candise

24 maart 2009

ik heb via virtual technician een log gekregen,

het resultaat van hun scanprogramma naar problemen met site advisor

was goed, geen problemen gevonden !

ik steek het er het logje bij van het probleemlogboek

MVT Information MVT Version :4.3.3.0 Session ID :16724975System Information Operating System :Microsoft Windows Vista Home Basic EditionHome Edition (Build 6001) Service Pack :Service Pack 1.0 Language :0813 Internet Explorer Version :7.0 Internet Explorer Language :nl System Drive Type :NTFS Physical Memory Available :750104 Physical Memory Total :1833156 Virtual Memory Available :2357948 Virtual Memory Total :3920744 System Architecture :x86 Family 15 Model 72 Stepping 2AMD Turion 64 X2 Mobile Technology TL-52 Date Time :03/24/2009 23:54:55 Time Zone : GMT +01:00 Product Details Product Name:SiteAdvisor Product Version:2.9.260Language:en-usPartner:McAfeeHealth Check Details Registry OK File OK Process OK Service OK COM OK Top Issues OK SYSTEM OK

24 maart 2009

mijn site advisor is weer weg ! op IE staat hij er nog steeds maar op mozilla is hij weer keer verdwenen, ik heb dat linkje weer geprobeerd dat mij werd gestuurd in begin van topic, maar lukt ook niet ! ik krijg wel de melding dat de installatie gelukt is maar waar is mijn balkje dan naar toe van site advisor ? kan dat ergens aan liggen ? ik heb adblock en flashblock maar ik kan het probleem daar niet van in zien want ik had da vroeger ook al ...

24 maart 2009

sorry zunne, ben hier were, alles gaat goed met mijn pc maar ik vind wel dat hij trager is geworden ... niet dat het heel erg is , maar toch wel trager ... vroeger opende hij direct of bijna direct en nu moet ik toch wel een seconde of 30 wachten ... denk dat het aan bepaalde sites ligt dat ik zo lang moest wachten, ik heb het eigenlijk niet op alle sites, sorry

23 maart 2009

i'm sorry , ik had geen spatie ingetikt voor de /u, heb ik dus nu wel gedaan en kreeg de melding dat combofix verwijderd werd van mijn pc, zou ik nu nog iets moeten doen of is alles nu in orde ?

23 maart 2009

kun je nog eens uitleggen hoe ik dit moet doen ? moet ik naar dat windowstekentje gaan langs de linkerkant ? en daar intikken bij zoekopdracht starten combofix ? en dan rechts klikken en openen ? of moet ik gewoon intikken bij zoekopdracht combofix/u want als ik dat doe zegt die gewoon geen zoekresultaten ... heb ook geprobeerd om bij dat windows tekentje uitvoeren in te tikken en dan combofix/u in te tikken , maar dan krijg ik de melding dat dit niet wordt gevonden ...

23 maart 2009

mss was het gewoon toevallig , kan dit ook niet ? aangezien ik het gisterennacht ook weer had na scannen van die fix , dan krijg ik bij opstarten een zwart scherm waarop staat dat er problemen waren met windows en dat ik een installatiedisc van windows moet gebruiken en via die disc windows herstellen ... ik heb dat nu al 3 keer voorgehad ! in 24 uur tijd ...

23 maart 2009

netgames is volledig verwijderd, het stond er nog na opstarten maar nu kon ik het probleemloos verwijderen, askbardis is ook volledig verwijderd, enige wat ik niet wegkrijg is een bestand dat onder askbardis stond, namelijk index[1] , als ik op bestandslocatie klik krijg ik te zien dat het niet bestaat, de grootte van de map is 56.5 kb maar er stond 0bytes en nog iets ook 0. als ik op verwijderen klik krijg ik eerst de melding of ik het zeker ben en dan krijg ik na klikken op ja een schermpje(titel scherm is map kopieren) met :

de map c:\Users\Alinetjes top\AppData\Local\Microsoft\Windows\T...\index[1].htm bestaat niet. de map is mogelijk verplaatst of verwijderd.

wilt u de map maken ?

index[1]

type : firefox document

grootte : 56.5KB

gewijzigd op 21/03/2009 23:49

wat moet ik hier nu mee ? gewoon laten staan of als het echt weg moet hoe begin ik hier nu aan ?

