Ga naar inhoud
  • 0

Toolbar moet weg, opstarten gaat niet goed, Panda weg soms


anoniem

Vraag

Hallo, daar ben ik weer eens op jullie goede forum. Ik heb hulp nodig denk ik! (laptop Compaq Pressario, met XP en GP12, MozillaFirefox) E.e.a. gaat toch weer niet goed met mijn laptop. Er is iets fout gegaan of ik heb iets fout gedaan. Dat weet ik niet, maar mijn problemen zijn: 1) Het opstarten duurt heel lang en niet alles start goed op, er blijven programma's hangen bij t opstarten lijkt wel, waardoor er foutmeldingen komen en ik opnieuw moet rebooten. (TPSrv.exe is daar eentje van). De ventilator gaat heel hard draaien en CPU is hoog +/- 95%. 2) Daarnaast heb ik een toolbar van vuze in mijn MozillaFirefox die ik niet wil, die is er bij een update opgekomen, terwijl ik toch echt het vinkje weg had gehaald bij de installatie van de update...?! En die krijg ik nu niet meer weg. 3) Daarnaast floept het Panda hoofdje soms ineens van mijn scherm weg en als ik dan via configuratie via de beveiliging Panda open, staat er alles in rood van bedreiging en dat ik het moet oplossen...? Meestal op die button van 'oplossen' klikken en na 2 of 3x zegt ie rebooten. Daarna is het weer even goed. 4) Ook Adobe geeft telkens een mislukte update aan. Heb dit al een paar keer handmatig dan via de site gedaan, maar dan geeft een schermpje aan dat deze al is geinstalleerd... Zo geeft de Plugincheck bij MozillaFirefox aan dat het okay is, zo staat er updaten ineens. Dit al een paar dagen. (install_flashplayer10_chra_aih). Dus weer een kreet om hulp van mij. MBAM geeft geen besmetting en Panda ook niet als ik die scan. HiJackThisLog hieronder. HJT-log: [hjt] Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 10:23:20, on 24-9-2011 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal [b:47bfb8d893]Running processes:[/b:47bfb8d893] [color=teal:47bfb8d893]c:\windows\system32\[/color:47bfb8d893][color=blue:47bfb8d893]smss.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\windows\system32\[/color:47bfb8d893][color=blue:47bfb8d893]winlogon.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\windows\system32\[/color:47bfb8d893][color=blue:47bfb8d893]services.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\windows\system32\[/color:47bfb8d893][color=blue:47bfb8d893]lsass.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\windows\system32\[/color:47bfb8d893][color=blue:47bfb8d893]svchost.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\windows\system32\[/color:47bfb8d893][color=blue:47bfb8d893]svchost.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\panda security\panda global protection 2012\[/color:47bfb8d893][color=blue:47bfb8d893]tpsrv.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\panda security\panda global protection 2012\[/color:47bfb8d893][color=blue:47bfb8d893]webproxy.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\windows\system32\[/color:47bfb8d893][color=blue:47bfb8d893]spoolsv.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\common files\arcsoft\connection service\bin\[/color:47bfb8d893][color=blue:47bfb8d893]acservice.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\windows\ehome\[/color:47bfb8d893][color=blue:47bfb8d893]ehrecvr.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\windows\ehome\[/color:47bfb8d893][color=blue:47bfb8d893]ehsched.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\windows\system32\[/color:47bfb8d893][color=blue:47bfb8d893]svchost.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\java\jre6\bin\[/color:47bfb8d893][color=blue:47bfb8d893]jqs.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\common files\lightscribe\[/color:47bfb8d893][color=blue:47bfb8d893]lssrvc.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\microsoft sql server\mssql\binn\[/color:47bfb8d893][color=blue:47bfb8d893]sqlservr.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\windows\system32\[/color:47bfb8d893][color=blue:47bfb8d893]svchost.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\windows\system32\[/color:47bfb8d893][color=blue:47bfb8d893]nvsvc32.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\panda security\panda global protection 2012\[/color:47bfb8d893][color=blue:47bfb8d893]psctrls.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\panda security\panda global protection 2012\[/color:47bfb8d893][color=blue:47bfb8d893]pavfnsvr.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\common files\panda security\pavshld\[/color:47bfb8d893][color=blue:47bfb8d893]pavprsrv.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\windows\system32\[/color:47bfb8d893][color=blue:47bfb8d893]svchost.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\panda security\panda global protection 2012\firewall\[/color:47bfb8d893][color=blue:47bfb8d893]pshost.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\panda security\panda global protection 2012\[/color:47bfb8d893][color=blue:47bfb8d893]psimsvc.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\panda security\panda global protection 2012\[/color:47bfb8d893][color=blue:47bfb8d893]psksvc.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\hewlett-packard\shared\[/color:47bfb8d893][color=blue:47bfb8d893]hpqwmiex.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\windows\[/color:47bfb8d893][color=blue:47bfb8d893]explorer.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\panda security\panda global protection 2012\[/color:47bfb8d893][color=blue:47bfb8d893]pavsrvx86.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\panda security\panda global protection 2012\[/color:47bfb8d893][color=blue:47bfb8d893]avengine.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\windows\ehome\[/color:47bfb8d893][color=blue:47bfb8d893]ehtray.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\hpq\hp wireless assistant\[/color:47bfb8d893][color=blue:47bfb8d893]hp wireless assistant.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\synaptics\syntp\[/color:47bfb8d893][color=blue:47bfb8d893]syntpenh.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\hp\quickplay\[/color:47bfb8d893][color=blue:47bfb8d893]qpservice.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\hp\hp software update\[/color:47bfb8d893][color=blue:47bfb8d893]hpwuschd2.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\common files\arcsoft\connection service\bin\[/color:47bfb8d893][color=blue:47bfb8d893]acdaemon.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\panda security\panda global protection 2012\[/color:47bfb8d893][color=blue:47bfb8d893]apvxdwin.exe[/color:47bfb8d893] c:\program files\common files\arcsoft\connection service\bin\arccon.ac [color=teal:47bfb8d893]c:\windows\system32\[/color:47bfb8d893][color=blue:47bfb8d893]ctfmon.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\windows media player\[/color:47bfb8d893][color=blue:47bfb8d893]wmpnscfg.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\microsoft sql server\80\tools\binn\[/color:47bfb8d893][color=blue:47bfb8d893]sqlmangr.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\arcsoft\totalmedia 3.5\[/color:47bfb8d893][color=blue:47bfb8d893]tmmonitor.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\hp\digital imaging\bin\[/color:47bfb8d893][color=blue:47bfb8d893]hpqimzone.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\windows\system32\[/color:47bfb8d893][color=blue:47bfb8d893]dllhost.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\windows\ehome\[/color:47bfb8d893][color=blue:47bfb8d893]ehmsas.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\panda security\panda global protection 2012\[/color:47bfb8d893][color=blue:47bfb8d893]srvload.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\panda security\panda global protection 2012\[/color:47bfb8d893][color=blue:47bfb8d893]pavbckpt.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\windows\system32\wbem\[/color:47bfb8d893][color=blue:47bfb8d893]wmiapsrv.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\panda security\panda global protection 2012\[/color:47bfb8d893][color=blue:47bfb8d893]iface.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\windows\system32\[/color:47bfb8d893][color=blue:47bfb8d893]svchost.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\documents and settings\user\mijn documenten\[/color:47bfb8d893][color=blue:47bfb8d893]snagit32.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\mozilla firefox\[/color:47bfb8d893][color=blue:47bfb8d893]firefox.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\mozilla firefox\[/color:47bfb8d893][color=blue:47bfb8d893]plugin-container.exe[/color:47bfb8d893] [color=teal:47bfb8d893]c:\program files\trend micro\hijackthis\[/color:47bfb8d893][color=blue:47bfb8d893]hijackthis.exe[/color:47bfb8d893] [color=silver:47bfb8d893]r0 -[/color:47bfb8d893] [color=brown:47bfb8d893]hkcu\software\microsoft\internet explorer\main[/color:47bfb8d893],start page = [u:47bfb8d893][noparse]http://login.live.com/login.srf?wa=wsignin1.0&rpsnv=10&ct=1205961512&rver=4.5.2130.0&wp=mbi&wreply=http:%2f%2fmail.live.com%2fdefault.aspx&id=64855[/noparse][/u:47bfb8d893] [color=silver:47bfb8d893]r1 -[/color:47bfb8d893] [color=brown:47bfb8d893]hklm\software\microsoft\internet explorer\main[/color:47bfb8d893],default_page_url = [u:47bfb8d893][noparse]http://go.microsoft.com/fwlink/?linkid=69157[/noparse][/u:47bfb8d893] [color=silver:47bfb8d893]r1 -[/color:47bfb8d893] [color=brown:47bfb8d893]hklm\software\microsoft\internet explorer\main[/color:47bfb8d893],default_search_url = [u:47bfb8d893][noparse]http://go.microsoft.com/fwlink/?linkid=54896[/noparse][/u:47bfb8d893] [color=silver:47bfb8d893]r1 -[/color:47bfb8d893] [color=brown:47bfb8d893]hklm\software\microsoft\internet explorer\main[/color:47bfb8d893],search page = [u:47bfb8d893][noparse]http://go.microsoft.com/fwlink/?linkid=54896[/noparse][/u:47bfb8d893] [color=silver:47bfb8d893]r0 -[/color:47bfb8d893] [color=brown:47bfb8d893]hklm\software\microsoft\internet explorer\main[/color:47bfb8d893],start page = [u:47bfb8d893][noparse]http://www.troner.net/[/noparse][/u:47bfb8d893] [color=silver:47bfb8d893]r0 -[/color:47bfb8d893] [color=brown:47bfb8d893]hkcu\software\microsoft\internet explorer\toolbar[/color:47bfb8d893],linksfoldername = koppelingen [color=silver:47bfb8d893]o2 -[/color:47bfb8d893] [color=brown:47bfb8d893]bho[/color:47bfb8d893]: acroiehelperstub - [color=orange:47bfb8d893]{18df081c-e8ad-4283-a596-fa578c2ebdc3}[/color:47bfb8d893] - [color=teal:47bfb8d893]c:\program files\common files\adobe\acrobat\activex\[/color:47bfb8d893][color=blue:47bfb8d893]acroiehelpershim.dll[/color:47bfb8d893] [color=silver:47bfb8d893]o2 -[/color:47bfb8d893] [color=brown:47bfb8d893]bho[/color:47bfb8d893]: skypeiepluginbho - [color=orange:47bfb8d893]{ae805869-2e5c-4ed4-8f7b-f1f7851a4497}[/color:47bfb8d893] - [color=teal:47bfb8d893]c:\program files\skype\toolbars\internet explorer\[/color:47bfb8d893][color=blue:47bfb8d893]skypeieplugin.dll[/color:47bfb8d893] [color=silver:47bfb8d893]o2 -[/color:47bfb8d893] [color=brown:47bfb8d893]bho[/color:47bfb8d893]: java(tm) plug-in 2 ssv helper - [color=orange:47bfb8d893]{dbc80044-a445-435b-bc74-9c25c1c588a9}[/color:47bfb8d893] - [color=teal:47bfb8d893]c:\program files\java\jre6\bin\[/color:47bfb8d893][color=blue:47bfb8d893]jp2ssv.dll[/color:47bfb8d893] [color=silver:47bfb8d893]o2 -[/color:47bfb8d893] [color=brown:47bfb8d893]bho[/color:47bfb8d893]: jqsiestartdetectorimpl - [color=orange:47bfb8d893]{e7e6f031-17ce-4c07-bc86-eabfe594f69c}[/color:47bfb8d893] - [color=teal:47bfb8d893]c:\program files\java\jre6\lib\deploy\jqs\ie\[/color:47bfb8d893][color=blue:47bfb8d893]jqs_plugin.dll[/color:47bfb8d893] [color=silver:47bfb8d893]o4 -[/color:47bfb8d893] [color=brown:47bfb8d893]hklm\..\run[/color:47bfb8d893]: [b:47bfb8d893][ehtray][/b:47bfb8d893] [color=teal:47bfb8d893]c:\windows\ehome\[/color:47bfb8d893][color=blue:47bfb8d893]ehtray.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o4 -[/color:47bfb8d893] [color=brown:47bfb8d893]hklm\..\run[/color:47bfb8d893]: [b:47bfb8d893][hpwirelessassistant][/b:47bfb8d893] [color=teal:47bfb8d893]c:\program files\hpq\hp wireless assistant\[/color:47bfb8d893][color=blue:47bfb8d893]hp wireless assistant.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o4 -[/color:47bfb8d893] [color=brown:47bfb8d893]hklm\..\run[/color:47bfb8d893]: [b:47bfb8d893][high definition audio property page shortcut][/b:47bfb8d893] chdaudpropshortcut.exe [color=silver:47bfb8d893]o4 -[/color:47bfb8d893] [color=brown:47bfb8d893]hklm\..\run[/color:47bfb8d893]: [b:47bfb8d893][syntpenh][/b:47bfb8d893] [color=teal:47bfb8d893]c:\program files\synaptics\syntp\[/color:47bfb8d893][color=blue:47bfb8d893]syntpenh.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o4 -[/color:47bfb8d893] [color=brown:47bfb8d893]hklm\..\run[/color:47bfb8d893]: [b:47bfb8d893][qpservice][/b:47bfb8d893] [color=teal:47bfb8d893]c:\program files\hp\quickplay\[/color:47bfb8d893][color=blue:47bfb8d893]qpservice.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o4 -[/color:47bfb8d893] [color=brown:47bfb8d893]hklm\..\run[/color:47bfb8d893]: [b:47bfb8d893][cpqset][/b:47bfb8d893] [color=teal:47bfb8d893]c:\program files\hewlett-packard\default settings\[/color:47bfb8d893][color=blue:47bfb8d893]cpqset.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o4 -[/color:47bfb8d893] [color=brown:47bfb8d893]hklm\..\run[/color:47bfb8d893]: [b:47bfb8d893][recguard][/b:47bfb8d893] [color=teal:47bfb8d893]c:\windows\sminst\[/color:47bfb8d893][color=blue:47bfb8d893]recguard.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o4 -[/color:47bfb8d893] [color=brown:47bfb8d893]hklm\..\run[/color:47bfb8d893]: [b:47bfb8d893][hp software update][/b:47bfb8d893] [color=teal:47bfb8d893]c:\program files\hp\hp software update\[/color:47bfb8d893][color=blue:47bfb8d893]hpwuschd2.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o4 -[/color:47bfb8d893] [color=brown:47bfb8d893]hklm\..\run[/color:47bfb8d893]: [b:47bfb8d893][arcsoft connection service][/b:47bfb8d893] [color=teal:47bfb8d893]c:\program files\common files\arcsoft\connection service\bin\[/color:47bfb8d893][color=blue:47bfb8d893]acdaemon.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o4 -[/color:47bfb8d893] [color=brown:47bfb8d893]hklm\..\run[/color:47bfb8d893]: [b:47bfb8d893][nvcpldaemon][/b:47bfb8d893] rundll32.exe [color=teal:47bfb8d893]c:\windows\system32\[/color:47bfb8d893][color=blue:47bfb8d893]nvcpl.dll[/color:47bfb8d893],nvstartup [color=silver:47bfb8d893]o4 -[/color:47bfb8d893] [color=brown:47bfb8d893]hklm\..\run[/color:47bfb8d893]: [b:47bfb8d893][nvmediacenter][/b:47bfb8d893] rundll32.exe [color=teal:47bfb8d893]c:\windows\system32\[/color:47bfb8d893][color=blue:47bfb8d893]nvmctray.dll[/color:47bfb8d893],nvtaskbarinit [color=silver:47bfb8d893]o4 -[/color:47bfb8d893] [color=brown:47bfb8d893]hklm\..\run[/color:47bfb8d893]: [b:47bfb8d893][nwiz][/b:47bfb8d893] nwiz.exe /installquiet /nodetect [color=silver:47bfb8d893]o4 -[/color:47bfb8d893] [color=brown:47bfb8d893]hklm\..\run[/color:47bfb8d893]: [b:47bfb8d893][quicktime task][/b:47bfb8d893] [color=teal:47bfb8d893]c:\program files\quicktime\[/color:47bfb8d893][color=blue:47bfb8d893]qttask.exe[/color:47bfb8d893] -atboottime [color=silver:47bfb8d893]o4 -[/color:47bfb8d893] [color=brown:47bfb8d893]hklm\..\run[/color:47bfb8d893]: [b:47bfb8d893][adobe arm][/b:47bfb8d893] [color=teal:47bfb8d893]c:\program files\common files\adobe\arm\1.0\[/color:47bfb8d893][color=blue:47bfb8d893]adobearm.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o4 -[/color:47bfb8d893] [color=brown:47bfb8d893]hklm\..\run[/color:47bfb8d893]: [b:47bfb8d893][apvxdwin][/b:47bfb8d893] [color=teal:47bfb8d893]c:\program files\panda security\panda global protection 2012\[/color:47bfb8d893][color=blue:47bfb8d893]apvxdwin.exe[/color:47bfb8d893] /s [color=silver:47bfb8d893]o4 -[/color:47bfb8d893] [color=brown:47bfb8d893]hklm\..\run[/color:47bfb8d893]: [b:47bfb8d893][scaninicio][/b:47bfb8d893] [color=teal:47bfb8d893]c:\program files\panda security\panda global protection 2012\[/color:47bfb8d893][color=blue:47bfb8d893]inicio.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o4 -[/color:47bfb8d893] [color=brown:47bfb8d893]hkcu\..\run[/color:47bfb8d893]: [b:47bfb8d893][skype][/b:47bfb8d893] [color=teal:47bfb8d893]c:\program files\skype\\phone\[/color:47bfb8d893][color=blue:47bfb8d893]skype.exe[/color:47bfb8d893] /nosplash /minimized [color=silver:47bfb8d893]o4 -[/color:47bfb8d893] [color=brown:47bfb8d893]hkcu\..\run[/color:47bfb8d893]: [b:47bfb8d893][ctfmon.exe][/b:47bfb8d893] [color=teal:47bfb8d893]c:\windows\system32\[/color:47bfb8d893][color=blue:47bfb8d893]ctfmon.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o4 -[/color:47bfb8d893] [color=brown:47bfb8d893]hkcu\..\run[/color:47bfb8d893]: [b:47bfb8d893][wmpnscfg][/b:47bfb8d893] [color=teal:47bfb8d893]c:\program files\windows media player\[/color:47bfb8d893][color=blue:47bfb8d893]wmpnscfg.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o4 -[/color:47bfb8d893] [color=brown:47bfb8d893]hkus\s-1-5-18\..\run[/color:47bfb8d893]: [b:47bfb8d893][ctfmon.exe][/b:47bfb8d893] [color=teal:47bfb8d893]c:\windows\system32\[/color:47bfb8d893][color=blue:47bfb8d893]ctfmon.exe[/color:47bfb8d893] (user 'system') [color=silver:47bfb8d893]o4 -[/color:47bfb8d893] [color=brown:47bfb8d893]hkus\.default\..\run[/color:47bfb8d893]: [b:47bfb8d893][ctfmon.exe][/b:47bfb8d893] [color=teal:47bfb8d893]c:\windows\system32\[/color:47bfb8d893][color=blue:47bfb8d893]ctfmon.exe[/color:47bfb8d893] (user 'default user') [color=silver:47bfb8d893]o4 -[/color:47bfb8d893] [color=brown:47bfb8d893]global startup[/color:47bfb8d893]: hp photosmart premier snelstart.lnk = [color=teal:47bfb8d893]c:\program files\hp\digital imaging\bin\[/color:47bfb8d893][color=blue:47bfb8d893]hpqthb08.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o4 -[/color:47bfb8d893] [color=brown:47bfb8d893]global startup[/color:47bfb8d893]: microsoft office.lnk = [color=teal:47bfb8d893]c:\program files\microsoft office\office10\[/color:47bfb8d893][color=blue:47bfb8d893]osa.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o4 -[/color:47bfb8d893] [color=brown:47bfb8d893]global startup[/color:47bfb8d893]: service manager.lnk = [color=teal:47bfb8d893]c:\program files\microsoft sql server\80\tools\binn\[/color:47bfb8d893][color=blue:47bfb8d893]sqlmangr.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o4 -[/color:47bfb8d893] [color=brown:47bfb8d893]global startup[/color:47bfb8d893]: tmmonitor.lnk = [color=teal:47bfb8d893]c:\program files\arcsoft\totalmedia 3.5\[/color:47bfb8d893][color=blue:47bfb8d893]tmmonitor.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o8 -[/color:47bfb8d893] [color=brown:47bfb8d893]extra context menu item[/color:47bfb8d893]: e&xport to microsoft excel - res://[color=teal:47bfb8d893]c:\progra~1\micros~2\office10\[/color:47bfb8d893][color=blue:47bfb8d893]excel.exe[/color:47bfb8d893]/3000 [color=silver:47bfb8d893]o8 -[/color:47bfb8d893] [color=brown:47bfb8d893]extra context menu item[/color:47bfb8d893]: google sidewiki... - res://[color=teal:47bfb8d893]c:\program files\google\google toolbar\component\[/color:47bfb8d893][color=blue:47bfb8d893]googletoolbardynamic_mui_en_7461b1589e8b4fb7.dll[/color:47bfb8d893]/cmsidewiki.html [color=silver:47bfb8d893]o9 -[/color:47bfb8d893] [color=brown:47bfb8d893]extra button[/color:47bfb8d893]: skype add-on for internet explorer - [color=orange:47bfb8d893]{898ea8c8-e7ff-479b-8935-aec46303b9e5}[/color:47bfb8d893] - [color=teal:47bfb8d893]c:\program files\skype\toolbars\internet explorer\[/color:47bfb8d893][color=blue:47bfb8d893]skypeieplugin.dll[/color:47bfb8d893] [color=silver:47bfb8d893]o9 -[/color:47bfb8d893] [color=brown:47bfb8d893]extra 'tools' menuitem[/color:47bfb8d893]: skype add-on for internet explorer - [color=orange:47bfb8d893]{898ea8c8-e7ff-479b-8935-aec46303b9e5}[/color:47bfb8d893] - [color=teal:47bfb8d893]c:\program files\skype\toolbars\internet explorer\[/color:47bfb8d893][color=blue:47bfb8d893]skypeieplugin.dll[/color:47bfb8d893] [color=silver:47bfb8d893]o9 -[/color:47bfb8d893] [color=brown:47bfb8d893]extra button[/color:47bfb8d893]: (no name) - [color=orange:47bfb8d893]{e2e2dd38-d088-4134-82b7-f2ba38496583}[/color:47bfb8d893] - [color=teal:47bfb8d893]c:\windows\network diagnostic\[/color:47bfb8d893][color=blue:47bfb8d893]xpnetdiag.