Canon Easy Photoprint EX cnezmain.exe toepassingsfout

IE8 · 6 februari 2012

Een handig programmaatje van Canon dat ik sinds jaren gebruik om foto's af te drukken geüpdated naar de nieuwste versie met als gevolg dat het niet meer werkt.

Wat ik al ondernomen heb:

- Canon gecontacteerd: dit is een Microsoft fout

- Microsoft gecontacteerd: dit is een Canon fout

- Programma compleet verwijderd en opnieuw geïnstalleerd: zelfde foutmelding

- Programma compleet verwijderd en oudere versies opnieuw geïnstalleerd: zelfde foutmelding

- Internet geraadpleegd: vaak voorkomende fout, maar nergens oplossing gevonden

- PC gescand met allerlei malware/virusscanners: geen enkele infectie te vinden

- Register schoon gemaakt: nog steeds dezelfde foutmelding

- Systeemherstel: geen beterschap

- Uitvoeren van sfc /scannow: nog steeds dezelfde foutmelding

- Virusbeveiligingen verwijderd, opnieuw gedownload en geïnstalleerd: zonder resultaat

- cnezmain.exe van op een andere pc gekopieerd: geen oplossing

- In veilige modus geïnstalleerd: nog steeds dezelfde foutmelding

- chkdsk uitgevoerd: geen verbetering

- nieuwste printerdriver geïnstalleerd: nog steeds hetzelfde

- alle registersleutels met cnezmain.exe verwijderd en programma opnieuw geïnstalleerd

- Windows XP repair uitgevoerd met originele installatie-cd: geen beterschap

Iemand soms een idee wat ik nog zou kunnen ondernemen ?

15 februari 2012 aangepast door IE8
aanvulling ondernomen acties

kape · 9 februari 2012

We zullen eerst eens nagaan of malware of virussen de oorzaak zijn van je probleem.

1. Download HijackThis.

Klik bij "HijackThis Downloads" op "Installer".

Bestand HijackThis.msi opslaan. Daarna kiezen voor "uitvoeren".

Hijackthis wordt nu op je PC geïnstalleerd, een snelkoppeling wordt op je bureaublad geplaatst.

Als je geen netwerkverbinding meer hebt, kan je de download doen met een andere pc en het bestand met een usb stick overbrengen

Als je enkel nog in veilige modus kan werken, moet je de executable downloaden.

Sla deze op in een nieuwe map op de C schijf (bvb C:\hijackthis) en start hijackthis dan vanaf deze map.

De logjes kan je dan ook in die map terugvinden.

2. Klik op de snelkoppeling om HijackThis te starten. (lees eerst de rode tekst hieronder!)

Klik ofwel op "Do a systemscan and save a logfile", ofwel eerst op "Scan" en dan op "Savelog".

Er opent een kladblokvenster, hou gelijktijdig de CTRL en A-toets ingedrukt, nu is alles geselecteerd. Hou gelijktijdig de CTRL en C-toets ingedrukt, nu is alles gekopieerd. Plak nu het HJT logje in je bericht door CTRL en V-toets.

Krijg je een melding ""For some reason your system denied writing to the Host file ....", klik dan gewoon door op de OK-toets.

Let op : Windows Vista & 7 gebruikers dienen HijackThis als “administrator” uit te voeren via rechtermuisknop “als administrator uitvoeren". Indien dit via de snelkoppeling niet lukt voer je HijackThis als administrator uit in de volgende map : C:\Program Files\Trend Micro\HiJackThis of C:\Program Files (x86)\Trend Micro\HiJackThis. (Bekijk hier de afbeelding ---> Klik hier)

3. Na het plaatsen van je logje wordt dit door een expert (Kape of Kweezie Wabbit) nagekeken en begeleidt hij jou verder door het ganse proces.

Tip!

Wil je in woord en beeld weten hoe je een logje met HijackThis maakt en plaatst op het forum, klik dan HIER.

IE8 · 9 februari 2012

Bedankt dat toch iemand hieraan aandacht wil besteden terwijl Microsoft en Canon doen alsof hun neus bloedt.

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 9:25:42, on 9/02/2012

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe

C:\Program Files\Zentimo\ZentimoService.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Windows Defender\MsMpEng.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\AVAST Software\Avast\AvastSvc.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe

C:\Program Files\AVAST Software\Avast\avastUI.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe

C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe

C:\Program Files\Common Files\ArcSoft\esinter\Bin\eservutil.exe

C:\xampp\apache\bin\apache.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\Microsoft\BingBar\SeaPort.EXE

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\EASEUS\Todo Backup\bin\Agent.exe

C:\Program Files\Java\jre7\bin\jqs.exe

C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\Program Files\CDBurnerXP\NMSAccessU.exe

C:\WINDOWS\System32\svchost.exe

C:\xampp\apache\bin\apache.exe

C:\WINDOWS\system32\msiexec.exe

C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = JAVASCRIPTs KNIPPEN EN PLAKKEN

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll

O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll

O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)

O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [Advanced SystemCare 5] "C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe" /AutoStart

O4 - HKCU\..\Run: [AROReminder] C:\Program Files\ARO 2012\aro.exe -rem

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Lokale service')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Netwerkservice')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\WINDOWS\system32\shdocvw.dll

O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\WINDOWS\system32\shdocvw.dll

O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O16 - DPF: Garmin Communicator Plug-In - https://static.garmincdn.com/gcp/ie/2.9.3.0/GarminAxControl.CAB

O16 - DPF: {05317530-B882-449D-9421-18D94FA3ED34} (OSInfo Control) - http://w3.sis.com/ocis/OSInfo.cab

O16 - DPF: {16095503-786F-4097-AED6-5D567A26D760} (SiS_OCX Control) - http://w3.sis.com/ocis/SiSAutodetectNT.cab

O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://belgacom.extrafilm.be/ImageUploader5.cab

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1268993310125

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1268993357093

O16 - DPF: {A27C56D2-3F58-4ABB-AA31-1168EDA6636F} (PCMaticVer Class) - http://utilities.pcpitstop.com/Nirvana/controls/pcmatic.cab

