Hoi,

Ik heb een probleem met internet explorer.
Indien ik mijn pc opstart gaat alles goed enkel moet ik bijzonder lang wachten op internet explorer.
Ook de windowns-tune en contole center van mijn printer komt even laat als mijn internet explorer ( idem monzilla firefox ).:cry:


Welke progjes heb ik zoal al hun werk laten doen:

auslogics Bootspeed en Disk Defrag
Malwarebytes Anti-Malware
TuneUp Utilities 2009
WinSysClean 2009
Ad-Aware
ATF-Cleaner
Spybot - Search & Destroy en Avast virusscan.
Niets helpt en nu ben ik teneide raad, kunnen jullie mij nog helpen? :bow:

Hier mijn logje:


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:14:01, on 8/05/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
c:\windows\system32\smss.exe
c:\windows\system32\winlogon.exe
c:\windows\system32\services.exe
c:\windows\system32\lsass.exe
c:\windows\system32\svchost.exe
c:\windows\system32\svchost.exe
c:\windows\system32\svchost.exe
c:\program files\lavasoft\ad-aware\aawservice.exe
c:\program files\alwil software\avast4\aswupdsv.exe
c:\program files\alwil software\avast4\ashserv.exe
c:\windows\system32\spoolsv.exe
c:\program files\bonjour\mdnsresponder.exe
c:\program files\nero\nero8\incd\incdsrv.exe
c:\program files\java\jre6\bin\jqs.exe
c:\program files\common files\microsoft shared\vs7debug\mdm.exe
c:\program files\nero\nero8\nero backitup\nbservice.exe
c:\windows\system32\nvsvc32.exe
c:\program files\photodex\proshowgold\scsiaccess.exe
c:\windows\system32\svchost.exe
c:\windows\system32\tuprogst.exe
c:\program files\alwil software\avast4\ashmaisv.exe
c:\program files\alwil software\avast4\ashwebsv.exe
c:\windows\explorer.exe
c:\progra~1\alwils~1\avast4\ashdisp.exe
c:\windows\rthdcpl.exe
c:\windows\system32\rundll32.exe
c:\program files\brother\brmfcmon\brmfcwnd.exe
c:\program files\microsoft office\office12\groovemonitor.exe
c:\program files\java\jre6\bin\jusched.exe
c:\program files\brother\controlcenter3\brccmctl.exe
c:\windows\system32\ctfmon.exe
c:\program files\messenger\msmsgs.exe
c:\program files\brother\brmfcmon\brmfcmon.exe
c:\program files\internet explorer\iexplore.exe
c:\program files\internet explorer\iexplore.exe
c:\program files\internet explorer\iexplore.exe
c:\program files\trend micro\hijackthis\hijackthis.exe
r0 - hkcu\software\microsoft\internet explorer\main,start page = http://www.google.be/
r1 - hklm\software\microsoft\internet explorer\main,default_page_url = http://go.microsoft.com/fwlink/?linkid=69157
r1 - hklm\software\microsoft\internet explorer\main,default_search_url = http://go.microsoft.com/fwlink/?linkid=54896
r1 - hklm\software\microsoft\internet explorer\main,search page = http://go.microsoft.com/fwlink/?linkid=54896
r0 - hklm\software\microsoft\internet explorer\main,start page = http://go.microsoft.com/fwlink/?linkid=69157
r1 - hkcu\software\microsoft\windows\currentversion\int ernet settings,proxyoverride = *.local
r0 - hkcu\software\microsoft\internet explorer\toolbar,linksfoldername = koppelingen
o2 - bho: helperobject class - {00c6482d-c502-44c8-8409-fce54ad9c208} - c:\program files\techsmith\snagit 7\snagitbho.dll
o2 - bho: spybot-s&d ie protection - {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\sdhelper.dll
o2 - bho: groove gfs browser helper - {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\grooveshellextensions.dll
o2 - bho: windows live aanmelden - help - {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll
o2 - bho: java(tm) plug-in 2 ssv helper - {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
o2 - bho: jqsiestartdetectorimpl - {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
o3 - toolbar: snagit - {8ff5e183-abde-46eb-b09e-d2aab95cabe3} - c:\program files\techsmith\snagit 7\snagitieaddin.dll
o4 - hklm\..\run: [nwiz] nwiz.exe /install
o4 - hklm\..\run: [avast!] c:\progra~1\alwils~1\avast4\ashdisp.exe
o4 - hklm\..\run: [rthdcpl] rthdcpl.exe
o4 - hklm\..\run: [alcmtr] alcmtr.exe
o4 - hklm\..\run: [brmfcwnd] c:\program files\brother\brmfcmon\brmfcwnd.exe /autorun
o4 - hklm\..\run: [setdefprt] c:\program files\brother\brmfl06a\brstdvpt.exe
o4 - hklm\..\run: [controlcenter3] c:\program files\brother\controlcenter3\brctrcen.exe /autorun
o4 - hklm\..\run: [groovemonitor] c:\program files\microsoft office\office12\groovemonitor.exe
o4 - hklm\..\run: [sunjavaupdatesched] c:\program files\java\jre6\bin\jusched.exe
o4 - hklm\..\run: [nvcpldaemon] rundll32.exe c:\windows\system32\nvcpl.dll,nvstartup
o4 - hkcu\..\run: [ctfmon.exe] c:\windows\system32\ctfmon.exe
o4 - hkcu\..\run: [msmsgs] c:\program files\messenger\msmsgs.exe /background
o8 - extra context menu item: e&xporteren naar microsoft excel - res://c:\progra~1\micros~2\office12\excel.exe/3000
o9 - extra button: verzenden naar onenote - {2670000a-7350-4f3c-8081-5663ee0c6c49} - c:\progra~1\micros~2\office12\onbttnie.dll
o9 - extra 'tools' menuitem: verz&enden naar onenote - {2670000a-7350-4f3c-8081-5663ee0c6c49} - c:\progra~1\micros~2\office12\onbttnie.dll
o9 - extra button: research - {92780b25-18cc-41c8-b9be-3c9c571a8263} - c:\progra~1\micros~2\office12\refiebar.dll
o9 - extra button: (no name) - {aef9b8db-0def-4c0b-8209-661c9e82b8c3} - (no file)
o9 - extra button: (no name) - {dfb852a3-47f8-48c4-a200-58cab36fd2a2} - c:\progra~1\spybot~1\sdhelper.dll
o9 - extra 'tools' menuitem: spybot - search & destroy configuration - {dfb852a3-47f8-48c4-a200-58cab36fd2a2} - c:\progra~1\spybot~1\sdhelper.dll
o9 - extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - c:\windows\network diagnostic\xpnetdiag.exe
o9 - extra 'tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - c:\windows\network diagnostic\xpnetdiag.exe
o9 - extra button: messenger - {fb5f1910-f110-11d2-bb9e-00c04f795683} - c:\program files\messenger\msmsgs.exe
o9 - extra 'tools' menuitem: windows messenger - {fb5f1910-f110-11d2-bb9e-00c04f795683} - c:\program files\messenger\msmsgs.exe
o16 - dpf: {5d637fad-e202-48d1-8f18-5b9c459bd1e3} (image uploader control) - http://express.foto.com/imageuploader5.cab
o16 - dpf: {6e32070a-766d-4ee6-879c-dc1fa91d2fc3} (muwebcontrol class) - http://www.update.microsoft.com/microsoftupdate/v6/v5controls/en/x86/client/muweb_site.cab?1208683016765
o16 - dpf: {6e5e167b-1566-4316-b27f-0ddab3484cf7} (image uploader control) - http://www.mijnalbum.nl/v3/skin/nl/system/imageuploader4.cab
o16 - dpf: {cb50428b-657f-47df-9b32-671f82aa73f7} (photodex presenter ax control) - http://www.photodex.com/pxplay.cab
o18 - protocol: groovelocalgws - {88fed34c-f0ca-4636-a375-3cb6248b04cd} - c:\program files\microsoft office\office12\groovesystemservices.dll
o20 - appinit_dlls: xvixrs.dll,c:\windows\system32\getuname32.dll
o23 - service: lavasoft ad-aware service (aawservice) - lavasoft - c:\program files\lavasoft\ad-aware\aawservice.exe
o23 - service: adobe lm service - adobe systems - c:\program files\common files\adobe systems shared\service\adobelmsvc.exe
