Cof

oke bedankt alweer - wordt wel steeds mysterieuzer wat er nou mis is .

ok, hier is de log

ComboFix 12-02-17.02 - Jesse 18-02-2012 13:44:06.1.2 - x64Microsoft Windows 7 Home Premium 6.1.7600.0.1252.31.1043.18.4095.3037 [GMT 1:00]

Gestart vanuit: c:\users\Jesse\Desktop\ComboFix.exe

AV: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}

SP: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

(((((((((((((((((((( Bestanden Gemaakt van 2012-01-18 to 2012-02-18 ))))))))))))))))))))))))))))))

.

.

2012-02-17 22:23 . 2009-09-04 16:29 453456 ----a-w- c:\windows\SysWow64\d3dx10_42.dll

2012-02-17 22:23 . 2009-09-04 16:29 5501792 ----a-w- c:\windows\SysWow64\d3dcsx_42.dll

2012-02-17 22:23 . 2009-09-04 16:29 1974616 ----a-w- c:\windows\SysWow64\D3DCompiler_42.dll

2012-02-17 22:23 . 2009-09-04 16:29 1892184 ----a-w- c:\windows\SysWow64\D3DX9_42.dll

2012-02-17 22:04 . 2012-02-17 22:04 -------- d-----w- c:\programdata\Malwarebytes

2012-02-17 22:04 . 2011-12-10 14:24 23152 ----a-w- c:\windows\system32\drivers\mbam.sys

2012-02-17 15:20 . 2012-02-17 15:20 -------- d-----w- c:\windows\SysWow64\wbem\en-US

2012-02-17 15:20 . 2012-02-17 15:20 -------- d-----w- c:\windows\system32\wbem\en-US

2012-02-17 15:07 . 2012-02-17 15:07 -------- d-----w- c:\program files (x86)\Microsoft.NET

2012-02-17 15:03 . 2012-02-17 15:03 21712 ----a-w- c:\windows\SysWow64\drivers\DrvAgent64.SYS

2012-02-17 14:49 . 2012-02-17 14:49 -------- d-----w- c:\programdata\IObit

2012-02-17 14:15 . 2012-02-17 14:15 -------- d-----w- c:\windows\SysWow64\Wat

2012-02-17 14:15 . 2012-02-17 14:15 -------- d-----w- c:\windows\system32\Wat

2012-02-17 11:24 . 2010-09-14 06:45 367104 ----a-w- c:\windows\system32\wcncsvc.dll

2012-02-17 11:24 . 2010-09-14 06:07 276992 ----a-w- c:\windows\SysWow64\wcncsvc.dll

2012-02-17 11:23 . 2009-09-10 06:28 311808 ----a-w- c:\windows\system32\msv1_0.dll

2012-02-17 11:23 . 2009-09-10 05:52 257024 ----a-w- c:\windows\SysWow64\msv1_0.dll

2012-02-17 11:18 . 2009-11-25 11:47 99176 ----a-w- c:\windows\SysWow64\PresentationHostProxy.dll

2012-02-17 11:18 . 2009-11-25 11:47 49472 ----a-w- c:\windows\SysWow64\netfxperf.dll

2012-02-17 11:18 . 2009-11-25 11:47 48960 ----a-w- c:\windows\system32\netfxperf.dll

2012-02-17 11:18 . 2009-11-25 11:47 297808 ----a-w- c:\windows\SysWow64\mscoree.dll

2012-02-17 11:18 . 2009-11-25 11:47 295264 ----a-w- c:\windows\SysWow64\PresentationHost.exe

2012-02-17 11:18 . 2009-11-25 11:47 1130824 ----a-w- c:\windows\SysWow64\dfshim.dll

2012-02-17 11:18 . 2009-11-25 11:47 109912 ----a-w- c:\windows\system32\PresentationHostProxy.dll

2012-02-17 11:18 . 2009-11-25 11:47 444752 ----a-w- c:\windows\system32\mscoree.dll

2012-02-17 11:18 . 2009-11-25 11:47 320352 ----a-w- c:\windows\system32\PresentationHost.exe

2012-02-17 11:18 . 2009-11-25 11:47 1942856 ----a-w- c:\windows\system32\dfshim.dll

2012-02-17 11:18 . 2010-02-23 08:16 294912 ----a-w- c:\windows\system32\browserchoice.exe

2012-02-17 11:14 . 2011-06-23 05:29 5507968 ----a-w- c:\windows\system32\ntoskrnl.exe

2012-02-17 11:14 . 2011-06-23 04:38 3957120 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe

2012-02-17 11:14 . 2011-06-23 04:38 3902336 ----a-w- c:\windows\SysWow64\ntoskrnl.exe