O16 - DPF: {B60CEFE7-2DD0-4B78-951A-509D951DB1F0} (ExtraFilm Uploader Control) - http://belgacom.extrafilm.be/ExtraFilmUploader6.cab

O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe

O23 - Service: ArcSoft Exchange Service (ADExchange) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\esinter\Bin\eservutil.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: Advanced SystemCare Service 5 (AdvancedSystemCareService5) - IObit - C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe

O23 - Service: Apache2.2 - Apache Software Foundation - C:\xampp\apache\bin\apache.exe

O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe

O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Defragmentation-Service (DfSdkS) - mst software GmbH, Germany - C:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe

O23 - Service: EASEUS Agent - CHENGDU YIWO Tech Development Co., Ltd - C:\Program Files\EASEUS\Todo Backup\bin\Agent.exe

O23 - Service: FileZilla Server FTP server (FileZilla Server) - FileZilla Project - c:\xampp\FileZillaFTP\FileZillaServer.exe

O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: IMF Service (IMFservice) - IObit - C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe

O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe

O23 - Service: XAMPP Service (XAMPP) - Unknown owner - C:\xampp\service.exe

O23 - Service: Zentimo Assistant (ZentimoService) - Unknown owner - C:\Program Files\Zentimo\ZentimoService.exe

--

End of file - 9256 bytes

kape · 9 februari 2012

Start Hijackthis op. Selecteer “Scan”. Selecteer alleen de items die hieronder zijn genoemd:

O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)

O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present

Klik op 'Fix checked' om de items te verwijderen.

Let op : Windows Vista & 7 gebruikers dienen HijackThis als “administrator” uit te voeren via rechtermuisknop “als administrator uitvoeren". Indien dit via de snelkoppeling niet lukt voer je HijackThis als administrator uit in de volgende map : C:\Program Files\Trend Micro\HiJackThis of C:\Program Files (x86)\Trend Micro\HiJackThis.

Download ComboFix van één van deze locaties:

Link 1

Link 2

* BELANGRIJK !!! Sla ComboFix.exe op je Bureaublad op

1. Schakel alle antivirus- en antispywareprogramma's uit, want anders kunnen ze misschien conflicteren met ComboFix. Hier is een handleiding over hoe je ze kan uitschakelen:

Klik hier

Als het je niet lukt om ze uit te schakelen, ga dan gewoon door naar de volgende stap.

2. Dubbelklik op ComboFix.exe en volg de meldingen op het scherm.

3. ComboFix zal controleren of dat de Microsoft Windows Recovery Console reeds is geïnstalleerd.

**Let op: Als de Microsoft Windows Recovery Console al is geïnstalleerd, dan krijg je de volgende schermen niet te zien en zal ComboFix automatisch verder gaan met het scannen naar malware.

4. Volg de meldingen op het scherm om ComboFix de Microsoft Windows Recovery Console te laten downloaden en installeren.

Je krijgt de volgende melding te zien wanneer ComboFix de Microsoft Windows Recovery Console succesvol heeft geïnstalleerd:

Klik op Ja om verder te gaan met het scannen naar malware.

5. Wanneer ComboFix klaar is, zal het een logbestand voor je maken. Post de inhoud van dit logbestand (te vinden als C:\ComboFix.txt) in je volgende bericht, samen met een nieuw log van HijackThis.

IE8 · 9 februari 2012

ComboFix log:

ComboFix 12-02-09.01 - Administrator 09/02/2012 10:45:16.1.1 - x86

Microsoft Windows XP Professional 5.1.2600.3.1252.32.1043.18.959.544 [GMT 1:00]

Gestart vanuit: C:\Documents and Settings\Administrator\Bureaublad\ComboFix.exe

AV: avast! Internet Security *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

C:\Documents and Settings\Administrator\Application Data\.#

C:\Documents and Settings\Administrator\WINDOWS

C:\Documents and Settings\All Users\Application Data\TEMP

C:\WINDOWS\IsUn0413.exe

I:\AUTORUN.INF

((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

-------\Legacy_RKHIT

-------\Legacy_SSHNAS

-------\Service_RkHit

(((((((((((((((((((( Bestanden Gemaakt van 2012-01-09 to 2012-02-09 ))))))))))))))))))))))))))))))

2012-02-09 09:39:44 . 2012-02-09 09:39:44 -------- d-----w- C:\Documents and Settings\All Users\Favorieten

2012-02-09 08:24:19 . 2012-02-09 08:24:19 388096 ----a-r- C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

2012-02-09 08:24:17 . 2012-02-09 08:24:17 -------- d-----w- C:\Program Files\Trend Micro

2012-02-08 15:16:58 . 2012-02-08 15:17:09 -------- d-----w- C:\Program Files\Clone Terminator

2012-02-08 14:44:38 . 2012-02-08 14:44:38 -------- d-----w- C:\Documents and Settings\Administrator\Application Data\Sammsoft

2012-02-08 14:44:17 . 2012-02-08 14:44:22 -------- d-----w- C:\Program Files\ARO 2012

2012-02-08 14:05:03 . 2011-11-28 17:53:35 314456 ----a-w- C:\WINDOWS\system32\drivers\aswSP.sys

2012-02-08 14:05:03 . 2011-11-28 17:51:50 20568 ----a-w- C:\WINDOWS\system32\drivers\aswFsBlk.sys

2012-02-08 14:05:02 . 2011-11-28 17:52:19 34392 ----a-w- C:\WINDOWS\system32\drivers\aswRdr.sys

2012-02-08 14:05:01 . 2011-11-28 17:53:53 435032 ----a-w- C:\WINDOWS\system32\drivers\aswSnx.sys

2012-02-08 14:05:01 . 2011-11-28 17:52:16 52952 ----a-w- C:\WINDOWS\system32\drivers\aswTdi.sys

2012-02-08 14:05:01 . 2011-11-28 17:52:02 111320 ----a-w- C:\WINDOWS\system32\drivers\aswmon2.sys