o23 - service: adobe version cue cs2 - adobe systems incorporated - c:\program files\adobe\adobe version cue cs2\bin\versioncuecs2.exe
o23 - service: avast! iavs4 control service (aswupdsv) - alwil software - c:\program files\alwil software\avast4\aswupdsv.exe
o23 - service: avast! antivirus - alwil software - c:\program files\alwil software\avast4\ashserv.exe
o23 - service: avast! mail scanner - alwil software - c:\program files\alwil software\avast4\ashmaisv.exe
o23 - service: avast! web scanner - alwil software - c:\program files\alwil software\avast4\ashwebsv.exe
o23 - service: ##id_string1.6844f930_1628_4223_b5cc_5bb94b879762# # (bonjour service) - apple computer, inc. - c:\program files\bonjour\mdnsresponder.exe
o23 - service: flexnet licensing service - acresso software inc. - c:\program files\common files\macrovision shared\flexnet publisher\fnplicensingservice.exe
o23 - service: installdriver table manager (idrivert) - macrovision corporation - c:\program files\common files\installshield\driver\1150\intel 32\idrivert.exe
o23 - service: incd helper (incdsrv) - nero ag - c:\program files\nero\nero8\incd\incdsrv.exe
o23 - service: java quick starter (javaquickstarterservice) - sun microsystems, inc. - c:\program files\java\jre6\bin\jqs.exe
o23 - service: mscsptisrv - sony corporation - c:\program files\common files\sony shared\avlib\mscsptisrv.exe
o23 - service: nero backitup scheduler 3 - nero ag - c:\program files\nero\nero8\nero backitup\nbservice.exe
o23 - service: nmindexingservice - nero ag - c:\program files\common files\nero\lib\nmindexingservice.exe
o23 - service: nvidia display driver service (nvsvc) - nvidia corporation - c:\windows\system32\nvsvc32.exe
o23 - service: pacsptisvr - unknown owner - c:\program files\common files\sony shared\avlib\pacsptisvr.exe
o23 - service: scsiaccess - unknown owner - c:\program files\photodex\proshowgold\scsiaccess.exe
o23 - service: sony spti service (sptisrv) - sony corporation - c:\program files\common files\sony shared\avlib\sptisrv.exe
o23 - service: tuneup drive defrag service (tuneup.defrag) - tuneup software - c:\windows\system32\tuneupdefragservice.exe
o23 - service: tuneup program statistics service (tuneup.programstatisticssvc) - tuneup software - c:\windows\system32\tuprogst.exe
--
end of file - 9001 bytes

Kan je dit logje nog eens maken zonder die kleuren aub.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:46:39, on 8/05/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Nero\Nero8\InCD\InCDsrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Brother\ControlCenter3\brccMCtl.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Mail\wlmail.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\TuneUp Utilities 2009\OneClick.exe
C:\Program Files\TuneUp Utilities 2009\RegistryCleaner.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 7\SnagItBHO.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 7\SnagItIEAddin.dll
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl06a\BrStDvPt.exe
O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-21-1935655697-1644491937-682003330-1005\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Emely')
O4 - HKUS\S-1-5-21-1935655697-1644491937-682003330-1005\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe" (User 'Emely')
O4 - HKUS\S-1-5-21-1935655697-1644491937-682003330-1005\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe (User 'Emely')
