Archief - 2 trojans

Chalk · 30 nov 2008

Ik weet dat er 2 trojans op de pc zitten.
Ik heb al zitten scannen (avira, advanced windows cleaner, combofix, S&D) en ik weet waar en welke file het is.

Van welke ik al zeker ben:
O2 - BHO: (no name) - {6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - (no file)

En ik verdenk die daarboven ook. Deze dat hier staat, heb ik al eens aangekruist en 'fix checked' gedaan, maar deze komt toch gewoon terug.

Ook krijg ik nu net nog de melding van avira:
a virus or unwanted program was found!
C:\WINDOMS\temp\win38.tmp
Dit is al een paar maal gekomen.. ik doe dan 'move to quarantine' of 'delete' maar geen van beide lost het echte probleem precies op...

Wat doen deze virussen?
Wel, ik zie mijn startbalk niet meer, of niets van mijn bureaublad.
Momenteel zie ik het wel, maar dat is omdat ik een paar dingen heb kunnen verwijderen met S&D. Daarvoor zag ik niets meer en moest ik via alt-ctrl-del alles opstarten.

Ook merk ik dat deze virussen mijn pc trager doen opstarten.
Plz help

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:35, on 2008-11-30
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Telemeter 3.0\telemeter3.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\SysAidServer\firebird\bin\fbguard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\UPHClean\uphclean.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\SysAidServer\firebird\bin\fbserver.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\cmd.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\GUARDGUI.EXE
C:\WINDOWS\system32\cmd.exe
C:\ComboFix\swreg.cfexe
C:\WINDOWS\system32\findstr.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: IE7Pro BHO - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\iepro.dll
O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {259F616C-A300-44F5-B04A-ED001A26C85C} - (no file)
O2 - BHO: (no name) - {6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [Telemeter 3.0] "C:\Program Files\Telemeter 3.0\telemeter3.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\xfire.exe
O8 - Extra context menu item: &ieSpell Options - res://C:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM
O8 - Extra context menu item: Check &Spelling - res://C:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Lookup on Merriam Webster - file://C:\Program Files\ieSpell\Merriam Webster.HTM
O8 - Extra context menu item: Lookup on Wikipedia - file://C:\Program Files\ieSpell\wikipedia.HTM
O9 - Extra button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll
O9 - Extra 'Tools' menuitem: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O20 - Winlogon Notify: qoMfeFWn - C:\WINDOWS\SYSTEM32\qoMfeFWn.dll
O20 - Winlogon Notify: winjvd32 - C:\WINDOWS\SYSTEM32\winjvd32.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - The Firebird Project - C:\Program Files\SysAidServer\firebird\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - The Firebird Project - C:\Program Files\SysAidServer\firebird\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: MSSQL$SONY_MEDIAMGR - Unknown owner - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SQLAgent$SONY_MEDIAMGR - Unknown owner - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE (file missing)
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe

--
End of file - 9110 bytes

Juisterr · 1 dec 2008

Download Combofix naar je Bureaublad.
OPMERKING: indien je, tijdens of na het downloaden van Combofix of tijdens het gebruik van Combofix een melding krijgt van je Antivirus- of een andere realtime scanner, schakel dan deze scanner uit en download Combofix opnieuw.
Sommige scanners zien bepaalde componenten die Combofix gebruikt als verdacht en gaan deze blokkeren of verwijderen!

Dubbelklik op Combofix.exe om het te starten.
Indien je Combofix al eerder hebt gebruikt, kan je een waarschuwing krijgen dat een update beschikbaar is. Sta toe dat ComboFix wordt geupdate.
Klik op OK in het "NirCmd" venstertje.
Indien de Recovery Console niet geïnstalleerd is, wordt je gevraagd om dit alsnog te doen door op JA te klikken in het "Query - Recovery Console" venster.
Klik op OK en Ja om automatisch de Recovery Console te laten installeren.
Klik na afloop terug op Ja om het scannen op malware te starten.
Tijdens het runnen van de fix, NIET in het venster klikken, want dit zal je pc doen vasthangen.
Wanneer de fix voltooid is en na herstart, zal de log Combofix.txt openen.

Post dit logje in je volgende antwoord.

Chalk · 1 dec 2008

ComboFix 08-11-30.02 - user 2008-12-01 17:09:27.22 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1043.18.487 [GMT 1:00]
Gestart vanuit: c:\documents and settings\user\Bureaublad\ComboFix.exe
* Nieuw herstelpunt werd aangemaakt
.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\msvrc20.dll
c:\windows\system32\GPopoUtv.ini
c:\windows\system32\qoMfeFWn.dll
c:\windows\system32\winjvd32.dll
c:\windows\Tasks\xrlhljit.job

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_BOONTY_GAMES
-------\Service_Boonty Games

(((((((((((((((((((( Bestanden Gemaakt van 2008-11-01 to 2008-12-01 ))))))))))))))))))))))))))))))
.

