pcduts

hey, goeie tip! Gelukt, t werkt weer, dank je!

Hey allemaal, Van de een op de andere dag herkend mijn laptop geen cd/dvds meer. Als ik iets in de cd drive stop, wordt het ook niet herkend onder deze computer. Er wordt een foutmelding gegeven bij t stuurprogramma, maar updaten levert niks op. Verwijderen en pc opnieuw opstarten helpt ook niet, hij geeft aan dat t stuurprogramma niet goed geinstalleerd kan worden. Heb windows update, support acer en driveragent geprobeerd, levert allemaal niets op. Kan online nergens een goede driver vinden... Iemand een oplossing? Heb een Acer Aspire 5738Z, windows 7 home premium.

dat had ik al gedaan, er zijn echter 3 dingetjes die ik om de een of andere reden niet kan installeren. een van het beeldscherm (vga-dingetje) en twee wireless-drivers. krijg via windows update ook geen drivers door.

bij deze. Bij apparaatbeheer bij de COM poorten staan nog steeds van die gele dingetjes en kan er geen stuurprogramma voor vinden... ComboFix 09-05-04.A0 - Administrator 05-05-2009 15:22.1 - FAT32x86 Microsoft Windows XP Professional 5.1.2600.3.1252.31.1043.18.446.256 [GMT 2:00] Gestart vanuit: c:\documents and settings\Administrator\Bureaublad\ComboFix.exe AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) . (((((((((((((((((((( Bestanden Gemaakt van 2009-04-05 to 2009-05-05 )))))))))))))))))))))))))))))) . 2009-05-05 10:49 . 2009-05-05 10:49 -------- d-----w c:\documents and settings\Administrator\Application Data\Malwarebytes 2009-05-05 10:49 . 2009-04-06 13:32 15504 ----a-w c:\windows\system32\drivers\mbam.sys 2009-05-05 10:49 . 2009-04-06 13:32 38496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys 2009-05-05 10:49 . 2009-05-05 10:49 -------- d-----w c:\documents and settings\All Users\Application Data\Malwarebytes 2009-05-05 10:49 . 2009-05-05 10:49 -------- d-----w c:\program files\Malwarebytes' Anti-Malware 2009-05-05 10:04 . 2009-05-05 10:04 -------- d-----w c:\program files\Trend Micro 2009-05-05 09:38 . 2009-05-05 09:38 -------- d-----w c:\documents and settings\All Users\Application Data\DriverScanner 2009-05-05 09:38 . 2009-05-05 09:38 -------- d-----w c:\documents and settings\Administrator\Application Data\Uniblue 2009-05-05 09:38 . 2009-05-05 09:38 -------- d-----w c:\program files\Uniblue 2009-05-05 09:36 . 2009-05-05 09:36 -------- d--h--w c:\documents and settings\All Users\Application Data\{148D8B8A-8F96-4822-81EC-D510B626B7D5} 2009-05-05 09:06 . 2009-05-05 09:06 -------- d-sh--w C:\FOUND.000 2009-05-05 08:54 . 2009-05-05 08:54 -------- d-----w c:\documents and settings\Administrator\Application Data\Windows Search 2009-05-05 08:53 . 2009-05-05 08:53 -------- d-----w c:\program files\S3Inc 2009-05-05 08:53 . 1998-01-23 10:20 305152 ----a-w c:\windows\IsUn0413.exe 2009-05-05 08:15 . 2008-10-16 12:06 268648 ----a-w c:\windows\system32\mucltui.dll 2009-05-05 08:11 . 2009-05-05 08:11 -------- d-----w c:\documents and settings\All Users\Application Data\Office Genuine Advantage 2009-05-04 18:15 . 2009-05-04 18:15 -------- d--h--w C:\$AVG8.VAULT$ 2009-05-04 15:00 . 2009-05-04 15:00 136 ----a-w c:\documents and settings\Administrator\Local Settings\Application Data\fusioncache.dat 2009-05-04 15:00 . 2009-05-04 15:00 -------- d-----w c:\documents and settings\Administrator\Local Settings\Application Data\ApplicationHistory 2009-05-04 14:15 . 2008-11-10 09:41 32656 ----a-w c:\windows\system32\msonpmon.dll 2009-05-04 14:14 . 2009-05-04 14:14 -------- d-----w c:\program files\Microsoft Works 2009-05-04 14:11 . 2009-05-04 14:11 -------- d-----w c:\program files\Microsoft.NET 2009-05-04 14:08 . 2009-05-04 14:08 -------- d-----w c:\program files\Microsoft Visual Studio 8 2009-05-04 14:07 . 2009-05-04 14:07 -------- d-----w c:\windows\SHELLNEW 2009-05-04 14:07 . 