Onder Lopende Processen --------------------- - - - - - - - > 'Explorer.exe'(5484) c:\windows\system32\btncopy.dll . ------------------------ Andere Aktieve Processen ------------------------ . c:\program files\Alwil Software\Avast4\aswUpdSv.exe c:\windows\system32\WLANExt.exe c:\program files\Alwil Software\Avast4\ashServ.exe c:\windows\system32\CISVC.EXE c:\program files\Intel\Wireless\Bin\EvtEng.exe c:\program files\Intel\Intel Matrix Storage Manager\Iaantmon.exe c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe c:\windows\system32\PnkBstrA.exe c:\windows\system32\PSIService.exe c:\program files\Intel\Wireless\Bin\RegSrvc.exe c:\windows\System32\tcpsvcs.exe c:\windows\System32\snmp.exe c:\program files\Dell Support Center\bin\sprtsvc.exe c:\windows\system32\STacSV.exe c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE c:\windows\system32\DRIVERS\xaudio.exe c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe c:\windows\system32\wbem\unsecapp.exe c:\program files\Alwil Software\Avast4\ashMaiSv.exe c:\program files\Alwil Software\Avast4\ashWebSv.exe c:\program files\Alwil Software\Avast4\ashDisp.exe c:\windows\system32\igfxsrvc.exe c:\windows\system32\wbem\unsecapp.exe c:\program files\DellTPad\ApMsgFwd.exe c:\program files\Lavasoft\Ad-Aware\AAWTray.exe c:\windows\ehome\ehmsas.exe c:\program files\DellTPad\HidFind.exe c:\program files\DellTPad\Apntex.exe c:\program files\WIDCOMM\Bluetooth Software\BtStackServer.exe . ************************************************************************** . Voltooingstijd: 2009-11-29 15:23 - machine werd herstart ComboFix-quarantined-files.txt 2009-11-29 14:23 ComboFix2.txt 2009-11-28 17:16 Pre-Run: 6.983.782.400 bytes beschikbaar Post-Run: 6.133.956.608 bytes beschikbaar - - End Of File - - 0880057D05E679314D3B07482D11E6AC Hijackthis Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 15:27:19, on 29/11/2009 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.18828) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\system32\taskeng.exe C:\Program Files\DellTPad\Apoint.exe C:\Windows\OEM02Mon.exe C:\Program Files\Dell Support Center\bin\sprtcmd.exe C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exe C:\Program Files\Dell\MediaDirect\PCMService.exe C:\Program Files\Alwil Software\Avast4\ashDisp.exe C:\Windows\System32\igfxtray.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Program Files\Folder Guard Pro\FGKey.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\ehome\ehtray.exe C:\Program Files\VoipBuster.com\VoipBuster\voipbuster.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe C:\Program Files\Digital Line Detect\DLG.exe C:\Program Files\Dell\QuickSet\quickset.exe C:\Windows\system32\igfxsrvc.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\DellTPad\ApMsgFwd.exe C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\DellTPad\HidFind.exe C:\Program Files\DellTPad\Apntex.exe C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe C:\Windows\Explorer.exe C:\Windows\system32\conime.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Windows\system32\SearchFilterHost.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Games Fusion - PC Cheats, Saved Games, Trailers, Demos and Patches O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe O4 - HKLM\..\Run: [OEM02Mon.exe] C:\Windows\OEM02Mon.exe O4 - HKLM\..\Run: [DELL Webcam Manager] "C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe" /s O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter O4 - HKLM\..\Run: [DeStatusMon] "C:\Program Files\Dell\MFP_DELL\deDvcStatus.exe" dvcStatusMinimize O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe O4 - HKLM\..\Run: [iAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE" O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe" O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe" O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe O4 - HKLM\..\Run: [FG_Monitor] C:\Program Files\Folder Guard Pro\FGKey.exe /Start O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [Google Quick Search Box] "C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe" /autorun O4 - HKLM\..\Run: [sigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start O4 - HKCU\..\Run: [VoipBuster] "C:\Program Files\VoipBuster.com\VoipBuster\voipbuster.exe" -nosplash -minimized O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [Google Update] "C:\Users\Sofian\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - Global Startup: BTTray.lnk = ? O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe O4 - Global Startup: QuickSet.lnk = C:\Program Files\Dell\QuickSet\quickset.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Formulieren opslaan - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html O8 - Extra context menu item: Invul Formulieren - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O8 - Extra context menu item: Menu aanpassen - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html O8 - Extra context menu item: RoboForm Werkbalk - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: Formulier Invullen - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O9 - Extra 'Tools' menuitem: Invul Formulieren - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O9 - Extra button: Opslaan - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O9 - Extra 'Tools' menuitem: Formulieren opslaan - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O9 - Extra 'Tools' menuitem: RoboForm Werkbalk - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O15 - Trusted IP range: http://192.168.0.1 O15 - ESC Trusted IP range: http://192.168.0.1 O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1258806103935 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1258907798795 O16 - DPF: {C212D449-8B3C-41F2-BD9A-047BD770550F} (Perparer Class) - http://www.fiaa.eu/OPLauncher.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\system32\aestsrv.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Dell AIO Center Service (deMntrService) - Dell - C:\Program Files\Dell\MFP_DELL\deMntrService.exe O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: ISP Monitor (ISPMonitorSrv) - How2 Studios - C:\Program Files\ISP Monitor\ISPMonitorSrv.exe O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\Windows\system32\sfrem01.exe O23 - Service: SupportSoft Sprocket Service (belgacom) (sprtsvc_belgacom) - SupportSoft, Inc. - C:\Program Files\Belgacom\bin\sprtsvc.exe O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\STacSV.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe O23 - Service: SupportSoft RemoteAssist - SupportSoft, Inc. - C:\Program Files\Common Files\Supportsoft\bin\ssrc.exe O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe -- End of file - 12709 bytes Ik denk dat het heeft geholpen, mijn computer is nu trug even snel als vroeger

