danthius

Dag iedereen, onlangs had ik een discussie gepost dat mijn GTA spel niet wou installeren ik had daarop geantwoord dat ik XP met SP3 had geinstalleerd omdat hij daar wel op werkte (daarvoor had ik een illegale versie van de ultimate ) nu moest ik XP weer wegdoen omdat het ook een illegale versie was (ook ) dus nu heb ik een legale versie van Vista Home Premium gekocht... nu wil mijn GTA4 weer niet installeren hij blijft gewoon steken rond de 10% hoe is dit toch mogenlijk:argh: heb mijn pc heel opgeschoont alle updates geinstalleerd die er maar zijn alle ServicePacks staan erop alle laatste drivers ook OK ben ten einde raad.....

dank u voor de tip maar ik heb mijn XP er terug opgevlamt en nu werkt alles weer:-) nu heb ik wel een ander vraagje weet iemand een software voor XP mooi te maken? (met skins enzo)

hallo iedereen ik heb een tijdje geleden 2 S-ata DVD schrijvers aangeschaft vreemd genoeg lezen deze wel maar als ik GTA4 of Crysis warhead wil installeren blijft hij gewoon vast zitten (niet de windows maar het installatieprogramma) en als ik mijn IDE DVD schrijver installeer doet hij het wel ? iemand een oplossing?

intussen is er 1 schijf weer uitgevallen het is wel nog een IDE schijfje heb intussen een kleine beschrijving van men hardware hier is em Computer: Computertype Op ACPI x86-gebaseerde PC Besturingssysteem Microsoft Windows Vista Ultimate OS Service Pack [ TRIAL VERSION ] Internet Explorer 8.0.6001.18702 DirectX DirectX 10.1 Computernaam AMD-PHENOM9950 Naam gebruiker Van de Voorde Daniel Aanmeld Domein [ TRIAL VERSION ] Datum / Tijd 2009-05-22 / 16:36 Moederbord: CPU Type QuadCore AMD Phenom X4 Black Edition 9950, 2600 MHz (13 x 200) Moederbordnaam Gigabyte GA-MA790FX-DQ6 (2 PCI, 1 PCI-E x1, 4 PCI-E x16, 4 DDR2 DIMM, Audio, Dual Gigabit LAN, IEEE-1394) Moederbord Chipset AMD 790FX, AMD K10 Systeemgeheugen [ TRIAL VERSION ] DIMM1: Corsair XMS2 CM2X1024-6400 1 GB DDR2-800 DDR2 SDRAM (5-5-5-18 @ 400 Mhz) (4-4-4-13 @ 270 Mhz) DIMM2: Corsair XMS2 CM2X1024-6400 [ TRIAL VERSION ] DIMM3: Patriot Memory PSD21G8002 [ TRIAL VERSION ] BIOS Type Award Modular (12/21/07) Communicatiepoort Communicatiepoort (COM1) Communicatiepoort Printerpoort (LPT1) Scherm: Video kaart NVIDIA GeForce 8500 GT (256 MB) Video kaart NVIDIA GeForce 8500 GT (256 MB) Video kaart NVIDIA GeForce 9600 GT (512 MB) Video kaart NVIDIA GeForce 9600 GT (512 MB) 3D Acceleratie nVIDIA GeForce 8500 GT 3D Acceleratie nVIDIA GeForce 9600 GT Monitor Acer AL2416W (Analog) [24" LCD] (L61020894145) Monitor Samsung SyncMaster 203B (Digital) [20" LCD] (HSHL806633) Monitor Samsung SyncMaster 910N/912N/913N/915N [19" LCD] (HVEY211644) Multimedia: Geluidskaart Realtek ALC889A @ ATI SB600 - High Definition Audio Controller Opslag: IDE controller Standaard Dual Channel PCI IDE Controller IDE controller Standaard Dual Channel PCI IDE Controller Opslag controller GIGABYTE GBB36X Controller Opslag controller GIGABYTE GBB36X Controller Opslag controller Microsoft iSCSI-initiator Opslag controller WinXP Promise Ultra100 IDE Controller Diskettestation Diskettestation Harde schijf Generic STORAGE DEVICE USB Device Harde schijf Generic STORAGE DEVICE USB Device Harde schijf Generic STORAGE DEVICE USB Device (952 MB, USB) Harde schijf Generic STORAGE DEVICE USB Device Harde schijf SEAGATE ST3160212A USB Device (160 GB, 7200 RPM, Ultra-ATA/100) Harde schijf Sony Storage Media USB Device Harde schijf ST3160215AS ATA Device (160 GB, 7200 RPM, SATA-II) Harde schijf ST3250820AS ATA Device (250 GB, 7200 RPM, SATA-II) Optische Station HL-DT-ST DVD-RAM GH22NS30 ATA Device (DVD+R9:16x, DVD-R9:12x, DVD+RW:22x/8x, DVD-RW:22x/6x, DVD-RAM:12x, DVD-ROM:16x, CD:48x/32x/48x DVD+RW/DVD-RW/DVD-RAM) Optische Station PIONEER DVD-RW DVR-216D ATA Device (DVD+R9:12x, DVD-R9:12x, DVD+RW:20x/8x, DVD-RW:20x/6x, DVD-ROM:16x, CD:40x/32x/40x DVD+RW/DVD-RW) SMART Status harde schijf OK Partities: C: (NTFS) [ TRIAL VERSION ] D: (NTFS) 50874 MB (29286 MB vrij) E: (NTFS) 50874 MB (37842 MB vrij) H: (NTFS) 29996 MB (6159 MB vrij) J: (NTFS) 101073 MB (72815 MB vrij) K: (NTFS) 104.9 GB (36.2 GB vrij) R: (FAT32) 149.0 GB (69.8 GB vrij) Geheugencapaciteit [ TRIAL VERSION ] Invoerapparaten: Toetsenbord HID-toetsenbordapparaat Toetsenbord HID-toetsenbordapparaat Muis HID-compliant muis Muis HID-compliant muis Netwerk: Primair IP-Adres [ TRIAL VERSION ] Primair MAC-Adres 00-13-F7-78-C1-B2 Netwerkkaart Realtek RTL8168B/8111B Family PCI-E Gigabit Ethernet NIC (NDIS 6.0) Netwerkkaart Realtek RTL8168B/8111B Family PCI-E Gigabit Ethernet NIC (NDIS 6.0) Netwerkkaart SMCWUSB-G 802.11g Wireless USB 2.0 Adapter (192. [ TRIAL VERSION ]) Externe apparaten: Printer Fax Printer Microsoft XPS Document Writer FireWire controller Texas Instruments TSB43AB23 1394A-2000 OHCI PHY/Link-Layer Controller (PHY: TI TSB43AB23) USB1 controller ATI SB600 - OCHI USB Controller USB1 controller ATI SB600 - OCHI USB Controller USB1 controller ATI SB600 - OCHI USB Controller USB1 controller ATI SB600 - OCHI USB Controller USB1 controller ATI SB600 - OCHI USB Controller USB2 controller ATI SB600 - EHCI USB 2.0 Controller USB-apparaat Generic USB Hub USB-apparaat Samengesteld USB-apparaat USB-apparaat Samengesteld USB-apparaat USB-apparaat Sirius USB2.0 Camera USB-apparaat SMCWUSB-G 802.11g Wireless USB 2.0 Adapter USB-apparaat USB-apparaat voor massaopslag USB-apparaat USB-apparaat voor massaopslag USB-apparaat USB-apparaat voor massaopslag USB-apparaat USB-HID USB-apparaat USB-HID USB-apparaat USB-HID USB-apparaat USB-HID USB-apparaat USB-HID

