IE start héél traag op

[mjonckhe]

Hallo,

'k heb gescant op virussen en ook ccleaner, spybot & ad adware laten lopen, maar mijn IE blijft traag opstarten (+/- 1 minuut)
Kan iemand helpen ? Ik weet het niet meer. Dit is mijn logfile:

Logfile of HijackThis v1.99.1
Scan saved at 1:21:57, on 10/22/2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Altiris\Altiris Agent\AeXNSAgent.exe
C:\WINNT\System32\Ati2evxx.exe
c:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\WINNT\system32\eelogsvc.exe
C:\WINNT\system32\eelssrv.exe
C:\WINNT\InputDevLockSrv.exe
c:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe
C:\Program Files\Trend Micro\OfficeScan Client\NTRtScan.exe
C:\PROGRA~1\Alcatel\ENTERN~1\app\pppoeservice.exe
C:\WINNT\system32\rundll32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\snmp.exe
C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\Program Files\TightVNC\WinVNC.exe
C:\Program Files\Trend Micro\OfficeScan Client\OfcPfwSvc.exe
C:\WINNT\TEMP\UC25FC.EXE
c:\program files\peacy\PeaCyX.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\program files\common files\entrust\esp\eesystry.exe
C:\Program Files\Adobe\Acrobat 6\Distillr\acrotray.exe
C:\Program Files\Fujitsu\Fujitsu Quick Touch\AUVCore.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\WINNT\system32\eelssrv.exe
C:\Program Files\Fujitsu\BtnHnd\BtnHnd.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\PROGRA~1\Alcatel\ENTERN~1\app\EnterNet.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\PROGRA~1\WINZIP\winzip32.exe
C:\Documents and Settings\jnc5bru\Local Settings\Temp\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.intranet.bosch.com/intranetindex_e.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Peacy
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyServer = proxy.bru.belgium.bosch.com:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.netherlands.bosch.com;*.belgium.bosch.com;Hfd*;H vl*;Bru*;173.202.*;10.10.160.*;173.221.*;bruso03*;www.bue*;rb-liwaks.de.bosch.com;www.ka.de.bosch.com*;rb-portal.bosch.com;10.106.96.102;sdapplicatiecluster *
F2 - REG:system.ini: UserInit=C:\WINNT\SYSTEM32\USERINIT.EXE
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [OfficeScanNT Monitor] "C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe" -HideWindow
O4 - HKLM\..\Run: [Microsoft Service TOols] MStools1.exe
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [PeaCy] C:\peacy.sys\config\0\pcylogin.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KTSinit] "C:\Programme\Bosch\ESItronic\KTS500\Ph_Test.e xe" -timeout=10 -inithardware
O4 - HKLM\..\RunServices: [Microsoft Service TOols] MStools1.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [eesystry.exe] c:\program files\common files\entrust\esp\eesystry.exe
O4 - HKCU\..\Run: [Microsoft Service TOols] MStools1.exe
O4 - HKCU\..\RunServices: [Microsoft Service TOols] MStools1.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6\Distillr\acrotray.exe
O4 - Global Startup: Fujitsu Quick Touch.lnk = C:\Program Files\Fujitsu\Fujitsu Quick Touch\AUVCore.exe
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O4 - Global Startup: VPN Client.lnk = C:\Program Files\Cisco Systems\VPN Client\vpngui.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Google Zoeken - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Woord vertalen in het Nederlands - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://c:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Gelijkwaardige pagina's - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Koppelingspagina's - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Opgeslagen momentopname van de pagina - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Save page in SuperOffice - res://C:\PROGRA~1\SUPERO~1\SoIeExtensions.dll/SavePageInSuperOffice.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\INETREPL.DLL
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: SuperOffice - {CC88D81F-6166-4F46-AC89-B75CD9CEB292} - C:\Program Files\SuperOffice\SoIeExtensions.dll