O4 - HKUS\S-1-5-21-1935655697-1644491937-682003330-1005\..\RunOnce: [Shockwave Updater] C:\WINDOWS\system32\Adobe\SHOCKW~1\SWHELP~2.EXE -Update -1100465 -"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)" -"http://plox.info/spelle/games/autogooien.dcr" (User 'Emely')
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {AEF9B8DB-0DEF-4c0b-8209-661C9E82B8C3} - (no file)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://express.foto.com/ImageUploader5.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1208683016765
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.mijnalbum.nl/v3/skin/nl/system/ImageUploader4.cab
O16 - DPF: {CB50428B-657F-47DF-9B32-671F82AA73F7} (Photodex Presenter AX control) - http://www.photodex.com/pxplay.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O20 - AppInit_DLLs: xvixrs.dll,C:\WINDOWS\System32\getuname32.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Version Cue CS2 - Adobe Systems Incorporated - C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762# # (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero8\InCD\InCDsrv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: ScsiAccess - Unknown owner - C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe
--
End of file - 10106 bytes

Volg deze instructies (http://www.bleepingcomputer.com/combofix/nl/hoe-dient-combofix-gebruikt-te-worden) om Combofix te downloaden. Is er iets niet duidelijk, dan vraag je het.
Voer de instructies op de BleepingComputer pagina uit, inclusief het installeren van de XP Recovery Console.
Indien je combofix al eerder gebruikt hebt en de recovery console al geïnstalleerd hebt mag je die stap overslaan.

OPMERKING:
Indien je, tijdens of na het downloaden van Combofix of tijdens het gebruik van Combofix een melding krijgt van je Antivirus- of een andere realtime scanner,
schakel dan deze scanner uit en download Combofix opnieuw.
Sommige scanners zien bepaalde componenten die Combofix gebruikt als verdacht en gaan deze blokkeren of verwijderen!

Dubbelklik op Combofix.exe, als Combofix aangeeft dat er een nieuwere versie beschikbaar is, dan sta je toe dat deze gedownload wordt.
Volg de instructies en aanvaard de disclaimer.
Tijdens het runnen van de fix, NIET in het venster klikken, want dit zal je pc doen vasthangen.
Wanneer de fix voltooid is en na herstart, zal de log Combofix.txt openen.

Post de inhoud van dit bestandje samen met een nieuwe hijackthislog.

ComboFix 09-05-07.A01 - Geert 08/05/2009 21:20.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.32.1043.18.1022.518 [GMT 2:00]
Gestart vanuit: c:\documents and settings\Geert\Bureaublad\ComboFix.exe
AV: avast! antivirus 4.8.1335 [VPS 090507-0] *On-access scanning enabled* (Updated)
.
(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\All Users.WINDOWS\Application Data\Microsoft\Network\Downloader\qmgr0.dat
c:\documents and settings\All Users.WINDOWS\Application Data\Microsoft\Network\Downloader\qmgr1.dat
c:\documents and settings\Geert\Application Data\02000000c8f98aa5573C.manifest
c:\documents and settings\Geert\Application Data\02000000c8f98aa5573O.manifest
c:\documents and settings\Geert\Application Data\02000000c8f98aa5573P.manifest
c:\documents and settings\Geert\Application Data\02000000c8f98aa5573S.manifest
c:\windows\system32\cerhqx.dll
c:\windows\system32\gpdbpcrx.dll
c:\windows\system32\GroupPolicy000.dat
----- BITS: Mogelijk geïnfecteerde sites -----
hxxp://tinyurl.com
.
(((((((((((((((((((( Bestanden Gemaakt van 2009-04-08 to 2009-05-08 ))))))))))))))))))))))))))))))
.