dag iedereen, mijn pc doet de laatste tijd wel heel raar ik heb vorige week 2 nieuwe S-ATA DVDRW drives gekocht en sindsdien heb ik problemen probleem 1 soms valt 1 schijf gewoon uit probleem 2 sommige spellen installeren niet meer bv GTA4 (installatieprogramma reageert niet meer) probleem 3 windows sluit niet meer af ik heb al gecontroleerd of men kabels goed aangesloten zijn enzo maar alles ziet er goed uit heb alvast een hijacklogje Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:46:42, on 2/05/2009 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Windows Defender\MSASCui.exe C:\Windows\RtHDVCpl.exe C:\Program Files\Logitech\G-series Software\LGDCore.exe C:\Program Files\Logitech\G-series Software\LCDMon.exe C:\Program Files\AVG\AVG8\avgtray.exe C:\Windows\System32\rundll32.exe C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe C:\Program Files\Nero\Nero 7\InCD\InCD.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\EXPERTool\TBPANEL.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Windows\ehome\ehtray.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\ASUS\ASUS EzVCR.FM\ezagent.exe C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe C:\Program Files\Electronic Arts\EADM\Core.exe C:\Program Files\SMC\SMCWUSB-G 802.11g Wireless USB 2.0 Adapter\SMCWGUTI.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Windows\system32\Taskmgr.exe C:\Program Files\Logitech\G-series Software\Applets\LCDMedia.exe C:\Program Files\Logitech\G-series Software\Applets\LCDPop3\LCDPOP3.exe C:\Program Files\Logitech\G-series Software\Applets\LCDCountdown\LCDCountdown.exe C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe C:\Windows\system32\conime.exe C:\Program Files\Windows Live\Toolbar\wltuser.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Windows\system32\SearchProtocolHost.exe C:\Windows\system32\SearchFilterHost.exe C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [skytel] Skytel.exe O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe" O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [snpstd] C:\Windows\vsnpstd.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [securDisc] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe O4 - HKLM\..\Run: [inCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [GAINWARD] C:\Program Files\EXPERTool\TBPanel.exe /A O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [EzAgent] C:\Program Files\ASUS\ASUS EzVCR.FM\ezagent.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') O4 - Startup: Reliability and Performance Monitor.lnk = D:\Windows\System32\perfmon.msc O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: Setup_VRM.lnk = C:\Users\Van de Voorde Daniel\AppData\Local\Temp\Rar$EX00.552\PCDJ\Setup.exe O4 - Global Startup: SMCWUSB-G 802.11g Wireless USB Utility.lnk = C:\Program Files\SMC\SMCWUSB-G 802.11g Wireless USB 2.0 Adapter\SMCWGUTI.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000 O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O13 - Gopher Prefix: O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O20 - AppInit_DLLs: avgrsstx.dll O22 - SharedTaskScheduler: Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll O22 - SharedTaskScheduler: Deskscapes - {EC654325-1273-C2A9-2B7C-45D29BCE68FB} - C:\PROGRA~1\Stardock\OBJECT~1\DESKSC~1\deskscapes.dll (file missing) O22 - SharedTaskScheduler: Stardock Vista ControlPanel Extension - {EC654325-1273-C2A9-2B7C-45D29BCE68FD} - C:\PROGRA~1\Stardock\OBJECT~1\DESKSC~1\DesktopControlPanel.dll (file missing) O22 - SharedTaskScheduler: StardockDreamController - {EC654325-1273-C2A9-2B7C-45D29BCE68FF} - C:\PROGRA~1\Stardock\OBJECT~1\DESKSC~1\DreamControl.dll (file missing) O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: Nero Registry InCD Service (NeroRegInCDSrv) - Unknown owner - C:\Program Files\Nero\Nero 7\InCD\NBHRegInCDSrv.exe (file missing) O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: Radmin Server V3 (RServer3) - Famatech International Corp. - C:\Windows\system32\rserver30\RServer3.exe -- End of file - 8648 bytes

hij is wel sneller op het gebied van internetpagina's te openen maar als hij opstart duurt het redelijk lang voor hij mijn msnprogramma opstart en de sidebar opent suggesties?