O9 - Extra button: Peacy - {10DC7B46-65D2-4B35-9603-6121FD216868} - http://www.ilab.bosch.de (file missing) (HKCU)
O9 - Extra button: Support IE - {4FCD5CB2-5E2D-4887-855C-1F0EE4EABE71} - http://www.intranet.bosch.com/ci/os/osc1/1/wbrowser (file missing) (HKCU)
O15 - Trusted Zone: http://www3.ca.com
O15 - Trusted Zone: www.das.be
O15 - Trusted Zone: www.elmeq.nl
O15 - Trusted Zone: http://support.f-secure.com
O15 - Trusted Zone: http://tijd.info2clear.com
O15 - Trusted Zone: http://www.quicksensor.com
O15 - Trusted Zone: www.standaard.be
O15 - Trusted Zone: www.technotape.nl
O15 - Trusted Zone: www.thule.com
O15 - Trusted Zone: http://tijdnet.tijd.be
O15 - Trusted Zone: www.tijd.be
O15 - Trusted Zone: http://housecall65.trendmicro.com
O15 - Trusted Zone: www.vrtnieuws.net
O16 - DPF: {009FB24B-98E3-4B22-8C96-0F44F35CF26E} (BOdinOut Control) - http://rb3pi00c.server.bosch.com:84/...l/bodinout.ocx
O16 - DPF: {102EC111-3CE3-456C-97B7-B2C83ED9FA8E} (BPlotOut Control) - http://is000p01.server.bosch.com:84/...l/bplotout.ocx
O16 - DPF: {3BE26BD4-AC02-11D4-9C26-0090272C4ED4} (BCopyOut Control) - http://is000p01.server.bosch.com:84/...l/bcopyout.ocx
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/v...fo/webscan.cab
O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {CAFECAFE-0013-0001-0009-ABCDEFABCDEF} (JInitiator 1.3.1.9) -
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = bru.be.bosch.com
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = bru.be.bosch.com
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = bru.be.bosch.com
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: Domain = bru.be.bosch.com
O20 - Winlogon Notify: BNCP - C:\WINNT\system32\bncp.dll
O20 - Winlogon Notify: PCINS - C:\WINNT\system32\pcins.dll
O23 - Service: Altiris Agent (AeXNSClient) - Altiris, Inc. - C:\Program Files\Altiris\Altiris Agent\AeXNSAgent.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINNT\System32\Ati2evxx.exe
O23 - Service: AutoExNT - Unknown owner - C:\WINNT\system32\AutoExNT.Exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - c:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Entrust Entelligence Logging Service (eelogsvc) - Entrust(R) - C:\WINNT\system32\eelogsvc.exe
O23 - Service: Entrust Entelligence Login Service (EELSService) - Entrust(R) - C:\WINNT\system32\eelssrv.exe
O23 - Service: hpdj - Unknown owner - C:\DOCUME~1\jnc5bru\LOCALS~1\Temp\hpdj.exe (file missing)
O23 - Service: Input Device Lock Service (InputDeviceLockSrv) - ILAB - C:\WINNT\InputDevLockSrv.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: OfficeScanNT RealTime Scan (ntrtscan) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\NTRtScan.exe
O23 - Service: OfficeScanNT Personal Firewall (OfcPfwSvc) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\OfcPfwSvc.exe
O23 - Service: OracleClientCache80 - Unknown owner - c:\orant\BIN\ONRSD80.EXE
O23 - Service: PPPoE Service (PPPoEService) - Unknown owner - C:\PROGRA~1\Alcatel\ENTERN~1\app\pppoeservice.exe
O23 - Service: OfficeScanNT Listener (tmlisten) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe
O23 - Service: VNC Server (winvnc) - Unknown owner - C:\Program Files\TightVNC\WinVNC.exe" -service (file missing)

Alvast bedankt !!!

Marc

[jurgenv]

Download combofix.exe: http://download.bleepingcomputer.com/sUBs/combofix.exe
Plaats het op je bureaublad.
Dubbelklik er op om het programma te starten.
In het scherm dat verschijnt tik je een Y in om het cleaningsprocess te starten.
Volg de instructies op het scherm.
Als het tooltje klaar is, opent er een logfile (combofix.txt) Post de inhoud van dit bestandje samen met een nieuwe hijackthislog.

[mjonckhe]

Bedankt voor je reactie.
Ik heb het probleem intussen kunnen oplossen door de google toolbar te verwijderen.
Vreemd genoeg opent IE daardoor opnieuw normaal.

Marc

[jurgenv]

En als je nu toch eens mijn instructies doet?