Lof der traagheid

[Roelof]

Hoi Gio,

Heb je laatst wat veranderd, geinstalleerd of gewijzigd aan je systeem ?


Download Dial-a-fix-2006 en pak beide bestanden in hun eigen map uit naar je Bureaublad.

• In de map Dial-a-fix-v0.60.0.24, dubbelklik op Dial-a-fix.exe
  In het venster dat opengaat, klik onderaan op het icoontje met het dubbele groene vinkje (check all).
  Klik daarna op "GO" en laat de tool alle instellingen terugzetten.
  Sluit dit venster na afloop door onderaan op "Exit" te klikken.

Hoe is het nu met je problemen ?

Roelof

[Gio]

Ik kan me niet meteen wijzigingen in het systeem herinneren. Het gaat nog altijd traag hier, heb ook al opnieuw opgestart na de scan.

Ter informatie het logje:
Notes about this log:
1) "->" denotes an external command being executed, and "-> (number)" indicates
the return code from the previous command
2) Not all external command return codes are accurate, or useful
3) Sometimes commands return 0 (no error) even when they fail or crash
4) If an error occurs while registering an object, please send an email to:
dial-a-fix@DjLizard.net and include a copy of this log
DAF version: v0.60.0.24
--- System info ---
OS: Microsoft Windows XP Service Pack 2
IE version: 7.0.5730.11
MPC: 76395-OEM
CPU: Intel(R) Celeron(R) M CPU 410 @ 1.46GHz (~1466MHz)
BIOS: 9-6-2006
Memory (approx): 1014MB
Uptime: 6 hour(s)
Current directory: C:\Documents and Settings\Johan\Bureaublad\Dial-a-fix-v0.60.0.24
---
17-8-2008 18:20:13 -- Dial-a-fix : [v0.60.0.24] -- started
18:20:13 | Policy scan started
18:20:13 | The following restrictive policies were found:
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Win dowsFirewall\StandardProfile\EnableFirewall
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Win dowsFirewall\DomainProfile\EnableFirewall
--- Emptying temp folders ---
18:20:27 | Deleting C:\Documents and Settings\Johan\Local Settings\Temp...
18:20:28 | C:\Documents and Settings\Johan\Local Settings\Temp could not be completely emptied, please reboot and try again
18:20:28 | Deleting C:\WINDOWS\temp...
18:20:28 | C:\WINDOWS\temp could not be completely emptied, please reboot and try again
18:20:28 | Deleting C:\DOCUME~1\Johan\LOCALS~1\Temp...
18:20:29 | C:\DOCUME~1\Johan\LOCALS~1\Temp could not be completely emptied, please reboot and try again
--- MSI ---
18:20:50 | Registered: C:\WINDOWS\system32\msi.dll
--- Windows Update ---
--- Registration: Windows Update/Automatic Update DLLs ---
18:21:05 | Unregistered: C:\WINDOWS\system32\msxml.dll
18:21:05 | Registered: C:\WINDOWS\system32\msxml.dll
18:21:07 | Unregistered: C:\WINDOWS\system32\msxml2.dll
18:21:08 | Registered: C:\WINDOWS\system32\msxml2.dll
18:21:15 | Unregistered: C:\WINDOWS\system32\msxml3.dll
18:21:18 | Registered: C:\WINDOWS\system32\msxml3.dll
18:21:18 | Unregistered: C:\WINDOWS\system32\msxml4.dll
18:21:19 | Registered: C:\WINDOWS\system32\msxml4.dll
18:21:19 | Unregistered: C:\WINDOWS\system32\qmgr.dll
18:21:20 | Registered: C:\WINDOWS\system32\qmgr.dll
18:21:20 | Unregistered: C:\WINDOWS\system32\qmgrprxy.dll
18:21:20 | Registered: C:\WINDOWS\system32\qmgrprxy.dll
18:21:20 | Unregistered: C:\WINDOWS\system32\muweb.dll
18:21:20 | Registered: C:\WINDOWS\system32\muweb.dll
18:21:20 | Unregistered: C:\WINDOWS\system32\winhttp.dll
18:21:21 | Registered: C:\WINDOWS\system32\winhttp.dll
18:21:21 | Registered: C:\WINDOWS\system32\wuapi.dll
18:21:22 | Unregistered: C:\WINDOWS\system32\wuaueng.dll
18:21:22 | Registered: C:\WINDOWS\system32\wuaueng.dll
18:21:23 | Unregistered: C:\WINDOWS\system32\wuaueng1.dll
18:21:23 | Registered: C:\WINDOWS\system32\wuaueng1.dll
18:21:23 | Unregistered: C:\WINDOWS\system32\wucltui.dll
18:21:23 | Registered: C:\WINDOWS\system32\wucltui.dll
18:21:23 | Unregistered: C:\WINDOWS\system32\wups.dll
18:21:23 | Registered: C:\WINDOWS\system32\wups.dll
18:21:23 | Unregistered: C:\WINDOWS\system32\wups2.dll
18:21:24 | Registered: C:\WINDOWS\system32\wups2.dll
18:21:24 | Unregistered: C:\WINDOWS\system32\wuweb.dll
18:21:24 | Registered: C:\WINDOWS\system32\wuweb.dll
18:21:24 | Registered: C:\WINDOWS\system32\ole32.dll
--- SSL/HTTPS/Cryptography ---
18:21:30 | Deleting policy: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Win dowsFirewall\StandardProfile\EnableFirewall
18:21:30 | ^ Success
18:21:30 | Deleting policy: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Win dowsFirewall\DomainProfile\EnableFirewall
18:21:30 | ^ Success
18:21:30 | Policy scan started
18:21:32 | Policy scan ended - no restrictive policies were found
18:22:19 | Executed 'cmd.exe /c rmdir /q /s C:\WINDOWS\system32\Catroot2'
--- Registration: SSL/HTTPS/Cryptography ---
18:22:37 | Unregistered: C:\WINDOWS\system32\cryptdlg.dll
18:22:37 | Registered: C:\WINDOWS\system32\cryptdlg.dll
18:22:38 | Unregistered: C:\WINDOWS\system32\cryptui.dll
18:22:38 | Registered: C:\WINDOWS\system32\cryptui.dll
18:22:38 | Unregistered: C:\WINDOWS\system32\cryptext.dll
18:22:39 | Registered: C:\WINDOWS\system32\cryptext.dll
18:22:40 | Unregistered: C:\WINDOWS\system32\dssenh.dll
18:22:40 | Registered: C:\WINDOWS\system32\dssenh.dll
18:22:41 | Unregistered: C:\WINDOWS\system32\gpkcsp.dll
18:22:41 | Registered: C:\WINDOWS\system32\gpkcsp.dll
18:22:44 | Unregistered: C:\WINDOWS\system32\initpki.dll
18:25:37 | Registered: C:\WINDOWS\system32\initpki.dll
18:25:39 | Unregistered: C:\WINDOWS\system32\licdll.dll
18:25:39 | Registered: C:\WINDOWS\system32\licdll.dll
18:25:39 | Unregistered: C:\WINDOWS\system32\mssign32.dll
18:25:40 | Registered: C:\WINDOWS\system32\mssign32.dll
18:25:40 | Unregistered: C:\WINDOWS\system32\mssip32.dll
18:25:41 | Registered: C:\WINDOWS\system32\mssip32.dll
18:25:43 | Unregistered: C:\WINDOWS\system32\scardssp.dll
18:25:44 | Registered: C:\WINDOWS\system32\scardssp.dll
18:25:44 | Unregistered: C:\WINDOWS\system32\sccbase.dll
18:25:44 | Registered: C:\WINDOWS\system32\sccbase.dll
18:25:45 | Unregistered: C:\WINDOWS\system32\scecli.dll
18:25:45 | Registered: C:\WINDOWS\system32\scecli.dll
18:25:46 | Unregistered: C:\WINDOWS\system32\softpub.dll
18:25:46 | Registered: C:\WINDOWS\system32\softpub.dll
18:25:47 | Unregistered: C:\WINDOWS\system32\slbcsp.dll
18:25:47 | Registered: C:\WINDOWS\system32\slbcsp.dll
18:25:49 | Unregistered: C:\WINDOWS\system32\regwizc.dll
18:25:49 | Registered: C:\WINDOWS\system32\regwizc.dll
18:25:49 | Unregistered: C:\WINDOWS\system32\rsaenh.dll
18:25:49 | Registered: C:\WINDOWS\system32\rsaenh.dll
18:25:50 | Unregistered: C:\WINDOWS\system32\winhttp.dll
18:25:50 | Registered: C:\WINDOWS\system32\winhttp.dll
18:25:50 | Unregistered: C:\WINDOWS\system32\wintrust.dll
18:25:52 | Registered: C:\WINDOWS\system32\wintrust.dll
--- Registration: ActiveX controls/codecs ---
18:25:53 | Registered: C:\WINDOWS\system32\acelpdec.ax
18:25:54 | Registered: C:\WINDOWS\system32\actxprxy.dll
18:25:54 | Registered: C:\WINDOWS\system32\asctrls.ocx
18:25:56 | Registered: C:\WINDOWS\system32\daxctle.ocx
18:25:56 | Registered: C:\WINDOWS\system32\hhctrl.ocx
18:25:56 | Registered: C:\WINDOWS\system32\l3codecx.ax
18:25:57 | Registered: C:\WINDOWS\system32\licmgr10.dll
18:25:57 | Registered: C:\WINDOWS\system32\mpg4ds32.ax
18:26:10 | Registered: C:\WINDOWS\system32\msdxm.ocx
18:26:11 | Registered: C:\WINDOWS\system32\proctexe.ocx
18:26:11 | Registered: C:\WINDOWS\system32\tdc.ocx
18:26:12 | Registered: C:\WINDOWS\system32\wshom.ocx
--- Registration: Control Panel applets ---
18:26:26 | DllInstalled: C:\WINDOWS\system32\inetcpl.cpl
