Wie kan me helpen?

Sinds ongeveer een week krijg ik op bepaalde sites steeds een foutmelding van IE 6.0
- n iexplore.exe is een fout opgetreden en moet worden afgesloten. Onze excuses voor dit ongemak -
En dan sluit de browser de site af en kan ik weer helemaal opnieuw beginnen.
Is dit probleem sinds de laatste update van Windows of dit een ander algemeen probleem?
Helpt het eventueel om IE 6.0 helemaal opnieuw te installeren?
Waar kan ik een volledige versie downloaden?
Ik werk nog met Windows XP sp1 omdat het volgens mij een heel gedoe is met sp2 wat betreft veiligheidsinstellingen (Firewall, virusscanner etc.)

Alvast bedankt,

Jan.

[quote:de0e2eca0a="smold037"]Wie kan me helpen?

Sinds ongeveer een week krijg ik op bepaalde sites steeds een foutmelding van IE 6.0
- n iexplore.exe is een fout opgetreden en moet worden afgesloten. Onze excuses voor dit ongemak -
En dan sluit de browser de site af en kan ik weer helemaal opnieuw beginnen.
Is dit probleem sinds de laatste update van Windows of dit een ander algemeen probleem?
Helpt het eventueel om IE 6.0 helemaal opnieuw te installeren?
Waar kan ik een volledige versie downloaden?
Ik werk nog met Windows XP sp1 omdat het volgens mij een heel gedoe is met sp2 wat betreft veiligheidsinstellingen (Firewall, virusscanner etc.)

Alvast bedankt,

Jan.[/quote:de0e2eca0a]

Hoi.
Heb dit probleem ook gehad, maar heb er ook een goede oplossing voor:

klik hier
:lol:

En over SP2 en de veiligheidsinstellingen: installeer SP2, doe start, uitvoeren, services.msc, schakel microsoft firewall en het beveiligingscentrum uit en je hebt nergens last van :wink:

Kan veroorzaakt worden door een fout in het geheugen, IE is naar mijn ervaring één van de eerste progs die daar nukkig over doet.

Dus even een "memtestje" er overheen laten lopen misschien.

Gr,
Jim

En hoe kom ik aan een memtest?
En wat zie ik daarop en hoe kan ik een eventueel geheugenprobleem oplossen?

Jan.

Beste Eric,

Hieronder de nieuwe HJT, nadat ik de comp. opnieuw opgestart heb.

Wat betreft de Microsoft Updates. Deze heb ik allemaal binnen voor XP SP1. SP2 heb ik nog niet geïnstalleerd omdat ik, zoals ik al zei, bang ben dat de beveiliging van Kaspersky Virusscanner, Preventon Firewall dan niet meer werkt. Verder heb ik gehoord dat telebankieren met Rabobank dan niet meer werkt omdat alle poorten dicht zijn. Je moet maar net weten welke poorten een bepaald programma nodig heeft.
Er wordt ook wel eens geopperd om SP2 te installeren en het beveiligingscentrum en firewall uit te schakelen, dan zou men nergens geen last meer van hebben. Volgens mij werken de updates dan ook niet meer.

Wat is wijsheid?

Logfile of HijackThis v1.99.1
Scan saved at 10:25:35, on 24-8-2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Program Files\Ahead\InCD\InCD.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb12.exe
C:\Program Files\Process Lasso\processgovernor.exe
C:\Program Files\Preventon\Personal Firewall\PFWall.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe
C:\WINDOWS\System32\ctfmon.exe
C:\DOCUME~1\DHR~1.SMO\LOCALS~1\Temp\~ef7194.tmp
C:\Program Files\Process Lasso\ProcessSupervisor.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\HP\Product Assistant\bin\hprblog.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\WgaTray.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\Dhr. Smolders\Mijn documenten\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.planet.nl/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\\NVCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb12.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [ProcessGovernor] C:\Program Files\Process Lasso\processgovernor.exe
O4 - HKLM\..\Run: [Personal Firewall] C:\Program Files\Preventon\Personal Firewall\PFWall.exe
O4 - HKLM\..\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [Realtime Audio Engine] mmrtkrnl.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [ProcessSupervisorGUI] C:\Program Files\Process Lasso\ProcessSupervisor.exe /tray
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Adobe Reader Snelle start.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Snelstart HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra button: (no name) - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab
O16 - DPF: {49232000-16E4-426C-A231-62846947304B} - http://ipgweb.cce.hp.com/rdqemea/downloads/sysinfo.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1156264174109
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.mijnalbum.nl/skin/system/upload/ImageUploader3.cab
O16 - DPF: {C45B1500-7B63-47C2-AB25-C28CB46AFDEE} (Music Manager) - http://img.od2.com/installation/pluginname/music%20manager/MusicManagerPlugin.CAB
O16 - DPF: {DC1FB1EB-BF1E-4C34-8A0A-A2C743CF44E7} (HTMLClientExtension Control) - https://bankieren.rabobank.nl/raip/appl700/HTMLClientExtension.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://www.hema.nl/site/xupload/XUpload.ocx
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: klogon - C:\WINDOWS\System32\klogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r (file missing)
O23 - Service: C-DillaCdaC11BA - C-Dilla Ltd - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe

Vriendelijk groetend,

Jan.

Ik ben er nog steeds niet uit.
Hoe voer ik de memtest uit? Als ik downlaod op memtest86.com dan gebeurt er niets.

Hoe krijg het geheugen, als dat de oorzaak is van bovenstaand probleem, weer op peil?

Bedankt,

Jan.

Ik vond op onderstaande link ook nog een mogelijke oorzaak:

http://www.pcmweb.nl/artikel.jsp?id=1672957

Misschien dus maar gewoon even wachten tot 22 augustus.

Gr,
Jim

klinkt mij meer bekent als een spyware achtig iets. Heb je al wat software geprobeerd zoals Adawere en Hijack this?

Ja, Ad Aware heb ik al laten scannen. Deze kan niets vinden.
Hijackthis heb ik nog niet geprobeerd. Bij deze.

