Archief - internet gaat traag en soms laad het pagina's niet

mijn internet gaat traag en soms laat hij website helemaal niet. Ik had 2 dagen geleden ook nog een pop-up van een spyware scanner die ik zogezegd moest installeren en die mijn systeem ging scannen, heb ik dus niet gedaan.

Die heb ik er met ad aware kunnen verwijderen, maar internet doet het nog steeds slecht


log:


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:39:20, on 14/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\D-Link\AirPlus XtremeG\AirPlusCFG.exe
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\Rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Desktop Sidebar\dsidebar.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\ATKKBService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wuauclt.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: {cd9bff25-93ed-262a-5fc4-9708ba7bd2f0} - {0f2db7ab-8079-4cf5-a262-de3952ffb9dc} - C:\WINDOWS\system32\mhjasklo.dll
O2 - BHO: (no name) - {6AB10314-8763-49B4-BC68-9E31ECE3D043} - C:\WINDOWS\system32\awtrOFuS.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O2 - BHO: (no name) - {E49BA462-5C96-48C5-AEF9-A1A32BA1D3F1} - C:\WINDOWS\system32\ddcYomLb.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [Snelkoppeling naar eigenschappenvenster voor High Definition Audio] HDAShCut.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [D-Link AirPlus XtremeG] C:\Program Files\D-Link\AirPlus XtremeG\AirPlusCFG.exe
O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [e037ff46] rundll32.exe "C:\WINDOWS\system32\mkonsufb.dll",b
O4 - HKLM\..\Run: [BMe304ccda] Rundll32.exe "C:\WINDOWS\system32\attiqhrl.dll",s
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SIDEBAR] "C:\Program Files\Desktop Sidebar\dsidebar.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify: ddcYomLb - ddcYomLb.dll (file missing)
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

--
End of file - 9219 bytes

Download combofix.exe: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Plaats het op je bureaublad.
Dubbelklik er op om het programma te starten.
In het scherm dat verschijnt tik je een 1 in om het cleaning- en analysesproces te laten uitvoeren.
Volg de instructies op het scherm.
Als het tooltje klaar is, opent er een logfile (combofix.txt).
Post de inhoud van dit bestandje samen met een nieuwe hijackthislog.

logfile compofix:




ComboFix 08-06-12.2 - Administrator 2008-06-14 13:22:20.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1043.18.1282 [GMT 2:00]
Gestart vanuit: C:\Documents and Settings\Administrator\Bureaublad\ComboFix.exe
* Nieuw herstelpunt werd aangemaakt

WAARSCHUWING - DE RECOVERY CONSOLE IS NIET OP DIT SYSTEEM GEINSTALLEERD !!
.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\cookies.ini
C:\WINDOWS\Fonts\CALIBRIB.TTF
C:\WINDOWS\pskt.ini
C:\WINDOWS\system32\attiqhrl.dll
C:\WINDOWS\system32\bfusnokm.ini
C:\WINDOWS\system32\bhbdbiom.dll
C:\WINDOWS\system32\ercwgxto.dll
C:\WINDOWS\system32\hppwmmug.ini
C:\WINDOWS\system32\mhjasklo.dll
C:\WINDOWS\system32\mkonsufb.dll
C:\WINDOWS\system32\SuFOrtwa.ini
C:\WINDOWS\system32\SuFOrtwa.ini2
C:\WINDOWS\system32\uBHPYcfe.ini
C:\WINDOWS\system32\uBHPYcfe.ini2

.
(((((((((((((((((((( Bestanden Gemaakt van 2008-05-14 to 2008-06-14 ))))))))))))))))))))))))))))))
.