2012-02-17 11:13 . 2010-12-18 06:11 714752 ----a-w- c:\windows\system32\kerberos.dll

2012-02-17 11:13 . 2010-12-18 05:29 541184 ----a-w- c:\windows\SysWow64\kerberos.dll

2012-02-17 11:11 . 2011-05-04 05:30 2326016 ----a-w- c:\windows\system32\tquery.dll

2012-02-17 11:10 . 2010-08-04 07:07 552960 ----a-w- c:\windows\system32\msdri.dll

2012-02-17 11:10 . 2010-03-04 04:32 243712 ----a-w- c:\windows\system32\drivers\ks.sys

2012-02-17 11:08 . 2011-10-26 05:19 43520 ----a-w- c:\windows\system32\csrsrv.dll

2012-02-17 11:08 . 2012-01-03 06:24 515584 ----a-w- c:\windows\system32\timedate.cpl

2012-02-17 11:08 . 2012-01-03 05:44 478208 ----a-w- c:\windows\SysWow64\timedate.cpl

2012-02-17 11:08 . 2011-02-24 06:30 476160 ----a-w- c:\windows\system32\XpsGdiConverter.dll

2012-02-17 11:08 . 2011-02-24 05:32 288256 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll

2012-02-17 11:08 . 2011-09-29 16:24 1897328 ----a-w- c:\windows\system32\drivers\tcpip.sys

2012-02-17 11:06 . 2010-08-21 06:29 558592 ----a-w- c:\windows\system32\spoolsv.exe

2012-02-17 11:05 . 2012-02-17 11:05 -------- d-----w- c:\program files (x86)\Common Files\Adobe

2012-02-17 11:03 . 2010-10-12 05:05 35328 ----a-w- c:\program files\Windows Mail\wabfind.dll

2012-02-17 11:03 . 2010-10-12 05:00 516096 ----a-w- c:\program files\Windows Mail\wab.exe

2012-02-17 11:03 . 2010-10-12 04:25 516096 ----a-w- c:\program files (x86)\Windows Mail\wab.exe

2012-02-17 11:03 . 2011-12-28 03:59 499200 ----a-w- c:\windows\system32\drivers\afd.sys

2012-02-17 11:00 . 2011-05-24 11:21 404992 ----a-w- c:\windows\system32\umpnpmgr.dll

2012-02-17 10:59 . 2011-02-23 05:15 90624 ----a-w- c:\windows\system32\drivers\bowser.sys

2012-02-17 10:58 . 2010-08-27 06:14 236032 ----a-w- c:\windows\system32\srvsvc.dll

2012-02-17 10:58 . 2010-08-27 05:46 9728 ----a-w- c:\windows\SysWow64\sscore.dll

2012-02-17 10:48 . 2011-11-19 15:07 77312 ----a-w- c:\windows\system32\packager.dll

2012-02-17 10:48 . 2011-11-19 14:06 67072 ----a-w- c:\windows\SysWow64\packager.dll

2012-02-16 22:06 . 2008-10-10 03:52 452440 ----a-w- c:\windows\SysWow64\d3dx10_40.dll

2012-02-16 22:06 . 2008-10-10 03:52 4379984 ----a-w- c:\windows\SysWow64\D3DX9_40.dll

2012-02-16 22:06 . 2008-10-10 03:52 2036576 ----a-w- c:\windows\SysWow64\D3DCompiler_40.dll

2012-02-16 21:59 . 2009-03-16 13:18 69448 ----a-w- c:\windows\SysWow64\XAPOFX1_3.dll

2012-02-16 21:59 . 2009-03-16 13:18 517448 ----a-w- c:\windows\SysWow64\XAudio2_4.dll

2012-02-16 21:59 . 2009-03-16 13:18 235352 ----a-w- c:\windows\SysWow64\xactengine3_4.dll

2012-02-16 21:59 . 2009-03-16 13:18 22360 ----a-w- c:\windows\SysWow64\X3DAudio1_6.dll

2012-02-16 21:59 . 2007-04-04 17:53 81768 ----a-w- c:\windows\SysWow64\xinput1_3.dll

2012-02-16 21:59 . 2007-03-12 15:42 3495784 ----a-w- c:\windows\SysWow64\d3dx9_33.dll

2012-02-16 21:59 . 2006-09-28 15:05 2414360 ----a-w- c:\windows\SysWow64\d3dx9_31.dll

2012-02-16 21:59 . 2012-02-16 21:59 -------- d-----w- c:\program files (x86)\Microsoft XNA

2012-02-16 21:53 . 2012-02-16 21:53 -------- d-----w- c:\program files (x86)\Realtek