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o9 -[/color:47bfb8d893] [color=brown:47bfb8d893]extra 'tools' menuitem[/color:47bfb8d893]: @xpsp3res.dll,-20001 - [color=orange:47bfb8d893]{e2e2dd38-d088-4134-82b7-f2ba38496583}[/color:47bfb8d893] - [color=teal:47bfb8d893]c:\windows\network diagnostic\[/color:47bfb8d893][color=blue:47bfb8d893]xpnetdiag.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o9 -[/color:47bfb8d893] [color=brown:47bfb8d893]extra button[/color:47bfb8d893]: messenger - [color=orange:47bfb8d893]{fb5f1910-f110-11d2-bb9e-00c04f795683}[/color:47bfb8d893] - [color=teal:47bfb8d893]c:\program files\messenger\[/color:47bfb8d893][color=blue:47bfb8d893]msmsgs.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o9 -[/color:47bfb8d893] [color=brown:47bfb8d893]extra 'tools' menuitem[/color:47bfb8d893]: windows messenger - [color=orange:47bfb8d893]{fb5f1910-f110-11d2-bb9e-00c04f795683}[/color:47bfb8d893] - [color=teal:47bfb8d893]c:\program files\messenger\[/color:47bfb8d893][color=blue:47bfb8d893]msmsgs.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o14 -[/color:47bfb8d893] [color=brown:47bfb8d893]iereset.inf[/color:47bfb8d893]: start_page_url=[u:47bfb8d893][noparse]http://ie.redirect.hp.com/svs/rdr?type=3&tp=iehome&locale=nl_nl&c=64&bd=pavilion&pf=laptop[/noparse][/u:47bfb8d893] [color=silver:47bfb8d893]o16 -[/color:47bfb8d893] [color=brown:47bfb8d893]dpf[/color:47bfb8d893]: [color=orange:47bfb8d893]{17492023-c23a-453e-a040-c7c580bbf700}[/color:47bfb8d893] (windows genuine advantage validation tool) - [u:47bfb8d893][noparse]http://go.microsoft.com/fwlink/?linkid=39204[/noparse][/u:47bfb8d893] [color=silver:47bfb8d893]o16 -[/color:47bfb8d893] [color=brown:47bfb8d893]dpf[/color:47bfb8d893]: [color=orange:47bfb8d893]{4f1e5b1a-2a80-42ca-8532-2d05cb959537}[/color:47bfb8d893] (msn photo upload tool) - [u:47bfb8d893][noparse]http://gfx1.hotmail.com/mail/w3/pr01/resources/msnpupld.cab[/noparse][/u:47bfb8d893] [color=silver:47bfb8d893]o16 -[/color:47bfb8d893] [color=brown:47bfb8d893]dpf[/color:47bfb8d893]: [color=orange:47bfb8d893]{7530bfb8-7293-4d34-9923-61a11451afc5}[/color:47bfb8d893] (onlinescanner control) - [u:47bfb8d893][noparse]http://download.eset.com/special/eos-beta/onlinescanner.cab[/noparse][/u:47bfb8d893] [color=silver:47bfb8d893]o16 -[/color:47bfb8d893] [color=brown:47bfb8d893]dpf[/color:47bfb8d893]: [color=orange:47bfb8d893]{d27cdb6e-ae6d-11cf-96b8-444553540000}[/color:47bfb8d893] (shockwave flash object) - [u:47bfb8d893][noparse]http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab[/noparse][/u:47bfb8d893] [color=silver:47bfb8d893]o16 -[/color:47bfb8d893] [color=brown:47bfb8d893]dpf[/color:47bfb8d893]: [color=orange:47bfb8d893]{e2883e8f-472f-4fb0-9522-ac9bf37916a7}[/color:47bfb8d893] - [u:47bfb8d893][noparse]http://platformdl.adobe.com/nos/getplusplus/1.6/gp.cab[/noparse][/u:47bfb8d893] [color=silver:47bfb8d893]o16 -[/color:47bfb8d893] [color=brown:47bfb8d893]dpf[/color:47bfb8d893]: [color=orange:47bfb8d893]{e77f23eb-e7ab-4502-8f37-247dbaf1a147}[/color:47bfb8d893] (windows live hotmail photo upload tool) - [u:47bfb8d893][noparse]http://gfx1.hotmail.com/mail/w4/pr01/photouploadcontrol/msnpupld.cab[/noparse][/u:47bfb8d893] [color=silver:47bfb8d893]o18 -[/color:47bfb8d893] [color=brown:47bfb8d893]protocol[/color:47bfb8d893]: skype-ie-addon-data - [color=orange:47bfb8d893]{91774881-d725-4e58-b298-07617b9b86a8}[/color:47bfb8d893] - [color=teal:47bfb8d893]c:\program files\skype\toolbars\internet explorer\[/color:47bfb8d893][color=blue:47bfb8d893]skypeieplugin.dll[/color:47bfb8d893] [color=silver:47bfb8d893]o18 -[/color:47bfb8d893] [color=brown:47bfb8d893]protocol[/color:47bfb8d893]: skype4com - [color=orange:47bfb8d893]{ffc8b962-9b40-4dff-9458-1830c7dd7f5d}[/color:47bfb8d893] - [color=teal:47bfb8d893]c:\progra~1\common~1\skype\[/color:47bfb8d893][color=blue:47bfb8d893]skype4~1.dll[/color:47bfb8d893] [color=silver:47bfb8d893]o22 -[/color:47bfb8d893] [color=brown:47bfb8d893]sharedtaskscheduler[/color:47bfb8d893]: preloader van browseui - [color=orange:47bfb8d893]{438755c2-a8ba-11d1-b96b-00a0c90312e1}[/color:47bfb8d893] - [color=teal:47bfb8d893]c:\windows\system32\[/color:47bfb8d893][color=blue:47bfb8d893]browseui.dll[/color:47bfb8d893] [color=silver:47bfb8d893]o22 -[/color:47bfb8d893] [color=brown:47bfb8d893]sharedtaskscheduler[/color:47bfb8d893]: cache-daemon voor onderdeelcategorieën - [color=orange:47bfb8d893]{8c7461ef-2b13-11d2-be35-3078302c2030}[/color:47bfb8d893] - [color=teal:47bfb8d893]c:\windows\system32\[/color:47bfb8d893][color=blue:47bfb8d893]browseui.dll[/color:47bfb8d893] [color=silver:47bfb8d893]o23 -[/color:47bfb8d893] [color=brown:47bfb8d893]service[/color:47bfb8d893]: arcsoft connect daemon (acdaemon) - arcsoft inc. - [color=teal:47bfb8d893]c:\program files\common files\arcsoft\connection service\bin\[/color:47bfb8d893][color=blue:47bfb8d893]acservice.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o23 -[/color:47bfb8d893] [color=brown:47bfb8d893]service[/color:47bfb8d893]: addfiltr - hewlett-packard development company, l.p. - [color=teal:47bfb8d893]c:\program files\hewlett-packard\hp quick launch buttons\[/color:47bfb8d893][color=blue:47bfb8d893]addfiltr.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o23 -[/color:47bfb8d893] [color=brown:47bfb8d893]service[/color:47bfb8d893]: google updateservice (gupdate) (gupdate) - google inc. - [color=teal:47bfb8d893]c:\program files\google\update\[/color:47bfb8d893][color=blue:47bfb8d893]googleupdate.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o23 -[/color:47bfb8d893] [color=brown:47bfb8d893]service[/color:47bfb8d893]: google update-service (gupdatem) (gupdatem) - google inc. - [color=teal:47bfb8d893]c:\program files\google\update\[/color:47bfb8d893][color=blue:47bfb8d893]googleupdate.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o23 -[/color:47bfb8d893] [color=brown:47bfb8d893]service[/color:47bfb8d893]: hpqwmiex - hewlett-packard development company, l.p. - [color=teal:47bfb8d893]c:\program files\hewlett-packard\shared\[/color:47bfb8d893][color=blue:47bfb8d893]hpqwmiex.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o23 -[/color:47bfb8d893] [color=brown:47bfb8d893]service[/color:47bfb8d893]: installdriver table manager (idrivert) - macrovision corporation - [color=teal:47bfb8d893]c:\program files\common files\installshield\driver\1050\intel 32\[/color:47bfb8d893][color=blue:47bfb8d893]idrivert.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o23 -[/color:47bfb8d893] [color=brown:47bfb8d893]service[/color:47bfb8d893]: java quick starter (javaquickstarterservice) - sun microsystems, inc. - [color=teal:47bfb8d893]c:\program files\java\jre6\bin\[/color:47bfb8d893][color=blue:47bfb8d893]jqs.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o23 -[/color:47bfb8d893] [color=brown:47bfb8d893]service[/color:47bfb8d893]: lightscribeservice direct disc labeling service (lightscribeservice) - hewlett-packard company - [color=teal:47bfb8d893]c:\program files\common files\lightscribe\[/color:47bfb8d893][color=blue:47bfb8d893]lssrvc.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o23 -[/color:47bfb8d893] [color=brown:47bfb8d893]service[/color:47bfb8d893]: nvidia display driver service (nvsvc) - nvidia corporation - [color=teal:47bfb8d893]c:\windows\system32\[/color:47bfb8d893][color=blue:47bfb8d893]nvsvc32.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o23 -[/color:47bfb8d893] [color=brown:47bfb8d893]service[/color:47bfb8d893]: panda software controller - panda security, s.l. - [color=teal:47bfb8d893]c:\program files\panda security\panda global protection 2012\[/color:47bfb8d893][color=blue:47bfb8d893]psctrls.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o23 -[/color:47bfb8d893] [color=brown:47bfb8d893]service[/color:47bfb8d893]: panda function service (pavfnsvr) - unknown owner - [color=teal:47bfb8d893]c:\program files\panda security\panda global protection 2012\[/color:47bfb8d893][color=blue:47bfb8d893]pavfnsvr.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o23 -[/color:47bfb8d893] [color=brown:47bfb8d893]service[/color:47bfb8d893]: panda process protection service (pavprsrv) - unknown owner - [color=teal:47bfb8d893]c:\program files\common files\panda security\pavshld\[/color:47bfb8d893][color=blue:47bfb8d893]pavprsrv.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o23 -[/color:47bfb8d893] [color=brown:47bfb8d893]service[/color:47bfb8d893]: panda on-access anti-malware service (pavsrv) - panda security, s.l. - [color=teal:47bfb8d893]c:\program files\panda security\panda global protection 2012\[/color:47bfb8d893][color=blue:47bfb8d893]pavsrvx86.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o23 -[/color:47bfb8d893] [color=brown:47bfb8d893]service[/color:47bfb8d893]: panda host service (pshost) - unknown owner - [color=teal:47bfb8d893]c:\program files\panda security\panda global protection 2012\firewall\[/color:47bfb8d893][color=blue:47bfb8d893]pshost.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o23 -[/color:47bfb8d893] [color=brown:47bfb8d893]service[/color:47bfb8d893]: panda imanager service (psimsvc) - panda security s.l. - [color=teal:47bfb8d893]c:\program files\panda security\panda global protection 2012\[/color:47bfb8d893][color=blue:47bfb8d893]psimsvc.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o23 -[/color:47bfb8d893] [color=brown:47bfb8d893]service[/color:47bfb8d893]: panda psk service (psksvcretail) - panda security, s.l. - [color=teal:47bfb8d893]c:\program files\panda security\panda global protection 2012\[/color:47bfb8d893][color=blue:47bfb8d893]psksvc.exe[/color:47bfb8d893] [color=silver:47bfb8d893]o23 -[/color:47bfb8d893] [color=brown:47bfb8d893]service[/color:47bfb8d893]: panda tpsrv (tpsrv) - panda security, s.l. - [color=teal:47bfb8d893]c:\program files\panda security\panda global protection 2012\[/color:47bfb8d893][color=blue:47bfb8d893]tpsrv.exe[/color:47bfb8d893] -- end of file - 11517 bytes [/hjt] Alvast dank!
Link naar reactie
  • Antwoorden 132
  • Aangemaakt
  • Laatste reactie