23 maart 2009

het is me nu gelukt om die 2 bestanden te verwijderen, ik heb via eigenschappen gebruiker veranderd naar administrator en daarna ben ik naar maplocatie geweest en daar heb ik het kunnen verwijderen maar het blijft nog steeds staan als ik dit intik via start ... maar bij maplocaties staan ze niet meer, nu ga ik mijn pc herstarten , mss dat dan alles weg is , ik hoop het ! (netgames en askbardis)

23 maart 2009

Ik heb dus weer moeten systeemherstel doen via windows installatiedisc, is dit wel normaal ? zou dit liggen aan die fouten die nog in mijn pc kunnen zitten ? ik ben bang dat mijn pc het of een gegeven moment weer volledig zal begeven, ik heb hem nog maar paar maanden weer terug, ik had gelezen in mijn handleiding dat het belangrijk is om je pc veilig te houden en snel dat ik geregeld moest defragmenteren, en laatste keer dat ik dit deed heeft die er 25 uur over gedaan , toen ik die wilde heropstarten bleek het niet meer te gaan, ik was verplicht om volledig systeemhersel te doen, dus deed ik dat en toen kon ik gewoon nets meer doen met mijn laptop, hij kon geen updates niet meer vinden van vista en toen heb ik mijn laptop moeten binnendoen, hij was nog in garantie, ik had hem mss hoogstens 6 maanden. denk je dat hij op een gegeven moment weer zal crashen of zo ? hopelijk zijn alle fouten er nu uit ... bedankt alleszinds dat je me wil helpen ... greetzz, aline:pcguru:

ComboFix 09-03-19.02 - Alinetjes top 2009-03-22 19:50:05.1 - NTFSx86

Microsoft® Windows Vista™ Home Basic 6.0.6001.1.1252.1.1043.18.1790.939 [GMT 1:00]

Gestart vanuit: c:\users\Alinetjes top\Downloads\ComboFix.exe

* Nieuw herstelpunt werd aangemaakt

.

(((((((((((((((((((( Bestanden Gemaakt van 2009-02-22 to 2009-03-22 ))))))))))))))))))))))))))))))

.

2009-03-22 19:28 . 2009-03-22 19:28 <DIR> d-------- c:\program files\McAfee

2009-03-22 19:28 . 2009-03-22 19:28 <DIR> d-------- c:\program files\Common Files\McAfee

2009-03-22 16:24 . 2009-03-22 16:24 <DIR> d--hs---- C:\$RECYCLE.BIN

2009-03-22 00:48 . 2009-03-22 00:48 <DIR> d-------- c:\program files\CCleaner

2009-03-22 00:09 . 2009-03-22 00:09 <DIR> d-------- c:\programdata\{00D89592-F643-4D8D-8F0F-AFAE0F14D4C3}

2009-03-22 00:09 . 2008-04-17 12:12 107,368 --a------ c:\windows\System32\GEARAspi.dll

2009-03-22 00:09 . 2009-01-15 12:19 23,848 --a------ c:\windows\System32\drivers\GEARAspiWDM.sys

2009-03-22 00:07 . 2009-03-22 00:07 <DIR> d-------- c:\program files\Bonjour

2009-03-22 00:00 . 2009-03-22 00:01 <DIR> d-------- c:\program files\Common Files\Adobe

2009-03-21 23:49 . 2009-03-21 23:49 <DIR> d-------- c:\program files\Secunia

2009-03-21 23:31 . 2009-03-21 23:33 <DIR> d-------- c:\windows\System32\drivers\Avg

2009-03-21 23:31 . 2009-03-21 23:31 325,640 --a------ c:\windows\System32\drivers\avgldx86.sys

2009-03-21 23:31 . 2009-03-21 23:31 107,912 --a------ c:\windows\System32\drivers\avgtdix.sys

2009-03-21 23:31 . 2009-03-21 23:31 10,520 --a------ c:\windows\System32\avgrsstx.dll

2009-03-21 20:54 . 2009-03-21 20:54 <DIR> d-------- c:\users\Alinetjes top\AppData\Roaming\Malwarebytes

2009-03-21 20:54 . 2009-03-21 20:54 <DIR> d-------- c:\programdata\Malwarebytes

2009-03-21 20:54 . 2009-03-21 20:54 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware

2009-03-21 20:54 . 2009-02-11 10:19 38,496 --a------ c:\windows\System32\drivers\mbamswissarmy.sys