18:26:27 | DllInstalled: C:\WINDOWS\system32\nusrmgr.cpl
18:26:34 | Registered: C:\WINDOWS\system32\nusrmgr.cpl
--- Registration: Direct[X|Draw|Show|Media] ---
18:26:37 | Registered: C:\WINDOWS\system32\quartz.dll
18:26:48 | Registered: C:\WINDOWS\system32\danim.dll
18:26:49 | Registered: C:\WINDOWS\system32\dmscript.dll
18:26:49 | Registered: C:\WINDOWS\system32\dmstyle.dll
18:26:50 | Registered: C:\WINDOWS\system32\dxmasf.dll
18:26:50 | Registered: C:\WINDOWS\system32\dxtmsft.dll
18:26:50 | Registered: C:\WINDOWS\system32\dxtrans.dll
18:26:51 | Registered: C:\WINDOWS\system32\sbe.dll
--- Registration: Programming cores/runtimes ---
18:26:51 | Registered: C:\WINDOWS\system32\atl.dll
18:26:51 | Registered: C:\WINDOWS\system32\corpol.dll
18:26:52 | Registered: C:\WINDOWS\system32\jscript.dll
18:26:52 | Registered: C:\WINDOWS\system32\dispex.dll
18:26:53 | Registered: C:\WINDOWS\system32\scrrun.dll
18:27:07 | Registered: C:\WINDOWS\system32\scrobj.dll
18:27:08 | Registered: C:\WINDOWS\system32\vbscript.dll
18:27:09 | Registered: C:\WINDOWS\system32\wshext.dll
--- Registration: Explorer/IE/OE/shell/WMP ---
18:27:10 | Registered: C:\WINDOWS\system32\activeds.dll
18:27:10 | Registered: C:\WINDOWS\system32\audiodev.dll
18:27:11 | Registered: C:\WINDOWS\system32\browsewm.dll
18:27:11 | Registered: C:\WINDOWS\system32\cabview.dll
18:27:13 | Registered: C:\WINDOWS\system32\cdfview.dll
18:27:13 | Registered: C:\WINDOWS\system32\clbcatex.dll
18:27:13 | Registered: C:\WINDOWS\system32\clbcatq.dll
18:27:14 | Registered: C:\WINDOWS\system32\comcat.dll
18:27:15 | Registered: C:\WINDOWS\system32\cscui.dll
18:27:15 | Registered: C:\WINDOWS\system32\credui.dll
18:27:15 | Registered: C:\WINDOWS\system32\datime.dll
18:27:16 | Registered: C:\WINDOWS\system32\devmgr.dll
18:27:16 | Registered: C:\WINDOWS\system32\dfsshlex.dll
18:27:21 | Registered: C:\WINDOWS\system32\dmdlgs.dll
18:27:21 | Registered: C:\WINDOWS\system32\dmdskmgr.dll
18:27:22 | Registered: C:\WINDOWS\system32\dmloader.dll
18:27:23 | Registered: C:\WINDOWS\system32\dmocx.dll
18:27:23 | Registered: C:\WINDOWS\system32\dmview.ocx
18:27:24 | DllInstalled: C:\WINDOWS\system32\dsuiext.dll
18:27:26 | Registered: C:\WINDOWS\system32\dsuiext.dll
18:27:27 | DllInstalled: C:\WINDOWS\system32\dsquery.dll
18:27:29 | Registered: C:\WINDOWS\system32\dsquery.dll
18:27:30 | Registered: C:\WINDOWS\system32\dskquoui.dll
18:27:30 | Registered: C:\WINDOWS\system32\els.dll
18:27:31 | Registered: C:\WINDOWS\system32\es.dll
18:27:32 | Registered: C:\WINDOWS\system32\fontext.dll
18:27:32 | Registered: C:\WINDOWS\system32\hlink.dll
18:27:33 | Registered: C:\WINDOWS\system32\hnetcfg.dll
18:27:33 | Registered: C:\WINDOWS\system32\iedkcs32.dll
18:27:34 | Registered: C:\WINDOWS\system32\iepeers.dll
18:27:34 | Registered: C:\WINDOWS\system32\ils.dll
18:27:36 | Registered: C:\WINDOWS\system32\inetcfg.dll
18:27:37 | Registered: C:\WINDOWS\system32\inetcomm.dll
18:27:37 | Registered: C:\WINDOWS\system32\laprxy.dll
18:27:41 | Registered: C:\WINDOWS\system32\lmrt.dll
18:27:41 | Registered: C:\WINDOWS\system32\mlang.dll
18:27:47 | Registered: C:\WINDOWS\system32\mmcndmgr.dll
18:27:49 | Registered: C:\WINDOWS\system32\mmcshext.dll
18:27:54 | Registered: C:\WINDOWS\system32\mscoree.dll
18:27:55 | Registered: C:\WINDOWS\system32\mshtmled.dll
18:27:57 | Registered: C:\WINDOWS\system32\msoeacct.dll
18:27:59 | Registered: C:\WINDOWS\system32\msr2c.dll
18:27:59 | DllInstalled: C:\WINDOWS\system32\mydocs.dll
18:28:00 | Registered: C:\WINDOWS\system32\mydocs.dll
18:28:00 | Registered: C:\WINDOWS\system32\mstime.dll
18:28:01 | Registered: C:\WINDOWS\system32\netcfgx.dll
18:28:01 | DllInstalled: C:\WINDOWS\system32\netplwiz.dll
18:28:03 | Registered: C:\WINDOWS\system32\netplwiz.dll
18:28:05 | Registered: C:\WINDOWS\system32\netman.dll
18:28:06 | Registered: C:\WINDOWS\system32\netshell.dll
18:28:08 | Registered: C:\WINDOWS\system32\ntmsevt.dll
18:28:09 | Registered: C:\WINDOWS\system32\ntmsmgr.dll
18:28:10 | DllInstalled: C:\WINDOWS\system32\ntmssvc.dll
18:28:10 | Registered: C:\WINDOWS\system32\ntmssvc.dll
18:28:10 | DllInstalled: C:\WINDOWS\system32\occache.dll
18:28:11 | Registered: C:\WINDOWS\system32\occache.dll
18:28:11 | Registered: C:\WINDOWS\system32\ole32.dll
18:28:11 | Registered: C:\WINDOWS\system32\oleaut32.dll
18:28:11 | Registered: C:\WINDOWS\system32\oleacc.dll
18:28:11 | Registered: C:\WINDOWS\system32\olepro32.dll
18:28:12 | DllInstalled: C:\WINDOWS\system32\photowiz.dll
18:28:12 | Registered: C:\WINDOWS\system32\photowiz.dll
18:28:13 | Registered: C:\WINDOWS\system32\remotepg.dll
18:28:13 | Registered: C:\WINDOWS\system32\rpcrt4.dll
18:28:14 | Registered: C:\WINDOWS\system32\rshx32.dll
18:28:15 | Registered: C:\WINDOWS\system32\sendmail.dll
18:28:16 | Registered: C:\WINDOWS\system32\slayerxp.dll
18:28:16 | Registered: C:\WINDOWS\system32\shell32.dll
18:28:35 | DllInstalled: C:\WINDOWS\system32\shell32.dll
18:28:37 | Registered: C:\WINDOWS\system32\shmedia.dll
18:28:38 | DllInstalled: C:\WINDOWS\system32\shimgvw.dll
18:28:39 | Registered: C:\WINDOWS\system32\shimgvw.dll
18:28:39 | DllInstalled: C:\WINDOWS\system32\shsvcs.dll
18:28:39 | Registered: C:\WINDOWS\system32\shsvcs.dll
18:28:40 | Registered: C:\WINDOWS\system32\srclient.dll
18:28:42 | Unregistered: C:\WINDOWS\system32\stobject.dll
18:28:42 | Registered: C:\WINDOWS\system32\stobject.dll
18:28:44 | Registered: C:\WINDOWS\system32\twext.dll
18:28:59 | DllInstalled: C:\WINDOWS\system32\urlmon.dll
18:28:59 | Registered: C:\WINDOWS\system32\urlmon.dll
18:28:59 | Registered: C:\WINDOWS\system32\userenv.dll
18:29:00 | Registered: C:\WINDOWS\system32\winhttp.dll
18:29:00 | DllInstalled: C:\WINDOWS\system32\wininet.dll
18:29:03 | Registered: C:\WINDOWS\system32\zipfldr.dll
18:29:04 | Registered: C:\Program Files\Common Files\system\Ole DB\msdadc.dll
18:29:04 | Registered: C:\Program Files\Common Files\system\Ole DB\msdaenum.dll
18:29:05 | Registered: C:\Program Files\Common Files\system\Ole DB\msdaer.dll
18:29:06 | Registered: C:\Program Files\Common Files\system\Ole DB\msdaipp.dll
18:29:07 | Registered: C:\Program Files\Common Files\system\Ole DB\msdaora.dll
18:29:07 | Registered: C:\Program Files\Common Files\system\Ole DB\msdaosp.dll
18:29:08 | Registered: C:\Program Files\Common Files\system\Ole DB\msdaps.dll
18:29:08 | Registered: C:\Program Files\Common Files\system\Ole DB\msdasc.dll
18:29:09 | Registered: C:\Program Files\Common Files\system\Ole DB\msdasql.dll
18:29:09 | Registered: C:\Program Files\Common Files\system\Ole DB\msdatt.dll
18:29:09 | Registered: C:\Program Files\Common Files\system\Ole DB\msdaurl.dll
18:29:12 | Registered: C:\Program Files\Common Files\system\Ole DB\msdmeng.dll
18:29:13 | Registered: C:\Program Files\Common Files\system\Ole DB\msdmine.dll
18:29:14 | Registered: C:\Program Files\Common Files\system\Ole DB\msmdcb80.dll
18:29:15 | Registered: C:\Program Files\Common Files\system\Ole DB\msmdgd80.dll
18:29:16 | Registered: C:\Program Files\Common Files\system\Ole DB\msolap80.dll
18:29:18 | Registered: C:\Program Files\Common Files\system\Ole DB\msolui80.dll
18:29:18 | Registered: C:\Program Files\Common Files\system\Ole DB\msxactps.dll
18:29:19 | Registered: C:\Program Files\Common Files\system\Ole DB\oledb32.dll
18:29:19 | Registered: C:\Program Files\Common Files\system\Ole DB\oledb32r.dll
18:29:20 | Registered: C:\Program Files\Common Files\system\Ole DB\sqloledb.dll
18:29:21 | Registered: C:\Program Files\Common Files\system\Ole DB\sqlxmlx.dll