Beste reacties voor deze vraag

  • anoniem

    133

Aanbevolen berichten

  • 0
oja, de sfc \scannow heb ik ook gedaan, die ging in een bliksemflits, dus ik weet eigenlijk niet of die nu goed is gegaan. Het ging zo snel dat ik een blokje kon zien van een pop-up in een oogblink, maar meer niet. Adobe reader en flash met de X geupdate. Java gebeurde automatisch. Verder ben ik nu even de draad kwijt hoe ik verder moet controleren. De SQL-toren doet het nog niet. Maar ik weet ook niet of die nodig is en hoe ik het beste kan controleren of alles goed up2date is nu. :) Groetjes Holly
Link naar reactie
  • 0
Hallo Abraham54, ben nog steeds eraan bezig...en denk dat het toch foute boel is nog steeds... Panda gerund, geen besmettingen. Daarna MBAM gerund, besmet bestand van HJT! log MBAM: Malwarebytes' Anti-Malware 1.51.2.1300 www.malwarebytes.org Database version: 7823 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 29-9-2011 8:16:25 mbam-log-2011-09-29 (08-16-25).txt Scan type: Quick scan Objects scanned: 194986 Time elapsed: 10 minute(s), 0 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 1 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\StartMenuLogoff (PUM.Hijack.StartMenu) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) Daarnaast weer Panda gerund, 11 spyware eruit. Melding van kwetsbaarheden: veelal nr's rond MS-10...die er met de eerste scannow ook uitkwamen... Vervolgens vind ik dit, wat ook het knipperen verklaard, over de MS-10(46) over ChymineLNK.A :evil: : http://technet.microsoft.com/nl-nl/security/advisory/2286198 en http://technet.microsoft.com/nl-nl/security/bulletin/ms10-046 Niet goed dus ben ik bang. Kan ik hier nog iets aan doen? Of wordt het dan toch de herstelschijven? Dat wordt weer uuuuren updaten met die +/- 100 updates van Windows Microsoft EN weer hardnekkig om na herstel deze befaamde updates te verkrijgen. Maar goed, wat nodig is is nodig. Ik wacht nu even een reactie af. HJT besmet volgens MBAM en volgens GP12 kwetsbaarheden met diverse nr's van MS-10 en MS-11. Hopelijk heb ik alle info hierin verwerkt. Anders lees ik het in de volgende post wellicht. Dank, groetjes Holly
Link naar reactie
  • 0
Hallo Abraham54, ben vanochtend na je post direct opnieuw gaan proberen. Dit keer de advanced button geklikt, hierbij stonden 3 opties: - destructief herstel - systeem herstel - partitie verwijderen (NIET aanbevolen) Systeem herstel blijkt de standaard. Heb gekozen dit maal voor destructief herstel (middels klikken op 'advanced'. Hierbij zijn wel al mijn instellingen en documenten verwijderd. Weer tig keer opstarten en ellenlange procedure met die vele updates... Nu ben ik wederom zover...GP12 geactiveerd, tot mijn schrik nog steeds de kwetsbaarheden a 59 stuks!!! van MS-10-xx en MS-11-xx :x Beetje jammer. Welke mogelijke oplossingen zijn hiervoor? Want via Microsoft is weinig meer te krijgen... voor dit alles kon ik updates online scannen...nu doet niets het meer als de melding: auto updates aanzetten, maar die staan aan... Niet geprobeerd is altijd mis. Hoe nu het beste verder met dit probleem vraag ik me af. Vandaag dag vrij genomen zelfs. In ieder geval is eea dan wel duidelijk na alle uren inzet :lol: :( helaas, learning by failure and error :wink: Groetjes Holly Over het LNK-lek wel artikelen te vinden, maar de download of noodpatch om te fixen niet. http://www.security.nl/artikel/34037/1/Microsoft_noodpatch_voor_Windows_LNK-lek.html
Link naar reactie
  • 0
Hallo Abraham54, ik bedoel de veiligheidsupdates: http://technet.microsoft.com/nl-nl/security/bulletin/ms10-046 onder andere deze update dus, de MS10-046 naast de 46 zijn er nog tig anderen codes. ondertussen heb ik deze gevonden: http://www.microsoft.com/nl-nl/security/pc-security/bulletins/201109.aspx maar krijg ze nog niet zomaar gedownload, laat staan geinstalleerd. Ook krijg ik nergens toegang op de sites van Microsoft Windows voor updates vd beveiliging e.d. Misschien wist u die codes enzo. Ik zoek wel verder. Anders houd het op denk ik. Ik krijg de kwetsbaarheden niet weg. De computer opnieuw opgezet, maar tot daar ben ik nog steeds. Krijg de juiste beveiliging niet tot stand, en weet niet of de pc 'schoon' is zonder virus of kapotte dingen erdoor. toch bedankt anyway. Groetjes Holly
Link naar reactie
  • 0
hallo abraham54, begin beetje zenuwachtig te worden van alles...maar hier is het log, heb HJT van de Bleepingcomputer-site: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 17:11:03, on 29-9-2011 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Panda Security\Panda Global Protection 2012\TPSrv.exe C:\PROGRAM FILES\PANDA SECURITY\PANDA GLOBAL PROTECTION 2012\WebProxy.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Panda Security\Panda Global Protection 2012\PsCtrls.exe C:\Program Files\Panda Security\Panda Global Protection 2012\PavFnSvr.exe C:\Program Files\Common Files\Panda Security\PavShld\pavprsrv.exe c:\program files\panda security\panda global protection 2012\firewall\PSHOST.EXE C:\Program Files\Panda Security\Panda Global Protection 2012\PsImSvc.exe C:\Program Files\Panda Security\Panda Global Protection 2012\PskSvc.exe C:\Program Files\Panda Security\Panda Global Protection 2012\pavsrvx86.exe C:\Program Files\Panda Security\Panda Global Protection 2012\AVENGINE.EXE C:\WINDOWS\system32\SearchIndexer.exe C:\WINDOWS\ehome\ehtray.exe C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\WINDOWS\eHome\ehmsas.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\HP\QuickPlay\QPService.exe C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Windows Desktop Search\WindowsSearch.exe C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe C:\WINDOWS\system32\dllhost.exe C:\Program Files\Panda Security\Panda Global Protection 2012\PavBckPT.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Panda Security\Panda Global Protection 2012\apvxdwin.exe C:\Program Files\Panda Security\Panda Global Protection 2012\SRVLOAD.EXE C:\WINDOWS\System32\svchost.exe C:\Program Files\Windows Media Player\WMPNSCFG.exe C:\Program Files\Windows Media Player\wmplayer.exe C:\WINDOWS\system32\SearchProtocolHost.exe C:\Documents and Settings\Pt3z\Mijn documenten\Downloads\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=NL_NL&c=64&bd=presario&pf=laptop R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=NL_NL&c=64&bd=presario&pf=laptop R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /nodetect O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] CHDAudPropShortcut.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe" O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start O4 - HKLM\..\Run: [Cpqset] C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Security\Panda Global Protection 2012\APVXDWIN.EXE" /s O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files\Panda Security\Panda Global Protection 2012\Inicio.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: HP Photosmart Premier Snelstart.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe O8 - Extra context menu item: &Google Zoeken - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: &Woord vertalen in het Nederlands - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: Gelijkwaardige pagina's - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Koppelingspagina's - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Opgeslagen momentopname van de pagina - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=NL_NL&c=64&bd=pavilion&pf=laptop O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Panda Software Controller - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Global Protection 2012\PsCtrls.exe O23 - Service: Panda Function Service (PAVFNSVR) - Unknown owner - C:\Program Files\Panda Security\Panda Global Protection 2012\PavFnSvr.exe O23 - Service: Panda Process Protection Service (PavPrSrv) - Unknown owner - C:\Program Files\Common Files\Panda Security\PavShld\pavprsrv.exe O23 - Service: Panda On-Access Anti-Malware Service (PAVSRV) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Global Protection 2012\pavsrvx86.exe O23 - Service: Panda Host Service (PSHost) - Unknown owner - c:\program files\panda security\panda global protection 2012\firewall\PSHOST.EXE O23 - Service: Panda IManager Service (PSIMSVC) - Panda Security S.L. - C:\Program Files\Panda Security\Panda Global Protection 2012\PsImSvc.exe O23 - Service: Panda PSK service (PskSvcRetail) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Global Protection 2012\PskSvc.exe O23 - Service: Panda TPSrv (TPSrv) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Global Protection 2012\TPSrv.exe -- End of file - 10306 bytes Als ik in een ander topic of forum moet met het verdere verloop dan zeg je me het toch wel? Ik zoek me suf, maar als leek zie ik door de bomen het bos niet meer zo. Hopelijk biedt dit HJT-log nog uitkomst. Dank wederom. Ik zou graag willen dat ik er wat meer van wist. Groetjes Holly