2009-03-21 20:54 . 2009-02-11 10:19 15,504 --a------ c:\windows\System32\drivers\mbam.sys

2009-03-21 19:26 . 2009-03-21 19:26 <DIR> d-------- c:\program files\Trend Micro

2009-03-20 02:10 . 2009-03-20 02:10 <DIR> d-------- c:\users\Alinetjes top\AppData\Roaming\McAfee

2009-03-20 01:40 . 2009-03-20 01:40 80 --a------ C:\bootdelete.lst

2009-03-19 23:37 . 2009-02-06 18:08 55,280 --a------ c:\windows\System32\drivers\fssfltr.sys

2009-03-19 23:35 . 2009-03-19 23:35 <DIR> d-------- c:\program files\Microsoft SQL Server Compact Edition

2009-03-19 23:34 . 2009-03-19 23:34 <DIR> d-------- c:\windows\PCHEALTH

2009-03-19 23:34 . 2009-03-19 23:34 <DIR> d-------- c:\program files\Microsoft

2009-03-17 21:05 . 2009-03-17 21:08 <DIR> d-------- c:\program files\AskBarDis

2009-03-15 10:55 . 2009-03-15 10:55 434 --a------ c:\windows\BRWMARK.INI

2009-03-15 10:55 . 2009-03-15 10:55 27 --a------ c:\windows\BRPP2KA.INI

2009-03-15 10:51 . 2009-03-15 10:51 <DIR> d-------- c:\program files\Brother

2009-03-15 10:51 . 2004-12-10 16:35 147,456 --------- c:\windows\brunin03.dll

2009-03-15 10:51 . 2009-03-15 10:51 50 --a------ c:\windows\System32\bridf06a.datccr

2009-03-15 10:49 . 2009-03-15 10:49 <DIR> d-------- c:\programdata\Brother

2009-03-13 22:26 . 2009-03-13 22:27 <DIR> d-------- c:\windows\System32\Adobe

2009-03-11 15:33 . 2008-12-16 04:29 8,147,456 --a------ c:\windows\System32\wmploc.DLL

2009-03-11 15:33 . 2008-12-16 06:31 7,680 --a------ c:\windows\System32\spwmp.dll

2009-03-11 15:33 . 2008-12-16 06:31 4,096 --a------ c:\windows\System32\msdxm.ocx

2009-03-11 15:33 . 2008-12-16 06:31 4,096 --a------ c:\windows\System32\dxmasf.dll

2009-03-11 15:32 . 2009-02-09 04:10 2,033,152 --a------ c:\windows\System32\win32k.sys

2009-03-11 15:32 . 2008-11-27 05:43 268,288 --a------ c:\windows\System32\schannel.dll

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-03-22 18:28 --------- d-----w c:\programdata\McAfee

2009-03-22 00:07 --------- d-----w c:\program files\Telemeter 3.0

2009-03-22 00:05 --------- d-----w c:\programdata\Spybot - Search & Destroy

2009-03-21 23:35 --------- d-----w c:\programdata\Apple Computer

2009-03-21 23:35 --------- d-----w c:\program files\Common Files\Apple

2009-03-21 22:31 --------- d-----w c:\programdata\avg8

2009-03-21 21:43 28,095 ----a-w c:\users\Alinetjes top\AppData\Roaming\nvModes.dat

2009-03-21 21:07 --------- d-----w c:\programdata\SiteAdvisor

2009-03-21 02:21 --------- d-----w c:\program files\Spybot - Search & Destroy

2009-03-20 00:28 --------- d-----w c:\programdata\Hitman Pro 3

2009-03-19 22:37 --------- d-----w c:\program files\Windows Live

2009-03-15 09:56 --------- d--h--w c:\program files\InstallShield Installation Information

2009-03-15 09:56 --------- d-----w c:\program files\Common Files\InstallShield

2009-03-12 12:22 --------- d-----w c:\program files\Windows Mail

2009-02-19 01:45 --------- d-----w c:\program files\MSECache

2009-02-12 20:40 --------- d-----w c:\program files\Windows Photo Gallery

2009-02-10 21:39 --------- d-----w c:\users\Alinetjes top\AppData\Roaming\uTorrent

2009-02-10 18:41 --------- d-----w c:\users\Alinetjes top\AppData\Roaming\CyberLink