2012-02-08 14:05:01 . 2011-11-28 17:51:59 105176 ----a-w- C:\WINDOWS\system32\drivers\aswmon.sys

2012-02-08 14:05:01 . 2011-11-28 17:48:49 30808 ----a-w- C:\WINDOWS\system32\drivers\aavmker4.sys

2012-02-08 14:04:43 . 2011-11-28 18:01:25 41184 ----a-w- C:\WINDOWS\avastSS.scr

2012-02-08 14:04:43 . 2011-11-28 18:01:23 199816 ----a-w- C:\WINDOWS\system32\aswBoot.exe

2012-02-08 14:04:30 . 2012-02-08 14:04:30 -------- d-----w- C:\Program Files\AVAST Software

2012-02-08 07:29:25 . 2012-01-06 04:19:30 6557240 ----a-w- C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\{72BFF177-D310-43A5-9E66-592C9D03FC2D}\mpengine.dll

2012-02-06 15:18:35 . 2008-04-14 17:02:48 116736 -c--a-w- C:\WINDOWS\system32\dllcache\xrxwiadr.dll

2012-02-06 15:18:34 . 2001-09-06 20:27:06 23040 -c--a-w- C:\WINDOWS\system32\dllcache\xrxwbtmp.dll

2012-02-06 15:18:33 . 2008-04-14 17:02:48 18944 -c--a-w- C:\WINDOWS\system32\dllcache\xrxscnui.dll

2012-02-06 15:18:32 . 2001-09-06 20:27:30 4608 -c--a-w- C:\WINDOWS\system32\dllcache\xrxflnch.exe

2012-02-06 15:18:32 . 2001-09-06 20:27:30 27648 -c--a-w- C:\WINDOWS\system32\dllcache\xrxftplt.exe

2012-02-06 15:18:30 . 2001-09-06 20:27:30 99865 -c--a-w- C:\WINDOWS\system32\dllcache\xlog.exe

2012-02-06 15:18:29 . 2001-08-17 19:11:14 16970 -c--a-w- C:\WINDOWS\system32\dllcache\xem336n5.sys

2012-02-06 15:18:27 . 2004-08-04 05:29:50 19455 -c--a-w- C:\WINDOWS\system32\dllcache\wvchntxx.sys

2012-02-06 15:18:22 . 2008-04-13 18:46:24 19200 -c--a-w- C:\WINDOWS\system32\dllcache\wstcodec.sys

2012-02-06 15:18:21 . 2004-08-04 05:29:48 12063 -c--a-w- C:\WINDOWS\system32\dllcache\wsiintxx.sys

2012-02-06 15:18:18 . 2008-04-14 17:02:46 8192 -c--a-w- C:\WINDOWS\system32\dllcache\wshirda.dll

2012-02-06 15:16:58 . 2001-08-17 20:28:14 604253 -c--a-w- C:\WINDOWS\system32\dllcache\vmodem.sys

2012-02-06 15:15:59 . 2008-04-13 18:40:50 149376 -c--a-w- C:\WINDOWS\system32\dllcache\tffsport.sys

2012-02-06 15:14:59 . 2001-08-17 19:51:00 58368 -c--a-w- C:\WINDOWS\system32\dllcache\smiminib.sys

2012-02-06 15:13:59 . 2008-04-13 18:40:48 43904 -c--a-w- C:\WINDOWS\system32\dllcache\sbp2port.sys

2012-02-06 15:12:58 . 2001-09-06 20:27:00 35328 -c--a-w- C:\WINDOWS\system32\dllcache\psisload.dll

2012-02-06 15:11:59 . 2001-09-06 20:26:40 123776 -c--a-w- C:\WINDOWS\system32\dllcache\nv3.dll

2012-02-06 15:10:59 . 2008-04-13 18:46:08 49024 -c--a-w- C:\WINDOWS\system32\dllcache\mstape.sys

2012-02-06 15:09:56 . 2001-09-06 17:48:34 165162 -c--a-w- C:\WINDOWS\system32\dllcache\mdgndis5.sys

2012-02-06 15:09:53 . 2001-08-17 20:52:50 7424 -c--a-w- C:\WINDOWS\system32\dllcache\mammoth.sys

2012-02-06 15:07:57 . 2001-09-06 20:26:54 8704 -c--a-w- C:\WINDOWS\system32\dllcache\kbdjpn.dll

2012-02-06 15:06:42 . 2001-09-06 20:26:54 372824 -c--a-w- C:\WINDOWS\system32\dllcache\iconf32.dll

2012-02-06 15:05:59 . 2001-09-06 20:26:52 13312 -c--a-w- C:\WINDOWS\system32\dllcache\hpsjmcro.dll

2012-02-06 15:02:18 . 2001-08-17 19:12:32 24618 -c--a-w- C:\WINDOWS\system32\dllcache\fa410nd5.sys

2012-02-06 15:01:59 . 2001-08-17 19:19:38 37120 -c--a-w- C:\WINDOWS\system32\dllcache\es1370mp.sys

2012-02-06 15:00:59 . 2001-09-06 20:26:50 422941 -c--a-w- C:\WINDOWS\system32\dllcache\dgconfig.dll

2012-02-06 14:59:57 . 2008-04-13 18:40:58 8192 -c--a-w- C:\WINDOWS\system32\dllcache\changer.sys

2012-02-06 14:58:53 . 2001-09-06 20:26:48 103936 -c--a-w- C:\WINDOWS\system32\dllcache\binlsvc.dll

2012-02-03 16:08:18 . 2012-02-06 05:12:44 -------- d-----w- C:\Documents and Settings\Administrator\Application Data\PhotoScape

2012-02-03 16:07:59 . 2012-02-06 05:12:44 -------- d-----w- C:\Program Files\PhotoScape

2012-02-03 15:01:06 . 2012-02-06 05:12:41 -------- d-----w- C:\Documents and Settings\All Users\Application Data\{83C3B2FD-37EA-4C06-A228-E9B5E32FF0B1}