ComboFix 09-11-27.07 - Sofian 28/11/2009 17:29.9.2 - x86 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.32.1043.18.2037.1026 [GMT 1:00] Gestart vanuit: c:\users\Sofian\Desktop\ComboFix.exe AV: avast! antivirus 4.8.1351 [VPS 091121-1] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D} AV: Lavasoft Ad-Watch Live! Anti-virus *On-access scanning disabled* (Updated) {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33} SP: avast! antivirus 4.8.1351 [VPS 091121-1] *enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D} SP: Lavasoft Ad-Watch Live! *enabled* (Updated) {67844DAE-4F77-4D69-9457-98E8CFFDAA22} SP: Spybot - Search and Destroy *disabled* (Outdated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9} SP: Windows Defender *disabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\$recycle.bin\S-1-5-21-2152478756-3922319563-605102323-500 c:\$recycle.bin\S-1-5-21-2815755638-1480285660-2120787009-500 c:\$recycle.bin\S-1-5-21-991331777-2378318461-4560006-500 C:\LOG.TXT c:\users\Sofian\AppData\Roaming\.# c:\users\Sofian\AppData\Roaming\Desktopicon c:\users\Sofian\AppData\Roaming\Desktopicon\eBay.ico c:\users\Sofian\AppData\Roaming\Desktopicon\eBayShortcuts.exe c:\users\Sofian\AppData\Roaming\Desktopicon\uninst.exe c:\users\Sofian\AppData\Roaming\inst.exe c:\windows\slog.dll c:\windows\system32\gatherWirelessInfo.vbs c:\windows\system32\NTSVc.ocx . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Service_Boonty Games (((((((((((((((((((( Bestanden Gemaakt van 2009-10-28 to 2009-11-28 )))))))))))))))))))))))))))))) . 2009-11-28 16:52 . 2009-11-28 16:59 4096 d-----w- c:\users\Sofian\AppData\Local\temp 2009-11-28 16:52 . 2009-11-28 16:52 -------- d-----w- c:\users\Default\AppData\Local\temp 2009-11-28 12:49 . 2009-11-26 16:41 52224 ----a-w- c:\users\Sofian\AppData\Roaming\Mozilla\Firefox\Profiles\yo9qwklf.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\FFExternalAlert.dll 2009-11-28 12:49 . 2009-11-26 16:41 114688 ----a-w- c:\users\Sofian\AppData\Roaming\Mozilla\Firefox\Profiles\yo9qwklf.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\npmozax.dll 2009-11-27 19:21 . 2009-11-27 19:21 -------- d-----w- c:\users\Sofian\AppData\Roaming\Paquet Builder 2009-11-27 19:21 . 2009-11-27 19:21 4096 d-----w- c:\program files\Paquet Builder 2009-11-27 19:15 . 2009-11-27 19:15 4096 d-----w- c:\program files\7-Zip 2009-11-26 20:56 . 2009-11-26 20:56 4096 d-----w- c:\program files\gBurner 2009-11-25 17:51 . 2009-10-29 09:17 2048 ----a-w- c:\windows\system32\tzres.dll 2009-11-25 17:50 . 2009-11-25 17:50 -------- d-----w- c:\program files\MSXML 4.0 2009-11-25 12:31 . 2009-08-11 16:44 1401856 ----a-w- c:\windows\system32\msxml6.dll 2009-11-25 12:31 . 2009-08-11 16:44 1248768 ----a-w- c:\windows\system32\msxml3.dll 2009-11-24 18:42 . 2009-11-24 18:42 247296 ----a-w- c:\users\Sofian\AppData\Roaming\SystemRequirementsLab\SRLProxy_srl_4_0_11_0_d_ind.dll 2009-11-24 18:42 . 2009-11-24 18:42 247296 ----a-w- c:\users\Sofian\AppData\Roaming\SystemRequirementsLab\SRLProxy_srl_4_0_11_0_c_ind.dll 2009-11-24 18:42 . 2009-11-24 18:42 247296 ----a-w- c:\users\Sofian\AppData\Roaming\SystemRequirementsLab\SRLProxy_srl_4_0_11_0_b_ind.dll 2009-11-24 18:42 . 2009-11-24 18:42 247296 ----a-w- c:\users\Sofian\AppData\Roaming\SystemRequirementsLab\SRLProxy_srl_4_0_11_0_a_ind.dll 2009-11-23 17:45 . 2001-10-28 16:42 116224 ----a-w- c:\windows\system32\pdfcmnnt.dll 2009-11-23 17:45 . 2009-11-23 17:46 4096 d-----w- c:\program files\PDFCreator 2009-11-23 17:45 . 1998-07-06 00:00 23552 ----a-w- c:\windows\system32\MSMPIDE.DLL 2009-11-23 15:13 . 2009-11-02 19:42 195456 ------w- c:\windows\system32\MpSigStub.exe 2009-11-22 20:40 . 2009-11-22 20:40 -------- d-----w- c:\program files\Windows Portable Devices 2009-11-22 20:35 . 2009-11-22 20:35 -------- d-----w- c:\windows\'Full Speed' Internet Booster + Performance Tests 2009-11-22 19:49 . 2009-09-10 02:00 92672 ----a-w- c:\windows\system32\UIAnimation.dll 2009-11-22 19:49 . 2009-09-10 02:01 3023360 ----a-w- c:\windows\system32\UIRibbon.dll 2009-11-22 19:49 . 2009-09-10 02:00 1164800 ----a-w- c:\windows\system32\UIRibbonRes.dll 2009-11-22 19:47 . 2009-10-08 21:07 4096 ----a-w- c:\windows\system32\oleaccrc.dll 2009-11-22 19:47 . 2009-10-08 21:08 234496 ----a-w- c:\windows\system32\oleacc.dll 2009-11-22 19:47 . 2009-10-08 21:08 555520 ----a-w- c:\windows\system32\UIAutomationCore.dll 2009-11-22 19:19 . 2009-11-22 19:20 -------- d-----w- c:\windows\system32\ca-ES 2009-11-22 19:19 . 2009-11-22 19:20 -------- d-----w- c:\windows\system32\eu-ES 2009-11-22 19:19 . 2009-11-22 19:20 -------- d-----w- c:\windows\system32\vi-VN 2009-11-22 17:54 . 2009-11-22 17:54 -------- d-----w- c:\windows\system32\EventProviders 2009-11-22 12:56 . 2009-04-11 06:28 289792 ----a-w- c:\windows\system32\spinstall.exe 2009-11-22 12:55 . 2009-04-11 06:28 1143296 ----a-w- c:\windows\system32\wercon.exe 2009-11-22 12:54 . 2009-04-11 06:28 177664 ----a-w- c:\windows\system32\WSDMon.dll 2009-11-22 12:53 . 2009-04-11 06:28 218624 ----a-w- c:\windows\system32\wdscore.dll 2009-11-22 12:53 . 2009-04-11 06:27 130560 ----a-w- c:\windows\system32\PkgMgr.exe 2009-11-22 12:52 . 2009-04-11 06:28 247808 ----a-w- c:\windows\system32\drvstore.dll 2009-11-22 11:26 . 2009-11-22 21:30 20480 d-----w- c:\program files\Eusing Free Registry Cleaner 2009-11-21 19:05 . 2008-05-27 04:59 18904 ----a-w- c:\windows\system32\StructuredQuerySchemaTrivial.bin 2009-11-21 18:25 . 2009-11-21 18:25 -------- dc----w- C:\PerfLogs 2009-11-21 17:36 . 