2008-06-14 10:26 . 2008-06-14 10:26 <DIR> d-------- C:\Program Files\Trend Micro
2008-06-13 15:12 . 2008-06-13 15:12 0 --a------ C:\WINDOWS\nsreg.dat
2008-06-12 16:38 . 2008-04-14 17:54 272,640 --------- C:\WINDOWS\system32\drivers\bthport.sys
2008-06-12 16:38 . 2008-04-14 17:54 272,640 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys
2008-06-12 13:55 . 2008-06-13 14:40 48 --a------ C:\WINDOWS\BMe304ccda.xml
2008-06-10 15:59 . 2001-08-17 21:56 7,552 --a------ C:\WINDOWS\system32\drivers\SONYPVU1.SYS
2008-06-10 15:59 . 2001-08-17 21:56 7,552 --a--c--- C:\WINDOWS\system32\dllcache\sonypvu1.sys
2008-06-10 15:05 . 2008-06-10 15:05 <DIR> d-------- C:\Program Files\Lavasoft
2008-06-10 15:05 . 2008-06-10 15:06 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-06-10 15:04 . 2008-06-10 15:04 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-06-10 14:39 . 2008-06-10 15:19 <DIR> d-------- C:\Program Files\Spybot - Search & Destroy
2008-06-10 14:39 . 2008-06-10 15:19 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-06-10 13:36 . 2008-06-10 13:36 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\DivX
2008-06-07 16:25 . 2008-06-07 16:26 <DIR> d-------- C:\Program Files\DivX
2008-06-04 13:45 . 2008-06-04 17:31 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Messenger Plus!
2008-06-03 20:11 . 2008-06-04 15:26 <DIR> d-------- C:\Program Files\Messenger Plus! Live
2008-06-02 17:15 . 2008-06-02 17:15 268 --ah----- C:\sqmdata00.sqm
2008-06-02 17:15 . 2008-06-02 17:15 244 --ah----- C:\sqmnoopt00.sqm
2008-06-01 20:29 . 2008-06-01 20:31 2,783 --a------ C:\WINDOWS\WoWEmuHackSettings.ini
2008-05-27 20:12 . 2008-06-14 11:07 <DIR> d--h----- C:\$AVG8.VAULT$
2008-05-26 21:33 . 2008-05-26 21:33 <DIR> d-------- C:\Program Files\Windows Media Connect 2
2008-05-26 21:32 . 2008-05-26 21:32 <DIR> d-------- C:\WINDOWS\system32\LogFiles
2008-05-26 21:32 . 2008-05-26 21:32 <DIR> d-------- C:\WINDOWS\system32\drivers\UMDF
2008-05-25 12:17 . 2008-05-25 12:17 <DIR> d-------- C:\Program Files\FDRLab
2008-05-23 07:50 . 2008-05-23 07:50 <DIR> d-------- C:\Program Files\QuickTime
2008-05-23 07:50 . 2008-05-23 07:50 <DIR> d-------- C:\Program Files\iTunes
2008-05-23 07:50 . 2008-05-23 07:50 <DIR> d-------- C:\Program Files\iPod
2008-05-23 07:50 . 2008-05-23 07:50 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\Apple Computer
2008-05-23 07:50 . 2008-06-14 09:16 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-05-23 07:50 . 2008-05-23 07:51 1,409 --a------ C:\WINDOWS\QTFont.for
2008-05-23 07:49 . 2008-05-23 07:49 <DIR> d-------- C:\Program Files\Common Files\Apple
2008-05-23 07:49 . 2008-05-23 07:49 <DIR> d-------- C:\Program Files\Apple Software Update
2008-05-23 07:49 . 2008-05-23 07:50 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Apple Computer
2008-05-23 07:49 . 2008-05-23 07:49 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Apple
2008-05-23 07:49 . 2008-02-18 11:16 30,464 --a------ C:\WINDOWS\system32\drivers\usbaapl.sys
2008-05-23 00:22 . 2008-05-23 00:22 3,596,288 --a------ C:\WINDOWS\system32\qt-dx331.dll
2008-05-23 00:22 . 2008-05-23 00:22 524,288 --a------ C:\WINDOWS\system32\DivXsm.exe
2008-05-23 00:22 . 2008-05-23 00:22 4,816 --a------ C:\WINDOWS\system32\divxsm.tlb
2008-05-23 00:20 . 2008-05-23 00:20 1,044,480 --a------ C:\WINDOWS\system32\libdivx.dll