2009-02-10 18:41 --------- d-----w c:\programdata\CyberLink

2009-02-10 02:14 --------- d-----w c:\program files\Netlog Uploader

2009-02-09 22:09 --------- d-----w c:\program files\uTorrent

2009-02-07 19:02 --------- d-----w c:\program files\Common Files\snpstd3

2009-02-07 19:01 --------- d-----w c:\users\Alinetjes top\AppData\Roaming\InstallShield

2009-02-06 20:44 --------- d-----w c:\program files\IEPro

2009-02-06 18:55 308,616 ----a-w c:\windows\WLXPGSS.SCR

2009-02-06 17:52 49,504 ----a-w c:\windows\System32\sirenacm.dll

2009-02-04 22:33 --------- d-----w c:\users\Alinetjes top\AppData\Roaming\Apple Computer

2009-02-04 22:31 --------- d-----w c:\program files\QuickTime

2009-02-04 22:30 --------- d-----w c:\program files\Apple Software Update

2009-02-04 22:29 --------- d-----w c:\programdata\Apple

2009-02-04 20:16 0 ---ha-w c:\windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf

2009-02-04 18:54 --------- d-----w c:\programdata\Creative

2009-02-04 16:50 --------- d--h--w c:\program files\Creative Installation Information

2009-02-04 16:50 --------- d-----w c:\program files\Creative

2009-02-04 16:47 --------- d-----w c:\program files\Common Files\Creative

2009-02-04 16:02 0 ---ha-w c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf

2009-01-15 06:11 827,392 ----a-w c:\windows\System32\wininet.dll

2009-01-12 01:54 174 --sha-w c:\program files\desktop.ini

2009-01-12 01:29 82,432 ----a-w c:\windows\System32\axaltocm.dll

2009-01-12 01:29 101,888 ----a-w c:\windows\System32\ifxcardm.dll

2009-01-10 05:22 269,312 ----a-w c:\windows\System32\es.dll

2009-01-09 22:32 410,984 ----a-w c:\windows\System32\deploytk.dll

2009-01-09 16:58 94,720 ----a-w c:\windows\System32\PortableDeviceClassExtension.dll