ComboFix 09-05-05.02 - Van de Voorde Daniel 05/05/2009 23:02.3 - NTFSx86 Microsoft® Windows Vista™ Ultimate 6.0.6001.1.1252.32.1033.18.3070.1922 [GMT 2:00] Gestart vanuit: c:\users\Van de Voorde Daniel\Downloads\ComboFix.exe gebruikte Opdracht switches :: c:\users\Van de Voorde Daniel\Downloads\CFScript.txt AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) . (((((((((((((((((((( Bestanden Gemaakt van 2009-04-05 to 2009-05-05 )))))))))))))))))))))))))))))) . 2009-05-03 16:05 . 2009-05-03 16:05 -------- d-----w c:\users\Van de Voorde Daniel\AppData\Roaming\Malwarebytes 2009-05-03 16:05 . 2009-04-06 13:32 15504 ----a-w c:\windows\system32\drivers\mbam.sys 2009-05-03 16:05 . 2009-04-06 13:32 38496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys 2009-05-03 16:05 . 2009-05-03 16:05 -------- d-----w c:\programdata\Malwarebytes 2009-05-03 16:05 . 2009-05-03 16:05 -------- d-----w c:\users\All Users\Malwarebytes 2009-05-03 16:05 . 2009-05-03 19:32 -------- d-----w c:\program files\Malwarebytes' Anti-Malware 2009-05-02 10:44 . 2009-05-02 10:44 -------- d-----w c:\program files\Trend Micro 2009-05-02 09:57 . 2009-05-02 09:57 -------- d-----w c:\program files\MSXML 4.0 2009-05-01 12:13 . 2009-05-02 12:05 -------- d-----w c:\users\Van de Voorde Daniel\AppData\Roaming\Ahead 2009-05-01 11:17 . 2009-05-01 12:13 -------- d-----w c:\users\Van de Voorde Daniel\AppData\Local\Ahead 2009-05-01 11:14 . 2009-05-01 11:14 -------- d-----w c:\programdata\Ahead 2009-05-01 11:14 . 2009-05-01 11:14 -------- d-----w c:\users\All Users\Ahead 2009-05-01 11:10 . 2009-05-01 11:10 -------- d-----w c:\program files\Nero 2009-05-01 11:10 . 2009-05-01 11:10 -------- d-----w c:\programdata\Nero 2009-05-01 11:10 . 2009-05-01 11:10 -------- d-----w c:\users\All Users\Nero 2009-05-01 11:10 . 2009-05-01 11:12 -------- d-----w c:\program files\Common Files\Ahead 2009-04-29 14:27 . 2008-08-17 10:33 678408 ----a-w c:\windows\system32\gpprefcl.dll 2009-04-20 13:43 . 2009-04-20 13:43 -------- d-----w c:\program files\Microsoft Silverlight 2009-04-17 10:50 . 2009-04-17 10:50 -------- d-----w c:\program files\Microsoft Virtual PC . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-05-05 14:26 . 2009-01-21 18:32 668790 ----a-w c:\windows\system32\perfh013.dat 2009-05-05 14:26 . 2009-01-21 18:32 127364 ----a-w c:\windows\system32\perfc013.dat 2009-05-04 16:51 . 2009-05-04 16:51 -------- d-----w c:\program files\Lavalys 2009-05-01 21:19 . 2009-01-28 22:15 2560 ----a-w c:\windows\_MSRSTRT.EXE 2009-05-01 21:15 . 2006-11-02 10:25 86016 ----a-w c:\windows\inf\infstrng.dat 2009-05-01 21:15 . 2006-11-02 10:25 86016 ----a-w c:\windows\inf\infstor.dat 2009-05-01 21:15 . 2006-11-02 10:25 51200 ----a-w c:\windows\inf\infpub.dat 2009-04-28 16:09 . 2009-01-21 18:56 -------- d-----w c:\program files\Microsoft 2009-04-26 16:24 . 2009-01-21 17:39 54600 ----a-w c:\users\Van de Voorde Daniel\AppData\Local\GDIPFONTCACHEV1.DAT 2009-04-18 09:58 . 2006-11-02 11:18 -------- d-----w c:\program files\Windows Mail 2009-03-17 03:38 . 2009-04-17 10:24 13824 ----a-w c:\windows\system32\apilogen.dll 2009-03-17 03:38 . 2009-04-17 10:24 24064 ----a-w c:\windows\system32\amxread.dll 2009-03-11 22:06 . 2009-03-11 22:06 -------- d-----w c:\program files\Visiosonic 2009-03-09 21:07 . 2009-03-09 21:07 107888 ----a-w c:\windows\system32\CmdLineExt.dll 2009-03-09 20:50 . 2009-03-09 20:50 -------- d-----w c:\program files\Electronic Arts 2009-03-09 20:50 . 2009-01-21 17:44 -------- d--h--w c:\program files\InstallShield Installation Information 2009-03-09 20:48 . 2009-03-09 20:48 662 ----a-w c:\windows\system32\ealregsnapshot1.reg 2009-03-08 11:34 . 2009-04-30 23:49 914944 ----a-w c:\windows\system32\wininet.dll 2009-03-08 11:34 . 2009-04-30 23:49 43008 ----a-w c:\windows\system32\licmgr10.dll 2009-03-08 11:33 . 2009-04-30 23:49 18944 ----a-w c:\windows\system32\corpol.dll 2009-03-08 11:33 . 2009-04-30 23:49 109056 ----a-w c:\windows\system32\iesysprep.dll 2009-03-08 11:33 . 2009-04-30 23:49 109568 ----a-w c:\windows\system32\PDMSetup.exe 2009-03-08 11:33 . 2009-04-30 23:49 132608 ----a-w c:\windows\system32\ieUnatt.exe 2009-03-08 11:33 . 2009-04-30 23:49 107520 ----a-w c:\windows\system32\RegisterIEPKEYs.exe 2009-03-08 11:33 . 2009-04-30 23:49 107008 ----a-w c:\windows\system32\SetIEInstalledDate.exe 2009-03-08 11:33 . 2009-04-30 23:49 103936 ----a-w c:\windows\system32\SetDepNx.exe 2009-03-08 11:33 . 2009-04-30 23:49 420352 ----a-w c:\windows\system32\vbscript.dll 2009-03-08 11:32 . 2009-04-30 23:49 72704 ----a-w c:\windows\system32\admparse.dll 2009-03-08 11:32 . 2009-04-30 23:49 71680 ----a-w c:\windows\system32\iesetup.dll 2009-03-08 11:32 . 2009-04-30 23:49 66560 ----a-w c:\windows\system32\wextract.exe 2009-03-08 11:32 . 2009-04-30 23:49 169472 ----a-w c:\windows\system32\iexpress.exe 2009-03-08 11:31 . 2009-04-30 23:49 34816 ----a-w c:\windows\system32\imgutil.dll 2009-03-08 11:31 . 2009-04-30 23:49 48128 ----a-w c:\windows\system32\mshtmler.dll 2009-03-08 11:31 . 2009-04-30 23:49 45568 ----a-w c:\windows\system32\mshta.exe 2009-03-08 11:22 . 2009-04-30 23:49 156160 ----a-w c:\windows\system32\msls31.dll 2009-03-03 04:46 . 2009-04-17 10:24 3599328 ----a-w c:\windows\system32\ntkrnlpa.exe 2009-03-03 04:46 . 2009-04-17 10:24 3547632 ----a-w c:\windows\system32\ntoskrnl.exe 2009-03-03 04:39 . 2009-04-17 10:24 183296 ----a-w c:\windows\system32\sdohlp.dll 2009-03-03 04:39 . 2009-04-17 10:24 551424 ----a-w c:\windows\system32\rpcss.dll 2009-03-03 04:39 . 2009-04-17 10:24 26112 ----a-w c:\windows\system32\printfilterpipelineprxy.dll 2009-03-03 04:37 . 2009-04-17 10:24 98304 ----a-w c:\windows\system32\iasrecst.dll 2009-03-03 04:37 . 2009-04-17 10:24 54784 ----a-w c:\windows\system32\iasads.dll 2009-03-03 04:37 . 2009-04-17 10:24 44032 ----a-w c:\windows\system32\iasdatastore.dll 2009-03-03 03:04 . 2009-04-17 10:24 666624 ----a-w c:\windows\system32\printfilterpipelinesvc.exe 2009-03-03 02:38 . 2009-04-17 10:24 17408 ----a-w c:\windows\system32\iashost.exe 2009-02-22 17:57 . 2009-02-22 17:53 141473 ----a-w c:\windows\hpiins06.dat 2009-02-19 15:25 . 2009-01-21 21:29 10520 ----a-w c:\windows\system32\avgrsstx.dll 2009-02-19 15:25 . 2009-02-19 15:25 107272 ----a-w c:\windows\system32\drivers\avgtdix.sys 2009-02-19 15:25 . 2009-01-21 21:29 325128 ----a-w c:\windows\system32\drivers\avgldx86.sys 2009-02-17 17:32 . 2009-01-21 17:39 2032 ----a-w c:\users\Van de Voorde Daniel\AppData\Local\d3d9caps.dat 2009-02-13 08:49 . 2009-04-17 10:24 72704 ----a-w c:\windows\system32\secur32.dll 2009-02-13 08:49 . 2009-04-17 10:24 1255936 ----a-w c:\windows\system32\lsasrv.dll 2009-02-09 03:10 . 2009-03-11 15:26 2033152 ----a-w c:\windows\system32\win32k.sys 2009-02-06 17:52 . 2009-02-06 17:52 49504 ----a-w c:\windows\system32\sirenacm.dll 2009-02-06 17:08 . 2009-02-18 20:48 55280 ----a-w c:\windows\system32\drivers\fssfltr.sys 2009-01-24 15:47 . 2006-11-02 12:49 174 --sha-w c:\program files\desktop.ini 2006-11-22 14:58 . 2006-11-22 14:58 8192 --sha-w c:\windows\Users\Default\NTUSER.DAT . ((((((((((((((((((((((((((((( SnapShot@2009-05-05_19.30.31 ))))))))))))))))))))))))))))))))))))))))) . - 2006-11-02 13:00 . 2009-05-05 19:27 16384 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2006-11-02 13:00 . 2009-05-05 19:33 16384 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat + 2006-11-02 13:00 . 2009-05-05 19:33 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat - 2006-11-02 13:00 . 2009-05-05 19:27 32768 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat + 2006-11-02 13:00 . 