2008-01-18 22:36 6656 ----a-w- c:\windows\system32\sdspres.dll 2009-11-21 17:36 . 2008-01-18 22:33 193024 ----a-w- c:\windows\system32\recdisc.exe 2009-11-21 17:35 . 2008-01-18 22:36 28160 ----a-w- c:\windows\system32\sxproxy.dll 2009-11-21 17:25 . 2008-01-18 22:42 94776 ----a-w- c:\windows\system32\MigAutoPlay.exe 2009-11-21 17:24 . 2008-01-18 22:38 155704 ----a-w- c:\windows\system32\dssenh.dll 2009-11-21 17:23 . 2008-01-18 22:33 96768 ----a-w- c:\windows\system32\wininit.exe 2009-11-21 16:59 . 2009-11-21 16:59 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help 2009-11-21 15:05 . 2009-11-21 15:05 61440 ----a-w- c:\windows\system32\winipsec.dll 2009-11-21 15:05 . 2009-11-21 15:05 272896 ----a-w- c:\windows\system32\polstore.dll 2009-11-21 15:01 . 2009-11-21 15:01 9728 ----a-w- c:\windows\system32\TCPSVCS.EXE 2009-11-21 15:01 . 2009-11-21 15:01 8704 ----a-w- c:\windows\system32\HOSTNAME.EXE 2009-11-21 15:01 . 2009-11-21 15:01 17920 ----a-w- c:\windows\system32\netevent.dll 2009-11-21 15:01 . 2009-11-21 15:01 11264 ----a-w- c:\windows\system32\MRINFO.EXE 2009-11-21 15:01 . 2009-11-21 15:01 904776 ----a-w- c:\windows\system32\drivers\tcpip.sys 2009-11-21 15:01 . 2009-11-21 15:01 27136 ----a-w- c:\windows\system32\NETSTAT.EXE 2009-11-21 15:01 . 2009-11-21 15:01 19968 ----a-w- c:\windows\system32\ARP.EXE 2009-11-21 15:01 . 2009-11-21 15:01 17920 ----a-w- c:\windows\system32\ROUTE.EXE 2009-11-21 15:01 . 2009-11-21 15:01 105984 ----a-w- c:\windows\system32\netiohlp.dll 2009-11-21 15:01 . 2009-11-21 15:01 10240 ----a-w- c:\windows\system32\finger.exe 2009-11-21 15:01 . 2009-11-21 15:01 30720 ----a-w- c:\windows\system32\drivers\tcpipreg.sys 2009-11-21 14:58 . 2009-11-21 14:58 127488 ----a-w- c:\windows\system32\L2SecHC.dll 2009-11-21 14:58 . 2009-11-21 14:58 68096 ----a-w- c:\windows\system32\wlanhlp.dll 2009-11-21 14:58 . 2009-11-21 14:58 65024 ----a-w- c:\windows\system32\wlanapi.dll 2009-11-21 14:58 . 2009-11-21 14:58 513536 ----a-w- c:\windows\system32\wlansvc.dll 2009-11-21 14:58 . 2009-11-21 14:58 302592 ----a-w- c:\windows\system32\wlansec.dll 2009-11-21 14:58 . 2009-11-21 14:58 293376 ----a-w- c:\windows\system32\wlanmsm.dll 2009-11-21 14:54 . 2009-11-21 14:54 34304 ----a-w- c:\windows\system32\atmlib.dll 2009-11-21 14:54 . 2009-11-21 14:54 289792 ----a-w- c:\windows\system32\atmfd.dll 2009-11-21 14:54 . 2009-11-21 14:54 156672 ----a-w- c:\windows\system32\t2embed.dll 2009-11-21 14:54 . 2009-11-21 14:54 23552 ----a-w- c:\windows\system32\lpk.dll 2009-11-21 14:54 . 2009-11-21 14:54 72704 ----a-w- c:\windows\system32\fontsub.dll 2009-11-21 14:54 . 2009-11-21 14:54 10240 ----a-w- c:\windows\system32\dciman32.dll 2009-11-21 14:52 . 2009-11-21 14:52 218624 ----a-w- c:\windows\system32\msv1_0.dll 2009-11-21 14:51 . 2009-11-21 14:51 9728 ----a-w- c:\windows\system32\infoctrs.dll 2009-11-21 14:51 . 2009-11-21 14:51 16384 ----a-w- c:\windows\system32\infoadmn.dll 2009-11-21 14:45 . 2009-11-21 14:45 98816 ----a-w- c:\windows\system32\mfps.dll 2009-11-21 14:45 . 2009-11-21 14:45 53248 ----a-w- c:\windows\system32\rrinstaller.exe 2009-11-21 14:45 . 2009-11-21 14:45 2868224 ----a-w- c:\windows\system32\mf.dll 2009-11-21 14:45 . 2009-11-21 14:45 24576 ----a-w- c:\windows\system32\mfpmp.exe 2009-11-21 14:45 . 2009-11-21 14:45 2048 ----a-w- c:\windows\system32\mferror.dll 2009-11-21 14:38 . 2009-11-21 14:38 71680 ----a-w- c:\windows\system32\atl.dll 2009-11-21 14:34 . 2009-11-21 14:34 3600456 ----a-w- c:\windows\system32\ntkrnlpa.exe 2009-11-21 14:34 . 2009-11-21 14:34 3548216 ----a-w- c:\windows\system32\ntoskrnl.exe 2009-11-21 14:33 . 2009-11-21 14:33 36864 ----a-w- c:\windows\system32\mqise.dll 2009-11-21 14:33 . 2009-11-21 14:33 126464 ----a-w- c:\windows\system32\drivers\mqac.sys 2009-11-21 14:32 . 2009-11-21 14:32 917504 ----a-w- c:\windows\system32\mqqm.dll 2009-11-21 14:32 . 2009-11-21 14:32 89600 ----a-w- c:\windows\system32\mqlogmgr.dll 2009-11-21 14:32 . 2009-11-21 14:32 8704 ----a-w- c:\windows\system32\mqsvc.exe 2009-11-21 14:32 . 2009-11-21 14:32 37888 ----a-w- c:\windows\system32\mqbkup.exe 2009-11-21 14:32 . 2009-11-21 14:32 154112 ----a-w- c:\windows\system32\mqtrig.dll 2009-11-21 14:32 . 2009-11-21 14:32 125440 ----a-w- c:\windows\system32\mqtgsvc.exe 2009-11-21 14:29 . 2009-11-21 14:29 160256 ----a-w- c:\windows\system32\wkssvc.dll 2009-11-21 14:28 . 2009-11-21 14:28 53248 ----a-w- c:\windows\system32\tsgqec.dll 2009-11-21 14:28 . 2009-11-21 14:28 136192 ----a-w- c:\windows\system32\aaclient.dll 2009-11-21 14:28 . 2009-11-21 14:28 2066432 ----a-w- c:\windows\system32\mstscax.dll 2009-11-21 14:27 . 2009-11-21 14:27 2048 ----a-w- c:\windows\system32\msxml3r.dll 2009-11-21 14:15 . 2009-11-21 14:15 623616 ----a-w- c:\windows\system32\localspl.dll 2009-11-21 14:14 . 2009-11-21 14:14 91136 ----a-w- c:\windows\system32\avifil32.dll 2009-11-21 14:14 . 2009-11-21 14:14 82944 ----a-w- c:\windows\system32\mciavi32.dll 2009-11-21 14:14 . 2009-11-21 14:14 65024 ----a-w- c:\windows\system32\avicap32.dll 2009-11-21 14:14 . 2009-11-21 14:14 123904 ----a-w- c:\windows\system32\msvfw32.dll 2009-11-21 14:14 . 2009-11-21 14:14 31232 ----a-w- c:\windows\system32\msvidc32.dll 2009-11-21 14:14 . 2009-11-21 14:14 12800 ----a-w- c:\windows\system32\msrle32.dll 2009-11-21 14:09 . 2009-11-21 14:09 499712 ----a-w- c:\windows\system32\kerberos.dll 2009-11-21 14:09 . 2009-11-21 14:09 175104 ----a-w- c:\windows\system32\wdigest.dll 2009-11-21 14:09 . 2009-11-21 14:09 9728 ----a-w- c:\windows\system32\lsass.exe 2009-11-21 14:09 . 2009-11-21 14:09 72704 ----a-w- c:\windows\system32\secur32.dll 2009-11-21 14:09 . 2009-11-21 14:09 439864 ----a-w- c:\windows\system32\drivers\ksecdd.sys 2009-11-21 14:09 . 2009-11-21 14:09 1259008 ----a-w- c:\windows\system32\lsasrv.dll 2009-11-21 14:09 . 2009-11-21 14:09 270848 ----a-w- c:\windows\system32\schannel.dll 2009-11-21 14:05 . 2009-11-21 14:05 9847296 ----a-w- c:\windows\system32\NlsData000a.dll 2009-11-21 14:05 . 2009-11-21 14:05 2643456 ----a-w- c:\windows\system32\NlsData000c.dll 2009-11-21 14:05 . 2009-11-21 14:05 2342912 ----a-w- c:\windows\system32\NlsData000d.dll 2009-11-21 14:05 . 