Ga naar inhoud

SergePasquasy

Lid
  • Items

    14
  • Registratiedatum

  • Laatst bezocht

Berichten die geplaatst zijn door SergePasquasy

  1. Waar kan ik dit vinden? Ik ken echt niet veel van computers sorry hoor.

    Ook staat mijn computer in engels en is dit lastiger zoeken zo.

    In begin was alles in Nederlands maar na formatteren stond alles plots in het engels.

    Ik heb mijn slaapmodus uitgedaan en computer reageert onmiddellijk als hij tijdje stil stond.

    maar ik krijg af en toe nog wit beeld, en dan krijg ik tekst not responding dan blijft het 10 seconden wit beeld.

    Is het niet beter dan ik heel mijn computer formatteren en recover met de dvd?Of zal mijn computer nog raar doen?

  2. Dat heb ik net gedaan en zal het eens bekijken.

    Als ik de computer uit doe en terug aan steek start hij op en komt er tekst en hoor je hem klik zeggen en de computer valt uit en start opnieuw in veilige modus.

    Dan als ik de computer aan krijg na 6 a 10 pogingen dan geeft hij telkens deze melding aan.

    (could notlaud file or assembly 'sorttbls.nlp' ore one of its dependenceies.The system cannot find teh file specified.)

    Voor de rest is het al zeker aangenamer werken met de computer hij hapert niet meer als ik typ.

  3. ComboFix 12-09-03.04 - Serge 03-09-2012 12:15:40.2.2 - x64

    Microsoft Windows 7 Home Premium 6.1.7600.0.1252.32.1033.18.3838.2743 [GMT 2:00]

    Gestart vanuit: c:\users\Serge\Desktop\ComboFix.exe

    gebruikte Opdracht switches :: c:\users\Serge\Desktop\CFScript..txt

    AV: Norton Internet Security *Disabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}

    FW: Norton Internet Security *Disabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}

    SP: Norton Internet Security *Disabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}

    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    .

    .

    (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    .

    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    -------\Service_Partner Service

    .

    .

    (((((((((((((((((((( Bestanden Gemaakt van 2012-08-03 to 2012-09-03 ))))))))))))))))))))))))))))))

    .

    .

    2012-09-03 10:28 . 2012-09-03 10:28 -------- d-----w- c:\users\Default\AppData\Local\temp

    2012-09-02 15:28 . 2011-02-19 06:37 1135104 ----a-w- c:\windows\system32\FntCache.dll

    2012-08-31 09:11 . 2012-08-23 08:26 9310152 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{9EE64184-1907-4FA4-AE24-F13A71DBBC2E}\mpengine.dll

    2012-08-14 22:54 . 2012-02-11 06:36 751104 ----a-w- c:\windows\system32\win32spl.dll

    2012-08-14 22:54 . 2012-02-11 06:29 67584 ----a-w- c:\windows\splwow64.exe

    2012-08-14 22:54 . 2012-02-11 06:29 559104 ----a-w- c:\windows\system32\spoolsv.exe

    2012-08-14 22:54 . 2012-02-11 05:44 492032 ----a-w- c:\windows\SysWow64\win32spl.dll

    2012-08-14 19:49 . 2012-05-05 08:30 503808 ----a-w- c:\windows\system32\srcore.dll

    2012-08-14 19:49 . 2012-05-05 07:44 43008 ----a-w- c:\windows\SysWow64\srclient.dll

    2012-08-14 19:49 . 2012-07-04 21:23 41472 ----a-w- c:\windows\SysWow64\browcli.dll

    2012-08-14 19:49 . 2012-07-04 22:04 73216 ----a-w- c:\windows\system32\netapi32.dll

    2012-08-14 19:49 . 2012-07-04 22:01 58880 ----a-w- c:\windows\system32\browcli.dll

    2012-08-14 19:49 . 2012-07-04 22:01 136704 ----a-w- c:\windows\system32\browser.dll

    2012-08-14 19:49 . 2012-07-18 17:31 3146752 ----a-w- c:\windows\system32\win32k.sys

    2012-08-14 19:49 . 2012-05-14 05:20 956416 ----a-w- c:\windows\system32\localspl.dll

    .

    .

    .

    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2012-08-21 09:12 . 2012-07-01 19:19 285328 ----a-w- c:\windows\system32\aswBoot.exe

    2012-08-15 01:00 . 2012-07-01 17:12 62134624 ----a-w- c:\windows\system32\MRT.exe

    2012-07-04 18:11 . 2012-07-04 18:11 388096 ----a-r- c:\users\Serge\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

    2012-07-02 01:03 . 2012-07-02 01:03 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe

    2012-07-02 01:03 . 2012-07-02 01:03 161792 ----a-w- c:\windows\SysWow64\msls31.dll

    2012-07-02 01:03 . 2012-07-02 01:03 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll

    2012-07-02 01:03 . 2012-07-02 01:03 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe

    2012-07-02 01:03 . 2012-07-02 01:03 74752 ----a-w- c:\windows\SysWow64\iesetup.dll

    2012-07-02 01:03 . 2012-07-02 01:03 63488 ----a-w- c:\windows\SysWow64\tdc.ocx

    2012-07-02 01:03 . 2012-07-02 01:03 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll

    2012-07-02 01:03 . 2012-07-02 01:03 420864 ----a-w- c:\windows\SysWow64\vbscript.dll