2008-11-23 20:42 . 2008-11-23 20:42 <DIR> d-------- c:\documents and settings\user\Application Data\fltk.org
2008-11-22 16:11 . 2008-11-22 16:11 <DIR> d-------- c:\program files\ReflexiveArcade
2008-11-22 16:11 . 2008-11-22 18:13 <DIR> d-------- c:\program files\Peggle Deluxe
2008-11-20 21:44 . 2008-11-20 21:44 42,320 --a------ c:\windows\system32\xfcodec.dll
2008-11-11 21:22 . 2008-11-11 21:22 <DIR> d-------- c:\program files\Avira
2008-11-11 21:22 . 2008-11-11 21:22 <DIR> d-------- c:\documents and settings\All Users\Application Data\Avira
2008-11-11 21:16 . 2008-11-30 21:19 <DIR> dr-h----- c:\documents and settings\user\Onlangs geopend
2008-11-11 17:04 . 2008-04-14 00:07 2,962,432 --------- c:\windows\system32\SETF38.tmp
2008-11-11 17:04 . 2008-04-14 22:32 354,304 --------- c:\windows\system32\SETF2A.tmp
2008-11-11 17:04 . 2008-04-14 22:31 177,152 --------- c:\windows\system32\SETF61.tmp
2008-11-11 17:04 . 2008-04-14 22:32 80,896 --------- c:\windows\system32\SETF25.tmp
2008-11-11 17:04 . 2008-04-14 22:32 6,656 --------- c:\windows\system32\SETF22.tmp
2008-11-11 17:01 . 2008-04-14 22:33 1,037,312 --------- c:\windows\SET5D1.tmp
2008-11-11 17:01 . 2008-04-14 22:32 504,832 --------- c:\windows\system32\SET719.tmp
2008-11-11 17:01 . 2008-04-14 22:32 95,744 --------- c:\windows\system32\SET71F.tmp
2008-11-11 16:59 . 2008-04-14 22:32 8,508,416 --------- c:\windows\system32\SET27B.tmp
2008-11-11 16:53 . 2006-12-29 00:31 19,569 --a------ c:\windows\006850_.tmp
2008-11-11 16:49 . 2008-09-04 17:46 1,106,944 --a--c--- c:\windows\system32\dllcache\msxml3.dll
2008-11-11 16:49 . 2004-08-03 23:00 71,040 --------- c:\windows\system32\drivers\_004108_.tmp.dll
2008-11-11 12:01 . 2008-04-14 21:32 580,096 --a------ c:\windows\system32\user32.dll
2008-11-11 07:08 . 2008-11-11 07:08 <DIR> d--hs---- C:\$RECYCLE.BIN
2008-11-10 21:03 . 2008-11-10 21:03 <DIR> d-------- c:\documents and settings\All Users\Application Data\Avg8
2008-11-08 20:03 . 2008-11-08 20:03 <DIR> dr-h----- c:\documents and settings\user\Application Data\SecuROM
2008-11-08 11:25 . 2008-11-08 11:25 <DIR> d-------- c:\windows\Logs
2008-11-08 11:25 . 2008-11-08 11:25 22,328 --a------ c:\documents and settings\user\Application Data\PnkBstrK.sys
2008-11-08 11:24 . 2008-11-08 11:24 2,250,024 --a------ c:\windows\system32\pbsvc.exe
2008-11-08 11:08 . 2008-11-08 11:36 <DIR> d-------- c:\program files\DAEMON Tools Toolbar
2008-11-08 11:08 . 2008-11-08 11:08 <DIR> d-------- c:\program files\DAEMON Tools Lite
2008-11-08 11:02 . 2008-11-08 11:02 <DIR> d-------- c:\documents and settings\user\Application Data\DAEMON Tools

.
((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-12-01 16:13 --------- d-----w c:\documents and settings\user\Application Data\Xfire
2008-11-30 19:51 --------- d-----w c:\program files\Windows Live Safety Center
2008-11-30 13:04 --------- d-----r c:\program files\Sam
2008-11-30 13:00 --------- d-----w c:\program files\mIRC
2008-11-30 12:58 201,440 ----a-w c:\windows\system32\PnkBstrB.exe
2008-11-30 12:58 138,512 -c--a-w c:\windows\system32\drivers\PnkBstrK.sys
2008-11-26 06:09 --------- d-----w c:\program files\Xfire
2008-11-25 16:59 --------- d-----w c:\program files\Mozilla Thunderbird
2008-11-20 17:18 --------- d-----r c:\program files\prog. pictogrammen
2008-11-16 13:15 --------- d-----w c:\program files\Common Files\Adobe
2008-11-08 10:27 107,888 ----a-w c:\windows\system32\CmdLineExt.dll
2008-11-08 10:24 66,872 ----a-w c:\windows\system32\PnkBstrA.exe
2008-11-08 10:15 --------- d--h--w c:\program files\InstallShield Installation Information
2008-11-08 10:03 717,296 ----a-w c:\windows\system32\drivers\sptd.sys
2008-11-07 18:10 --------- d-----w c:\documents and settings\user\Application Data\teamspeak2
2008-11-07 16:38 --------- d-----r c:\program files\ward
2008-10-31 17:10 --------- d-----w c:\program files\Novation
2008-10-28 13:53 --------- d-----w c:\program files\AllToAVI
2008-10-26 18:48 --------- d-----w c:\program files\ASIO4ALL v2
2008-10-24 11:10 453,632 ----a-w c:\windows\system32\drivers\mrxsmb.sys
2008-10-24 11:10 453,632 ----a-w c:\windows\system32\dllcache\mrxsmb.sys
2008-10-23 15:18 --------- d-----w c:\program files\Wolfenstein - Enemy Territory
2008-10-19 17:45 --------- d-----w c:\program files\NCH Swift Sound
2008-10-16 13:13 202,776 ----a-w c:\windows\system32\wuweb.dll
2008-10-16 13:13 1,809,944 ----a-w c:\windows\system32\wuaueng.dll
2008-10-16 13:12 561,688 ----a-w c:\windows\system32\wuapi.dll
2008-10-16 13:12 323,608 ----a-w c:\windows\system32\wucltui.dll
2008-10-16 13:09 92,696 ----a-w c:\windows\system32\cdm.dll
2008-10-16 13:09 51,224 ----a-w c:\windows\system32\wuauclt.exe
2008-10-16 13:09 43,544 ----a-w c:\windows\system32\wups2.dll
2008-10-16 13:08 34,328 -c--a-w c:\windows\system32\wups.dll
2008-10-15 17:01 332,800 ----a-w c:\windows\system32\SET1ABE.tmp
2008-10-15 17:01 332,800 ----a-w c:\windows\system32\SET1839.tmp
2008-10-15 17:01 332,800 ----a-w c:\windows\system32\dllcache\netapi32.dll
2008-10-08 18:01 --------- d-----w c:\program files\Common Files\Nero
2008-10-08 17:59 --------- d-----w c:\documents and settings\All Users\Application Data\Nero
2008-10-05 18:21 --------- d-----w c:\documents and settings\All Users\Application Data\Skype
2008-10-05 09:11 --------- d-----w c:\documents and settings\NetworkService\Application Data\Xfire
2008-09-30 15:43 1,286,152 ----a-w c:\windows\system32\msxml4.dll
2008-09-15 15:42 1,846,144 ----a-w c:\windows\system32\win32k.sys
2008-09-15 15:42 1,846,144 ----a-w c:\windows\system32\dllcache\win32k.sys
2008-09-04 16:46 1,106,944 ----a-w c:\windows\system32\msxml3.dll
2008-04-05 08:31 19 -c--a-w c:\documents and settings\user\Application Data\mdbu.bin
2008-03-03 18:56 6,656 -csha-w c:\program files\Thumbs.db
2007-01-08 16:01 87,608 -c--a-w c:\documents and settings\user\Application Data\ezpinst.exe
2007-01-08 16:01 47,360 -c--a-w c:\documents and settings\user\Application Data\pcouffin.sys
2006-11-05 13:16 1,982 -c--a-w c:\program files\PeL.zir
2006-11-05 13:15 1,982 -c--a-w c:\program files\PeL.zir.bak
2006-05-14 12:02 88 -csh--r c:\windows\system32\0BAE5EC053.sys
2006-05-02 16:37 56 -csh--r c:\windows\system32\53C05EAE0B.sys
2006-10-30 10:05 6,060 -csha-w c:\windows\system32\KGyGaAvL.sys
.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2007-08-16 5728112]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2007-12-13 1688872]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-04 15360]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-08-08 490952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Telemeter 3.0"="c:\program files\Telemeter 3.0\telemeter3.exe" [2007-04-15 1441792]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2006-10-25 282624]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2008-05-14 185896]
"NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2007-12-03 2213160]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
"NeroFilterCheck"="c:\program files\Common Files\Nero\Lib\NeroCheck.exe" [2007-03-01 153136]
"avgnt"="c:\program files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-12-05 8523776]
"nwiz"="nwiz.exe" [2007-12-05 c:\windows\system32\nwiz.exe]

