carlo

3 oktober 2011

hallo.

ik heb 5 maanden geleden een pc aangekocht op de website van medion.

bij het leveren van de pc zat de video kaart niet goed in het slot waardoor de pc niet wou opstarten.heb deze dan open gedaan en de video kaart vast geplugd op het moederbord.pc starte toen wel op.2 dagen nadien kreeg ik een eerste x een blauw scherm.dit gebeurde niet altijd,maar als het gebeurde was het steeds bij het opstarten.na vele malen bellen met medion,werd uiteindelijk de pc terug geroepen voor nazicht.4 weken later werd hij terug gezonden met de boodschap:er zijn geen hardware problemen met deze computer of enige mankementen.

ik stop die zelfde dag de pc in het stopcontact,en hij wou weer niet opstarten!reden:VIDEO KAART stak weer niet goed in het slot!heb deze dan nog maar eens goed in het slot geduwd.daarna starte hij normaal op.heb dan eerst de pc geformateerd.na die format heb ik f-secure geinstalleerd en vervolgens windows laten updaten.na het opstarten kreeg ik al weer een blauw scherm!(ik werd haast zot!)dan maar opnieuw format uitgevoerd...maar het haalt weinig uit.ik heb een progje geinstalleerd om de foutcodes op te slaan.

blauw scherm op 27/09/2011.092711-32089-01.dmp 27/09/2011 12:28:52 DRIVER_CORRUPTED_EXPOOL 0x000000c5 00000000`fffffa88 00000000`00000002 00000000`00000001 fffff800`03813617 ntoskrnl.exe ntoskrnl.exe+7cc40 NT Kernel & System Microsoft® Windows® Operating System Microsoft Corporation 6.1.7601.17640 (win7sp1_gdr.110622-1506) x64 ntoskrnl.exe+7cc40 C:\Windows\Minidump\092711-32089-01.dmp 8 15 7601 266.288

blauw scherm op 2/10/2011100211-9516-01.dmp 2/10/2011 20:12:47 BAD_POOL_HEADER 0x00000019 00000000`00000020 fffffa80`09aa9190 fffffa80`09aa9200 00000000`04070004 iaStor.sys iaStor.sys+3a0a1 x64 ntoskrnl.exe+7cc40 C:\Windows\Minidump\100211-9516-01.dmp 8 15 7601 262.192

blauw scherm op 3/10/2011 100311-9500-01.dmp 3/10/2011 14:56:24 SYSTEM_THREAD_EXCEPTION_NOT_HANDLED 0x1000007e ffffffff`c0000096 fffff800`036ed916 fffff880`03576778 fffff880`03575fd0 ACPI.sys ACPI.sys+1e73b x64 ntoskrnl.exe+86916 C:\Windows\Minidump\100311-9500-01.dmp 8 15 7601 262.192

is er iemand die hier mij mee kan helpen?

de pc staat nog in garantie,mijn vraag is dan ook:is dit een probleem met de pc?of doe ik iets mis?

bij medion geraak ik niet verder dan een telefoniste die een klachten dossier opmaakt!

en dan moet je wachten tot men je terug beld...

alvast bedankt om dit te bekijken!

mvg

14 september 2009

hoi kape

heb een schijfcontrole uitgevoerd,echter zonder resultaat.heb dan ook besloten om een format uit te voeren.

wil je echter heel erg bedanken voor je hulp en inzet!!!!

vriendelijke groeten.

12 september 2009

hoi kape

heb deze handelingen gedaan.heb dan ook de foutmelding opgeschreven.(pc valt zelfs in veilige modus uit)foutcode is:stop 0x00000024 (0x001902FE,0xB9E2C218,0XB9E2BF14,0XF73B11EE)

ik weet niet hoe ik hier aan moet beginnen...

enige raad?

groeten.

11 september 2009

hoi kape

heb weer wat problemen gehad met opstarten...heb in veilige modus ccleaner gedownload en dan zijn werk laten doen.deze heeft heel wat fouten gevonden in het register.heb dan opnieuw opgestart(voorloopig alles normaal)bestaat er geen logfile van het blauwe scherm wat maar even tevoorschijn komt bij een herstart?nogmaals bedankt voor de hulp!