    2012-07-02 01:03 . 2012-07-02 01:03 367104 ----a-w- c:\windows\SysWow64\html.iec

    2012-07-02 01:03 . 2012-07-02 01:03 35840 ----a-w- c:\windows\SysWow64\imgutil.dll

    2012-07-02 01:03 . 2012-07-02 01:03 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll

    2012-07-02 01:03 . 2012-07-02 01:03 152064 ----a-w- c:\windows\SysWow64\wextract.exe

    2012-07-02 01:03 . 2012-07-02 01:03 150528 ----a-w- c:\windows\SysWow64\iexpress.exe

    2012-07-02 01:03 . 2012-07-02 01:03 11776 ----a-w- c:\windows\SysWow64\mshta.exe

    2012-07-02 01:03 . 2012-07-02 01:03 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll

    2012-07-02 01:03 . 2012-07-02 01:03 101888 ----a-w- c:\windows\SysWow64\admparse.dll

    2012-07-02 01:03 . 2012-07-02 01:03 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe

    2012-07-02 01:03 . 2012-07-02 01:03 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe

    2012-07-02 01:03 . 2012-07-02 01:03 89088 ----a-w- c:\windows\system32\ie4uinit.exe

    2012-07-02 01:03 . 2012-07-02 01:03 85504 ----a-w- c:\windows\system32\iesetup.dll

    2012-07-02 01:03 . 2012-07-02 01:03 82432 ----a-w- c:\windows\system32\icardie.dll

    2012-07-02 01:03 . 2012-07-02 01:03 76800 ----a-w- c:\windows\system32\tdc.ocx

    2012-07-02 01:03 . 2012-07-02 01:03 697344 ----a-w- c:\windows\system32\msfeeds.dll

    2012-07-02 01:03 . 2012-07-02 01:03 65024 ----a-w- c:\windows\system32\pngfilt.dll

    2012-07-02 01:03 . 2012-07-02 01:03 603648 ----a-w- c:\windows\system32\vbscript.dll

    2012-07-02 01:03 . 2012-07-02 01:03 55296 ----a-w- c:\windows\system32\msfeedsbs.dll

    2012-07-02 01:03 . 2012-07-02 01:03 534528 ----a-w- c:\windows\system32\ieapfltr.dll

    2012-07-02 01:03 . 2012-07-02 01:03 49664 ----a-w- c:\windows\system32\imgutil.dll

    2012-07-02 01:03 . 2012-07-02 01:03 48640 ----a-w- c:\windows\system32\mshtmler.dll

    2012-07-02 01:03 . 2012-07-02 01:03 452608 ----a-w- c:\windows\system32\dxtmsft.dll

    2012-07-02 01:03 . 2012-07-02 01:03 448512 ----a-w- c:\windows\system32\html.iec

    2012-07-02 01:03 . 2012-07-02 01:03 403248 ----a-w- c:\windows\system32\iedkcs32.dll

    2012-07-02 01:03 . 2012-07-02 01:03 39936 ----a-w- c:\windows\system32\iernonce.dll

    2012-07-02 01:03 . 2012-07-02 01:03 3695416 ----a-w- c:\windows\system32\ieapfltr.dat

    2012-07-02 01:03 . 2012-07-02 01:03 30720 ----a-w- c:\windows\system32\licmgr10.dll

    2012-07-02 01:03 . 2012-07-02 01:03 282112 ----a-w- c:\windows\system32\dxtrans.dll

    2012-07-02 01:03 . 2012-07-02 01:03 267776 ----a-w- c:\windows\system32\ieaksie.dll

    2012-07-02 01:03 . 2012-07-02 01:03 249344 ----a-w- c:\windows\system32\webcheck.dll

    2012-07-02 01:03 . 2012-07-02 01:03 222208 ----a-w- c:\windows\system32\msls31.dll

    2012-07-02 01:03 . 2012-07-02 01:03 197120 ----a-w- c:\windows\system32\msrating.dll

    2012-07-02 01:03 . 2012-07-02 01:03 165888 ----a-w- c:\windows\system32\iexpress.exe

    2012-07-02 01:03 . 2012-07-02 01:03 163840 ----a-w- c:\windows\system32\ieakui.dll

    2012-07-02 01:03 . 2012-07-02 01:03 160256 ----a-w- c:\windows\system32\wextract.exe

    2012-07-02 01:03 . 2012-07-02 01:03 160256 ----a-w- c:\windows\system32\ieakeng.dll

    2012-07-02 01:03 . 2012-07-02 01:03 149504 ----a-w- c:\windows\system32\occache.dll

    2012-07-02 01:03 . 2012-07-02 01:03 145920 ----a-w- c:\windows\system32\iepeers.dll

    2012-07-02 01:03 . 2012-07-02 01:03 135168 ----a-w- c:\windows\system32\IEAdvpack.dll

    2012-07-02 01:03 . 2012-07-02 01:03 12288 ----a-w- c:\windows\system32\mshta.exe

    2012-07-02 01:03 . 2012-07-02 01:03 114176 ----a-w- c:\windows\system32\admparse.dll

    2012-07-02 01:03 . 2012-07-02 01:03 111616 ----a-w- c:\windows\system32\iesysprep.dll

    2012-07-02 01:03 . 2012-07-02 01:03 10752 ----a-w- c:\windows\system32\msfeedssync.exe

    2012-07-02 01:03 . 2012-07-02 01:03 103936 ----a-w- c:\windows\system32\inseng.dll

    2012-07-01 22:32 . 2012-07-01 22:25 70344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

    2012-07-01 22:32 . 2012-07-01 22:25 426184 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe

