Pele

Na het laten lopen van het voorgestelde programma blokkeerde mijn laptop nogmaals, kreeg ik foutmeldingen bij het opstarten & zag het er zelfs lange tijd naar uit dat ik het besturingssysteem niet meer kon 'bereiken'. Ik heb het dan maar even gelaten voor wat het was en na enkele uren nog eens geprobeerd de laptop opnieuw op te starten. Raar genoeg bleek alles toen normaal. Ik had echter geen zin meer om weer soortgelijke problemen mee te maken en heb mijn harde schijf dan maar geformatteerd & de browsers werken nu weer naar behoren. In ieder geval toch bedankt voor de hulp!

Sorry dat ik even niks liet weten, maar het runnen van het programma brengt enkele problemen met zich mee. De snelle scan heb ik al voltooid (niks gevonden), de volledige scan lijkt toch een serieus aantal uren in beslag te nemen, dus deze heb ik al moeten onderbreken omdat ik anders niks op de laptop kan doen. Ik zal deze vannacht eens laten draaien ,de log post ik dan wel één van de komende dagen hier. Bij het opstarten van het programma heb ik wel meermaals een probleem gehad. Een blauw scherm met de melding dat er een probleem was opgetreden en dat windows moest worden afgesloten verscheen meermaals als ik het programma opstartte. (Eigenlijk in afwisselende volgorde, een keer niet, een keer wel, een keer niet,...). Ik heb er een foto van genomen (sorry voor de slechte kwaliteit)en in bijlage gestoken, mss ben je er iets mee.

Bij de browsers is de situatie jammer genoeg nog altijd dezelfde, Google chrome heb ik ondertussen nogmaals gedeinstalleerd & opnieuw geinstalleerd. De chromebrowser krijg ik toch al open wnn ik er op dubbelklik (Fout 102: ERR_CONNECTION_REFUSED blijft wel nog verschijnen). Bij opera blijft 'verbinding met server mislukt' verschijnen & Mozilla krijg ik nog steeds niet geopend. Alvast bedankt voor de hulp trouwens ComboFix 10-11-10.04 - Elien 12/11/2010 15:46:56.2.2 - x86 Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.32.1043.18.3070.1946 [GMT 1:00] Gestart vanuit: c:\users\Elien\Desktop\ComboFix.exe gebruikte Opdracht switches :: c:\users\Elien\Desktop\CFScript.txt SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} FILE :: "c:\windows\E80F62FF5D3C4A1984099721F2928206.TMP" . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\found.000 c:\found.000\file0000.chk C:\found.001 c:\found.001\file0000.chk c:\found.001\file0001.chk . (((((((((((((((((((( Bestanden Gemaakt van 2010-10-12 to 2010-11-12 )))))))))))))))))))))))))))))) . 2010-11-12 15:02 . 2010-11-12 15:02 -------- d-----w- c:\users\Gast\AppData\Local\temp 2010-11-12 15:02 . 2010-11-12 15:02 -------- d-----w- c:\users\Default\AppData\Local\temp 2010-11-11 17:37 . 2010-10-07 23:21 6146896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{3296E9DD-D879-4264-A341-FA6D23B5E543}\mpengine.dll 2010-11-11 13:53 . 2010-11-11 13:53 -------- d-----w- c:\users\Elien\AppData\Roaming\Malwarebytes 2010-11-11 13:52 . 2010-04-29 14:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2010-11-11 13:52 . 2010-11-11 13:52 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2010-11-11 13:52 . 2010-11-11 13:52 -------- d-----w- c:\programdata\Malwarebytes 2010-11-11 13:52 . 2010-04-29 14:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys 2010-11-11 11:48 . 2010-11-11 11:48 388096 ----a-r- c:\users\Elien\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2010-11-11 11:48 . 2010-11-11 11:48 -------- d-----w- c:\program files\Trend Micro 2010-11-11 11:42 . 2010-11-11 11:42 -------- d-----w- c:\users\Gast\AppData\Local\Opera 2010-11-10 22:14 . 2010-10-07 11:35 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat 2010-11-08 09:29 . 2010-11-08 09:29 -------- d-----w- c:\users\Elien\AppData\Local\Apple Computer 2010-11-08 09:29 . 2010-11-08 09:29 -------- d-----w- c:\users\Elien\AppData\Roaming\Apple Computer 2010-11-08 09:27 . 2010-11-08 09:27 -------- d-----w- c:\program files\Safari 2010-11-08 09:26 . 2010-11-08 09:26 -------- d-----w- c:\program files\Common Files\Apple 2010-11-08 09:25 . 2010-11-08 09:25 -------- d-----w- c:\users\Elien\AppData\Local\Apple 2010-11-08 09:25 . 2010-11-08 09:25 -------- d-----w- c:\program files\Apple Software Update 2010-11-08 08:32 . 2010-11-08 08:32 -------- d-----w- c:\programdata\Citrix(153) 2010-11-08 08:31 . 2010-11-08 08:31 -------- d-----w- c:\program files\Citrix(5) 2010-11-06 13:47 . 2010-11-06 13:47 -------- d-----w- c:\programdata\WindowsSearch 2010-11-01 15:27 . 2010-11-01 15:28 -------- d-----w- c:\program files\Cake Mania Main Street 2010-11-01 15:27 . 2010-11-01 15:28 -------- d-----w- c:\windows\Cake Mania Main Street 2010-11-01 14:21 . 