[Roelof]

hoi gio,

Download MalwareBytes' Anti-Malware en sla het op je bureaublad op.
Dubbelklik op mbam-setup.exe om het programma te installeren.
Zorg dat er na de installatie een vinkje is geplaatst bij:

• Update MalwareBytes' Anti-Malware
• Start MalwareBytes' Anti-Malware

Klik daarna op "Voltooien".
Indien een update gevonden wordt, zal die gedownload en geïnstalleerd worden.

• Zodra het programma gestart is, ga dan naar het tabblad "Instellingen".
• Vink hier aan: "Sluit Internet Explorer tijdens verwijdering van malware".
• Ga daarna naar het tabblad "Scanner", kies hier voor "Snelle Scan".
• Druk vervolgens op "Scannen" om de scan te starten.
• Het scannen kan een tijdje duren, dus wees geduldig.
• Wanneer de scan voltooid is, klik op OK, daarna "Bekijk Resultaten" om de resultaten te zien.
• Zorg ervoor dat daar alles aangevinkt is, daarna klik op: "Verwijder geselecteerde".
• Na het verwijderen zal een log openen, indien er gevraagd wordt om je computer te herstarten moet je dit toestaan.
  Dit is namelijk noodzakelijk om sommige infecties te kunnen verwijderen

Het log wordt automatisch bewaard door MalwareBytes' Anti-Malware en kan je terugvinden door op de "Logs" tab te klikken in het programma. Post dit logje in je volgende reactie.

Groetjes,

Roelof

[Gio]

Niets gevonden...