2012-02-16 21:53 . 2012-02-16 21:55 -------- d--h--w- c:\program files (x86)\Temp

2012-02-16 21:30 . 2012-02-16 21:30 -------- d-----w- c:\program files\Speccy

2012-02-16 21:18 . 2012-02-16 21:18 -------- d--h--w- c:\programdata\Common Files

2012-02-16 21:18 . 2012-02-16 21:18 -------- d-----w- c:\windows\SysWow64\drivers\AVG

2012-02-16 21:18 . 2012-02-18 12:41 -------- d-----w- c:\windows\system32\drivers\AVG

2012-02-16 21:18 . 2012-02-16 21:34 -------- d-----w- c:\programdata\AVG2012

2012-02-16 21:17 . 2012-02-16 21:17 -------- d-----w- c:\program files (x86)\AVG

2012-02-16 21:13 . 2012-02-18 12:41 -------- d-----w- c:\programdata\MFAData

2012-02-16 21:12 . 2012-02-16 21:12 -------- d-----w- c:\users\UpdatusUser

2012-02-16 21:12 . 2012-02-16 21:12 -------- d-----w- c:\program files (x86)\NVIDIA Corporation

2012-02-16 21:12 . 2012-02-18 12:48 -------- d-----w- c:\programdata\NVIDIA

2012-02-16 21:10 . 2012-02-16 21:12 -------- d-----w- c:\program files\NVIDIA Corporation

2012-02-16 21:07 . 2012-02-16 21:29 -------- d-----w- c:\program files (x86)\Common Files\Steam

2012-02-16 21:04 . 2012-02-17 22:24 -------- d-sh--w- c:\windows\Installer

2012-02-16 20:02 . 2012-02-17 22:11 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2012-02-16 20:02 . 2012-02-16 20:02 -------- d-----w- c:\windows\SysWow64\Macromed

2012-02-16 20:02 . 2012-02-16 20:02 -------- d-----w- c:\windows\system32\Macromed

2012-02-16 19:58 . 2012-01-17 03:39 8602168 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{800633A6-14C5-4573-8B5A-92BC39A9F359}\mpengine.dll

2012-02-16 19:58 . 2012-01-29 04:10 279656 ------w- c:\windows\system32\MpSigStub.exe

2012-02-16 19:45 . 2012-02-16 19:45 -------- d-----w- c:\program files\CCleaner

2012-02-16 19:45 . 2010-01-09 07:19 139264 ----a-w- c:\windows\system32\cabview.dll

2012-02-16 19:45 . 2010-01-09 06:52 132608 ----a-w- c:\windows\SysWow64\cabview.dll

2012-02-16 19:45 . 2009-12-29 08:03 220672 ----a-w- c:\windows\system32\wintrust.dll

2012-02-16 19:45 . 2009-12-29 06:55 172032 ----a-w- c:\windows\SysWow64\wintrust.dll

2012-02-16 19:44 . 2012-02-16 22:05 -------- d-----w- c:\users\Jesse

2012-02-16 19:17 . 2012-02-16 19:17 -------- d-----w- C:\Windows.old

.

.

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Steam"="d:\program files\Steam\Steam.exe" [2012-02-16 1242448]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"AVG_TRAY"="c:\program files (x86)\AVG\AVG2012\avgtray.exe" [2012-01-24 2416480]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]

"Malwarebytes' Anti-Malware"="d:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-01-13 460872]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]

BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~2\AVG\AVG2012\avgrsa.exe /sync /restart

.

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R2 MBAMService;MBAMService;d:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2012-01-13 652360]

R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-10-15 2253120]

R3 cpuz135;cpuz135;c:\users\Jesse\AppData\Local\Temp\cpuz135\cpuz135_x64.sys [x]

R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]

R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [x]

S0 AVGIDSEH;AVGIDSEH;c:\windows\system32\DRIVERS\AVGIDSEH.Sys [x]

S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [x]

S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [x]

S1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [x]

S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [x]

S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]

S2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2012\AVGIDSAgent.exe [2011-10-12 4433248]

S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2012\avgwdsvc.exe [2011-08-02 192776]

S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-10-14 381248]

S3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller;c:\windows\system32\DRIVERS\l160x64.sys [x]

S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\AVGIDSDriver.Sys [x]

S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\AVGIDSFilter.Sys [x]

.

.

--- Andere Services/Drivers In Geheugen ---

.

*NewlyCreated* - WS2IFSL

.

Inhoud van de 'Gedeelde Taken' map

.

2012-02-17 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2543349712-3436505542-2608285774-1000Core.job

- c:\users\Jesse\AppData\Local\Google\Update\GoogleUpdate.exe [2012-02-16 21:02]

.