2009-11-21 14:05 1965056 ----a-w- c:\windows\system32\NlsData000f.dll 2009-11-21 14:05 . 2009-11-21 14:05 4495360 ----a-w- c:\windows\system32\NlsData0416.dll 2009-11-21 14:05 . 2009-11-21 14:05 4495360 ----a-w- c:\windows\system32\NlsData0414.dll 2009-11-21 14:05 . 2009-11-21 14:05 4495360 ----a-w- c:\windows\system32\NlsData0816.dll 2009-11-21 14:05 . 2009-11-21 14:05 1965056 ----a-w- c:\windows\system32\NlsData081a.dll 2009-11-21 14:05 . 2009-11-21 14:05 6917120 ----a-w- c:\windows\system32\NlsLexicons0c1a.dll 2009-11-21 14:05 . 2009-11-21 14:05 1965056 ----a-w- c:\windows\system32\NlsData0c1a.dll 2009-11-21 14:03 . 2009-11-21 14:03 6656 ----a-w- c:\windows\system32\kbd106n.dll 2009-11-21 13:59 . 2009-11-21 13:59 88576 ----a-w- c:\windows\system32\tlntsess.exe 2009-11-21 13:59 . 2009-11-21 13:59 206848 ----a-w- c:\windows\system32\telnet.exe 2009-11-21 13:48 . 2009-11-21 13:48 37888 ----a-w- c:\windows\system32\printcom.dll . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-11-28 16:53 . 2008-11-30 00:16 8011 ----a-w- c:\windows\bthservsdp.dat 2009-11-28 12:18 . 2008-05-22 20:34 118784 d-----w- c:\users\Sofian\AppData\Roaming\uTorrent 2009-11-27 17:54 . 2009-09-12 16:16 4096 d-----w- c:\users\Sofian\AppData\Roaming\Skype 2009-11-27 17:03 . 2009-02-06 20:48 -------- d-----w- c:\users\Sofian\AppData\Roaming\skypePM 2009-11-25 15:56 . 2006-11-02 16:11 755280 ----a-w- c:\windows\system32\perfh013.dat 2009-11-25 15:56 . 2006-11-02 16:11 162068 ----a-w- c:\windows\system32\perfc013.dat 2009-11-24 18:42 . 2008-12-10 11:32 8192 d-----w- c:\users\Sofian\AppData\Roaming\SystemRequirementsLab 2009-11-22 20:40 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat 2009-11-22 20:40 . 2009-11-22 20:40 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_07_00.Wdf 2009-11-22 19:40 . 2009-11-22 19:40 56 ---ha-w- c:\programdata\ezsidmv.dat 2009-11-22 19:20 . 2006-11-02 12:37 4096 d-----w- c:\program files\Windows Sidebar 2009-11-22 19:20 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Calendar 2009-11-22 19:20 . 2006-11-02 11:18 4096 d-----w- c:\program files\Windows Mail 2009-11-22 19:20 . 2006-11-02 12:37 4096 d-----w- c:\program files\Windows Photo Gallery 2009-11-22 19:20 . 2006-11-02 12:37 4096 d-----w- c:\program files\Windows Journal 2009-11-22 19:20 . 2006-11-02 12:37 4096 d-----w- c:\program files\Windows Collaboration 2009-11-22 19:20 . 2006-11-02 12:37 4096 d-----w- c:\program files\Windows Defender 2009-11-21 19:33 . 2009-01-17 23:25 16384 d-----w- c:\program files\Paint.NET 2009-11-21 19:00 . 2009-02-11 12:20 4096 d-----w- c:\users\Sofian\AppData\Roaming\FileZilla 2009-11-21 18:12 . 2006-11-02 10:32 101888 ----a-w- c:\windows\system32\ifxcardm.dll 2009-11-21 18:12 . 2006-11-02 10:32 82432 ----a-w- c:\windows\system32\axaltocm.dll 2009-11-21 17:13 . 2008-11-30 08:40 124064 ----a-w- c:\users\Sofian\AppData\Local\GDIPFONTCACHEV1.DAT 2009-11-21 16:59 . 2009-01-23 23:01 24576 d-----w- c:\programdata\Microsoft Help 2009-11-21 14:49 . 2008-04-15 23:40 24576 d-----w- c:\program files\Microsoft Works 2009-11-14 11:47 . 2008-12-14 17:59 -------- d-----w- c:\users\Sofian\AppData\Roaming\Yahoo! 2009-11-13 18:35 . 2008-12-09 21:35 411368 ----a-w- c:\windows\system32\deploytk.dll 2009-11-11 17:36 . 2008-05-04 09:42 4096 d-----w- c:\users\Sofian\AppData\Roaming\VoipBuster 2009-11-11 14:48 . 2008-04-19 19:38 4096 d-----w- c:\program files\dvdSanta 2009-11-07 17:17 . 2009-03-18 19:12 4096 d-----w- c:\users\Sofian\AppData\Roaming\MessengerDiscovery 2 2009-11-07 17:17 . 2008-06-11 10:58 4096 d-----w- c:\program files\MessengerDiscovery 2 2009-11-07 15:57 . 2008-06-11 11:26 4096 d-----w- c:\program files\Messenger Plus! Live 2009-11-07 15:42 . 2008-04-23 18:53 -------- d-----w- c:\program files\Windows Live 2009-11-06 21:46 . 2009-05-15 18:31 4096 d-----w- c:\program files\Recuva 2009-11-06 21:46 . 2008-07-09 22:13 4096 d-----w- c:\program files\DAEMON Tools Lite 2009-11-06 19:20 . 2008-04-15 23:17 12288 d--h--w- c:\program files\InstallShield Installation Information 2009-11-02 08:48 . 2009-08-21 07:48 314712 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\threatwork.exe 2009-11-02 08:48 . 2009-08-21 07:48 25440 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\savapibridge.dll 2009-11-02 08:48 . 2009-08-21 07:48 168800 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\lavamessage.dll 2009-11-02 08:48 . 2009-08-21 07:48 15688 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\lsdelete.exe 2009-11-02 08:48 . 2009-08-21 07:48 349008 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\lavalicense.dll 2009-11-02 08:48 . 2009-08-21 07:48 298336 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\UpdateManager.dll 2009-11-02 08:48 . 2009-08-21 07:48 84320 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\ShellExt.dll 2009-11-02 08:48 . 2009-08-21 07:48 1630560 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\Resources.dll 2009-11-02 08:48 . 2009-08-21 07:48 246640 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\RPAPI.dll 2009-11-02 08:48 . 2009-08-21 07:48 40288 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\PrivacyClean.dll 2009-11-02 08:48 . 2009-08-21 07:48 664936 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\CEAPI.dll 2009-11-02 08:47 . 2009-08-21 07:48 566632 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\Ad-AwareAdmin.exe 2009-11-02 08:47 . 2009-08-21 07:48 562552 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\Ad-AwareCommand.exe 2009-11-02 08:47 . 2009-08-21 07:48 2353992 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\Ad-Aware.exe 2009-11-02 08:47 . 2009-08-21 07:48 640760 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\AAWWSC.exe 2009-11-02 08:47 . 2009-08-21 07:48 520024 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\AAWTray.exe 2009-11-02 08:47 . 2009-08-21 07:48 1028432 ----a-w- c:\programdata\Lavasoft\Ad-Aware\update\AAWService.exe 2009-11-02 08:46 . 2008-06-24 14:31 691696 ----a-w- c:\windows\system32\drivers\sptd.sys 2009-11-02 08:44 . 2009-02-25 16:35 -------- d-----w- c:\programdata\DAEMON Tools Lite 2009-11-01 09:37 . 2009-07-04 17:11 4096 d-----w- c:\program files\Unlocker 2009-10-30 16:07 . 