2012-02-01 16:40:15 . 2012-02-01 16:40:15 -------- d-----w- C:\Documents and Settings\Administrator\Application Data\SpeedyPC Software

2012-02-01 16:40:01 . 2012-02-01 16:49:22 -------- d-----w- C:\Documents and Settings\All Users\Application Data\SpeedyPC Software

2012-01-30 16:42:59 . 2012-01-30 16:46:47 -------- d-----w- C:\Documents and Settings\All Users\Application Data\SystemExplorer

2012-01-30 16:42:56 . 2012-01-31 10:55:06 -------- d-----w- C:\Program Files\System Explorer

2012-01-25 09:41:32 . 2012-01-25 09:41:32 -------- d-----w- C:\Documents and Settings\Administrator\Application Data\GlarySoft

2012-01-25 09:36:11 . 2012-01-25 09:36:18 -------- d-----w- C:\Program Files\Glary Utilities

2012-01-21 09:15:32 . 2012-01-21 09:15:32 -------- d--h--w- C:\WINDOWS\PIF

2012-01-13 16:55:48 . 2012-01-13 16:55:49 -------- d-----w- C:\Program Files\Expresso

2012-01-13 15:40:34 . 2012-01-13 15:40:34 -------- d-----w- C:\Documents and Settings\Administrator\Application Data\StarBurn

2012-01-13 15:37:48 . 2009-03-02 13:00:46 95592 ----a-w- C:\WINDOWS\system32\drivers\StarPortLite.sys

2012-01-13 15:37:39 . 2012-01-13 15:37:39 -------- d-----w- C:\Program Files\Rocket Division Software

2012-01-13 15:33:04 . 2012-01-13 15:33:44 -------- d-----w- C:\pebuilder3110a

2012-01-13 14:07:30 . 2012-01-13 14:07:30 -------- d-----w- C:\Program Files\Common Files\Wise Installation Wizard

2012-01-12 16:56:50 . 2012-01-12 16:56:50 -------- d-----w- C:\WINDOWS\system32\siscardplugins

2012-01-11 14:38:28 . 2011-09-09 17:23:34 2469760 ----a-w- C:\WINDOWS\system32\BootMan.exe

2012-01-11 14:38:28 . 2011-07-29 12:54:56 86408 ----a-w- C:\WINDOWS\system32\setupempdrv03.exe

2012-01-11 14:38:28 . 2011-07-29 12:54:56 8456 ----a-w- C:\WINDOWS\system32\EuGdiDrv.sys

2012-01-11 14:38:28 . 2011-07-29 12:54:56 13192 ----a-w- C:\WINDOWS\system32\epmntdrv.sys

2012-01-11 14:38:28 . 2011-07-29 12:54:46 19840 ----a-w- C:\WINDOWS\system32\EuEpmGdi.dll

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

2012-02-02 09:41:56 . 2003-02-20 17:15:38 93184 ----a-w- C:\WINDOWS\system32\drivers\vnetusbk.sys

2012-01-26 23:21:24 . 2011-09-28 13:53:52 237072 ------w- C:\WINDOWS\system32\MpSigStub.exe

2012-01-06 08:59:46 . 2011-10-28 08:22:07 163616 ----a-w- C:\WINDOWS\system32\drivers\DigiartyVirtualCDBus.sys

2012-01-06 04:19:30 . 2011-09-28 13:53:59 6557240 ----a-w- C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll

2011-12-10 14:24:06 . 2011-10-08 13:04:46 20464 ----a-w- C:\WINDOWS\system32\drivers\mbam.sys

2011-12-07 15:51:10 . 2011-12-07 15:51:10 360448 ----a-w- C:\WINDOWS\system32\beid35applayer.dll

2011-12-07 15:50:58 . 2011-12-07 15:50:58 69632 ----a-w- C:\WINDOWS\system32\beidCSPlib.dll

2011-12-07 15:50:42 . 2011-12-07 15:50:42 94208 ----a-w- C:\WINDOWS\system32\Belgium Identity Card PKCS11.dll

2011-12-07 15:50:42 . 2011-12-07 15:50:42 94208 ----a-w- C:\WINDOWS\system32\beidpkcs11.dll

2011-12-07 15:50:34 . 2011-12-07 15:50:34 200704 ----a-w- C:\WINDOWS\system32\beid35cardlayer.dll

2011-12-07 15:50:16 . 2011-12-07 15:50:16 200704 ----a-w- C:\WINDOWS\system32\beidlib.dll

2011-12-07 15:50:04 . 2011-12-07 15:50:04 266240 ----a-w- C:\WINDOWS\system32\beid35DlgsWin32.dll

2011-12-07 15:49:52 . 2011-12-07 15:49:52 126976 ----a-w- C:\WINDOWS\system32\beid35common.dll

2011-12-03 11:19:25 . 2011-11-11 15:31:59 417952 ----a-w- C:\WINDOWS\system32\FlashPlayerApp.exe

2011-12-03 11:19:24 . 2011-11-20 17:46:16 69792 ----a-w- C:\WINDOWS\system32\FlashPlayerCPLApp.cpl

2011-11-29 13:33:04 . 2011-12-16 12:39:28 73728 ----a-w- C:\WINDOWS\system32\TOverlay.ax

2011-11-26 15:07:20 . 2010-09-03 13:01:58 611840 ----a-w- C:\WINDOWS\system32\DVD43.dll

2011-11-26 15:07:19 . 2009-10-09 14:05:38 177664 ----a-w- C:\WINDOWS\system32\wevtfwd.dll

2011-11-26 15:07:18 . 2009-10-09 12:56:14 25088 ----a-w- C:\WINDOWS\system32\winrmprov.dll

2011-11-26 15:07:18 . 2009-10-09 12:56:10 12288 ----a-w- C:\WINDOWS\system32\wsmplpxy.dll

2011-11-26 15:07:18 . 2009-10-09 12:56:08 2048 ----a-w- C:\WINDOWS\system32\winrsmgr.dll

2011-11-26 15:07:18 . 2009-10-09 12:56:04 12288 ----a-w- C:\WINDOWS\system32\winrssrv.dll