c:\documents and settings\user\Menu Start\Programma's\Opstarten\
Xfire.lnk - c:\program files\Xfire\xfire.exe [2008-11-20 2986320]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.xvid"= xvid.dll
"VIDC.XFR1"= xfcodec.dll

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^Adobe Reader Snelle start.lnk]
path=c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\Adobe Reader Snelle start.lnk
backup=c:\windows\pss\Adobe Reader Snelle start.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^user^Menu Start^Programma's^Opstarten^BHODemon 2.0.lnk]
path=c:\documents and settings\user\Menu Start\Programma's\Opstarten\BHODemon 2.0.lnk
backup=c:\windows\pss\BHODemon 2.0.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^user^Menu Start^Programma's^Opstarten^Registration .LNK]
path=c:\documents and settings\user\Menu Start\Programma's\Opstarten\Registration .LNK
backup=c:\windows\pss\Registration .LNKStartup

[HKLM\~\startupfolder\C:^Documents and Settings^user^Menu Start^Programma's^Opstarten^Registration-Studio 8.lnk]
path=c:\documents and settings\user\Menu Start\Programma's\Opstarten\Registration-Studio 8.lnk
backup=c:\windows\pss\Registration-Studio 8.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^user^Menu Start^Programma's^Opstarten^Yahoo! Widget Engine.lnk]
path=c:\documents and settings\user\Menu Start\Programma's\Opstarten\Yahoo! Widget Engine.lnk
backup=c:\windows\pss\Yahoo! Widget Engine.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2006-10-25 18:58 282624 c:\program files\QuickTime\qttask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
--a--c--- 2008-06-19 14:32 1271032 c:\program files\Steam\Steam.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ulead AutoDetector]
-----c--- 2003-11-19 13:03 45056 c:\program files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\monitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"Boonty Games"=3 (0x3)
"Bonjour Service"=2 (0x2)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Xfire\\xfire.exe"=

R2 {95808DC4-FA4A-4c74-92FE-5B863F82066B};{95808DC4-FA4A-4c74-92FE-5B863F82066B};\??\c:\program files\CyberLink\PowerDVD\000.fcl [2008-03-28 09:35:58 13560]
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance;c:\program files\SysAidServer\firebird\bin\fbguard.exe -s []
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance;c:\program files\SysAidServer\firebird\bin\fbserver.exe -s []
S3 ASPI;Advanced SCSI Programming Interface Driver;\??\c:\windows\System32\DRIVERS\ASPI32.sys [2006-08-26 16512]
S3 DCamUSBNovatek;USB Video Camera;c:\windows\system32\Drivers\nvtcam.sys []
S3 L6TPortB;Service - Line 6 TonePort UX2;c:\windows\system32\Drivers\L6TPortB.sys [2008-09-01 521472]
S3 MEMSWEEP2;MEMSWEEP2;\??\c:\windows\system32\57.tmp []
S3 RDID1003;EDIROL UM-2;c:\windows\system32\Drivers\rdwm1003.sys [2006-12-11 66530]
S3 uafilter;uafilter;c:\windows\system32\DRIVERS\uafilter.sys [2008-06-05 9920]
S4 hpt3xx;hpt3xx; []

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1d239932-4e42-11da-b44a-806d6172696f}]
\Shell\AutoRun\command - D:\AutoRun.exe
.
- - - - ORPHANS VERWIJDERD - - - -

MSConfigStartUp-NVMixerTray - c:\program files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
MSConfigStartUp-Ulead Photo Express Calendar Checker - c:\program files\Ulead Systems\Ulead Photo Express 5 SE\calcheck.exe

.
------- Bijkomende Scan -------
.
FireFox -: Profile - c:\documents and settings\user\Application Data\Mozilla\Firefox\Profiles\hv17vi1f.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.google.be/
FF -: plugin - c:\program files\DivX\DivX Content Uploader\npUpload.dll
FF -: plugin - c:\program files\Mozilla Firefox\plugins\NpFv415.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-12-01 17:13:04
Windows 5.1.2600 Service Pack 2 NTFS

scannen van verborgen processen ...

scannen van verborgen autostart items ...

scannen van verborgen bestanden ...

Scan succesvol afgerond
verborgen bestanden: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet006\Services\MEMSWEEP2]
"ImagePath"="\??\c:\windows\system32\57.tmp"

[HKEY_LOCAL_MACHINE\System\ControlSet006\Services\{95808DC4-FA4A-4c74-92FE-5B863F82066B}]
"ImagePath"="\??\c:\program files\CyberLink\PowerDVD\000.fcl"
.
------------------------ Andere Aktieve Processen ------------------------
.
c:\program files\Lavasoft\Ad-Aware\aawservice.exe
c:\program files\Avira\AntiVir PersonalEdition Classic\sched.exe
c:\windows\system32\rundll32.exe
c:\program files\Avira\AntiVir PersonalEdition Classic\avguard.exe
c:\windows\system32\CTSVCCDA.EXE
c:\program files\SysAidServer\firebird\bin\fbguard.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files\Nero\Nero8\Nero BackItUp\NBService.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\PnkBstrA.exe
c:\program files\CyberLink\Shared Files\RichVideo.exe
c:\program files\UPHClean\uphclean.exe
c:\program files\Common Files\Nero\Lib\NMIndexingService.exe
c:\program files\SysAidServer\firebird\bin\fbserver.exe
.
**************************************************************************
.
Voltooingstijd: 2008-12-01 17:16:00 - machine werd herstart [user]
ComboFix-quarantined-files.txt 2008-12-01 16:15:48

Pre-Run: 5,116,424,192 bytes beschikbaar
Post-Run: 4,974,596,096 bytes beschikbaar

WindowsXP-KB310994-SP2-Pro-BootDisk-NLD.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=AllwaysOff

225 --- E O F --- 2008-11-30 17:00:32

Juisterr · 1 dec 2008

Mag ik een nieuw HJT logje aub.