Link naar reactie
  • 0
Nee hoor, niemand die onder mijn naam kan inloggen. Het was een voor mij onbekende aanduiding, als ik het over mijn antivirus heb, dan vermeld ik die voluit en Panda is momenteel een erg goede antivirussoftware, maar ik hou het op iets anders. Dus vergeef me als ik die aanduidingen niet snap. Wat geeft Panda nu precies aan wat betreft kwetsbaarheden in jouw Windows?
Link naar reactie
  • 0
okay, dan is het goed. Ik begreep het even niet helemaal. GLobal Panda 2012 geeft het volgende aan in het tabblad scan, waar je ook een scan op 'kwetsbaarheden' kan doen geeft de volgende lijst: Kwetsbaarheden in lijst van zwakke plekken op uw pc allen met niveau hoog: MS-10-046 (Virus of bedreiging die er gebruik van maakt: ChymineLNK.A) MS-10-47/48/49/53/54/61/63/66/67/69/71/73/76/81/83/84/90/96/97/98 MS-11-002/3/6/7/11/12/13/14 Maar ook in het pop-up scherm rechts onder komt Global Panda 2012 telkens met de melding van kwetsbaarheden met prio hoog om op te lossen,... Ik ben er achter dat de MS-11-xx meldingen van Microsoft Office zijn, maar die andere weet ik nog niet. Die kunnen dus besturing e.d. overnemen op afstand zelfs! Dat is best eng. Ik krijg geen downloads voor die updates, dat is vaag. Ook in IE8 krijg ik geen toegang tot het downloaden... wel heb ik Mediaplayer 9 naar Mediaplayer 11 kunnen upgraden, daar werd de legitimiteit gecheckt en die update kreeg ik na de validatie van de code. De rest wil niet qua updates. En Microsoft is best een doolhof en niet echt no-nonsense, dat in combi dat ik een leek ben...brute combi dus. Groetjes Holly
Link naar reactie
  • 0
Eens kijken of we de Windows update in jouw XP weer activeren! Open een nieuw kladblok bestand, via "Start\Alle programma’s\Bureau-accessoires\[b:4103d1675c]Kladblok[/b:4103d1675c]". Kopieer en plak de volgende (vetgedrukte, blauwe tekst) in het lege kladblokvenstervenster [b:4103d1675c][color=Blue:4103d1675c]regsvr32 /s wuapi.dll regsvr32 /s wuaueng1.dll regsvr32 /s wuaueng.dll regsvr32 /s wucltui.dll regsvr32 /s wups2.dll regsvr32 /s wups.dll regsvr32 /s wuweb.dll[/color:4103d1675c][/b:4103d1675c] Sla dit kladblokbestand op je bureaublad op als [b:4103d1675c]Update.bat[/b:4103d1675c]. Dubbelklik nu op Update.bat, zodat het bestand wordt uitgevoerd.
Link naar reactie
  • 0
Hallo Abraham54, heb ik gedaan. Eerst niets, daarna diverse dingen. Toen begon GlobalPanda12 te stuiten, een gevaarlijke operatie van een TDSS rootkit in 1 van de updates! Schrikken, een map op C:\47313fa2c659f0e8e86b66adcf2193f5 met een heel lang nummer dus. GlobalPanda12 gaf een block, maar is dat bestand dan corrupt?! Wel onderwijl 375 kwetbaarheden in Windows volgens GlobalPanda12! Na een uur maar reboot. Toen begon plots na 2uur een download van het gele schildje. Na een 45min begon een installatie van 89 updates. Daarna een reboot. Toen weer begon het gele schildje met downloaden van updates, toen 69, daarna hetzelfde met 33 downloads respectievelijk 4maal 3 downloads met reboots! En als ik op de site van Microsoft Windows kom, dan scant ie weer naar updates, dus dat gaat wellicht (hopelijk) de goede kant op. Ben nog wel een beetje skeptisch gezien het verloop. Dien ik een scan met die rootkitkiller weer te doen van Kaspersky TDSS rootkiller? Het gaat me een beetje raar met XP en de updates allemaal! MBAM had de HJT weer als virus in quarantaine gezet... GLobalPanda12 had een besmetting van Weborama gedelete. Groetjes Holly
Link naar reactie
  • 0
Had je de internetverbinding tijdens de recovery aangesloten? [[b:735252ea32]Welk programma[/b:735252ea32]: Kaspersky [b:735252ea32]TDSSKiller[/b:735252ea32] [b:735252ea32]Waarvoor/waarom[/b:735252ea32]: Rootkitscanner [b:735252ea32]Moeilijkheidsgraad[/b:735252ea32]: geen [b:735252ea32]Downloadlokatie[/b:735252ea32]: Dit programma absoluut naar het bureaublad downloaden of anders daar naar toe verplaatsen! [b:735252ea32]Download[/b:735252ea32] [b:735252ea32]TDSSKiller[/b:735252ea32] [url=http://support.kaspersky.com/downloads/utils/tdsskiller.zip][b:735252ea32]hier[/b:735252ea32][/url]. [b:735252ea32]Installatie[/b:735252ea32]: [list:735252ea32][*:735252ea32] pak het bestand uit op je bureaublad.[/list:u:735252ea32] [b:735252ea32]TDSSKiller gebruiken[/b:735252ea32]: [list:735252ea32][*:735252ea32]Windows 2000 en Windows XP: start "TDSSKiller" middels dubbelklik op TDSSKiller.exe. [*:735252ea32]Windows Vista en Windows 7: start "TDSSKiller" middels rechtsklik op TDSSKiller.exe en dan kiezen voor [b:735252ea32]Als Administrator uitvoeren[/b:735252ea32]. [*:735252ea32]Idien TDSSKiller met een bericht komt over een beschikbare update, dan voer je deze eerst uit.[/list:u:735252ea32] [img:735252ea32]http://www.imgdumper.nl/uploads4/4dc1d6438f791/4dc1d6438d897-TDSSKiller_2011-05-05_00-26-21.jpg[/img:735252ea32] [list:735252ea32][*:735252ea32]Klik vervolgens op de knop [b:735252ea32]"Start Scan"[/b:735252ea32] en volg de instructies. [*:735252ea32] Nadat de scan klaar is klik je op de knop [b:735252ea32]"Report"[/b:735252ea32]. [*:735252ea32]Er opent een kladblokbestand. Post de inhoud van dit bestand. [list:735252ea32][*:735252ea32][b:735252ea32]Herstart de pc indien TDSSKiller die optie aangeeft (Reboot now).[/b:735252ea32] [*:735252ea32]Wanneer het opnieuw opstarten noodzakelijk is, vind je de logfile in [b:735252ea32]C:\TDSSKiller.[Version]_[Date]_[Time]_log.txt[/b:735252ea32][/list:u:735252ea32][/list:u:735252ea32]
Link naar reactie
  • 0
Hallo Abraham54, ja, de internetverbinding was uit, had de wireless uitgeschakeld, geen kabels behalve de voeding en de accu er ook uit, want de temperatuur liep zo op de eerste keer, dus de 2e keer eruit. Met de eerste 2 vinkjes in TDSSrootkitkiller geeft ie niets, maar met advanced de andere 2 hokjes aangevinkt geeft ie 3 suspicious items met medium threat... ik heb voor de 'copy to quarantaine' gekozen. het report: 13:33:39.0562 4512 TDSS rootkit removing tool 2.6.2.0 Sep 26 2011 18:56:43 13:33:39.0640 4512 ============================================================ 13:33:39.0640 4512 Current date / time: 2011/09/30 13:33:39.0640 13:33:39.0640 4512 SystemInfo: 13:33:39.0640 4512 13:33:39.0640 4512 OS Version: 5.1.2600 ServicePack: 3.0 13:33:39.0640 4512 Product type: Workstation 13:33:39.0640 4512 ComputerName: PC152682903916 13:33:39.0640 4512 UserName: Pt3z 13:33:39.0640 4512 Windows directory: C:\WINDOWS 13:33:39.0640 4512 System windows directory: C:\WINDOWS 13:33:39.0640 4512 Processor architecture: Intel x86 13:33:39.0640 4512 Number of processors: 2 13:33:39.0640 4512 Page size: 0x1000 13:33:39.0640 4512 Boot type: Normal boot 13:33:39.0640 4512 ============================================================ 13:33:40.0125 4512 Initialize success 13:34:00.0156 5916 ============================================================ 13:34:00.0156 5916 Scan started 13:34:00.0156 5916 Mode: Manual; SigCheck; TDLFS; 13:34:00.0156 5916 ============================================================ 13:34:00.0515 5916 Abiosdsk - ok 13:34:00.0546 5916 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS 13:34:01.0703 5916 abp480n5 - ok 13:34:01.0953 5916 ACPI (02273a448ba21a7d447daeb47810d40c) C:\WINDOWS\system32\DRIVERS\ACPI.sys 13:34:02.0140 5916 ACPI - ok 13:34:02.0156 5916 ACPIEC (63f517b1a87dabf3f5acb8a7952fc1d1) C:\WINDOWS\system32\DRIVERS\ACPIEC.sys 13:34:02.0343 5916 ACPIEC - ok 13:34:02.0375 5916 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys 13:34:02.0593 5916 adpu160m - ok 13:34:02.0859 5916 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys 13:34:03.0062 5916 aec - ok 13:34:03.0093 5916 AFD (355556d9e580915118cd7ef736653a89) C:\WINDOWS\System32\drivers\afd.sys 13:34:03.0156 5916 AFD - ok 13:34:03.0390 5916 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys 13:34:03.0593 5916 agp440 - ok 13:34:03.0640 5916 agpCPQ (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys 13:34:03.0859 5916 agpCPQ - ok 13:34:03.0953 5916 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys 13:34:04.0093 5916 Aha154x - ok 13:34:04.0234 5916 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys 13:34:04.0484 5916 aic78u2 - ok 13:34:04.0500 5916 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys 13:34:04.0703 5916 aic78xx - ok 13:34:04.0828 5916 