11 september 2009

ComboFix 09-09-10.03 - Eigenaar 11/09/2009 13:38.1.1 - NTFSx86

Microsoft Windows XP Home Edition 5.1.2600.3.1252.31.1043.18.1023.542 [GMT 2:00]

Gestart vanuit: c:\documents and settings\Eigenaar\Bureaublad\ComboFix.exe

AV: F-Secure Internet Security 2009 9.00 *On-access scanning disabled* (Updated) {E7512ED5-4245-4B4D-AF3A-382D3F313F15}

FW: F-Secure Internet Security 2009 9.00 *enabled* {D4747503-0346-49EB-9262-997542F79BF4}

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\documents and settings\Eigenaar\Application Data\inst.exe

c:\windows\msvrc20.dll

.

(((((((((((((((((((( Bestanden Gemaakt van 2009-08-11 to 2009-09-11 ))))))))))))))))))))))))))))))

.

2009-09-10 18:46 . 2009-09-10 18:46 -------- d-----w- c:\program files\Trend Micro

2009-09-10 17:20 . 2009-09-10 17:20 -------- d-----w- c:\documents and settings\Eigenaar\Application Data\Malwarebytes

2009-09-10 17:19 . 2009-09-10 12:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2009-09-10 17:19 . 2009-09-10 12:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys

2009-09-10 17:19 . 2009-09-11 11:16 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2009-09-10 07:52 . 2009-09-10 07:52 54 ----a-w- c:\windows\system32\rp_stats.dat

2009-09-10 07:52 . 2009-09-10 07:52 39 ----a-w- c:\windows\system32\rp_rules.dat

2009-09-09 19:06 . 2009-07-03 14:49 15688 ----a-w- c:\windows\system32\lsdelete.exe

2009-09-09 18:53 . 2009-07-03 14:49 64160 ----a-w- c:\windows\system32\drivers\Lbd.sys

2009-09-09 18:50 . 2009-09-09 18:51 -------- dc-h--w- c:\documents and settings\All Users\Application Data\{EF63305C-BAD7-4144-9208-D65528260864}

2009-09-09 18:50 . 2009-09-09 18:53 -------- d-----w- c:\documents and settings\All Users\Application Data\Lavasoft

2009-09-09 18:50 . 2009-09-09 18:50 -------- d-----w- c:\program files\Lavasoft

2009-09-09 16:48 . 2009-09-09 16:49 -------- d-----w- c:\program files\Spybot - Search & Destroy

2009-09-08 18:29 . 2009-06-21 21:49 153088 -c----w- c:\windows\system32\dllcache\triedit.dll

2009-09-08 16:16 . 2009-09-08 16:16 33920 ----a-w- c:\windows\system32\drivers\fsbts.sys

2009-09-08 15:49 . 2009-09-08 20:02 -------- d-----w- c:\documents and settings\Eigenaar\Application Data\F-Secure

2009-09-08 15:44 . 2009-09-08 15:44 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\F-Secure

2009-09-08 15:43 . 2008-10-14 13:01 79904 ----a-w- c:\windows\system32\drivers\fsdfw.sys

2009-09-08 15:42 . 2009-09-11 11:29 -------- d-----w- c:\program files\F-Secure Internet Security

2009-09-08 15:15 . 2009-09-08 15:41 -------- d-----w- c:\documents and settings\All Users\Application Data\fssg

2009-09-08 15:15 . 2009-09-08 15:43 -------- d-----w- c:\documents and settings\All Users\Application Data\f-secure

2009-09-08 15:15 . 2009-09-08 15:15 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\Adobe

2009-09-08 15:10 . 2009-09-08 15:10 -------- d-----w- c:\documents and settings\DINA JEROEN EN DRIES\Application Data\f-secure

2009-09-08 13:04 . 2009-09-08 13:04 -------- d-----w- c:\windows\system32\wbem\Repository

2009-09-08 12:13 . 2009-09-08 12:13 -------- d-----w- c:\documents and settings\DINA JEROEN EN DRIES\Application Data\Malwarebytes