2009-05-05 19:33 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat - 2006-11-02 13:00 . 2009-05-05 19:27 16384 c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat + 2009-04-30 23:58 . 2009-05-05 19:33 245760 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat - 2009-04-30 23:58 . 2009-05-05 16:12 245760 c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920] "GAINWARD"="c:\program files\EXPERTool\TBPanel.exe" [2008-07-03 2177576] "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952] "EzAgent"="c:\program files\ASUS\ASUS EzVCR.FM\ezagent.exe" [2002-10-31 114688] "swg"="c:\program files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" [2009-02-23 171448] "EA Core"="c:\program files\Electronic Arts\EADM\Core.exe" [2009-02-06 3325952] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2007-03-20 36864] "Launch LGDCore"="c:\program files\Logitech\G-series Software\LGDCore.exe" [2006-03-06 1122304] "Launch LCDMon"="c:\program files\Logitech\G-series Software\LCDMon.exe" [2006-03-06 497152] "AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-02-19 1601304] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-09-17 13580832] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-09-17 92704] "NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2008-02-27 570664] "SecurDisc"="c:\program files\Nero\Nero 7\InCD\NBHGui.exe" [2008-02-18 1629480] "InCD"="c:\program files\Nero\Nero 7\InCD\InCD.exe" [2008-02-18 1057064] "RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2007-08-27 4702208] "Skytel"="Skytel.exe" - c:\windows\SkyTel.exe [2007-08-03 1826816] c:\users\Van de Voorde Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Reliability and Performance Monitor.lnk - c:\windows\System32\perfmon.msc [2009-1-24 145455] c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=c:\windows\System32\avgrsstx.dll [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules] "{258E52C9-1CFC-40CF-9302-BDCF085194ED}"= c:\program files\AVG\AVG8\avgemc.exe:avgemc.exe "{5334BEA3-E077-4C1D-899A-D37D14B2137F}"= c:\program files\AVG\AVG8\avgupd.exe:avgupd.exe "{DD55A754-67CA-4185-9929-FAB7C38E0F12}"= UDP:c:\windows\System32\rserver30\rserver3.exe:Radmin Server 3 "{B223907B-F86F-4444-AB19-6D804CAE3110}"= TCP:c:\windows\System32\rserver30\rserver3.exe:Radmin Server 3 "TCP Query User{AD325BB8-AE4E-464E-8C09-937960E69A8D}c:\\program files\\electronic arts\\eadm\\core.exe"= UDP:c:\program files\electronic arts\eadm\core.exe:EA Download Manager "UDP Query User{BA45A234-D352-4B9A-9819-FAF2C4A5BF92}c:\\program files\\electronic arts\\eadm\\core.exe"= TCP:c:\program files\electronic arts\eadm\core.exe:EA Download Manager "TCP Query User{EEF3EA1B-12E1-4134-A1B3-4F8D1106B012}c:\\program files\\internet explorer\\iexplore.exe"= UDP:c:\program files\internet explorer\iexplore.exe:Internet Explorer "UDP Query User{C82F3BA3-28EF-4A0E-99D1-ADA2A0930918}c:\\program files\\internet explorer\\iexplore.exe"= TCP:c:\program files\internet explorer\iexplore.exe:Internet Explorer "TCP Query User{915AB1C6-366F-4E18-A12B-7F481F37B9D0}e:\\crysis\\bin32\\crysis.exe"= UDP:e:\crysis\bin32\crysis.exe:Crysis "UDP Query User{05916FCA-56CB-4DD6-95D5-B003DD518BC4}e:\\crysis\\bin32\\crysis.exe"= TCP:e:\crysis\bin32\crysis.exe:Crysis R0 amacpi;Microsoft Away Mode System;c:\windows\System32\drivers\null.sys [24/01/2009 16:09 4608] R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\System32\drivers\avgldx86.sys [21/01/2009 23:29 325128] R1 AvgTdiX;AVG8 Network Redirector;c:\windows\System32\drivers\avgtdix.sys [19/02/2009 17:25 107272] R1 raddrvv3;raddrvv3;c:\windows\System32\rserver30\raddrvv3.sys [24/04/2008 9:49 45848] R2 avg8emc;AVG Free8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe [21/01/2009 23:29 903960] R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [21/01/2009 23:29 298264] R2 drhard;drhard;c:\windows\System32\drivers\drhard.sys [25/01/2009 1:56 23600] R2 SeaPort;SeaPort;c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [14/01/2009 18:53 226656] R3 mirrorv3;mirrorv3;c:\windows\System32\drivers\rminiv3.sys [1/11/2006 7:01 3328] R3 Ph3xIB32;Philips 713x Inbox PCI TV Card;c:\windows\System32\drivers\Ph3xIB32.sys [3/04/2007 11:43 1131136] R3 SMCWGU(SMC);SMCWUSB-G 802.11g Wireless USB 2.0 Adapter(SMC);c:\windows\System32\drivers\SMCWGU.sys [21/01/2009 20:18 408064] S2 NeroRegInCDSrv;Nero Registry InCD Service;c:\program files\Nero\Nero 7\InCD\NBHRegInCDSrv.exe --> c:\program files\Nero\Nero 7\InCD\NBHRegInCDSrv.exe [?] S3 fssfltr;FssFltr;c:\windows\System32\drivers\fssfltr.sys [18/02/2009 22:48 55280] S3 fsssvc;Windows Live Family Safety;c:\program files\Windows Live\Family Safety\fsssvc.exe [6/02/2009 19:08 533360] S3 RServer3;Radmin Server V3;c:\windows\System32\rserver30\rserver3.exe [24/04/2008 9:44 1238344] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3418e2b5-35d7-11de-82aa-806e6f6e6963}] \shell\AutoRun\command - M:\autorun.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fc56099f-e7e3-11dd-b7e6-001d7d03b995}] \shell\AutoRun\command - L:\autorun.exe [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}] "c:\windows\System32\rundll32.exe" "c:\windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7070D8E0-650A-46b3-B03C-9497582E6A74}] %SystemRoot%\system32\soundschemes.exe /AddRegistration [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{B3688A53-AB2A-4b1d-8CEF-8F93D8C51C24}] %SystemRoot%\system32\soundschemes2.exe /AddRegistration . Inhoud van de 'Gedeelde Taken' map 2009-05-05 c:\windows\Tasks\User_Feed_Synchronization-{82257FB8-E9E5-404B-B3BF-BC87A65B1A6F}.job - c:\windows\system32\msfeedssync.exe [2009-04-30 11:31] . . ------- Bijkomende Scan ------- . IE: E&xporteren naar Microsoft Excel - c:\progra~1\MI1933~1\Office10\EXCEL.EXE/3000 . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-05-05 23:04 Windows 6.0.6001 Service Pack 1 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: 0 ************************************************************************** . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- [HKEY_USERS\S-1-5-21-2109742368-2942914443-4059112236-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{B9F75FF1-9BB3-D5CD-9DAC-691551B22043}*] "japelmggjmoihemoldka"=hex:63,61,69,6b,6a,6c,00,00 "pahfmhjkokkedccncmlgckjjgdgbcdla"=hex:65,61,65,6c,69,6f,6d,70,68,6d,00,00 "hapelmggjmoihemo"=hex:61,61,00,00 [HKEY_USERS\S-1-5-21-2109742368-2942914443-4059112236-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*] "??"=hex:71,fd,93,ae,b8,35,5f,38,f6,d5,b1,33,fe,1a,9b,3f,d7,4a,3a,3c,31,72,77, f3,56,e4,0d,a5,f7,5c,06,98,c1,cb,d0,a0,17,c9,0c,f1,df,33,6c,73,e7,91,a6,ba,\ "??"=hex:a1,5e,47,db,25,65,bb,27,8b,92,55,34,10,3f,d9,49 [HKEY_USERS\S-1-5-21-2109742368-2942914443-4059112236-1000\Software\SecuROM\License information*] "datasecu"=hex:02,32,8d,c6,57,49,a9,2a,23,ff,23,85,34,40,a8,c9,12,80,fd,05,b2, 3b,ad,a5,79,43,57,b3,31,58,90,ca,d6,ad,0f,ed,6e,80,72,6e,72,95,96,d5,6f,e1,\ "rkeysecu"=hex:3d,eb,72,17,a8,e6,0a,f6,53,4c,e3,85,9d,cc,85,78 . --------------------- DLLs Geladen Onder Lopende Processen --------------------- - - - - - - - > 'Explorer.exe'(5056) c:\program files\Microsoft Virtual PC\VPCShExH.DLL . Voltooingstijd: 2009-05-05 23:04 ComboFix-quarantined-files.txt 2009-05-05 21:04 ComboFix2.txt 2009-05-05 20:59 ComboFix3.txt 2009-05-05 19:31 Pre-Run: 12.692.590.592 bytes beschikbaar Post-Run: 12.653.965.312 bytes beschikbaar 213 --- E O F --- 2009-05-04 14:22 ik weet niet of er iets veranderd is ik zie ze nog staan