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys 13:34:05.0031 5916 AliIde - ok 13:34:05.0250 5916 alim1541 (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\system32\DRIVERS\alim1541.sys 13:34:05.0421 5916 alim1541 - ok 13:34:05.0531 5916 amdagp (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\system32\DRIVERS\amdagp.sys 13:34:05.0734 5916 amdagp - ok 13:34:05.0875 5916 AmdK8 (0a4d13b388c814560bd69c3a496ecfa8) C:\WINDOWS\system32\DRIVERS\AmdK8.sys 13:34:05.0968 5916 AmdK8 - ok 13:34:06.0093 5916 AmFSM (ef9dd27aa5a3baaf2fd2b44c08a3e622) C:\WINDOWS\system32\DRIVERS\amm8651.sys 13:34:06.0203 5916 AmFSM - ok 13:34:06.0343 5916 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys 13:34:06.0484 5916 amsint - ok 13:34:06.0515 5916 APPFLT (6b467e791ec470d010bd50e5e98bf467) C:\WINDOWS\system32\Drivers\APPFLT.SYS 13:34:06.0546 5916 APPFLT - ok 13:34:06.0687 5916 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys 13:34:06.0890 5916 Arp1394 - ok 13:34:07.0031 5916 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys 13:34:07.0265 5916 asc - ok 13:34:07.0359 5916 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys 13:34:07.0484 5916 asc3350p - ok 13:34:07.0500 5916 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys 13:34:07.0718 5916 asc3550 - ok 13:34:07.0765 5916 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys 13:34:07.0953 5916 AsyncMac - ok 13:34:08.0109 5916 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys 13:34:08.0281 5916 atapi - ok 13:34:08.0312 5916 Atdisk - ok 13:34:08.0359 5916 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys 13:34:08.0546 5916 Atmarpc - ok 13:34:08.0625 5916 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys 13:34:08.0828 5916 audstub - ok 13:34:08.0843 5916 AvFlt - ok 13:34:08.0890 5916 BCM43XX (114234fafec7060392195170e1c4d45e) C:\WINDOWS\system32\DRIVERS\bcmwl5.sys 13:34:08.0968 5916 BCM43XX - ok 13:34:09.0109 5916 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys 13:34:09.0281 5916 Beep - ok 13:34:09.0406 5916 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys 13:34:09.0640 5916 cbidf - ok 13:34:09.0656 5916 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys 13:34:09.0859 5916 cbidf2k - ok 13:34:09.0875 5916 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys 13:34:10.0000 5916 cd20xrnt - ok 13:34:10.0015 5916 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys 13:34:10.0218 5916 Cdaudio - ok 13:34:10.0265 5916 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys 13:34:10.0453 5916 Cdfs - ok 13:34:10.0625 5916 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys 13:34:10.0812 5916 Cdrom - ok 13:34:10.0906 5916 Changer - ok 13:34:10.0984 5916 CmBatt (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys 13:34:11.0156 5916 CmBatt - ok 13:34:11.0312 5916 CmdIde (026ba1f2d9c9f742ec3823d0214cd67c) C:\WINDOWS\system32\DRIVERS\cmdide.sys 13:34:11.0546 5916 CmdIde - ok 13:34:11.0593 5916 ComFiltr (d9c33e68f61f27d8206f65b0190dc5cf) C:\WINDOWS\system32\DRIVERS\COMFiltr.sys 13:34:11.0625 5916 ComFiltr - ok 13:34:11.0734 5916 Compbatt (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys 13:34:11.0921 5916 Compbatt - ok 13:34:12.0093 5916 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys 13:34:12.0312 5916 Cpqarray - ok 13:34:12.0437 5916 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys 13:34:12.0671 5916 dac2w2k - ok 13:34:12.0812 5916 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys 13:34:13.0031 5916 dac960nt - ok 13:34:13.0078 5916 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys 13:34:13.0250 5916 Disk - ok 13:34:13.0343 5916 dmboot (dec123e0c75971d0cc7a6c6a75e28429) C:\WINDOWS\system32\drivers\dmboot.sys 13:34:13.0609 5916 dmboot - ok 13:34:13.0843 5916 dmio (7268e66259722f6228c730685b201092) C:\WINDOWS\system32\drivers\dmio.sys 13:34:14.0046 5916 dmio - ok 13:34:14.0078 5916 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys 13:34:14.0296 5916 dmload - ok 13:34:14.0343 5916 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys 13:34:14.0531 5916 DMusic - ok 13:34:14.0750 5916 dpti2o (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys 13:34:14.0968 5916 dpti2o - ok 13:34:15.0015 5916 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys 13:34:15.0203 5916 drmkaud - ok 13:34:15.0265 5916 DSAFLT (5bb0f91ffd84057d094d106d9ff53298) C:\WINDOWS\system32\Drivers\DSAFLT.SYS 13:34:15.0296 5916 DSAFLT - ok 13:34:15.0515 5916 eabfiltr (b5cb3084046146fd2587d8c9b219feb4) C:\WINDOWS\system32\DRIVERS\eabfiltr.sys 13:34:15.0593 5916 eabfiltr - ok 13:34:15.0640 5916 eabusb (231f4547ae1e4b3e60eca66c3a96d218) C:\WINDOWS\system32\DRIVERS\eabusb.sys 13:34:15.0687 5916 eabusb - ok 13:34:15.0937 5916 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys 13:34:16.0187 5916 Fastfat - ok 13:34:16.0250 5916 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys 13:34:16.0437 5916 Fdc - ok 13:34:16.0500 5916 Fips (8bfffb5ac954e19dfdb96d56512aa518) C:\WINDOWS\system32\drivers\Fips.sys 13:34:16.0687 5916 Fips - ok 13:34:16.0890 5916 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys 13:34:17.0062 5916 Flpydisk - ok 13:34:17.0093 5916 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys 13:34:17.0281 5916 FltMgr - ok 13:34:17.0328 5916 FNETMON (a38b9ba7a4c17f7dce9ec4e8f7870026) C:\WINDOWS\system32\Drivers\fnetmon.SYS 13:34:17.0359 5916 FNETMON - ok 13:34:17.0421 5916 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys 13:34:17.0625 5916 Fs_Rec - ok 13:34:17.0859 5916 Ftdisk (fa8ca22e70245c81ff29c36af56292fc) C:\WINDOWS\system32\DRIVERS\ftdisk.sys 13:34:18.0078 5916 Ftdisk - ok 13:34:18.0125 5916 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys 13:34:18.0312 5916 Gpc - ok 13:34:18.0359 5916 HBtnKey (4d4d97671c63c3af869b3518e6054204) C:\WINDOWS\system32\DRIVERS\cpqbttn.sys 13:34:18.0390 5916 HBtnKey - ok 13:34:18.0625 5916 HdAudAddService (2a6e9a118da2dd0439551a7eb3a8f65e) C:\WINDOWS\system32\drivers\CHDAud.sys 13:34:18.0734 5916 HdAudAddService - ok 13:34:19.0000 5916 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys 13:34:19.0265 5916 HDAudBus - ok 13:34:19.0296 5916 hpn (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys 13:34:19.0515 5916 hpn - ok 13:34:19.0765 5916 HSFHWAZL (8e60293c44e3f6f7f09defb60023a37d) C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys 13:34:19.0828 5916 HSFHWAZL - ok 13:34:19.0890 5916 HSF_DPV (4c2aab15ad6229134f70e5c950e6185c) C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys 13:34:20.0015 5916 HSF_DPV - ok 13:34:20.0281 5916 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys 13:34:20.0343 5916 HTTP - ok 13:34:20.0406 5916 i2omgmt (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys 13:34:20.0687 5916 i2omgmt - ok 13:34:20.0906 5916 i2omp (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\system32\DRIVERS\i2omp.sys 13:34:21.0093 5916 i2omp - ok 13:34:21.0140 5916 i8042prt (c43372d0682f8e32e4ec21117e089ec0) C:\WINDOWS\system32\DRIVERS\i8042prt.sys 13:34:21.0328 5916 i8042prt - ok 13:34:21.0421 5916 iaStor (309c4d86d989fb1fcf64bd30dc81c51b) C:\WINDOWS\system32\DRIVERS\iaStor.sys 13:34:21.0562 5916 iaStor ( UnsignedFile.Multi.Generic ) - warning 13:34:21.0562 5916 iaStor - detected UnsignedFile.Multi.Generic (1) 13:34:21.0796 5916 IDSFLT (c4e887cf7ba2d3624233231aecd34c9d) C:\WINDOWS\system32\Drivers\IDSFLT.SYS 13:34:21.0828 5916 IDSFLT - ok 13:34:21.0906 5916 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys 13:34:22.0093 5916 Imapi - ok 13:34:22.0125 5916 ini910u (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys 13:34:22.0343 5916 ini910u - ok 13:34:22.0562 5916 IntelIde (72c63ad984d427d34bd5b9db838d88eb) C:\WINDOWS\system32\DRIVERS\intelide.sys 13:34:22.0734 5916 IntelIde - ok 13:34:22.0796 5916 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys 13:34:22.0968 5916 Ip6Fw - ok 13:34:23.0000 5916 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 13:34:23.0218 5916 IpFilterDriver - ok 13:34:23.0453 5916 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys 13:34:23.0625 5916 IpInIp - ok 13:34:23.0781 5916 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys 13:34:23.0953 5916 IpNat - ok 13:34:23.0984 5916 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys 13:34:24.0156 5916 IPSec - ok 13:34:24.0390 5916 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys 13:34:24.0593 5916 IRENUM - ok 13:34:24.0687 5916 isapnp (0b78e1a31340e1fb1e389d5633f7c3a0) C:\WINDOWS\system32\DRIVERS\isapnp.sys 13:34:24.0875 5916 isapnp - ok 13:34:25.0062 5916 Kbdclass (380397621e94b32c744e7b2cc1330390) C:\WINDOWS\system32\DRIVERS\kbdclass.sys 