Malwarebytes' Anti-Malware 1.25
Database versie: 1070
Windows 5.1.2600 Service Pack 2
14:02:09 19-8-2008
mbam-log-08-19-2008 (14-02-09).txt
Scan type: Snelle Scan
Objecten gescand: 52714
Verstreken tijd: 34 minute(s), 18 second(s)
Geheugenprocessen geïnfecteerd: 0
Geheugenmodulen geïnfecteerd: 0
Registersleutels geïnfecteerd: 0
Registerwaarden geïnfecteerd: 0
Registerdata bestanden geïnfecteerd: 0
Mappen geïnfecteerd: 0
Bestanden geïnfecteerd: 0
Geheugenprocessen geïnfecteerd:
(Geen kwaadaardige items gevonden)
Geheugenmodulen geïnfecteerd:
(Geen kwaadaardige items gevonden)
Registersleutels geïnfecteerd:
(Geen kwaadaardige items gevonden)
Registerwaarden geïnfecteerd:
(Geen kwaadaardige items gevonden)
Registerdata bestanden geïnfecteerd:
(Geen kwaadaardige items gevonden)
Mappen geïnfecteerd:
(Geen kwaadaardige items gevonden)
Bestanden geïnfecteerd:
(Geen kwaadaardige items gevonden)


Desondanks werkt het hier wel nog steeds traag

[Roelof]

Hoi Gio,

We gaan even verder zoeken.

Volg deze instructies om Combofix te downloaden. Is er iets niet duidelijk, dan vraag je het.
Voer de instructies op de BleepingComputer pagina uit, inclusief het installeren van de XP Recovery Console.
Indien je combofix al eerder gebruikt hebt en de recovery console al geïnstalleerd hebt mag je die stap overslaan.
OPMERKING:
Indien je, tijdens of na het downloaden van Combofix of tijdens het gebruik van Combofix een melding krijgt van je Antivirus- of een andere realtime scanner,
schakel dan deze scanner uit en download Combofix opnieuw.
Sommige scanners zien bepaalde componenten die Combofix gebruikt als verdacht en gaan deze blokkeren of verwijderen!
Dubbelklik op Combofix.exe, als Combofix aangeeft dat er een nieuwere versie beschikbaar is, dan sta je toe dat deze gedownload wordt.
Volg de instructies en aanvaard de disclaimer.
Tijdens het runnen van de fix, NIET in het venster klikken, want dit zal je pc doen vasthangen.
Wanneer de fix voltooid is en na herstart, zal de log Combofix.txt openen.
Post de inhoud van dit bestandje samen met een nieuwe hijackthislog.

Groetjes,

Roelof

[Gio]