2009-05-04 14:07 -------- d-----w c:\documents and settings\Administrator\Local Settings\Application Data\Microsoft Help 2009-05-04 14:06 . 2009-05-04 14:06 -------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help 2009-05-04 14:06 . 2009-05-04 14:06 -------- d--h--r C:\MSOCache 2009-05-04 14:00 . 2009-05-04 14:00 -------- d-----w c:\documents and settings\Administrator\Application Data\Skype 2009-05-04 12:21 . 2009-05-04 12:21 -------- d-----w c:\program files\Microsoft Silverlight 2009-05-04 12:21 . 2006-06-29 11:07 14048 ------w c:\windows\system32\spmsg2.dll 2009-05-04 12:10 . 2009-05-04 12:10 -------- d-----w c:\windows\system32\XPSViewer 2009-05-04 12:10 . 2009-05-04 12:10 -------- d-----w c:\program files\MSBuild 2009-05-04 12:10 . 2009-05-04 12:10 -------- d-----w c:\program files\Reference Assemblies 2009-05-04 12:09 . 2008-07-06 12:06 117760 ------w c:\windows\system32\prntvpt.dll 2009-05-04 12:09 . 2008-07-06 12:06 89088 ------w c:\windows\system32\dllcache\filterpipelineprintproc.dll 2009-05-04 12:09 . 2008-07-06 10:50 597504 ------w c:\windows\system32\dllcache\printfilterpipelinesvc.exe 2009-05-04 12:09 . 2008-07-06 12:06 575488 ------w c:\windows\system32\dllcache\xpsshhdr.dll 2009-05-04 12:09 . 2008-07-06 12:06 575488 ------w c:\windows\system32\xpsshhdr.dll 2009-05-04 12:09 . 2008-07-06 12:06 1676288 ------w c:\windows\system32\dllcache\xpssvcs.dll 2009-05-04 12:09 . 2008-07-06 12:06 1676288 ------w c:\windows\system32\xpssvcs.dll 2009-05-04 12:09 . 2009-05-04 12:09 -------- d-----w C:\2ff711f6f6ad8e17c37e135354e378de 2009-05-04 12:00 . 2009-05-04 12:00 -------- d-----w c:\documents and settings\Administrator\Local Settings\Application Data\Identities 2009-05-04 12:00 . 2009-05-04 12:00 -------- d-----w c:\documents and settings\Administrator\Application Data\Windows Desktop Search 2009-05-04 12:00 . 2009-05-04 12:00 -------- d-----w c:\program files\Windows Desktop Search 2009-05-04 12:00 . 2009-05-04 12:00 -------- d-----w c:\windows\system32\GroupPolicy 2009-05-04 11:59 . 2008-03-07 17:02 29696 ------w c:\windows\system32\dllcache\mimefilt.dll 2009-05-04 11:59 . 2008-03-07 17:02 98304 ------w c:\windows\system32\dllcache\nlhtml.dll 2009-05-04 11:59 . 2008-03-07 17:02 192000 ------w c:\windows\system32\dllcache\offfilt.dll 2009-05-04 11:58 . 2009-05-04 11:58 -------- d-----w c:\program files\Windows Media Connect 2 2009-05-04 11:55 . 2009-05-04 11:55 -------- d-----w c:\windows\system32\drivers\UMDF 2009-05-04 11:55 . 2009-05-04 11:55 -------- d-----w c:\windows\system32\LogFiles 2009-05-04 11:52 . 2009-05-04 11:52 -------- d-----w c:\windows\system32\URTTemp 2009-05-04 11:33 . 2009-05-04 11:33 -------- d-sh--w c:\documents and settings\Administrator\PrivacIE 2009-05-04 11:32 . 2009-05-04 11:32 -------- d-----w c:\program files\Common Files\Skype 2009-05-04 11:32 . 2009-05-04 11:32 -------- d-----r c:\program files\Skype 2009-05-04 11:32 . 2009-05-04 11:32 -------- d-----w c:\documents and settings\All Users\Application Data\Skype 2009-05-04 11:02 . 2009-05-04 11:02 -------- d-sh--w c:\documents and settings\NetworkService\IETldCache 2009-05-04 11:00 . 2009-05-04 11:00 -------- d-sh--w c:\documents and settings\Administrator\IETldCache 2009-05-04 10:24 . 2009-05-04 10:24 -------- d-----w c:\windows\ie8updates 2009-05-04 10:24 . 2009-02-28 04:55 105984 ------w c:\windows\system32\dllcache\iecompat.dll 2009-05-04 10:21 . 2009-05-04 10:21 -------- d--h--w c:\windows\ie8 2009-05-04 10:08 . 2009-05-04 10:08 -------- d-----w c:\documents and settings\Administrator\Tracing 2009-05-04 10:05 . 2009-05-04 10:05 -------- d-----w c:\program files\Microsoft 2009-05-04 10:05 . 2009-05-04 10:05 -------- d-----w c:\program files\Windows Live SkyDrive 2009-05-04 10:04 . 2009-05-04 10:04 -------- d-----w c:\program files\Windows Live 2009-05-04 10:02 . 