13:34:25.0234 5916 Kbdclass - ok 13:34:25.0296 5916 kbdhid (b833b70fe639f01fb36cedabe57ef031) C:\WINDOWS\system32\DRIVERS\kbdhid.sys 13:34:25.0484 5916 kbdhid - ok 13:34:25.0531 5916 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys 13:34:25.0718 5916 kmixer - ok 13:34:25.0953 5916 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys 13:34:26.0062 5916 KSecDD - ok 13:34:26.0281 5916 lbrtfdc - ok 13:34:26.0375 5916 mdmxsdk (0cea2d0d3fa284b85ed5b68365114f76) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys 13:34:26.0437 5916 mdmxsdk - ok 13:34:26.0484 5916 MHNDRV (7f2f1d2815a6449d346fcccbc569fbd6) C:\WINDOWS\system32\DRIVERS\mhndrv.sys 13:34:26.0515 5916 MHNDRV ( UnsignedFile.Multi.Generic ) - warning 13:34:26.0515 5916 MHNDRV - detected UnsignedFile.Multi.Generic (1) 13:34:26.0546 5916 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys 13:34:26.0734 5916 mnmdd - ok 13:34:26.0984 5916 Modem (8114eeac353f549331ab73e9af4219ed) C:\WINDOWS\system32\drivers\Modem.sys 13:34:27.0171 5916 Modem - ok 13:34:27.0203 5916 Mouclass (1a4e2214dd63e4a876463d3427ee8261) C:\WINDOWS\system32\DRIVERS\mouclass.sys 13:34:27.0406 5916 Mouclass - ok 13:34:27.0437 5916 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys 13:34:27.0609 5916 MountMgr - ok 13:34:27.0843 5916 mraid35x (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys 13:34:28.0062 5916 mraid35x - ok 13:34:28.0078 5916 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys 13:34:28.0296 5916 MRxDAV - ok 13:34:28.0453 5916 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 13:34:28.0546 5916 MRxSmb - ok 13:34:28.0718 5916 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys 13:34:28.0968 5916 Msfs - ok 13:34:29.0078 5916 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys 13:34:29.0265 5916 MSKSSRV - ok 13:34:29.0296 5916 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys 13:34:29.0468 5916 MSPCLOCK - ok 13:34:29.0671 5916 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys 13:34:29.0843 5916 MSPQM - ok 13:34:29.0984 5916 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys 13:34:30.0140 5916 mssmbios - ok 13:34:30.0312 5916 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys 13:34:30.0375 5916 Mup - ok 13:34:30.0515 5916 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys 13:34:30.0703 5916 NDIS - ok 13:34:30.0843 5916 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys 13:34:31.0031 5916 NdisTapi - ok 13:34:31.0156 5916 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys 13:34:31.0328 5916 Ndisuio - ok 13:34:31.0500 5916 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys 13:34:31.0687 5916 NdisWan - ok 13:34:31.0734 5916 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys 13:34:31.0828 5916 NDProxy - ok 13:34:32.0078 5916 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys 13:34:32.0265 5916 NetBIOS - ok 13:34:32.0328 5916 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys 13:34:32.0515 5916 NetBT - ok 13:34:32.0750 5916 NETFLTDI (d8f44fc13db193c9379297973ee42272) C:\WINDOWS\system32\Drivers\NETFLTDI.SYS 13:34:32.0781 5916 NETFLTDI - ok 13:34:32.0859 5916 NETIMFLT01060044 (9dee136c4863d5065437d07262bb5c40) C:\WINDOWS\system32\DRIVERS\neti1644.sys 13:34:32.0875 5916 NETIMFLT01060044 - ok 13:34:32.0953 5916 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys 13:34:33.0218 5916 NIC1394 - ok 13:34:33.0437 5916 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys 13:34:33.0625 5916 Npfs - ok 13:34:33.0687 5916 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys 13:34:33.0890 5916 Ntfs - ok 13:34:34.0140 5916 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys 13:34:34.0328 5916 Null - ok 13:34:34.0500 5916 nv (74fcf1b1b8618a1f8a06e1b7055f37e1) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys 13:34:34.0859 5916 nv - ok 13:34:35.0109 5916 nvata (3ac5eedd35b7437d53960f3998bfa462) C:\WINDOWS\system32\DRIVERS\nvata.sys 13:34:35.0156 5916 nvata - ok 13:34:35.0187 5916 NVENETFD (22eedb34c4d7613a25b10c347c6c4c21) C:\WINDOWS\system32\DRIVERS\NVENETFD.sys 13:34:35.0250 5916 NVENETFD - ok 13:34:35.0312 5916 nvnetbus (5e3f6ad5cad0f12d3cccd06fd964087a) C:\WINDOWS\system32\DRIVERS\nvnetbus.sys 13:34:35.0343 5916 nvnetbus - ok 13:34:35.0609 5916 nvsmu (e0f76fab86fec98778047d0c7c39cbb9) C:\WINDOWS\system32\DRIVERS\nvsmu.sys 13:34:35.0671 5916 nvsmu - ok 13:34:35.0734 5916 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys 13:34:36.0046 5916 NwlnkFlt - ok 13:34:36.0250 5916 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys 13:34:36.0437 5916 NwlnkFwd - ok 13:34:36.0500 5916 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys 13:34:36.0671 5916 ohci1394 - ok 13:34:36.0734 5916 Parport (e3934ccc20a4d24f1924e13d36d2a5bd) C:\WINDOWS\system32\drivers\Parport.sys 13:34:36.0921 5916 Parport - ok 13:34:37.0171 5916 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys 13:34:37.0359 5916 PartMgr - ok 13:34:37.0421 5916 ParVdm (1eade28746a64c21e0a808bb12a63326) C:\WINDOWS\system32\drivers\ParVdm.sys 13:34:37.0593 5916 ParVdm - ok 13:34:37.0843 5916 pavboot (55d654258a9c509b671310c314bd30b4) C:\WINDOWS\system32\Drivers\pavboot.sys 13:34:37.0875 5916 pavboot - ok 13:34:37.0921 5916 PavProc (a110035fdc4b8f8f0cd5e71d031274e1) C:\WINDOWS\system32\DRIVERS\PavProc.sys 13:34:37.0968 5916 PavProc - ok 13:34:38.0015 5916 PavSRK.sys - ok 13:34:38.0031 5916 PavTPK.sys - ok 13:34:38.0062 5916 PCI (3b166f9f753c21aedaa9a6bd76b49655) C:\WINDOWS\system32\DRIVERS\pci.sys 13:34:38.0250 5916 PCI - ok 13:34:38.0437 5916 PCIDump - ok 13:34:38.0484 5916 PCIIde (b31edeba4da28283f6b8dc4756fb9585) C:\WINDOWS\system32\DRIVERS\pciide.sys 13:34:38.0671 5916 PCIIde - ok 13:34:38.0687 5916 Pcmcia (2137ffd65f8e609a3a5acd487c56cce0) C:\WINDOWS\system32\DRIVERS\pcmcia.sys 13:34:38.0875 5916 Pcmcia - ok 13:34:38.0906 5916 PDCOMP - ok 13:34:38.0937 5916 PDFRAME - ok 13:34:38.0953 5916 PDRELI - ok 13:34:38.0968 5916 PDRFRAME - ok 13:34:39.0000 5916 perc2 (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys 13:34:39.0171 5916 perc2 - ok 13:34:39.0187 5916 perc2hib (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys 13:34:39.0390 5916 perc2hib - ok 13:34:39.0640 5916 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys 13:34:39.0828 5916 PptpMiniport - ok 13:34:39.0875 5916 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys 13:34:40.0046 5916 PSched - ok 13:34:40.0093 5916 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys 13:34:40.0453 5916 Ptilink - ok 13:34:40.0656 5916 PxHelp20 (86724469cd077901706854974cd13c3e) C:\WINDOWS\system32\Drivers\PxHelp20.sys 13:34:40.0687 5916 PxHelp20 ( UnsignedFile.Multi.Generic ) - warning 13:34:40.0687 5916 PxHelp20 - detected UnsignedFile.Multi.Generic (1) 13:34:40.0718 5916 ql1080 (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys 13:34:40.0906 5916 ql1080 - ok 13:34:40.0937 5916 Ql10wnt (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys 13:34:41.0125 5916 Ql10wnt - ok 13:34:41.0140 5916 ql12160 (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys 13:34:41.0343 5916 ql12160 - ok 13:34:41.0546 5916 ql1240 (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys 13:34:41.0750 5916 ql1240 - ok 13:34:41.0765 5916 ql1280 (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys 13:34:41.0968 5916 ql1280 - ok 13:34:42.0015 5916 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys 13:34:42.0187 5916 RasAcd - ok 13:34:42.0437 5916 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 13:34:42.0625 5916 Rasl2tp - ok 13:34:42.0671 5916 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys 13:34:42.0843 5916 RasPppoe - ok 13:34:42.0906 5916 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys 13:34:43.0078 5916 Raspti - ok 13:34:43.0328 5916 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys 13:34:43.0515 5916 Rdbss - ok 13:34:43.0578 5916 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 13:34:43.0750 5916 RDPCDD - ok 13:34:43.0984 5916 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys 13:34:44.0187 5916 rdpdr - ok 13:34:44.0265 5916 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys 13:34:44.0328 5916 RDPWD - ok 13:34:44.0562 5916 redbook (4173bc66e485fd77a03c4819f60bd0da) C:\WINDOWS\system32\DRIVERS\redbook.sys 13:34:44.0734 5916 redbook - ok 13:34:44.0796 5916 rimmptsk (7a6648b61661b1421ffab762e391e33f) C:\WINDOWS\system32\DRIVERS\rimmptsk.sys 13:34:44.0843 5916 rimmptsk - ok 13:34:44.0859 5916 rimsptsk (8f7012d1b6a71ee9c23ce93dcdbf9f4b) C:\WINDOWS\system32\DRIVERS\rimsptsk.sys 13:34:44.0906 5916 rimsptsk - ok 13:34:45.0140 