2008-05-23 00:20 . 2008-05-23 00:20 200,704 --a------ C:\WINDOWS\system32\ssldivx.dll
2008-05-23 00:19 . 2008-05-23 00:19 352,401 --a------ C:\WINDOWS\system32\DivXMedia.ax
2008-05-23 00:19 . 2008-05-23 00:19 196,608 --a------ C:\WINDOWS\system32\dtu100.dll
2008-05-23 00:19 . 2008-05-23 00:19 161,096 --a------ C:\WINDOWS\system32\DivXCodecVersionChecker.exe
2008-05-23 00:19 . 2008-05-23 00:19 81,920 --a------ C:\WINDOWS\system32\dpl100.dll
2008-05-23 00:19 . 2008-05-23 00:19 416 --a------ C:\WINDOWS\system32\dtu100.dll.manifest
2008-05-23 00:19 . 2008-05-23 00:19 416 --a------ C:\WINDOWS\system32\dpl100.dll.manifest
2008-05-23 00:18 . 2008-05-23 00:18 12,288 --a------ C:\WINDOWS\system32\DivXWMPExtType.dll
2008-05-21 18:53 . 2008-06-03 17:04 <DIR> d-------- C:\Program Files\TrackMania Nations ESWC
2008-05-21 17:09 . 2008-05-21 17:09 <DIR> d-------- C:\Logs
2008-05-21 13:00 . 2008-05-21 13:00 <DIR> d-------- C:\Program Files\Common Files\Blizzard Entertainment
2008-05-21 12:49 . 2008-06-13 13:41 <DIR> d-------- C:\Program Files\World of Warcraft
2008-05-20 17:46 . 2008-06-14 13:23 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\Desktop Sidebar
2008-05-20 17:45 . 2008-05-20 17:45 <DIR> d-------- C:\Program Files\Desktop Sidebar
2008-05-20 17:33 . 2008-05-20 21:03 <DIR> d-------- C:\WINDOWS\system32\Adobe
2008-05-20 17:33 . 2008-03-19 18:26 499,712 --a------ C:\WINDOWS\system32\msvcp71.dll
2008-05-20 17:33 . 2008-03-19 18:29 348,160 --a------ C:\WINDOWS\system32\msvcr71.dll
2008-05-19 19:00 . 2008-05-19 19:00 <DIR> d-------- C:\WINDOWS\system32\Lang
2008-05-19 19:00 . 2008-05-19 19:00 940,794 --a------ C:\WINDOWS\system32\LoopyMusic.wav
2008-05-19 19:00 . 2008-05-19 19:00 146,650 --a------ C:\WINDOWS\system32\BuzzingBee.wav
2008-05-19 18:47 . 2008-05-19 18:47 <DIR> d-------- C:\Program Files\Realtek
2008-05-19 18:43 . 2004-08-03 23:08 26,496 --a--c--- C:\WINDOWS\system32\dllcache\usbstor.sys
2008-05-19 17:08 . 2007-07-30 19:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll
2008-05-19 17:08 . 2007-07-30 19:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll
2008-05-19 17:08 . 2007-07-30 19:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui
2008-05-18 16:37 . 2008-05-18 16:37 <DIR> d-------- C:\WINDOWS\Sun
2008-05-18 16:37 . 2008-05-18 16:37 <DIR> d-------- C:\WINDOWS\.jagex_cache_32
2008-05-18 16:17 . 2008-05-18 16:17 <DIR> d-------- C:\Program Files\Native Instruments
2008-05-18 16:12 . 2000-05-21 22:00 647,872 --a------ C:\WINDOWS\system32\mscomct2.ocx
2008-05-18 16:12 . 1998-06-23 22:00 609,584 --a------ C:\WINDOWS\system32\comctl32.ocx
2008-05-18 16:12 . 2001-03-13 11:49 120,320 --a------ C:\WINDOWS\system32\comdlg32.ocx
2008-05-18 15:06 . 2008-05-18 15:06 <DIR> d-------- C:\Documents and Settings\Administrator\Contacts
2008-05-18 15:03 . 2008-05-18 15:03 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE
2008-05-18 15:00 . 2008-05-18 15:03 <DIR> d-------- C:\Program Files\Windows Live
2008-05-18 15:00 . 2008-05-18 15:03 <DIR> d--hsc--- C:\Program Files\Common Files\WindowsLiveInstaller
2008-05-18 15:00 . 2008-05-18 15:00 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-05-18 13:11 . 2008-06-14 12:54 531 --a------ C:\hpfr5550.xml
2008-05-18 13:09 . 2008-05-18 13:09 <DIR> d-------- C:\Program Files\hp deskjet 5550 series
2008-05-18 13:09 . 2008-05-18 13:09 800 --a------ C:\WINDOWS\hpinfo.lnk