Combofix

ComboFix 08-08-18.05 - Johan 2008-08-19 17:21:19.2 - FAT32x86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.31.1043.18.547 [GMT 2:00]
Gestart vanuit: C:\Documents and Settings\Johan\Bureaublad\ComboFix.exe
Command switches used :: C:\Documents and Settings\Johan\Bureaublad\WindowsXP-KB310994-SP2-Home-BootDisk-NLD.exe
* Nieuw herstelpunt werd aangemaakt
.
(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\All Users\Favorieten\WinZip.exe
C:\Documents and Settings\Johan\UserData
C:\Documents and Settings\Johan\UserData\GFXETQFP\advstNetId[1].xml
C:\Documents and Settings\Johan\UserData\GFXETQFP\IsOnIE6tbPromo[1].xml
C:\Documents and Settings\Johan\UserData\GFXETQFP\oWindowsUpdate[1].xml
C:\Documents and Settings\Johan\UserData\GFXETQFP\oWindowsUpdate[2].xml
C:\Documents and Settings\Johan\UserData\GFXETQFP\YL[1].xml
C:\Documents and Settings\Johan\UserData\index.dat
C:\Documents and Settings\Johan\UserData\KVYV4HMB\historySearchPos[1].xml
C:\Documents and Settings\Johan\UserData\KVYV4HMB\IsOnIE7tbPromo[1].xml
C:\Documents and Settings\Johan\UserData\KVYV4HMB\oXMLStore[1].xml
C:\Documents and Settings\Johan\UserData\WONOM14E\IsOnIE6tbPromo[2].xml
C:\Documents and Settings\Johan\UserData\WTNRJNBO\historySitePos[1].xml
C:\Documents and Settings\Johan\UserData\WTNRJNBO\mnpFrames[1].xml
C:\WINDOWS\system32\actskn43.ocx
C:\WINDOWS\system32\del.bat
C:\WINDOWS\system32\utstv.ini
.
(((((((((((((((((((( Bestanden Gemaakt van 2008-07-19 to 2008-08-19 ))))))))))))))))))))))))))))))
.
2008-08-19 14:41 . 2008-08-19 14:41 <DIR> d-------- C:\WINDOWS\LastGood.Tmp
2008-08-19 13:23 . 2008-08-17 15:01 38,472 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-08-17 18:22 . 2008-08-17 18:23 <DIR> d-------- C:\WINDOWS\system32\CatRoot2
2008-08-17 18:16 . 2008-08-17 18:16 <DIR> d-------- C:\zipitpro
2008-08-16 12:10 . 2008-08-16 12:10 <DIR> d-------- C:\Deckard
2008-08-14 21:41 . 2008-08-14 21:49 1,374 --a------ C:\WINDOWS\imsins.BAK
2008-08-14 11:44 . 2008-08-17 18:28 <DIR> dr-h----- C:\Documents and Settings\Johan\Onlangs geopend
2008-08-12 19:14 . 2008-08-12 19:14 <DIR> d-------- C:\Program Files\Lavasoft
2008-08-12 19:14 . 2008-08-12 19:14 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-08-12 19:13 . 2008-08-12 19:13 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-08-04 13:03 . 2008-08-04 13:04 <DIR> d-------- C:\Program Files\VS Revo Group
2008-07-28 19:24 . 2008-07-28 19:24 <DIR> d-------- C:\Medion
2008-07-28 17:35 . 2008-07-28 17:35 <DIR> d-------- C:\Documents and Settings\Johan\OngameNetwork
2008-07-28 14:25 . 2008-07-28 14:25 <DIR> d-------- C:\Program Files\MEDION
2008-07-28 14:06 . 2005-10-21 03:47 30,592 --------- C:\WINDOWS\system32\drivers\rndismpx.sys
2008-07-28 14:06 . 2005-10-21 03:47 12,800 --------- C:\WINDOWS\system32\drivers\usb8023x.sys
2008-07-27 23:50 . 2008-07-27 23:50 410,976 --a------ C:\WINDOWS\system32\deploytk.dll
2008-07-27 23:50 . 2008-07-27 23:50 73,728 --a------ C:\WINDOWS\system32\javacpl.cpl
.
((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))) ))
.
2008-08-17 16:15 724,992 ----a-w C:\WINDOWS\iun6002.exe
2008-08-17 13:01 17,144 ----a-w C:\WINDOWS\system32\drivers\mbam.sys
2008-07-18 08:42 96,520 ----a-w C:\WINDOWS\system32\drivers\avgldx86.sys
2008-07-18 08:42 76,040 ----a-w C:\WINDOWS\system32\drivers\avgtdix.sys
2008-07-18 08:42 10,520 ----a-w C:\WINDOWS\system32\avgrsstx.dll
2008-07-18 08:42 --------- d-----w C:\Program Files\AVG
2008-07-18 08:42 --------- d-----w C:\Documents and Settings\All Users\Application Data\avg8
2008-07-16 14:00 --------- d-----w C:\Program Files\iTunes
2008-07-16 14:00 --------- d-----w C:\Program Files\iPod
2008-07-16 13:59 --------- d-----w C:\Program Files\Common Files\Apple
2008-07-16 13:59 --------- d-----w C:\Program Files\Bonjour
2008-07-14 16:24 --------- d-----w C:\Program Files\DivX
2008-07-14 16:19 --------- d-----w C:\Program Files\Codec Pack - All In 1
2008-07-14 11:43 --------- d-----w C:\Program Files\QuickTime
2008-07-14 11:42 --------- d-----w C:\Program Files\Apple Software Update
2008-07-14 11:42 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple
2008-07-12 11:00 4,263 --sh--w C:\WINDOWS\windllreg1c.sys
2008-07-12 10:58 --------- d-----w C:\Program Files\ReadPlease 2003
2008-07-07 20:32 253,952 ----a-w C:\WINDOWS\system32\es.dll
2008-07-07 20:32 253,952 ----a-w C:\WINDOWS\system32\dllcache\es.dll
2008-06-24 16:24 74,240 ----a-w C:\WINDOWS\system32\mscms.dll
2008-06-24 16:24 74,240 ----a-w C:\WINDOWS\system32\dllcache\mscms.dll
2008-06-24 08:43 3,592,192 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll
2008-06-23 16:37 --------- d-----w C:\Program Files\Malwarebytes' Anti-Malware
2008-06-23 16:37 --------- d-----w C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-06-23 09:23 70,656 ----a-w C:\WINDOWS\system32\dllcache\ie4uinit.exe
2008-06-23 09:23 625,664 ----a-w C:\WINDOWS\system32\dllcache\iexplore.exe
2008-06-23 09:20 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe
2008-06-21 05:23 161,792 ----a-w C:\WINDOWS\system32\dllcache\ieakui.dll
2008-06-20 17:43 247,296 ----a-w C:\WINDOWS\system32\mswsock.dll
2008-06-20 17:43 247,296 ----a-w C:\WINDOWS\system32\dllcache\mswsock.dll
2008-06-20 17:43 148,992 ----a-w C:\WINDOWS\system32\dllcache\dnsapi.dll
2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\dllcache\tcpip.sys
2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys
2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\dllcache\afd.sys
2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\dllcache\tcpip6.sys
2008-06-18 17:52 161,096 ----a-w C:\WINDOWS\system32\DivXCodecVersionChecker.exe
2008-06-14 18:00 272,640 ------w C:\WINDOWS\system32\dllcache\bthport.sys
2008-06-11 00:07 524,288 ----a-w C:\WINDOWS\system32\DivXsm.exe
2008-06-11 00:07 3,596,288 ----a-w C:\WINDOWS\system32\qt-dx331.dll
2008-06-11 00:07 129,784 ------w C:\WINDOWS\system32\pxafs.dll
2008-06-11 00:07 120,056 ------w C:\WINDOWS\system32\pxcpyi64.exe
2008-06-11 00:07 118,520 ------w C:\WINDOWS\system32\pxinsi64.exe
2008-06-11 00:04 200,704 ----a-w C:\WINDOWS\system32\ssldivx.dll
2008-06-11 00:04 1,044,480 ----a-w C:\WINDOWS\system32\libdivx.dll
2008-05-22 22:18 12,288 ----a-w C:\WINDOWS\system32\DivXWMPExtType.dll
2007-06-25 11:30 952 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
.
((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))) )
.
.
REGEDIT4
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"H/PC Connection Agent"="C:\Program Files\Microsoft ActiveSync\Wcescomm.exe" [2006-11-13 18:34 1289000]
"WhatPulse"="D:\Program Files\WhatPulse\WhatPulse.exe" [2006-08-21 19:48 665600]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe" [2007-07-26 11:25 68856]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 05:00 15360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2005-12-16 16:32 761945]
"AzMixerSel"="C:\Program Files\Realtek\InstallShield\AzMixerSel.exe" [2005-06-11 19:51 53248]
"ntiMUI"="C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe" [2005-05-11 17:15 45056]
"IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.E XE" [2004-08-04 05:00 208952]
"MSPY2002"="C:\WINDOWS\system32\IME\PINTLGNT\ImScI nst.exe" [2004-08-04 05:00 59392]
"PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT \TINTSETP.EXE" [2004-08-04 05:00 455168]
"PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TIN TSETP.EXE" [2004-08-04 05:00 455168]
"igfxhkcmd"="C:\WINDOWS\system32\hkcmd.exe" [2006-02-07 08:36 77824]
"igfxpers"="C:\WINDOWS\system32\igfxpers.exe" [2006-02-07 08:40 118784]
"PCMService"="C:\Program Files\Acer\Acer Arcade\PCMService.exe" [2006-03-23 00:12 151552]
"LaunchAp"="C:\Program Files\Launch Manager\LaunchAp.exe" [2005-07-25 13:36 32768]
"LManager"="C:\Program Files\Launch Manager\HotkeyApp.exe" [2006-04-19 15:08 69632]
"CtrlVol"="C:\Program Files\Launch Manager\CtrlVol.exe" [2003-09-16 14:28 20480]
"LMgrOSD"="C:\Program Files\Launch Manager\OSDCtrl.exe" [2005-07-25 10:45 241664]
"Wbutton"="C:\Program Files\Launch Manager\Wbutton.exe" [2006-04-20 09:23 86016]
"ePower_DMC"="C:\Acer\Empowering Technology\ePower\ePower_DMC.exe" [2006-03-30 18:47 421888]
"Boot"="C:\Acer\Empowering Technology\ePower\Boot.exe" [2006-03-15 22:12 579584]
"Acer ePresentation HPD"="C:\Acer\Empowering Technology\ePresentation\ePresentation.exe" [2006-03-31 16:39 204800]
"eRecoveryService"="C:\Acer\Empowering Technology\eRecovery\eRAgent.exe" [2006-04-28 16:43 401408]
"ImageItEncrypt"="C:\WINDOWS\system32\ImageItEncry pt.exe" [2005-12-30 14:02 40960]
"SPAMfighter Agent"="C:\Program Files\SPAMfighter\SFAgent.exe" [2007-12-14 09:55 308880]
"Adobe Reader Speed Launcher"="D:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2008-05-27 10:50 413696]
"AppleSyncNotifier"="C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-07-10 09:47 116040]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-07-10 10:51 289064]
"AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2008-07-18 10:42 1232152]
"SunJavaUpdateSched"="C:\Program Files\Java\jre6\bin\jusched.exe" [2008-07-27 23:50 136600]
"RTHDCPL"="RTHDCPL.EXE" [2006-01-11 17:23 15961088 C:\WINDOWS\RTHDCPL.exe]
"AGRSMMSG"="AGRSMMSG.exe" [2005-09-09 11:20 88203 C:\WINDOWS\AGRSMMSG.exe]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 05:00 15360]
C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\
Acer Empowering Technology.lnk - C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe [2006-08-02 04:11:37 45056]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=avgrsstx.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.mkdmp3enc"= C:\PROGRA~1\Acer\ACERAR~1\Kernel\Burner\MKDMP3Enc. ACM
"MSACM.CEGSM"= mobilev.acm
[HKLM\~\startupfolder\C:^Documents and Settings^Johan^Menu Start^Programma's^Opstarten^ATnotes.dat]
path=C:\Documents and Settings\Johan\Menu Start\Programma's\Opstarten\ATnotes.dat
backup=C:\WINDOWS\pss\ATnotes.datStartup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg
[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\AuthorizedApplications\List]
"C:\\Program Files\\Microsoft ActiveSync\\WCESCOMM.EXE"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgemc.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"C:\Program Files\Microsoft ActiveSync\rapimgr.exe"= C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"C:\Program Files\Microsoft ActiveSync\WCESMgr.exe"= C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\GloballyOpenPorts\List]
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
R1 AvgLdx86;AVG Free AVI Loader Driver x86;C:\WINDOWS\system32\Drivers\avgldx86.sys [2008-07-18 10:42]
R1 Hotkey;Hotkey;C:\WINDOWS\system32\drivers\Hotkey.s ys [2003-04-28 11:27]
R2 avg8emc;AVG Free8 E-mail Scanner;C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-07-18 10:42]
R2 avg8wd;AVG Free8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-07-18 10:42]
R2 AvgTdiX;AVG Free8 Network Redirector;C:\WINDOWS\system32\Drivers\avgtdix.sys [2008-07-18 10:42]
R2 JavaQuickStarterService;Java Quick Starter;C:\Program Files\Java\jre6\bin\jqs.exe [2008-07-27 23:50]
R2 SPAMfighter Update Service;SPAMfighter Update Service;C:\Program Files\SPAMfighter\sfus.exe [2007-12-14 09:57]
.
Inhoud van de 'Gedeelde Taken' map
2008-08-13 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 17:57]
.
- - - - ORPHANS REMOVED - - - -
MSConfigStartUp-Skype - C:\Program Files\Skype\Phone\Skype.exe
MSConfigStartUp-VoipBuster - C:\Program Files\VoipBuster.com\VoipBuster\VoipBuster.exe
MSConfigStartUp-CTFMON - (no file)

