213 processen

[mXX]

EDIT: zo te zien blijven de processen stijgen, terwijl het programma niet meer actief is, ik zit nu aan 230 processen...

graag een controle aub
Zie foto==> meer dan 213 processen
Ik heb dit probleem ook met msn, sluit ik het af blijft die actief in taakbeheer. Wil ik me trg aanmelden op msn lukt dit niet, dan moet ik eerst het proces stoppen



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:12:14, on 20/02/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Program Files\DigitalPersona\Bin\DpAgent.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Windows\system32\conime.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe
C:\Users\Nabil\Desktop\MKVExtractGUI-1.6.4.1\mkvmerge.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TY...vilion&pf=cnnb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TY...vilion&pf=cnnb
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TY...vilion&pf=cnnb
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TY...vilion&pf=cnnb
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O2 - BHO: Mega Manager IE Click Monitor - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [DpAgent] C:\Program Files\DigitalPersona\Bin\dpagent.exe
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [BOC-427] C:\PROGRA~1\Comodo\CBOClean\BOC427.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [ISUSPM] "C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe" -scheduler
O4 - HKLM\..\Policies\Explorer\Run: [Mpk.exe] H:\kgb\KGB\Mpk.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: &AOL-werkbalk Zoeken - C:\ProgramData\AOL\ieToolbar\resources\nl-BE\local\search.html
O8 - Extra context menu item: Afbeelding verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Download Link Using Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Pagina verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O13 - Gopher Prefix:
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stw rt.inf_030ac640\aestsrv.exe
O23 - Service: BOCore - COMODO - C:\Program Files\Comodo\CBOClean\BOCORE.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: Biometric Authentication Service (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: FileZilla Server FTP server (FileZilla Server) - FileZilla Project - C:\Program Files\FileZilla Server\FileZilla Server.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\HPBPRO. EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\HPBOID. EXE
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard Corporation - C:\Windows\system32\Hpservice.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
O23 - Service: Recovery Service for Windows - Unknown owner - C:\Windows\SMINST\BLService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stw rt.inf_a7e996cd\STacSV.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe
O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe
O23 - Service: Validity Fingerprint Service (vfsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vfsFPService.exe

--
End of file - 17443 bytes

[Rosty]

Download Combofix naar je Bureaublad en gebruik het volgens deze handleiding.

OPMERKING: indien je, tijdens of na het downloaden van Combofix of tijdens het gebruik van Combofix een melding krijgt van je Antivirus- of een andere realtime scanner, schakel dan deze scanner uit en download Combofix opnieuw.
Sommige scanners zien bepaalde componenten die Combofix gebruikt als verdacht en gaan deze blokkeren of verwijderen!

• Dubbelklik op Combofix.exe om het te starten.
• Indien je Combofix al eerder hebt gebruikt, kan je een waarschuwing krijgen dat een update beschikbaar is. Sta toe dat ComboFix wordt geupdate.
• Klik op OK in het "NirCmd" venstertje.
• Klik na afloop terug op Ja om het scannen op malware te starten.
• Tijdens het runnen van de fix, NIET in het venster klikken, want dit zal je pc doen vasthangen.
• Wanneer de fix voltooid is en na herstart, zal de log Combofix.txt openen.

Post dit logje in je volgende antwoord.

[Y-Ssin]

Ik heb geen 200 processen, maar wel ook een ander soortgelijk probleem zoals met je msn, alleen is dit by my dan by firefox.......

[mXX]

Combofix wou een restart uitvoeren na het scannen, dit heb ik uiteraard toegelaten. Maar tijdens het restarten kreeg ik ineens een bluescreen!

Combofix log:

ComboFix 09-02-26.02 - Nabil 2009-02-27 12:05:13.1 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1043.18.3068.1972 [GMT 1:00]
Gestart vanuit: c:\users\Nabil\Desktop\Downloads\Programs\ComboFix .exe
AV: ESET Smart Security 3.0 *On-access scanning disabled* (Updated)
FW: ESET Persoonlijke firewall *enabled*
* Nieuw herstelpunt werd aangemaakt
.