2009-01-09 16:58 61,440 ----a-w c:\windows\System32\winipsec.dll

2009-01-09 16:58 361,984 ----a-w c:\windows\System32\IPSECSVC.DLL

2009-01-09 16:58 28,672 ----a-w c:\windows\System32\FwRemoteSvr.dll

2009-01-09 16:58 272,896 ----a-w c:\windows\System32\polstore.dll

2009-01-09 16:58 241,152 ----a-w c:\windows\System32\PortableDeviceApi.dll

2009-01-09 16:58 160,768 ----a-w c:\windows\System32\PortableDeviceTypes.dll

2009-01-09 16:55 296,960 ----a-w c:\windows\System32\gdi32.dll

2009-01-09 16:51 541,696 ----a-w c:\windows\AppPatch\AcLayers.dll

2009-01-09 16:51 52,736 ----a-w c:\windows\AppPatch\iebrshim.dll

2009-01-09 16:51 460,288 ----a-w c:\windows\AppPatch\AcSpecfc.dll

2009-01-09 16:51 4,240,384 ----a-w c:\windows\System32\GameUXLegacyGDFs.dll

2009-01-09 16:51 28,672 ----a-w c:\windows\System32\Apphlpdm.dll

2009-01-09 16:51 2,560 ----a-w c:\windows\AppPatch\AcRes.dll

2009-01-09 16:51 2,154,496 ----a-w c:\windows\AppPatch\AcGenral.dll

2009-01-09 16:51 173,056 ----a-w c:\windows\AppPatch\AcXtrnal.dll

2009-01-09 16:51 1,695,744 ----a-w c:\windows\System32\gameux.dll

2009-01-09 16:50 303,616 ----a-w c:\windows\System32\wmpeffects.dll

2009-01-09 16:49 2,048 ----a-w c:\windows\System32\msxml3r.dll

2009-01-09 16:49 1,191,936 ----a-w c:\windows\System32\msxml3.dll

2009-01-09 16:47 2,048 ----a-w c:\windows\System32\tzres.dll

2009-01-09 16:44 2,927,104 ----a-w c:\windows\explorer.exe

2009-01-09 16:36 988,216 ----a-w c:\windows\System32\winload.exe

2009-01-09 16:36 927,288 ----a-w c:\windows\System32\winresume.exe

2009-01-09 16:36 615,992 ----a-w c:\windows\System32\ci.dll

2009-01-09 16:36 6,656 ----a-w c:\windows\System32\kbd106n.dll

2009-01-09 16:36 46,592 ----a-w c:\windows\System32\setbcdlocale.dll

2009-01-09 16:36 40,960 ----a-w c:\windows\System32\srclient.dll

2009-01-09 16:36 378,368 ----a-w c:\windows\System32\srcore.dll

2009-01-09 16:36 318,464 ----a-w c:\windows\System32\rstrui.exe

2009-01-09 16:36 19,000 ----a-w c:\windows\System32\kd1394.dll

2009-01-09 16:36 14,848 ----a-w c:\windows\System32\srdelayed.exe

2009-01-09 16:35 712,704 ----a-w c:\windows\System32\WindowsCodecs.dll

2009-01-09 16:35 425,472 ----a-w c:\windows\System32\PhotoMetadataHandler.dll

2009-01-09 16:35 347,648 ----a-w c:\windows\System32\WindowsCodecsExt.dll

2009-01-09 16:34 443,392 ----a-w c:\windows\System32\win32spl.dll

2009-01-09 16:34 37,888 ----a-w c:\windows\System32\printcom.dll

2009-01-09 16:34 14,848 ----a-w c:\windows\System32\wshrm.dll

2009-01-09 16:33 996,352 ----a-w c:\windows\System32\WMNetMgr.dll

2009-01-09 16:33 98,816 ----a-w c:\windows\System32\mfps.dll

2009-01-09 16:33 94,720 ----a-w c:\windows\System32\logagent.exe

2009-01-09 16:33 84,480 ----a-w c:\windows\System32\INETRES.dll

2009-01-09 16:33 738,304 ----a-w c:\windows\System32\inetcomm.dll

2009-01-09 16:33 53,248 ----a-w c:\windows\System32\rrinstaller.exe

2009-01-09 16:33 24,576 ----a-w c:\windows\System32\mfpmp.exe

2009-01-09 16:33 2,868,736 ----a-w c:\windows\System32\mf.dll

2009-01-09 16:33 2,048 ----a-w c:\windows\System32\mferror.dll

2009-01-09 16:32 1,645,568 ----a-w c:\windows\System32\connect.dll

2009-01-09 16:30 1,314,816 ----a-w c:\windows\System32\quartz.dll

2009-01-09 16:29 3,601,464 ----a-w c:\windows\System32\ntkrnlpa.exe

2009-01-09 16:29 3,549,240 ----a-w c:\windows\System32\ntoskrnl.exe

2009-01-09 16:28 2,048 ----a-w c:\windows\System32\msxml6r.dll

2009-01-09 16:28 1,334,272 ----a-w c:\windows\System32\msxml6.dll

2009-01-09 16:01 83,456 ----a-w c:\windows\System32\wudriver.dll

2009-01-09 16:01 561,688 ----a-w c:\windows\System32\wuapi.dll

2009-01-09 16:01 51,224 ----a-w c:\windows\System32\wuauclt.exe

2009-01-09 16:01 43,544 ----a-w c:\windows\System32\wups2.dll

2009-01-09 16:01 34,328 ----a-w c:\windows\System32\wups.dll

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920]

"SmpcSys"="c:\program files\Packard Bell\SetUpMyPC\SmpSys.exe" [2007-07-19 1120568]

"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408]

"Netlog 24"="c:\program files\Netlog 24\Notifier\Netlog24Notifier.exe" [2009-01-19 1380352]

"CTSyncU.exe"="c:\program files\Creative\Sync Manager Unicode\CTSyncU.exe" [2007-07-17 868352]

"WindowsWelcomeCenter"="oobefldr.dll" [2008-01-19 c:\windows\System32\oobefldr.dll]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-02-09 845360]

"CardReaderMonitor"="c:\program files\Realtek Semiconductor Corp.\Realtek Card Reader Monitor\CardReaderMonitor.exe" [2007-07-25 643072]

"RoxWatchTray"="c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2007-01-11 232184]

"PCMService"="c:\program files\Powercinema\PCMService.exe" [2007-02-14 159744]

"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-01-09 136600]

"NvSvc"="c:\windows\system32\nvsvc.dll" [2007-09-19 86016]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-09-19 8497696]

"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-09-19 81920]

"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-01-05 413696]

"FixCamera"="c:\windows\FixCamera.exe" [2007-02-10 20480]