    2012-07-01 21:21 . 2009-08-25 03:36 6 ----a-w- c:\windows\system32\PLD_Framework.cmd

    2012-07-01 12:40 . 2012-07-01 12:40 29480 ----a-w- c:\windows\SysWow64\msxml3a.dll

    2012-07-01 12:40 . 2012-07-01 12:40 505128 ----a-w- c:\windows\SysWow64\msvcp71.dll

    2012-07-01 12:40 . 2012-07-01 12:40 353576 ----a-w- c:\windows\SysWow64\msvcr71.dll

    2012-06-09 05:30 . 2012-07-16 18:37 14165504 ----a-w- c:\windows\system32\shell32.dll

    2012-06-06 05:50 . 2012-07-16 18:38 2003968 ----a-w- c:\windows\system32\msxml6.dll

    2012-06-06 05:50 . 2012-07-13 16:19 1880064 ----a-w- c:\windows\system32\msxml3.dll

    2012-06-06 05:09 . 2012-07-16 18:38 1389568 ----a-w- c:\windows\SysWow64\msxml6.dll

    2012-06-06 05:09 . 2012-07-16 18:38 1236992 ----a-w- c:\windows\SysWow64\msxml3.dll

    .

    .

    ((((((((((((((((((((((((((((( SnapShot@2012-09-02_15.21.43 )))))))))))))))))))))))))))))))))))))))))

    .

    + 2009-07-14 05:10 . 2012-09-03 10:34 38540 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin

    + 2009-07-14 04:46 . 2012-09-03 10:01 80192 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\Cache\cache.dat

    + 2012-07-01 13:19 . 2012-09-03 10:34 6214 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-3164171304-2995391404-1607382672-1001_UserData.bin

    - 2012-09-02 15:21 . 2012-09-02 15:21 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat

    + 2012-09-03 10:30 . 2012-09-03 10:30 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat

    + 2012-09-03 10:30 . 2012-09-03 10:30 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

    - 2012-09-02 15:21 . 2012-09-02 15:21 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat

    + 2009-07-14 05:01 . 2012-09-03 10:28 276352 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat

    - 2009-07-14 05:01 . 2012-09-02 15:16 276352 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat

    - 2009-07-14 04:45 . 2012-08-15 10:35 7115479 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat

    + 2009-07-14 04:45 . 2012-09-03 10:00 7115479 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat

    + 2012-07-02 01:24 . 2012-09-02 23:20 1775512 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3164171304-2995391404-1607382672-1001-8192.dat

    - 2012-07-02 01:24 . 2012-08-31 22:14 1775512 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-3164171304-2995391404-1607382672-1001-8192.dat

    - 2009-07-14 02:34 . 2012-09-02 14:11 10485760 c:\windows\system32\SMI\Store\Machine\schema.dat

    + 2009-07-14 02:34 . 2012-09-03 10:13 10485760 c:\windows\system32\SMI\Store\Machine\schema.dat

    .

    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

    REGEDIT4

    .

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-08-25 39408]

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

    "LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2009-08-18 1157640]

    "BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe" [2009-08-21 262912]

    "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-28 35696]

    "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-07-30 98304]

    "Camera Assistant Software"="c:\program files (x86)\Video Web Camera\traybar.exe" [2009-07-15 630784]

    "RemoteControl8"="c:\program files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe" [2009-04-15 91432]

    "PDVD8LanguageShortcut"="c:\program files (x86)\CyberLink\PowerDVD8\Language\Language.exe" [2009-04-15 50472]

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

    "ConsentPromptBehaviorAdmin"= 5 (0x5)

    "ConsentPromptBehaviorUser"= 3 (0x3)

    "EnableUIADesktopToggle"= 0 (0x0)

    .

    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

    "aux1"=wdmaud.drv

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SymEFA.sys]

    @="FSFilter Activity Monitor"

    .

    R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

    R2 gupdate;Google Updateservice (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-07-01 135664]

    R2 HsfXAudioService;HsfXAudioService;c:\windows\system32\svchost.exe [2009-07-14 27136]

    R3 gupdatem;Google Update-service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-07-01 135664]

    R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-06-14 113120]

    R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2009-08-10 222208]

    R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]

    R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]

    R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]

    R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2012-07-01 1255736]

    S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]

    S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-07-29 203264]

    S2 ePowerSvc;Acer ePower Service;c:\program files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [2009-08-06 844320]

    S2 Greg_Service;GRegService;c:\program files (x86)\Packard Bell\Registration\GregHSRW.exe [2009-06-04 1150496]

    S2 Norton Internet Security;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\16.7.0.30\ccSvcHst.exe [2009-08-25 117640]

    S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe [2009-08-21 62720]

    S2 Updater Service;Updater Service;c:\program files\Packard Bell\Packard Bell Updater\UpdaterService.exe [2009-07-04 240160]

    S3 k57nd60a;Broadcom NetLink Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [2009-06-06 317480]

    S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [2009-04-03 34872]

    .

    .

    Inhoud van de 'Gedeelde Taken' map

    .

    2012-09-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-07-01 14:46]

    .

    2012-09-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-07-01 14:46]

    .

    .

    --------- X64 Entries -----------

    .

    .

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}]

    2009-08-25 04:00 750064 ----a-w- c:\programdata\Partner\Partner64.dll

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-07-28 7982112]

    "Acer ePower Management"="c:\program files\Packard Bell\Packard Bell Power Management\ePowerTray.exe" [2009-08-06 828960]

    "SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [bU]

    "combofix"="c:\combofix\CF19011.3XE" [2009-07-14 344576]

    .