(((((((((((((((((((( Bestanden Gemaakt van 2009-01-27 to 2009-02-27 ))))))))))))))))))))))))))))))
.

2009-11-27 14:20 . 2008-09-12 11:44 206,256 --a------ c:\windows\System32\idmmbc.dll
2009-02-23 10:53 . 2009-02-23 10:53 0 --ah----- c:\windows\System32\drivers\Msft_User_WpdMtpDr_01_ 00_00.Wdf
2009-02-20 22:11 . 2009-02-20 22:11 <DIR> d-------- c:\program files\Trend Micro
2009-02-20 21:30 . 2009-02-20 21:53 <DIR> d-------- c:\program files\MKVtoolnix
2009-02-20 21:06 . 2009-02-20 21:22 <DIR> d-------- C:\Temp
2009-02-20 21:05 . 2009-02-20 21:05 <DIR> d-------- c:\program files\AviSynth 2.5
2009-02-20 21:04 . 2009-02-20 21:55 <DIR> d-------- c:\program files\Winnydows
2009-02-20 19:40 . 2009-02-20 21:04 <DIR> d-------- c:\program files\Xvid
2009-02-20 19:40 . 2006-11-01 14:52 765,952 --a------ c:\windows\System32\xvidcore.dll
2009-02-20 19:40 . 2006-11-01 14:54 180,224 --a------ c:\windows\System32\xvidvfw.dll
2009-02-20 19:40 . 2006-11-01 15:26 77,824 --a------ c:\windows\System32\xvid.ax
2009-02-20 19:25 . 2009-02-20 19:25 <DIR> d-------- c:\program files\Combined Community Codec Pack
2009-02-20 19:22 . 2009-02-20 19:22 <DIR> d-------- c:\users\Nabil\AppData\Roaming\River Past G5
2009-02-20 19:22 . 2009-02-20 19:28 <DIR> d-------- c:\users\All Users\River Past G5
2009-02-20 19:22 . 2009-02-20 19:28 <DIR> d-------- c:\programdata\River Past G5
2009-02-20 19:22 . 2009-02-20 19:22 <DIR> d-------- c:\program files\River Past
2009-02-20 19:22 . 2009-02-20 19:22 <DIR> d-------- c:\program files\Common Files\River Past
2009-02-20 19:22 . 2009-02-20 19:22 164,807 --a------ c:\windows\Video Cleaner Pro Uninstaller.exe
2009-02-13 16:47 . 2009-02-13 16:48 <DIR> d-------- c:\program files\Intel
2009-02-13 16:47 . 2006-11-10 15:25 319,456 --a------ c:\windows\System32\difxapi.dll
2009-02-13 16:46 . 2008-11-04 00:56 327,192 --a------ c:\windows\System32\drivers\iaStor.sys
2009-02-13 16:45 . 2009-02-13 16:45 <DIR> d-------- c:\windows\System32\SDA
2009-02-13 16:45 . 2008-05-14 19:53 110,080 --a------ c:\windows\System32\JmCrIcon.dll
2009-02-13 16:45 . 2008-11-03 18:31 107,360 --a------ c:\windows\System32\drivers\jmcr.sys
2009-02-13 16:44 . 2008-07-21 13:08 9,728 --a------ c:\windows\System32\RtNicProp32.dll
2009-02-10 09:23 . 2009-02-10 09:24 <DIR> d-------- c:\program files\FileZilla Server
2009-02-10 09:10 . 2009-02-10 09:43 <DIR> d-------- c:\users\Nabil\AppData\Roaming\FileZilla
2009-02-10 09:09 . 2009-02-10 09:09 <DIR> d-------- c:\program files\FileZilla FTP Client
2009-02-10 08:46 . 2009-02-10 08:55 508 --a------ c:\windows\System32\runkgb.lnk
2009-02-10 08:45 . 2009-02-10 08:56 <DIR> d--hs---- c:\users\All Users\MPK
2009-02-10 08:45 . 2009-02-10 08:56 <DIR> d--hs---- c:\programdata\MPK
2009-02-09 23:44 . 2009-02-10 08:33 <DIR> d-------- c:\users\All Users\FLEXnet