2010-11-01 14:21 -------- d-----w- c:\programdata\PlayfulAge 2010-11-01 14:08 . 2010-11-01 14:09 -------- d-----w- c:\program files\Cake Mania 3 2010-11-01 14:07 . 2010-11-01 14:07 -------- d-----w- c:\program files\ReflexiveArcade 2010-10-27 11:50 . 2010-08-26 16:01 28672 ----a-w- c:\windows\system32\Apphlpdm.dll 2010-10-27 11:50 . 2010-08-26 14:11 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll 2010-10-24 17:46 . 2010-10-24 17:46 -------- d-----w- c:\users\Elien\AppData\Roaming\AVG10 2010-10-24 16:45 . 2010-10-24 16:45 -------- d--h--w- c:\programdata\Common Files 2010-10-24 16:44 . 2010-11-10 21:59 -------- d-----w- c:\windows\system32\drivers\AVG 2010-10-24 16:44 . 2010-11-10 21:59 -------- d-----w- c:\programdata\AVG10 2010-10-24 16:42 . 2010-10-24 16:42 -------- d-----w- c:\program files\AVG 2010-10-24 16:23 . 2010-10-24 16:42 -------- d-----w- c:\programdata\MFAData 2010-10-24 16:21 . 2010-10-24 16:21 -------- d-----w- c:\windows\E80F62FF5D3C4A1984099721F2928206.TMP 2010-10-17 10:01 . 2009-07-14 17:45 38480 ----a-w- c:\windows\system32\drivers\WdfLdr.sys 2010-10-17 10:01 . 2009-07-14 17:45 445008 ----a-w- c:\windows\system32\drivers\Wdf01000.sys 2010-10-14 10:01 . 2010-09-20 09:25 231936 ----a-w- c:\windows\system32\msshsq.dll 2010-10-13 20:34 . 2010-09-10 16:35 168960 ----a-w- c:\program files\Windows Media Player\wmplayer.exe 2010-10-13 20:34 . 2010-09-10 16:37 8147456 ----a-w- c:\windows\system32\wmploc.DLL 2010-10-13 20:34 . 2010-06-28 16:15 1315840 ----a-w- c:\windows\system32\ole32.dll 2010-10-13 20:34 . 2010-06-28 14:31 339968 ----a-w- c:\program files\Windows NT\Accessories\wordpad.exe 2010-10-13 20:34 . 2010-08-10 15:02 274432 ----a-w- c:\windows\system32\schannel.dll 2010-10-13 20:34 . 2010-09-06 16:24 125952 ----a-w- c:\windows\system32\srvsvc.dll 2010-10-13 20:34 . 2010-09-06 14:13 303616 ----a-w- c:\windows\system32\drivers\srv.sys 2010-10-13 20:34 . 2010-09-06 14:12 101888 ----a-w- c:\windows\system32\drivers\srvnet.sys 2010-10-13 20:34 . 2010-09-06 16:23 17920 ----a-w- c:\windows\system32\netevent.dll 2010-10-13 20:34 . 2010-09-06 14:12 145408 ----a-w- c:\windows\system32\drivers\srv2.sys . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-10-19 09:41 . 2010-05-10 09:30 222080 ------w- c:\windows\system32\MpSigStub.exe 2010-09-13 14:27 . 2010-09-13 14:27 25680 ----a-w- c:\windows\system32\drivers\AVGIDSEH.sys 2010-09-07 01:49 . 2010-09-07 01:49 298448 ----a-w- c:\windows\system32\drivers\avgtdix.sys 2010-09-07 01:48 . 2010-09-07 01:48 34384 ----a-w- c:\windows\system32\drivers\avgmfx86.sys 2010-09-07 01:48 . 2010-09-07 01:48 249424 ----a-w- c:\windows\system32\drivers\avgldx86.sys 2010-09-07 01:48 . 2010-09-07 01:48 26064 ----a-w- c:\windows\system32\drivers\avgrkx86.sys 2010-08-26 16:01 . 2010-10-27 11:50 173056 ----a-w- c:\windows\apppatch\AcXtrnal.dll 2010-08-26 16:01 . 2010-10-27 11:50 459776 ----a-w- c:\windows\apppatch\AcSpecfc.dll 2010-08-26 16:01 . 2010-10-27 11:50 541696 ----a-w- c:\windows\apppatch\AcLayers.dll 2010-08-26 16:01 . 2010-10-27 11:50 2153984 ----a-w- c:\windows\apppatch\AcGenral.dll 2010-08-19 19:42 . 2010-08-19 19:42 27216 ----a-w- c:\windows\system32\drivers\AVGIDSShim.sys 2010-08-19 19:42 . 2010-08-19 19:42 123472 ----a-w- c:\windows\system32\drivers\AVGIDSDriver.sys 2010-08-19 19:42 . 2010-08-19 19:42 30288 ----a-w- c:\windows\system32\drivers\AVGIDSFilter.sys 2010-08-17 13:32 . 2010-09-15 10:49 126464 ----a-w- c:\windows\system32\spoolsv.exe 2009-10-26 14:05 . 2009-10-26 14:05 124240 ----a-w- c:\program files\mozilla firefox\plugins\CCMSDK.dll 2009-10-26 14:10 . 2009-10-26 14:10 13136 ----a-w- c:\program files\mozilla firefox\plugins\cgpcfg.dll 2009-10-26 14:08 . 2009-10-26 14:08 70488 ----a-w- c:\program files\mozilla firefox\plugins\CgpCore.dll 2009-10-26 14:09 . 2009-10-26 14:09 91480 ----a-w- c:\program files\mozilla firefox\plugins\confmgr.dll 2009-10-26 14:08 . 2009-10-26 14:08 22360 ----a-w- c:\program files\mozilla firefox\plugins\ctxlogging.dll 2009-10-26 14:06 . 2009-10-26 14:06 255312 ----a-w- c:\program files\mozilla firefox\plugins\ctxmui.dll 2009-10-26 14:08 . 2009-10-26 14:08 31064 ----a-w- c:\program files\mozilla firefox\plugins\icafile.dll 2009-10-26 14:09 . 2009-10-26 14:09 40280 ----a-w- c:\program files\mozilla firefox\plugins\icalogon.dll 2009-10-19 16:58 . 2009-10-19 16:58 652640 ----a-w- c:\program files\mozilla firefox\plugins\sslsdk_b.dll 2009-10-26 14:08 . 2009-10-26 14:08 23896 ----a-w- c:\program files\mozilla firefox\plugins\TcpPServ.dll . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-21 1233920] "LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2007-08-23 455968] "uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2010-09-10 328568] "DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696] "Google Update"="c:\users\Elien\AppData\Local\Google\Update\GoogleUpdate.exe" [2010-05-19 136176] "Octoshape Streaming Services"="c:\users\Elien\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" [2009-01-08 70936] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2010-05-27 1721640] "SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2007-01-17 634880] "RtHDVCpl"="RtHDVCpl.exe" [2007-10-09 4702208] "IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2007-10-24 178712] "QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2007-12-19 468264] "QlbCtrl"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2007-09-19 202032] "OnScreenDisplay"="c:\program files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe" [2007-09-04 554320] "UCam_Menu"="c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" [2007-08-16 218408] "hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-09-13 480560] "WAWifiMessage"="c:\program files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe" [2007-01-08 311296] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040] "HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 40048] "ConnectionCenter"="c:\program files\Citrix\ICA Client\concentr.exe" [2009-10-26 103768] "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072] "AVG_TRAY"="c:\program files\AVG\AVG10\avgtray.exe" [2010-09-15 2745696] c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2010-5-12 113664] VPN Client.lnk - c:\windows\Installer\{21E247D4-5E27-4BEA-AA4D-19A81203FE2A}\Icon3E5562ED7.ico [2010-10-8 6144] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~1\AVG\AVG10\avgchsvx.exe /sync\0c:\progra~1\AVG\AVG10\avgrsx.exe /sync /restart [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend] @="Service" [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 R2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe [2010-09-03 6104144] R2 avgwd;AVG WatchDog;c:\program files\AVG\AVG10\avgwdsvc.exe [2010-09-09 265400] R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504] S0 AVGIDSEH;AVGIDSEH;c:\windows\system32\DRIVERS\AVGIDSEH.Sys [2010-09-13 25680] S0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx86.sys [2010-09-07 26064] S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-05-12 691696] S1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx86.sys [2010-09-07 249424] S1 Avgtdix;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdix.sys [2010-09-07 298448] S1 ctxusbm;Citrix USB Monitor Driver;c:\windows\system32\DRIVERS\ctxusbm.sys [2009-10-19 65584] S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\AVGIDSDriver.Sys [2010-08-19 123472] S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\AVGIDSFilter.Sys [2010-08-19 30288] S3 AVGIDSShim;AVGIDSShim;c:\windows\system32\DRIVERS\AVGIDSShim.Sys [2010-08-19 27216] S3 SYMNDISV;SYMNDISV;c:\windows\System32\Drivers\SYMNDISV.SYS [2009-02-19 41008] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] 2007-08-23 15:34 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe . Inhoud van de 'Gedeelde Taken' map 2010-11-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2030656116-1285223459-1209547483-1000Core.job - c:\users\Elien\AppData\Local\Google\Update\GoogleUpdate.exe [2010-05-19 17:19] 2010-11-12 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2030656116-1285223459-1209547483-1000UA.job - c:\users\Elien\AppData\Local\Google\Update\GoogleUpdate.exe [2010-05-19 17:19] 2010-11-11 c:\windows\Tasks\HPCeeScheduleForElien.job - c:\program files\Hewlett-Packard\SDP\Ceement\HPCEE.exe [2008-05-02 09:58] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=nl_be&c=81&bd=Pavilion&pf=laptop mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=nl_be&c=81&bd=Pavilion&pf=laptop IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000 FF - ProfilePath - c:\users\Elien\AppData\Roaming\Mozilla\Firefox\Profiles\nta0ux0e.default\ FF - prefs.js: browser.search.selectedEngine - DAEMON Search FF - prefs.js: browser.startup.homepage - hxxp://www.hln.be/ FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ ---- FIREFOX POLICIES ---- c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false); . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2010-11-12 16:03 Windows 6.0.6001 Service Pack 1 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: 0 ************************************************************************** . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . Voltooingstijd: 2010-11-12 16:18:42 ComboFix-quarantined-files.txt 2010-11-12 15:18 ComboFix2.txt 2010-11-11 16:50 Pre-Run: 46.271.766.528 bytes beschikbaar Post-Run: 46.240.718.848 bytes beschikbaar - - End Of File - - D4F88098F3735040C2F2D48A38031D52