Logfile of HijackThis v1.99.1
Scan saved at 23:43:48, on 20-8-2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Program Files\Ahead\InCD\InCD.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb12.exe
C:\Program Files\Process Lasso\processgovernor.exe
C:\Program Files\Preventon\Personal Firewall\PFWall.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\DOCUME~1\DHR~1.SMO\LOCALS~1\Temp\~ef7194.tmp
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Process Lasso\ProcessSupervisor.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\HP\Product Assistant\bin\hprblog.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\System32\WgaTray.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Dhr. Smolders\Mijn documenten\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.nl/0SENLNL/SAOS01
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.planet.nl/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\\NVCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb12.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [ProcessGovernor] C:\Program Files\Process Lasso\processgovernor.exe
O4 - HKLM\..\Run: [Personal Firewall] C:\Program Files\Preventon\Personal Firewall\PFWall.exe
O4 - HKLM\..\Run: [kav] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKLM\..\Run: [Realtime Audio Engine] mmrtkrnl.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [ProcessSupervisorGUI] C:\Program Files\Process Lasso\ProcessSupervisor.exe /tray
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Adobe Reader Snelle start.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Snelstart HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab
O16 - DPF: {49232000-16E4-426C-A231-62846947304B} - http://ipgweb.cce.hp.com/rdqemea/downloads/sysinfo.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.mijnalbum.nl/skin/system/upload/ImageUploader3.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {C45B1500-7B63-47C2-AB25-C28CB46AFDEE} (Music Manager) - http://img.od2.com/installation/pluginname/music%20manager/MusicManagerPlugin.CAB
O16 - DPF: {DC1FB1EB-BF1E-4C34-8A0A-A2C743CF44E7} (HTMLClientExtension Control) - https://bankieren.rabobank.nl/raip/appl700/HTMLClientExtension.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://www.hema.nl/site/xupload/XUpload.ocx
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: klogon - C:\WINDOWS\System32\klogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r (file missing)
O23 - Service: C-DillaCdaC11BA - C-Dilla Ltd - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe

Zou iemand de zondag 20 augustus ingestuurde Hijackthis willen beoordelen of de oorzaak van het afsluiten IE 6.0 hieraan ligt?

Bedankt.

Jan.

verplaatst naar b&p

Open Kladblok.
Kopieer de tekst uit de onderstaande code box en plak deze in een nieuw document.




[b:6efe3f7b5a]regedit /e peek.txt "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify"
type peek.txt >> reglook.txt
del peek.txt
start notepad reglook.txt[/b:6efe3f7b5a]






Kies Bestand -> Opslaan
Selecteer bij "Opslaan in": Bureaublad
Vul bij "Bestandsnaam" in: [b:6efe3f7b5a]look.bat[/b:6efe3f7b5a]
Selecteer bij "Opslaan als type": Alle bestanden
Klik op "Opslaan".

Dubbelklik op [b:6efe3f7b5a]look.bat[/b:6efe3f7b5a], dat nu op je bureaublad staat.

Kladblok zal openen met een stuk tekst erin. Selecteer het geheel (Bewerken > Alles selecteren), kopieer het en plak het hier in je volgende antwoord.

succes

Hierbij datgene wat hierboven gevraagd is:

Hopenlijk kun je hier iets uithalen:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,\
6c,00,00,00
"Logoff"="ChainWlxLogoffEvent"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Logoff"="CryptnetWlxLogoffEvent"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
"DLLName"="cscdll.dll"
"Logon"="WinlogonLogonEvent"
"Logoff"="WinlogonLogoffEvent"
"ScreenSaver"="WinlogonScreenSaverEvent"
"Startup"="WinlogonStartupEvent"
"Shutdown"="WinlogonShutdownEvent"
"StartShell"="WinlogonStartShellEvent"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"="C:\\WINDOWS\\System32\\klogon.dll"
"Logon"="WLEventStop"
"Startup"="WLEventStart"
"Lock"="WLEventStart"
"Unlock"="WLEventStop"
"Logoff"="WLEventStart"
@=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
"DLLName"="wlnotify.dll"
"Logon"="SCardStartCertProp"
"Logoff"="SCardStopCertProp"
"Lock"="SCardSuspendCertProp"
"Unlock"="SCardResumeCertProp"
"Enabled"=dword:00000001
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
"Asynchronous"=dword:00000000
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Impersonate"=dword:00000000
"StartShell"="SchedStartShell"
"Logoff"="SchedEventLogOff"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
"Logoff"="WLEventLogoff"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001
"DllName"=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
"DLLName"="WlNotify.dll"
"Lock"="SensLockEvent"
"Logon"="SensLogonEvent"
"Logoff"="SensLogoffEvent"
"Safe"=dword:00000001
"MaxWait"=dword:00000258
"StartScreenSaver"="SensStartScreenSaverEvent"
"StopScreenSaver"="SensStopScreenSaverEvent"
"Startup"="SensStartupEvent"
"Shutdown"="SensShutdownEvent"
"StartShell"="SensStartShellEvent"
"PostShell"="SensPostShellEvent"
"Disconnect"="SensDisconnectEvent"
"Reconnect"="SensReconnectEvent"
"Unlock"="SensUnlockEvent"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
"Asynchronous"=dword:00000000
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Impersonate"=dword:00000000
"Logoff"="TSEventLogoff"
"Logon"="TSEventLogon"
"PostShell"="TSEventPostShell"
"Shutdown"="TSEventShutdown"
"StartShell"="TSEventStartShell"
"Startup"="TSEventStartup"
"MaxWait"=dword:00000258
"Reconnect"="TSEventReconnect"
"Disconnect"="TSEventDisconnect"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
"Logon"="WLEventLogon"
"Logoff"="WLEventLogoff"
"Startup"="WLEventStartup"
"Shutdown"="WLEventShutdown"
"StartScreenSaver"="WLEventStartScreenSaver"
"StopScreenSaver"="WLEventStopScreenSaver"
"Lock"="WLEventLock"
"Unlock"="WLEventUnlock"
"StartShell"="WLEventStartShell"
"PostShell"="WLEventPostShell"
"Disconnect"="WLEventDisconnect"
"Reconnect"="WLEventReconnect"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000000
"SafeMode"=dword:00000001
"MaxWait"=dword:ffffffff
"DllName"=hex(2):57,00,67,00,61,00,4c,00,6f,00,67,00,6f,00,6e,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Event"=dword:00000004