2009-02-09 23:44 . 2009-02-10 08:33 <DIR> d-------- c:\programdata\FLEXnet
2009-02-09 23:33 . 2009-02-09 23:33 <DIR> d-------- c:\program files\Adobe Media Player
2009-02-09 23:32 . 2009-02-09 23:32 <DIR> d-------- c:\program files\Common Files\Adobe AIR
2009-02-09 23:28 . 2009-02-09 23:28 <DIR> d-------- c:\program files\Common Files\Macrovision Shared
2009-02-09 23:09 . 2009-02-09 23:09 <DIR> d-------- c:\program files\Perfect World Entertainment
2009-02-09 23:03 . 2005-05-10 18:54 258,352 --a------ c:\windows\System32\unicows.dll
2009-02-09 22:57 . 2009-02-09 22:57 <DIR> d-------- c:\program files\Driver-Soft
2009-02-09 22:57 . 2007-09-02 20:56 1,686,016 --a------ c:\windows\System32\clinetsuitex6.ocx
2009-02-09 22:57 . 2004-03-09 16:45 662,288 --a------ c:\windows\System32\MSCOMCT2.OCX
2009-02-09 22:57 . 2004-06-14 14:56 427,864 --a------ c:\windows\System32\XceedZip.dll
2009-02-09 09:12 . 2009-02-12 15:58 <DIR> d-------- c:\program files\Steam
2009-02-09 09:12 . 2009-02-09 09:42 <DIR> d-------- c:\program files\Common Files\Steam
2009-02-09 08:13 . 2009-02-27 12:10 373,922,379 --a------ c:\windows\MEMORY.DMP
2009-02-08 23:29 . 2009-02-09 22:46 <DIR> d-------- c:\users\Nabil\AppData\Roaming\GetRightToGo
2009-02-08 23:02 . 2009-02-23 13:48 <DIR> d-------- c:\program files\SystemRequirementsLab
2009-02-08 22:06 . 2009-02-08 22:06 <DIR> d-------- C:\NVIDIA
2009-02-08 22:01 . 2009-02-23 13:48 <DIR> d-------- c:\users\Nabil\AppData\Roaming\SystemRequirementsL ab
2009-02-08 22:00 . 2009-02-08 22:00 <DIR> d-------- c:\windows\Sun
2009-02-06 15:55 . 2009-02-06 15:55 <DIR> d-------- c:\users\All Users\Temp
2009-02-06 15:55 . 2009-02-06 15:55 <DIR> d-------- c:\programdata\Temp
2009-02-04 21:36 . 2009-02-04 21:36 <DIR> d-------- c:\users\Nabil\AppData\Roaming\DAEMON Tools
2009-02-04 21:35 . 2009-02-04 21:35 <DIR> d-------- c:\users\All Users\DAEMON Tools Lite
2009-02-04 21:35 . 2009-02-04 21:35 <DIR> d-------- c:\programdata\DAEMON Tools Lite
2009-02-04 21:35 . 2009-02-04 21:35 <DIR> d-------- c:\program files\DAEMON Tools Lite
2009-02-04 21:32 . 2009-02-04 21:37 <DIR> d-------- c:\users\Nabil\AppData\Roaming\DAEMON Tools Lite
2009-02-04 21:28 . 2009-02-04 21:36 <DIR> d-------- c:\users\Nabil\AppData\Roaming\DAEMON Tools Pro
2009-02-02 11:58 . 2009-02-02 11:58 30,353,313 --a------ C:\intel_turbomemory_1811002.zip
2009-01-29 15:28 . 2009-02-13 13:11 50 --a------ c:\windows\MegaManager.INI
2009-01-28 14:22 . 2009-01-28 14:22 <DIR> d-------- c:\users\All Users\Trymedia
2009-01-28 14:22 . 2009-01-28 14:22 <DIR> d-------- c:\programdata\Trymedia
2009-01-28 14:22 . 2009-01-28 14:22 98,304 --a------ c:\windows\System32\CmdLineExt.dll
2009-01-28 14:13 . 2009-01-28 14:13 <DIR> d-------- c:\program files\Sierra
2009-01-27 09:32 . 2009-01-27 09:33 <DIR> d-------- c:\users\Nabil\AppData\Roaming\FreeCall