"snpstd3"="c:\windows\vsnpstd3.exe" [2006-09-19 827392]

"tsnpstd3"="c:\windows\tsnpstd3.exe" [2007-03-10 270336]

"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-03-21 1932568]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]

"AppInit_DLLs"=avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]

"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]

"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]

"{F2F10572-42CE-4278-8AB8-E11693F37996}"= UDP:c:\program files\Powercinema\PowerCinema.exe:CyberLink PowerCinema

"{09FED244-8DA8-4143-8396-528B0E10C04C}"= TCP:c:\program files\Powercinema\PowerCinema.exe:CyberLink PowerCinema

"{A102567A-6A7A-4BD4-A29C-A03BF2A38DDC}"= UDP:c:\program files\Powercinema\PCMService.exe:CyberLink PowerCinema Resident Program

"{B9111067-843E-4A2B-9930-B3D0081D168D}"= TCP:c:\program files\Powercinema\PCMService.exe:CyberLink PowerCinema Resident Program

"{C7B2FD78-C15F-4D48-903E-DB6A9B41069F}"= c:\program files\Powercinema\PowerCinema.exe:CyberLink PowerCinema

"{501E4D88-4D5A-4062-B7AE-FC7D6971B05B}"= c:\program files\Powercinema\PCMService.exe:CyberLink PowerCinema Resident Program

"{90BD2788-BED4-49C2-87E7-0876DA4E6BFE}"= c:\program files\Powercinema\Kernel\DMP\CLBrowserEngine.exe:Cyberlink Media Server Browser Engine

"{4A7C267A-6E8A-4BB3-A29B-1EF192DA9487}"= c:\program files\Powercinema\Kernel\DMS\CLMSService.exe:CyberLink Media Server

"{DC3453D1-A5C1-476A-ADF1-7475A1CA2602}"= UDP:c:\program files\uTorrent\uTorrent.exe:µTorrent (TCP-In)

"{B7C18FE1-9DFC-432F-8A19-4FD2B0382AB5}"= TCP:c:\program files\uTorrent\uTorrent.exe:µTorrent (UDP-In)

"{46EFDB94-C6E7-4E1C-984F-CF8607470E11}"= c:\program files\Windows Live\Sync\WindowsLiveSync.exe:Windows Live Sync

"{E1966B37-42C1-4891-8920-BC282AAE6EB1}"= c:\program files\AVG\AVG8\avgemc.exe:avgemc.exe

"{2C36726A-A8E1-4830-8A22-18C71220E919}"= c:\program files\AVG\AVG8\avgupd.exe:avgupd.exe

"{1CAE3985-D185-4EE5-9FB1-E07FE6308B5E}"= c:\program files\AVG\AVG8\avgnsx.exe:avgnsx.exe

"{839B8CDE-35C8-4BE0-82B0-C109FDD22625}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour

"{A2F3B640-04AD-4BFE-856A-315E889B197B}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List]

"c:\\Program Files\\IEPro\\MiniDM.exe"= c:\program files\IEPro\MiniDM.exe:*:Enabled:MiniDM

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\System32\drivers\avgldx86.sys [2009-03-21 325640]

R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\System32\drivers\avgtdix.sys [2009-03-21 107912]

R2 ASKService;ASKService;c:\program files\AskBarDis\bar\bin\AskService.exe [2009-03-17 554376]

R2 ASKUpgrade;ASKUpgrade;c:\program files\AskBarDis\bar\bin\ASKUpgrade.exe [2009-03-17 234888]

R2 avg8emc;AVG Free8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe [2009-03-21 908056]

R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2009-03-21 298264]

R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\McAfee\SiteAdvisor\McSACore.exe [2009-03-22 206112]

R2 SBSDWSCService;SBSD Security Center Service;c:\program files\Spybot - Search & Destroy\SDWinSec.exe [2009-02-04 1153368]

R3 PSI;PSI;c:\windows\System32\drivers\psi_mf.sys [2008-12-10 7808]

R3 RTL8187B;Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter;c:\windows\System32\drivers\RTL8187B.sys [2008-10-25 288256]

S2 0265511237746518mcinstcleanup;McAfee Application Installer Cleanup (0265511237746518);c:\users\ALINET~1\AppData\Local\Temp\026551~1.EXE c:\progra~1\COMMON~1\McAfee\INSTAL~1\cleanup.ini -cleanup -nolog -service --> c:\users\ALINET~1\AppData\Local\Temp\026551~1.EXE c:\progra~1\COMMON~1\McAfee\INSTAL~1\cleanup.ini -cleanup -nolog -service [?]