2009-05-24 12:54 4096 d-----w- c:\programdata\TrackMania 2009-10-28 22:17 . 2008-12-27 19:07 1 ----a-w- c:\users\Sofian\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys 2009-10-24 17:43 . 2008-04-15 23:36 4096 d-----w- c:\program files\Common Files\Adobe 2009-10-24 13:58 . 2009-10-24 12:26 -------- d-----w- c:\program files\Assassin's Creed 2009-10-24 13:47 . 2009-10-24 13:47 -------- d-----w- c:\users\Sofian\AppData\Roaming\Ubisoft 2009-10-24 13:47 . 2008-11-30 17:10 4096 d-----w- c:\programdata\Ubisoft 2009-10-21 10:43 . 2009-09-28 14:27 -------- d-----w- c:\program files\KONAMI 2009-10-21 09:17 . 2009-10-21 09:17 -------- d-----w- c:\programdata\KONAMI 2009-10-20 17:29 . 2009-05-30 09:59 -------- d-----w- c:\program files\Hamachi 2009-10-20 17:21 . 2008-06-18 14:05 4096 d-----w- c:\users\Sofian\AppData\Roaming\Hamachi 2009-10-20 16:26 . 2008-10-28 20:10 8192 d-----w- c:\program files\PES 2009 2009-10-18 13:08 . 2008-11-22 17:43 4096 d-----w- c:\program files\SystemRequirementsLab 2009-10-18 13:07 . 2009-10-18 13:07 138240 ----a-w- c:\users\Sofian\AppData\Roaming\SystemRequirementsLab\SRLProxy_srl_4_1_14_0_d.dll 2009-10-18 13:07 . 2009-10-18 13:07 138240 ----a-w- c:\users\Sofian\AppData\Roaming\SystemRequirementsLab\SRLProxy_srl_4_1_14_0_c.dll 2009-10-18 13:07 . 2009-10-18 13:07 138240 ----a-w- c:\users\Sofian\AppData\Roaming\SystemRequirementsLab\SRLProxy_srl_4_1_14_0_b.dll 2009-10-18 13:07 . 2009-10-18 13:07 138240 ----a-w- c:\users\Sofian\AppData\Roaming\SystemRequirementsLab\SRLProxy_srl_4_1_14_0_a.dll 2009-10-11 11:50 . 2009-10-11 11:50 -------- d-----w- c:\program files\Loquendo 2009-10-10 11:22 . 2009-10-10 11:20 -------- d-----w- c:\users\Sofian\AppData\Roaming\ISP Monitor 2009-10-10 11:20 . 2009-10-10 11:20 4096 d-----w- c:\program files\ISP Monitor 2009-10-10 11:20 . 2009-10-10 11:20 737280 ----a-w- c:\windows\iun6002.exe 2009-10-06 19:56 . 2008-04-15 23:36 4096 d-----w- c:\program files\Google 2009-10-05 14:32 . 2009-10-05 14:30 -------- d-----w- c:\programdata\DriverScanner 2009-10-05 14:30 . 2009-10-05 14:29 4096 dc-h--w- c:\programdata\{D5ABFFAD-D592-4F98-B02B-587125B4801F} 2009-10-05 14:30 . 2008-11-29 09:39 -------- d-----w- c:\program files\Uniblue 2009-10-05 14:30 . 2008-10-25 07:43 -------- d-----w- c:\users\Sofian\AppData\Roaming\Uniblue 2009-10-04 20:25 . 2008-04-30 13:05 8192 d-----w- c:\users\Sofian\AppData\Roaming\LimeWire 2009-10-04 18:07 . 2009-10-04 18:07 4096 d-----w- c:\program files\Auto Clicker 2009-10-03 21:19 . 2009-10-03 21:11 -------- d-----w- c:\program files\Foxit Software 2009-10-03 11:19 . 2009-03-27 18:44 4096 d-----w- c:\program files\LimeWire 2009-10-01 01:02 . 2009-11-22 19:48 2537472 ----a-w- c:\windows\system32\wpdshext.dll 2009-10-01 01:02 . 2009-11-22 19:48 30208 ----a-w- c:\windows\system32\WPDShextAutoplay.exe 2009-10-01 01:02 . 2009-11-22 19:48 334848 ----a-w- c:\windows\system32\PortableDeviceApi.dll 2009-10-01 01:02 . 2009-11-22 19:48 87552 ----a-w- c:\windows\system32\WPDShServiceObj.dll 2009-10-01 01:02 . 2009-11-22 19:48 31232 ----a-w- c:\windows\system32\BthMtpContextHandler.dll 2009-10-01 01:01 . 2009-11-22 19:48 546816 ----a-w- c:\windows\system32\wpd_ci.dll 2009-10-01 01:01 . 2009-11-22 19:48 160256 ----a-w- c:\windows\system32\PortableDeviceTypes.dll 2009-10-01 01:01 . 2009-11-22 19:48 60928 ----a-w- c:\windows\system32\PortableDeviceConnectApi.dll 2009-10-01 01:01 . 2009-11-22 19:48 350208 ----a-w- c:\windows\system32\WPDSp.dll 2009-10-01 01:01 . 2009-11-22 19:48 196608 ----a-w- c:\windows\system32\PortableDeviceWMDRM.dll 2009-10-01 01:01 . 2009-11-22 19:48 100864 ----a-w- c:\windows\system32\PortableDeviceClassExtension.dll 2009-10-01 01:01 . 2009-11-22 19:48 81920 ----a-w- c:\windows\system32\wpdbusenum.dll 2009-09-25 18:37 . 2009-09-25 18:37 247296 ----a-w- c:\users\Sofian\AppData\Roaming\SystemRequirementsLab\SRLProxy_srl_4_0_6_0_d_ind.dll 2009-09-25 18:37 . 2009-09-25 18:37 247296 ----a-w- c:\users\Sofian\AppData\Roaming\SystemRequirementsLab\SRLProxy_srl_4_0_6_0_c_ind.dll 2009-09-25 18:37 . 2009-09-25 18:37 247296 ----a-w- c:\users\Sofian\AppData\Roaming\SystemRequirementsLab\SRLProxy_srl_4_0_6_0_b_ind.dll 2009-09-25 18:37 . 2009-09-25 18:37 247296 ----a-w- c:\users\Sofian\AppData\Roaming\SystemRequirementsLab\SRLProxy_srl_4_0_6_0_a_ind.dll 2008-04-15 23:28 . 2008-04-15 23:28 76 --sha-w- c:\windows\CT4CET.bin 2008-04-19 11:13 . 2008-04-19 11:13 76 --sha-w- c:\windows\CT5PRET.BIN 2008-06-18 20:37 . 2008-06-18 20:37 0 --sha-w- c:\windows\SDE9B2FEC(285).tmp 2008-06-18 20:37 . 2008-06-18 20:37 0 --sha-w- c:\windows\SDE9B2FEC(559).tmp 2008-06-18 20:37 . 2008-06-18 20:37 0 --sh--w- c:\windows\SDE9B2FEC.tmp 2008-12-11 21:38 . 2008-12-11 11:43 2048 --sha-w- c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat 2008-12-11 21:38 . 2008-12-11 11:43 2048 --sha-w- c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat 2009-01-20 20:04 . 2008-11-28 16:46 88 --sha-r- c:\windows\System32\658BC72326.sys 2009-01-20 20:04 . 2008-11-28 16:46 3036 --sha-w- c:\windows\System32\KGyGaAvL.sys 2007-02-26 18:59 . 2007-02-26 18:59 8192 --sha-w- c:\windows\Users\Default\NTUSER.DAT . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-18 125952] "ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2006-09-11 86960] "VoipBuster"="c:\program files\VoipBuster.com\VoipBuster\voipbuster.exe" [2009-11-12 9094448] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-08-22 39408] "Google Update"="c:\users\Sofian\AppData\Local\Google\Update\GoogleUpdate.exe" [2009-11-21 135664] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "DeStatusMon"="c:\program files\Dell\MFP_DELL\deDvcStatus.exe dvcStatusMinimize" [X] "Google Quick Search Box"="c:\program files\Google\Quick Search Box\GoogleQuickSearchBox.exe " [X] "Apoint"="c:\program files\DellTPad\Apoint.exe" [2007-09-07 159744] "OEM02Mon.exe"="c:\windows\OEM02Mon.exe" [2007-05-09 36864] "DELL Webcam Manager"="c:\program files\Dell\Dell Webcam Manager\DellWMgr.exe" [2007-07-27 118784] "DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" [2009-05-21 206064] "dscactivate"="c:\program files\Dell Support Center\gs_agent\custom\dsca.exe" [2008-02-13 