.
((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))) ))
.
2009-02-27 11:11 --------- d-----w c:\users\Nabil\AppData\Roaming\DMCache
2009-02-27 10:53 120,789 ----a-w c:\users\All Users\nvModes.dat
2009-02-27 10:53 120,789 ----a-w c:\programdata\nvModes.dat
2009-02-09 22:39 --------- d-----w c:\program files\Common Files\Adobe
2009-02-09 22:00 --------- d-----w c:\programdata\Microsoft Help
2009-02-09 13:58 --------- d-----w c:\users\Nabil\AppData\Roaming\Hewlett-Packard
2009-02-08 21:18 --------- d-----w c:\programdata\NVIDIA
2009-02-04 20:33 717,296 ----a-w c:\windows\system32\drivers\sptd.sys
2009-01-28 18:12 --------- d--h--w c:\program files\InstallShield Installation Information
2009-01-27 17:28 --------- d-----w c:\programdata\CyberLink
2009-01-26 08:38 --------- d-----w c:\users\Nabil\AppData\Roaming\Megaupload
2009-01-26 08:34 --------- d-----w c:\users\Nabil\AppData\Roaming\IDM
2009-01-26 08:34 --------- d-----w c:\program files\Megaupload
2009-01-26 08:33 --------- d-----w c:\users\Nabil\AppData\Roaming\InstallShield
2009-01-25 11:16 --------- d-----w c:\users\Mama & Papa\AppData\Roaming\TuneUp Software
2009-01-25 11:14 --------- d-----w c:\users\Mama & Papa\AppData\Roaming\Macrovision
2009-01-25 11:14 --------- d-----w c:\users\Mama & Papa\AppData\Roaming\ESET
2009-01-25 11:14 --------- d-----w c:\users\Mama & Papa\AppData\Roaming\DigitalPersona
2009-01-22 18:43 --------- d-----w c:\program files\Microsoft Visual Studio 9.0
2009-01-22 18:41 --------- d-----w c:\program files\Microsoft SQL Server
2009-01-22 18:38 --------- d-----w c:\program files\Microsoft.NET
2009-01-22 18:34 --------- d-----w c:\program files\Windows Mobile 5.0 SDK R2
2009-01-22 18:34 --------- d-----w c:\program files\Microsoft Device Emulator
2009-01-22 18:30 --------- d-----w c:\program files\Microsoft Synchronization Services
2009-01-22 18:30 --------- d-----w c:\program files\Microsoft SQL Server Compact Edition
2009-01-22 18:20 --------- d-----w c:\programdata\PreEmptive Solutions
2009-01-22 18:20 --------- d-----w c:\program files\Common Files\Merge Modules
2009-01-22 18:14 --------- d-----w c:\program files\MSBuild
2009-01-22 18:10 --------- d-----w c:\program files\Microsoft SDKs
2009-01-22 18:10 --------- d-----w c:\program files\CE Remote Tools
2009-01-22 18:07 --------- d-----w c:\program files\Microsoft Web Designer Tools
2009-01-20 11:45 --------- d-----w c:\program files\Internet Download Manager
2009-01-16 08:19 --------- d-----w c:\programdata\BOC427
2009-01-15 18:44 --------- d-----w c:\program files\VideoLAN
2009-01-14 16:31 0 ---ha-w c:\windows\system32\drivers\Msft_User_WpdFs_01_00_ 00.Wdf
2009-01-14 14:41 --------- d-----w c:\users\Nabil\AppData\Roaming\vlc
2009-01-13 22:04 --------- d-----w c:\program files\Windows Mail
2009-01-13 20:38 --------- d-----w c:\program files\Microsoft Works
2009-01-13 20:22 --------- d-----w c:\users\Nabil\AppData\Roaming\ESET
2009-01-13 20:20 --------- d-----w c:\programdata\ESET
2009-01-13 20:20 --------- d-----w c:\program files\ESET
2009-01-13 18:57 --------- d-----w c:\users\Nabil\AppData\Roaming\TuneUp Software
2009-01-13 18:57 --------- d-----w c:\programdata\TuneUp Software
2009-01-13 18:57 --------- d-----w c:\program files\TuneUp Utilities 2009
2009-01-13 18:56 --------- d-sh--w c:\programdata\{55A29068-F2CE-456C-9148-C869879E2357}
2009-01-13 18:56 --------- d-----w c:\program files\ToniArts