2009-05-08 17:56 . 2009-05-08 17:56 -------- d-sh--w c:\documents and settings\Emely\IECompatCache
2009-05-08 17:55 . 2009-05-08 17:55 -------- d-sh--w c:\documents and settings\Emely\PrivacIE
2009-05-08 17:54 . 2009-05-08 17:54 -------- d-sh--w c:\documents and settings\Emely\IETldCache
2009-05-08 09:06 . 2009-05-08 09:06 -------- d-sh--w c:\documents and settings\Caroline\IECompatCache
2009-05-08 09:05 . 2009-05-08 09:05 -------- d-sh--w c:\documents and settings\Caroline\PrivacIE
2009-05-08 09:04 . 2009-05-08 09:04 -------- d-sh--w c:\documents and settings\Caroline\IETldCache
2009-05-06 11:40 . 2009-05-06 11:40 -------- d-sh--w c:\documents and settings\Geert\IECompatCache
2009-05-06 11:39 . 2009-05-06 11:39 -------- d-sh--w c:\documents and settings\Geert\PrivacIE
2009-05-06 11:36 . 2009-05-06 11:36 -------- d-sh--w c:\documents and settings\Geert\IETldCache
2009-05-06 11:26 . 2009-05-06 11:26 -------- d-----w c:\windows\ie8updates
2009-05-06 11:26 . 2009-02-28 04:55 105984 -c----w c:\windows\system32\dllcache\iecompat.dll
2009-05-06 11:25 . 2009-05-06 11:26 -------- dc-h--w c:\windows\ie8
2009-05-06 10:46 . 2009-05-06 10:46 -------- d-----w C:\ProgramData
2009-05-06 10:46 . 2009-05-06 11:14 -------- d-----w c:\program files\Angle Interactive
2009-05-05 17:45 . 2009-05-05 18:49 -------- d-----w c:\documents and settings\Geert\Application Data\Auslogics
2009-05-05 17:45 . 2009-05-05 18:40 -------- d-----w c:\program files\Auslogics
2009-05-05 13:22 . 2009-05-05 13:22 -------- dc-h--w c:\documents and settings\Geert\Local Settings\Application Data\{D69E1662-EA1D-4B43-B558-40BFCC33E1FE}
2009-05-05 13:22 . 2009-05-05 13:22 -------- d-----w c:\program files\WinSysClean 2009
2009-05-05 12:49 . 2009-05-05 12:49 -------- d-----w C:\UDManager Downloads
2009-05-05 12:42 . 2009-05-05 12:49 -------- d-----w c:\program files\123 Bulk Email Direct Sender
2009-04-30 14:42 . 2009-04-30 14:42 -------- d-----w c:\program files\NT Registry Optimizer
2009-04-30 08:24 . 2009-04-30 08:24 -------- d-----w c:\windows\Tuneup Utilities 2009
2009-04-30 07:48 . 2009-04-30 07:48 -------- d-----w c:\documents and settings\Geert\Application Data\AccurateRip
2009-04-30 07:48 . 2009-04-30 07:48 14373 ----a-w c:\windows\system32\SpoonUninstall-dBpoweramp Music Converter.dat
2009-04-30 07:48 . 2009-04-30 07:47 5433520 ----a-w c:\windows\system32\SpoonUninstall.exe
2009-04-30 07:48 . 2009-04-30 07:48 -------- d-----w c:\program files\Illustrate
2009-04-29 21:28 . 2009-05-05 18:48 -------- d-----w c:\program files\Winamp
2009-04-29 20:55 . 2009-04-29 20:55 -------- d-----w c:\program files\Free WMA to MP3 Converter
2009-04-29 20:42 . 2002-01-08 00:20 339968 ----a-w c:\windows\system32\MP3EncX.dll
2009-04-29 20:14 . 2009-04-29 20:14 -------- d-----w c:\windows\Total Recorder Professional