16384] "ECenter"="c:\dell\E-Center\EULALauncher.exe" [2008-01-18 17920] "IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-03-21 174872] "Logitech Hardware Abstraction Layer"="c:\program files\Common Files\Logitech\khalshared\KHALMNPR.EXE" [2007-01-11 101136] "OpwareSE4"="c:\program files\ScanSoft\OmniPageSE4\OpwareSE4.exe" [2007-03-12 79400] "PCMService"="c:\program files\Dell\MediaDirect\PCMService.exe" [2007-12-21 184320] "avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-08-17 81000] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-02-15 141848] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-02-15 166424] "Persistence"="c:\windows\system32\igfxpers.exe" [2008-02-15 133656] "FG_Monitor"="c:\program files\Folder Guard Pro\FGKey.exe" [2007-02-24 132680] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-11-13 149280] "SigmatelSysTrayApp"="c:\program files\SigmaTel\C-Major Audio\WDM\sttray.exe" [2007-11-12 405504] "Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" - c:\windows\KHALMNPR.Exe [2007-01-11 101136] c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ BTTray.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2006-11-3 703280] Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2008-4-16 50688] QuickSet.lnk - c:\program files\Dell\QuickSet\quickset.exe [2007-9-7 1180952] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service] @="Service" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sr.sys] @="FSFilter System Recovery" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend] @="Service" [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc] "VistaSp2"=hex(:7e,c7,31,9a,a9,6b,ca,01 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-991331777-2378318461-4560006-1000] "EnableNotificationsRef"=dword:00000001 R0 Lbd;Lbd;c:\windows\System32\drivers\Lbd.sys [21/08/2009 8:49 64160] R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);c:\windows\System32\drivers\sfdrv01a.sys [5/07/2006 13:46 63352] R1 aswSP;avast! Self Protection;c:\windows\System32\drivers\aswSP.sys [28/03/2009 9:53 114768] R2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\AEstSrv.exe [16/04/2008 0:08 73728] R2 aswFsBlk;aswFsBlk;c:\windows\System32\drivers\aswFsBlk.sys [28/03/2009 9:53 20560] R2 aswMonFlt;aswMonFlt;c:\windows\System32\drivers\aswMonFlt.sys [28/03/2009 9:52 53328] R2 CAMTHWDM;WebcamMax, WDM Video Capture;c:\windows\System32\drivers\CamthWDM.sys [30/11/2008 0:59 941784] R2 deMntrService;Dell AIO Center Service;c:\program files\Dell\MFP_DELL\deMntrService.exe [28/06/2007 14:05 131072] R2 FGUARD32;FGUARD32;c:\program files\Folder Guard Pro\FGUARD32.SYS [5/09/2009 15:53 48896] R2 FsUsbExService;FsUsbExService;c:\windows\System32\FsUsbExService.Exe [22/06/2009 18:56 233472] R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [29/10/2009 12:27 1074568] R2 ISPMonitorSrv;ISP Monitor;c:\program files\ISP Monitor\ISPMonitorSrv.exe [22/08/2007 23:55 36864] R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [18/01/2009 22:34 1028432] R2 litsgt;litsgt;c:\windows\System32\drivers\litsgt.sys [14/02/2009 17:48 137344] R2 sprtsvc_belgacom;SupportSoft Sprocket Service (belgacom);c:\program files\Belgacom\bin\sprtsvc.exe [29/05/2008 10:18 202016] R2 tansgt;tansgt;c:\windows\System32\drivers\tansgt.sys [14/02/2009 17:48 12032] R2 wlidsvc;Windows Live ID Sign-in Assistant;c:\program files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE [30/03/2009 16:28 1533808] R3 FsUsbExDisk;FsUsbExDisk;c:\windows\System32\FsUsbExDisk.Sys [22/06/2009 18:56 36608] R3 IntcHdmiAddService;Intel® High Definition Audio HDMI Service;c:\windows\System32\drivers\IntcHdmi.sys [30/11/2008 0:59 111616] R3 OEM02Dev;Creative Camera OEM002 Driver;c:\windows\System32\drivers\OEM02Dev.sys [30/11/2008 0:59 235648] R3 OEM02Vfx;Creative Camera OEM002 Video VFX Driver;c:\windows\System32\drivers\OEM02Vfx.sys [30/11/2008 0:59 7424] S3 ASPI;Advanced SCSI Programming Interface Driver;c:\windows\System32\drivers\ASPI32.SYS [15/04/2009 13:13 84832] S3 DESVUSB;Dell service driver;c:\windows\System32\drivers\desrvusb.sys [30/11/2008 0:59 17536] S3 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [21/11/2009 18:23 21504] S3 getPlusHelper;getPlus® Helper;c:\windows\System32\svchost.exe -k getPlusHelper [21/11/2009 18:23 21504] S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des -service --> c:\windows\system32\GameMon.des -service [?] S3 WMSvc;Web Management-service;c:\windows\System32\inetsrv\WMSvc.exe [2/11/2006 13:36 10752] S4 Anyplace Control Security;Anyplace Control Security;c:\windows\svcadmin.exe [24/04/2008 17:44 104960] --- Andere Services/Drivers In Geheugen --- *NewlyCreated* - FSUSBEXDISK [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] LPDService REG_MULTI_SZ LPDSVC rsmsvcs REG_MULTI_SZ ntmssvc ipripsvc REG_MULTI_SZ iprip bthsvcs REG_MULTI_SZ BthServ getPlusHelper REG_MULTI_SZ getPlusHelper LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache . Inhoud van de 'Gedeelde Taken' map 2009-11-02 c:\windows\Tasks\Ad-Aware Update (Weekly).job - c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-01-18 08:47] 2009-11-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-991331777-2378318461-4560006-1000Core.job - c:\users\Sofian\AppData\Local\Google\Update\GoogleUpdate.exe [2009-11-21 11:41] 2009-11-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-991331777-2378318461-4560006-1000UA.job - c:\users\Sofian\AppData\Local\Google\Update\GoogleUpdate.exe [2009-11-21 11:41] 2009-11-28 c:\windows\Tasks\RegCure Program Check.job - c:\program files\RegCure\RegCure.exe [2007-10-16 09:20] 2008-12-12 c:\windows\Tasks\RegCure.job - c:\program files\RegCure\RegCure.exe [2007-10-16 09:20] 2009-11-27 c:\windows\Tasks\User_Feed_Synchronization-{D130A10C-2448-4567-A8B2-044877608ACE}.job - c:\windows\system32\msfeedssync.exe [2009-11-21 03:41] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.google.be/ mStart Page = hxxp://www.games-fusion.net/ IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 IE: Formulieren opslaan - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComSavePass.html IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html IE: Invul Formulieren - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComFillForms.html IE: Menu aanpassen - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html IE: RoboForm Werkbalk - file://c:\program files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm DPF: {C212D449-8B3C-41F2-BD9A-047BD770550F} - hxxp://www.fiaa.eu/OPLauncher.cab FF - ProfilePath - c:\users\Sofian\AppData\Roaming\Mozilla\Firefox\Profiles\yo9qwklf.default\ FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q= FF - prefs.js: browser.search.selectedEngine - Wikipedia (nl) FF - prefs.js: browser.startup.homepage - hxxp://www.google.be/ FF - prefs.js: keyword.URL - FF - component: c:\program files\Siber Systems\AI RoboForm\Firefox\components\rfproxy_31.dll FF - component: c:\users\Sofian\AppData\Roaming\Mozilla\Firefox\Profiles\yo9qwklf.