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon\Settings]
"Data"=hex:01,00,00,00,d0,8c,9d,df,01,15,d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,\
00,00,5e,89,74,41,02,b0,c4,43,af,48,4f,10,1b,31,71,f2,04,00,00,00,04,00,00,\
00,53,00,00,00,03,66,00,00,a8,00,00,00,10,00,00,00,07,9e,14,48,f1,4a,bd,1b,\
24,6d,2d,17,04,42,77,c6,00,00,00,00,04,80,00,00,a0,00,00,00,10,00,00,00,0a,\
34,4b,2c,25,32,55,97,87,f5,fa,a1,ed,39,2c,ec,08,06,00,00,d2,f7,93,9e,c2,89,\
57,4a,4c,83,1d,ae,6c,d4,f0,2f,18,f6,93,2a,83,71,1c,59,c0,b4,65,68,65,35,34,\
24,fa,aa,62,19,13,2a,e8,88,55,a8,d2,18,60,48,15,63,0a,fd,af,2f,51,12,97,54,\
0a,fa,68,7b,f1,f5,1e,f0,ab,74,af,de,37,d4,24,1b,be,f3,77,a4,9c,08,30,bb,79,\
32,fd,10,35,e4,eb,f2,90,e5,d8,14,ec,24,a5,0f,41,46,e2,fd,c6,c7,be,7e,63,5e,\
5a,99,e6,1c,4f,90,cf,95,3b,ce,34,90,1c,e0,13,82,87,0f,28,fe,4f,af,52,f1,98,\
ec,8d,da,15,c7,c7,ed,ca,e5,5a,12,51,3c,33,ce,98,26,dc,3d,e8,c7,7c,39,ac,52,\
02,27,52,13,e6,a6,42,8a,e2,6b,c7,bd,94,27,23,b8,62,3d,8e,78,c5,f4,60,45,f5,\
61,56,0d,59,e9,ef,c0,d3,29,ad,d7,6d,8d,ba,4a,68,1a,db,ef,2d,21,db,ef,52,91,\
82,5b,5d,d3,12,63,e1,ed,83,23,83,dc,29,59,a3,24,f9,8d,3c,2a,e0,5d,2a,2a,c5,\
35,dc,78,8f,b9,92,63,38,82,55,1e,f3,a6,94,ef,e6,ed,ca,d5,8f,3e,32,02,8b,57,\
03,1b,fb,47,3e,f7,f4,ee,f9,34,04,39,a8,bf,34,80,4c,67,8b,16,03,61,33,b7,9c,\
d2,8a,a3,7c,02,b2,f7,e3,a7,e0,72,4e,8d,ad,27,c8,8b,d4,42,a1,83,72,4e,5c,6f,\
35,97,d6,ba,cb,00,71,b7,ae,df,1d,ca,da,2f,2a,d7,d4,9d,87,e1,e4,3d,15,50,0f,\
44,db,4a,45,21,51,4e,89,37,61,cf,61,50,b5,5f,74,e7,3a,bb,a9,44,da,72,64,11,\
a5,55,46,1f,d8,3c,12,11,25,a4,52,a4,8c,26,ac,5a,86,39,82,d8,44,b5,24,a8,09,\
d1,56,79,99,03,65,d6,35,a4,63,ee,d8,ce,a4,e8,91,7e,0c,ef,d6,11,ca,64,48,ea,\
cc,8f,f6,73,f2,27,2d,fd,fe,d0,ae,ae,b6,e9,c0,9a,e1,1b,10,ab,9f,84,77,de,37,\
0c,e6,62,a8,03,1a,fe,18,6d,3c,6e,7a,1d,e3,0a,3a,80,db,bd,bb,3b,be,60,fb,ed,\
cf,3a,97,90,a3,b0,b1,e8,c5,53,73,3c,32,9a,ae,75,31,0b,3c,f8,7d,25,8d,35,de,\
ce,55,0b,b7,4b,ea,5f,70,15,5d,23,a4,fc,94,5b,e6,df,ad,51,fd,58,d5,6c,1b,41,\
2f,6d,fe,06,80,4d,41,c6,2c,a4,ba,81,3b,0e,a6,83,85,07,76,87,98,18,05,ee,df,\
ef,1e,46,43,13,78,76,8f,ff,24,55,1a,c2,91,9b,e3,10,f0,64,3a,d1,3d,37,77,7c,\
b1,87,e0,9a,86,33,e1,ad,5a,fd,e9,fb,f4,2a,48,7b,a2,46,ce,9e,0a,e4,c1,59,90,\
b3,a4,59,ce,6a,56,cc,64,9d,a5,60,3c,f4,4a,b6,33,f2,29,32,f7,44,35,95,c9,02,\
47,b2,d8,59,b0,9d,fa,63,dc,be,3e,fe,be,e7,96,bb,34,17,6f,5e,a6,60,85,eb,a0,\
c8,34,17,36,12,6c,11,18,b0,8b,3b,90,b2,1e,92,6b,f2,42,70,00,39,de,0f,3e,e2,\
91,4e,31,88,46,a7,73,d7,91,2d,eb,57,3f,47,78,4d,91,25,7a,d0,d9,28,83,92,b6,\
b7,e8,52,59,98,0a,ef,04,2c,c1,f5,57,8f,49,ea,cf,07,ae,42,08,d5,00,db,44,f9,\
46,9d,0f,3e,f7,69,9d,74,25,99,6c,1d,2d,c8,54,ac,68,67,a6,cc,ce,9f,63,de,9a,\
42,fa,d6,9b,c0,39,76,a3,fe,7d,96,31,81,c6,71,a1,c6,2b,0c,b7,df,c2,89,fa,73,\
98,88,0a,51,dd,f1,be,32,16,7f,bc,8f,58,a8,a8,35,b0,3f,c5,02,b4,95,a7,dc,4d,\
57,3d,48,79,4f,20,fd,e1,3e,52,41,44,25,b4,b3,67,5d,df,15,7f,be,b8,f2,23,7a,\
72,75,59,d8,d5,71,e0,aa,b0,0d,07,8a,8a,af,db,9f,91,00,5e,dd,1a,a6,c3,58,da,\
8f,d2,61,90,3f,10,ca,a6,41,62,3e,6a,82,02,35,13,32,b5,44,64,ac,77,29,67,2e,\
24,5d,48,17,6f,0a,40,6c,f8,f0,62,f2,5a,85,86,5d,c9,fe,22,89,20,a3,3e,21,00,\
91,e6,b4,07,a7,84,29,50,f0,e9,51,aa,2d,04,2c,cf,3c,2d,b7,37,01,7c,9c,b1,72,\
08,89,e1,f9,5d,78,47,14,eb,83,82,e3,34,ae,41,e7,f9,9e,99,f4,c6,98,f9,08,07,\
93,b2,b6,29,92,7b,31,dd,7e,52,32,cd,3f,08,50,16,c1,30,d3,22,cf,4e,01,29,86,\
e0,71,3b,51,1e,13,31,08,82,90,ad,b2,ca,01,6a,17,a7,34,31,7b,b0,cd,1a,49,c7,\
64,1e,b8,af,0e,c1,86,e8,2d,6e,3a,9d,86,19,e3,f2,c3,aa,0a,c4,a7,6c,d8,09,c7,\
47,20,ad,4f,97,b7,8a,6d,18,11,65,0f,7d,9f,d0,77,64,7a,94,c7,93,53,c0,84,5b,\
8d,df,b3,0a,c2,1f,a8,85,db,8b,e5,08,8c,44,b0,3c,91,d6,a7,b4,9c,92,d0,24,95,\
66,f0,1e,84,30,99,b3,41,34,2d,55,56,41,dc,b4,35,ef,80,44,16,85,0b,27,27,13,\
2d,d6,bf,34,d4,85,43,f1,a2,9b,de,70,7c,75,bb,f1,ab,cc,a0,33,71,6d,ab,f5,a7,\
e2,73,53,b5,42,f4,97,eb,c2,8d,97,e1,61,6e,c9,0c,05,85,4b,99,41,88,6c,cb,95,\
c0,71,ca,ac,3b,73,98,66,6f,a5,be,3e,e5,d9,b7,33,c4,e9,fd,af,d0,e0,20,e1,0f,\
ca,a4,e6,87,8b,6c,38,ca,73,6f,57,6b,cf,73,33,b3,7f,aa,2e,39,10,8d,1e,31,26,\
42,84,98,5c,88,fc,74,d0,d3,d9,02,2d,32,e6,41,65,00,f1,58,81,8b,4b,62,05,c9,\
93,e3,21,ab,fe,b7,e9,06,84,aa,53,9a,e3,54,00,d6,33,8d,bb,05,66,43,68,97,c2,\
08,da,08,4e,3f,60,05,d3,cc,73,a4,8d,c9,6c,49,7e,26,c4,3d,37,9d,b2,a3,44,e0,\
67,62,86,10,10,e4,f4,5d,41,57,8e,11,22,76,c1,42,14,a0,d1,18,0f,bb,24,5c,94,\
7b,ed,b6,00,f1,e7,81,13,87,e5,71,fa,f4,63,31,ad,5a,21,09,0e,1e,60,9f,87,e2,\
b6,44,5e,77,df,46,ee,06,95,37,3f,8d,2f,39,b4,cf,8f,70,b3,90,77,2c,8e,60,dc,\
a7,9d,06,0d,a9,2a,41,69,0f,31,87,a3,0a,76,e6,ca,4f,c4,5d,9f,ee,97,24,21,20,\
07,e9,94,f0,0f,71,07,26,08,42,59,bf,95,42,6f,62,d5,9f,e7,70,1c,21,26,46,64,\
f2,97,75,1d,15,fa,01,4d,cc,e7,1f,d4,28,01,57,07,d7,93,f8,76,a1,4d,f8,7f,6d,\
e5,eb,5c,86,6c,7f,99,0a,3c,55,ed,23,34,57,be,2a,fd,6a,a8,70,81,a7,19,8b,b2,\
cd,4f,00,3e,0b,af,29,d4,7e,bb,3b,2e,e2,9b,4a,0e,db,1c,a9,09,63,00,c8,69,e6,\
58,66,7d,22,cd,7d,c7,22,8c,82,2a,fe,50,7a,00,d0,7a,9b,db,09,83,b4,39,95,da,\
ca,ab,e8,58,0f,3b,ae,f6,08,9e,c2,09,00,91,6f,74,ce,f1,03,2c,08,ef,34,0e,4d,\
48,26,e6,fd,a5,9c,98,1c,dd,91,9d,e9,ee,68,6f,68,1a,58,22,5b,54,ce,50,5e,91,\
ea,e2,79,00,cf,1b,ef,58,11,e2,79,97,09,14,00,00,00,b8,6d,50,c2,75,91,84,b0,\
b6,47,65,51,05,f2,ab,fa,21,2c,29,a3