S3 fssfltr;FssFltr;c:\windows\System32\drivers\fssfltr.sys [2009-03-19 55280]

S3 fsssvc;Windows Live Family Safety;c:\program files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc

.

Inhoud van de 'Gedeelde Taken' map

2009-03-22 c:\windows\Tasks\Recovery DVD Creator.job

- c:\program files\Packard Bell\SetupMyPc\MCDCheck.exe [2006-11-21 17:34]

2009-02-16 c:\windows\Tasks\Spybot - Search & Destroy - Scheduled Task.job

- c:\program files\Spybot - Search & Destroy\SpybotSD.exe [2009-01-26 15:31]

2009-03-22 c:\windows\Tasks\Uitgebreide garantie.job

- c:\program files\Packard Bell\SetupmyPC\PBCarNot.exe [2006-11-21 17:38]

.

- - - - ORPHANS VERWIJDERD - - - -

WebBrowser-{8A6264B5-A8F2-494B-8F37-CF898A763E42} - (no file)

WebBrowser-{3041D03E-FD4B-44E0-B742-2D9B88305F98} - c:\program files\AskBarDis\bar\bin\askBar.dll

HKLM-Run-BrMfcWnd - c:\program files\Brother\Brmfcmon\BrMfcWnd.exe

HKLM-Run-ControlCenter3 - c:\program files\Brother\ControlCenter3\brctrcen.exe

MSConfigStartUp-Telemeter 3 - c:\program files\Telemeter 3.0\telemeter3.exe

.

------- Bijkomende Scan -------

.

uStart Page = hxxp://nl.netlog.com/

uInternet Settings,ProxyOverride = *.local

uSearchURL,(Default) = hxxp://search.yahoo.com/search?fr=mcafee&p=%s

IE: {{000002a3-84fe-43f1-b958-f2c3ca804f1a} - {CD275D4E-791A-4993-9D4D-6A071EDD2709} - c:\program files\IEPro\iepro.dll

Trusted Zone: internet

Trusted Zone: mcafee.com

Trusted Zone: telenet.be\messagent

Trusted Zone: telenet.be\pctv

Trusted Zone: telenet.be\www

FF - ProfilePath - c:\users\Alinetjes top\AppData\Roaming\Mozilla\Firefox\Profiles\kmbb5ase.default\

FF - prefs.js: browser.startup.homepage - hxxp://www.google.be

FF - component: c:\program files\AVG\AVG8\Firefox\components\avgssff.dll

FF - component: c:\program files\McAfee\SiteAdvisor\components\McFFPlg.dll

FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll

FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll

.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2009-03-22 19:52:22

Windows 6.0.6001 Service Pack 1 NTFS

scannen van verborgen processen ...

scannen van verborgen autostart items ...

scannen van verborgen bestanden ...

Scan succesvol afgerond

verborgen bestanden: 0

**************************************************************************

.

--------------------- DLLs Geladen Onder Lopende Processen ---------------------

- - - - - - - > 'Explorer.exe'(5196)

c:\program files\McAfee\SiteAdvisor\saHook.dll

.

Voltooingstijd: 2009-03-22 19:55:09

ComboFix-quarantined-files.txt 2009-03-22 18:55:06

Pre-Run: 62.536.556.544 bytes beschikbaar

Post-Run: 63,337,836,544 bytes beschikbaar

273 --- E O F --- 2009-03-19 19:03:04

22 maart 2009

vannacht kon ik plots mijn pc niet meer opstarten na gebruik van ccleaner, ... nu durf ik die niet meer te gebruiken hoor, dus hopelijk heb ik weer niet zelfde probleem, ik had na opstarten een zwart scherm waarin mij verteld werd dat er problemen waren met windows en dat ik windows moest herinstalleren, gelukkig had een vriend van mij nog zo een installatiedisc .... enfin , alles is nu weer goed , dus zal ik nu even die combotoestand downloaden en gebruiken, hopelijk tot straks:flybye:

21 maart 2009

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 0:20:47, on 22/03/2009

Platform: Windows Vista SP1 (WinNT 6.00.1905)

MSIE: Internet Explorer v7.00 (7.00.6001.18000)