2011-11-26 15:07:17 . 2010-04-30 08:53:52 4255192 ----a-w- C:\WINDOWS\SpcLite_PDFLib.dll

2011-11-26 15:07:17 . 2009-10-09 12:56:06 233984 ----a-w- C:\WINDOWS\system32\winrscmd.dll

2011-11-26 15:06:59 . 2009-10-09 14:05:26 386560 ----a-w- C:\WINDOWS\system32\WsmRes.dll

2011-11-26 15:06:59 . 2009-10-09 14:05:24 73728 ----a-w- C:\WINDOWS\system32\winrs.exe

2011-11-26 15:06:59 . 2009-10-09 12:56:20 209408 ----a-w- C:\WINDOWS\system32\WsmWmiPl.dll

2011-11-26 15:06:56 . 2009-10-09 14:05:42 1107456 ----a-w- C:\WINDOWS\system32\WsmSvc.dll

2011-11-26 15:06:47 . 2010-03-19 12:26:08 88064 ----a-w- C:\WINDOWS\system32\msxml6r.dll

2011-11-26 15:06:46 . 2009-07-31 21:27:38 201184 ----a-w- C:\WINDOWS\system32\winrm.vbs

2011-11-26 15:06:45 . 2003-04-08 12:00:00 303616 ----a-w- C:\WINDOWS\system32\wmstream.dll

2011-11-26 15:06:45 . 2003-04-08 12:00:00 258048 ----a-w- C:\WINDOWS\system32\wmvds32.ax

2011-11-26 15:06:45 . 2003-04-08 12:00:00 24064 ----a-w- C:\WINDOWS\system32\pidgen.dll

2011-11-26 15:06:45 . 2003-04-08 12:00:00 20480 ----a-w- C:\WINDOWS\system32\wmp.ocx

2011-11-26 15:06:45 . 2003-04-08 12:00:00 103424 ----a-w- C:\WINDOWS\system32\dpcdll.dll

2011-11-26 15:06:42 . 2004-08-04 08:03:37 53248 ----a-w- C:\WINDOWS\system32\vbicodec.ax

2011-11-26 15:06:42 . 2003-04-08 12:00:00 19456 ----a-w- C:\WINDOWS\system32\secedit.exe

2011-11-26 15:06:41 . 2004-08-04 08:03:37 164352 ----a-w- C:\WINDOWS\system32\wstpager.ax

2011-11-26 15:06:38 . 2010-03-19 12:25:56 136192 ----a-w- C:\WINDOWS\system32\aaclient.dll

2011-11-26 15:06:38 . 2004-08-04 08:03:05 201728 ----a-w- C:\WINDOWS\system32\ati2dvag.dll

2011-11-26 15:06:38 . 2004-08-04 08:03:05 1888992 ----a-w- C:\WINDOWS\system32\ati3duag.dll

2011-11-26 15:06:38 . 2004-08-04 08:03:04 377984 ----a-w- C:\WINDOWS\system32\ati2dvaa.dll

2011-11-26 15:06:37 . 2010-03-19 12:25:57 233472 ----a-w- C:\WINDOWS\system32\azroles.dll

2011-11-26 15:06:37 . 2010-03-19 10:10:23 8192 ----a-w- C:\WINDOWS\system32\bitsprx2.dll

2011-11-26 15:06:37 . 2004-08-04 08:03:26 14336 ----a-w- C:\WINDOWS\system32\auditusr.exe

2011-11-26 15:06:37 . 2004-08-04 08:03:06 1689088 ----a-w- C:\WINDOWS\system32\d3d9.dll

2011-11-26 15:06:37 . 2004-08-04 08:03:06 13312 ----a-w- C:\WINDOWS\system32\cmsetacl.dll

2011-11-26 15:06:37 . 2004-08-04 08:03:05 516768 ----a-w- C:\WINDOWS\system32\ativvaxx.dll

2011-11-26 15:06:36 . 2010-03-19 12:25:59 60928 ----a-w- C:\WINDOWS\system32\dot3cfg.dll

2011-11-26 15:06:36 . 2010-03-19 12:25:59 48640 ----a-w- C:\WINDOWS\system32\dhcpqec.dll

2011-11-26 15:06:36 . 2010-03-19 12:25:59 39936 ----a-w- C:\WINDOWS\system32\dimsroam.dll

2011-11-26 15:06:36 . 2003-04-08 12:00:00 4096 ----a-w- C:\WINDOWS\system32\dsprpres.dll

2011-11-26 15:06:35 . 2010-03-19 12:25:59 184832 ----a-w- C:\WINDOWS\system32\eapp3hst.dll

2011-11-26 15:06:35 . 2004-08-04 08:03:08 2113536 ----a-w- C:\WINDOWS\system32\dxdiagn.dll

2011-11-26 15:06:34 . 2010-03-19 12:25:59 94720 ----a-w- C:\WINDOWS\system32\eappgnui.dll

2011-11-26 15:06:34 . 2004-08-04 08:03:36 80896 ----a-w- C:\WINDOWS\system32\firewall.cpl

2011-11-26 15:06:34 . 2004-08-04 08:03:28 23040 ----a-w- C:\WINDOWS\system32\fltmc.exe

2011-11-26 15:06:34 . 2003-04-08 12:00:00 20480 ----a-w- C:\WINDOWS\system32\encapi.dll

2011-11-26 15:06:33 . 2004-08-04 08:03:12 338432 ----a-w- C:\WINDOWS\system32\ir41_qcx.dll

2011-11-26 15:06:33 . 2004-08-04 08:03:12 200192 ----a-w- C:\WINDOWS\system32\ir50_qc.dll

2011-11-26 15:06:33 . 2004-08-04 08:03:12 183808 ----a-w- C:\WINDOWS\system32\ir50_qcx.dll

2011-11-26 15:06:33 . 2004-08-04 08:03:09 60416 ----a-w- C:\WINDOWS\system32\fwcfg.dll