2009-05-04 10:02 -------- d-----w c:\program files\Common Files\Windows Live 2009-05-04 10:01 . 2009-05-04 10:01 -------- d-----w c:\documents and settings\All Users\Application Data\NOS 2009-05-04 10:01 . 2009-05-04 10:01 -------- d-----w c:\program files\NOS 2009-05-04 09:58 . 2009-05-04 09:58 -------- d-----w c:\program files\Common Files\Adobe 2009-05-04 09:57 . 2009-05-04 09:57 -------- d-----w c:\program files\CCleaner 2009-05-03 15:04 . 2009-05-03 15:04 11952 ----a-w c:\windows\system32\avgrsstx.dll 2009-05-03 15:04 . 2009-05-03 15:04 108552 ----a-w c:\windows\system32\drivers\avgtdix.sys 2009-05-03 15:04 . 2009-05-03 15:04 325896 ----a-w c:\windows\system32\drivers\avgldx86.sys 2009-05-03 15:04 . 2009-05-03 15:04 -------- d-----w c:\windows\system32\drivers\Avg 2009-05-03 15:04 . 2009-05-03 15:04 -------- d-----w c:\program files\AVG 2009-05-03 14:52 . 2008-10-15 16:37 337408 ------w c:\windows\system32\dllcache\netapi32.dll 2009-05-03 14:52 . 2008-09-04 17:17 1106944 ------w c:\windows\system32\dllcache\msxml3.dll 2009-05-03 14:52 . 2008-06-14 17:36 272640 ------w c:\windows\system32\dllcache\bthport.sys 2009-05-03 14:51 . 2002-09-12 15:29 6016 ----a-w c:\windows\system32\ntsim.sys 2009-05-03 14:49 . 2009-05-03 14:49 -------- d-----w c:\windows\Options 2009-05-03 14:49 . 2009-05-03 14:49 -------- d-----w c:\documents and settings\Administrator\Bluetooth Software 2009-05-03 14:46 . 2009-05-03 14:46 -------- d-----w c:\documents and settings\Administrator\WINDOWS 2009-05-03 14:46 . 2009-05-03 14:46 -------- d-----w c:\program files\Realtek Sound Manager 2009-05-03 14:44 . 2009-05-03 14:44 -------- d-----w c:\windows\Drivers 2009-05-03 14:44 . 2009-05-03 14:44 -------- d-----w c:\program files\WLAN a+b+g mini-PCI module 2009-05-03 14:42 . 2009-05-03 14:42 -------- d-----w c:\program files\Synaptics 2009-05-03 14:42 . 2008-04-21 21:16 218624 ------w c:\windows\system32\dllcache\wordpad.exe 2009-05-03 14:41 . 2009-05-03 14:41 0 ----a-w c:\windows\nsreg.dat 2009-05-03 14:41 . 2009-05-03 14:41 -------- d-----w c:\documents and settings\Administrator\Local Settings\Application Data\Mozilla 2009-05-03 14:36 . 2009-05-03 14:36 -------- d-sh--w C:\Recycled 2009-05-03 14:34 . 2009-05-03 14:34 -------- d-----w c:\documents and settings\Administrator\Application Data\AVGTOOLBAR 2009-05-03 14:34 . 2009-05-03 14:34 -------- d-----w c:\documents and settings\All Users\Application Data\avg8 2009-05-03 14:29 . 2009-05-03 14:29 -------- d-----w c:\windows\system32\nl-nl 2009-05-03 14:29 . 2009-05-03 14:29 -------- d-----w c:\windows\l2schemas 2009-05-03 14:29 . 2009-05-03 14:29 -------- d-----w c:\windows\system32\nl 2009-05-03 14:12 . 2008-04-14 17:02 50688 ------w c:\windows\system32\tspkg.dll 2009-05-03 13:59 . 2009-05-03 13:59 -------- d--h--w c:\windows\$hf_mig$ 2009-05-03 13:49 . 2009-05-04 10:08 13688 ----a-w c:\documents and settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2009-05-03 13:49 . 2009-05-03 13:49 -------- d-----w c:\documents and settings\LocalService\Menu Start 2009-05-03 13:36 . 2009-05-03 13:36 -------- d-----w c:\windows\peernet 2009-05-03 13:36 . 2009-05-03 13:36 -------- d-----w c:\windows\provisioning 2009-05-03 13:34 . 2009-05-03 13:34 -------- d-----w c:\windows\ServicePackFiles 2009-05-03 13:29 . 2009-01-07 16:21 26144 ----a-w c:\windows\system32\spupdsvc.exe 2009-05-03 13:27 . 2009-05-03 13:27 -------- d-----w c:\windows\EHome 2009-05-03 13:13 . 2008-04-14 20:33 11264 ------w c:\windows\system32\spnpinst.exe 2009-05-03 13:13 . 2004-08-02 12:20 4569 ------w c:\windows\system32\secupd.dat 2009-05-03 13:00 . 2009-05-03 13:00 -------- d-----w c:\windows\system32\bits 2009-05-03 13:00 . 2008-12-16 12:33 354304 ----a-w c:\windows\system32\winhttp.dll 2009-05-03 13:00 . 