Kleinesharon

Lukt het om voordat hij afsluit in menu te komen? Zo ja zet je computer een paar dagen terug voordat het fout begon.

Hallo,

Ik ben al een tijdje bezig om the sims deluxe weer opnieuw op de computer te krijgen. Dit ging niet zonder problemen maar hij staat er weer op. (na talloze keren te installeren en deinstalleren). Nu heb ik het volgende probleem. Hij wil niet opstarten en ik krijg gelijk een foutmelding van windows (ik kan dan een rapport verzenden).

Ik had registry booster geinstalleerd (bleek demo te zijn) en er stond dat er meer dan 100 fouten op mijn computer waren.

Omdat dit een demo was kon ik er maar 4 herstellen en heb het verwijderd.

Nu heb ik ComboFix geinstalleerd en deze heeft een scan gemaakt. Dit kwam eruit:

ComboFix 10-08-15.02 - Compaq_Eigenaar 16-08-2010 12:44:11.1.1 - x86

Microsoft Windows XP Home Edition 5.1.2600.2.1252.31.1043.18.447.122 [GMT 2:00]

Gestart vanuit: c:\documents and settings\Compaq_Eigenaar\Bureaublad\ComboFix.exe

AV: Norton Internet Security 2006 *On-access scanning enabled* (Outdated) {E10A9785-9598-4754-B552-92431C1C35F8}

FW: Norton Internet Security 2006 *disabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}

FW: Norton Internet Worm Protection *disabled* {990F9400-4CEE-43EA-A83A-D013ADD8EA6E}

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\documents and settings\Compaq_Eigenaar\Onlangs geopend\Thumbs.db

C:\Install.exe

D:\Autorun.inf

.

(((((((((((((((((((( Bestanden Gemaakt van 2010-07-16 to 2010-08-16 ))))))))))))))))))))))))))))))

.

2010-08-16 10:35 . 2010-08-16 10:35 -------- d-sh--w- c:\documents and settings\Compaq_Eigenaar\PrivacIE

2010-08-16 10:29 . 2010-05-06 10:37 12800 ------w- c:\windows\system32\dllcache\xpshims.dll

2010-08-16 10:29 . 2010-05-06 10:36 599040 ------w- c:\windows\system32\dllcache\msfeeds.dll

2010-08-16 10:29 . 2010-05-06 10:36 55296 ------w- c:\windows\system32\dllcache\msfeedsbs.dll

2010-08-16 10:29 . 2010-05-06 10:36 1985536 ------w- c:\windows\system32\dllcache\iertutil.dll

2010-08-16 10:29 . 2010-05-06 10:36 247808 ------w- c:\windows\system32\dllcache\ieproxy.dll

2010-08-16 10:29 . 2010-05-06 10:36 11076096 ------w- c:\windows\system32\dllcache\ieframe.dll

2010-08-16 10:29 . 2010-05-06 10:36 743424 ------w- c:\windows\system32\dllcache\iedvtool.dll

2010-08-16 10:26 . 2010-08-16 10:28 -------- d-----w- c:\windows\system32\nl-NL

2010-08-16 09:58 . 2010-08-16 09:58 -------- d-s---w- c:\documents and settings\LocalService\UserData

2010-08-16 09:55 . 2010-08-16 09:55 -------- d-----w- c:\documents and settings\LocalService\Application Data\McAfee

2010-08-10 13:35 . 2010-08-10 13:35 -------- d-----w- c:\documents and settings\All Users\Application Data\McAfee Security Scan

2010-08-10 13:35 . 2010-08-10 13:35 -------- d-----w- c:\documents and settings\All Users\Application Data\McAfee

2010-08-10 13:35 . 2010-08-16 09:55 -------- d-----w- c:\program files\McAfee Security Scan

2010-08-10 13:30 . 2010-08-10 13:30 -------- d-----w- c:\documents and settings\All Users\Uniblue

2010-08-10 13:01 . 2010-08-10 13:01 -------- d-----w- c:\documents and settings\Compaq_Eigenaar\Application Data\Uniblue

2010-08-10 13:01 . 2010-08-16 09:53 -------- d-----w- c:\program files\Uniblue

2010-08-10 13:01 . 2010-08-10 13:01 -------- d-----w- c:\documents and settings\Compaq_Eigenaar\Application Data\vlc

2010-08-10 13:01 . 2010-08-10 13:01 -------- d-----w- c:\program files\Flash Player

2010-08-10 12:44 . 2010-08-10 12:44 -------- d-----w- c:\program files\Noel Danjou

2010-08-10 10:41 . 2010-08-10 10:41 -------- d-----w- c:\program files\EA GAMES

2010-08-10 10:41 . 2004-08-18 08:34 442368 ----a-r- c:\windows\system32\vp6vfw.dll

2010-08-10 08:31 . 2010-08-10 08:48 -------- d-----w- c:\program files\Maxis

2010-08-10 08:28 . 2010-08-10 08:28 -------- d-----w- c:\program files\VS Revo Group

