gwsanders
-
Items
4 -
Registratiedatum
-
Laatst bezocht
Inhoudstype
Profielen
Forums
Store
Berichten die geplaatst zijn door gwsanders
-
-
ComboFix 09-09-25.01 - Gert-Willem 26-09-2009 20:27.1.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.31.1043.18.511.119 [GMT 2:00]
Gestart vanuit: c:\nieuwe map\ComboFix.exe
AV: avast! antivirus 4.8.1351 [VPS 090926-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\Gert-Willem\Application Data\Microsoft\Clip Organizer\mstore10.mgc
c:\documents and settings\Gert-Willem\Application Data\Microsoft\Clip Organizer\Offic10.MGC
c:\recycler\S-1-5-21-1292428093-1965331169-839522115-1003
c:\windows\Installer\1c05d1d3.msp
c:\windows\Installer\3ecb76.msi
.
(((((((((((((((((((( Bestanden Gemaakt van 2009-08-26 to 2009-09-26 ))))))))))))))))))))))))))))))
.
2009-09-25 11:56 . 2009-09-25 11:56 -------- d-----w- c:\program files\Trend Micro
2009-09-25 11:23 . 2009-09-25 11:23 552 ----a-w- c:\windows\system32\d3d8caps.dat
2009-09-25 11:22 . 2009-09-25 11:22 -------- d-----w- c:\program files\CPUID
2009-09-17 06:42 . 2009-02-09 06:37 7808 ----a-w- c:\windows\system32\drivers\usbser_lowerfltj.sys
2009-09-17 06:42 . 2009-02-09 06:37 7808 ----a-w- c:\windows\system32\drivers\usbser_lowerflt.sys
2009-09-17 06:42 . 2009-02-09 06:37 22016 ----a-w- c:\windows\system32\drivers\ccdcmbo.sys
2009-09-17 06:42 . 2009-02-09 06:37 659968 ----a-w- c:\windows\system32\nmwcdcocls.dll
2009-09-17 06:42 . 2009-02-09 06:37 17664 ----a-w- c:\windows\system32\drivers\ccdcmb.sys
2009-09-17 06:42 . 2009-02-09 06:32 1112288 ----a-w- c:\windows\system32\wdfcoinstaller01007.dll
2009-09-12 08:18 . 2009-09-25 18:53 -------- d--h--r- c:\documents and settings\Gert-Willem\Onlangs geopend
2009-09-11 18:54 . 2009-09-11 18:54 -------- d-----w- c:\documents and settings\LocalService\Mijn documenten
2009-09-11 18:49 . 2009-09-11 18:49 -------- d-----w- c:\program files\Nitro PDF
2009-09-11 12:39 . 2009-09-11 12:39 -------- d-sh--w- c:\documents and settings\Gert-Willem\IECompatCache
2009-09-11 12:37 . 2009-09-11 12:37 -------- d-sh--w- c:\documents and settings\Gert-Willem\PrivacIE
2009-09-09 10:02 . 2009-06-21 21:49 153088 -c----w- c:\windows\system32\dllcache\triedit.dll
2009-09-01 10:02 . 2009-09-01 10:02 -------- d-----w- c:\documents and settings\All Users\Application Data\Office Genuine Advantage
2009-09-01 10:02 . 2009-09-01 10:02 -------- d-----w- c:\documents and settings\Gert-Willem\Application Data\Office Genuine Advantage
.