2008-04-14 17:02 8192 ------w c:\windows\system32\bitsprx2.dll 2009-05-03 13:00 . 2008-04-14 17:02 7168 ------w c:\windows\system32\bitsprx3.dll 2009-05-03 13:00 . 2008-04-14 17:02 18944 ----a-w c:\windows\system32\qmgrprxy.dll . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-05-04 15:00 . 2001-09-07 10:00 534480 ----a-w c:\windows\system32\perfh013.dat 2009-05-04 15:00 . 2001-09-07 10:00 100492 ----a-w c:\windows\system32\perfc013.dat 2009-05-03 14:46 . 2009-05-03 14:45 -------- d-----w c:\program files\AvRack 2009-05-03 14:45 . 2009-05-03 14:45 -------- d-----w c:\program files\VIA 2009-05-03 14:32 . 2009-05-03 12:41 86327 ----a-w c:\windows\PCHEALTH\HELPCTR\OfflineCache\index.dat 2009-05-03 12:53 . 2009-05-03 12:53 21275 ----a-w c:\windows\system32\drivers\AegisP.sys 2009-05-03 12:52 . 2009-05-03 12:52 -------- d--h--w c:\program files\InstallShield Installation Information 2009-05-03 12:52 . 2009-05-03 12:52 -------- d-----w c:\program files\RALINK 2009-05-03 12:52 . 2009-05-03 12:52 -------- d-----w c:\program files\Common Files\InstallShield 2009-05-03 12:42 . 2009-05-03 12:42 -------- d-----w c:\program files\microsoft frontpage 2009-05-03 12:41 . 2001-09-07 10:00 67 --sha-w c:\windows\Fonts\desktop.ini 2009-05-03 12:38 . 2009-05-03 12:37 21748 ----a-w c:\windows\system32\emptyregdb.dat 2009-03-08 02:34 . 2001-09-07 10:00 914944 ----a-w c:\windows\system32\wininet.dll 2009-03-08 02:34 . 2001-09-07 10:00 43008 ----a-w c:\windows\system32\licmgr10.dll 2009-03-08 02:33 . 2001-09-07 10:00 18944 ----a-w c:\windows\system32\corpol.dll 2009-03-08 02:33 . 2001-09-07 10:00 420352 ----a-w c:\windows\system32\vbscript.dll 2009-03-08 02:32 . 2001-09-07 10:00 72704 ----a-w c:\windows\system32\admparse.dll 2009-03-08 02:32 . 2001-09-07 10:00 71680 ----a-w c:\windows\system32\iesetup.dll 2009-03-08 02:31 . 2001-09-07 10:00 34816 ----a-w c:\windows\system32\imgutil.dll 2009-03-08 02:31 . 2001-09-07 10:00 48128 ----a-w c:\windows\system32\mshtmler.dll 2009-03-08 02:31 . 2001-09-07 10:00 45568 ----a-w c:\windows\system32\mshta.exe 2009-03-08 02:22 . 2001-09-07 10:00 156160 ----a-w c:\windows\system32\msls31.dll 2009-03-06 14:23 . 2001-09-07 10:00 285696 ----a-w c:\windows\system32\pdh.dll 2009-02-10 17:10 . 2001-09-06 17:53 2070400 ----a-w c:\windows\system32\ntkrnlpa.exe 2009-02-09 14:08 . 2001-09-07 10:00 1846912 ----a-w c:\windows\system32\win32k.sys 2009-02-09 11:27 . 2001-09-07 10:00 2193408 ----a-w c:\windows\system32\ntoskrnl.exe 2009-02-09 11:27 . 2001-09-07 10:00 111104 ----a-w c:\windows\system32\services.exe 2009-02-09 10:56 . 2001-09-07 10:00 734208 ----a-w c:\windows\system32\lsasrv.dll 2009-02-09 10:56 . 2001-09-07 10:00 684544 ----a-w c:\windows\system32\advapi32.dll 2009-02-09 10:56 . 2001-09-07 10:00 401408 ----a-w c:\windows\system32\rpcss.dll 2009-02-09 10:56 . 2001-09-07 10:00 735744 ----a-w c:\windows\system32\ntdll.dll 2009-02-06 16:52 . 2009-02-06 16:52 49504 ----a-w c:\windows\system32\sirenacm.dll 2009-02-06 10:39 . 2001-09-07 10:00 35328 ----a-w c:\windows\system32\sc.exe . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SynTPLpr"="c:\program files\Synaptics\SynTP\SynTPLpr.exe" [2002-11-15 126976] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2002-11-18 561152] "AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-05-03 1947928] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696] "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072] "AGRSMMSG"="AGRSMMSG.exe" - c:\windows\AGRSMMSG.exe [2003-04-01 88267] "SoundMan"="SOUNDMAN.EXE" - c:\windows\soundman.exe [2003-05-14 55296] "VTTimer"="VTTimer.exe" - c:\windows\system32\VTTimer.exe [2005-03-08 53248] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360] c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\ Ralink Wireless Utility.lnk - c:\program files\RALINK\Common\RaUI.exe [2009-5-3 614400] Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2008-5-26 123904] [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks] "{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2008-05-26 304128] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter] 2009-05-03 15:04 11952 ----a-w c:\windows\system32\avgrsstx.dll [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\AVG\\AVG8\\avgupd.exe"= "c:\\Program Files\\AVG\\AVG8\\avgnsx.exe"= "c:\\Program Files\\AVG\\AVG8\\avgemc.exe"= "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"= "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"= "c:\\Program Files\\Microsoft Office\\Office12\\groove.exe"= "c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"= R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [3-5-2009 17:04 325896] R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [3-5-2009 17:04 108552] R2 avg8emc;AVG Free8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe [3-5-2009 17:04 908568] R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [3-5-2009 17:04 298776] S3 getPlus® Helper;getPlus® Helper;c:\program files\NOS\bin\getPlus_HelperSvc.exe [4-5-2009 12:01 33176] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}] "c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP . Inhoud van de 'Gedeelde Taken' map 2009-05-05 c:\windows\Tasks\OGALogon.job - c:\windows\system32\OGAVerify.exe [2008-12-31 15:04] 2009-05-04 c:\windows\Tasks\OGADaily.job - c:\windows\system32\OGAVerify.exe [2008-12-31 15:04] . . ------- Bijkomende Scan ------- . IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000 FF - ProfilePath - c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\fsriu9ui.default\ FF - component: c:\program files\AVG\AVG8\Firefox\components\avgssff.dll FF - component: c:\program files\AVG\AVG8\ToolbarFF\components\vmAVGConnector.dll FF - component: c:\program files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-05-05 15:23 Windows 5.1.2600 Service Pack 3 FAT NTAPI scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: 0 ************************************************************************** . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- [HKEY_USERS\S-1-5-21-1614895754-1677128483-854245398-500\Software\Microsoft\Internet Explorer\User Preferences] @Denied: (2) (Administrator) "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,3d,f2,e5,5a,cc,c7,e8,41,ab,f9,cd,\ "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15, d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,3d,f2,e5,5a,cc,c7,e8,41,ab,f9,cd,\ . --------------------- DLLs Geladen Onder Lopende Processen --------------------- - - - - - - - > 'explorer.exe'(3820) c:\windows\system32\SynTPFcs.dll c:\windows\system32\ieframe.dll c:\windows\system32\webcheck.dll c:\windows\system32\WPDShServiceObj.dll c:\windows\system32\PortableDeviceTypes.dll c:\windows\system32\PortableDeviceApi.dll . Voltooingstijd: 2009-05-05 15:24 ComboFix-quarantined-files.txt 2009-05-05 13:24 Pre-Run: 16.247.554.048 bytes beschikbaar Post-Run: 16.428.515.328 bytes beschikbaar WindowsXP-KB310994-SP2-Pro-BootDisk-NLD.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn 255 --- E O F --- 2009-05-05 09:28

hier t nieuwe blogje, en deze van demalware (niks gevonden).. Malwarebytes' Anti-Malware 1.36 Database versie: 2077 Windows 5.1.2600 Service Pack 3 5-5-2009 13:01:43 mbam-log-2009-05-05 (13-01-43).txt Scan type: Snelle Scan Objecten gescand: 77329 Verstreken tijd: 5 minute(s), 46 second(s) Geheugenprocessen geïnfecteerd: 0 Geheugenmodulen geïnfecteerd: 0 Registersleutels geïnfecteerd: 0 Registerwaarden geïnfecteerd: 0 Registerdata bestanden geïnfecteerd: 0 Mappen geïnfecteerd: 0 Bestanden geïnfecteerd: 0 Geheugenprocessen geïnfecteerd: (Geen kwaadaardige items