deze keer is het wel gelukt hier is het logje ComboFix 09-05-04.A3 - Van de Voorde Daniel 05/05/2009 21:28.1 - NTFSx86 Microsoft® Windows Vista™ Ultimate 6.0.6001.1.1252.32.1033.18.3070.2005 [GMT 2:00] Gestart vanuit: c:\users\Van de Voorde Daniel\Downloads\ComboFix.exe AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\users\Van de Voorde Daniel\Favorites\Videos.url c:\users\VANDEV~1\FAVORI~1\Videos.url . (((((((((((((((((((( Bestanden Gemaakt van 2009-04-05 to 2009-05-05 )))))))))))))))))))))))))))))) . 2009-05-04 16:51 . 2009-05-04 16:51 -------- d-----w c:\program files\Lavalys 2009-05-03 16:05 . 2009-05-03 16:05 -------- d-----w c:\users\Van de Voorde Daniel\AppData\Roaming\Malwarebytes 2009-05-03 16:05 . 2009-04-06 13:32 15504 ----a-w c:\windows\system32\drivers\mbam.sys 2009-05-03 16:05 . 2009-04-06 13:32 38496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys 2009-05-03 16:05 . 2009-05-03 16:05 -------- d-----w c:\programdata\Malwarebytes 2009-05-03 16:05 . 2009-05-03 16:05 -------- d-----w c:\users\All Users\Malwarebytes 2009-05-03 16:05 . 2009-05-03 19:32 -------- d-----w c:\program files\Malwarebytes' Anti-Malware 2009-05-02 10:44 . 2009-05-02 10:44 -------- d-----w c:\program files\Trend Micro 2009-05-02 09:57 . 2009-05-02 09:57 -------- d-----w c:\program files\MSXML 4.0 2009-05-01 12:13 . 2009-05-02 12:05 -------- d-----w c:\users\Van de Voorde Daniel\AppData\Roaming\Ahead 2009-05-01 11:17 . 2009-05-01 12:13 -------- d-----w c:\users\Van de Voorde Daniel\AppData\Local\Ahead 2009-05-01 11:14 . 2009-05-01 11:14 -------- d-----w c:\programdata\Ahead 2009-05-01 11:14 . 2009-05-01 11:14 -------- d-----w c:\users\All Users\Ahead 2009-05-01 11:10 . 2009-05-01 11:10 -------- d-----w c:\program files\Nero 2009-05-01 11:10 . 2009-05-01 11:10 -------- d-----w c:\programdata\Nero 2009-05-01 11:10 . 2009-05-01 11:10 -------- d-----w c:\users\All Users\Nero 2009-05-01 11:10 . 2009-05-01 11:12 -------- d-----w c:\program files\Common Files\Ahead 2009-04-29 14:27 . 2008-08-17 10:33 678408 ----a-w c:\windows\system32\gpprefcl.dll 2009-04-20 13:43 . 2009-04-20 13:43 -------- d-----w c:\program files\Microsoft Silverlight 2009-04-17 10:50 . 2009-04-17 10:50 -------- d-----w c:\program files\Microsoft Virtual PC . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-05-05 14:26 . 2009-01-21 18:32 668790 ----a-w c:\windows\system32\perfh013.dat 2009-05-05 14:26 . 2009-01-21 18:32 127364 ----a-w c:\windows\system32\perfc013.dat 2009-05-01 21:19 . 2009-01-28 22:15 2560 ----a-w c:\windows\_MSRSTRT.EXE 2009-05-01 21:15 . 2006-11-02 10:25 86016 ----a-w c:\windows\inf\infstrng.dat 2009-05-01 21:15 . 2006-11-02 10:25 86016 ----a-w c:\windows\inf\infstor.dat 2009-05-01 21:15 . 2006-11-02 10:25 51200 ----a-w c:\windows\inf\infpub.dat 2009-04-28 16:09 . 2009-01-21 18:56 -------- d-----w c:\program files\Microsoft 2009-04-26 16:24 . 2009-01-21 17:39 54600 ----a-w c:\users\Van de Voorde Daniel\AppData\Local\GDIPFONTCACHEV1.DAT 2009-04-18 09:58 . 2006-11-02 11:18 -------- d-----w c:\program files\Windows Mail 2009-03-17 03:38 . 2009-04-17 10:24 13824 ----a-w c:\windows\system32\apilogen.dll 2009-03-17 03:38 . 2009-04-17 10:24 24064 ----a-w c:\windows\system32\amxread.dll 2009-03-11 22:06 . 2009-03-11 22:06 -------- d-----w c:\program files\Visiosonic 2009-03-09 21:07 . 2009-03-09 21:07 107888 ----a-w c:\windows\system32\CmdLineExt.dll 2009-03-09 20:50 . 2009-03-09 20:50 -------- d-----w c:\program files\Electronic Arts 2009-03-09 20:50 . 2009-01-21 17:44 -------- d--h--w c:\program files\InstallShield Installation Information 2009-03-09 20:48 . 2009-03-09 20:48 662 ----a-w c:\windows\system32\ealregsnapshot1.reg 2009-03-08 11:34 . 2009-04-30 23:49 914944 ----a-w c:\windows\system32\wininet.dll 2009-03-08 11:34 . 2009-04-30 23:49 43008 ----a-w c:\windows\system32\licmgr10.dll 2009-03-08 11:33 . 2009-04-30 23:49 18944 ----a-w c:\windows\system32\corpol.dll 2009-03-08 11:33 . 2009-04-30 23:49 109056 ----a-w c:\windows\system32\iesysprep.dll 2009-03-08 11:33 . 2009-04-30 23:49 109568 ----a-w c:\windows\system32\PDMSetup.exe 2009-03-08 11:33 . 2009-04-30 23:49 132608 ----a-w c:\windows\system32\ieUnatt.exe 2009-03-08 11:33 . 2009-04-30 23:49 107520 ----a-w c:\windows\system32\RegisterIEPKEYs.exe 2009-03-08 11:33 . 2009-04-30 23:49 107008 ----a-w c:\windows\system32\SetIEInstalledDate.exe 2009-03-08 11:33 . 2009-04-30 23:49 103936 ----a-w c:\windows\system32\SetDepNx.exe 2009-03-08 11:33 . 2009-04-30 23:49 420352 ----a-w c:\windows\system32\vbscript.dll 2009-03-08 11:32 . 2009-04-30 23:49 72704 ----a-w c:\windows\system32\admparse.dll 2009-03-08 11:32 . 2009-04-30 23:49 71680 ----a-w c:\windows\system32\iesetup.dll 2009-03-08 11:32 . 2009-04-30 23:49 66560 ----a-w c:\windows\system32\wextract.exe 2009-03-08 11:32 . 2009-04-30 23:49 169472 ----a-w c:\windows\system32\iexpress.exe 2009-03-08 11:31 . 2009-04-30 23:49 34816 ----a-w c:\windows\system32\imgutil.dll 2009-03-08 11:31 . 2009-04-30 23:49 48128 ----a-w c:\windows\system32\mshtmler.dll 2009-03-08 11:31 . 2009-04-30 23:49 45568 ----a-w c:\windows\system32\mshta.exe 2009-03-08 11:22 . 2009-04-30 23:49 156160 ----a-w c:\windows\system32\msls31.dll 2009-03-03 04:46 . 2009-04-17 10:24 3599328 ----a-w c:\windows\system32\ntkrnlpa.exe 2009-03-03 04:46 . 2009-04-17 10:24 3547632 ----a-w c:\windows\system32\ntoskrnl.exe 2009-03-03 04:39 . 2009-04-17 10:24 183296 ----a-w c:\windows\system32\sdohlp.dll 2009-03-03 04:39 . 2009-04-17 10:24 551424 ----a-w c:\windows\system32\rpcss.dll 2009-03-03 04:39 . 2009-04-17 10:24 26112 ----a-w c:\windows\system32\printfilterpipelineprxy.dll 2009-03-03 04:37 . 2009-04-17 10:24 98304 ----a-w c:\windows\system32\iasrecst.dll 2009-03-03 04:37 . 2009-04-17 10:24 54784 ----a-w c:\windows\system32\iasads.dll 2009-03-03 04:37 . 2009-04-17 10:24 44032 ----a-w c:\windows\system32\iasdatastore.dll 2009-03-03 03:04 . 2009-04-17 10:24 666624 ----a-w c:\windows\system32\printfilterpipelinesvc.exe 2009-03-03 02:38 . 2009-04-17 10:24 17408 ----a-w c:\windows\system32\iashost.exe 2009-02-22 17:57 . 2009-02-22 17:53 141473 ----a-w c:\windows\hpiins06.dat 2009-02-19 15:25 . 2009-01-21 21:29 10520 ----a-w c:\windows\system32\avgrsstx.dll 2009-02-19 15:25 . 2009-02-19 15:25 107272 ----a-w c:\windows\system32\drivers\avgtdix.sys 2009-02-19 15:25 . 2009-01-21 21:29 325128 ----a-w c:\windows\system32\drivers\avgldx86.sys 2009-02-17 17:32 . 2009-01-21 17:39 2032 ----a-w c:\users\Van de Voorde Daniel\AppData\Local\d3d9caps.dat 2009-02-13 08:49 . 2009-04-17 10:24 72704 ----a-w c:\windows\system32\secur32.dll 2009-02-13 08:49 . 2009-04-17 10:24 1255936 ----a-w c:\windows\system32\lsasrv.dll 2009-02-09 03:10 . 2009-03-11 15:26 2033152 ----a-w c:\windows\system32\win32k.sys 2009-02-06 17:52 . 2009-02-06 17:52 49504 ----a-w c:\windows\system32\sirenacm.dll 2009-02-06 17:08 . 2009-02-18 20:48 55280 ----a-w c:\windows\system32\drivers\fssfltr.sys 2009-01-24 15:47 . 2006-11-02 12:49 174 --sha-w c:\program files\desktop.ini 2006-11-22 14:58 . 2006-11-22 14:58 8192 --sha-w c:\windows\Users\Default\NTUSER.DAT . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920] "GAINWARD"="c:\program files\EXPERTool\TBPanel.exe" [2008-07-03 2177576] "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952] "EzAgent"="c:\program files\ASUS\ASUS EzVCR.FM\ezagent.exe" [2002-10-31 114688] "swg"="c:\program files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" [2009-02-23 171448] "EA Core"="c:\program files\Electronic Arts\EADM\Core.exe" [2009-02-06 3325952] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2007-03-20 36864] "Launch LGDCore"="c:\program files\Logitech\G-series Software\LGDCore.exe" [2006-03-06 1122304] "Launch LCDMon"="c:\program files\Logitech\G-series Software\LCDMon.exe" [2006-03-06 497152] "AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-02-19 1601304] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-09-17 13580832] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-09-17 92704] "NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2008-02-27 570664] "SecurDisc"="c:\program files\Nero\Nero 7\InCD\NBHGui.exe" [2008-02-18 1629480] "InCD"="c:\program files\Nero\Nero 7\InCD\InCD.exe" [2008-02-18 1057064] "RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2007-08-27 4702208] "Skytel"="Skytel.exe" - c:\windows\SkyTel.exe [2007-08-03 1826816] c:\users\Van de Voorde Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Reliability and Performance Monitor.lnk - c:\windows\System32\perfmon.msc [2009-1-24 145455] c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=c:\windows\System32\avgrsstx.dll [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules] "{258E52C9-1CFC-40CF-9302-BDCF085194ED}"= c:\program files\AVG\AVG8\avgemc.exe:avgemc.exe "{5334BEA3-E077-4C1D-899A-D37D14B2137F}"= c:\program files\AVG\AVG8\avgupd.exe:avgupd.exe "{DD55A754-67CA-4185-9929-FAB7C38E0F12}"= UDP:c:\windows\System32\rserver30\rserver3.exe:Radmin Server 3 "{B223907B-F86F-4444-AB19-6D804CAE3110}"= TCP:c:\windows\System32\rserver30\rserver3.exe:Radmin Server 3 "TCP Query User{AD325BB8-AE4E-464E-8C09-937960E69A8D}c:\\program files\\electronic arts\\eadm\\core.exe"= UDP:c:\program files\electronic arts\eadm\core.exe:EA Download Manager "UDP Query User{BA45A234-D352-4B9A-9819-FAF2C4A5BF92}c:\\program files\\electronic arts\\eadm\\core.exe"= TCP:c:\program files\electronic arts\eadm\core.exe:EA Download Manager "TCP Query User{EEF3EA1B-12E1-4134-A1B3-4F8D1106B012}c:\\program files\\internet explorer\\iexplore.exe"= UDP:c:\program files\internet explorer\iexplore.exe:Internet Explorer "UDP Query User{C82F3BA3-28EF-4A0E-99D1-ADA2A0930918}c:\\program files\\internet explorer\\iexplore.exe"= TCP:c:\program files\internet explorer\iexplore.exe:Internet Explorer "TCP Query User{915AB1C6-366F-4E18-A12B-7F481F37B9D0}e:\\crysis\\bin32\\crysis.exe"= UDP:e:\crysis\bin32\crysis.exe:Crysis "UDP Query User{05916FCA-56CB-4DD6-95D5-B003DD518BC4}e:\\crysis\\bin32\\crysis.exe"= TCP:e:\crysis\bin32\crysis.exe:Crysis R0 amacpi;Microsoft Away Mode System;c:\windows\System32\drivers\null.sys [24/01/2009 16:09 4608] R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\System32\drivers\avgldx86.sys [21/01/2009 23:29 325128] R1 AvgTdiX;AVG8 Network Redirector;c:\windows\System32\drivers\avgtdix.sys [19/02/2009 17:25 107272] R1 raddrvv3;raddrvv3;c:\windows\System32\rserver30\raddrvv3.sys [24/04/2008 9:49 45848] R2 avg8emc;AVG Free8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe [21/01/2009 23:29 903960] R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [21/01/2009 23:29 298264] R2 drhard;drhard;c:\windows\System32\drivers\drhard.sys [25/01/2009 1:56 23600] R2 SeaPort;SeaPort;c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [14/01/2009 18:53 226656] R3 mirrorv3;mirrorv3;c:\windows\System32\drivers\rminiv3.sys [1/11/2006 7:01 3328] R3 Ph3xIB32;Philips 713x Inbox PCI TV Card;c:\windows\System32\drivers\Ph3xIB32.sys [3/04/2007 11:43 1131136] R3 SMCWGU(SMC);SMCWUSB-G 802.11g Wireless USB 2.0 Adapter(SMC);c:\windows\System32\drivers\SMCWGU.sys [21/01/2009 20:18 408064] S2 NeroRegInCDSrv;Nero Registry InCD Service;c:\program files\Nero\Nero 7\InCD\NBHRegInCDSrv.exe --> c:\program files\Nero\Nero 7\InCD\NBHRegInCDSrv.exe [?] S3 fssfltr;FssFltr;c:\windows\System32\drivers\fssfltr.sys [18/02/2009 22:48 55280] S3 fsssvc;Windows Live Family Safety;c:\program files\Windows Live\Family Safety\fsssvc.exe [6/02/2009 19:08 533360] S3 RServer3;Radmin Server V3;c:\windows\System32\rserver30\rserver3.exe [24/04/2008 9:44 1238344] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{3418e2b5-35d7-11de-82aa-806e6f6e6963}] \shell\AutoRun\command - M:\autorun.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{760d3e4b-e7e0-11dd-bbce-806e6f6e6963}] \shell\AutoRun\command - F:\Run.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a231c731-2b64-11de-a534-806e6f6e6963}] \shell\AutoRun\command - G:\Run.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f97d2e32-2b52-11de-a40f-806e6f6e6963}] \shell\AutoRun\command - g:\autorun\AUTORUN.EXE [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fc56099f-e7e3-11dd-b7e6-001d7d03b995}] \shell\AutoRun\command - L:\autorun.exe [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}] "c:\windows\System32\rundll32.exe" "c:\windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7070D8E0-650A-46b3-B03C-9497582E6A74}] %SystemRoot%\system32\soundschemes.exe /AddRegistration [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{B3688A53-AB2A-4b1d-8CEF-8F93D8C51C24}] %SystemRoot%\system32\soundschemes2.exe /AddRegistration . Inhoud van de 'Gedeelde Taken' map 2009-05-05 c:\windows\Tasks\User_Feed_Synchronization-{82257FB8-E9E5-404B-B3BF-BC87A65B1A6F}.job - c:\windows\system32\msfeedssync.exe [2009-04-30 11:31] . - - - - ORPHANS VERWIJDERD - - - - HKCU-Run-CubeDesktop - (no file) HKLM-Run-snpstd - c:\windows\vsnpstd.exe . ------- Bijkomende Scan ------- . IE: E&xporteren naar Microsoft Excel - c:\progra~1\MI1933~1\Office10\EXCEL.EXE/3000 . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-05-05 21:30 Windows 6.0.6001 Service Pack 1 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: 0 ************************************************************************** . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- [HKEY_USERS\S-1-5-21-2109742368-2942914443-4059112236-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{B9F75FF1-9BB3-D5CD-9DAC-691551B22043}*] "japelmggjmoihemoldka"=hex:63,61,69,6b,6a,6c,00,00 "pahfmhjkokkedccncmlgckjjgdgbcdla"=hex:65,61,65,6c,69,6f,6d,70,68,6d,00,00 "hapelmggjmoihemo"=hex:61,61,00,00 [HKEY_USERS\S-1-5-21-2109742368-2942914443-4059112236-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*] "??"=hex:71,fd,93,ae,b8,35,5f,38,f6,d5,b1,33,fe,1a,9b,3f,d7,4a,3a,3c,31,72,77, f3,56,e4,0d,a5,f7,5c,06,98,c1,cb,d0,a0,17,c9,0c,f1,df,33,6c,73,e7,91,a6,ba,\ "??"=hex:a1,5e,47,db,25,65,bb,27,8b,92,55,34,10,3f,d9,49 [HKEY_USERS\S-1-5-21-2109742368-2942914443-4059112236-1000\Software\SecuROM\License information*] "datasecu"=hex:02,32,8d,c6,57,49,a9,2a,23,ff,23,85,34,40,a8,c9,12,80,fd,05,b2, 3b,ad,a5,79,43,57,b3,31,58,90,ca,d6,ad,0f,ed,6e,80,72,6e,72,95,96,d5,6f,e1,\ "rkeysecu"=hex:3d,eb,72,17,a8,e6,0a,f6,53,4c,e3,85,9d,cc,85,78 . Voltooingstijd: 2009-05-05 21:31 ComboFix-quarantined-files.txt 2009-05-05 19:31 Pre-Run: 12.591.738.880 bytes beschikbaar Post-Run: 12.661.010.432 bytes beschikbaar 209 --- E O F --- 2009-05-04 14:22