2011-11-26 15:06:31 . 2004-08-04 08:03:36 380928 ----a-w- C:\WINDOWS\system32\irprops.cpl

2011-11-26 15:06:29 . 2003-04-08 12:00:00 191488 ----a-w- C:\WINDOWS\system32\iuengine.dll

2011-11-26 15:06:28 . 2010-03-19 12:26:03 6144 ----a-w- C:\WINDOWS\system32\kbdbhc.dll

2011-11-26 15:06:27 . 2010-03-19 12:26:03 6144 ----a-w- C:\WINDOWS\system32\kbdiultn.dll

2011-11-26 15:06:27 . 2004-08-04 08:02:09 7680 ----a-w- C:\WINDOWS\system32\kbdsmsno.dll

2011-11-26 15:06:27 . 2004-08-04 08:02:09 7680 ----a-w- C:\WINDOWS\system32\kbdsmsfi.dll

2011-11-26 15:06:27 . 2004-08-04 08:02:09 7168 ----a-w- C:\WINDOWS\system32\kbdukx.dll

2011-11-26 15:06:27 . 2004-08-04 08:02:09 5632 ----a-w- C:\WINDOWS\system32\kbdmaori.dll

2011-11-26 15:06:26 . 2010-03-19 12:26:06 397312 ----a-w- C:\WINDOWS\system32\mmcex.dll

2011-11-26 15:06:26 . 2010-03-19 12:26:06 184320 ----a-w- C:\WINDOWS\system32\microsoft.managementconsole.dll

2011-11-26 15:06:26 . 2010-03-19 12:26:03 61440 ----a-w- C:\WINDOWS\system32\kmsvc.dll

2011-11-26 15:06:25 . 2010-03-19 12:26:06 33792 ----a-w- C:\WINDOWS\system32\mmcperf.exe

2011-11-26 15:06:25 . 2004-08-04 08:03:37 118272 ----a-w- C:\WINDOWS\system32\mpeg2data.ax

2011-11-26 15:06:25 . 2004-08-04 08:03:17 1737856 ----a-w- C:\WINDOWS\system32\mtxparhd.dll

2011-11-26 15:06:25 . 2004-08-04 08:03:14 118784 ----a-w- C:\WINDOWS\system32\msdadiag.dll

2011-11-26 15:06:25 . 2003-04-08 12:00:00 134656 ----a-w- C:\WINDOWS\system32\mssap.dll

2011-11-26 15:06:23 . 2004-08-04 08:03:36 25600 ----a-w- C:\WINDOWS\system32\netsetup.cpl

2011-11-26 15:06:22 . 2004-08-04 08:03:18 313856 ----a-w- C:\WINDOWS\system32\p2pgraph.dll

2011-11-26 15:06:21 . 2010-03-19 12:26:11 412160 ----a-w- C:\WINDOWS\system32\photometadatahandler.dll

2011-11-26 15:06:20 . 2010-03-19 12:26:12 62464 ----a-w- C:\WINDOWS\system32\qcliprov.dll

2011-11-26 15:06:20 . 2010-03-19 12:26:12 150528 ----a-w- C:\WINDOWS\system32\qagent.dll

2011-11-26 15:06:20 . 2004-08-04 08:03:34 49152 ----a-w- C:\WINDOWS\system32\powercfg.exe

2011-11-26 15:06:19 . 2010-03-19 12:26:14 32768 ----a-w- C:\WINDOWS\system32\setupn.exe

2011-11-26 15:06:19 . 2010-03-19 10:49:18 11264 ----a-w- C:\WINDOWS\system32\spnpinst.exe

2011-11-26 15:06:19 . 2004-08-04 08:03:35 20992 ----a-w- C:\WINDOWS\system32\spupdwxp.exe

2011-11-26 15:06:19 . 2004-08-04 08:03:20 29184 ----a-w- C:\WINDOWS\system32\sdhcinst.dll

2011-11-26 15:06:19 . 2003-04-08 12:00:00 196096 ----a-w- C:\WINDOWS\system32\xpsp1res.dll

2011-11-26 15:06:19 . 2003-04-08 12:00:00 159232 ----a-w- C:\WINDOWS\system32\sbeio.dll

2011-11-26 15:06:18 . 2010-03-19 12:26:19 53248 ----a-w- C:\WINDOWS\system32\tsgqec.dll

2011-11-26 15:06:18 . 2006-03-17 00:38:01 28672 ----a-w- C:\WINDOWS\system32\verclsid.exe

2011-11-26 15:06:18 . 2004-08-04 08:03:37 28672 ----a-w- C:\WINDOWS\system32\vidcap.ax

2011-11-26 15:06:18 . 2004-08-04 08:03:23 15872 ----a-w- C:\WINDOWS\system32\w3ssl.dll

2011-11-26 15:06:18 . 2003-04-08 12:00:00 1647616 ----a-w- C:\WINDOWS\system32\winbrand.dll

2011-11-26 15:06:17 . 2010-03-19 12:26:26 276992 ----a-w- C:\WINDOWS\system32\wmphoto.dll

2011-11-26 15:06:17 . 2010-03-19 12:26:24 69120 ----a-w- C:\WINDOWS\system32\wlanapi.dll

2011-11-26 15:06:17 . 2010-03-19 12:26:23 346112 ----a-w- C:\WINDOWS\system32\windowscodecsext.dll

2011-11-26 15:06:17 . 2004-08-04 08:03:36 167936 ----a-w- C:\WINDOWS\system32\wuauclt1.exe

2011-11-26 15:06:17 . 2004-08-04 08:03:36 13824 ----a-w- C:\WINDOWS\system32\wscntfy.exe

2011-12-21 08:02:21 . 2011-12-29 16:14:16 121816 ----a-w- C:\Program Files\mozilla firefox\components\browsercomps.dll

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]

@="{472083B0-C522-11CF-8763-00608CC02F24}"

[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]

2011-11-28 18:01:17 122512 ----a-w- C:\Program Files\AVAST Software\Avast\ashShell.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Advanced SystemCare 5"="C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe" [2011-12-29 15:43:30 620376]