Chalk · 1 dec 2008

HJT:

Code:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:53:14, on 1/12/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Telemeter 3.0\telemeter3.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\SysAidServer\firebird\bin\fbguard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\UPHClean\uphclean.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\SysAidServer\firebird\bin\fbserver.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Last.fm\LastFM.exe
C:\Program Files\BitLord\BitLord.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: IE7Pro BHO - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\iepro.dll
O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {259F616C-A300-44F5-B04A-ED001A26C85C} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [Telemeter 3.0] "C:\Program Files\Telemeter 3.0\telemeter3.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O8 - Extra context menu item: &ieSpell Options - res://C:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM
O8 - Extra context menu item: Check &Spelling - res://C:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Lookup on Merriam Webster - file://C:\Program Files\ieSpell\Merriam Webster.HTM
O8 - Extra context menu item: Lookup on Wikipedia - file://C:\Program Files\ieSpell\wikipedia.HTM
O9 - Extra button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll
O9 - Extra 'Tools' menuitem: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - The Firebird Project - C:\Program Files\SysAidServer\firebird\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - The Firebird Project - C:\Program Files\SysAidServer\firebird\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: MSSQL$SONY_MEDIAMGR - Unknown owner - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SQLAgent$SONY_MEDIAMGR - Unknown owner - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE (file missing)
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe

--
End of file - 8933 bytes

Ook heb ik nog het probleem dat mijn windows updates niet meer updaten. En dat sinds een paar weken.
Deze blijft maar komen op mijn bureaublad, en telkens weer opnieuw bij het afsluiten van de computer.
Echter geeft hij steeds weer een fout in het instaleren van een van de files.
Ook heb ik het al eens via 'de' site geprobeerd, maar dit werkte ook niet...
Dit zou ook nog tof zijn als u wist waar dit probleem mogelijk verscholen zit.
"volgende updates zijn niet geïnstalleerd"
KB946648: Beveiligingsupdate voor Windows XP

Alvast bedankt, je doet goed werk!

Juisterr · 2 dec 2008

zie geen schokkende items meer, problemen voorbij ?

Chalk · 2 dec 2008

Ik weet niet zeker of de problemen voorbij zijn, ik zie wel al mijn bureaublad en het schokt niet meer etc., maar toch!
Ik heb net gescand met Ad-Aware 2008
En ik krijg toch nog 2 critical errors, die ik NIET verwijdert krijg

Ad-aware wil ze niet verwijderen:
Print screentje: http://users.telenet.be/coRCup/pc/toch nog malware.JPG
Zoals je ziet is dit nog dezelfde clsid 9d794.... als diegene waarmee ik in het begin problemen had.

Ook wil plots, het werkte voordien!, Advanced windows care V2 pro niet meer opstarten.
Het laadt, maar voor het opgestart is valt het reeds uit

"Ook heb ik nog het probleem dat mijn windows updates niet meer updaten. En dat sinds een paar weken.
Deze blijft maar komen op mijn bureaublad, en telkens weer opnieuw bij het afsluiten van de computer.
Echter geeft hij steeds weer een fout in het instaleren van een van de files.
Ook heb ik het al eens via 'de' site geprobeerd, maar dit werkte ook niet...
Dit zou ook nog tof zijn als u wist waar dit probleem mogelijk verscholen zit.
"volgende updates zijn niet geïnstalleerd"
KB946648: Beveiligingsupdate voor Windows XP
"

Misschien dat er alweer iets bijgekomen is dus heb ik maar direct een HJT logje gemaakt:

Code:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:32:01, on 2/12/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Telemeter 3.0\telemeter3.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\SysAidServer\firebird\bin\fbguard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\UPHClean\uphclean.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\SysAidServer\firebird\bin\fbserver.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\BitLord\BitLord.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Last.fm\LastFM.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\FileZilla\FileZilla.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: IE7Pro BHO - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\iepro.dll
O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {259F616C-A300-44F5-B04A-ED001A26C85C} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [Telemeter 3.0] "C:\Program Files\Telemeter 3.0\telemeter3.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O8 - Extra context menu item: &ieSpell Options - res://C:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM
O8 - Extra context menu item: Check &Spelling - res://C:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Lookup on Merriam Webster - file://C:\Program Files\ieSpell\Merriam Webster.HTM
O8 - Extra context menu item: Lookup on Wikipedia - file://C:\Program Files\ieSpell\wikipedia.HTM
O9 - Extra button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll
O9 - Extra 'Tools' menuitem: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - The Firebird Project - C:\Program Files\SysAidServer\firebird\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - The Firebird Project - C:\Program Files\SysAidServer\firebird\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: MSSQL$SONY_MEDIAMGR - Unknown owner - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SQLAgent$SONY_MEDIAMGR - Unknown owner - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE (file missing)
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe

--
End of file - 8923 bytes

Juisterr · 2 dec 2008

Ga naar Start > Uitvoeren en typ of kopieer de vetgedrukte tekst sfc /scannow in het opdrachtschermpje (Let op de spatie)

Je computer wordt nu gescant op fouten.

Als hij vraagt naar de CD van XP Professional en je hebt XP Home; gewoon de CD erin stoppen.
vertel even hoe het gegaan is.

Chalk · 2 dec 2008

Juisterr zei:
Ga naar Start > Uitvoeren en typ of kopieer de vetgedrukte tekst sfc /scannow in het opdrachtschermpje (Let op de spatie)

Je computer wordt nu gescant op fouten.

Als hij vraagt naar de CD van XP Professional en je hebt XP Home; gewoon de CD erin stoppen.
vertel even hoe het gegaan is.

Ik heb deze CD niet, gaat dit op een andere manier?
Of ik moet een paar dagen wachten dat ik de CD kan gaan halen bij mijn pc leverancier

(ja men windows is legaal)

Juisterr · 3 dec 2008

Nou nee maar je kan dit proberen.

Ik geef even een paar dingen.

Download Dial-a-fix-2006
en pak beide bestanden in hun eigen map uit naar je Bureaublad.

In de map Dial-a-fix-v0.60.0.24, dubbelklik op Dial-a-fix.exe
In het venster dat opengaat, klik onderaan op het icoontje met het dubbele groene vinkje (check all).
Klik daarna op GO en laat de tool alle instellingen terugzetten.
Sluit dit venster na afloop door onderaan op Close te klikken.

Hoe is het met je problemen?

Probeer eerst eens deze IEfix. Downloaden en dubbelklikken om uit te voeren. Klik bij de vraag over de internetprotocols op nee.