Ik hoop dat onderstaande log de juiste is, want tijdens het uitvoeren (naar het einde toe vermoed ik), leek het alsof de laptop was vastgelopen ( alle pictogrammen & de werkbalken van mijn bureaublad verdwenen, enkel de achtergrond was nog te zien), maar na een 5-tal minuten werd alles dan toch weer zoals voorheen en verscheen onderstaande log. ComboFix 10-11-10.04 - Elien 11/11/2010 17:31:36.1.2 - x86 Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.32.1043.18.3070.1759 [GMT 1:00] Gestart vanuit: c:\users\Elien\Desktop\ComboFix.exe SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46} . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\windows\system32\KBL.LOG . (((((((((((((((((((( Bestanden Gemaakt van 2010-10-11 to 2010-11-11 )))))))))))))))))))))))))))))) . 2010-11-11 16:46 . 2010-11-11 16:46 -------- d-----w- c:\users\Gast\AppData\Local\temp 2010-11-11 16:46 . 2010-11-11 16:46 -------- d-----w- c:\users\Default\AppData\Local\temp 2010-11-11 13:53 . 2010-11-11 13:53 -------- d-----w- c:\users\Elien\AppData\Roaming\Malwarebytes 2010-11-11 13:52 . 2010-04-29 14:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2010-11-11 13:52 . 2010-11-11 13:52 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2010-11-11 13:52 . 2010-11-11 13:52 -------- d-----w- c:\programdata\Malwarebytes 2010-11-11 13:52 . 2010-04-29 14:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys 2010-11-11 11:48 . 2010-11-11 11:48 388096 ----a-r- c:\users\Elien\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2010-11-11 11:48 . 2010-11-11 11:48 -------- d-----w- c:\program files\Trend Micro 2010-11-11 11:42 . 2010-11-11 11:42 -------- d-----w- c:\users\Gast\AppData\Local\Opera 2010-11-10 22:14 . 2010-10-07 11:35 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat 2010-11-08 09:29 . 2010-11-08 09:29 -------- d-----w- c:\users\Elien\AppData\Local\Apple Computer 2010-11-08 09:29 . 2010-11-08 09:29 -------- d-----w- c:\users\Elien\AppData\Roaming\Apple Computer 2010-11-08 09:27 . 2010-11-08 09:27 -------- d-----w- c:\program files\Safari 2010-11-08 09:26 . 2010-11-08 09:26 -------- d-----w- c:\program files\Common Files\Apple 2010-11-08 09:25 . 2010-11-08 09:25 -------- d-----w- c:\users\Elien\AppData\Local\Apple 2010-11-08 09:25 . 2010-11-08 09:25 -------- d-----w- c:\program files\Apple Software Update 2010-11-08 08:32 . 2010-11-08 08:32 -------- d-----w- c:\programdata\Citrix(153) 2010-11-08 08:31 . 2010-11-08 08:31 -------- d-----w- c:\program files\Citrix(5) 2010-11-06 14:06 . 2010-11-06 14:06 -------- d-----w- C:\found.001 2010-11-06 13:47 . 2010-11-06 13:47 -------- d-----w- c:\programdata\WindowsSearch 2010-11-01 15:27 . 2010-11-01 15:28 -------- d-----w- c:\program files\Cake Mania Main Street 2010-11-01 15:27 . 2010-11-01 15:28 -------- d-----w- c:\windows\Cake Mania Main Street 2010-11-01 14:21 . 2010-11-01 14:21 -------- d-----w- c:\programdata\PlayfulAge 2010-11-01 14:08 . 2010-11-01 14:09 -------- d-----w- c:\program files\Cake Mania 3 2010-11-01 14:07 . 2010-11-01 14:07 -------- d-----w- c:\program files\ReflexiveArcade 2010-10-27 11:50 . 2010-08-26 16:01 28672 ----a-w- c:\windows\system32\Apphlpdm.dll 2010-10-27 11:50 . 2010-08-26 14:11 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll 2010-10-24 17:46 . 2010-10-24 17:46 -------- d-----w- c:\users\Elien\AppData\Roaming\AVG10 2010-10-24 16:45 . 2010-10-24 16:45 -------- d--h--w- c:\programdata\Common Files 2010-10-24 16:44 . 2010-11-10 21:59 -------- d-----w- c:\windows\system32\drivers\AVG 2010-10-24 16:44 . 2010-11-10 21:59 -------- d-----w- c:\programdata\AVG10 2010-10-24 16:42 . 2010-10-24 16:42 -------- d-----w- c:\program files\AVG 2010-10-24 16:23 . 2010-10-24 16:42 -------- d-----w- c:\programdata\MFAData 2010-10-24 16:21 . 2010-10-24 16:21 -------- d-----w- c:\windows\E80F62FF5D3C4A1984099721F2928206.TMP 2010-10-22 13:27 . 2010-10-07 23:21 6146896 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{E3B8AFDD-A7C0-493A-94B5-C489660D21BF}\mpengine.dll 2010-10-17 10:01 . 2009-07-14 17:45 38480 ----a-w- c:\windows\system32\drivers\WdfLdr.sys 2010-10-17 10:01 . 2009-07-14 17:45 445008 ----a-w- c:\windows\system32\drivers\Wdf01000.sys 2010-10-17 09:54 . 2010-10-17 09:54 -------- d-----w- C:\found.000 2010-10-14 10:01 . 2010-09-20 09:25 231936 ----a-w- c:\windows\system32\msshsq.dll 2010-10-13 20:34 . 2010-09-10 16:35 168960 ----a-w- c:\program files\Windows Media Player\wmplayer.exe 2010-10-13 20:34 . 