2009-01-13 18:55 --------- d-----w c:\program files\CCleaner
2009-01-13 18:45 --------- d-----w c:\users\Nabil\AppData\Roaming\GTek
2009-01-13 18:43 --------- d-----w c:\programdata\WildTangent
2009-01-13 18:35 --------- d-----w c:\users\Nabil\AppData\Roaming\CyberLink
2009-01-13 18:31 --------- d-----w c:\programdata\Symantec
2009-01-13 18:21 --------- d-----w c:\program files\Comodo
2009-01-13 18:20 --------- d-----w c:\program files\CyberLink
2009-01-13 18:16 --------- d-----w c:\users\Nabil\AppData\Roaming\Symantec
2009-01-13 18:16 --------- d-----w c:\users\Nabil\AppData\Roaming\DigitalPersona
2009-01-13 18:04 0 --sha-r c:\windows\system32\drivers\103C_HP_cNB_Pavilion dv7 Notebook PC_Y5335KV_0U_QCND8310SVF_E464632-A44_4A_I30F4_SCompal_V99.55_F.0A_T080717_WV3-1_L413_M3069_J320_7Intel_8676_92.27_#090113_N10EC8 168;80864237_(FM302EA#UUG)_XMOBILE_CN10_Z_2F.0A.MR K
2009-01-13 18:04 --------- d-----w c:\users\Nabil\AppData\Roaming\Macrovision
2009-01-13 18:04 --------- d-----w c:\program files\MSN Messenger
2009-01-13 17:58 --------- d-sh--w c:\programdata\Sjablonen
2009-01-13 17:58 --------- d-sh--w c:\programdata\Menu Start
2009-01-13 17:58 --------- d-sh--w c:\programdata\Favorieten
2009-01-13 17:58 --------- d-sh--w c:\programdata\Documenten
2009-01-13 17:58 --------- d-sh--w c:\programdata\Bureaublad
2009-01-13 17:34 --------- d-----w c:\programdata\Macrovision
2009-01-13 17:34 --------- d-----w c:\program files\DigitalPersona
2009-01-13 17:29 --------- d-----w c:\programdata\Hewlett-Packard
2009-01-13 17:25 --------- d-----w c:\program files\WIDCOMM
2009-01-13 17:25 --------- d-----w c:\program files\IDT
2009-01-13 17:23 0 ---ha-w c:\windows\system32\drivers\Msft_Kernel_SynTP_0100 0.Wdf
2009-01-13 17:22 --------- d-----w c:\program files\Synaptics
2009-01-13 17:22 --------- d-----w c:\program files\Realtek
2009-01-13 17:21 --------- d-----w c:\program files\Hewlett-Packard
2009-01-13 09:50 2,604,850 ----a-w C:\intel_inf_9101012.zip
2008-12-16 05:36 797,227 ----a-w C:\JMB38X_WinDrv_R1.00.21_WHQL.zip
2008-01-21 02:43 174 --sha-w c:\program files\desktop.ini
.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))) )
.
.
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-21 1233920]
"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2008-11-25 935856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-03-28 1045800]
"DpAgent"="c:\program files\DigitalPersona\Bin\dpagent.exe" [2008-03-12 699456]
"QlbCtrl.exe"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2008-03-14 202032]
"hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-11-20 488752]
"BOC-427"="c:\progra~1\Comodo\CBOClean\BOC427.exe" [2008-07-14 351480]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2008-10-24 1451264]
"SysTrayApp"="c:\program files\IDT\WDM\sttray.exe" [2008-06-27 442467]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-12-08 13601312]
"NvMediaCenter"="c:\windows\system32\NvMcTray. dll" [2008-12-08 92704]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
BTTray.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2008-01-16 727592]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.l3codecp"= l3codecp.acm
"vidc.ffds"= c:\progra~1\COMBIN~1\Filters\FFDShow\ff_vfw.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\contro l\lsa]
Notification Packages REG_MULTI_SZ scecli DPPWDFLT