2. Download IEFix2 naar je bureaublad.
Maak een nieuwe map op je bureaublad (bv IE-Fix)
Pak de bestanden uit naar die map

Open de map waarin je de bestanden hebt uitgepakt.
Dubbelklik op IEFix.exe

Er wordt soms gevraagd om de XP installatie disk

Klik in eerste instantie op cancel
IEFix zal de dll's opnieuw registreren

Chalk · 3 dec 2008

> Dial-a-fix scan geeft heel wat errors

Print screentje genomen van deze allemaal en onder elkaar geplakt in paint.
Link: http://users.telenet.be/coRCup/pc/dial a fix scan.JPG

> Je bovenste link van IEfix werkt niet dus heb ik deze ook niet kunnen uitvoeren

> Je 2e link werkt wel, en heb ik gedaan, maar als ik het opstart (dubbelklik) dan komt er meteen een kadertje met: "Internet Explorer 7 is currently not supported"
En ik kan enkel 'ok' klikken en dan sluit het zichzelf af.

Ik gebruik Firefox altijd, maar heb wel IE op mijn pc staan. Ook dacht ik dat dit de laatste versie was, maar hier ben ik niet 100% zeker van.

> Ik zie mijn bureaublad, de snelkoppelingen en de startbalk. Ook blijven mijn mappen nu terug open (ze gingen weg als mijn scherm flashte)
Het is dus oppervlakkig opgelost denk ik?
Maar als je kijkt hoeveel errors ik nog krijg met het draaien van deze programma's denk ik dat er toch nog iets fout zit..

Groeten

Juisterr · 4 dec 2008

Laat de dail a fix nog eens runnen.

Chalk · 4 dec 2008

Nog steeds van deze errors

Nieuwe print screens

Juisterr · 4 dec 2008

Download en installeer CCleaner
Kies de basic versie om geen (ongewenste) toolbars mee te installeren.
.

Start Ccleaner.
Ccleaner biedt je de mogelijkheid om in te stellen wat er opgeschoond moet worden.
Selecteer nu alleen de volgende items:
Internet Explorer:
- Tijdelijke Internet bestanden
Systeem:
- Prullenbak leegmaken
- Tijdelijke bestanden
klik nu in Ccleaner op opschonen (rechts onderaan).

Chalk · 4 dec 2008

Hierna nog eens dial a fix gedaan, maar de errors kwamen nog steeds

Juisterr · 5 dec 2008

Toch maar die scannow proberen dan maar.

Chalk · 18 dec 2008

Ok, eindelijk de sfc /scannow gedaan

>Hierna heb ik mijn 'Automatische updates' van windows nog eens geprobeerd, maar hij gaf nog steeds een melding dat niet alles lukte.
>Daarna heb ik dial-a-fix laten gaan, maar deze gaf nog steeds dezelfde errors.
Ook dat er enkele .dll files niet toegankelijk waren (of beschadigd waren). Toch diende die sfc /scannow hiervoor, om deze dll files te fixen, dacht ik?

Alvast bedankt

DIAL-A-Fix

Code:

Notes about this log:
1) "->" denotes an external command being executed, and "-> (number)" indicates
     the return code from the previous command
2) Not all external command return codes are accurate, or useful
3) Sometimes commands return 0 (no error) even when they fail or crash
4) If an error occurs while registering an object, please send an email to:
     [email protected] and include a copy of this log

DAF version: v0.60.0.24

--- System info ---
OS: Microsoft Windows XP Service Pack 2
IE version: 7.0.5730.13
MPC: 55679-640
CPU: AMD Athlon(tm) 64 Processor 3000+ (~1820MHz)
CPU: CPU is 64-bit or has 64-bit extensions
BIOS: 30/11/2004
Memory (approx): 1023MB
Uptime: 1 hour(s) 
Current directory: C:\Program Files\Sam\Dial-a-fix-v0.60.0.24
---