2009-09-07 14:43 . 2009-09-07 14:43 -------- d-----w- c:\documents and settings\DINA JEROEN EN DRIES\IECompatCache

2009-09-05 15:14 . 2009-09-05 15:14 -------- d-----w- c:\documents and settings\Administrator\Application Data\Malwarebytes

2009-09-05 15:14 . 2009-09-05 15:14 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes

2009-09-05 15:13 . 2009-09-05 15:13 -------- d-----w- c:\documents and settings\Administrator\IECompatCache

2009-09-05 15:12 . 2009-09-05 15:12 -------- d-sh--w- c:\documents and settings\Administrator\PrivacIE

2009-09-05 15:11 . 2009-09-05 15:11 -------- d-sh--w- c:\documents and settings\Administrator\IETldCache

2009-09-04 05:51 . 2009-09-08 13:01 -------- d-----w- c:\windows\BDOSCAN8

2009-08-28 20:42 . 2009-08-28 20:42 -------- d-sh--w- c:\windows\system32\config\systemprofile\IETldCache

2009-08-26 19:33 . 2009-08-26 19:33 -------- d-----w- c:\program files\Garmin GPS Plugin

2009-08-26 19:33 . 2009-08-26 20:23 -------- d-----w- c:\program files\Garmin

2009-08-26 11:02 . 2009-08-26 11:02 -------- d-----w- c:\documents and settings\DINA JEROEN EN DRIES\Local Settings\Application Data\WMTools Downloaded Files

2009-08-26 10:56 . 2009-08-26 10:59 -------- d-----w- c:\documents and settings\DINA JEROEN EN DRIES\Local Settings\Application Data\Adobe

2009-08-22 11:09 . 2009-08-22 11:09 -------- d-----w- c:\program files\Weight Watchers

2009-08-21 21:30 . 2008-04-17 10:12 107368 ----a-w- c:\windows\system32\GEARAspi.dll

2009-08-14 13:47 . 2009-08-14 18:17 -------- d-----w- c:\program files\IKEA HomePlanner

2009-08-13 17:35 . 2009-08-30 09:02 -------- d-----w- c:\documents and settings\All Users\Application Data\{7B6BA59A-FB0E-4499-8536-A7420338BF3B}

2009-08-13 17:24 . 2009-08-13 17:24 -------- d-----w- c:\documents and settings\All Users\Application Data\PCSettings

2009-08-13 17:24 . 2009-08-30 09:03 -------- d-----w- c:\documents and settings\All Users\Application Data\Norton

2009-08-13 17:24 . 2009-08-29 18:03 -------- d-----w- c:\documents and settings\All Users\Application Data\NortonInstaller

2009-08-13 08:04 . 2009-07-10 13:31 1315328 -c----w- c:\windows\system32\dllcache\msoe.dll

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2009-09-09 17:18 . 2008-11-15 14:46 -------- d-----w- c:\documents and settings\All Users\Application Data\spybot - search & destroy

2009-09-08 18:37 . 2008-12-28 15:36 -------- d-----w- c:\program files\Microsoft Silverlight

2009-09-08 18:30 . 2008-11-15 11:55 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help

2009-09-08 15:43 . 2008-11-15 18:11 94876 ----a-w- c:\windows\system32\perfc013.dat

2009-09-08 15:43 . 2008-11-15 18:11 518994 ----a-w- c:\windows\system32\perfh013.dat

2009-09-03 17:09 . 2009-08-08 13:20 117152 ----a-w- c:\documents and settings\DINA JEROEN EN DRIES\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2009-09-03 09:01 . 2008-11-15 14:40 -------- d-----w- c:\documents and settings\Eigenaar\Application Data\grabit

2009-08-30 10:46 . 2009-02-05 11:08 1104 ----a-w- c:\documents and settings\Eigenaar\Application Data\wklnhst.dat

2009-08-30 09:06 . 2008-11-15 12:23 -------- d-----w- c:\documents and settings\All Users\Application Data\Symantec