2012-02-17 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2543349712-3436505542-2608285774-1000UA.job

- c:\users\Jesse\AppData\Local\Google\Update\GoogleUpdate.exe [2012-02-16 21:02]

.

.

--------- x86-64 -----------

.

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"LoadAppInit_DLLs"=0x0

.

------- Bijkomende Scan -------

.

uLocal Page = c:\windows\system32\blank.htm

mLocal Page = c:\windows\SysWOW64\blank.htm

TCP: DhcpNameServer = 212.54.40.25 212.54.35.25

.

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11f_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11f_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11f.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.10"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11f.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11f.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11f.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Voltooingstijd: 2012-02-18 13:51:33 - machine werd herstart

ComboFix-quarantined-files.txt 2012-02-18 12:51

.

Pre-Run: 7.807.795.200 bytes beschikbaar

Post-Run: 7.564.386.304 bytes beschikbaar

.

- - End Of File - - 124E12E8D6C9469BFE37998DCD676C82

Bedankt - wat snel allemaal!

Speccy: http://speccy.piriform.com/results/WeUzonkTpZ5nKquwTin3NN4

HiJackThis: Logfile of Trend Micro HijackThis v2.0.4Scan saved at 18:00:54, on 17-2-2012

Platform: Windows 7 (WinNT 6.00.3504)

MSIE: Internet Explorer v9.00 (9.00.8112.16421)

Boot mode: Normal

Running processes:

D:\Program Files\Steam\Steam.exe

C:\Program Files (x86)\AVG\AVG2012\avgtray.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

D:\Program Files\Game Booster 3\gbtray.exe

C:\Users\Jesse\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Users\Jesse\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Users\Jesse\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Users\Jesse\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Users\Jesse\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Users\Jesse\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Users\Jesse\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Users\Jesse\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Windows\SysWOW64\rundll32.exe

C:\Users\Jesse\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Users\Jesse\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\Windows Media Player\wmplayer.exe

C:\Users\Jesse\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

F2 - REG:system.ini: UserInit=userinit.exe

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKCU\..\Run: [Google Update] "C:\Users\Jesse\AppData\Local\Google\Update\GoogleUpdate.exe" /c

O4 - HKCU\..\Run: [steam] "D:\Program Files\Steam\Steam.exe" -silent

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-21-2543349712-3436505542-2608285774-1003\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')

O4 - HKUS\S-1-5-21-2543349712-3436505542-2608285774-1003\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe

O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)

O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe

O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--

End of file - 7801 bytes

Hallo,

Ik heb sinds een tijdje dat games die ik speel zeer choppy spelen. Het is alsof de game constant - heel kort - vastloopt (inclusief mijn geluid, dat hapert net zo op dat moment). Voor de duidelijkheid: ik speel spellen als heroes of newerth and bloodline champions, ZEER lichte spellen die ik al jaren speel zonder problemen. Pas sinds kort (1 maand ong) is dit begonnen.

Specs:

windows 7 Home Premium 64-bit

AMD Athlon 64 X2 6000+ Windsor 90nm Technologie

4,00 GB Dual-Kanaal DDR2 @ 375MHz (6-6-6-18)

ASUSTeK Computer INC. M2V (SOCKET AM2)

BenQG2222HDL (1920x1080@60Hz) - 512MBGeForce 9600 GT (XFX Pine Group)

156GB Hitachi Hitachi HDS721616PLA380 ATA Device (SATA)

63GB Kingston KINGSTON SNV425S264GB ATA Device (SATA)

TSSTcorp CD/DVDW SH-S162L ATA Device

Realtek High Definition Audio

Ik ben absoluut geen expert op computergebied maar heb al behoorlijk veel geprobeerd. Ik heb mijn computeer fysiek opgeschoond (alle stof enzo), ik heb windows opnieuw geinstalleerd (op mijn Kingston schijf, die als primair werd aangegeven), ik heb met ccleaner daarna de vrije ruimte gewist. Ik heb uiteraard alle drivers geupdate.

Nou heb ik het idee dat het iets met mijn harde schijven is. Dit is meer een 'guess' dan een 'educated guess' maar meer kan ik niet doen . Ik heb zo'n lichtje op mijn computerkast die constant rood knippert, vooral tijdens het spelen van games. Maar ja, daar houdt mijn kennis wel zo'n beetje op dus ik hoop erg dat iemand mij hiermee kan helpen - ik zou graag weer normaal kunnen spelen!

Alvast bedankt!

Edit1: misschien relevant: temperaturen komen niet boven de 45-50 graden celsius (volgens het programmaatje 'Speccy').