2010-09-10 16:37 8147456 ----a-w- c:\windows\system32\wmploc.DLL 2010-10-13 20:34 . 2010-06-28 16:15 1315840 ----a-w- c:\windows\system32\ole32.dll 2010-10-13 20:34 . 2010-06-28 14:31 339968 ----a-w- c:\program files\Windows NT\Accessories\wordpad.exe 2010-10-13 20:34 . 2010-08-10 15:02 274432 ----a-w- c:\windows\system32\schannel.dll 2010-10-13 20:34 . 2010-09-06 16:24 125952 ----a-w- c:\windows\system32\srvsvc.dll 2010-10-13 20:34 . 2010-09-06 14:13 303616 ----a-w- c:\windows\system32\drivers\srv.sys 2010-10-13 20:34 . 2010-09-06 14:12 101888 ----a-w- c:\windows\system32\drivers\srvnet.sys 2010-10-13 20:34 . 2010-09-06 16:23 17920 ----a-w- c:\windows\system32\netevent.dll 2010-10-13 20:34 . 2010-09-06 14:12 145408 ----a-w- c:\windows\system32\drivers\srv2.sys . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-10-19 09:41 . 2010-05-10 09:30 222080 ------w- c:\windows\system32\MpSigStub.exe 2010-09-13 14:27 . 2010-09-13 14:27 25680 ----a-w- c:\windows\system32\drivers\AVGIDSEH.sys 2010-09-07 01:49 . 2010-09-07 01:49 298448 ----a-w- c:\windows\system32\drivers\avgtdix.sys 2010-09-07 01:48 . 2010-09-07 01:48 34384 ----a-w- c:\windows\system32\drivers\avgmfx86.sys 2010-09-07 01:48 . 2010-09-07 01:48 249424 ----a-w- c:\windows\system32\drivers\avgldx86.sys 2010-09-07 01:48 . 2010-09-07 01:48 26064 ----a-w- c:\windows\system32\drivers\avgrkx86.sys 2010-08-26 16:01 . 2010-10-27 11:50 173056 ----a-w- c:\windows\apppatch\AcXtrnal.dll 2010-08-26 16:01 . 2010-10-27 11:50 459776 ----a-w- c:\windows\apppatch\AcSpecfc.dll 2010-08-26 16:01 . 2010-10-27 11:50 541696 ----a-w- c:\windows\apppatch\AcLayers.dll 2010-08-26 16:01 . 2010-10-27 11:50 2153984 ----a-w- c:\windows\apppatch\AcGenral.dll 2010-08-19 19:42 . 2010-08-19 19:42 27216 ----a-w- c:\windows\system32\drivers\AVGIDSShim.sys 2010-08-19 19:42 . 2010-08-19 19:42 123472 ----a-w- c:\windows\system32\drivers\AVGIDSDriver.sys 2010-08-19 19:42 . 2010-08-19 19:42 30288 ----a-w- c:\windows\system32\drivers\AVGIDSFilter.sys 2010-08-17 13:32 . 2010-09-15 10:49 126464 ----a-w- c:\windows\system32\spoolsv.exe 2009-10-26 14:05 . 2009-10-26 14:05 124240 ----a-w- c:\program files\mozilla firefox\plugins\CCMSDK.dll 2009-10-26 14:10 . 2009-10-26 14:10 13136 ----a-w- c:\program files\mozilla firefox\plugins\cgpcfg.dll 2009-10-26 14:08 . 2009-10-26 14:08 70488 ----a-w- c:\program files\mozilla firefox\plugins\CgpCore.dll 2009-10-26 14:09 . 2009-10-26 14:09 91480 ----a-w- c:\program files\mozilla firefox\plugins\confmgr.dll 2009-10-26 14:08 . 2009-10-26 14:08 22360 ----a-w- c:\program files\mozilla firefox\plugins\ctxlogging.dll 2009-10-26 14:06 . 2009-10-26 14:06 255312 ----a-w- c:\program files\mozilla firefox\plugins\ctxmui.dll 2009-10-26 14:08 . 2009-10-26 14:08 31064 ----a-w- c:\program files\mozilla firefox\plugins\icafile.dll 2009-10-26 14:09 . 2009-10-26 14:09 40280 ----a-w- c:\program files\mozilla firefox\plugins\icalogon.dll 2009-10-19 16:58 . 2009-10-19 16:58 652640 ----a-w- c:\program files\mozilla firefox\plugins\sslsdk_b.dll 2009-10-26 14:08 . 2009-10-26 14:08 23896 ----a-w- c:\program files\mozilla firefox\plugins\TcpPServ.dll . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-21 1233920] "LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2007-08-23 455968] "uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2010-09-10 328568] "DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696] "Google Update"="c:\users\Elien\AppData\Local\Google\Update\GoogleUpdate.exe" [2010-05-19 136176] "Octoshape Streaming Services"="c:\users\Elien\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" [2009-01-08 70936] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2010-05-27 1721640] "SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2007-01-17 634880] "RtHDVCpl"="RtHDVCpl.exe" [2007-10-09 4702208] "IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2007-10-24 178712] "QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2007-12-19 468264] "QlbCtrl"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2007-09-19 202032] "OnScreenDisplay"="c:\program files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe" [2007-09-04 554320] "UCam_Menu"="c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" [2007-08-16 218408] "hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-09-13 480560] "WAWifiMessage"="c:\program files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe" [2007-01-08 311296] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040] "HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840] "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 