.
------- Supplementary Scan -------
.
R0 -: HKCU-Main,Start Page = hxxp://www.google.be/
R0 -: HKCU-Main,SearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.micros oft:en-US&ie=utf8&oe=utf8
R1 -: HKCU-Internet Connection Wizard,ShellNext = hxxp://global.acer.com/
R1 -: HKCU-Internet Settings,ProxyOverride = *.local
R1 -: HKCU-SearchURL,(Default) = hxxp://www.searchgateway.net/search/%s
O8 -: E&xporteren naar Microsoft Excel - D:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O16 -: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game14.zylom.com/activex/zylomgamesplayer.cab
C:\WINDOWS\Downloaded Program Files\ZylomGamesPlayer.inf
C:\WINDOWS\Downloaded Program Files\zylomgamesplayer.dll
.
************************************************** ************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-19 17:29:17
Windows 5.1.2600 Service Pack 2 FAT NTAPI
scannen van verborgen processen ...
scannen van verborgen autostart items ...
scannen van verborgen bestanden ...
Scan succesvol afgerond
verborgen bestanden: 0
************************************************** ************************
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Program Files\AVG\AVG8\avgrsx.exe
C:\Program Files\AVG\AVG8\avgrsx.exe
.
************************************************** ************************
.
Voltooingstijd: 2008-08-19 17:34:21 - machine was rebooted
ComboFix2.txt 2008-01-11 19:11:02
ComboFix-quarantined-files.txt 2008-08-19 15:33:50
Pre-Run: 13,730,971,648 bytes beschikbaar
Post-Run: 13,961,691,136 bytes beschikbaar
WindowsXP-KB310994-SP2-Home-BootDisk-NLD.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOW S
[operating systems]
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Micro soft Windows XP Home Edition" /noexecute=optin /fastdetect
241 --- E O F --- 2008-08-14 19:49:40


HijackThis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:37:32, on 19-8-2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Acer\Acer Arcade\PCMService.exe
C:\Program Files\Launch Manager\LaunchAp.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Launch Manager\OSDCtrl.exe
C:\Program Files\Launch Manager\Wbutton.exe
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\Program Files\SPAMfighter\SFAgent.exe
D:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
D:\Program Files\WhatPulse\WhatPulse.exe
C:\Program Files\SPAMfighter\sfus.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\AVG\AVG8\avgrsx.exe
C:\Program Files\AVG\AVG8\avgrsx.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.searchgateway.net/search/%s
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://global.acer.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\sw g.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [ntiMUI] C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Acer\Acer Arcade\PCMService.exe"
O4 - HKLM\..\Run: [LaunchAp] "C:\Program Files\Launch Manager\LaunchAp.exe"
O4 - HKLM\..\Run: [LManager] "C:\Program Files\Launch Manager\HotkeyApp.exe"
O4 - HKLM\..\Run: [CtrlVol] "C:\Program Files\Launch Manager\CtrlVol.exe"
O4 - HKLM\..\Run: [LMgrOSD] "C:\Program Files\Launch Manager\OSDCtrl.exe"
O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [Boot] C:\Acer\Empowering Technology\ePower\Boot.exe
O4 - HKLM\..\Run: [Acer ePresentation HPD] C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [ImageItEncrypt] C:\WINDOWS\system32\ImageItEncrypt.exe
O4 - HKLM\..\Run: [SPAMfighter Agent] "C:\Program Files\SPAMfighter\SFAgent.exe" update delay 60
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
O4 - HKCU\..\Run: [WhatPulse] D:\Program Files\WhatPulse\WhatPulse.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://D:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Mobiele favorieten maken... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} (UploadListView Class) - http://picasaweb.google.nl/s/v/33.02/uploader2.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} - http://messenger.zone.msn.com/NL-BE/.../GAME_UNO1.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} - http://cdn.scan.safety.live.com/reso...lscbase969.cab
O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} - http://housecall65.trendmicro.com/ho...vex/hcImpl.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} - http://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game14.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab56986.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SPAMfighter Update Service - SPAMfighter ApS - C:\Program Files\SPAMfighter\sfus.exe
--
End of file - 12580 bytes

[Roelof]

Open Kladblok, kopiëer en plak de onderstaande vette tekst in een leeg venster:

File::
C:\WINDOWS\iun6002.exe

Sla dit op op je Bureaublad als CFScript.txt
Sleep CFScript.txt in ComboFix.exe zoals getoond in onderstaand voorbeeld :


Dit zal ComboFix doen herstarten.
Start opnieuw op als daarom gevraagd wordt en post de inhoud van de Combofix.txt in je volgende antwoord samen met een nieuw HijackThislogje.

[Gio]