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
"DLLName"="wlnotify.dll"
"Logon"="RegisterTicketExpiredNotificationEvent"
"Logoff"="UnregisterTicketExpiredNotificationEvent"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001


Bedankt en vriendelijk groetend,

Jan.

[quote:bb9d495263="smold037"]Er wordt ook wel eens geopperd om SP2 te installeren en het beveiligingscentrum en firewall uit te schakelen, dan zou men nergens geen last meer van hebben. Volgens mij werken de updates dan ook niet meer. [/quote:bb9d495263]ik heb zowel de firewall als de virus scanner uit staan in het beveiligings centrum, maar nog altijd alle updates gehad

Download IEFix.exe en laat die eens runnen.

Laat eens weten of dat gelukt is, als je toch bezig bent. Ik zie geen Java??

Download [b:916e2abae8].
[list:916e2abae8][*:916e2abae8]Scroll omlaag naar : "[i:916e2abae8]The J2SE Runtime Environment (JRE) allows end-users to run Java applications[/i:916e2abae8]".
[*:916e2abae8]Klik op de "[b:916e2abae8]Download[/b:916e2abae8]" knop aan de rechterkant.
[*:916e2abae8]Vink aan: "[b:916e2abae8][i:916e2abae8]Accept[/b:916e2abae8] License Agreement[/i:916e2abae8]".
[*:916e2abae8]De pagina zal herladen.
[*:916e2abae8]Klik op de link om [i:916e2abae8]Windows [b:916e2abae8]Offline[/b:916e2abae8] Installation[/i:916e2abae8] te downloaden met Meerdere-talen, en bewaar het naar je Bureaublad.
[*:916e2abae8]Sluit alle programma's die eventueel open zijn - Zeker je web browser!

>>>>><<<< daar jij geen java hebt hoef je dat ook niet te doen.(verwijderen van de oude software bedoel ik dus)
[*:916e2abae8]Ga dan naar [b:916e2abae8]Start[/b:916e2abae8] > [b:916e2abae8]Configuratiescherm[/b:916e2abae8] > [b:916e2abae8]Software[/b:916e2abae8] en verwijder alle oudere versies van Java uit de Softwarelijst.

[*:916e2abae8]Vink alles aan met Java Runtime Environment (JRE of J2SE) in de naam.
[*:916e2abae8]Klik dan op [b:916e2abae8]Verwijderen[/b:916e2abae8] of op de [b:916e2abae8]Wijzig/Verwijder[/b:916e2abae8] knop.
[*:916e2abae8]Herhaal dit tot alle oudere versies verdwenen zijn.<<<<<<<<<<

ga hier door [b:916e2abae8]<<<<<<<<<<<<<<[/b:916e2abae8]
[*:916e2abae8]Na het verwijderen van alle oudere versies, [b:916e2abae8]herstart[/b:916e2abae8] je pc.
[*:916e2abae8]Dubbelkik vervolgens op [b:916e2abae8]jre-1_5_0_08-windows-i586-p.exe[/b:916e2abae8] op je Bureaublad om de nieuwste versie van Java te installeren.[/list:u:916e2abae8]

Beste Juisterr

Ik krijg bij het opstarten een opstartscherm van Microsoft Update. Dit heb ik weer gewijzigd in www.planet.nl
Verder krijg ik de melding:
Problemen met de webpagina kunnen er voor zorgen dat de pagina onjuist wordt weergegeven of onjuist werkt. U kunt dit bericht voortaan weergeven door te dubbelklikken op het waarschuwingspictogram in de statusbalk.
Fout 'this.nav.sub' is leeg of geen object.

Ik ga vanavond aan de gang met Java.