"AROReminder"="C:\Program Files\ARO 2012\aro.exe" [2012-01-06 10:39:26 2552688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2011-10-24 13:28:52 421888]

"avast"="C:\Program Files\AVAST Software\Avast\avastUI.exe" [2011-11-28 18:01:24 3744552]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2008-04-14 17:02:53 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]

"NoResolveTrack"= 1 (0x1)

"NoFileAssociate"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]

@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

@="Service"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\beid

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenu

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]

2012-01-03 07:37:53 843712 ----a-w- c:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\beidsccertprop]

2011-12-01 15:08:12 31256 ----a-w- c:\Program Files\Belgium Identity Card\BeID Certprop\beidsccertprop.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IObit Malware Fighter]

2012-01-12 17:36:06 4453208 ----a-w- C:\Program Files\IObit\IObit Malware Fighter\IMF.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zentimo xStorage Manager]

2011-12-09 18:28:56 2068480 ----a-w- c:\Program Files\Zentimo\Zentimo.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"C:\\xampp\\apache\\bin\\apache.exe"=

"C:\\Program Files\\uTorrent\\uTorrent.exe"=

"C:\\Program Files\\Java\\jre6\\bin\\java.exe"=

"C:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe"=

"C:\\Program Files\\Google\\Google Earth\\plugin\\geplugin.exe"=

"C:\\WINDOWS\\system32\\dxdiag.exe"=

"C:\\WINDOWS\\system32\\dpnsvr.exe"=

"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=

"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=

"C:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=

"C:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

"5985:TCP"= 5985:TCP:*:Disabled:Windows Remote Management

R0 EUBAKUP;EUBAKUP;C:\WINDOWS\system32\drivers\eubakup.sys [5/05/2011 7:30:59 30600]

R0 EUBKMON;EUBKMON;C:\WINDOWS\system32\drivers\EUBKMON.sys [5/05/2011 7:30:59 35720]

R0 EUFS;EUFS;C:\WINDOWS\system32\drivers\eufs.sys [5/05/2011 7:31:00 20744]

R0 hotcore3;hc3ServiceName;C:\WINDOWS\system32\drivers\hotcore3.sys [21/04/2010 11:07:03 57312]

R0 MxEFUF;Matrox Extio Upper Function Filter;C:\WINDOWS\system32\drivers\MxEFUF32.sys [22/10/2011 14:11:50 102728]

R0 SmartDefragDriver;SmartDefragDriver;C:\WINDOWS\system32\drivers\SmartDefragDriver.sys [11/11/2011 17:45:29 14776]

R0 sptd;sptd;C:\WINDOWS\system32\drivers\sptd.sys [17/06/2010 9:33:35 697328]

R1 aswSnx;aswSnx;C:\WINDOWS\system32\drivers\aswSnx.sys [8/02/2012 15:05:01 435032]

R1 aswSP;aswSP;C:\WINDOWS\system32\drivers\aswSP.sys [8/02/2012 15:05:03 314456]

R1 EUDSKACS;EUDSKACS;C:\WINDOWS\system32\drivers\eudskacs.sys [5/05/2011 7:31:00 14216]

R1 StarPortLite;StarPort Storage Controller (Lite);C:\WINDOWS\system32\drivers\StarPortLite.sys [13/01/2012 16:37:48 95592]

R2 602XML Updater;602Updater;C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe [7/11/2011 9:59:45 73728]

R2 ADExchange;ArcSoft Exchange Service;C:\Program Files\Common Files\ArcSoft\esinter\Bin\eservutil.exe [26/10/2011 3:32:24 37280]

R2 AdvancedSystemCareService5;Advanced SystemCare Service 5;C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe [26/11/2011 11:02:24 497496]

R2 Apache2.2;Apache2.2;C:\xampp\apache\bin\apache.exe [14/06/2008 18:02:12 17408]

R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\drivers\aswFsBlk.sys [8/02/2012 15:05:03 20568]

R2 BBSvc;Bing Bar Update Service;C:\Program Files\Microsoft\BingBar\BBSvc.EXE [21/10/2011 15:23:42 196176]

R2 BBUpdate;BBUpdate;C:\Program Files\Microsoft\BingBar\SeaPort.EXE [13/10/2011 17:21:52 249648]

R2 EASEUS Agent;EASEUS Agent;C:\Program Files\EASEUS\Todo Backup\bin\Agent.exe [5/05/2011 7:30:25 56200]

R2 IMFservice;IMF Service;C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe [23/08/2011 14:34:40 821592]

R2 PfFilter;PfFilter;C:\Program Files\IObit\Protected Folder\pffilter.sys [23/08/2011 14:33:52 140848]

R2 thdudf;TOSHIBA UDF2.5 Reader File System Driver;C:\WINDOWS\system32\drivers\thdudf.sys [20/08/2010 16:33:47 66944]

R2 WinDefend;Windows Defender;C:\Program Files\Windows Defender\MsMpEng.exe [3/11/2006 18:19:58 13592]

R2 ZentimoService;Zentimo Assistant;C:\Program Files\Zentimo\ZentimoService.exe [12/12/2011 13:28:44 259072]

R3 ATMEL FVNETusbASKEY (AR)®;ATMEL FVNETusbASKEY (AR)® Service for SANTIS WLAN USB Adapter;C:\WINDOWS\system32\drivers\vnetusbk.sys [20/02/2003 18:15:38 93184]

R3 EUDISK;EASEUS Disk Enumerator;C:\WINDOWS\system32\drivers\eudisk.sys [5/05/2011 7:31:00 187528]

R3 MatSvc;Microsoft Automated Troubleshooting Service;C:\Program Files\Microsoft Fix it Center\Matsvc.exe [13/06/2011 21:09:22 267568]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18/03/2010 13:16:28 130384]

S2 gupdate;Google Updateservice (gupdate);C:\Program Files\Google\Update\GoogleUpdate.exe [2/02/2011 17:03:03 136176]