40048] "ConnectionCenter"="c:\program files\Citrix\ICA Client\concentr.exe" [2009-10-26 103768] "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072] "AVG_TRAY"="c:\program files\AVG\AVG10\avgtray.exe" [2010-09-15 2745696] c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2010-5-12 113664] VPN Client.lnk - c:\windows\Installer\{21E247D4-5E27-4BEA-AA4D-19A81203FE2A}\Icon3E5562ED7.ico [2010-10-8 6144] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~1\AVG\AVG10\avgchsvx.exe /sync\0c:\progra~1\AVG\AVG10\avgrsx.exe /sync /restart [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend] @="Service" [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus] "DisableMonitoring"=dword:00000001 [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall] "DisableMonitoring"=dword:00000001 R2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe [2010-09-03 6104144] R2 avgwd;AVG WatchDog;c:\program files\AVG\AVG10\avgwdsvc.exe [2010-09-09 265400] R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504] S0 AVGIDSEH;AVGIDSEH;c:\windows\system32\DRIVERS\AVGIDSEH.Sys [2010-09-13 25680] S0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx86.sys [2010-09-07 26064] S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-05-12 691696] S1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx86.sys [2010-09-07 249424] S1 Avgtdix;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdix.sys [2010-09-07 298448] S1 ctxusbm;Citrix USB Monitor Driver;c:\windows\system32\DRIVERS\ctxusbm.sys [2009-10-19 65584] S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\AVGIDSDriver.Sys [2010-08-19 123472] S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\AVGIDSFilter.Sys [2010-08-19 30288] S3 AVGIDSShim;AVGIDSShim;c:\windows\system32\DRIVERS\AVGIDSShim.Sys [2010-08-19 27216] S3 SYMNDISV;SYMNDISV;c:\windows\System32\Drivers\SYMNDISV.SYS [2009-02-19 41008] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] 2007-08-23 15:34 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe . Inhoud van de 'Gedeelde Taken' map 2010-10-29 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2030656116-1285223459-1209547483-1000Core.job - c:\users\Elien\AppData\Local\Google\Update\GoogleUpdate.exe [2010-05-19 17:19] 2010-11-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2030656116-1285223459-1209547483-1000UA.job - c:\users\Elien\AppData\Local\Google\Update\GoogleUpdate.exe [2010-05-19 17:19] 2010-11-11 c:\windows\Tasks\HPCeeScheduleForElien.job - c:\program files\Hewlett-Packard\SDP\Ceement\HPCEE.exe [2008-05-02 09:58] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=nl_be&c=81&bd=Pavilion&pf=laptop mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=nl_be&c=81&bd=Pavilion&pf=laptop IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000 FF - ProfilePath - c:\users\Elien\AppData\Roaming\Mozilla\Firefox\Profiles\nta0ux0e.default\ FF - prefs.js: browser.search.selectedEngine - DAEMON Search FF - prefs.js: browser.startup.homepage - hxxp://www.hln.be/ FF - component: c:\program files\AVG\AVG10\Firefox\components\avgssff.dll FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npicaN.dll FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll FF - plugin: c:\users\Elien\AppData\Local\Google\Update\1.2.183.39\npGoogleOneClick8.dll FF - plugin: c:\users\Elien\AppData\Roaming\Mozilla\plugins\npoctoshape.dll FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ ---- FIREFOX POLICIES ---- c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true); c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true); c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false); . - - - - ORPHANS VERWIJDERD - - - - HKLM-Run-HP Health Check Scheduler - [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2010-11-11 17:47 Windows 6.0.6001 Service Pack 1 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: 0 ************************************************************************** . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . Voltooingstijd: 2010-11-11 17:50:19 ComboFix-quarantined-files.txt 2010-11-11 16:50 Pre-Run: 49.993.539.584 bytes beschikbaar Post-Run: 50.547.322.880 bytes beschikbaar - - End Of File - - 325A8C65008147D383DB6D0A388874D1