Het probleem van IE 6.0 doet zich vooralsnog niet voor, maar ik heb de bewuste pagina's nog niet allemaal bezocht.

Wordt vervolgd.

Vriendelijk dank,

Jan.

ja dat je melding tot updaten krijgt verbaasd me niks, je hebt immers geen SP2 en dus mis je nogal wat updates(beveiligings). Misschien kan je beter automatisch laten updaten(je windhoos dus).

Je kan je startpagina toch instellen bij explorer, extra>> opties en invullen .

Beste Eric,

Hieronder de nieuwe look.txt nadat ik Java Runtime 5.0 heb geinstalleerd.
Windows XP SP2 ben ik huiverig voor omdat er zoveel botsingen met mijn eigen beveiliging kunnen ontstaan. De Microsoft Update staat op automatisch. Betekent dit ook dat SP2 automatisch geinstalleerd wordt?

Ik heb enkele sites bezocht en het probleem doet zich vooralsnog niet voor.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,\
6c,00,00,00
"Logoff"="ChainWlxLogoffEvent"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Logoff"="CryptnetWlxLogoffEvent"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
"DLLName"="cscdll.dll"
"Logon"="WinlogonLogonEvent"
"Logoff"="WinlogonLogoffEvent"
"ScreenSaver"="WinlogonScreenSaverEvent"
"Startup"="WinlogonStartupEvent"
"Shutdown"="WinlogonShutdownEvent"
"StartShell"="WinlogonStartShellEvent"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"="C:\\WINDOWS\\System32\\klogon.dll"
"Logon"="WLEventStop"
"Startup"="WLEventStart"
"Lock"="WLEventStart"
"Unlock"="WLEventStop"
"Logoff"="WLEventStart"
@=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
"DLLName"="wlnotify.dll"
"Logon"="SCardStartCertProp"
"Logoff"="SCardStopCertProp"
"Lock"="SCardSuspendCertProp"
"Unlock"="SCardResumeCertProp"
"Enabled"=dword:00000001
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
"Asynchronous"=dword:00000000
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Impersonate"=dword:00000000
"StartShell"="SchedStartShell"
"Logoff"="SchedEventLogOff"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
"Logoff"="WLEventLogoff"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001
"DllName"=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
"DLLName"="WlNotify.dll"
"Lock"="SensLockEvent"
"Logon"="SensLogonEvent"
"Logoff"="SensLogoffEvent"
"Safe"=dword:00000001
"MaxWait"=dword:00000258
"StartScreenSaver"="SensStartScreenSaverEvent"
"StopScreenSaver"="SensStopScreenSaverEvent"
"Startup"="SensStartupEvent"
"Shutdown"="SensShutdownEvent"
"StartShell"="SensStartShellEvent"
"PostShell"="SensPostShellEvent"
"Disconnect"="SensDisconnectEvent"
"Reconnect"="SensReconnectEvent"
"Unlock"="SensUnlockEvent"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
"Asynchronous"=dword:00000000
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Impersonate"=dword:00000000
"Logoff"="TSEventLogoff"
"Logon"="TSEventLogon"
"PostShell"="TSEventPostShell"
"Shutdown"="TSEventShutdown"
"StartShell"="TSEventStartShell"
"Startup"="TSEventStartup"
"MaxWait"=dword:00000258
"Reconnect"="TSEventReconnect"
"Disconnect"="TSEventDisconnect"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
"Logon"="WLEventLogon"
"Logoff"="WLEventLogoff"
"Startup"="WLEventStartup"
"Shutdown"="WLEventShutdown"
"StartScreenSaver"="WLEventStartScreenSaver"
"StopScreenSaver"="WLEventStopScreenSaver"
"Lock"="WLEventLock"
"Unlock"="WLEventUnlock"
"StartShell"="WLEventStartShell"
"PostShell"="WLEventPostShell"
"Disconnect"="WLEventDisconnect"
"Reconnect"="WLEventReconnect"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000000
"SafeMode"=dword:00000001
"MaxWait"=dword:ffffffff
"DllName"=hex(2):57,00,67,00,61,00,4c,00,6f,00,67,00,6f,00,6e,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Event"=dword:00000004