18/12/2008 10:19:22 -- Dial-a-fix : [v0.60.0.24] -- started
10:19:22 | Policy scan started
10:19:22 | Policy scan ended - no restrictive policies were found
--- Emptying temp folders ---
10:19:25 | Deleting C:\Documents and Settings\user\Local Settings\temp...
10:19:25 | C:\Documents and Settings\user\Local Settings\temp could not be completely emptied, please reboot and try again
10:19:25 | Deleting C:\WINDOWS\temp...
10:19:25 | C:\WINDOWS\temp has been re-created
10:19:25 | Deleting C:\DOCUME~1\user\LOCALS~1\Temp...
10:19:26 | Re-created directory C:\DOCUME~1\user\LOCALS~1\Temp
--- MSI ---
10:21:01 | Registered: C:\WINDOWS\system32\msi.dll
--- Windows Update ---
--- Registration: Windows Update/Automatic Update DLLs ---
10:21:09 | Unregistered: C:\WINDOWS\system32\msxml.dll
10:21:09 | Registered: C:\WINDOWS\system32\msxml.dll
10:21:09 | Unregistered: C:\WINDOWS\system32\msxml2.dll
10:21:10 | Registered: C:\WINDOWS\system32\msxml2.dll
10:21:17 | Error during unregistration of C:\WINDOWS\system32\msxml3.dll - version: .  The error returned is: Niet nader omschreven fout
(-2147467259)
10:21:19 | Error during registration of C:\WINDOWS\system32\msxml3.dll - version: . The error returned is: Toegang geweigerd.
(-2147024891)
10:21:19 | Unregistered: C:\WINDOWS\system32\msxml4.dll
10:21:20 | Error during registration of C:\WINDOWS\system32\msxml4.dll - version: . The error returned is: Toegang geweigerd.
(-2147024891)
10:21:20 | Unregistered: C:\WINDOWS\system32\qmgr.dll
10:21:20 | Registered: C:\WINDOWS\system32\qmgr.dll
10:21:20 | Unregistered: C:\WINDOWS\system32\qmgrprxy.dll
10:21:20 | Registered: C:\WINDOWS\system32\qmgrprxy.dll
10:21:21 | Unregistered: C:\WINDOWS\system32\muweb.dll
10:21:21 | Registered: C:\WINDOWS\system32\muweb.dll
10:21:21 | Unregistered: C:\WINDOWS\system32\winhttp.dll
10:21:21 | Registered: C:\WINDOWS\system32\winhttp.dll
10:21:21 | Error during registration of C:\WINDOWS\system32\wuapi.dll - version: 7.2.6001.788. The error returned is: Toegang geweigerd.
(-2147024891)
10:21:22 | Unregistered: C:\WINDOWS\system32\wuaueng.dll
10:21:22 | Registered: C:\WINDOWS\system32\wuaueng.dll
10:21:22 | Unregistered: C:\WINDOWS\system32\wuaueng1.dll
10:21:22 | Registered: C:\WINDOWS\system32\wuaueng1.dll
10:21:22 | Unregistered: C:\WINDOWS\system32\wucltui.dll
10:21:22 | Registered: C:\WINDOWS\system32\wucltui.dll
10:21:22 | Unregistered: C:\WINDOWS\system32\wups.dll
10:21:22 | Registered: C:\WINDOWS\system32\wups.dll
10:21:22 | Unregistered: C:\WINDOWS\system32\wups2.dll
10:21:22 | Registered: C:\WINDOWS\system32\wups2.dll
10:21:22 | Unregistered: C:\WINDOWS\system32\wuweb.dll
10:21:22 | Registered: C:\WINDOWS\system32\wuweb.dll
10:21:23 | Error during registration of C:\WINDOWS\system32\ole32.dll - version: 5.1.2600.2726. The error returned is: Onherstelbare fout
(-2147418113)
--- SSL/HTTPS/Cryptography ---
10:21:35 | Executed 'cmd.exe /c rmdir /q /s C:\WINDOWS\system32\Catroot2'
--- Registration: SSL/HTTPS/Cryptography ---
10:21:40 | Unregistered: C:\WINDOWS\system32\cryptdlg.dll
10:21:40 | Registered: C:\WINDOWS\system32\cryptdlg.dll
10:21:40 | Unregistered: C:\WINDOWS\system32\cryptui.dll
10:21:40 | Registered: C:\WINDOWS\system32\cryptui.dll
10:21:40 | Unregistered: C:\WINDOWS\system32\cryptext.dll
10:21:40 | Registered: C:\WINDOWS\system32\cryptext.dll
10:21:40 | Unregistered: C:\WINDOWS\system32\dssenh.dll
10:21:40 | Registered: C:\WINDOWS\system32\dssenh.dll
10:21:40 | Unregistered: C:\WINDOWS\system32\gpkcsp.dll
10:21:40 | Registered: C:\WINDOWS\system32\gpkcsp.dll
10:21:40 | Unregistered: C:\WINDOWS\system32\initpki.dll
10:23:14 | Registered: C:\WINDOWS\system32\initpki.dll
10:23:14 | Unregistered: C:\WINDOWS\system32\licdll.dll
10:23:14 | Registered: C:\WINDOWS\system32\licdll.dll
10:23:14 | Unregistered: C:\WINDOWS\system32\mssign32.dll
10:23:14 | Registered: C:\WINDOWS\system32\mssign32.dll
10:23:14 | Unregistered: C:\WINDOWS\system32\mssip32.dll
10:23:14 | Registered: C:\WINDOWS\system32\mssip32.dll
10:23:15 | Unregistered: C:\WINDOWS\system32\scardssp.dll
10:23:15 | Registered: C:\WINDOWS\system32\scardssp.dll
10:23:15 | Unregistered: C:\WINDOWS\system32\sccbase.dll
10:23:15 | Registered: C:\WINDOWS\system32\sccbase.dll
10:23:15 | Unregistered: C:\WINDOWS\system32\scecli.dll
10:23:15 | Registered: C:\WINDOWS\system32\scecli.dll
10:23:15 | Unregistered: C:\WINDOWS\system32\softpub.dll
10:23:15 | Registered: C:\WINDOWS\system32\softpub.dll
10:23:15 | Unregistered: C:\WINDOWS\system32\slbcsp.dll
10:23:15 | Registered: C:\WINDOWS\system32\slbcsp.dll
10:23:16 | Unregistered: C:\WINDOWS\system32\regwizc.dll
10:23:16 | Registered: C:\WINDOWS\system32\regwizc.dll
10:23:16 | Unregistered: C:\WINDOWS\system32\rsaenh.dll
10:23:16 | Registered: C:\WINDOWS\system32\rsaenh.dll
10:23:16 | Unregistered: C:\WINDOWS\system32\winhttp.dll
10:23:16 | Registered: C:\WINDOWS\system32\winhttp.dll
10:23:16 | Unregistered: C:\WINDOWS\system32\wintrust.dll
10:23:16 | Registered: C:\WINDOWS\system32\wintrust.dll
--- Registration: ActiveX controls/codecs ---
10:23:16 | Registered: C:\WINDOWS\system32\acelpdec.ax
10:23:16 | Registered: C:\WINDOWS\system32\actxprxy.dll
10:23:16 | Registered: C:\WINDOWS\system32\asctrls.ocx
10:23:16 | Registered: C:\WINDOWS\system32\daxctle.ocx
10:23:16 | Registered: C:\WINDOWS\system32\hhctrl.ocx
10:23:16 | Registered: C:\WINDOWS\system32\l3codecx.ax
10:23:16 | Registered: C:\WINDOWS\system32\licmgr10.dll
10:23:17 | Registered: C:\WINDOWS\system32\mpg4ds32.ax
10:23:18 | Registered: C:\WINDOWS\system32\msdxm.ocx
10:23:18 | Registered: C:\WINDOWS\system32\proctexe.ocx
10:23:18 | Registered: C:\WINDOWS\system32\tdc.ocx
10:23:19 | Registered: C:\WINDOWS\system32\wshom.ocx
--- Registration: Control Panel applets ---
10:23:20 | DllInstalled: C:\WINDOWS\system32\inetcpl.cpl
10:23:20 | DllInstalled: C:\WINDOWS\system32\nusrmgr.cpl
10:23:20 | Registered: C:\WINDOWS\system32\nusrmgr.cpl
--- Registration: Direct[X|Draw|Show|Media] ---
10:23:20 | Registered: C:\WINDOWS\system32\quartz.dll
10:23:20 | Registered: C:\WINDOWS\system32\danim.dll
10:23:20 | Registered: C:\WINDOWS\system32\dmscript.dll
10:23:20 | Registered: C:\WINDOWS\system32\dmstyle.dll
10:23:20 | Registered: C:\WINDOWS\system32\dxmasf.dll
10:23:20 | Registered: C:\WINDOWS\system32\dxtmsft.dll
10:23:20 | Registered: C:\WINDOWS\system32\dxtrans.dll
10:23:20 | Registered: C:\WINDOWS\system32\sbe.dll
--- Registration: Programming cores/runtimes ---
10:23:20 | Registered: C:\WINDOWS\system32\atl.dll
10:23:20 | Registered: C:\WINDOWS\system32\corpol.dll
10:23:21 | Registered: C:\WINDOWS\system32\jscript.dll
10:23:21 | Registered: C:\WINDOWS\system32\dispex.dll
10:23:21 | Registered: C:\WINDOWS\system32\scrrun.dll