Combofix

ComboFix 08-08-18.05 - Johan 2008-08-20 1:50:26.3 - FAT32x86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1043.18.532 [GMT 2:00]
Gestart vanuit: C:\Documents and Settings\Johan\Bureaublad\ComboFix.exe
Command switches used :: C:\Documents and Settings\Johan\Bureaublad\CFScript.txt
* Nieuw herstelpunt werd aangemaakt
FILE ::
C:\WINDOWS\iun6002.exe
.
(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\WINDOWS\iun6002.exe
.
(((((((((((((((((((( Bestanden Gemaakt van 2008-07-19 to 2008-08-19 ))))))))))))))))))))))))))))))
.
2008-08-19 13:23 . 2008-08-17 15:01 38,472 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-08-17 18:22 . 2008-08-17 18:23 <DIR> d-------- C:\WINDOWS\system32\CatRoot2
2008-08-17 18:16 . 2008-08-17 18:16 <DIR> d-------- C:\zipitpro
2008-08-16 12:10 . 2008-08-16 12:10 <DIR> d-------- C:\Deckard
2008-08-14 21:41 . 2008-08-14 21:49 1,374 --a------ C:\WINDOWS\imsins.BAK
2008-08-14 11:44 . 2008-08-17 18:28 <DIR> dr-h----- C:\Documents and Settings\Johan\Onlangs geopend
2008-08-12 19:14 . 2008-08-12 19:14 <DIR> d-------- C:\Program Files\Lavasoft
2008-08-12 19:14 . 2008-08-12 19:14 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-08-12 19:13 . 2008-08-12 19:13 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-08-04 13:03 . 2008-08-04 13:04 <DIR> d-------- C:\Program Files\VS Revo Group
2008-07-28 19:24 . 2008-07-28 19:24 <DIR> d-------- C:\Medion
2008-07-28 17:35 . 2008-07-28 17:35 <DIR> d-------- C:\Documents and Settings\Johan\OngameNetwork
2008-07-28 14:25 . 2008-07-28 14:25 <DIR> d-------- C:\Program Files\MEDION
2008-07-28 14:06 . 2005-10-21 03:47 30,592 --------- C:\WINDOWS\system32\drivers\rndismpx.sys
2008-07-28 14:06 . 2005-10-21 03:47 12,800 --------- C:\WINDOWS\system32\drivers\usb8023x.sys
2008-07-27 23:50 . 2008-07-27 23:50 410,976 --a------ C:\WINDOWS\system32\deploytk.dll
2008-07-27 23:50 . 2008-07-27 23:50 73,728 --a------ C:\WINDOWS\system32\javacpl.cpl
.
((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))) ))
.
2008-08-17 13:01 17,144 ----a-w C:\WINDOWS\system32\drivers\mbam.sys
2008-07-18 08:42 96,520 ----a-w C:\WINDOWS\system32\drivers\avgldx86.sys
2008-07-18 08:42 76,040 ----a-w C:\WINDOWS\system32\drivers\avgtdix.sys
2008-07-18 08:42 10,520 ----a-w C:\WINDOWS\system32\avgrsstx.dll
2008-07-18 08:42 --------- d-----w C:\Program Files\AVG
2008-07-18 08:42 --------- d-----w C:\Documents and Settings\All Users\Application Data\avg8
2008-07-16 14:00 --------- d-----w C:\Program Files\iTunes
2008-07-16 14:00 --------- d-----w C:\Program Files\iPod
2008-07-16 13:59 --------- d-----w C:\Program Files\Common Files\Apple
2008-07-16 13:59 --------- d-----w C:\Program Files\Bonjour
2008-07-14 16:24 --------- d-----w C:\Program Files\DivX
2008-07-14 16:19 --------- d-----w C:\Program Files\Codec Pack - All In 1
2008-07-14 11:43 --------- d-----w C:\Program Files\QuickTime
2008-07-14 11:42 --------- d-----w C:\Program Files\Apple Software Update
2008-07-14 11:42 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple
2008-07-12 11:00 4,263 --sh--w C:\WINDOWS\windllreg1c.sys
2008-07-12 10:58 --------- d-----w C:\Program Files\ReadPlease 2003
2008-07-07 20:32 253,952 ----a-w C:\WINDOWS\system32\es.dll
2008-07-07 20:32 253,952 ----a-w C:\WINDOWS\system32\dllcache\es.dll
2008-06-24 16:24 74,240 ----a-w C:\WINDOWS\system32\mscms.dll
2008-06-24 16:24 74,240 ----a-w C:\WINDOWS\system32\dllcache\mscms.dll
2008-06-24 08:43 3,592,192 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll
2008-06-23 16:37 --------- d-----w C:\Program Files\Malwarebytes' Anti-Malware
2008-06-23 16:37 --------- d-----w C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-06-23 09:23 70,656 ----a-w C:\WINDOWS\system32\dllcache\ie4uinit.exe
2008-06-23 09:23 625,664 ----a-w C:\WINDOWS\system32\dllcache\iexplore.exe
2008-06-23 09:20 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe
2008-06-21 05:23 161,792 ----a-w C:\WINDOWS\system32\dllcache\ieakui.dll
2008-06-20 17:43 247,296 ----a-w C:\WINDOWS\system32\mswsock.dll
2008-06-20 17:43 247,296 ----a-w C:\WINDOWS\system32\dllcache\mswsock.dll
2008-06-20 17:43 148,992 ----a-w C:\WINDOWS\system32\dllcache\dnsapi.dll
2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\dllcache\tcpip.sys
2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys
2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\dllcache\afd.sys
2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\dllcache\tcpip6.sys
2008-06-18 17:52 161,096 ----a-w C:\WINDOWS\system32\DivXCodecVersionChecker.exe
2008-06-14 18:00 272,640 ------w C:\WINDOWS\system32\dllcache\bthport.sys
2008-06-11 00:07 524,288 ----a-w C:\WINDOWS\system32\DivXsm.exe
2008-06-11 00:07 3,596,288 ----a-w C:\WINDOWS\system32\qt-dx331.dll
2008-06-11 00:07 129,784 ------w C:\WINDOWS\system32\pxafs.dll
2008-06-11 00:07 120,056 ------w C:\WINDOWS\system32\pxcpyi64.exe
2008-06-11 00:07 118,520 ------w C:\WINDOWS\system32\pxinsi64.exe
2008-06-11 00:04 200,704 ----a-w C:\WINDOWS\system32\ssldivx.dll
2008-06-11 00:04 1,044,480 ----a-w C:\WINDOWS\system32\libdivx.dll
2008-05-22 22:18 12,288 ----a-w C:\WINDOWS\system32\DivXWMPExtType.dll
2007-06-25 11:30 952 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
.
((((((((((((((((((((((((((((( snapshot@2008-08-19_17.32.05.29 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-08-19 15:31:42 16,384 ----a-w C:\WINDOWS\Temp\Perflib_Perfdata_260.dat
+ 2008-08-19 15:30:12 16,384 ----a-w C:\WINDOWS\Temp\Perflib_Perfdata_6cc.dat
.
((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))) )
.
.
REGEDIT4
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"H/PC Connection Agent"="C:\Program Files\Microsoft ActiveSync\Wcescomm.exe" [2006-11-13 18:34 1289000]
"WhatPulse"="D:\Program Files\WhatPulse\WhatPulse.exe" [2006-08-21 19:48 665600]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe" [2007-07-26 11:25 68856]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 05:00 15360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2005-12-16 16:32 761945]
"AzMixerSel"="C:\Program Files\Realtek\InstallShield\AzMixerSel.exe" [2005-06-11 19:51 53248]
"ntiMUI"="C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe" [2005-05-11 17:15 45056]
"IMJPMIG8.1"="C:\WINDOWS\IME\imjp8_1\IMJPMIG.E XE" [2004-08-04 05:00 208952]
"MSPY2002"="C:\WINDOWS\system32\IME\PINTLGNT\ImScI nst.exe" [2004-08-04 05:00 59392]
"PHIME2002ASync"="C:\WINDOWS\system32\IME\TINTLGNT \TINTSETP.EXE" [2004-08-04 05:00 455168]
"PHIME2002A"="C:\WINDOWS\system32\IME\TINTLGNT\TIN TSETP.EXE" [2004-08-04 05:00 455168]
"igfxhkcmd"="C:\WINDOWS\system32\hkcmd.exe" [2006-02-07 08:36 77824]
"igfxpers"="C:\WINDOWS\system32\igfxpers.exe" [2006-02-07 08:40 118784]
"PCMService"="C:\Program Files\Acer\Acer Arcade\PCMService.exe" [2006-03-23 00:12 151552]
"LaunchAp"="C:\Program Files\Launch Manager\LaunchAp.exe" [2005-07-25 13:36 32768]
"LManager"="C:\Program Files\Launch Manager\HotkeyApp.exe" [2006-04-19 15:08 69632]
"CtrlVol"="C:\Program Files\Launch Manager\CtrlVol.exe" [2003-09-16 14:28 20480]
"LMgrOSD"="C:\Program Files\Launch Manager\OSDCtrl.exe" [2005-07-25 10:45 241664]
"Wbutton"="C:\Program Files\Launch Manager\Wbutton.exe" [2006-04-20 09:23 86016]
"ePower_DMC"="C:\Acer\Empowering Technology\ePower\ePower_DMC.exe" [2006-03-30 18:47 421888]
"Boot"="C:\Acer\Empowering Technology\ePower\Boot.exe" [2006-03-15 22:12 579584]
"Acer ePresentation HPD"="C:\Acer\Empowering Technology\ePresentation\ePresentation.exe" [2006-03-31 16:39 204800]
"eRecoveryService"="C:\Acer\Empowering Technology\eRecovery\eRAgent.exe" [2006-04-28 16:43 401408]
"ImageItEncrypt"="C:\WINDOWS\system32\ImageItEncry pt.exe" [2005-12-30 14:02 40960]
"SPAMfighter Agent"="C:\Program Files\SPAMfighter\SFAgent.exe" [2007-12-14 09:55 308880]
"Adobe Reader Speed Launcher"="D:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2008-05-27 10:50 413696]
"AppleSyncNotifier"="C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-07-10 09:47 116040]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-07-10 10:51 289064]
"AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2008-07-18 10:42 1232152]
"SunJavaUpdateSched"="C:\Program Files\Java\jre6\bin\jusched.exe" [2008-07-27 23:50 136600]
"RTHDCPL"="RTHDCPL.EXE" [2006-01-11 17:23 15961088 C:\WINDOWS\RTHDCPL.exe]
"AGRSMMSG"="AGRSMMSG.exe" [2005-09-09 11:20 88203 C:\WINDOWS\AGRSMMSG.exe]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 05:00 15360]
C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\
Acer Empowering Technology.lnk - C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe [2006-08-02 04:11:37 45056]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=avgrsstx.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.mkdmp3enc"= C:\PROGRA~1\Acer\ACERAR~1\Kernel\Burner\MKDMP3Enc. ACM
"MSACM.CEGSM"= mobilev.acm
[HKLM\~\startupfolder\C:^Documents and Settings^Johan^Menu Start^Programma's^Opstarten^ATnotes.dat]
path=C:\Documents and Settings\Johan\Menu Start\Programma's\Opstarten\ATnotes.dat
backup=C:\WINDOWS\pss\ATnotes.datStartup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg
[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\AuthorizedApplications\List]
"C:\\Program Files\\Microsoft ActiveSync\\WCESCOMM.EXE"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgemc.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"C:\Program Files\Microsoft ActiveSync\rapimgr.exe"= C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"C:\Program Files\Microsoft ActiveSync\WCESMgr.exe"= C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\GloballyOpenPorts\List]
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
R1 AvgLdx86;AVG Free AVI Loader Driver x86;C:\WINDOWS\system32\Drivers\avgldx86.sys [2008-07-18 10:42]
R1 Hotkey;Hotkey;C:\WINDOWS\system32\drivers\Hotkey.s ys [2003-04-28 11:27]
R2 avg8emc;AVG Free8 E-mail Scanner;C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-07-18 10:42]
R2 avg8wd;AVG Free8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-07-18 10:42]
R2 AvgTdiX;AVG Free8 Network Redirector;C:\WINDOWS\system32\Drivers\avgtdix.sys [2008-07-18 10:42]
R2 JavaQuickStarterService;Java Quick Starter;C:\Program Files\Java\jre6\bin\jqs.exe [2008-07-27 23:50]
R2 SPAMfighter Update Service;SPAMfighter Update Service;C:\Program Files\SPAMfighter\sfus.exe [2007-12-14 09:57]
.
Inhoud van de 'Gedeelde Taken' map
2008-08-13 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 17:57]
.
************************************************** ************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-20 01:56:30
Windows 5.1.2600 Service Pack 2 FAT NTAPI
scannen van verborgen processen ...
scannen van verborgen autostart items ...
scannen van verborgen bestanden ...
Scan succesvol afgerond
verborgen bestanden: 0
************************************************** ************************
.
Voltooingstijd: 2008-08-20 1:58:20
ComboFix3.txt 2008-01-11 19:11:02
ComboFix-quarantined-files.txt 2008-08-19 23:58:14
ComboFix2.txt 2008-08-19 15:34:38
Pre-Run: 14,693,433,344 bytes beschikbaar
Post-Run: 14,844,985,344 bytes beschikbaar
185 --- E O F --- 2008-08-14 19:49:40