2009-04-29 20:06 . 2009-04-29 20:06 -------- d-----w c:\program files\Common Files\Download Manager
2009-04-29 19:54 . 2009-04-29 19:54 -------- d-----w C:\My Media
2009-04-29 19:53 . 2009-04-29 20:00 -------- d-----w c:\program files\Media Audio Capture
2009-04-29 19:53 . 2009-04-29 19:53 245760 ------w c:\windows\Setup1.exe
2009-04-29 19:53 . 2009-04-29 19:53 73216 ----a-w c:\windows\ST6UNST.EXE
2009-04-29 19:49 . 2009-04-29 19:52 -------- d-----w c:\program files\MidiMeow
2009-04-28 18:54 . 2009-04-28 18:54 -------- d-----w c:\program files\Lavalys
2009-04-17 19:22 . 2009-04-17 19:40 -------- d-----w c:\program files\FLV to AVI MPEG WMV 3GP MP4 iPod Converter
2009-04-17 18:40 . 2009-04-17 18:40 -------- d-----w c:\program files\YouTube Downloader
2009-04-17 15:03 . 2009-02-06 10:10 227840 -c----w c:\windows\system32\dllcache\wmiprvse.exe
2009-04-17 15:03 . 2009-03-06 14:23 285696 -c----w c:\windows\system32\dllcache\pdh.dll
2009-04-17 15:03 . 2009-02-09 11:27 111104 -c----w c:\windows\system32\dllcache\services.exe
2009-04-17 15:03 . 2009-02-09 10:56 401408 -c----w c:\windows\system32\dllcache\rpcss.dll
2009-04-17 15:03 . 2009-02-09 10:56 473600 -c----w c:\windows\system32\dllcache\fastprox.dll
2009-04-17 15:03 . 2009-02-09 10:56 684544 -c----w c:\windows\system32\dllcache\advapi32.dll
2009-04-17 15:03 . 2009-02-09 10:56 734208 -c----w c:\windows\system32\dllcache\lsasrv.dll
2009-04-17 15:03 . 2009-02-09 10:56 453120 -c----w c:\windows\system32\dllcache\wmiprvsd.dll
2009-04-17 15:03 . 2009-02-09 10:56 735744 -c----w c:\windows\system32\dllcache\ntdll.dll
2009-04-17 15:02 . 2008-04-21 21:16 218624 -c----w c:\windows\system32\dllcache\wordpad.exe
2009-04-11 19:04 . 2009-04-11 19:25 -------- d-----w c:\documents and settings\Geert\Application Data\GrabIt
.
((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))) ))
.
2009-05-08 19:14 . 2009-05-05 18:40 0 ---ha-w C:\BIT170.tmp
2009-05-06 12:31 . 2008-05-13 15:38 69624 ----a-w c:\documents and settings\Geert\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-05-06 11:30 . 2007-09-10 13:25 -------- d-----w c:\program files\Microsoft Works
2009-05-06 11:20 . 2004-08-04 12:00 90790 ----a-w c:\windows\system32\perfc013.dat
2009-05-06 11:20 . 2004-08-04 12:00 509240 ----a-w c:\windows\system32\perfh013.dat
2009-04-30 08:24 . 2009-03-28 14:22 -------- d-----w c:\program files\TuneUp Utilities 2009
2009-04-10 20:48 . 2008-05-14 16:41 -------- d-----w c:\program files\LimeWire
2009-04-08 20:25 . 2009-04-08 18:15 -------- d-----w c:\program files\Internet Download Manager
2009-04-06 16:59 . 2009-04-06 16:59 615 ----a-w c:\windows\system32\YptXTjwK3N7At.vbs
2009-04-06 16:58 . 2009-04-06 16:58 0 ----a-w c:\windows\system32\46A.tmp