2008-05-18 13:08 . 2008-05-18 13:08 <DIR> d-------- C:\Program Files\Hewlett-Packard
2008-05-18 13:08 . 2002-12-10 02:33 147,512 --a------ C:\WINDOWS\system32\hpzlnt07.dll
2008-05-18 12:36 . 2008-06-14 09:17 <DIR> d-------- C:\WINDOWS\system32\drivers\Avg
2008-05-18 12:36 . 2008-05-18 12:36 <DIR> d-------- C:\Program Files\AVG
2008-05-18 12:36 . 2008-05-18 12:36 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\FLEXnet
2008-05-18 12:36 . 2008-05-18 12:36 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\avg8
2008-05-18 12:36 . 2008-05-18 12:36 96,520 --a------ C:\WINDOWS\system32\drivers\avgldx86.sys
2008-05-18 12:36 . 2008-05-18 12:36 10,520 --a------ C:\WINDOWS\system32\avgrsstx.dll
2008-05-17 12:57 . 2008-05-23 07:50 <DIR> d-------- C:\Program Files\Bonjour
2008-05-17 12:53 . 2008-05-18 12:39 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\AVGTOOLBAR
2008-05-17 12:51 . 2008-05-17 12:51 <DIR> d-------- C:\Program Files\Common Files\Macrovision Shared
2008-05-17 12:50 . 2008-05-19 18:39 <DIR> d-------- C:\Program Files\Common Files\Adobe
2008-05-17 12:23 . 2006-10-26 19:56 32,592 --a------ C:\WINDOWS\system32\msonpmon.dll
2008-05-17 12:22 . 2008-05-17 12:22 <DIR> d-------- C:\Program Files\MSBuild
2008-05-17 12:22 . 2008-05-17 12:22 <DIR> d-------- C:\Program Files\Microsoft Works
2008-05-17 12:21 . 2008-05-17 12:21 <DIR> d-------- C:\Program Files\Microsoft.NET
2008-05-17 12:19 . 2008-05-17 12:22 <DIR> d-------- C:\WINDOWS\SHELLNEW
2008-05-17 12:19 . 2008-05-17 12:19 <DIR> dr-h----- C:\MSOCache
2008-05-17 12:19 . 2008-05-18 20:57 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2008-05-17 12:15 . 2008-05-17 12:24 <DIR> d-------- C:\Program Files\MagicISO
2008-05-17 12:10 . 2008-05-17 12:10 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\ATI
2008-05-17 12:09 . 2008-05-17 12:09 <DIR> d-------- C:\Program Files\My Company Name
2008-05-17 12:07 . 2008-05-17 12:07 <DIR> d-------- C:\Program Files\Common Files\ATI Technologies
2008-05-17 12:07 . 2008-06-07 15:51 <DIR> d-------- C:\Documents and Settings\Administrator\Application Data\LimeWire
2008-05-17 12:05 . 2008-05-17 12:06 <DIR> d-------- C:\Program Files\ATI Technologies
2008-05-17 12:05 . 2006-02-08 10:44 1,114,674 -ra------ C:\WINDOWS\system32\drivers\ativcaxx.cpa
2008-05-17 12:05 . 2006-05-03 06:54 307,200 -ra------ C:\WINDOWS\system32\atiiiexx.dll
2008-05-17 12:05 . 2006-04-28 10:05 127,614 -ra------ C:\WINDOWS\system32\atiicdxx.dat
2008-05-17 12:05 . 2005-10-14 04:10 58,560 -ra------ C:\WINDOWS\system32\drivers\ativckxx.vp
2008-05-17 12:05 . 2006-05-03 07:09 28,080 -ra------ C:\WINDOWS\system32\drivers\ativvpxx.vp
2008-05-17 12:05 . 2006-01-25 14:48 6,005 -ra------ C:\WINDOWS\system32\atifglpf.xml
2008-05-17 12:05 . 2006-02-08 10:44 929 -ra------ C:\WINDOWS\system32\drivers\ativcaxx.vp
2008-05-17 12:04 . 2006-05-15 08:18 12,416 -ra------ C:\WINDOWS\system32\drivers\EIO.sys
2008-05-17 12:02 . 2008-05-17 12:02 <DIR> d--hs---- C:\Documents and Settings\Administrator\UserData
2008-05-17 12:00 . 2008-05-17 12:09 <DIR> d-------- C:\Program Files\Google
2008-05-17 11:59 . 2008-02-22 02:33 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-05-17 07:31 . 2008-05-17 07:43 <DIR> d-------- C:\i386
2008-05-16 11:58 . 2008-05-16 11:58 12,632 --a------ C:\WINDOWS\system32\lsdelete.exe