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon\Settings]
"Data"=hex:01,00,00,00,d0,8c,9d,df,01,15,d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,\
00,00,5e,89,74,41,02,b0,c4,43,af,48,4f,10,1b,31,71,f2,04,00,00,00,04,00,00,\
00,53,00,00,00,03,66,00,00,a8,00,00,00,10,00,00,00,07,9e,14,48,f1,4a,bd,1b,\
24,6d,2d,17,04,42,77,c6,00,00,00,00,04,80,00,00,a0,00,00,00,10,00,00,00,0a,\
34,4b,2c,25,32,55,97,87,f5,fa,a1,ed,39,2c,ec,08,06,00,00,d2,f7,93,9e,c2,89,\
57,4a,4c,83,1d,ae,6c,d4,f0,2f,18,f6,93,2a,83,71,1c,59,c0,b4,65,68,65,35,34,\
24,fa,aa,62,19,13,2a,e8,88,55,a8,d2,18,60,48,15,63,0a,fd,af,2f,51,12,97,54,\
0a,fa,68,7b,f1,f5,1e,f0,ab,74,af,de,37,d4,24,1b,be,f3,77,a4,9c,08,30,bb,79,\
32,fd,10,35,e4,eb,f2,90,e5,d8,14,ec,24,a5,0f,41,46,e2,fd,c6,c7,be,7e,63,5e,\
5a,99,e6,1c,4f,90,cf,95,3b,ce,34,90,1c,e0,13,82,87,0f,28,fe,4f,af,52,f1,98,\
ec,8d,da,15,c7,c7,ed,ca,e5,5a,12,51,3c,33,ce,98,26,dc,3d,e8,c7,7c,39,ac,52,\
02,27,52,13,e6,a6,42,8a,e2,6b,c7,bd,94,27,23,b8,62,3d,8e,78,c5,f4,60,45,f5,\
61,56,0d,59,e9,ef,c0,d3,29,ad,d7,6d,8d,ba,4a,68,1a,db,ef,2d,21,db,ef,52,91,\
82,5b,5d,d3,12,63,e1,ed,83,23,83,dc,29,59,a3,24,f9,8d,3c,2a,e0,5d,2a,2a,c5,\
35,dc,78,8f,b9,92,63,38,82,55,1e,f3,a6,94,ef,e6,ed,ca,d5,8f,3e,32,02,8b,57,\
03,1b,fb,47,3e,f7,f4,ee,f9,34,04,39,a8,bf,34,80,4c,67,8b,16,03,61,33,b7,9c,\
d2,8a,a3,7c,02,b2,f7,e3,a7,e0,72,4e,8d,ad,27,c8,8b,d4,42,a1,83,72,4e,5c,6f,\
35,97,d6,ba,cb,00,71,b7,ae,df,1d,ca,da,2f,2a,d7,d4,9d,87,e1,e4,3d,15,50,0f,\
44,db,4a,45,21,51,4e,89,37,61,cf,61,50,b5,5f,74,e7,3a,bb,a9,44,da,72,64,11,\
a5,55,46,1f,d8,3c,12,11,25,a4,52,a4,8c,26,ac,5a,86,39,82,d8,44,b5,24,a8,09,\
d1,56,79,99,03,65,d6,35,a4,63,ee,d8,ce,a4,e8,91,7e,0c,ef,d6,11,ca,64,48,ea,\
cc,8f,f6,73,f2,27,2d,fd,fe,d0,ae,ae,b6,e9,c0,9a,e1,1b,10,ab,9f,84,77,de,37,\
0c,e6,62,a8,03,1a,fe,18,6d,3c,6e,7a,1d,e3,0a,3a,80,db,bd,bb,3b,be,60,fb,ed,\
cf,3a,97,90,a3,b0,b1,e8,c5,53,73,3c,32,9a,ae,75,31,0b,3c,f8,7d,25,8d,35,de,\
ce,55,0b,b7,4b,ea,5f,70,15,5d,23,a4,fc,94,5b,e6,df,ad,51,fd,58,d5,6c,1b,41,\
2f,6d,fe,06,80,4d,41,c6,2c,a4,ba,81,3b,0e,a6,83,85,07,76,87,98,18,05,ee,df,\
ef,1e,46,43,13,78,76,8f,ff,24,55,1a,c2,91,9b,e3,10,f0,64,3a,d1,3d,37,77,7c,\
b1,87,e0,9a,86,33,e1,ad,5a,fd,e9,fb,f4,2a,48,7b,a2,46,ce,9e,0a,e4,c1,59,90,\
b3,a4,59,ce,6a,56,cc,64,9d,a5,60,3c,f4,4a,b6,33,f2,29,32,f7,44,35,95,c9,02,\
47,b2,d8,59,b0,9d,fa,63,dc,be,3e,fe,be,e7,96,bb,34,17,6f,5e,a6,60,85,eb,a0,\
c8,34,17,36,12,6c,11,18,b0,8b,3b,90,b2,1e,92,6b,f2,42,70,00,39,de,0f,3e,e2,\
91,4e,31,88,46,a7,73,d7,91,2d,eb,57,3f,47,78,4d,91,25,7a,d0,d9,28,83,92,b6,\
b7,e8,52,59,98,0a,ef,04,2c,c1,f5,57,8f,49,ea,cf,07,ae,42,08,d5,00,db,44,f9,\
46,9d,0f,3e,f7,69,9d,74,25,99,6c,1d,2d,c8,54,ac,68,67,a6,cc,ce,9f,63,de,9a,\
42,fa,d6,9b,c0,39,76,a3,fe,7d,96,31,81,c6,71,a1,c6,2b,0c,b7,df,c2,89,fa,73,\
98,88,0a,51,dd,f1,be,32,16,7f,bc,8f,58,a8,a8,35,b0,3f,c5,02,b4,95,a7,dc,4d,\
57,3d,48,79,4f,20,fd,e1,3e,52,41,44,25,b4,b3,67,5d,df,15,7f,be,b8,f2,23,7a,\
72,75,59,d8,d5,71,e0,aa,b0,0d,07,8a,8a,af,db,9f,91,00,5e,dd,1a,a6,c3,58,da,\
8f,d2,61,90,3f,10,ca,a6,41,62,3e,6a,82,02,35,13,32,b5,44,64,ac,77,29,67,2e,\
24,5d,48,17,6f,0a,40,6c,f8,f0,62,f2,5a,85,86,5d,c9,fe,22,89,20,a3,3e,21,00,\
91,e6,b4,07,a7,84,29,50,f0,e9,51,aa,2d,04,2c,cf,3c,2d,b7,37,01,7c,9c,b1,72,\
08,89,e1,f9,5d,78,47,14,eb,83,82,e3,34,ae,41,e7,f9,9e,99,f4,c6,98,f9,08,07,\
93,b2,b6,29,92,7b,31,dd,7e,52,32,cd,3f,08,50,16,c1,30,d3,22,cf,4e,01,29,86,\
e0,71,3b,51,1e,13,31,08,82,90,ad,b2,ca,01,6a,17,a7,34,31,7b,b0,cd,1a,49,c7,\
64,1e,b8,af,0e,c1,86,e8,2d,6e,3a,9d,86,19,e3,f2,c3,aa,0a,c4,a7,6c,d8,09,c7,\
47,20,ad,4f,97,b7,8a,6d,18,11,65,0f,7d,9f,d0,77,64,7a,94,c7,93,53,c0,84,5b,\
8d,df,b3,0a,c2,1f,a8,85,db,8b,e5,08,8c,44,b0,3c,91,d6,a7,b4,9c,92,d0,24,95,\
66,f0,1e,84,30,99,b3,41,34,2d,55,56,41,dc,b4,35,ef,80,44,16,85,0b,27,27,13,\
2d,d6,bf,34,d4,85,43,f1,a2,9b,de,70,7c,75,bb,f1,ab,cc,a0,33,71,6d,ab,f5,a7,\
e2,73,53,b5,42,f4,97,eb,c2,8d,97,e1,61,6e,c9,0c,05,85,4b,99,41,88,6c,cb,95,\
c0,71,ca,ac,3b,73,98,66,6f,a5,be,3e,e5,d9,b7,33,c4,e9,fd,af,d0,e0,20,e1,0f,\
ca,a4,e6,87,8b,6c,38,ca,73,6f,57,6b,cf,73,33,b3,7f,aa,2e,39,10,8d,1e,31,26,\
42,84,98,5c,88,fc,74,d0,d3,d9,02,2d,32,e6,41,65,00,f1,58,81,8b,4b,62,05,c9,\
93,e3,21,ab,fe,b7,e9,06,84,aa,53,9a,e3,54,00,d6,33,8d,bb,05,66,43,68,97,c2,\
08,da,08,4e,3f,60,05,d3,cc,73,a4,8d,c9,6c,49,7e,26,c4,3d,37,9d,b2,a3,44,e0,\
67,62,86,10,10,e4,f4,5d,41,57,8e,11,22,76,c1,42,14,a0,d1,18,0f,bb,24,5c,94,\
7b,ed,b6,00,f1,e7,81,13,87,e5,71,fa,f4,63,31,ad,5a,21,09,0e,1e,60,9f,87,e2,\
b6,44,5e,77,df,46,ee,06,95,37,3f,8d,2f,39,b4,cf,8f,70,b3,90,77,2c,8e,60,dc,\
a7,9d,06,0d,a9,2a,41,69,0f,31,87,a3,0a,76,e6,ca,4f,c4,5d,9f,ee,97,24,21,20,\
07,e9,94,f0,0f,71,07,26,08,42,59,bf,95,42,6f,62,d5,9f,e7,70,1c,21,26,46,64,\
f2,97,75,1d,15,fa,01,4d,cc,e7,1f,d4,28,01,57,07,d7,93,f8,76,a1,4d,f8,7f,6d,\
e5,eb,5c,86,6c,7f,99,0a,3c,55,ed,23,34,57,be,2a,fd,6a,a8,70,81,a7,19,8b,b2,\
cd,4f,00,3e,0b,af,29,d4,7e,bb,3b,2e,e2,9b,4a,0e,db,1c,a9,09,63,00,c8,69,e6,\
58,66,7d,22,cd,7d,c7,22,8c,82,2a,fe,50,7a,00,d0,7a,9b,db,09,83,b4,39,95,da,\
ca,ab,e8,58,0f,3b,ae,f6,08,9e,c2,09,00,91,6f,74,ce,f1,03,2c,08,ef,34,0e,4d,\
48,26,e6,fd,a5,9c,98,1c,dd,91,9d,e9,ee,68,6f,68,1a,58,22,5b,54,ce,50,5e,91,\
ea,e2,79,00,cf,1b,ef,58,11,e2,79,97,09,14,00,00,00,b8,6d,50,c2,75,91,84,b0,\
b6,47,65,51,05,f2,ab,fa,21,2c,29,a3