Malwarebyte (geen geinfecteerde bestanden gevonden) Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Databaseversie: 4052 Windows 6.0.6001 Service Pack 1 Internet Explorer 8.0.6001.18975 11/11/2010 15:05:52 mbam-log-2010-11-11 (15-05-52).txt Scantype: Snelle scan Objecten gescand: 131498 Verstreken tijd: 10 minuut/minuten, 52 seconde(n) Geheugenprocessen geïnfecteerd: 0 Geheugenmodulen geïnfecteerd: 0 Registersleutels geïnfecteerd: 0 Registerwaarden geïnfecteerd: 0 Registerdata geïnfecteerd: 0 Mappen geïnfecteerd: 0 Bestanden geïnfecteerd: 0 Geheugenprocessen geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Geheugenmodulen geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Registersleutels geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Registerwaarden geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Registerdata geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Mappen geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) Bestanden geïnfecteerd: (Geen kwaadaardige objecten gedetecteerd) HijackThis Running processes: C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe C:\WINDOWS\RtHDVCpl.exe C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Program Files\HP\QuickPlay\QPService.exe C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\HP\HP Software Update\hpwuSchd2.exe C:\Program Files\Citrix\ICA Client\concentr.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe C:\Program Files\uTorrent\uTorrent.exe C:\Program Files\DAEMON Tools Lite\DTLite.exe C:\Users\Elien\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe C:\WINDOWS\ehome\ehtray.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Citrix\ICA Client\wfcrun32.exe C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe C:\Users\Elien\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Users\Elien\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe C:\Users\Elien\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Windows Live\Toolbar\wltuser.exe C:\Windows\system32\wuauclt.exe C:\Windows\system32\Macromed\Flash\FlashUtil10k_ActiveX.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe C:\Windows\system32\DllHost.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HP Consumer | MSN R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = HP Consumer | MSN R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HP Consumer | MSN R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = HP Consumer | MSN R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = O1 - Hosts: ::1 localhost O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file) O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O4 - HKLM\..\Run: [synTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [sMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [iAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe" O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe O4 - HKLM\..\Run: [uCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\1.0" O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe O4 - HKLM\..\Run: [WAWifiMessage] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [ConnectionCenter] "C:\Program Files\Citrix\ICA Client\concentr.exe" /startup O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun O4 - HKCU\..\Run: [Google Update] "C:\Users\Elien\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [Octoshape Streaming Services] "C:\Users\Elien\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" -inv:bootrun O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: VPN Client.lnk = ? O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: Planner voor Automatische LiveUpdate (Automatic LiveUpdate Scheduler) - Symantec Corporation - c:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\avgwdsvc.exe O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: LiveUpdate - Symantec Corporation - c:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe -- End of file - 10566 bytes

Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 12:52:41, on 11/11/2010 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v8.00 (8.00.6001.18975) Boot mode: Normal Running processes: C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe C:\WINDOWS\RtHDVCpl.exe C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Program Files\HP\QuickPlay\QPService.exe C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\HP\HP Software Update\hpwuSchd2.exe C:\Program Files\Citrix\ICA Client\concentr.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe C:\Program Files\uTorrent\uTorrent.exe C:\Program Files\DAEMON Tools Lite\DTLite.exe C:\Users\Elien\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe C:\WINDOWS\ehome\ehtray.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Citrix\ICA Client\wfcrun32.exe C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe C:\Users\Elien\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Users\Elien\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe C:\Users\Elien\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Windows Live\Toolbar\wltuser.exe C:\Windows\system32\Macromed\Flash\FlashUtil10k_ActiveX.