2010-08-03 16:38 . 2007-07-19 16:14 3727720 ----a-w- c:\windows\system32\d3dx9_35.dll

2010-08-03 16:33 . 2010-08-03 16:33 -------- d-----w- c:\windows\Logs

2010-07-17 15:46 . 2010-07-17 16:33 -------- d-----w- c:\windows\system32\CatRoot_bak

2010-07-17 15:45 . 2009-11-27 17:35 17920 ------w- c:\windows\system32\dllcache\msyuv.dll

2010-07-17 15:44 . 2010-02-24 12:31 454016 ------w- c:\windows\system32\dllcache\mrxsmb.sys

2010-07-17 15:42 . 2010-02-16 19:35 2062720 ------w- c:\windows\system32\dllcache\ntkrnlpa.exe

2010-07-17 15:42 . 2010-02-16 19:35 2021376 ------w- c:\windows\system32\dllcache\ntkrpamp.exe

2010-07-17 15:42 . 2010-02-16 19:35 2185728 ------w- c:\windows\system32\dllcache\ntoskrnl.exe

2010-07-17 15:42 . 2010-02-16 19:35 2141696 ------w- c:\windows\system32\dllcache\ntkrnlmp.exe

2010-07-17 15:38 . 2008-06-14 18:00 272640 ------w- c:\windows\system32\drivers\bthport.sys

2010-07-17 15:38 . 2008-06-14 18:00 272640 ------w- c:\windows\system32\dllcache\bthport.sys

2010-07-17 15:23 . 2009-11-27 16:41 8704 ------w- c:\windows\system32\dllcache\tsbyuv.dll

2010-07-17 15:23 . 2009-11-27 16:41 48128 ------w- c:\windows\system32\dllcache\iyuv_32.dll

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2010-08-16 10:34 . 2006-10-07 05:39 -------- d-----w- c:\program files\Common Files\Symantec Shared

2010-08-16 10:10 . 2004-12-03 10:15 70546 ----a-w- c:\windows\system32\perfc013.dat

2010-08-16 10:10 . 2004-12-03 10:15 443836 ----a-w- c:\windows\system32\perfh013.dat

2010-08-16 09:51 . 2008-06-14 07:05 -------- d-----w- c:\documents and settings\All Users\Application Data\SweetIM

2010-08-10 13:26 . 2010-08-10 13:25 5276232 ----a-w- c:\documents and settings\Compaq_Eigenaar\Application Data\Uniblue\SpeedUpMyPC\_temp\sump.exe

2010-08-10 13:26 . 2010-08-10 13:25 5268200 ----a-w- c:\documents and settings\Compaq_Eigenaar\Application Data\Uniblue\DriverScanner\_temp\driverscanner.exe

2010-08-03 17:48 . 2006-12-29 12:03 1505 ----a-w- c:\windows\eReg.dat

2010-08-03 13:39 . 2004-08-04 04:00 12400 ----a-w- c:\windows\system32\drivers\secdrv.sys

2010-08-01 12:00 . 2006-11-22 20:02 42120 ----a-w- c:\documents and settings\Compaq_Eigenaar\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2010-07-16 10:51 . 2010-06-24 16:46 -------- d-----w- c:\program files\Emerald Viewer

2010-07-16 10:01 . 2006-10-07 05:10 -------- d--h--w- c:\program files\InstallShield Installation Information

2010-07-16 08:58 . 2010-07-16 08:57 1820 --sha-r- c:\windows\system32\drivers\103C_HP_CPC_RJ761AA-ABH SR2029NL NL640_YC_0Pres_QCZH642_E64NLheREA2_48_IAsterope3_SECS_V1.0_B3.19_T060905_WXH2_L413_M448_J160_7Intel_8Celeron D_93.2_#061122_N10EC8139_Z_G10025A61_OHL-DT-ST DVDRRW GSA-H20L_DHSL06B6.MRK

2010-07-16 08:17 . 2009-11-11 16:56 -------- d-----w- c:\documents and settings\Compaq_Eigenaar\Application Data\Skype

2010-07-16 08:14 . 2009-11-03 16:56 -------- d-----w- c:\documents and settings\Compaq_Eigenaar\Application Data\skypePM

2010-06-14 14:30 . 2004-08-04 04:00 743936 ----a-w- c:\windows\pchealth\helpctr\binaries\helpsvc.exe

2010-06-02 02:55 . 2010-08-03 16:39 74072 ----a-w- c:\windows\system32\XAPOFX1_5.dll

2010-06-02 02:55 . 2010-08-03 16:39 527192 ----a-w- c:\windows\system32\XAudio2_7.dll

2010-06-02 02:55 . 2010-08-03 16:39 239960 ----a-w- c:\windows\system32\xactengine3_7.dll

2010-05-26 09:41 . 2010-08-03 16:39 2106216 ----a-w- c:\windows\system32\D3DCompiler_43.dll