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
"DLLName"="wlnotify.dll"
"Logon"="RegisterTicketExpiredNotificationEvent"
"Logoff"="UnregisterTicketExpiredNotificationEvent"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,33,00,32,00,2e,00,64,00,6c,00,\
6c,00,00,00
"Logoff"="ChainWlxLogoffEvent"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"=hex(2):63,00,72,00,79,00,70,00,74,00,6e,00,65,00,74,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Logoff"="CryptnetWlxLogoffEvent"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll]
"DLLName"="cscdll.dll"
"Logon"="WinlogonLogonEvent"
"Logoff"="WinlogonLogoffEvent"
"ScreenSaver"="WinlogonScreenSaverEvent"
"Startup"="WinlogonStartupEvent"
"Shutdown"="WinlogonShutdownEvent"
"StartShell"="WinlogonStartShellEvent"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
"Asynchronous"=dword:00000000
"Impersonate"=dword:00000000
"DllName"="C:\\WINDOWS\\System32\\klogon.dll"
"Logon"="WLEventStop"
"Startup"="WLEventStart"
"Lock"="WLEventStart"
"Unlock"="WLEventStop"
"Logoff"="WLEventStart"
@=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]
"DLLName"="wlnotify.dll"
"Logon"="SCardStartCertProp"
"Logoff"="SCardStopCertProp"
"Lock"="SCardSuspendCertProp"
"Unlock"="SCardResumeCertProp"
"Enabled"=dword:00000001
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule]
"Asynchronous"=dword:00000000
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Impersonate"=dword:00000000
"StartShell"="SchedStartShell"
"Logoff"="SchedEventLogOff"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy]
"Logoff"="WLEventLogoff"
"Impersonate"=dword:00000000
"Asynchronous"=dword:00000001
"DllName"=hex(2):73,00,63,00,6c,00,67,00,6e,00,74,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn]
"DLLName"="WlNotify.dll"
"Lock"="SensLockEvent"
"Logon"="SensLogonEvent"
"Logoff"="SensLogoffEvent"
"Safe"=dword:00000001
"MaxWait"=dword:00000258
"StartScreenSaver"="SensStartScreenSaverEvent"
"StopScreenSaver"="SensStopScreenSaverEvent"
"Startup"="SensStartupEvent"
"Shutdown"="SensShutdownEvent"
"StartShell"="SensStartShellEvent"
"PostShell"="SensPostShellEvent"
"Disconnect"="SensDisconnectEvent"
"Reconnect"="SensReconnectEvent"
"Unlock"="SensUnlockEvent"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv]
"Asynchronous"=dword:00000000
"DllName"=hex(2):77,00,6c,00,6e,00,6f,00,74,00,69,00,66,00,79,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Impersonate"=dword:00000000
"Logoff"="TSEventLogoff"
"Logon"="TSEventLogon"
"PostShell"="TSEventPostShell"
"Shutdown"="TSEventShutdown"
"StartShell"="TSEventStartShell"
"Startup"="TSEventStartup"
"MaxWait"=dword:00000258
"Reconnect"="TSEventReconnect"
"Disconnect"="TSEventDisconnect"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
"Logon"="WLEventLogon"
"Logoff"="WLEventLogoff"
"Startup"="WLEventStartup"
"Shutdown"="WLEventShutdown"
"StartScreenSaver"="WLEventStartScreenSaver"
"StopScreenSaver"="WLEventStopScreenSaver"
"Lock"="WLEventLock"
"Unlock"="WLEventUnlock"
"StartShell"="WLEventStartShell"
"PostShell"="WLEventPostShell"
"Disconnect"="WLEventDisconnect"
"Reconnect"="WLEventReconnect"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000000
"SafeMode"=dword:00000001
"MaxWait"=dword:ffffffff
"DllName"=hex(2):57,00,67,00,61,00,4c,00,6f,00,67,00,6f,00,6e,00,2e,00,64,00,\
6c,00,6c,00,00,00
"Event"=dword:00000004