HijackThis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:01:53, on 20-8-2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\Acer\Acer Arcade\PCMService.exe
C:\Program Files\Launch Manager\LaunchAp.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Launch Manager\OSDCtrl.exe
C:\Program Files\Launch Manager\Wbutton.exe
C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
C:\Program Files\SPAMfighter\SFAgent.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
D:\Program Files\WhatPulse\WhatPulse.exe
C:\Program Files\SPAMfighter\sfus.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG8\avgrsx.exe
C:\Program Files\AVG\AVG8\avgrsx.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\explorer.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.searchgateway.net/search/%s
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://global.acer.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\sw g.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [ntiMUI] C:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Acer\Acer Arcade\PCMService.exe"
O4 - HKLM\..\Run: [LaunchAp] "C:\Program Files\Launch Manager\LaunchAp.exe"
O4 - HKLM\..\Run: [LManager] "C:\Program Files\Launch Manager\HotkeyApp.exe"
O4 - HKLM\..\Run: [CtrlVol] "C:\Program Files\Launch Manager\CtrlVol.exe"
O4 - HKLM\..\Run: [LMgrOSD] "C:\Program Files\Launch Manager\OSDCtrl.exe"
O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
O4 - HKLM\..\Run: [ePower_DMC] C:\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [Boot] C:\Acer\Empowering Technology\ePower\Boot.exe
O4 - HKLM\..\Run: [Acer ePresentation HPD] C:\Acer\Empowering Technology\ePresentation\ePresentation.exe
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [ImageItEncrypt] C:\WINDOWS\system32\ImageItEncrypt.exe
O4 - HKLM\..\Run: [SPAMfighter Agent] "C:\Program Files\SPAMfighter\SFAgent.exe" update delay 60
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
O4 - HKCU\..\Run: [WhatPulse] D:\Program Files\WhatPulse\WhatPulse.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://D:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Mobiele favorieten maken... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} (UploadListView Class) - http://picasaweb.google.nl/s/v/33.02/uploader2.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} - http://messenger.zone.msn.com/NL-BE/.../GAME_UNO1.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} - http://cdn.scan.safety.live.com/reso...lscbase969.cab
O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} - http://housecall65.trendmicro.com/ho...vex/hcImpl.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} - http://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game14.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab56986.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Acer\Acer Arcade\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Acer\Acer Arcade\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SPAMfighter Update Service - SPAMfighter ApS - C:\Program Files\SPAMfighter\sfus.exe
--
End of file - 12457 bytes

[Gio]

PC werkt helaas nog altijd even traag

[Gio]

Iemand???