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\FFExternalAlert.dll FF - plugin: c:\progra~1\SONYON~1\npsoe.dll FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npbittorrent.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npOGAPlugin.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\NPOP7PlugIn.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npPandoWebInst.dll FF - plugin: c:\programdata\NexonEU\NGM\npNxGameeu.dll FF - plugin: c:\programdata\NexonUS\NGM\npNxGameUS.dll FF - plugin: c:\users\Sofian\AppData\Local\Google\Update\1.2.183.13\npGoogleOneClick8.dll FF - plugin: c:\users\Sofian\AppData\Roaming\Mozilla\Firefox\Profiles\yo9qwklf.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}\plugins\np_gp.dll FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ ---- FIREFOX POLICIES ---- FF - user.js: network.proxy.type - 0 FF - user.js: network.proxy.http - FF - user.js: network.proxy.http_port - 0 FF - user.js: network.proxy.ssl - FF - user.js: network.proxy.ssl_port - 0 FF - user.js: network.proxy.ftp - FF - user.js: network.proxy.ftp_port - 0 FF - user.js: network.proxy.gopher - FF - user.js: network.proxy.gopher_port - 0 FF - user.js: network.proxy.socks_version - 5 FF - user.js: network.proxy.socks - FF - user.js: network.proxy.socks_port - 0 FF - user.js: nglayout.initialpaint.delay - 100 FF - user.js: content.notify.ontimer - true FF - user.js: content.notify.interval - 100000 FF - user.js: content.notify.backoffcount - 5 FF - user.js: network.http.pipelining - true FF - user.js: network.http.proxy.pipelining - true FF - user.js: network.http.pipelining.maxrequests - 8 FF - user.js: network.http.max-connections - 32 FF - user.js: network.http.max-connections-per-server - 8 FF - user.js: network.http.max-persistent-connections-per-proxy - 4 FF - user.js: network.http.max-persistent-connections-per-server - 2 c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true); . - - - - ORPHANS VERWIJDERD - - - - SafeBoot-dmboot.sys SafeBoot-dmio.sys SafeBoot-dmload.sys SafeBoot-dmadmin SafeBoot-dmserver SafeBoot-SRService AddRemove-Ad-Aware - c:\programdata\{83C91755-2546-441D-AC40-9A6B4B860800}\Ad-AwareAE.exe REMOVE=TRUE MODIFY=FALSE AddRemove-eBay Icon - c:\users\Sofian\AppData\Roaming\Desktopicon\uninst.exe AddRemove-Uniblue RegistryBooster 2009 - c:\programdata\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}\Uniblue RegistryBooster.exe REMOVE=TRUE MODIFY=FALSE AddRemove-{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD} - c:\program files\DellTPad\Uninstap.exe ADDREMOVE ************************************************************************** scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: ************************************************************************** [HKEY_LOCAL_MACHINE\system\ControlSet001\Services\npggsvc] "ImagePath"="c:\windows\system32\GameMon.des -service" . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 "MSCurrentCountry"=dword:00000000 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 "MSCurrentCountry"=dword:00000000 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0007\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0008\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0009\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0010\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . --------------------- DLLs Geladen Onder Lopende Processen --------------------- - - - - - - - > 'Explorer.exe'(5280) c:\windows\system32\btncopy.dll . ------------------------ Andere Aktieve Processen ------------------------ . c:\program files\Alwil Software\Avast4\aswUpdSv.exe c:\windows\system32\WLANExt.exe c:\program files\Alwil Software\Avast4\ashServ.exe c:\windows\system32\CISVC.EXE c:\program files\Intel\Wireless\Bin\EvtEng.exe c:\program files\Intel\Intel Matrix Storage Manager\Iaantmon.exe c:\windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe c:\windows\system32\PnkBstrA.exe c:\windows\system32\PSIService.exe c:\program files\Intel\Wireless\Bin\RegSrvc.exe c:\windows\System32\tcpsvcs.exe c:\windows\System32\snmp.exe c:\program files\Dell Support Center\bin\sprtsvc.exe c:\windows\system32\STacSV.exe c:\windows\system32\DRIVERS\xaudio.exe c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe c:\program files\Alwil Software\Avast4\ashMaiSv.exe c:\windows\system32\wbem\unsecapp.exe c:\program files\Alwil Software\Avast4\ashWebSv.exe c:\program files\Dell\MFP_DELL\deDvcStatus.exe c:\program files\Alwil Software\Avast4\ashDisp.exe c:\windows\system32\igfxsrvc.exe c:\program files\Lavasoft\Ad-Aware\AAWTray.exe c:\program files\DellTPad\ApMsgFwd.exe c:\program files\DellTPad\Apntex.exe c:\program files\DellTPad\HidFind.exe c:\windows\ehome\ehmsas.exe c:\program files\WIDCOMM\Bluetooth Software\BtStackServer.exe c:\windows\servicing\TrustedInstaller.exe . ************************************************************************** . Voltooingstijd: 2009-11-28 18:16 - machine werd herstart ComboFix-quarantined-files.txt 2009-11-28 17:15 Pre-Run: 6.521.765.888 bytes beschikbaar Post-Run: 6.281.785.344 bytes beschikbaar - - End Of File - - E029799205AD1276FDBD79F3C4645D23 Mijn computer is wel een tikkeltje sneller nu, maar het blijft nog altijd een beetje traag

Ja het is wel wat sneller, maar niet zo snel als vroeger jammer genoeg.

Cool, Avast heeft hierop gereageerd.