    ------- Bijkomende Scan -------

    .

    uLocal Page = c:\windows\system32\blank.htm

    mStart Page = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0813&m=easynote_lj61&r=27360712n415l0374z125f4812s246

    mLocal Page = c:\windows\SysWOW64\blank.htm

    IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000

    TCP: DhcpNameServer = 192.168.0.1

    FF - ProfilePath - c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\

    FF - prefs.js: network.proxy.type - 0

    .

    - - - - ORPHANS VERWIJDERD - - - -

    .

    Toolbar-Locked - (no file)

    .

    .

    .

    [HKEY_LOCAL_MACHINE\system\ControlSet001\services\Norton Internet Security]

    "ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\16.7.0.30\ccSvcHst.exe\" /s \"Norton Internet Security\" /m \"c:\program files (x86)\Norton Internet Security\Engine\16.7.0.30\diMaster.dll\" /prefetch:1"

    .

    --------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}]

    @Denied: (A 2) (Everyone)

    @="FlashBroker"

    "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10b.exe,-101"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\Elevation]

    "Enabled"=dword:00000001

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\LocalServer32]

    @="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10b.exe"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\TypeLib]

    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

    @Denied: (A 2) (Everyone)

    @="Shockwave Flash Object"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

    @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx"

    "ThreadingModel"="Apartment"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

    @="0"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

    @="ShockwaveFlash.ShockwaveFlash.10"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

    @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx, 1"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

    @="1.0"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

    @="ShockwaveFlash.ShockwaveFlash"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

    @Denied: (A 2) (Everyone)

    @="Macromedia Flash Factory Object"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

    @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx"

    "ThreadingModel"="Apartment"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

    @="FlashFactory.FlashFactory.1"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

    @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx, 1"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

    @="1.0"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

    @="FlashFactory.FlashFactory"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}]

    @Denied: (A 2) (Everyone)

    @="IFlashBroker2"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\ProxyStubClsid32]

    @="{00020424-0000-0000-C000-000000000046}"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\TypeLib]

    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

    "Version"="1.0"

    .

    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

    @Denied: (Full) (Everyone)

    .

    Voltooingstijd: 2012-09-03 12:42:06 - machine werd herstart

    ComboFix-quarantined-files.txt 2012-09-03 10:42

    ComboFix2.txt 2012-09-02 15:28

    .

    Pre-Run: 181.471.956.992 bytes free

    Post-Run: 181.271.158.784 bytes free

    .

    - - End Of File - - BB4CA1FD7E3629EB9B254D5659609E7C

  4. ComboFix 12-08-31.08 - Serge 02-09-2012 17:02:19.1.2 - x64

    Microsoft Windows 7 Home Premium 6.1.7600.0.1252.32.1033.18.3838.2733 [GMT 2:00]

    Gestart vanuit: c:\users\Serge\Desktop\ComboFix.exe

    AV: Norton Internet Security *Disabled/Updated* {88C95A36-8C3B-2F2C-1B8B-30FCCFDC4855}

    FW: Norton Internet Security *Disabled* {B0F2DB13-C654-2E74-30D4-99C9310F0F2E}

    SP: Norton Internet Security *Disabled/Updated* {33A8BBD2-AA01-20A2-213B-0B8EB45B02E8}

    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    .

    .

    (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    c:\program files (x86)\Common Files\packardbell.ico

    c:\program files (x86)\RewardsArcade

    c:\program files (x86)\RewardsArcade\RewardsArcade.exe

    c:\program files (x86)\RewardsArcade\RewardsArcade.ico

    c:\program files (x86)\RewardsArcade\RewardsArcade.ini

    c:\program files (x86)\RewardsArcade\RewardsArcadeGui.exe

    c:\program files (x86)\RewardsArcade\RewardsArcadeInstaller.log

    c:\program files (x86)\RewardsArcade\Uninstall.exe

    c:\users\Public\sdelevURL.tmp

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\chrome.manifest

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\chrome\content\background.html

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\chrome\content\browser.xul

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\chrome\content\crossrider.js

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\chrome\content\crossriderapi.js

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\chrome\content\dialog.js

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\chrome\content\options.js

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\chrome\content\options.xul

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\chrome\content\search_dialog.xul

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\chrome\content\update.html

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\defaults\preferences\prefs.js

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\install.rdf

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\locale\en-US\translations.dtd

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\skin\button1.png

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\skin\button2.png

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\skin\button3.png

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\skin\button4.png

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\skin\button5.png

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\skin\crossrider_statusbar.png

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\skin\icon128.png

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\skin\icon16.png

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\skin\icon24.png

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\skin\icon48.png

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\skin\panelarrow-up.png

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\skin\popup.css

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\skin\popup.html

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\skin\popup_binding.xml

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\skin\skin.css

    c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\extensions\crossriderapp498@crossrider.com\skin\update.css

    .

    .

    (((((((((((((((((((( Bestanden Gemaakt van 2012-08-02 to 2012-09-02 ))))))))))))))))))))))))))))))

    .

    .