gevonden) Geheugenmodulen geïnfecteerd: (Geen kwaadaardige items gevonden) Registersleutels geïnfecteerd: (Geen kwaadaardige items gevonden) Registerwaarden geïnfecteerd: (Geen kwaadaardige items gevonden) Registerdata bestanden geïnfecteerd: (Geen kwaadaardige items gevonden) Mappen geïnfecteerd: (Geen kwaadaardige items gevonden) Bestanden geïnfecteerd: (Geen kwaadaardige items gevonden) ---------------------------------------------- Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 13:38:30, on 5-5-2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\WINDOWS\system32\SearchIndexer.exe C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\PROGRA~1\AVG\AVG8\avgnsx.exe C:\PROGRA~1\AVG\AVG8\avgemc.exe C:\Program Files\AVG\AVG8\avgcsrvx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\PROGRA~1\AVG\AVG8\avgtray.exe C:\WINDOWS\AGRSMMSG.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\WINDOWS\system32\VTTimer.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\RALINK\Common\RaUI.exe C:\Program Files\Windows Desktop Search\WindowsSearch.exe C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\Program Files\Mozilla Firefox\firefox.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Microsoft Windows Update R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [VTTimer] VTTimer.exe O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Lokale service') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Netwerkservice') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000 O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsoft.com/v7/site/ClientControl/en/x86/MuCatalogWebControl.cab?1241517371313 O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1241355510979 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1241431819193 O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: getPlus® Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe -- End of file - 6386 bytes

He allemaal, Mn pc is nogal traag aan t worden (acer aspire 1350, uit 2003). Heb hem al een paar keer geformateerd, laatste keer gisteren. Nu krijg ik geen stuurprogramma te pakken voor mn COM poorten en kan t ook niet vinden via windows update. Daarnaast blijft ie zo traag.. Heb ook al geprobeerd met zo'n programma (driverscanner) te kijken of dat wel in orde is, maar dat ding werkt niet... heb zo'n hjt gedaan en dit is t logje. Kan iemand me helpen? Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:05:25, on 5-5-2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\WINDOWS\system32\SearchIndexer.exe C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\PROGRA~1\AVG\AVG8\avgnsx.exe C:\PROGRA~1\AVG\AVG8\avgemc.exe C:\Program Files\AVG\AVG8\avgcsrvx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\PROGRA~1\AVG\AVG8\avgtray.exe C:\WINDOWS\AGRSMMSG.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\WINDOWS\system32\VTTimer.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\RALINK\Common\RaUI.exe C:\Program Files\Windows Desktop Search\WindowsSearch.exe C:\Program Files\Uniblue\DriverScanner\DriverScanner.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Microsoft Windows Update R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [VTTimer] VTTimer.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Lokale service') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Netwerkservice') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000 O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsoft.com/v7/site/ClientControl/en/x86/MuCatalogWebControl.cab?1241517371313 O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1241355510979 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1241431819193 O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: getPlus® Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe -- End of file - 6306 bytes