((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-26 18:19 . 2008-08-24 11:06 -------- d-----w- c:\documents and settings\Gert-Willem\Application Data\Hamachi
2009-09-17 06:42 . 2008-12-19 21:25 -------- d-----w- c:\documents and settings\All Users\Application Data\Installations
2009-09-17 06:42 . 2008-08-20 13:32 -------- d-----w- c:\program files\Nokia
2009-09-17 06:39 . 2008-08-20 13:34 -------- d-----w- c:\program files\Common Files\Nokia
2009-08-27 07:04 . 2008-08-20 13:36 -------- d-----w- c:\documents and settings\All Users\Application Data\PC Suite
2009-08-26 20:23 . 2009-08-26 20:23 -------- d-----w- c:\program files\Toshiba
2009-08-26 13:44 . 2009-08-25 21:34 -------- d-----w- c:\program files\Windows Desktop Search
2009-08-26 13:38 . 2004-08-04 12:00 534140 ----a-w- c:\windows\system32\perfh013.dat
2009-08-26 13:38 . 2004-08-04 12:00 100548 ----a-w- c:\windows\system32\perfc013.dat
2009-08-26 08:35 . 2009-08-26 08:35 -------- d-----w- c:\documents and settings\Gert-Willem\Application Data\Windows Search
2009-08-26 07:04 . 2009-08-26 06:36 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
2009-08-25 21:37 . 2009-08-25 21:37 -------- d-----w- c:\documents and settings\Gert-Willem\Application Data\Windows Desktop Search
2009-08-25 21:30 . 2009-08-25 21:30 -------- d-----w- c:\program files\Windows Media Connect 2
2009-08-24 09:24 . 2008-08-13 08:22 21808 ----a-w- c:\documents and settings\Gert-Willem\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-08-24 09:23 . 2009-08-13 18:08 2311 ----a-w- c:\documents and settings\All Users\Application Data\xml99.tmp
2009-08-24 09:23 . 2009-08-13 18:08 13354 ----a-w- c:\documents and settings\All Users\Application Data\xml98.tmp
2009-08-24 09:23 . 2009-08-13 18:08 7189 ----a-w- c:\documents and settings\All Users\Application Data\xml97.tmp
2009-08-22 21:22 . 2009-08-22 21:22 -------- d-----w- c:\program files\MSBuild
2009-08-22 21:22 . 2009-08-22 21:22 -------- d-----w- c:\program files\Reference Assemblies
2009-08-19 21:06 . 2009-08-19 21:06 -------- d-----w- c:\documents and settings\All Users\Application Data\PC Drivers HeadQuarters
2009-08-19 21:06 . 2009-08-19 21:06 -------- d-----w- c:\program files\PC Drivers HeadQuarters
2009-08-17 16:10 . 2008-11-15 19:39 1279456 ----a-w- c:\windows\system32\aswBoot.exe
2009-08-17 16:06 . 2008-11-15 19:39 93392 ----a-w- c:\windows\system32\drivers\aswmon.sys
2009-08-17 16:06 . 2008-11-15 19:39 94160 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2009-08-17 16:05 . 2008-11-15 19:39 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2009-08-17 16:05 . 2008-11-15 19:39 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2009-08-17 16:04 . 2008-11-15 19:40 51376 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2009-08-17 16:04 . 2008-11-15 19:40 23152 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2009-08-17 16:03 . 2008-11-15 19:40 26944 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2009-08-17 16:02 . 2008-11-15 19:40 97480 ----a-w- c:\windows\system32\AvastSS.scr
2009-08-17 09:48 . 2009-05-28 14:09 -------- d-----w- c:\documents and settings\Gert-Willem\Application Data\FileZilla
2009-08-13 17:54 . 2009-08-13 17:54 -------- d-----w- c:\program files\SiSoftware
2009-08-12 18:19 . 2008-12-10 19:50 -------- d-----w- c:\program files\CCleaner
2009-08-05 09:01 . 2004-08-04 12:00 205312 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-03 13:07 . 2009-08-03 13:07 403816 ----a-w- c:\windows\system32\OGACheckControl.dll
2009-08-03 13:07 . 2009-08-03 13:07 322928 ----a-w- c:\windows\system32\OGAAddin.dll
2009-08-03 13:07 . 2009-08-03 13:07 230768 ----a-w- c:\windows\system32\OGAEXEC.exe
2009-07-30 10:24 . 2009-07-30 09:54 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple Computer
2009-07-30 10:05 . 2009-07-30 10:05 -------- d-----w- c:\documents and settings\Gert-Willem\Application Data\Apple Computer
2009-07-30 09:56 . 2009-07-30 09:54 -------- d-----w- c:\program files\QuickTime
2009-07-17 19:04 . 2004-08-04 12:00 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-13 21:43 . 2004-08-04 12:00 286208 ----a-w- c:\windows\system32\wmpdxm.dll
2009-07-03 17:00 . 2004-08-04 12:00 915456 ----a-w- c:\windows\system32\wininet.dll
.