kan het bestand niet vinden zegt em

neen er staat wel bug.txt dit is wat er in staat : C:\32788R22FWJFW\n.com" cmdwait 2500 exec hide "~$folder.system$\cmd.execf" /c 32788R22FWJFW\prep.cmd (5172) 1 bestand(en) zijn verplaatst. Killing 'n.com' PUSHD "C:\32788R22FWJFW" 1 bestand(en) gekopieerd. 1 bestand(en) gekopieerd. IF NOT EXIST C:\Windows\system32\cmd.exe GOTO Not_NT IF EXIST OsVer EXIT VER 1>OsVer GREP.cfexe -F "5.2." OsVer IF 1 == 0 GOTO Not_NT GREP.cfexe -F "5.1.2" OsVer IF 1 == 0 GOTO NT GREP.cfexe -F "5.00.2" OsVer IF 1 == 0 GOTO NT ============================================= ALLUSERSPROFILE=C:\ProgramData APPDATA=C:\Users\Van de Voorde Daniel\AppData\Roaming CFLDR=32788R22FWJFW Chksum=E6C68298198233B0DA25F44550C69FA1 CommonProgramFiles=C:\Program Files\Common Files COMPUTERNAME=AMD-PHENOM9950 ComSpec=C:\Windows\system32\cmd.execf FP_NO_HOST_CHECK=NO HOMEDRIVE=C: HOMEPATH=\Users\Van de Voorde Daniel KMD=CF29815.exe LOCALAPPDATA=C:\Users\Van de Voorde Daniel\AppData\Local LOGONSERVER=\\AMD-PHENOM9950 NUMBER_OF_PROCESSORS=4 OS=Windows_NT Path=C:\32788R22FWJFW;C:\Windows\system32;C:\Windows;C:\Windows\system32\wbem;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\ PATHEXT=.CFEXE;.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC PROCESSOR_ARCHITECTURE=x86 PROCESSOR_IDENTIFIER=x86 Family 16 Model 2 Stepping 3, AuthenticAMD PROCESSOR_LEVEL=16 PROCESSOR_REVISION=0203 ProgramData=C:\ProgramData ProgramFiles=C:\Program Files PROMPT=$ PUBLIC=C:\Users\Public Qrntn=C:\Qoobox\Quarantine RKEY_=hklm\software\microsoft\windows nt\currentversion\windows sfxcmd="C:\Users\Van de Voorde Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0IGUVOLO\ComboFix[1].exe" sfxname=C:\Users\Van de Voorde Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0IGUVOLO\ComboFix[1].exe SYSTEM=C:\Windows\system32 SystemDrive=C: SystemRoot=C:\Windows TEMP=C:\Users\VANDEV~1\AppData\Local\Temp TMP=C:\Users\VANDEV~1\AppData\Local\Temp USERDOMAIN=AMD-Phenom9950 USERNAME=Van de Voorde Daniel USERPROFILE=C:\Users\Van de Voorde Daniel windir=C:\Windows ============================================= IF NOT DEFINED sfxname GOTO END IF EXIST C:\cfDebug.cmd DEL /A/F C:\cfDebug.cmd CALL sfx.cmd CALL AV.cmd SET /a AVCount+=1 CSCRIPT.exe //NOLOGO //E:VBSCRIPT //B //T:08 av.vbs FINDSTR -C:"*On-access scanning enabled*" Resident.txt 1>AVChk && ( SED -r "s/AV: (.*) \*On-access .*/* \1/;" AVChk | SED ":a; $!N;s/\n/~n/;ta" 1>AVChkB NIRCMD beep 3000 200 NIRCMD beep 3000 300 IF 1 LEQ 1 FOR /F "TOKENS=*" %G IN (AVChkB) DO @NIRCMD INFOBOX "ComboFix heeft vastgesteld dat de volgende real time scanner(s) actief zijn:~n~n%G~n~nAntivirus- en anti-inbraak programma's kunnen hinderend zijn voor~nComboFix's werking. Dit kan leiden tot onvoorspelbare resultaten en mogelijk~nsysteemschade. Gelieve deze scanners uit te schakelen alvorens te klikken op 'OK'." "Waarschuwing !!" "" && GOTO Av-check IF 1 GTR 1 FOR /F "TOKENS=*" %G IN (AVChkB) DO @NIRCMD INFOBOX "%G~n~nDe hoger vermelde real time scanner(s) zijn nog steeds actief, maar ComboFix zal~nverder werken. Gelieve op te merken dat dit op Uw eigen risico is" "Waarschuwing !!" "" ) SET /a AVCount+=1 CSCRIPT.exe //NOLOGO //E:VBSCRIPT //B //T:08 av.vbs FINDSTR -C:"*On-access scanning enabled*" Resident.txt 1>AVChk && ( SED -r "s/AV: (.*) \*On-access .*/* \1/;" AVChk | SED ":a; $!N;s/\n/~n/;ta" 1>AVChkB NIRCMD beep 3000 200 NIRCMD beep 3000 300 IF 2 LEQ 1 FOR /F "TOKENS=*" %G IN (AVChkB) DO @NIRCMD INFOBOX "ComboFix heeft vastgesteld dat de volgende real time scanner(s) actief zijn:~n~n%G~n~nAntivirus- en anti-inbraak programma's kunnen hinderend zijn voor~nComboFix's werking. Dit kan leiden tot onvoorspelbare resultaten en mogelijk~nsysteemschade. Gelieve deze scanners uit te schakelen alvorens te klikken op 'OK'." "Waarschuwing !!" "" && GOTO Av-check IF 2 GTR 1 FOR /F "TOKENS=*" %G IN (AVChkB) DO @NIRCMD INFOBOX "%G~n~nDe hoger vermelde real time scanner(s) zijn nog steeds actief, maar ComboFix zal~nverder werken. Gelieve op te merken dat dit op Uw eigen risico is" "Waarschuwing !!" "" ) DEL /A/F/Q AVChk? SET AVCount= IF EXIST OsVer00 CALL :Vista REN OsVer00 Vista.mac IF NOT DEFINED RKEY_ GOTO :EOF IF /I "" EQU "RKEYB" GOTO RKEYB COPY /Y /B C:\Windows\system32\sc.exe C:\Windows\system32\swsc.exe 1 bestand(en) gekopieerd. HANDLE csrss.exe.mui 1>MUI00 SED -r "/.*(.:\\.*)\\[^\\]*$/!d; s//\1/" MUI00 | SED -r -n "G; s/\n/&&/; /^([ -~]*\n).*\n\1/d; s/\n//; h; P" 1>MUI FOR /F "TOKENS=*" %G IN (MUI) DO @( IF EXIST "%~G\sc.exe.mui" COPY /Y /B "%~G\sc.exe.mui" "%~G\swsc.exe.mui" IF EXIST "%~G\cmd.exe.mui" ( SWXCACLS "%~G\cmd.exe.mui" /OA /Q SWXCACLS "%~G\cmd.exe.mui" /P /GA:F /GS:F /GP:X /GU:X /Q COPY /Y "%~G\cmd.exe.mui" "%~G\CF29815.exe.mui" SWXCACLS "%~G\cmd.exe.mui" /g SID#S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464:f /GA:X /GS:X /GP:X /GU:X /Q SWXCACLS "%~G\cmd.exe.mui" /o SID#S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464 /Q ) ) 1 bestand(en) gekopieerd. SteelWerX Extended Configuration Access Control Lists Written by Bobbi Flekman 2006 © Ownerchange for "C:\Windows\System32\nl-NL\cmd.exe.mui" to Administrators group was successful 1 bestand(en) gekopieerd. DEL /A/F/Q MUI0? GOTO :EOF IF /I "C:\32788R22FWJFW" NEQ "C:\32788R22FWJFW" GOTO Abort IF EXIST "C:\Users\VANDEV~1\AppData\Local\Temp\32788R22FWJFW32788R22FWJFW.log" DEL /A/F "C:\Users\VANDEV~1\AppData\Local\Temp\32788R22FWJFW32788R22FWJFW.log" ( SET "FileName=ComboFix[1]" SET "FilePath=C:\Users\Van de Voorde Daniel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0IGUVOLO\" ) SET FileName 1>FileName GREP -isqx "FileName=[-[:alnum:]@.]*" FileName || GOTO AbortB DEL /A/F/Q DirName0? CALL n.com INFOBOX "U kunt ComboFix niet herbenoemen als %FileName%~n~nGelieve een andere naam te gebruiken, bij voorkeur opgebouwd uit alfanumerische karakters" "" GOTO END IF EXIST "C:\Windows\system32\cmd.execf" MOVE /Y "C:\Windows\system32\cmd.execf" "C:\Users\VANDEV~1\AppData\Local\Temp" 1 bestand(en) zijn verplaatst. CD .. IF DEFINED cfldr RD /S/Q "32788R22FWJFW"

combofix ging wel niet ik had mijn AVG antivirus beeindigd maar combofix meldde dat deze nog aanstond maar toch ging doorgaan maar er gebeurde niets geen venster dat openging ofzo totaal niets

ze zijn weg Malwarebytes' Anti-Malware 1.36 Database versie: 2070 Windows 6.0.6001 Service Pack 1 3/05/2009 22:41:14 mbam-log-2009-05-03 (22-41-14).txt Scan type: Volledige Scan (C:\|D:\|E:\|F:\|G:\|H:\|I:\|J:\|K:\|R:\|) Objecten gescand: 488643 Verstreken tijd: 3 hour(s), 17 minute(s), 57 second(s) Geheugenprocessen geïnfecteerd: 0 Geheugenmodulen geïnfecteerd: 0 Registersleutels geïnfecteerd: 0 Registerwaarden geïnfecteerd: 0 Registerdata bestanden geïnfecteerd: 0 Mappen geïnfecteerd: 0 Bestanden geïnfecteerd: 4 Geheugenprocessen geïnfecteerd: (Geen kwaadaardige items gevonden) Geheugenmodulen geïnfecteerd: (Geen kwaadaardige items gevonden) Registersleutels geïnfecteerd: (Geen kwaadaardige items gevonden) Registerwaarden geïnfecteerd: (Geen kwaadaardige items gevonden) Registerdata bestanden geïnfecteerd: (Geen kwaadaardige items gevonden) Mappen geïnfecteerd: (Geen kwaadaardige items gevonden) Bestanden geïnfecteerd: F:\Documents and Settings\Van de Voorde Daniel\Local Settings\Temp\CSM32.tmp (Adware.RelevantKnowledge) -> Quarantined and deleted successfully. F:\Documents and Settings\Van de Voorde Daniel\Local Settings\Temp\MSI31.tmp (Adware.RelevantKnowledge) -> Quarantined and deleted successfully. F:\System Volume Information\_restore{514FFDB4-59EE-49C6-8945-A2212C087B5F}\RP23\A0015237.exe (Adware.RelevantKnowledge) -> Quarantined and deleted successfully. F:\WINDOWS\Installer\MSI3C.tmp (Adware.RelevantKnowledge) -> Quarantined and deleted successfully.

