Ga naar inhoud

janreumers

Lid
  • Items

    17
  • Registratiedatum

  • Laatst bezocht

Berichten die geplaatst zijn door janreumers

  1. hier de malware:

    Malwarebytes' Anti-Malware 1.51.1.1800

    www.malwarebytes.org

    Databaseversie: 7613

    Windows 6.1.7600

    Internet Explorer 8.0.7600.16385

    30/08/2011 20:50:15

    mbam-log-2011-08-30 (20-50-15).txt

    Scantype: Snelle scan

    Objecten gescand: 163814

    Verstreken tijd: 5 minuut/minuten, 40 seconde(n)

    Geheugenprocessen geïnfecteerd: 0

    Geheugenmodulen geïnfecteerd: 0

    Registersleutels geïnfecteerd: 0

    Registerwaarden geïnfecteerd: 0

    Registerdata geïnfecteerd: 0

    Mappen geïnfecteerd: 1

    Bestanden geïnfecteerd: 33

    Geheugenprocessen geïnfecteerd:

    (Geen kwaadaardige objecten gedetecteerd)

    Geheugenmodulen geïnfecteerd:

    (Geen kwaadaardige objecten gedetecteerd)

    Registersleutels geïnfecteerd:

    (Geen kwaadaardige objecten gedetecteerd)

    Registerwaarden geïnfecteerd:

    (Geen kwaadaardige objecten gedetecteerd)

    Registerdata geïnfecteerd:

    (Geen kwaadaardige objecten gedetecteerd)

    Mappen geïnfecteerd:

    c:\Users\kustershof\AppData\Roaming\microsoft\Windows\start menu\Programs\zentom system guard (Rogue.ZentomSystemGuard) -> Quarantined and deleted successfully.

    Bestanden geïnfecteerd:

    c:\Users\kustershof\AppData\Local\Temp\setup488390868.exe (Trojan.Agent) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Local\Temp\xsnomeracw.exe (Trojan.Hiloti) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Local\Temp\err.log7094488 (Trojan.FakeAlert) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Local\Temp\F7BB.tmp (Trojan.Agent) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Local\Temp\FY77C0.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Local\Temp\FY7975.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Local\Temp\FY80B3.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Local\Temp\FYB079.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Local\Temp\FYD789.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Local\Temp\setup3137163792.exe (Trojan.Agent) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Local\Temp\setup3457613616.exe (Trojan.Agent) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Local\Temp\setup378715892.exe (Trojan.Agent) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Local\Temp\setup3985758084.exe (Trojan.Agent) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Local\Temp\setup4119452784.exe (Trojan.Agent) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Local\Temp\setup512368672.exe (Trojan.Agent) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Local\Temp\setup826359932.exe (Trojan.Agent) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Local\Temp\setup934102256.exe (Trojan.Agent) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Local\Temp\setup187596648.exe (Trojan.Agent) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Local\Temp\setup2160591272.exe (Trojan.Agent) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Local\Temp\setup2371125264.exe (Trojan.Agent) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Local\Temp\setup26824848.exe (Trojan.Agent) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Local\Temp\setup2891802316.exe (Trojan.Agent) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Local\Temp\setup2999500440.exe (Trojan.Agent) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Local\Temp\setup1064645356.exe (Trojan.Agent) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Local\Temp\setup1141443012.exe (Trojan.Agent) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Local\Temp\setup1309864056.exe (Trojan.Agent) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Local\Temp\setup1321170556.exe (Trojan.Agent) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Local\Temp\setup1450676200.exe (Trojan.Agent) -> Quarantined and deleted successfully.

    c:\Users\kustershof\local settings\temporary internet files\Content.IE5\DOWXGVQ7\lak70defin[1].exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

    c:\Users\kustershof\Desktop\zentom system guard.lnk (Rogue.ZentomSystemGuard) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Roaming\microsoft\internet explorer\quick launch\zentom system guard.lnk (Rogue.ZentomSystemGuard) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Roaming\microsoft\Windows\start menu\Programs\zentom system guard\zentom system guard.lnk (Rogue.ZentomSystemGuard) -> Quarantined and deleted successfully.