((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PcSync"="c:\program files\Nokia\Nokia PC Suite 6\PCSync2.exe" [2006-11-09 1634304]
"i8kfangui"="c:\program files\I8kfanGUI\I8kfanGUI.exe" [2007-02-16 856064]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"XGIWatchDog"="c:\program files\XGI\XWatDog.exe" [2005-05-02 81920]
"Broadcom Wireless Manager UI"="c:\windows\system32\WLTRAY.exe" [2007-03-16 1392640]
"PCSuiteTrayApplication"="c:\program files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2007-01-23 223232]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-08-17 81000]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-25 148888]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-05-26 413696]
"RegServer"="regserve.exe" - c:\windows\system32\RegServe.exe [2005-05-02 28672]
"BCMSMMSG"="BCMSMMSG.exe" - c:\windows\BCMSMMSG.exe [2003-08-29 122880]
"BluetoothAuthenticationAgent"="bthprops.cpl" - c:\windows\system32\bthprops.cpl [2008-04-14 110592]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"PcSync"="c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2006-11-09 1634304]
c:\documents and settings\Gert-Willem\Menu Start\Programma's\Opstarten\
hamachi.lnk - c:\program files\Hamachi\hamachi.exe [2008-8-24 625952]
c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\
Bluetooth Manager.lnk - c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe [2005-6-16 49152]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]
Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2008-5-26 123904]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\gigabyte2
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Chami\\HTML-Kit\\Bin\\HTMLKit.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"c:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"c:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"=
"c:\\phpdev5\\mysql\\bin\\mysqld-nt.exe"=
"c:\\Program Files\\PoivY.com\\PoivY\\PoivY.exe"=
"c:\\Program Files\\Hamachi\\hamachi.exe"=
"c:\\Program Files\\SiSoftware\\SiSoftware Sandra Lite 2009.SP3c\\RpcAgentSrv.exe"=
"c:\\Program Files\\SiSoftware\\SiSoftware Sandra Lite 2009.SP3c\\WNt500x86\\RpcSandraSrv.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [15-11-2008 21:39 114768]
R1 fanio;FanIO driver;c:\windows\system32\drivers\fanio.sys [21-12-2008 12:36 14464]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [15-11-2008 21:39 20560]
R3 Xgiv3;Xgiv3;c:\windows\system32\drivers\Xgiv3m.sys [14-8-2008 19:16 337408]
S2 dev5_ap1;dev5_ap1;c:\phpdev5\Apache\Apache.exe [27-12-2008 22:45 20480]
S3 SandraAgentSrv;SiSoftware Deployment Agent Service;c:\program files\SiSoftware\SiSoftware Sandra Lite 2009.SP3c\RpcAgentSrv.exe [13-8-2009 19:54 98488]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Inhoud van de 'Gedeelde Taken' map
2009-07-01 c:\windows\Tasks\Schijfopruiming.job
- c:\windows\system32\cleanmgr.exe [2004-08-04 17:02]
2009-09-25 c:\windows\Tasks\SyncBack skischool.job
- c:\program files\2BrightSparks\SyncBack\SyncBack.exe [2009-02-20 11:00]
.
.
------- Bijkomende Scan -------
.
uStart Page = hxxp://www.gmail.com/
uInternet Settings,ProxyOverride = *.local
IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\Gert-Willem\Application Data\Mozilla\Firefox\Profiles\lyw5dqzs.default\
FF - prefs.js: browser.startup.homepage - hxxp://mail.google.com/mail/h/9525eup124dy/?
FF - plugin: c:\documents and settings\Gert-Willem\Application Data\Mozilla\Firefox\Profiles\lyw5dqzs.default\extensions\LogMeInClient@logmein.com\plugins\npRACtrl.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover
Rootkit scan 2009-09-26 20:58
Windows 5.1.2600 Service Pack 3 NTFS
scannen van verborgen processen ...
scannen van verborgen autostart items ...
scannen van verborgen bestanden ...
Scan succesvol afgerond
verborgen bestanden: 0
**************************************************************************
.
--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10c.exe"
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- DLLs Geladen Onder Lopende Processen ---------------------
- - - - - - - > 'winlogon.exe'(1656)
c:\windows\System32\BCMLogon.dll
.
Voltooingstijd: 2009-09-26 21:05
ComboFix-quarantined-files.txt 2009-09-26 19:05
Pre-Run: 3.285.389.312 bytes beschikbaar
Post-Run: 3.700.736.000 bytes beschikbaar
WindowsXP-KB310994-SP2-Pro-BootDisk-NLD.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
200 --- E O F --- 2009-09-17 08:36
-
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:56:59, on 25-9-2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\phpdev5\apache\Apache.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\phpdev5\apache\Apache.exe
C:\Program Files\PC Connectivity
Solution\ServiceLayer.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\BCMSMMSG.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\Program Files\Nokia\Nokia PC Suite
6\LaunchApplication.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PCSync2.exe
C:\Program Files\I8kfanGUI\I8kfanGUI.exe
C:\Program Files\Windows Desktop
Search\WindowsSearch.exe
C:\Program Files\Common Files\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Toshiba\Bluetooth Toshiba
Stack\TosBtMng.exe
C:\Program Files\Hamachi\hamachi.exe
C:\Program Files\Toshiba\Bluetooth Toshiba
Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba
Stack\TosBtHid.exe
C:\Program Files\Toshiba\Bluetooth Toshiba
Stack\TosBtHsp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba
Stack\tosOBEX.exe
C:\Program Files\Toshiba\Bluetooth Toshiba
Stack\tosBtProc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet
Explorer\Main,Start Page = http://www.gmail.com/
R1 - HKLM\Software\Microsoft\Internet
Explorer\Main,Default_Page_URL =
R1 - HKLM\Software\Microsoft\Internet
Explorer\Main,Default_Search_URL =
R1 - HKLM\Software\Microsoft\Internet
Explorer\Main,Search Page =
R0 - HKLM\Software\Microsoft\Internet
Explorer\Main,Start Page =
R1 -
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet
Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Adobe PDF Reader Help bij koppelingen -
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program
Files\Common
Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Windows Live Aanmelden - Help -
{9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program
Files\Common Files\Microsoft Shared\Windows
Live\WindowsLiveLogin.dll
O2 - BHO: Java Plug-In 2 SSV Helper -
{DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program
Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl -
{E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program
Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [XGIWatchDog] C:\Program
Files\XGI\XWatDog.exe
O4 - HKLM\..\Run: [RegServer] regserve.exe
O4 - HKLM\..\Run: [bCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [broadcom Wireless Manager UI]
C:\WINDOWS\system32\WLTRAY.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program
Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
-startup
O4 - HKLM\..\Run: [avast!]