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\run-]
"IDMan"=c:\program files\Internet Download Manager\IDMan.exe /onboot

[HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\run-]
"HP Health Check Scheduler"=c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
"HP Software Update"=c:\program files\Hp\HP Software Update\HPWuSchd2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\FirewallRules]
"{71389AC2-DCED-47AB-92BA-0E0BCC1DB0B9}"= c:\program files\HP\QuickPlay\QP.exe:Quick Play
"{A2C4C32E-E933-4FED-AB34-F774797F35A6}"= c:\program files\HP\QuickPlay\QPService.exe:Quick Play Resident Program
"{84875B80-5FA3-402C-917A-4AAF8F566438}"= c:\program files\Cyberlink\PowerDirector\PDR.EXE:CyberLink PowerDirector
"{C4D2BFFE-AD23-486A-BE0A-2BB05932CDED}"= c:\program files\MSN Messenger\livecall.exe:Windows Live Messenger 8.1 (Phone)
"TCP Query User{B5619D44-1EE7-4452-9F62-CF2776886A8D}c:\\users\\nabil\\appdata\\local\\tem p\\rarsfx3\\hl.exe"= UDP:c:\users\nabil\appdata\local\temp\rarsfx3\hl.e xe:hl.exe
"UDP Query User{C9F4A1CC-1189-4BD6-AF00-CE22F0C9E87E}c:\\users\\nabil\\appdata\\local\\tem p\\rarsfx3\\hl.exe"= TCP:c:\users\nabil\appdata\local\temp\rarsfx3\hl.e xe:hl.exe
"{406C1518-FE3A-4A9A-9958-A03CD8142539}"= UDP:c:\program files\Sierra\FEAR\FEAR.exe:FEAR
"{4D128960-842B-41AF-B9DF-CF7716D26ABC}"= TCP:c:\program files\Sierra\FEAR\FEAR.exe:FEAR
"{A4A6639D-831B-46DB-9585-D2C9053F0512}"= UDP:5353:Adobe CSI CS4
"{DCA702CD-C48E-48DD-BD82-EDDC80A9EBCE}"= UDP:c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.ex e:Adobe CSI CS4
"{7B9ACD74-AB34-4599-B96E-3FB34B28C811}"= TCP:c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.ex e:Adobe CSI CS4

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\PublicProfile]
"EnableFirewall"= 0 (0x0)

R2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileReposi tory\stwrt.inf_030ac640\AEstSrv.exe [2009-01-13 73728]
R2 BOCore;BOCore;c:\program files\Comodo\CBOClean\BOCore.exe [2009-01-13 73464]
R2 ekrn;Eset Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [2008-10-24 468224]
R2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe -k netsvcs [2008-01-21 21504]
R2 hpsrv;HP Service;c:\windows\System32\hpservice.exe [2008-03-18 24880]
R2 Recovery Service for Windows;Recovery Service for Windows;c:\windows\SMINST\BLService.exe [2008-06-22 341328]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\System32\TUProgSt.exe [2009-01-13 603904]
R2 vfsFPService;Validity Fingerprint Service;c:\windows\System32\vfsFPService.exe [2008-04-27 599344]
R3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2008-06-22 193840]
R3 enecir;ENE CIR Receiver;c:\windows\System32\drivers\enecir.sys [2008-01-24 52736]
R3 JMCR;JMCR;c:\windows\System32\drivers\jmcr.sys [2009-02-13 107360]
R3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\System32\drivers\NETw5v32.sys [2008-11-17 3668480]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\System32\drivers\nvhda32v.sys [2008-05-14 43552]
R3 vfs101x;vfs101x;c:\windows\System32\drivers\vfs101 x.sys [2008-04-27 40752]
S2 dualshock3;DUALSHOCK3 Controller HID Minidriver (USB) Beta;c:\windows\System32\drivers\dualshock3.sys [2009-01-25 11392]