Boot mode: Normal

Running processes:

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\Windows Defender\MSASCui.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\Realtek Semiconductor Corp\Realtek Card Reader Monitor\CardReaderMonitor.exe

C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe

C:\Program Files\Powercinema\PCMService.exe

C:\Program Files\Java\jre6\bin\jusched.exe

C:\Windows\System32\rundll32.exe

C:\Windows\FixCamera.exe

C:\Windows\vsnpstd3.exe

C:\Windows\tsnpstd3.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Program Files\Netlog 24\Notifier\Netlog24Notifier.exe

C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe

C:\Windows\System32\rundll32.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe

C:\Program Files\AVG\AVG8\avgtray.exe

C:\Program Files\AVG\AVG8\avgui.exe

C:\Program Files\AVG\AVG8\avgscanx.exe

C:\Program Files\AVG\AVG8\avgcsrvx.exe

C:\Program Files\AVG\AVG8\avgcfgex.exe

C:\Program Files\Secunia\PSI\psi.exe

C:\Windows\system32\conime.exe

C:\Program Files\Windows Live\Contacts\wlcomm.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Netlog

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = %s - Yahoo! Search Results

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

O1 - Hosts: ::1 localhost

O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\iepro.dll

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll

O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll

O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [CardReaderMonitor] C:\Program Files\Realtek Semiconductor Corp.\Realtek Card Reader Monitor\CardReaderMonitor.exe

O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"

O4 - HKLM\..\Run: [PCMService] "c:\Program Files\Powercinema\PCMService.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"

O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [FixCamera] C:\Windows\FixCamera.exe

O4 - HKLM\..\Run: [snpstd3] C:\Windows\vsnpstd3.exe

O4 - HKLM\..\Run: [tsnpstd3] C:\Windows\tsnpstd3.exe

O4 - HKLM\..\Run: [brMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN

O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun

O4 - HKLM\..\Run: [Telemeter 3.0] "C:\Program Files\Telemeter 3.0\telemeter3.exe"

O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter

O4 - HKCU\..\Run: [smpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [Netlog 24] "C:\Program Files\Netlog 24\Notifier\Netlog24Notifier.exe"

O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')

O9 - Extra button: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\iepro.dll

O9 - Extra 'Tools' menuitem: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\iepro.dll

O9 - Extra button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll

O9 - Extra 'Tools' menuitem: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll

O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O13 - Gopher Prefix:

O15 - Trusted Zone: http://*.mcafee.com

O15 - Trusted Zone: http://messagent.telenet.be

O15 - Trusted Zone: http://pctv.telenet.be

O15 - Trusted Zone: Telenet

O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll

O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O20 - AppInit_DLLs: avgrsstx.dll

O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: ASKService - Unknown owner - C:\Program Files\AskBarDis\bar\bin\AskService.exe

O23 - Service: ASKUpgrade - Unknown owner - C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe

O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe

O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe

O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\Program Files\Powercinema\Kernel\TV\CLCapSvc.exe

O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\Program Files\Powercinema\Kernel\TV\CLSched.exe

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe

O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe

O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe

O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe

O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe

O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--

End of file - 10044 bytes

wat ik nog wou zeggen, ik heb avg eraf gesmeten en heb hem er dan achterna terug opgezet, zonder problemen trouwens ! nu heb ik de nederlandstalige versie, avg 8.5 ...

kun je iets afleiden uit die logs ? voor mij is dit allemaal chinees

21 maart 2009

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 21:39:42, on 21/03/2009

Platform: Windows Vista SP1 (WinNT 6.00.1905)

MSIE: Internet Explorer v7.00 (7.00.6001.18000)

Boot mode: Normal

Running processes:

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\Windows Defender\MSASCui.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\Realtek Semiconductor Corp\Realtek Card Reader Monitor\CardReaderMonitor.exe

C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe

C:\Program Files\Powercinema\PCMService.exe

C:\Program Files\AVG\AVG8\avgtray.exe

C:\Program Files\Java\jre6\bin\jusched.exe

C:\Windows\System32\rundll32.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Windows\FixCamera.exe

C:\Windows\vsnpstd3.exe

C:\Windows\tsnpstd3.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Program Files\Netlog 24\Notifier\Netlog24Notifier.exe

C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe

C:\Windows\system32\conime.exe

C:\Program Files\SiteAdvisor\6261\SiteAdv.exe