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program
Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [bluetoothAuthenticationAgent]
rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher]
"C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program
Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE]
C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia
PC Suite 6\PCSync2.exe /NoDialog
O4 - HKCU\..\Run: [i8kfangui] C:\Program
Files\I8kfanGUI\I8kfanGUI.exe /startup
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE]
C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE]
C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE]
C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE]
C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: hamachi.lnk = C:\Program
Files\Hamachi\hamachi.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program
Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Windows Search.lnk = C:\Program
Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xporteren naar Microsoft
Excel -
res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) -
{e2e2dd38-d088-4134-82b7-f2ba38496583} -
C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 -
{e2e2dd38-d088-4134-82b7-f2ba38496583} -
C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program
Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program
Files\Messenger\msmsgs.exe
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED}
(Support.com Configuration Class) -
http://pccheckup.dellfix.com/sdccommon/download/tgctlcm.
cab
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B}
(SysProWmi Class) -
http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} (WMI
Class) -
http://support.euro.dell.com/systemprofiler/SysProExe.CA
B
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3}
(MUWebControl Class) -
http://www.update.microsoft.com/microsoftupdate/v6/V5Con
trols/en/x86/client/muweb_site.cab?1219177894484
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737}
(Windows Live Photo Upload Control) -
MsnPUpld.cab
O16 - DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} (Image
Uploader Control) -
http://cache.hyves-static.net/statics/Aurigma/ImageUploa
der4.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9}
(Performance Viewer Activex Control) -
https://secure.logmein.com/activex/ractrl.cab?lmi=100
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) -
ALWIL Software - C:\Program Files\Alwil
Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software -
C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software -
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software -
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: dev5_ap1 - Unknown owner -
C:\phpdev5\apache\Apache.exe
O23 - Service: Java Quick Starter
(JavaQuickStarterService) - Sun Microsystems, Inc. -
C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: SiSoftware Deployment Agent Service
(SandraAgentSrv) - SiSoftware - C:\Program
Files\SiSoftware\SiSoftware Sandra Lite
2009.SP3c\RpcAgentSrv.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program
Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Dell Wireless WLAN Tray Service
(wltrysvc) - Unknown owner -
C:\WINDOWS\System32\WLTRYSVC.EXE
--
End of file - 7819 bytes
-
Ik heb een Dell inspairon 5160 laptop.
eigelijk al veel te lang is deze erg traag.
zelfs bij het intikken van text blijft de computer regelmatig even hangen.
ik heb ccleaner gedraaid en mijn scanner is van avast.
defragmentatie, de meeste hardware drivers geupdatetteteted.
oude software verwijderd enz
moet xp er opnieuw op of kan het anders.
ik heb de orginele xp schijf, maar dan moeten alle updates er ook opnieuw op sp1 2 en 3 enz.
ik heb hier vaak via hyjack of zo iets gezien, kan iemand mij opweg helpen????xD
ik hoop dat onderstaande labels of trackbacks niet belangrijk zijn ik weet niet wat het zijn en wat er mee moet.
Gert-Willem
traaaaaag
in Archief Windows Algemeen
Geplaatst:
het lijk idd veel sneller te gaan.
een filmpje kan ik de eerste 2 min gewoon bekijken, daar na nog wel veel schokken maar toch sneller. je ziet dat het laden wel snel genoeg gaat maar het afspelen schokt toch.
hardware versnelling op verschillende standen gezet, maakt niet veel uit.
kleurdiepte 16 bit en prestaties staat op beste prestaties.
ik hoop dat je nog wat tips hebt want dit is al veel beter.
Gert-Willem