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Users\Elien\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe C:\Users\Elien\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Users\Elien\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe C:\Users\Elien\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe C:\Windows\system32\wuauclt.exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe C:\Windows\system32\NOTEPAD.EXE C:\Windows\system32\DllHost.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HP Consumer | MSN R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = HP Consumer | MSN R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HP Consumer | MSN R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = HP Consumer | MSN R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file) O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O4 - HKLM\..\Run: [synTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [sMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [iAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe" O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start O4 - HKLM\..\Run: [OnScreenDisplay] C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe O4 - HKLM\..\Run: [uCam_Menu] "C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\YouCam" update "Software\CyberLink\YouCam\1.0" O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [HP Health Check Scheduler] [ProgramFilesFolder]Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe O4 - HKLM\..\Run: [WAWifiMessage] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [ConnectionCenter] "C:\Program Files\Citrix\ICA Client\concentr.exe" /startup O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun O4 - HKCU\..\Run: [Google Update] "C:\Users\Elien\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [Octoshape Streaming Services] "C:\Users\Elien\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" -inv:bootrun O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: VPN Client.lnk = ? O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: Planner voor Automatische LiveUpdate (Automatic LiveUpdate Scheduler) - Symantec Corporation - c:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\avgwdsvc.exe O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: LiveUpdate - Symantec Corporation - c:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe -- End of file - 11084 bytes

Een paar dagen geleden liep mijn laptop (HP Pavilion dv9960eb - Windows Vista Home) vast terwijl ik aan het surfen was op internet (in de browser google chrome). Ik heb de laptop toen opnieuw moeten opstarten omdat ik er geen beweging meer in kreeg. Eenmaal opnieuw opgestart, bleek ik via google chrome geen verbinding meer te kunnen maken met het internet ( Error 102 (net::ERR_CONNECTION_REFUSED): Unknown error). Ik ben dan maar overgestapt op de browser Mozilla Firefox. Een paar uur later bleek deze echter ook ineens geen verbinding meer te willen maken met het internet. Hetzelfde gebeurde toen ik daarna overstapte op Opera. Het rare aan dit verhaal is dat Internet Explorer de enige browser is die gedurende al die tijd wel bleef werken, maar dat de andere browsers één na een blijken uit te vallen... Ik heb al eens systeemherstel uitgevoerd naar een datum voordat de laptop was vastgelopen, maar zonder veel resultaat. Als ik nu dubbelklik op het icoontje van google chrome of firefox, krijg ik de browser zelfs niet meer geopend. Het herinstalleren van de browsers heeft ook niks uitgehaald. Het probleem blijft ook hetzelfde onafhankelijk of ik op het draadloos internet verbinding maak, of via de kabel. Ik heb al eens verdergekeken op google naar mensen met een soortgelijk probleem,maar tot nu toe nog niet echt een oplossing gevonden. Alvast bedankt voor de hulp!

Ik heb een HP Pavilion dv9960 eb laptop. Zo'n week geleden kreeg ik enkel een zwart scherm te zien toen ik hem opstartte. Ik heb de laptop dan voor reparatie naar HP gestuurd & daar hebben ze het moederbord vervangen. De dag nadat ik hem teruggekregen had, verscheen er echter ruis op mijn scherm toen ik hem opstartte. Ik heb dan een systeemherstel uitgevoerd en alles werkte weer zoals het hoorde, tot vandaag... Ik startte hem op en kreeg weer dezelfde ruis op mijn scherm te zien. Na opnieuw een systeemherstel uitgevoerd te hebben, werkte alles weer naar behoren... Maar heeft soms iemand enig idee aan wat dit kan liggen? (Ik heb even een foto van het beeld met de ruis erop gemaakt, omdat het nogal moeilijk uit te leggen is wat ik nu juist te zien krijg ) Alvast bedankt!