    2012-09-02 15:15 . 2012-09-02 15:15 -------- d-----w- c:\users\Default\AppData\Local\temp

    2012-08-31 09:11 . 2012-08-23 08:26 9310152 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{9EE64184-1907-4FA4-AE24-F13A71DBBC2E}\mpengine.dll

    2012-08-14 22:54 . 2012-02-11 06:36 751104 ----a-w- c:\windows\system32\win32spl.dll

    2012-08-14 22:54 . 2012-02-11 06:29 67584 ----a-w- c:\windows\splwow64.exe

    2012-08-14 22:54 . 2012-02-11 06:29 559104 ----a-w- c:\windows\system32\spoolsv.exe

    2012-08-14 22:54 . 2012-02-11 05:44 492032 ----a-w- c:\windows\SysWow64\win32spl.dll

    2012-08-14 19:49 . 2012-05-05 08:30 503808 ----a-w- c:\windows\system32\srcore.dll

    2012-08-14 19:49 . 2012-05-05 07:44 43008 ----a-w- c:\windows\SysWow64\srclient.dll

    2012-08-14 19:49 . 2012-07-04 21:23 41472 ----a-w- c:\windows\SysWow64\browcli.dll

    2012-08-14 19:49 . 2012-07-04 22:04 73216 ----a-w- c:\windows\system32\netapi32.dll

    2012-08-14 19:49 . 2012-07-04 22:01 58880 ----a-w- c:\windows\system32\browcli.dll

    2012-08-14 19:49 . 2012-07-04 22:01 136704 ----a-w- c:\windows\system32\browser.dll

    2012-08-14 19:49 . 2012-07-18 17:31 3146752 ----a-w- c:\windows\system32\win32k.sys

    2012-08-14 19:49 . 2012-05-14 05:20 956416 ----a-w- c:\windows\system32\localspl.dll

    .

    .

    .

    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2012-08-21 09:12 . 2012-07-01 19:19 285328 ----a-w- c:\windows\system32\aswBoot.exe

    2012-08-15 01:00 . 2012-07-01 17:12 62134624 ----a-w- c:\windows\system32\MRT.exe

    2012-07-04 18:11 . 2012-07-04 18:11 388096 ----a-r- c:\users\Serge\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

    2012-07-02 01:03 . 2012-07-02 01:03 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe

    2012-07-02 01:03 . 2012-07-02 01:03 161792 ----a-w- c:\windows\SysWow64\msls31.dll

    2012-07-02 01:03 . 2012-07-02 01:03 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll

    2012-07-02 01:03 . 2012-07-02 01:03 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe

    2012-07-02 01:03 . 2012-07-02 01:03 74752 ----a-w- c:\windows\SysWow64\iesetup.dll

    2012-07-02 01:03 . 2012-07-02 01:03 63488 ----a-w- c:\windows\SysWow64\tdc.ocx

    2012-07-02 01:03 . 2012-07-02 01:03 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll

    2012-07-02 01:03 . 2012-07-02 01:03 420864 ----a-w- c:\windows\SysWow64\vbscript.dll

    2012-07-02 01:03 . 2012-07-02 01:03 367104 ----a-w- c:\windows\SysWow64\html.iec

    2012-07-02 01:03 . 2012-07-02 01:03 35840 ----a-w- c:\windows\SysWow64\imgutil.dll

    2012-07-02 01:03 . 2012-07-02 01:03 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll

    2012-07-02 01:03 . 2012-07-02 01:03 152064 ----a-w- c:\windows\SysWow64\wextract.exe

    2012-07-02 01:03 . 2012-07-02 01:03 150528 ----a-w- c:\windows\SysWow64\iexpress.exe

    2012-07-02 01:03 . 2012-07-02 01:03 11776 ----a-w- c:\windows\SysWow64\mshta.exe

    2012-07-02 01:03 . 2012-07-02 01:03 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll

    2012-07-02 01:03 . 2012-07-02 01:03 101888 ----a-w- c:\windows\SysWow64\admparse.dll

    2012-07-02 01:03 . 2012-07-02 01:03 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe

    2012-07-02 01:03 . 2012-07-02 01:03 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe

    2012-07-02 01:03 . 2012-07-02 01:03 89088 ----a-w- c:\windows\system32\ie4uinit.exe

    2012-07-02 01:03 . 2012-07-02 01:03 85504 ----a-w- c:\windows\system32\iesetup.dll

    2012-07-02 01:03 . 2012-07-02 01:03 82432 ----a-w- c:\windows\system32\icardie.dll

    2012-07-02 01:03 . 2012-07-02 01:03 76800 ----a-w- c:\windows\system32\tdc.ocx

    2012-07-02 01:03 . 2012-07-02 01:03 697344 ----a-w- c:\windows\system32\msfeeds.dll

    2012-07-02 01:03 . 2012-07-02 01:03 65024 ----a-w- c:\windows\system32\pngfilt.dll

    2012-07-02 01:03 . 2012-07-02 01:03 603648 ----a-w- c:\windows\system32\vbscript.dll

    2012-07-02 01:03 . 2012-07-02 01:03 55296 ----a-w- c:\windows\system32\msfeedsbs.dll

    2012-07-02 01:03 . 2012-07-02 01:03 534528 ----a-w- c:\windows\system32\ieapfltr.dll

    2012-07-02 01:03 . 2012-07-02 01:03 49664 ----a-w- c:\windows\system32\imgutil.dll

    2012-07-02 01:03 . 2012-07-02 01:03 48640 ----a-w- c:\windows\system32\mshtmler.dll

    2012-07-02 01:03 . 2012-07-02 01:03 452608 ----a-w- c:\windows\system32\dxtmsft.dll

    2012-07-02 01:03 . 2012-07-02 01:03 448512 ----a-w- c:\windows\system32\html.iec

    2012-07-02 01:03 . 2012-07-02 01:03 403248 ----a-w- c:\windows\system32\iedkcs32.dll