heb een logje van anti-malware heeft wel 3 uur geduurd maar hier is em Malwarebytes' Anti-Malware 1.36 Database versie: 2070 Windows 6.0.6001 Service Pack 1 3/05/2009 21:32:54 mbam-log-2009-05-03 (21-32-35).txt Scan type: Volledige Scan (C:\|D:\|E:\|F:\|G:\|H:\|I:\|J:\|K:\|R:\|) Objecten gescand: 488643 Verstreken tijd: 3 hour(s), 17 minute(s), 57 second(s) Geheugenprocessen geïnfecteerd: 0 Geheugenmodulen geïnfecteerd: 0 Registersleutels geïnfecteerd: 0 Registerwaarden geïnfecteerd: 0 Registerdata bestanden geïnfecteerd: 0 Mappen geïnfecteerd: 0 Bestanden geïnfecteerd: 4 Geheugenprocessen geïnfecteerd: (Geen kwaadaardige items gevonden) Geheugenmodulen geïnfecteerd: (Geen kwaadaardige items gevonden) Registersleutels geïnfecteerd: (Geen kwaadaardige items gevonden) Registerwaarden geïnfecteerd: (Geen kwaadaardige items gevonden) Registerdata bestanden geïnfecteerd: (Geen kwaadaardige items gevonden) Mappen geïnfecteerd: (Geen kwaadaardige items gevonden) Bestanden geïnfecteerd: F:\Documents and Settings\Van de Voorde Daniel\Local Settings\Temp\CSM32.tmp (Adware.RelevantKnowledge) -> No action taken. F:\Documents and Settings\Van de Voorde Daniel\Local Settings\Temp\MSI31.tmp (Adware.RelevantKnowledge) -> No action taken. F:\System Volume Information\_restore{514FFDB4-59EE-49C6-8945-A2212C087B5F}\RP23\A0015237.exe (Adware.RelevantKnowledge) -> No action taken. F:\WINDOWS\Installer\MSI3C.tmp (Adware.RelevantKnowledge) -> No action taken.

mag ik deze tegelijk uitvoeren?

heeft niets geholpen...... nog nog een idee? btw mijn CPU is een AMD phenom 9950 quadcore met een gigabyte moederbord en 3 GB RAM

had ook silverlight en internet explorer 8 gedownload kan het dat miss zijn? het is vooral als ik vensters open met internet de updates zijn van de vrijdag geinstalleerd

weet niemand iets? het logje was toch voldoende eh?

dag iedereen sinds ik enkele updates heb geinstalleerd en bezig geweest voor een programma te zoeken voor bewegende achtergronden, is mijn pc trager dan normaal ik heb al schijfopruiming gedaan, defragmentatie uitgevoerd maar niets helpt ik heb hijackthis gedownload en hier is het logje : Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:46:42, on 2/05/2009 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Windows Defender\MSASCui.exe C:\Windows\RtHDVCpl.exe C:\Program Files\Logitech\G-series Software\LGDCore.exe C:\Program Files\Logitech\G-series Software\LCDMon.exe C:\Program Files\AVG\AVG8\avgtray.exe C:\Windows\System32\rundll32.exe C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe C:\Program Files\Nero\Nero 7\InCD\InCD.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\EXPERTool\TBPANEL.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Windows\ehome\ehtray.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\ASUS\ASUS EzVCR.FM\ezagent.exe C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe C:\Program Files\Electronic Arts\EADM\Core.exe C:\Program Files\SMC\SMCWUSB-G 802.11g Wireless USB 2.0 Adapter\SMCWGUTI.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Windows\system32\Taskmgr.exe C:\Program Files\Logitech\G-series Software\Applets\LCDMedia.exe C:\Program Files\Logitech\G-series Software\Applets\LCDPop3\LCDPOP3.exe C:\Program Files\Logitech\G-series Software\Applets\LCDCountdown\LCDCountdown.exe C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe C:\Windows\system32\conime.exe C:\Program Files\Windows Live\Toolbar\wltuser.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Windows Live\Contacts\wlcomm.exe C:\Windows\system32\SearchProtocolHost.exe C:\Windows\system32\SearchFilterHost.exe C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [skytel] Skytel.exe O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe" O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [snpstd] C:\Windows\vsnpstd.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [securDisc] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe O4 - HKLM\..\Run: [inCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [GAINWARD] C:\Program Files\EXPERTool\TBPanel.exe /A O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [EzAgent] C:\Program Files\ASUS\ASUS EzVCR.FM\ezagent.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') O4 - Startup: Reliability and Performance Monitor.lnk = D:\Windows\System32\perfmon.msc O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: Setup_VRM.lnk = C:\Users\Van de Voorde Daniel\AppData\Local\Temp\Rar$EX00.552\PCDJ\Setup.exe O4 - Global Startup: SMCWUSB-G 802.11g Wireless USB Utility.lnk = C:\Program Files\SMC\SMCWUSB-G 802.11g Wireless USB 2.0 Adapter\SMCWGUTI.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office10\EXCEL.EXE/3000 O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O13 - Gopher Prefix: O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O20 - AppInit_DLLs: avgrsstx.dll O22 - SharedTaskScheduler: Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll O22 - SharedTaskScheduler: Deskscapes - {EC654325-1273-C2A9-2B7C-45D29BCE68FB} - C:\PROGRA~1\Stardock\OBJECT~1\DESKSC~1\deskscapes.dll (file missing) O22 - SharedTaskScheduler: Stardock Vista ControlPanel Extension - {EC654325-1273-C2A9-2B7C-45D29BCE68FD} - C:\PROGRA~1\Stardock\OBJECT~1\DESKSC~1\DesktopControlPanel.dll (file missing) O22 - SharedTaskScheduler: StardockDreamController - {EC654325-1273-C2A9-2B7C-45D29BCE68FF} - C:\PROGRA~1\Stardock\OBJECT~1\DESKSC~1\DreamControl.dll (file missing) O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: Nero Registry InCD Service (NeroRegInCDSrv) - Unknown owner - C:\Program Files\Nero\Nero 7\InCD\NBHRegInCDSrv.exe (file missing) O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: Radmin Server V3 (RServer3) - Famatech International Corp. - C:\Windows\system32\rserver30\RServer3.exe -- End of file - 8648 bytes hopelijk een oplossing

goeiendag allemaal, dit is nog steeds mijn probleem : ik krijg windows dreamescene niet gestart met 3 monitors deze wil niet starten omdat ik meer dan 1 videoadapter gebruik heeft iemand een oplossing of miss ergens een programma wat kan helpen? (heb al windows update gestart maar er zijn er geen) dank u

kunne deze 2 ook op vista werken of niet ook op illegale versies?

ook voor dvd-schrijvers?

hallo iedereen ik had een vraagje ik heb op het moment 2 ide schrijvers maar ik wil nieuwe halen als Sata sneller is omdat ik een extra IDE kaart in mijn pc heb steken is dit zeer vervelend (veel wirwar met kabels) ik heb op het moment 4 harde schijven 2 s-ata en 2 IDE + 2 schrijvers mijn moederbord is een gigabyte (een dq6 of zoiets) mijn CPU is een phenom quadcore (miss dat dat iets uitmaakt?) groetjes

neen dit werkt ook niet groetjes

dan kan ik men 3de monitor niet meer gebruiken

neen er staat niets bij van windows dreamscene ik heb alles al geinstalleerd maar deze zegt gewoon dat windows dreamscene niet kan worden gestart omdat ik meer dan 1 videokaart gebruik ik heb een geforce 9600GT en een geforce 8500GT mijn CPU is een AMD phenom 9950 quadcore groetjes