.
((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-22 22:22 9,464 ------w C:\WINDOWS\system32\drivers\cdralw2k.sys
2008-05-22 22:22 9,336 ------w C:\WINDOWS\system32\drivers\cdr4_xp.sys
2008-05-22 22:22 43,528 ------w C:\WINDOWS\system32\drivers\PxHelp20.sys
2008-05-19 16:47 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-05-17 10:08 --------- d-----w C:\Program Files\Common Files\InstallShield
2008-05-17 09:59 --------- d-----w C:\Program Files\Java
2008-05-16 22:55 9,388 ----a-w C:\WINDOWS\system32\drivers\iaStor.PNF
2008-05-16 22:55 7,280 ----a-w C:\WINDOWS\system32\drivers\viamraid.PNF
2008-05-16 22:55 63,240 ----a-w C:\WINDOWS\system32\drivers\Si3112r.PNF
2008-05-16 22:55 6,984 ----a-w C:\WINDOWS\system32\drivers\SiSRaid.PNF
2008-05-16 22:55 20,152 ----a-w C:\WINDOWS\system32\drivers\INFCACHE.1
2008-05-16 22:55 12,432 ----a-w C:\WINDOWS\system32\drivers\adpu320.PNF
2008-05-16 22:55 12,228 ----a-w C:\WINDOWS\system32\drivers\nvraid.PNF
2008-05-16 22:55 10,828 ----a-w C:\WINDOWS\system32\drivers\iaAHCI.PNF
2008-05-16 21:16 --------- d-----w C:\Program Files\D-Link
2008-05-16 21:16 --------- d-----w C:\Program Files\ANI
2008-05-16 21:06 --------- d-----w C:\Program Files\microsoft frontpage
2008-05-16 21:06 --------- d-----w C:\Program Files\Common Files\Java
2008-05-08 12:28 202,752 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys
2008-04-29 09:20 15,648 ----a-w C:\WINDOWS\system32\drivers\NSDriver.sys
2008-04-29 09:19 15,648 ----a-w C:\WINDOWS\system32\drivers\Awrtrd.sys
2008-04-29 09:19 12,960 ----a-w C:\WINDOWS\system32\drivers\Awrtpd.sys
.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{6AB10314-8763-49B4-BC68-9E31ECE3D043}]
C:\WINDOWS\system32\awtrOFuS.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E49BA462-5C96-48C5-AEF9-A1A32BA1D3F1}]
C:\WINDOWS\system32\ddcYomLb.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 14:00 15360]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-05-23 21:26 68856]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 11:34 5724184]
"SIDEBAR"="C:\Program Files\Desktop Sidebar\dsidebar.exe" [2006-07-09 21:58 1777664]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 18:24 1694208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Snelkoppeling naar eigenschappenvenster voor High Definition Audio"="HDAShCut.exe" [2005-01-07 17:07 61952 C:\WINDOWS\system32\HdAShCut.exe]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
"D-Link AirPlus XtremeG"="C:\Program Files\D-Link\AirPlus XtremeG\AirPlusCFG.exe" [2005-03-28 14:25 1011712]
"ANIWZCS2Service"="C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe" [2004-12-16 17:49 49152]
"ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 17:41 45056]
"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 00:47 31016]
"AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2008-05-18 12:36 1177368]
"HPDJ Taskbar Utility"="C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe" [2002-12-10 02:33 188416]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792]
"RTHDCPL"="RTHDCPL.EXE" [2006-06-28 14:54 16248320 C:\WINDOWS\RTHDCPL.exe]
"SkyTel"="SkyTel.EXE" [2006-05-16 18:04 2879488 C:\WINDOWS\SkyTel.exe]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2008-03-28 23:37 413696]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-03-30 10:36 267048]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 14:00 15360]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{E49BA462-5C96-48C5-AEF9-A1A32BA1D3F1}"= C:\WINDOWS\system32\ddcYomLb.dll [ ]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ddcYomLb]
ddcYomLb.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=avgrsstx.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"C:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\TrackMania Nations ESWC\\TmNationsESWC.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=