    2012-07-02 01:03 . 2012-07-02 01:03 39936 ----a-w- c:\windows\system32\iernonce.dll

    2012-07-02 01:03 . 2012-07-02 01:03 3695416 ----a-w- c:\windows\system32\ieapfltr.dat

    2012-07-02 01:03 . 2012-07-02 01:03 30720 ----a-w- c:\windows\system32\licmgr10.dll

    2012-07-02 01:03 . 2012-07-02 01:03 282112 ----a-w- c:\windows\system32\dxtrans.dll

    2012-07-02 01:03 . 2012-07-02 01:03 267776 ----a-w- c:\windows\system32\ieaksie.dll

    2012-07-02 01:03 . 2012-07-02 01:03 249344 ----a-w- c:\windows\system32\webcheck.dll

    2012-07-02 01:03 . 2012-07-02 01:03 222208 ----a-w- c:\windows\system32\msls31.dll

    2012-07-02 01:03 . 2012-07-02 01:03 197120 ----a-w- c:\windows\system32\msrating.dll

    2012-07-02 01:03 . 2012-07-02 01:03 165888 ----a-w- c:\windows\system32\iexpress.exe

    2012-07-02 01:03 . 2012-07-02 01:03 163840 ----a-w- c:\windows\system32\ieakui.dll

    2012-07-02 01:03 . 2012-07-02 01:03 160256 ----a-w- c:\windows\system32\wextract.exe

    2012-07-02 01:03 . 2012-07-02 01:03 160256 ----a-w- c:\windows\system32\ieakeng.dll

    2012-07-02 01:03 . 2012-07-02 01:03 149504 ----a-w- c:\windows\system32\occache.dll

    2012-07-02 01:03 . 2012-07-02 01:03 145920 ----a-w- c:\windows\system32\iepeers.dll

    2012-07-02 01:03 . 2012-07-02 01:03 135168 ----a-w- c:\windows\system32\IEAdvpack.dll

    2012-07-02 01:03 . 2012-07-02 01:03 12288 ----a-w- c:\windows\system32\mshta.exe

    2012-07-02 01:03 . 2012-07-02 01:03 114176 ----a-w- c:\windows\system32\admparse.dll

    2012-07-02 01:03 . 2012-07-02 01:03 111616 ----a-w- c:\windows\system32\iesysprep.dll

    2012-07-02 01:03 . 2012-07-02 01:03 10752 ----a-w- c:\windows\system32\msfeedssync.exe

    2012-07-02 01:03 . 2012-07-02 01:03 103936 ----a-w- c:\windows\system32\inseng.dll

    2012-07-01 22:32 . 2012-07-01 22:25 70344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

    2012-07-01 22:32 . 2012-07-01 22:25 426184 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe

    2012-07-01 21:21 . 2009-08-25 03:36 6 ----a-w- c:\windows\system32\PLD_Framework.cmd

    2012-07-01 12:40 . 2012-07-01 12:40 29480 ----a-w- c:\windows\SysWow64\msxml3a.dll

    2012-07-01 12:40 . 2012-07-01 12:40 505128 ----a-w- c:\windows\SysWow64\msvcp71.dll

    2012-07-01 12:40 . 2012-07-01 12:40 353576 ----a-w- c:\windows\SysWow64\msvcr71.dll

    2012-06-09 05:30 . 2012-07-16 18:37 14165504 ----a-w- c:\windows\system32\shell32.dll

    2012-06-06 05:50 . 2012-07-16 18:38 2003968 ----a-w- c:\windows\system32\msxml6.dll

    2012-06-06 05:50 . 2012-07-13 16:19 1880064 ----a-w- c:\windows\system32\msxml3.dll

    2012-06-06 05:09 . 2012-07-16 18:38 1389568 ----a-w- c:\windows\SysWow64\msxml6.dll

    2012-06-06 05:09 . 2012-07-16 18:38 1236992 ----a-w- c:\windows\SysWow64\msxml3.dll

    .

    .

    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

    REGEDIT4

    .

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-08-25 39408]

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

    "LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2009-08-18 1157640]

    "BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe" [2009-08-21 262912]

    "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-28 35696]

    "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-07-30 98304]

    "Camera Assistant Software"="c:\program files (x86)\Video Web Camera\traybar.exe" [2009-07-15 630784]

    "RemoteControl8"="c:\program files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe" [2009-04-15 91432]

    "PDVD8LanguageShortcut"="c:\program files (x86)\CyberLink\PowerDVD8\Language\Language.exe" [2009-04-15 50472]

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

    "ConsentPromptBehaviorAdmin"= 5 (0x5)

    "ConsentPromptBehaviorUser"= 3 (0x3)

    "EnableUIADesktopToggle"= 0 (0x0)

    .

    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

    "aux1"=wdmaud.drv

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SymEFA.sys]

    @="FSFilter Activity Monitor"

    .