2009-08-30 09:06 . 2008-11-15 12:22 -------- d-----w- c:\program files\Common Files\Symantec Shared

2009-08-22 11:41 . 2008-11-15 14:39 117152 ----a-w- c:\documents and settings\Eigenaar\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2009-08-20 16:21 . 2009-05-22 09:16 -------- d-----w- c:\program files\Midnight Racing

2009-08-14 13:46 . 2008-11-16 09:45 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard

2009-08-13 17:29 . 2008-11-15 12:26 -------- d-----w- c:\documents and settings\Eigenaar\Application Data\Symantec

2009-08-05 09:01 . 2008-11-15 18:09 205312 ----a-w- c:\windows\system32\mswebdvd.dll

2009-07-26 16:07 . 2009-07-26 16:07 -------- d-----w- c:\program files\Microsoft Reader

2009-07-26 16:07 . 2008-11-16 12:13 -------- d--h--w- c:\program files\InstallShield Installation Information

2009-07-17 19:04 . 2008-11-15 18:06 58880 ----a-w- c:\windows\system32\atl.dll

2009-07-13 08:08 . 2008-11-15 18:12 286720 ----a-w- c:\windows\system32\wmpdxm.dll

2009-07-03 17:00 . 2008-11-15 18:06 915456 ----a-w- c:\windows\system32\wininet.dll

2009-06-25 08:27 . 2008-11-15 18:10 54272 ----a-w- c:\windows\system32\wdigest.dll

2009-06-25 08:27 . 2008-11-15 18:09 56832 ----a-w- c:\windows\system32\secur32.dll

2009-06-25 08:27 . 2008-11-15 18:09 147456 ----a-w- c:\windows\system32\schannel.dll

2009-06-25 08:27 . 2008-11-15 18:09 136192 ----a-w- c:\windows\system32\msv1_0.dll

2009-06-25 08:27 . 2008-11-15 18:08 301568 ----a-w- c:\windows\system32\kerberos.dll

2009-06-25 08:27 . 2008-11-15 18:06 735232 ----a-w- c:\windows\system32\lsasrv.dll

2009-06-24 11:18 . 2008-11-15 18:08 92928 ----a-w- c:\windows\system32\drivers\ksecdd.sys

2009-06-16 14:40 . 2008-11-15 18:10 119808 ----a-w- c:\windows\system32\t2embed.dll

2009-06-16 14:40 . 2008-11-15 18:07 81920 ----a-w- c:\windows\system32\fontsub.dll

2009-06-15 10:45 . 2008-11-15 18:10 79872 ----a-w- c:\windows\system32\telnet.exe

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408]

"gStart"="c:\garmin\gStart.exe" [2008-08-13 1891416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-10-07 13574144]

"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-10-07 86016]

"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]

"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-11-30 98304]

"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb12.exe" [2005-03-08 176128]

"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]

"beid"="c:\program files\Belgium Identity Card\beid35gui.exe" [2009-02-02 2035712]

"F-Secure Manager"="c:\program files\F-Secure Internet Security\Common\FSM32.EXE" [2008-10-14 182936]

"F-Secure TNB"="c:\program files\F-Secure Internet Security\FSGUI\TNBUtil.exe" [2008-10-14 957024]

"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]

"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2008-10-07 1630208]

"SoundMan"="SOUNDMAN.EXE" - c:\windows\SOUNDMAN.EXE [2005-07-22 81920]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\

HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2005-5-12 282624]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]

"RestrictRun"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]

"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]

"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]

"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"c:\\Program Files\\Pinnacle\\Studio 11\\programs\\RM.exe"=

"c:\\Program Files\\Pinnacle\\Studio 11\\programs\\Studio.exe"=

"c:\\Program Files\\Pinnacle\\Studio 11\\programs\\PMSRegisterFile.exe"=

"c:\\Program Files\\Pinnacle\\Studio 11\\programs\\umi.exe"=

"c:\\Program Files\\Pinnacle\\Studio 12\\Programs\\RM.exe"=

"c:\\Program Files\\Pinnacle\\Studio 12\\Programs\\Studio.exe"=

"c:\\Program Files\\Pinnacle\\Studio 12\\Programs\\umi.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=