2010-05-26 09:41 . 2010-08-03 16:39 248672 ----a-w- c:\windows\system32\d3dx11_43.dll

2010-05-26 09:41 . 2010-08-03 16:39 1868128 ----a-w- c:\windows\system32\d3dcsx_43.dll

2010-05-26 09:41 . 2010-08-03 16:39 470880 ----a-w- c:\windows\system32\d3dx10_43.dll

2010-05-26 09:41 . 2010-08-03 16:39 1998168 ----a-w- c:\windows\system32\D3DX9_43.dll

2006-11-25 04:02 . 2006-11-24 20:02 22 --sha-w- c:\windows\SMINST\HPCD.sys

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"DynSite"="c:\program files\Noel Danjou\DynSite\DynSite.exe" [2008-09-25 1342072]

"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2004-10-13 1694208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RTHDCPL"="RTHDCPL.EXE" [2006-06-14 16239616]

"PCMService"="c:\program files\CyberLink\PowerCinema\PCMService.exe" [2006-05-10 147456]

"Recguard"="c:\windows\SMINST\RECGUARD.EXE" [2005-07-22 237568]

"ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2005-09-16 52848]

"HPBootOp"="c:\program files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" [2006-02-15 249856]

"HP Software Update"="c:\program files\HP\HP Software Update\HPwuSchd2.exe" [2005-02-17 49152]

c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\

McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536]

Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]

c:\documents and settings\Default User\Menu Start\Programma's\Opstarten\

Pin.lnk - c:\hp\bin\CLOAKER.EXE [2006-10-7 27136]

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]

"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]

"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"c:\\Program Files\\CyberLink\\PowerCinema\\PowerCinema.exe"=

"c:\\Program Files\\CyberLink\\PowerCinema\\PCMService.exe"=

"c:\\Program Files\\Emerald Viewer\\SLVoice.exe"=

S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [15-1-2010 14:49 227232]

--- Andere Services/Drivers In Geheugen ---

*NewlyCreated* - COMHOST

.

Inhoud van de 'Gedeelde Taken' map

2010-08-03 c:\windows\Tasks\Norton Security Scan for Compaq_Eigenaar.job

- c:\program files\Norton Security Scan\Norton Security Scan\Engine\2.7.3.34\Nss.exe [2010-05-19 03:58]

2006-10-07 c:\windows\Tasks\Symantec NetDetect.job

- c:\program files\Symantec\LiveUpdate\NDETECT.EXE [2006-10-07 19:15]

2010-08-16 c:\windows\Tasks\User_Feed_Synchronization-{556E3B36-7784-4CFA-89ED-6970395095C1}.job

- c:\windows\system32\msfeedssync.exe [2009-03-08 02:31]

.

.

------- Bijkomende Scan -------

.

uStart Page = hxxp://www.google.nl/

uDefault_Search_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=NL_NL&c=64&bd=PRESARIO&pf=desktop

mSearch Bar = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=NL_NL&c=64&bd=PRESARIO&pf=desktop

IE: &Google Zoeken - c:\program files\Google\GoogleToolbar1.dll/cmsearch.html

IE: &Woord vertalen in het Nederlands - c:\program files\Google\GoogleToolbar1.dll/cmwordtrans.html

IE: Gelijkwaardige pagina's - c:\program files\Google\GoogleToolbar1.dll/cmsimilar.html

IE: Koppelingspagina's - c:\program files\Google\GoogleToolbar1.dll/cmbacklinks.html

IE: Opgeslagen momentopname van de pagina - c:\program files\Google\GoogleToolbar1.dll/cmcache.html

.

- - - - ORPHANS VERWIJDERD - - - -

HKCU-Run-DriverScanner - c:\program files\Uniblue\DriverScanner\launcher.exe

HKCU-Run-SpeedUpMyPC - c:\program files\Uniblue\SpeedUpMyPC\launcher.exe

HKLM-Run-PCDrProfiler - (no file)

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2010-08-16 12:57

Windows 5.1.2600 Service Pack 2 NTFS

scannen van verborgen processen ...

scannen van verborgen autostart items ...

scannen van verborgen bestanden ...

Scan succesvol afgerond

verborgen bestanden: 0

**************************************************************************

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]

"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]

@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]

@Denied: (A 2) (Everyone)

@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

--------------------- DLLs Geladen Onder Lopende Processen ---------------------

- - - - - - - > 'winlogon.exe'(588)

c:\windows\system32\Ati2evxx.dll

.

Voltooingstijd: 2010-08-16 13:04:48

ComboFix-quarantined-files.txt 2010-08-16 11:04

Pre-Run: 132.155.748.352 bytes beschikbaar

Post-Run: 132.470.702.080 bytes beschikbaar

- - End Of File - - 25405343875F3A7928268980D72353B0

Graag wil ik weten wat ik nu moet doen en waarom de cd maar niet wil opstarten. The sims 2 heeft hetzelfde probleem. Andere cd's zoals met foto's of muziek doen het wel.

Met vriendelijke groet,

Sharon