2009-04-06 16:58 . 2009-04-06 16:58 615 ----a-w c:\windows\system32\FvfY8CQdJGxXM.vbs
2009-04-06 13:15 . 2007-09-09 06:13 -------- d-----w c:\program files\Common Files\Adobe
2009-04-01 19:02 . 2007-12-02 16:25 -------- d-----w c:\program files\Java
2009-03-28 14:22 . 2009-03-28 14:22 603904 ----a-w c:\windows\system32\TUProgSt.exe
2009-03-28 14:22 . 2009-03-28 14:22 362240 ----a-w c:\windows\system32\TuneUpDefragService.exe
2009-03-24 13:22 . 2007-10-12 19:22 -------- d-----w c:\program files\FTDv3.8
2009-03-20 09:57 . 2009-03-20 09:57 -------- d-----w c:\program files\7-Zip
2009-03-20 09:44 . 2009-03-20 09:41 -------- d-----w c:\program files\QuickPar
2009-03-13 18:54 . 2008-09-13 15:49 -------- d-----w c:\program files\Malwarebytes' Anti-Malware
2009-03-09 03:19 . 2008-12-11 19:54 410984 ----a-w c:\windows\system32\deploytk.dll
2009-03-08 02:34 . 2004-08-04 12:00 914944 ----a-w c:\windows\system32\wininet.dll
2009-03-08 02:34 . 2004-08-04 12:00 43008 ----a-w c:\windows\system32\licmgr10.dll
2009-03-08 02:33 . 2004-08-04 12:00 18944 ----a-w c:\windows\system32\corpol.dll
2009-03-08 02:33 . 2004-08-04 12:00 420352 ----a-w c:\windows\system32\vbscript.dll
2009-03-08 02:32 . 2004-08-04 12:00 72704 ----a-w c:\windows\system32\admparse.dll
2009-03-08 02:32 . 2004-08-04 12:00 71680 ----a-w c:\windows\system32\iesetup.dll
2009-03-08 02:31 . 2004-08-04 12:00 34816 ----a-w c:\windows\system32\imgutil.dll
2009-03-08 02:31 . 2004-08-04 12:00 48128 ----a-w c:\windows\system32\mshtmler.dll
2009-03-08 02:31 . 2004-08-04 12:00 45568 ----a-w c:\windows\system32\mshta.exe
2009-03-08 02:22 . 2004-08-04 12:00 156160 ----a-w c:\windows\system32\msls31.dll
2009-03-06 14:23 . 2004-08-04 12:00 285696 ----a-w c:\windows\system32\pdh.dll
2009-02-14 16:12 . 2009-02-14 16:13 716800 ----a-w c:\windows\iun6002ev.exe
2009-02-11 09:19 . 2008-09-13 15:49 38496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys
2009-02-11 09:19 . 2008-09-13 15:49 15504 ----a-w c:\windows\system32\drivers\mbam.sys
2009-02-09 14:08 . 2004-08-04 12:00 1846912 ----a-w c:\windows\system32\win32k.sys
2009-02-09 11:27 . 2004-08-04 00:58 2028544 ----a-w c:\windows\system32\ntkrnlpa.exe
2009-02-09 11:27 . 2004-08-04 12:00 2149888 ----a-w c:\windows\system32\ntoskrnl.exe
2009-02-09 11:27 . 2004-08-04 12:00 111104 ----a-w c:\windows\system32\services.exe
2009-02-09 10:56 . 2004-08-04 12:00 734208 ----a-w c:\windows\system32\lsasrv.dll
2009-02-09 10:56 . 2004-08-04 12:00 684544 ----a-w c:\windows\system32\advapi32.dll
2009-02-09 10:56 . 2004-08-04 12:00 401408 ----a-w c:\windows\system32\rpcss.dll
2009-02-09 10:56 . 2004-08-04 12:00 735744 ----a-w c:\windows\system32\ntdll.dll
2008-06-04 13:05 . 2008-06-04 13:05 774144 ----a-w c:\program files\RngInterstitial.dll
.
((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))) )
.
.