"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

"c:\\Program Files\\Messenger\\msmsgs.exe"=

"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

R0 fsbts;fsbts;c:\windows\system32\drivers\fsbts.sys [8/09/2009 18:16 33920]

R0 FSFW;F-Secure Firewall Driver;c:\windows\system32\drivers\fsdfw.sys [8/09/2009 17:43 79904]

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [9/09/2009 20:53 64160]

R1 F-Secure HIPS;F-Secure HIPS Driver;c:\program files\F-Secure Internet Security\HIPS\drivers\fshs.sys [8/09/2009 17:43 66720]

R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [3/07/2009 16:49 1029456]

R3 F-Secure Gatekeeper;F-Secure Gatekeeper;c:\program files\F-Secure Internet Security\Anti-Virus\minifilter\fsgk.sys [8/09/2009 17:42 100984]

S2 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7;c:\program files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe [16/09/2008 13:03 169312]

S2 gupdate1c9ad8965a9f332;Google Updateservice (gupdate1c9ad8965a9f332);c:\program files\Google\Update\GoogleUpdate.exe [25/03/2009 22:36 133104]

S3 ACSSCR;ACR38 Smart Card Reader;c:\windows\system32\drivers\a38usb.sys [18/04/2009 13:04 36736]

S3 FSORSPClient;F-Secure ORSP Client;c:\program files\F-Secure Internet Security\ORSP Client\fsorsp.exe [8/09/2009 17:43 55904]

S4 F-Secure Filter;F-Secure File System Filter;c:\program files\F-Secure Internet Security\Anti-Virus\win2k\fsfilter.sys [8/09/2009 17:42 39776]

S4 F-Secure Recognizer;F-Secure File System Recognizer;c:\program files\F-Secure Internet Security\Anti-Virus\win2k\fsrec.sys [8/09/2009 17:42 25184]

--- Andere Services/Drivers In Geheugen ---

*NewlyCreated* - FSBL

*Deregistered* - fsbl

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]

"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP

.

Inhoud van de 'Gedeelde Taken' map

2009-09-09 c:\windows\Tasks\Ad-Aware Update (Weekly).job

- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-07-03 14:49]

2009-09-10 c:\windows\Tasks\Advanced WindowsCare V2 Pro.job

- c:\program files\IObit\Advanced WindowsCare V2 Pro\AutoCare.exe [2008-11-28 16:49]

2009-09-10 c:\windows\Tasks\AwcProUpdate.job

- c:\program files\IObit\Advanced WindowsCare V2 Pro\AutoUpdate.exe [2008-11-28 10:28]

2009-09-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-25 20:36]

2009-09-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-25 20:36]

2009-09-06 c:\windows\Tasks\OGADaily.job

- c:\windows\system32\OGAVerify.exe [2008-12-31 16:04]

2009-09-11 c:\windows\Tasks\OGALogon.job

- c:\windows\system32\OGAVerify.exe [2008-12-31 16:04]

2009-09-11 c:\windows\Tasks\User_Feed_Synchronization-{6FF70CA7-84EA-48AD-862F-080F50B8DA7F}.job

- c:\windows\system32\msfeedssync.exe [2007-08-13 02:31]

2009-09-11 c:\windows\Tasks\User_Feed_Synchronization-{8FA8D934-7CC3-47EF-AEDF-078AFFD56C83}.job

- c:\windows\system32\msfeedssync.exe [2007-08-13 02:31]

.

------- Bijkomende Scan -------

.

uStart Page = hxxp://www.google.be/

IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

LSP: c:\program files\F-Secure Internet Security\FSPS\program\FSLSP.DLL

.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2009-09-11 13:44

Windows 5.1.2600 Service Pack 3 NTFS

scannen van verborgen processen ...

scannen van verborgen autostart items ...

scannen van verborgen bestanden ...

Scan succesvol afgerond

verborgen bestanden: 0

**************************************************************************

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]

"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]

@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10c.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32*]

"ThreadingModel"="Apartment"