    R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

    R2 gupdate;Google Updateservice (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-07-01 135664]

    R2 HsfXAudioService;HsfXAudioService;c:\windows\system32\svchost.exe [2009-07-14 27136]

    R3 gupdatem;Google Update-service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-07-01 135664]

    R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-06-14 113120]

    R3 Partner Service;Partner Service;c:\programdata\Partner\Partner.exe [2009-08-25 332272]

    R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2009-08-10 222208]

    R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]

    R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]

    R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]

    R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2012-07-01 1255736]

    S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]

    S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-07-29 203264]

    S2 ePowerSvc;Acer ePower Service;c:\program files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [2009-08-06 844320]

    S2 Greg_Service;GRegService;c:\program files (x86)\Packard Bell\Registration\GregHSRW.exe [2009-06-04 1150496]

    S2 Norton Internet Security;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\16.7.0.30\ccSvcHst.exe [2009-08-25 117640]

    S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe [2009-08-21 62720]

    S2 Updater Service;Updater Service;c:\program files\Packard Bell\Packard Bell Updater\UpdaterService.exe [2009-07-04 240160]

    S3 k57nd60a;Broadcom NetLink Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [2009-06-06 317480]

    S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [2009-04-03 34872]

    .

    .

    Inhoud van de 'Gedeelde Taken' map

    .

    2012-09-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-07-01 14:46]

    .

    2012-09-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-07-01 14:46]

    .

    .

    --------- X64 Entries -----------

    .

    .

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4}]

    2009-08-25 04:00 750064 ----a-w- c:\programdata\Partner\Partner64.dll

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-07-28 7982112]

    "Acer ePower Management"="c:\program files\Packard Bell\Packard Bell Power Management\ePowerTray.exe" [2009-08-06 828960]

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

    "LoadAppInit_DLLs"=0x0

    .

    ------- Bijkomende Scan -------

    .

    uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2504091

    uLocal Page = c:\windows\system32\blank.htm

    mStart Page = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0813&m=easynote_lj61&r=27360712n415l0374z125f4812s246

    mLocal Page = c:\windows\SysWOW64\blank.htm

    IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000

    TCP: DhcpNameServer = 192.168.0.1

    FF - ProfilePath - c:\users\Serge\AppData\Roaming\Mozilla\Firefox\Profiles\hg41z2do.default\

    FF - prefs.js: browser.search.selectedEngine - Web Search

    FF - prefs.js: browser.startup.homepage - hxxp://search.conduit.com/?ctid=CT2504091&SearchSource=13

    FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2504091&SearchSource=2&q=

    FF - prefs.js: network.proxy.type - 0

    .

    - - - - ORPHANS VERWIJDERD - - - -

    .

    Toolbar-Locked - (no file)

    Toolbar-Locked - (no file)

    HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe

    AddRemove-RewardsArcade - c:\program files (x86)\RewardsArcade\Uninstall.exe

    .

    .

    .

    [HKEY_LOCAL_MACHINE\system\ControlSet001\services\Norton Internet Security]

    "ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\16.7.0.30\ccSvcHst.exe\" /s \"Norton Internet Security\" /m \"c:\program files (x86)\Norton Internet Security\Engine\16.7.0.30\diMaster.dll\" /prefetch:1"

    .

    --------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}]

    @Denied: (A 2) (Everyone)

    @="FlashBroker"

    "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10b.exe,-101"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\Elevation]

    "Enabled"=dword:00000001

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\LocalServer32]

    @="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10b.exe"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{0BE09CC1-42E0-11DD-AE16-0800200C9A66}\TypeLib]

    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

    @Denied: (A 2) (Everyone)

    @="Shockwave Flash Object"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

    @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx"

    "ThreadingModel"="Apartment"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

    @="0"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

    @="ShockwaveFlash.ShockwaveFlash.10"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

    @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx, 1"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

    @="1.0"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

    @="ShockwaveFlash.ShockwaveFlash"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

    @Denied: (A 2) (Everyone)

    @="Macromedia Flash Factory Object"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

    @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx"

    "ThreadingModel"="Apartment"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

    @="FlashFactory.FlashFactory.1"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

    @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10b.ocx, 1"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

    @="1.0"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

    @="FlashFactory.FlashFactory"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}]

    @Denied: (A 2) (Everyone)

    @="IFlashBroker2"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\ProxyStubClsid32]

    @="{00020424-0000-0000-C000-000000000046}"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{DDF4CE26-4BDA-42BC-B0F0-0E75243AD285}\TypeLib]

    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

    "Version"="1.0"

    .

    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

    @Denied: (Full) (Everyone)

    .

    Voltooingstijd: 2012-09-02 17:28:44 - machine werd herstart

    ComboFix-quarantined-files.txt 2012-09-02 15:28

    .

    Pre-Run: 180.947.202.048 bytes free

    Post-Run: 180.635.889.664 bytes free

    .

    - - End Of File - - E0A06D9E53FA17F1B694A2FCD222EC8A

  5. Malwarebytes Anti-Malware 1.62.0.1300

    Malwarebytes : Free anti-malware download

    Database version: v2012.08.31.12

    Windows 7 x64 NTFS

    Internet Explorer 9.0.8112.16421

    Serge :: SERGE-PC [administrator]

    1-9-2012 0:35:35

    mbam-log-2012-09-01 (00-35-35).txt

    Scan type: Full scan (C:\|)

    Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

    Scan options disabled: P2P

    Objects scanned: 313418

    Time elapsed: 1 hour(s), 9 minute(s), 19 second(s)

    Memory Processes Detected: 0

    (No malicious items detected)

    Memory Modules Detected: 0

    (No malicious items detected)

    Registry Keys Detected: 0

    (No malicious items detected)

    Registry Values Detected: 0

    (No malicious items detected)

    Registry Data Items Detected: 0

    (No malicious items detected)

    Folders Detected: 0

    (No malicious items detected)

    Files Detected: 0

    (No malicious items detected)

    (end)