Het MBAM-logje Malwarebytes' Anti-Malware 1.41 Database versie: 3250 Windows 6.0.6002 Service Pack 2 28/11/2009 14:11:21 mbam-log-2009-11-28 (14-11-21).txt Scan type: Snelle Scan Objecten gescand: 98974 Verstreken tijd: 5 minute(s), 24 second(s) Geheugenprocessen geïnfecteerd: 0 Geheugenmodulen geïnfecteerd: 0 Registersleutels geïnfecteerd: 0 Registerwaarden geïnfecteerd: 0 Registerdata bestanden geïnfecteerd: 0 Mappen geïnfecteerd: 0 Bestanden geïnfecteerd: 0 Geheugenprocessen geïnfecteerd: (Geen kwaadaardige items gevonden) Geheugenmodulen geïnfecteerd: (Geen kwaadaardige items gevonden) Registersleutels geïnfecteerd: (Geen kwaadaardige items gevonden) Registerwaarden geïnfecteerd: (Geen kwaadaardige items gevonden) Registerdata bestanden geïnfecteerd: (Geen kwaadaardige items gevonden) Mappen geïnfecteerd: (Geen kwaadaardige items gevonden) Bestanden geïnfecteerd: (Geen kwaadaardige items gevonden) En nu van Hijackthis Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 14:16:53, on 28/11/2009 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.18828) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Program Files\DellTPad\Apoint.exe C:\Windows\OEM02Mon.exe C:\Program Files\Dell Support Center\bin\sprtcmd.exe C:\Program Files\Dell\MFP_DELL\deDvcStatus.exe C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exe C:\Program Files\Dell\MediaDirect\PCMService.exe C:\Program Files\Alwil Software\Avast4\ashDisp.exe C:\Windows\System32\igfxtray.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Program Files\Folder Guard Pro\FGKey.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\ehome\ehtray.exe C:\Program Files\VoipBuster.com\VoipBuster\voipbuster.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe C:\Program Files\Digital Line Detect\DLG.exe C:\Program Files\Dell\QuickSet\quickset.exe C:\Windows\system32\igfxsrvc.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe C:\Program Files\DellTPad\ApMsgFwd.exe C:\Program Files\DellTPad\Apntex.exe C:\Program Files\DellTPad\HidFind.exe C:\Windows\system32\conime.exe C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe C:\Users\Sofian\AppData\Local\Temp\newtmp\scvhoq.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\MessengerDiscovery 2\MessengerDiscovery 2.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Games Fusion - PC Cheats, Saved Games, Trailers, Demos and Patches O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe O4 - HKLM\..\Run: [OEM02Mon.exe] C:\Windows\OEM02Mon.exe O4 - HKLM\..\Run: [DELL Webcam Manager] "C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe" /s O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter O4 - HKLM\..\Run: [DeStatusMon] "C:\Program Files\Dell\MFP_DELL\deDvcStatus.exe" dvcStatusMinimize O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe O4 - HKLM\..\Run: [iAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE" O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe" O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe" O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe O4 - HKLM\..\Run: [FG_Monitor] C:\Program Files\Folder Guard Pro\FGKey.exe /Start O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [Google Quick Search Box] "C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe" /autorun O4 - HKLM\..\Run: [sigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start O4 - HKCU\..\Run: [VoipBuster] "C:\Program Files\VoipBuster.com\VoipBuster\voipbuster.exe" -nosplash -minimized O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [Google Update] "C:\Users\Sofian\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - Global Startup: BTTray.lnk = ? O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe O4 - Global Startup: QuickSet.lnk = C:\Program Files\Dell\QuickSet\quickset.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Formulieren opslaan - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html O8 - Extra context menu item: Invul Formulieren - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O8 - Extra context menu item: Menu aanpassen - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html O8 - Extra context menu item: RoboForm Werkbalk - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: Formulier Invullen - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O9 - Extra 'Tools' menuitem: Invul Formulieren - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O9 - Extra button: Opslaan - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O9 - Extra 'Tools' menuitem: Formulieren opslaan - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O9 - Extra 'Tools' menuitem: RoboForm Werkbalk - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O13 - Gopher Prefix: O15 - Trusted IP range: http://192.168.0.1 O15 - ESC Trusted IP range: http://192.168.0.1 O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1258806103935 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1258907798795 O16 - DPF: {C212D449-8B3C-41F2-BD9A-047BD770550F} (Perparer Class) - http://www.fiaa.eu/OPLauncher.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\system32\aestsrv.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Dell AIO Center Service (deMntrService) - Dell - C:\Program Files\Dell\MFP_DELL\deMntrService.exe O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: ISP Monitor (ISPMonitorSrv) - How2 Studios - C:\Program Files\ISP Monitor\ISPMonitorSrv.exe O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing) O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\Windows\system32\sfrem01.exe O23 - Service: SupportSoft Sprocket Service (belgacom) (sprtsvc_belgacom) - SupportSoft, Inc. - C:\Program Files\Belgacom\bin\sprtsvc.exe O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\STacSV.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe O23 - Service: SupportSoft RemoteAssist - SupportSoft, Inc. - C:\Program Files\Common Files\Supportsoft\bin\ssrc.exe O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe -- End of file - 13043 bytes

Goeiendag, Mijn computer reageert sinds gisteren wel een beetje traag. Ik heb alvast een HJT-logje gemaakt Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:55:00, on 28/11/2009 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.18828) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Program Files\DellTPad\Apoint.exe C:\Windows\OEM02Mon.exe C:\Program Files\Dell Support Center\bin\sprtcmd.exe C:\Program Files\Dell\MFP_DELL\deDvcStatus.exe C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exe C:\Program Files\Dell\MediaDirect\PCMService.exe C:\Program Files\Alwil Software\Avast4\ashDisp.exe C:\Windows\System32\igfxtray.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Program Files\Folder Guard Pro\FGKey.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\ehome\ehtray.exe C:\Program Files\VoipBuster.com\VoipBuster\voipbuster.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe C:\Program Files\Digital Line Detect\DLG.exe C:\Program Files\Dell\QuickSet\quickset.exe C:\Windows\system32\igfxsrvc.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe C:\Program Files\DellTPad\ApMsgFwd.exe C:\Program Files\DellTPad\Apntex.exe C:\Program Files\DellTPad\HidFind.exe C:\Windows\system32\conime.exe C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe C:\Users\Sofian\AppData\Local\Temp\newtmp\scvhoq.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\MessengerDiscovery 2\MessengerDiscovery 2.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Games Fusion - PC Cheats, Saved Games, Trailers, Demos and Patches R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe O4 - HKLM\..\Run: [OEM02Mon.exe] C:\Windows\OEM02Mon.exe O4 - HKLM\..\Run: [DELL Webcam Manager] "C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe" /s O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter O4 - HKLM\..\Run: [DeStatusMon] "C:\Program Files\Dell\MFP_DELL\deDvcStatus.exe" dvcStatusMinimize O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe O4 - HKLM\..\Run: [iAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE" O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe" O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe" O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe O4 - HKLM\..\Run: [FG_Monitor] C:\Program Files\Folder Guard Pro\FGKey.exe /Start O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [Google Quick Search Box] "C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe" /autorun O4 - HKLM\..\Run: [sigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start O4 - HKCU\..\Run: [VoipBuster] "C:\Program Files\VoipBuster.com\VoipBuster\voipbuster.exe" -nosplash -minimized O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [Google Update] "C:\Users\Sofian\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - Startup: scvhoq.exe O4 - Global Startup: BTTray.lnk = ? O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe O4 - Global Startup: QuickSet.lnk = C:\Program Files\Dell\QuickSet\quickset.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Formulieren opslaan - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html O8 - Extra context menu item: Invul Formulieren - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O8 - Extra context menu item: Menu aanpassen - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html O8 - Extra context menu item: RoboForm Werkbalk - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: Formulier Invullen - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O9 - Extra 'Tools' menuitem: Invul Formulieren - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O9 - Extra button: Opslaan - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O9 - Extra 'Tools' menuitem: Formulieren opslaan - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O9 - Extra 'Tools' menuitem: RoboForm Werkbalk - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O13 - Gopher Prefix: O15 - Trusted IP range: http://192.168.0.1 O15 - ESC Trusted IP range: http://192.168.0.1 O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1258806103935 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1258907798795 O16 - DPF: {C212D449-8B3C-41F2-BD9A-047BD770550F} (Perparer Class) - http://www.fiaa.eu/OPLauncher.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\system32\aestsrv.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Dell AIO Center Service (deMntrService) - Dell - C:\Program Files\Dell\MFP_DELL\deMntrService.exe O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: ISP Monitor (ISPMonitorSrv) - How2 Studios - C:\Program Files\ISP Monitor\ISPMonitorSrv.exe O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing) O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\Windows\system32\sfrem01.exe O23 - Service: SupportSoft Sprocket Service (belgacom) (sprtsvc_belgacom) - SupportSoft, Inc. - C:\Program Files\Belgacom\bin\sprtsvc.exe O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\STacSV.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe O23 - Service: SupportSoft RemoteAssist - SupportSoft, Inc. - C:\Program Files\Common Files\Supportsoft\bin\ssrc.exe O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe -- End of file - 13277 bytes

Opgelost. Gewoon Java op een andere computer installeren en de map in Program Files kopieren op een USB-Stick en daarna terug op deze computer in Program Files geplaatst

Geen virussen