10:23:21 | Registered: C:\WINDOWS\system32\scrobj.dll
10:23:21 | Registered: C:\WINDOWS\system32\vbscript.dll
10:23:21 | Registered: C:\WINDOWS\system32\wshext.dll
--- Registration: Explorer/IE/OE/shell/WMP ---
10:23:21 | Registered: C:\WINDOWS\system32\activeds.dll
10:23:21 | Registered: C:\WINDOWS\system32\audiodev.dll
10:23:21 | Registered: C:\WINDOWS\system32\browsewm.dll
10:23:21 | Registered: C:\WINDOWS\system32\cabview.dll
10:23:21 | Registered: C:\WINDOWS\system32\cdfview.dll
10:23:22 | Registered: C:\WINDOWS\system32\clbcatex.dll
10:23:22 | Registered: C:\WINDOWS\system32\clbcatq.dll
10:23:22 | Registered: C:\WINDOWS\system32\comcat.dll
10:23:22 | Registered: C:\WINDOWS\system32\cscui.dll
10:23:22 | Registered: C:\WINDOWS\system32\credui.dll
10:23:22 | Registered: C:\WINDOWS\system32\datime.dll
10:23:22 | Registered: C:\WINDOWS\system32\devmgr.dll
10:23:22 | Registered: C:\WINDOWS\system32\dfsshlex.dll
10:23:22 | Registered: C:\WINDOWS\system32\dmdlgs.dll
10:23:22 | Registered: C:\WINDOWS\system32\dmdskmgr.dll
10:23:22 | Registered: C:\WINDOWS\system32\dmloader.dll
10:23:22 | Registered: C:\WINDOWS\system32\dmocx.dll
10:23:22 | Registered: C:\WINDOWS\system32\dmview.ocx
10:23:22 | DllInstalled: C:\WINDOWS\system32\dsuiext.dll
10:23:22 | Registered: C:\WINDOWS\system32\dsuiext.dll
10:23:22 | DllInstalled: C:\WINDOWS\system32\dsquery.dll
10:23:22 | Registered: C:\WINDOWS\system32\dsquery.dll
10:23:22 | Registered: C:\WINDOWS\system32\dskquoui.dll
10:23:22 | Registered: C:\WINDOWS\system32\els.dll
10:23:23 | Registered: C:\WINDOWS\system32\es.dll
10:23:23 | Registered: C:\WINDOWS\system32\fontext.dll
10:23:23 | Registered: C:\WINDOWS\system32\hlink.dll
10:23:23 | Registered: C:\WINDOWS\system32\hnetcfg.dll
10:23:23 | Registered: C:\WINDOWS\system32\iedkcs32.dll
10:23:23 | Registered: C:\WINDOWS\system32\iepeers.dll
10:23:23 | Registered: C:\WINDOWS\system32\ils.dll
10:23:23 | Registered: C:\WINDOWS\system32\inetcfg.dll
10:23:23 | Registered: C:\WINDOWS\system32\inetcomm.dll
10:23:23 | Registered: C:\WINDOWS\system32\laprxy.dll
10:23:24 | Registered: C:\WINDOWS\system32\lmrt.dll
10:23:24 | Registered: C:\WINDOWS\system32\mlang.dll
10:23:24 | Registered: C:\WINDOWS\system32\mmcndmgr.dll
10:23:24 | Registered: C:\WINDOWS\system32\mmcshext.dll
10:23:24 | Registered: C:\WINDOWS\system32\mscoree.dll
10:23:24 | Registered: C:\WINDOWS\system32\mshtmled.dll
10:23:24 | Registered: C:\WINDOWS\system32\msoeacct.dll
10:23:24 | Registered: C:\WINDOWS\system32\msr2c.dll
10:23:25 | DllInstalled: C:\WINDOWS\system32\mydocs.dll
10:23:25 | Registered: C:\WINDOWS\system32\mydocs.dll
10:23:25 | Registered: C:\WINDOWS\system32\mstime.dll
10:23:25 | Registered: C:\WINDOWS\system32\netcfgx.dll
10:23:25 | DllInstalled: C:\WINDOWS\system32\netplwiz.dll
10:23:25 | Registered: C:\WINDOWS\system32\netplwiz.dll
10:23:25 | Registered: C:\WINDOWS\system32\netman.dll
10:23:25 | Registered: C:\WINDOWS\system32\netshell.dll
10:23:25 | Registered: C:\WINDOWS\system32\ntmsevt.dll
10:23:25 | Registered: C:\WINDOWS\system32\ntmsmgr.dll
10:23:25 | DllInstalled: C:\WINDOWS\system32\ntmssvc.dll
10:23:25 | Registered: C:\WINDOWS\system32\ntmssvc.dll
10:23:25 | DllInstalled: C:\WINDOWS\system32\occache.dll
10:23:26 | Registered: C:\WINDOWS\system32\occache.dll
10:23:40 | Error during registration of C:\WINDOWS\system32\ole32.dll - version: 5.1.2600.2726. The error returned is: Onherstelbare fout
(-2147418113)
10:23:40 | Registered: C:\WINDOWS\system32\oleaut32.dll
10:23:40 | Registered: C:\WINDOWS\system32\oleacc.dll
10:23:40 | Registered: C:\WINDOWS\system32\olepro32.dll
10:23:40 | DllInstalled: C:\WINDOWS\system32\photowiz.dll
10:23:40 | Registered: C:\WINDOWS\system32\photowiz.dll
10:23:40 | Registered: C:\WINDOWS\system32\remotepg.dll
10:23:40 | Registered: C:\WINDOWS\system32\rpcrt4.dll
10:23:40 | Registered: C:\WINDOWS\system32\rshx32.dll
10:23:40 | Registered: C:\WINDOWS\system32\sendmail.dll
10:23:41 | Registered: C:\WINDOWS\system32\slayerxp.dll
10:23:41 | Registered: C:\WINDOWS\system32\shell32.dll
10:23:42 | DllInstalled: C:\WINDOWS\system32\shell32.dll
10:23:42 | Registered: C:\WINDOWS\system32\shmedia.dll
10:23:42 | DllInstalled: C:\WINDOWS\system32\shimgvw.dll
10:23:42 | Registered: C:\WINDOWS\system32\shimgvw.dll
10:23:42 | DllInstalled: C:\WINDOWS\system32\shsvcs.dll
10:23:42 | Registered: C:\WINDOWS\system32\shsvcs.dll
10:23:42 | Registered: C:\WINDOWS\system32\srclient.dll
10:23:42 | Unregistered: C:\WINDOWS\system32\stobject.dll
10:23:42 | Registered: C:\WINDOWS\system32\stobject.dll
10:23:42 | Registered: C:\WINDOWS\system32\twext.dll
10:23:43 | DllInstalled: C:\WINDOWS\system32\urlmon.dll
10:23:43 | Registered: C:\WINDOWS\system32\urlmon.dll
10:23:43 | Registered: C:\WINDOWS\system32\userenv.dll
10:23:43 | Registered: C:\WINDOWS\system32\winhttp.dll
10:23:43 | DllInstalled: C:\WINDOWS\system32\wininet.dll
10:23:43 | Registered: C:\WINDOWS\system32\zipfldr.dll
10:23:43 | Registered: C:\Program Files\Common Files\system\Ole DB\msdadc.dll
10:23:43 | Registered: C:\Program Files\Common Files\system\Ole DB\msdaenum.dll
10:23:43 | Registered: C:\Program Files\Common Files\system\Ole DB\msdaer.dll
10:23:43 | Registered: C:\Program Files\Common Files\system\Ole DB\msdaipp.dll
10:23:43 | Registered: C:\Program Files\Common Files\system\Ole DB\msdaora.dll
10:23:43 | Registered: C:\Program Files\Common Files\system\Ole DB\msdaosp.dll
10:23:43 | Registered: C:\Program Files\Common Files\system\Ole DB\msdaps.dll
10:23:43 | Registered: C:\Program Files\Common Files\system\Ole DB\msdasc.dll
10:23:43 | Registered: C:\Program Files\Common Files\system\Ole DB\msdasql.dll
10:23:43 | Registered: C:\Program Files\Common Files\system\Ole DB\msdatt.dll
10:23:43 | Registered: C:\Program Files\Common Files\system\Ole DB\msdaurl.dll
10:23:44 | Registered: C:\Program Files\Common Files\system\Ole DB\msdmeng.dll
10:23:44 | Registered: C:\Program Files\Common Files\system\Ole DB\msdmine.dll
10:23:44 | Registered: C:\Program Files\Common Files\system\Ole DB\msmdcb80.dll
10:23:44 | Registered: C:\Program Files\Common Files\system\Ole DB\msmdgd80.dll
10:23:44 | Registered: C:\Program Files\Common Files\system\Ole DB\msolap80.dll
10:23:44 | Registered: C:\Program Files\Common Files\system\Ole DB\msolui80.dll
10:23:45 | Registered: C:\Program Files\Common Files\system\Ole DB\msxactps.dll
10:23:45 | Registered: C:\Program Files\Common Files\system\Ole DB\oledb32.dll
10:23:45 | Registered: C:\Program Files\Common Files\system\Ole DB\oledb32r.dll
10:23:45 | Registered: C:\Program Files\Common Files\system\Ole DB\sqloledb.dll
10:23:45 | Registered: C:\Program Files\Common Files\system\Ole DB\sqlxmlx.dll