R1 AvgLdx86;AVG AVI Loader Driver x86;C:\WINDOWS\system32\Drivers\avgldx86.sys [2008-05-18 12:36]
R2 avg8wd;AVG8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-05-18 12:36]
R3 A3AB;D-Link AirPro 802.11a/b Wireless Adapter Service(A3AB);C:\WINDOWS\system32\DRIVERS\A3AB.sys [2005-03-22 03:17]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{04475404-23fa-11dd-a2e7-00179aaf41ab}]
\Shell\AutoRun\command - E:\Launcher.exe

.
Inhoud van de 'Gedeelde Taken' map
"2008-06-13 20:22:01 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-14 13:25:21
Windows 5.1.2600 Service Pack 2 NTFS

scannen van verborgen processen ...

scannen van verborgen autostart items ...

scannen van verborgen bestanden ...

Scan succesvol afgerond
verborgen bestanden: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\WINDOWS\system32\ati2evxx.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\AVG\AVG8\avgrsx.exe
.
**************************************************************************
.
Voltooingstijd: 2008-06-14 13:28:59 - machine was rebooted
ComboFix-quarantined-files.txt 2008-06-14 11:28:55

Pre-Run: 134,065,262,592 bytes beschikbaar
Post-Run: 134,261,841,920 bytes beschikbaar

254 --- E O F --- 2008-06-12 18:04:03




nieuwe logfile hijackthis:



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:34:07, on 14/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\ATKKBService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\D-Link\AirPlus XtremeG\AirPlusCFG.exe
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Desktop Sidebar\dsidebar.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\AVG\AVG8\avgrsx.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: (no name) - {6AB10314-8763-49B4-BC68-9E31ECE3D043} - C:\WINDOWS\system32\awtrOFuS.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll
O2 - BHO: (no name) - {E49BA462-5C96-48C5-AEF9-A1A32BA1D3F1} - C:\WINDOWS\system32\ddcYomLb.dll (file missing)
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [Snelkoppeling naar eigenschappenvenster voor High Definition Audio] HDAShCut.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [D-Link AirPlus XtremeG] C:\Program Files\D-Link\AirPlus XtremeG\AirPlusCFG.exe
O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [SIDEBAR] "C:\Program Files\Desktop Sidebar\dsidebar.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} (HP Download Manager) - https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify: ddcYomLb - ddcYomLb.dll (file missing)
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

--
End of file - 8624 bytes

Download ATF cleaner (by Atribune)

Dubbelklik op ATF cleaner om het programma te starten.
Op het tabblad "Main", plaats je een vinkje bij Select All.
Klik op de knop Empty Selected.

Gebruik je ook Firefox als browser:
Klik op tabblad "Firefox", plaats een vinkje bij Select All.
Wil je de door Firefox opgeslagen wachtwoorden behouden, dan klik je in het venster dat verschijnt op "No".
(dit verwijdert het vinkje bij "Firefox saved passwords")
Klik op de knop Empty Selected.

Gebruik je ook Opera als browser:
Klik op tabblad "Opera", plaats een vinkje bij Select All.
Wil je de door Opera opgeslagen wachtwoorden behouden, dan klik je in het venster dat verschijnt op "No".
Klik op de knop Empty Selected.
Ga naar het tabblad "Main" en klik op de knop Exit om het programma af te sluiten.

* Voer dan een schijfdefragmentatie uit.

gelukt, maar als ik nu een geüploade afbeelding wil bekijken ( imageshack ) en ik klik erop dan krijg ik geen foto maar een webpagina vol rare tekens.

wat doe ik hieraan?

Is dat bij alle afbeeldingen zo?

neen, enkel op die afbeeldingen met zo een klein voorbeeldvenster.

Download Dial-a-fix via
http://wiki.djlizard.net/Dial-a-fix#Standard_version

Start Dial-A-Fix en in het hoofd-venster vink je alles aan en klik onderaan op 'Go'
Laat het tooltje zijn werk doen en herstart je pc, kijk of het dan gebeterd is.