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-02-05 81000]
"BrMfcWnd"="c:\program files\Brother\Brmfcmon\BrMfcWnd.exe" [2006-03-28 622592]
"SetDefPrt"="c:\program files\Brother\Brmfl06a\BrStDvPt.exe" [2005-01-26 49152]
"ControlCenter3"="c:\program files\Brother\ControlCenter3\brctrcen.exe" [2006-04-10 61440]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-12-04 8523776]
"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2007-12-04 1626112]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2008-04-27 16855552]
[HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Start^Programma's^Opstarten^Adobe Acrobat Snelle start.lnk]
path=c:\documents and settings\All Users.WINDOWS\Menu Start\Programma's\Opstarten\Adobe Acrobat Snelle start.lnk
backup=c:\windows\pss\Adobe Acrobat Snelle start.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Start^Programma's^Opstarten^Adobe Gamma.lnk]
path=c:\documents and settings\All Users.WINDOWS\Menu Start\Programma's\Opstarten\Adobe Gamma.lnk
backup=c:\windows\pss\Adobe Gamma.lnkCommon Startup
[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\LimeWire\\LimeWire.exe"=
"c:\\Program Files\\WS_FTP\\WS_FTP95.exe"=
"c:\\Program Files\\Participatory Culture Foundation\\Miro\\xulrunner\\python\\Miro_Download er.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [21/04/2008 7:21 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswF sBlk.sys [21/04/2008 7:21 20560]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [28/03/2009 16:22 603904]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\{925440b0-2003-11dd-984f-00508d9f3eb7}]
\Shell\AutoRun\command - l:\claroread\ClaroReadInternational.exe
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Inhoud van de 'Gedeelde Taken' map
2009-05-08 c:\windows\Tasks\1-klik Onderhoud.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2008-12-03 16:48]
2009-05-08 c:\windows\Tasks\User_Feed_Synchronization-{1663C6C9-DFA5-4FBD-8BC0-9791B526660A}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 02:31]
2009-05-08 c:\windows\Tasks\User_Feed_Synchronization-{22ECFC8A-C95A-412C-BC3A-9FCCAD51EE5F}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 02:31]
2009-05-08 c:\windows\Tasks\User_Feed_Synchronization-{768AF07F-72DF-4A01-94B9-77873332A0A1}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 02:31]
.
- - - - ORPHANS VERWIJDERD - - - -
WebBrowser-{8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - (no file)

.
------- Bijkomende Scan -------
.
uStart Page = hxxp://www.google.be/
uInternet Settings,ProxyOverride = *.local
IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{AEF9B8DB-0DEF-4c0b-8209-661C9E82B8C3}
Trusted Zone: dexia.be\directnet
FF - ProfilePath - c:\documents and settings\Geert\Application Data\Mozilla\Firefox\Profiles\7zqx7e39.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.be/
FF - plugin: c:\documents and settings\All Users.WINDOWS\Application Data\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll
FF - plugin: c:\documents and settings\Geert\Application Data\Mozilla\plugins\npPxPlay.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npzylomgamesplayer.dll
FF - plugin: c:\program files\Real\RealArcade\Plugins\Mozilla\npracplug.dl l
---- FIREFOX POLICIES ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
************************************************** ************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-08 21:21
Windows 5.1.2600 Service Pack 3 NTFS
scannen van verborgen processen ...
scannen van verborgen autostart items ...
scannen van verborgen bestanden ...
Scan succesvol afgerond
verborgen bestanden: 0
************************************************** ************************
.
--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\Curr entVersion\Installer\UserData\LocalSystem\Componen ts\Ø•€|ÿÿÿÿ•€|ù•9~*]
"3140110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
Voltooingstijd: 2009-05-08 21:22
ComboFix-quarantined-files.txt 2009-05-08 19:22
ComboFix2.txt 2007-12-01 22:01
Pre-Run: 75.755.495.424 bytes beschikbaar
Post-Run: 76.078.358.528 bytes beschikbaar
WindowsXP-KB310994-SP2-Pro-BootDisk-NLD.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOW S
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
225 --- E O F --- 2009-05-06 11:39

beter nu ?

Voorlopig wel.
Alvast bedankt.