HJT-log

Code:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:27:41, on 18/12/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Telemeter 3.0\telemeter3.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\SysAidServer\firebird\bin\fbguard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\UPHClean\uphclean.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\SysAidServer\firebird\bin\fbserver.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: IE7Pro BHO - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\iepro.dll
O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {259F616C-A300-44F5-B04A-ED001A26C85C} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [Telemeter 3.0] "C:\Program Files\Telemeter 3.0\telemeter3.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O8 - Extra context menu item: &ieSpell Options - res://C:\Program Files\ieSpell\iespell.dll/SPELLOPTION.HTM
O8 - Extra context menu item: Check &Spelling - res://C:\Program Files\ieSpell\iespell.dll/SPELLCHECK.HTM
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Lookup on Merriam Webster - file://C:\Program Files\ieSpell\Merriam Webster.HTM
O8 - Extra context menu item: Lookup on Wikipedia - file://C:\Program Files\ieSpell\wikipedia.HTM
O9 - Extra button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll
O9 - Extra 'Tools' menuitem: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra 'Tools' menuitem: ieSpell Options - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - C:\Program Files\ieSpell\iespell.dll
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - The Firebird Project - C:\Program Files\SysAidServer\firebird\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - The Firebird Project - C:\Program Files\SysAidServer\firebird\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: MSSQL$SONY_MEDIAMGR - Unknown owner - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SQLAgent$SONY_MEDIAMGR - Unknown owner - C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE (file missing)
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe

--
End of file - 9000 bytes

Dan heb ik nog eens de IE-Fix geprobeerd,
maar hier komt "Internet Explorer 7 is currently not supposed"

Dan CC-cleaner

Dan IE-Fix (maar nog steeds hetzelfde resultaat)

Dan Dial-a-fix (maar jammer genoeg blijven de errors)

HELP ME

Chalk · 18 dec 2008

Nadat ik mijn PC eens heropgestard heb, kon ik via de site van windows de update beginnen. Maar als deze ongeveer in de helft was brak deze af met een error.
Welke ben ik stomweg vergeten (op te schrijven). Het waren maar 4-5 woorden. Niets specifiek ofzo...
Ik heb nog eens geprobeerd (pc af, aan, test).. maar hetzelfde

Juisterr · 18 dec 2008

Ga naar Start -- Uitvoeren
Typ in: CMD en druk op OK.

Er zal een zwart scherm openen, typ in dit scherm: chkdsk /f gevolgd door enter.
Typ dan nu een J in, gevolgd door een enter en herstart de PC.

Onderbreek bij het opstarten van de PC de eventuele controles niet.

Chalk · 19 dec 2008

Gedaan

Dial-a-fix hierna gedaan: nog steeds diezelfde errors
Windows update: Hetzelfde als vorige keren.
Alles gaat goed, tot in iets voor de helft, wanneer de error verschijnt: toegang geweigerd. (echt zo een critical error tekentje) en dan ja service pack 3 niet voltooid

Ik heb wel de indruk dat mijn pc nu trager opstart?

Archief - 2 trojans

Chalk

Legacy Member

Juisterr

Legacy Member

Chalk

Legacy Member

Juisterr

Legacy Member

Chalk

Legacy Member

Juisterr

Legacy Member

Chalk

Legacy Member

Juisterr

Legacy Member

Chalk

Legacy Member

Juisterr

Legacy Member

Chalk

Legacy Member

Juisterr

Legacy Member

Chalk

Legacy Member

Juisterr

Legacy Member

Chalk

Legacy Member

Juisterr

Legacy Member

Chalk

Legacy Member

Chalk

Legacy Member

Juisterr

Legacy Member

Chalk

Legacy Member