--- Andere Services/Drivers In Geheugen ---

*Deregistered* - sptd

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
ezSharedSvc

[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\{1f0a6216-f081-11dd-ab18-0021867244be}]
\shell\AutoRun\command - G:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\{b43144b6-e3af-11dd-ab9f-0021867244be}]
\shell\AutoRun\command - F:\LaunchU3.exe

[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\{b43144c7-e3af-11dd-ab9f-0021867244be}]
\shell\AutoRun\command - G:\ur0.com
\shell\open\Command - G:\ur0.com

[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\{bb3292a4-ebbb-11dd-ad13-0021867244be}]
\shell\AutoRun\command - G:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\{fb9ac950-fd1a-11dd-830d-0021867244be}]
\shell\AutoRun\command - G:\LaunchU3.exe -a
.
Inhoud van de 'Gedeelde Taken' map

2009-02-27 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2008-11-20 16:28]
.
- - - - ORPHANS VERWIJDERD - - - -

HKLM-Explorer_Run-Mpk.exe - h:\kgb\KGB\Mpk.exe


.
------- Bijkomende Scan -------
.
uStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=nl_be&c=83&bd=Pavilion &pf=cnnb
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=nl_be&c=83&bd=Pavilion &pf=cnnb
IE: &AOL-werkbalk Zoeken - c:\programdata\AOL\ieToolbar\resources\nl-BE\local\search.html
IE: Afbeelding verzenden naar &Bluetooth-apparaat... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Download all links with IDM - c:\program files\Internet Download Manager\IEGetAll.htm
IE: Download FLV video content with IDM - c:\program files\Internet Download Manager\IEGetVL.htm
IE: Download Link Using Mega Manager... - c:\program files\Megaupload\Mega Manager\mm_file.htm
IE: Download with IDM - c:\program files\Internet Download Manager\IEExt.htm
IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Pagina verzenden naar &Bluetooth-apparaat... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
FF - ProfilePath - c:\users\Nabil\AppData\Roaming\Mozilla\Firefox\Pro files\9k5oprh2.default\
FF - component: c:\users\Nabil\AppData\Roaming\IDM\idmmzcc2\compon ents\idmmzcc.dll

---- FIREFOX POLICIES ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.

************************************************** ************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-02-27 12:11:39
Windows 6.0.6001 Service Pack 1 NTFS

scannen van verborgen processen ...

scannen van verborgen autostart items ...

scannen van verborgen bestanden ...

Scan succesvol afgerond
verborgen bestanden: 0

************************************************** ************************
.
--------------------- DLLs Geladen Onder Lopende Processen ---------------------

- - - - - - - > 'lsass.exe'(760)
c:\windows\system32\DPPWDFLT.dll
.
------------------------ Andere Aktieve Processen ------------------------
.
c:\windows\System32\nvvsvc.exe
c:\windows\System32\DriverStore\FileRepository\stw rt.inf_a7e996cd\stacsv.exe
c:\windows\System32\audiodg.exe
c:\windows\System32\rundll32.exe
c:\program files\DigitalPersona\Bin\DpHostW.exe
c:\program files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
c:\program files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
c:\program files\HP\QuickPlay\Kernel\TV\QPSched.exe
c:\program files\CyberLink\Shared Files\RichVideo.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\program files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
c:\windows\System32\conime.exe
c:\windows\System32\WerFault.exe
c:\windows\System32\rundll32.exe
c:\program files\WIDCOMM\Bluetooth Software\BTStackServer.exe
c:\program files\Synaptics\SynTP\SynTPHelper.exe
c:\program files\Internet Download Manager\IEMonitor.exe
c:\windows\servicing\TrustedInstaller.exe
c:\windows\System32\spool\drivers\w32x86\3\HPBPRO. EXE
c:\program files\Hewlett-Packard\Shared\hpqwmiex.exe
c:\program files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
c:\windows\System32\spool\drivers\w32x86\3\HPBOID. EXE
c:\windows\System32\UI0Detect.exe
c:\program files\Hewlett-Packard\Shared\HpqToaster.exe
c:\program files\Hewlett-Packard\HP Health Check\HPHC_Service.exe
.
************************************************** ************************
.
Voltooingstijd: 2009-02-27 12:16:41 - machine werd herstart
ComboFix-quarantined-files.txt 2009-02-27 11:16:37