5916 rismxdp (3ac17802740c3a4764dc9750e92e6233) C:\WINDOWS\system32\DRIVERS\rixdptsk.sys 13:34:45.0234 5916 rismxdp - ok 13:34:45.0296 5916 rtl8139 (d507c1400284176573224903819ffda3) C:\WINDOWS\system32\DRIVERS\RTL8139.SYS 13:34:45.0421 5916 rtl8139 - ok 13:34:45.0656 5916 sdbus (8d04819a3ce51b9eb47e5689b44d43c4) C:\WINDOWS\system32\DRIVERS\sdbus.sys 13:34:45.0843 5916 sdbus - ok 13:34:45.0890 5916 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys 13:34:46.0109 5916 Secdrv - ok 13:34:46.0343 5916 Serial (92c21762653bb2ce51147eb8a9aa654f) C:\WINDOWS\system32\drivers\Serial.sys 13:34:46.0546 5916 Serial - ok 13:34:46.0625 5916 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys 13:34:46.0796 5916 Sfloppy - ok 13:34:46.0843 5916 ShldDrv (32d6f7632234f0354c79e915ca4613d4) C:\WINDOWS\system32\DRIVERS\ShlDrv51.sys 13:34:46.0875 5916 ShldDrv - ok 13:34:46.0953 5916 Simbad - ok 13:34:47.0015 5916 sisagp (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\system32\DRIVERS\sisagp.sys 13:34:47.0203 5916 sisagp - ok 13:34:47.0343 5916 Sparrow (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\system32\DRIVERS\sparrow.sys 13:34:47.0468 5916 Sparrow - ok 13:34:47.0531 5916 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys 13:34:47.0703 5916 splitter - ok 13:34:47.0828 5916 sr (64d2a7640e0767ecd3bcb38d3200e7ce) C:\WINDOWS\system32\DRIVERS\sr.sys 13:34:48.0015 5916 sr - ok 13:34:48.0171 5916 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys 13:34:48.0234 5916 Srv - ok 13:34:48.0406 5916 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys 13:34:48.0578 5916 swenum - ok 13:34:48.0718 5916 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys 13:34:48.0906 5916 swmidi - ok 13:34:49.0046 5916 symc810 (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\system32\DRIVERS\symc810.sys 13:34:49.0218 5916 symc810 - ok 13:34:49.0234 5916 symc8xx (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\system32\DRIVERS\symc8xx.sys 13:34:49.0437 5916 symc8xx - ok 13:34:49.0593 5916 sym_hi (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\system32\DRIVERS\sym_hi.sys 13:34:49.0796 5916 sym_hi - ok 13:34:49.0921 5916 sym_u3 (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\system32\DRIVERS\sym_u3.sys 13:34:50.0093 5916 sym_u3 - ok 13:34:50.0250 5916 SynTP (60cb9f7c95791fe56a6e86868f4467ba) C:\WINDOWS\system32\DRIVERS\SynTP.sys 13:34:50.0328 5916 SynTP - ok 13:34:50.0484 5916 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys 13:34:50.0671 5916 sysaudio - ok 13:34:50.0812 5916 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys 13:34:50.0937 5916 Tcpip - ok 13:34:51.0093 5916 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys 13:34:51.0281 5916 TDPIPE - ok 13:34:51.0390 5916 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys 13:34:51.0562 5916 TDTCP - ok 13:34:51.0718 5916 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys 13:34:51.0921 5916 TermDD - ok 13:34:52.0062 5916 TosIde (5bc2144ab4f6090f12e49e9648b5a702) C:\WINDOWS\system32\DRIVERS\toside.sys 13:34:52.0250 5916 TosIde - ok 13:34:52.0406 5916 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys 13:34:52.0593 5916 Udfs - ok 13:34:52.0703 5916 UIUSys - ok 13:34:52.0765 5916 ultra (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\system32\DRIVERS\ultra.sys 13:34:52.0875 5916 ultra - ok 13:34:53.0046 5916 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys 13:34:53.0250 5916 Update - ok 13:34:53.0359 5916 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys 13:34:53.0546 5916 usbehci - ok 13:34:53.0687 5916 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys 13:34:53.0859 5916 usbhub - ok 13:34:53.0890 5916 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys 13:34:54.0078 5916 usbohci - ok 13:34:54.0187 5916 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 13:34:54.0390 5916 USBSTOR - ok 13:34:54.0546 5916 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys 13:34:54.0718 5916 usbuhci - ok 13:34:54.0765 5916 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys 13:34:54.0937 5916 VgaSave - ok 13:34:55.0078 5916 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys 13:34:55.0250 5916 viaagp - ok 13:34:55.0406 5916 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys 13:34:55.0593 5916 ViaIde - ok 13:34:55.0703 5916 VolSnap (8ab662b3c4691e6ddf61c96bb5b7d103) C:\WINDOWS\system32\drivers\VolSnap.sys 13:34:55.0890 5916 VolSnap - ok 13:34:55.0953 5916 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys 13:34:56.0125 5916 Wanarp - ok 13:34:56.0265 5916 WDICA - ok 13:34:56.0312 5916 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys 13:34:56.0500 5916 wdmaud - ok 13:34:56.0687 5916 winachsf (e17d31cd52dcb7745ac5330eea062d0b) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys 13:34:56.0781 5916 winachsf - ok 13:34:56.0984 5916 WmiAcpi (c42584fd66ce9e17403aebca199f7bdb) C:\WINDOWS\system32\DRIVERS\wmiacpi.sys 13:34:57.0156 5916 WmiAcpi - ok 13:34:57.0296 5916 WNMFLT (0411d0433e8c48ad24b2ef32d7c97ae0) C:\WINDOWS\system32\Drivers\WNMFLT.SYS 13:34:57.0328 5916 WNMFLT - ok 13:34:57.0531 5916 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys 13:34:57.0593 5916 WudfPf - ok 13:34:57.0703 5916 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys 13:34:57.0750 5916 WudfRd - ok 13:34:57.0796 5916 MBR (0x1B8) (89685f688d61d591fe668a640b2d74a0) \Device\Harddisk0\DR0 13:34:57.0859 5916 \Device\Harddisk0\DR0 - ok 13:34:57.0859 5916 Boot (0x1200) (9757463b6db08f096eccb37932e90b1f) \Device\Harddisk0\DR0\Partition0 13:34:57.0859 5916 \Device\Harddisk0\DR0\Partition0 - ok 13:34:57.0875 5916 Boot (0x1200) (bd4d850f25b2304486bf343b7d5e504d) \Device\Harddisk0\DR0\Partition1 13:34:57.0875 5916 \Device\Harddisk0\DR0\Partition1 - ok 13:34:57.0875 5916 ============================================================ 13:34:57.0875 5916 Scan finished 13:34:57.0875 5916 ============================================================ 13:34:58.0015 5900 Detected object count: 3 13:34:58.0015 5900 Actual detected object count: 3 13:35:18.0421 5900 C:\WINDOWS\system32\DRIVERS\iaStor.sys - copied to quarantine 13:35:18.0421 5900 iaStor ( UnsignedFile.Multi.Generic ) - User select action: Quarantine 13:35:18.0703 5900 C:\WINDOWS\system32\DRIVERS\mhndrv.sys - copied to quarantine 13:35:18.0703 5900 MHNDRV ( UnsignedFile.Multi.Generic ) - User select action: Quarantine 13:35:18.0765 5900 C:\WINDOWS\system32\Drivers\PxHelp20.sys - copied to quarantine 13:35:18.0765 5900 PxHelp20 ( UnsignedFile.Multi.Generic ) - User select action: Quarantine En Microsoft Windows bleef maar met updates komen. Kwam erachter dat sommige niet waren geinstalleerd, er stond geen reden bij, en dan kwam het weer opnieuw in de automatische update. Nu heb ik nog geen geel schildje gezien van de auto updates. GlobalPanda12 gaf nog met de scan 2 besmettingen aan van spyware, die zijn ook door GlobalPanda12 direct gedelete! Groetjes Holly
Link naar reactie
  • 0
Dat Iastor.sys is van Intel. mhndrv.sys is een backdoor PxHelp20.sys is een Windows bestand. Ik vraag mij af hoe jij aan die backdoor bent gekomen. Ga jij nu eerst controleren of de Windows Firewall nog aktief is. Daarvoor ga je naar Start\Uitvoeren en de opdracht luidt: [b:04428d54b3]services.msc[/b:04428d54b3]. Klik op de knop OK. In het venster Services scroll je naar [b:04428d54b3][color=#0000FF:04428d54b3]Windows Firewall[/color:04428d54b3][/b:04428d54b3]. Dubbelklikk op die vermelding, bij "Opstarttype" zet je de instelling op "Gedeaktiveerd". Klik nu eerst op de knop [b:04428d54b3]Toepassen[/b:04428d54b3]; vervolgens klik je op de knop [b:04428d54b3]Stoppen[/b:04428d54b3], wacht even en klik uiteindelijk op [b:04428d54b3]OK[/b:04428d54b3]. [color=#0000FF:04428d54b3][b:04428d54b3]Web Client[/b:04428d54b3][/color:04428d54b3] Doe hetzelfde met [color=#0000FF:04428d54b3][b:04428d54b3]Web Client[/b:04428d54b3][/color:04428d54b3] als hetgeen je met de [b:04428d54b3][color=#0000FF:04428d54b3]Windows Firewall[/color:04428d54b3][/b:04428d54b3] gedaan hebt. [color=#FF0000:04428d54b3][b:04428d54b3]Dit is een pure beveiligingsmaatregel.[/b:04428d54b3][/color:04428d54b3]
Link naar reactie

Om een reactie te plaatsen, moet je eerst inloggen

Gast
Antwoord op deze vraag...

×   Geplakt als verrijkte tekst.   Herstel opmaak

  Er zijn maximaal 75 emoji toegestaan.

×   Je link werd automatisch ingevoegd.   Tonen als normale link

×   Je vorige inhoud werd hersteld.   Leeg de tekstverwerker

×   Je kunt afbeeldingen niet direct plakken. Upload of voeg afbeeldingen vanaf een URL in


×
×
  • Nieuwe aanmaken...