S2 XAMPP;XAMPP Service;C:\xampp\service.exe [21/12/2007 3:01:02 60928]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [11/11/2011 16:31:59 252064]

S3 ATMEL WinXP PCMCIAFVNETR (2ARC)®;ATMEL WinXP PCMCIAFVNETR (2ARC)® Service for SANTIS WLAN PC Card;C:\WINDOWS\system32\drivers\fvnetr51.sys [14/01/2003 12:44:40 91648]

S3 DfSdkS;Defragmentation-Service;C:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\DfSdkS.exe [27/05/2010 11:03:12 406016]

S3 DigiartyVirtualCDBus;Digiarty Virtual Driver;C:\WINDOWS\system32\drivers\DigiartyVirtualCDBus.sys [28/10/2011 9:22:07 163616]

S3 epmntdrv;epmntdrv;C:\WINDOWS\system32\epmntdrv.sys [11/01/2012 15:38:28 13192]

S3 EuGdiDrv;EuGdiDrv;C:\WINDOWS\system32\EuGdiDrv.sys [11/01/2012 15:38:28 8456]

S3 gupdatem;Google Update-service (gupdatem);C:\Program Files\Google\Update\GoogleUpdate.exe [2/02/2011 17:03:03 136176]

S3 RegFilter;RegFilter;C:\Program Files\IObit\IObit Malware Fighter\Drivers\wxp_x86\RegFilter.sys [23/01/2012 16:40:31 30368]

S3 SiS7012;Service for AC'97 Sample Driver (WDM);C:\WINDOWS\system32\drivers\sis7012.sys [3/11/2004 13:14:26 267136]

S3 UrlFilter;UrlFilter;C:\Program Files\IObit\IObit Malware Fighter\Drivers\wxp_x86\UrlFilter.sys [23/01/2012 16:40:31 16208]

S3 WinRM;Windows Remote Management (WS-Management);C:\WINDOWS\system32\svchost.exe -k WINRM [8/04/2003 13:00:00 14336]

S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18/03/2010 13:16:28 753504]

S4 FileMonitor;FileMonitor;C:\Program Files\IObit\IObit Malware Fighter\Drivers\wxp_x86\FileMonitor.sys [23/01/2012 16:40:31 246816]

--- Andere Services/Drivers In Geheugen ---

*NewlyCreated* - WS2IFSL

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

WINRM REG_MULTI_SZ WINRM

Inhoud van de 'Gedeelde Taken' map

2012-02-09 C:\WINDOWS\Tasks\ConfigExec.job

- C:\Program Files\Microsoft Fix it Center\MatsApi.dll [2011-06-13 20:09:16 . 2011-06-13 20:09:16]

2012-02-09 C:\WINDOWS\Tasks\DataUpload.job

- C:\Program Files\Microsoft Fix it Center\MatsApi.dll [2011-06-13 20:09:16 . 2011-06-13 20:09:16]

2012-02-09 C:\WINDOWS\Tasks\GlaryInitialize.job

- C:\Program Files\Glary Utilities\initialize.exe [2012-01-25 09:36:13 . 2011-12-27 08:50:00]

2012-02-09 C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

- C:\Program Files\Google\Update\GoogleUpdate.exe [2011-02-02 16:03:03 . 2011-02-02 16:02:45]

2012-02-09 C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

- C:\Program Files\Google\Update\GoogleUpdate.exe [2011-02-02 16:03:03 . 2011-02-02 16:02:45]

2012-02-09 C:\WINDOWS\Tasks\MP Scheduled Scan.job

- C:\Program Files\Windows Defender\MpCmdRun.exe [2006-11-03 17:20:06 . 2006-11-03 17:20:06]

2012-02-09 C:\WINDOWS\Tasks\User_Feed_Synchronization-{92896A2E-0BD2-43D0-92A7-E4275BC8B91C}.job

- C:\WINDOWS\system32\msfeedssync.exe [2009-03-08 03:31:54 . 2009-03-08 03:31:54]

------- Bijkomende Scan -------

uStart Page = hxxp://users.skynet.be/javascript

uInternet Settings,ProxyOverride = local

TCP: DhcpNameServer = 192.168.1.1

DPF: Garmin Communicator Plug-In - hxxps://static.garmincdn.com/gcp/ie/2.9.3.0/GarminAxControl.CAB

DPF: {A27C56D2-3F58-4ABB-AA31-1168EDA6636F} - hxxp://utilities.pcpitstop.com/Nirvana/controls/pcmatic.cab

FF - ProfilePath - C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\84g9eyzl.default\

FF - prefs.js: browser.search.selectedEngine - GoogleFeed.net

FF - prefs.js: browser.startup.homepage - hxxp://www.google-feed.net/?CID=1&PID=StarBurn

- - - - ORPHANS VERWIJDERD - - - -

Toolbar-Locked - (no file)

WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)

AddRemove-{09FF4DB8-7DE9-4D47-B7DB-915DB7D9A8CA} - C:\Documents and Settings\Administrator\Local Settings\Temp\mia13.tmp\bm_installer.exe

HijackThis log:

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 11:19:57, on 9/02/2012

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe

C:\Program Files\Zentimo\ZentimoService.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Windows Defender\MsMpEng.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\AVAST Software\Avast\AvastSvc.exe

C:\Program Files\AVAST Software\Avast\avastUI.exe

C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe

C:\Program Files\IObit\Advanced SystemCare 5\DelayLoad.exe

C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe

C:\Program Files\Common Files\ArcSoft\esinter\Bin\eservutil.exe

C:\xampp\apache\bin\apache.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\Microsoft\BingBar\BBSvc.EXE

C:\Program Files\Microsoft\BingBar\SeaPort.EXE

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\EASEUS\Todo Backup\bin\Agent.exe

C:\Program Files\Java\jre7\bin\jqs.exe

C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\Program Files\CDBurnerXP\NMSAccessU.exe

C:\WINDOWS\System32\svchost.exe

C:\xampp\apache\bin\apache.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Documents and Settings\Administrator\Bureaublad\PROGRAMMAS\hijack this\HijackThis.exe