    c:\Users\kustershof\AppData\Roaming\microsoft\Windows\start menu\Programs\zentom system guard\uninstall.lnk (Rogue.ZentomSystemGuard) -> Quarantined and deleted successfully.

    en dit is de hijacthis:

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 20:53:43, on 30/08/2011

    Platform: Windows 7 (WinNT 6.00.3504)

    MSIE: Internet Explorer v8.00 (8.00.7600.16839)

    Boot mode: Normal

    Running processes:

    C:\Windows\system32\Dwm.exe

    C:\Windows\Explorer.EXE

    C:\Windows\system32\taskhost.exe

    C:\Program Files\Realtek\Audio\HDA\RtDCpl.exe

    C:\Windows\System32\hkcmd.exe

    C:\Windows\System32\igfxpers.exe

    C:\Program Files\Wave Systems Corp\Services Manager\DocMgr\bin\WavXDocMgr.exe

    C:\Program Files\Dell\Dell ControlPoint\Dell.ControlPoint.exe

    C:\Program Files\Dell\Dell ControlPoint\Security Manager\BcmDeviceAndTaskStatusService.exe

    C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe

    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

    C:\Program Files\AClient\Bin\XCDiffCache.exe

    C:\Windows\system32\igfxsrvc.exe

    C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe

    C:\Program Files\AVAST Software\Avast\AvastUI.exe

    C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

    C:\Program Files\Windows Live\Messenger\msnmsgr.exe

    C:\PROGRA~1\AClient\Bin\XCGSTask.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Windows\system32\Macromed\Flash\FlashUtil10d.exe

    C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

    C:\Windows\system32\taskeng.exe

    C:\Windows\system32\DllHost.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Dell | MSN

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.kbc.be/IPA/D9e01/

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

    O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll

    O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

    O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)

    O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtDCpl.exe

    O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe

    O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe

    O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe

    O4 - HKLM\..\Run: [ChangeTPMAuth] C:\Program Files\Wave Systems Corp\Common\ChangeTPMAuth.exe /T:NTRU12

    O4 - HKLM\..\Run: [WavXMgr] C:\Program Files\Wave Systems Corp\Services Manager\Docmgr\bin\WavXDocMgr.exe

    O4 - HKLM\..\Run: [DellControlPoint] "C:\Program Files\Dell\Dell ControlPoint\Dell.ControlPoint.exe"

    O4 - HKLM\..\Run: [uSCService] C:\Program Files\Dell\Dell ControlPoint\Security Manager\BcmDeviceAndTaskStatusService.exe

    O4 - HKLM\..\Run: [PDVDDXSrv] "C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe"

    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

    O4 - HKLM\..\Run: [Afaria Client File Differencing] C:\Program Files\AClient\Bin\XCDiffCache.exe

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui

    O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray

    O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript

    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

    O4 - Global Startup: Afaria Client Generic Scheduler.lnk = C:\Program Files\AClient\Bin\XCGSTask.exe

    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\Office12\EXCEL.EXE/3000

    O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll

    O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MIF5BA~1\Office12\ONBttnIE.dll

    O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MIF5BA~1\Office12\ONBttnIE.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MIF5BA~1\Office12\REFIEBAR.DLL

    O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll

    O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll

    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

    O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

    O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe

    O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

    O23 - Service: SecureStorageService - Wave Systems Corp. - C:\Program Files\Wave Systems Corp\Secure Storage Manager\SecureStorageService.exe

    O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

    O23 - Service: NTRU TSS v1.2.1.29 TCS (tcsd_win32.exe) - Unknown owner - C:\Program Files\NTRU Cryptosystems\NTRU TCG Software Stack\bin\tcsd_win32.exe

    O23 - Service: TdmService - Wave Systems Corp. - C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe

    --

    End of file - 8141 bytes

  2. voila hier is het:

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 20:05:41, on 30/08/2011

    Platform: Windows 7 (WinNT 6.00.3504)

    MSIE: Internet Explorer v8.00 (8.00.7600.16839)

    Boot mode: Normal

    Running processes:

    C:\Windows\system32\taskhost.exe

    C:\Windows\system32\Dwm.exe

    C:\Windows\Explorer.EXE

    C:\Program Files\Realtek\Audio\HDA\RtDCpl.exe

    C:\Windows\System32\igfxpers.exe

    C:\Program Files\Wave Systems Corp\Services Manager\DocMgr\bin\WavXDocMgr.exe

    C:\Program Files\Dell\Dell ControlPoint\Dell.ControlPoint.exe

    C:\Program Files\Dell\Dell ControlPoint\Security Manager\BcmDeviceAndTaskStatusService.exe

    C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe

    C:\Windows\system32\igfxsrvc.exe

    C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe

    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

    C:\Program Files\AClient\Bin\XCDiffCache.exe

    C:\Program Files\Windows Live\Messenger\msnmsgr.exe

    C:\Windows\System32\rundll32.exe

    C:\Users\Kustershof\AppData\Roaming\84742E4B70A7570743392D27590D2C04\mllsic70nb.exe

    C:\PROGRA~1\AClient\Bin\XCGSTask.exe

    C:\Windows\system32\wuauclt.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Windows\system32\Macromed\Flash\FlashUtil10d.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Dell | MSN

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.kbc.be/IPA/D9e01/

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

    O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll

    O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

    O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)

    O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtDCpl.exe

    O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe

    O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe

    O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe

    O4 - HKLM\..\Run: [ChangeTPMAuth] C:\Program Files\Wave Systems Corp\Common\ChangeTPMAuth.exe /T:NTRU12

    O4 - HKLM\..\Run: [WavXMgr] C:\Program Files\Wave Systems Corp\Services Manager\Docmgr\bin\WavXDocMgr.exe

    O4 - HKLM\..\Run: [DellControlPoint] "C:\Program Files\Dell\Dell ControlPoint\Dell.ControlPoint.exe"

    O4 - HKLM\..\Run: [uSCService] C:\Program Files\Dell\Dell ControlPoint\Security Manager\BcmDeviceAndTaskStatusService.exe

    O4 - HKLM\..\Run: [ufSeAgnt.exe] "c:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe"

    O4 - HKLM\..\Run: [PDVDDXSrv] "C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe"

    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

    O4 - HKLM\..\Run: [Afaria Client File Differencing] C:\Program Files\AClient\Bin\XCDiffCache.exe

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

    O4 - HKCU\..\Run: [Greqipu] rundll32.exe "C:\Users\Kustershof\AppData\Local\wmsCDe.dll",Startup

    O4 - HKCU\..\Run: [mllsic70nb.exe] "C:\Users\Kustershof\AppData\Roaming\84742E4B70A7570743392D27590D2C04\mllsic70nb.exe"

    O4 - HKCU\..\RunOnce: [*authpropfile.exe] "C:\Users\Kustershof\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\authpropfile.exe"

    O4 - Startup: authpropfile.exe

    O4 - Startup: Zentom System Guard.lnk = Kustershof\AppData\Roaming\84742E4B70A7570743392D27590D2C04\mllsic70nb.exe

    O4 - Global Startup: Afaria Client Generic Scheduler.lnk = C:\Program Files\AClient\Bin\XCGSTask.exe

    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\Office12\EXCEL.EXE/3000

    O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll

    O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MIF5BA~1\Office12\ONBttnIE.dll

    O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MIF5BA~1\Office12\ONBttnIE.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MIF5BA~1\Office12\REFIEBAR.DLL

    O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll

    O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll

    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

    O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

    O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: SecureStorageService - Wave Systems Corp. - C:\Program Files\Wave Systems Corp\Secure Storage Manager\SecureStorageService.exe

    O23 - Service: Trend Micro Centrale besturing (SfCtlCom) - Trend Micro Inc. - c:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe

    O23 - Service: SpyHunter 4 Service - Enigma Software Group USA, LLC. - C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE

    O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

    O23 - Service: NTRU TSS v1.2.1.29 TCS (tcsd_win32.exe) - Unknown owner - C:\Program Files\NTRU Cryptosystems\NTRU TCG Software Stack\bin\tcsd_win32.exe

    O23 - Service: TdmService - Wave Systems Corp. - C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe

    O23 - Service: Trend Micro Unauthorized Change Prevention Service (TMBMServer) - Trend Micro Inc. - c:\Program Files\Trend Micro\BM\TMBMSRV.exe

    O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro Inc. - c:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe

    O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - c:\Program Files\Trend Micro\Internet Security\TmProxy.exe

    --

    End of file - 8621 bytes

  3. cd ingestoken ondertussen, kom in een menu van ubuntu. Wat moet ik hier kiezen?

    volgende opties beschikbaar:

    ubuntu uitproberen zonder te installeren

    ubuntu installeren

    cdrom op fouten controleren

    geheugentest uitvoeren

    opstarten vanaf de eerste hardeschijf

    heb de eerste geprobeerd maar geeftvenstertje met melding ''fout bij in en uitvoer'' error reading boot cd

    ik kan dan enkel herstarten en dan kom ik terug in het menu van ubuntu uit :-)

  4. in de boot volgorde staat de dvd speler als 1ste ingesteld

    Ik heb de ubuntu bestand=iso zeker.. op een cd geschreven.

    Of moet dit op een speciale manier.

    ---------- Post toegevoegd om 23:03 ---------- Vorige post was om 22:57 ----------

    ik heb dit gewoon in windows met de standaard tool geschreven

  5. Ik heb ubuntu nu in de pc gestoken en windows starte op

    nu is het zo dat de schijfcontrole opsprong nog vooraleer ik iets kon doen.

    Ik heb zelf niets moeten selecteren of doen.

    Na de schijfcontrole die een aantal bestanden aanpaste starte de pc opnieuw op. Na het laadscherm van windows blijft het scherm zwart en gebeurt er niks meer. Wat kan ik nog doen?

  6. Als je *.chk bestanden ziet of 001 bestanden ziet dan mag je zeker zijn dat de harddisk aan het verslijten is. Dus onmiddelijk backup maken. (Dat zijn verborgen bestanden)

    Zeker als het een pak langer duurt eer je op de desktop komt.

    Die bestanden vind je dan gewoon terug op de c schijf?? Dan kan ik daar in vervolg op letten.

    ---------- Post toegevoegd om 21:45 ---------- Vorige post was om 21:31 ----------

    Als je nog in windows geraakt moet je zo snel mogelijk alles wat van belang is op een stick zetten zoals stegisoft zegt.

    Geraak je niet meer in windows dan is een Linux Live cd aangewezen om dit alsnog te kunnen uitvoeren.

    Ik geraak niet meer in windows.

    Wat is die linux cd? kan ik dat ergens downloaden? of moet je dit kopen?

  7. Beste,

    We hebben hier een pc met windows Xp. Deze gaf afgelopen weken het probleem om herhaaldelijk opnieuw op te starten nog vooraleer de pc goed en wel opgestart was. Nu is het zover gekomen dat de pc niet meer opstart. Er was namelijk een bestand beschadigd. Ik heb dan de originele windows cd gebruikt voor het repareren van de pc. ZOnder resultaat!!

    Via de cd heb ik dan eens geprobeerd om de hardeschijf te controleren. En die geeft aan dat er 1 of meerdere onherstelbare fouten zijn. Ik heb dan exit gedaan om de pc nog eens opnieuw normaal op te starten en nu krijg ik een schijfleesfout. Ik moet zoals vermeld de combinatie control+alt+delete gebruiken om opnieuw op te starten maar dit lost niets op. We komen in hetzelde scherm terecht!!! Wie kan ons helpen??

    Alvast bedankt!!

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.