Pre-Run: 102.983.409.664 bytes beschikbaar
Post-Run: 102,648,205,312 bytes beschikbaar

320 --- E O F --- 2009-01-13 21:24:19



Bluescreen log:

Probleemhandtekening:
Gebeurtenisnaam van probleem: BlueScreen
Versie van besturingssysteem: 6.0.6001.2.1.0.768.3
Landinstelling-id: 2067

Aanvullende informatie over dit probleem:
BCCode: 93
BCP1: 00000BBC
BCP2: 00000000
BCP3: 00000000
BCP4: 00000000
OS Version: 6_0_6001
Service Pack: 1_0
Product: 768_1

Bestanden die helpen bij het beschrijven van het probleem:
C:\WINDOWS\Minidump\Mini022709-01.dmp
C:\WINDOWS\Temp\WER-60543-0.sysdata.xml
C:\WINDOWS\Temp\WERD190.tmp.version.txt

Lees onze privacyverklaring:
http://go.microsoft.com/fwlink/?link...3&clcid=0x0413


Hijackthis log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:18:54, on 27/02/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Program Files\DigitalPersona\Bin\DpAgent.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\WerFault.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\Hewlett-Packard\HP wireless Assistant\WiFiMsg.EXE
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Windows\Explorer.exe
C:\Windows\system32\notepad.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TY...vilion&pf=cnnb
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TY...vilion&pf=cnnb
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: AOL Toolbar BHO - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O2 - BHO: Mega Manager IE Click Monitor - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 5.0\aoltb.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [DpAgent] C:\Program Files\DigitalPersona\Bin\dpagent.exe
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [BOC-427] C:\PROGRA~1\Comodo\CBOClean\BOC427.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [SysTrayApp] %ProgramFiles%\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: &AOL-werkbalk Zoeken - C:\ProgramData\AOL\ieToolbar\resources\nl-BE\local\search.html
O8 - Extra context menu item: Afbeelding verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Download Link Using Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Pagina verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O13 - Gopher Prefix:
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stw rt.inf_030ac640\aestsrv.exe
O23 - Service: BOCore - COMODO - C:\Program Files\Comodo\CBOClean\BOCORE.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: Biometric Authentication Service (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: FileZilla Server FTP server (FileZilla Server) - FileZilla Project - C:\Program Files\FileZilla Server\FileZilla Server.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\HPBPRO. EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\HPBOID. EXE
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard Corporation - C:\Windows\system32\Hpservice.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: QuickPlay Background Capture Service (QBCS) (QPCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
O23 - Service: QuickPlay Task Scheduler (QTS) (QPSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
O23 - Service: Recovery Service for Windows - Unknown owner - C:\Windows\SMINST\BLService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stw rt.inf_a7e996cd\STacSV.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe
O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe
O23 - Service: Validity Fingerprint Service (vfsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vfsFPService.exe

--
End of file - 8752 bytes

[Rosty]

Nog problemen nu?

[mXX]

Ik heb dit probleem ook met msn, sluit ik het af blijft die actief in taakbeheer. Wil ik me trg aanmelden op msn lukt dit niet, dan moet ik eerst het proces stoppen

Dit heb ik nog wel steeds...

[Rosty]

Verwijder msn eens en download en instaleer het dan opnieuw!!

[mXX]

Verwijder msn eens en download en instaleer het dan opnieuw!!

Dat heb ik al zeker 5 keer gedaan...
Bij de allernieuwste versie start die zelfs niet op, dus heb ik een versie ervoor genomen...

[Rosty]

Dat heb ik al zeker 5 keer gedaan...
Bij de allernieuwste versie start die zelfs niet op, dus heb ik een versie ervoor genomen...

Maar herstart je je PC ook alvorens opnieuw te downloaden?

[mXX]

Maar herstart je je PC ook alvorens opnieuw te downloaden?

nee dat niet... Zal ik nu eens proberen