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 1:49:55, on 1-9-2012

    Platform: Windows 7 (WinNT 6.00.3504)

    MSIE: Internet Explorer v9.00 (9.00.8112.16448)

    Boot mode: Normal

    Running processes:

    C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

    C:\Program Files (x86)\Launch Manager\LManager.exe

    C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe

    C:\Program Files (x86)\Video Web Camera\traybar.exe

    C:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe

    C:\Program Files\AVAST Software\Avast\AvastUI.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

    C:\Windows\SysWOW64\DllHost.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = iGoogle Redirect

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Zoeken

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = iGoogle Redirect

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = iGoogle Redirect

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

    F2 - REG:system.ini: UserInit=userinit.exe,

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\16.7.0.30\coIEPlg.dll

    O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\16.7.0.30\IPSBHO.DLL

    O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

    O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\16.7.0.30\coIEPlg.dll

    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

    O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe

    O4 - HKLM\..\Run: [backupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe" -h -k

    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

    O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

    O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files (x86)\Video Web Camera\traybar.exe"

    O4 - HKLM\..\Run: [RemoteControl8] "C:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe"

    O4 - HKLM\..\Run: [PDVD8LanguageShortcut] "C:\Program Files (x86)\CyberLink\PowerDVD8\Language\Language.exe"

    O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui

    O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent

    O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

    O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

    O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000

    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll

    O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL

    O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

    O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} (WRC Class) - http://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework//microsoft/wrc32.ocx

    O18 - Protocol: symres - {AA1061FE-6C41-421F-9344-69640C9732AB} - C:\Program Files (x86)\Norton Internet Security\Engine\16.7.0.30\coIEPlg.dll

    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

    O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)

    O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe

    O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

    O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe

    O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

    O23 - Service: GRegService (Greg_Service) - Acer Incorporated - C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe

    O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

    O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe

    O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: Norton Internet Security - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\16.7.0.30\ccSvcHst.exe

    O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe

    O23 - Service: Partner Service - Google Inc. - C:\ProgramData\Partner\Partner.exe

    O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

    O23 - Service: Updater Service - Acer - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe

    O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

    O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

    O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

    --

    End of file - 10153 bytes

    De computer hapert nog altijd, er komt dan not responding.

    Ook krijg ik nog altijd de computer lastig aan, pas na een paar pogingen krijg ik hem in gang en dan verschijn dit.

    (could notlaud file or assembly 'sorttbls.nlp' ore one of its dependenceies.The system cannot find teh file specified.)

    De computer werkt wel al een beetje beter.

    alvast bedankt voor je hulp.

  6. Ik heb al enkele maanden problemen met mijn computer.

    Hij blijft veel haperen, dan krijg ik soms wit beeld, en als ik de computer uit zet krijg ik hem pas na 10 pogingen terug aan.

    Ik ken nu niet veel van computers en hoop dat iemand me hier kan helpen want een computer die slecht werkt is zo irritant.

    Mijn hijack geeft dit aan.

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 13:27:01, on 31-8-2012

    Platform: Windows 7 (WinNT 6.00.3504)

    MSIE: Internet Explorer v9.00 (9.00.8112.16448)

    Boot mode: Normal

    Running processes:

    C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

    C:\Program Files (x86)\Launch Manager\LManager.exe

    C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe

    C:\Program Files (x86)\Video Web Camera\traybar.exe

    C:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe

    C:\Program Files\AVAST Software\Avast\AvastUI.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

    C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

    C:\Windows\SysWOW64\NOTEPAD.EXE

    C:\Windows\SysWOW64\DllHost.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = iGoogle Redirect

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Zoeken

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = iGoogle Redirect

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = iGoogle Redirect

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

    R3 - URLSearchHook: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll

    F2 - REG:system.ini: UserInit=userinit.exe,

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\16.7.0.30\coIEPlg.dll

    O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\16.7.0.30\IPSBHO.DLL

    O2 - BHO: Partner BHO Class - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} - C:\ProgramData\Partner\Partner.dll

    O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

    O2 - BHO: Vuze Remote - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll

    O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\16.7.0.30\coIEPlg.dll

    O3 - Toolbar: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files (x86)\Vuze_Remote\prxtbVuze.dll

    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

    O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe

    O4 - HKLM\..\Run: [backupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe" -h -k

    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

    O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

    O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files (x86)\Video Web Camera\traybar.exe"

    O4 - HKLM\..\Run: [RemoteControl8] "C:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe"

    O4 - HKLM\..\Run: [PDVD8LanguageShortcut] "C:\Program Files (x86)\CyberLink\PowerDVD8\Language\Language.exe"

    O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui

    O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

    O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

    O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000

    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll

    O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL

    O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

    O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} (WRC Class) - http://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework//microsoft/wrc32.ocx

    O18 - Protocol: symres - {AA1061FE-6C41-421F-9344-69640C9732AB} - C:\Program Files (x86)\Norton Internet Security\Engine\16.7.0.30\coIEPlg.dll

    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

    O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)

    O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe

    O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

    O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe

    O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

    O23 - Service: GRegService (Greg_Service) - Acer Incorporated - C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe

    O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

    O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe

    O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: Norton Internet Security - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\16.7.0.30\ccSvcHst.exe

    O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe

    O23 - Service: Partner Service - Google Inc. - C:\ProgramData\Partner\Partner.exe

    O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

    O23 - Service: Updater Service - Acer - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe

    O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

    O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

    O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

    --

    End of file - 10555 bytes

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.