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon\Settings]
"Data"=hex:01,00,00,00,d0,8c,9d,df,01,15,d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,\
00,00,5e,89,74,41,02,b0,c4,43,af,48,4f,10,1b,31,71,f2,04,00,00,00,04,00,00,\
00,53,00,00,00,03,66,00,00,a8,00,00,00,10,00,00,00,d6,1a,54,69,eb,bb,13,69,\
18,58,23,49,cb,79,c7,3b,00,00,00,00,04,80,00,00,a0,00,00,00,10,00,00,00,cf,\
98,6f,ad,b0,dc,14,71,fd,46,20,a8,0b,22,7c,b7,08,06,00,00,37,49,12,34,ff,5c,\
57,2b,50,43,b0,f9,11,f3,3c,d3,d4,67,9d,b8,3e,cc,c3,58,87,a9,ad,a1,71,9c,8f,\
b3,aa,fc,dc,31,b3,94,ac,ce,61,81,b4,6b,c0,e7,f4,18,52,52,71,57,c6,05,0f,36,\
5e,74,91,0e,66,8d,69,60,2b,eb,b3,9a,ef,9b,a7,8d,ec,cd,af,6f,90,81,2e,db,d3,\
f4,d6,e1,87,c3,ae,6c,c8,23,1b,9b,db,86,e1,7e,1c,85,76,55,07,46,b2,4b,ab,42,\
9b,04,08,4e,53,e7,c3,be,77,30,94,29,94,c0,3b,df,89,97,c5,a2,e6,99,c6,61,76,\
7d,ce,ca,2d,8e,9d,4b,a5,56,49,fe,74,51,31,2d,83,d5,f1,d4,d2,30,60,e4,9e,7d,\
9a,3d,bd,ac,89,35,17,d7,54,18,26,ef,29,ab,ab,55,73,d5,e8,13,ff,02,9a,19,63,\
c0,92,c7,36,e7,14,64,c7,76,77,cc,80,b2,4a,a5,27,26,18,eb,6f,b6,a4,ac,b5,44,\
e0,62,81,55,f5,17,c2,5d,57,00,48,82,43,9a,f2,84,76,c5,40,2b,b4,7a,bd,4d,a3,\
41,52,da,d6,e8,b3,72,0d,a0,3e,4a,e9,64,5d,76,0f,49,fa,49,80,1f,54,ea,36,93,\
05,23,c8,3d,1f,3b,d2,94,94,4b,6c,0b,11,47,ac,06,6e,d1,35,b5,71,e6,49,f0,53,\
81,5e,b7,ab,05,69,ec,6b,c2,a2,c1,a2,43,f1,cb,64,b2,ef,0b,58,70,20,fa,d2,5d,\
ff,6e,88,a7,74,b5,c9,97,8a,de,8f,85,ed,fc,30,6f,3d,a6,e0,5c,d3,8b,c5,94,4c,\
8f,e9,0b,16,3c,ce,39,1b,15,32,f2,eb,77,ff,46,8d,e9,45,29,d1,f7,58,2b,e1,04,\
7c,79,8c,85,84,fb,59,5e,55,6c,33,02,62,19,96,10,31,0b,b1,07,f8,ab,aa,10,c3,\
94,05,4f,b2,66,e3,d1,5f,b0,7f,bf,e8,2e,95,a8,eb,92,6e,ee,bf,67,2e,92,27,af,\
81,1e,69,23,00,fc,95,54,61,38,ff,c0,28,98,e1,72,e9,81,0d,23,44,17,ab,6b,af,\
5f,f3,7f,2f,ab,56,12,0d,2f,23,f9,19,c2,16,ea,a6,07,fd,16,25,7f,0e,8d,1d,b2,\
59,ee,c6,26,66,71,49,22,7c,27,12,9b,0c,ae,eb,8a,78,42,7c,f3,84,5e,2d,aa,b0,\
b7,51,5f,63,ce,23,40,f7,e1,a8,45,fe,9a,83,f9,6e,c6,14,41,a7,e5,f0,aa,37,b7,\
d9,58,f8,01,38,86,09,40,06,a8,69,30,ac,e5,aa,59,03,3a,0e,bb,ed,83,5f,18,f9,\
e2,23,fc,17,a3,d4,95,a4,d7,8c,d1,4f,aa,30,0b,69,f3,19,76,50,ef,a2,19,50,0d,\
01,57,36,c9,83,af,a4,12,a6,d9,44,59,a5,f7,6d,89,78,5f,f3,3f,af,1c,82,f1,23,\
56,86,b7,f3,4a,22,9e,08,94,75,43,44,18,f7,43,6d,bb,1a,6b,3d,07,98,6a,31,b8,\
e9,b5,e3,a0,0e,6c,c3,d7,38,0a,4b,05,08,3a,cf,19,ba,61,2f,6d,2f,21,d1,dd,d1,\
62,b9,b0,0a,d6,21,73,61,e1,93,e7,87,e3,e9,72,54,8b,10,e4,4c,2c,c5,15,30,bb,\
60,8a,9b,57,ca,c1,d1,8e,d0,4c,88,5b,31,7b,46,2d,95,48,b5,dd,d7,51,90,1e,ed,\
6a,55,19,3b,49,59,34,61,25,04,23,9c,de,87,18,04,23,f2,de,b7,d1,54,ed,5f,55,\
68,60,0f,62,cc,d2,ea,6b,ff,cb,e5,cb,cf,38,af,0e,ab,d1,bc,59,be,73,0f,0c,fa,\
c4,ff,19,68,86,f7,78,d2,d9,6e,9d,b8,1b,0d,d4,74,cf,76,8d,4d,a2,54,bb,85,e1,\
09,aa,2a,5a,01,ec,bb,52,8f,1e,55,4a,e0,d2,be,51,d1,81,90,fe,9b,0d,a6,1e,b4,\
90,90,2e,fe,b8,05,7f,a9,7f,7e,23,67,44,d1,55,fb,b0,4e,f0,de,dc,0c,5a,df,75,\
9a,20,d5,bf,86,63,59,5f,28,d3,20,31,25,e2,0e,2e,b5,27,f1,35,e3,2a,db,28,26,\
dc,0f,04,f3,60,a4,a2,e7,8f,e2,d9,f6,ef,92,63,27,04,e8,bf,fb,6d,8f,75,51,ba,\
9f,45,47,4b,f6,02,1b,83,63,80,89,db,2e,20,6e,30,58,80,24,57,68,5b,54,fa,16,\
95,e4,05,25,53,b2,10,50,ea,10,4e,ab,2f,f2,a4,c7,a7,f4,77,9f,1e,46,26,9d,ff,\
e8,10,7b,87,f1,34,fb,e9,d4,d1,55,a6,82,e0,57,56,ef,b4,57,d8,bb,9e,68,0c,5d,\
2f,48,d7,fe,b4,40,6b,a4,99,af,fe,65,96,70,f8,4a,56,bc,cf,41,12,15,14,0b,44,\
0e,0f,c4,b5,d8,ec,16,0b,e9,8c,14,f6,d1,bd,ff,49,3a,8e,2d,17,ba,37,13,f4,08,\
cc,92,81,fa,b3,88,57,53,a7,8e,fd,93,5a,38,c8,f6,f9,fb,9e,92,31,69,67,12,90,\
7c,3e,8a,d3,2f,70,c2,cf,68,d4,16,e7,2e,22,66,71,97,23,7a,43,51,e6,71,ee,19,\
9c,4e,77,74,7b,2c,c1,06,d0,ff,31,da,0b,3f,3d,cc,63,33,1d,b3,c5,5f,bb,a5,87,\
27,51,a9,cb,19,2e,3b,ad,ad,25,3c,19,72,1b,87,8c,e3,8b,06,8e,34,dd,87,d3,5b,\
2e,95,13,0a,01,50,92,67,2c,d5,6c,7d,5d,63,15,fe,55,41,b2,d6,49,1f,d3,07,b8,\
a8,ac,21,74,3a,a8,22,25,48,24,64,30,a8,bc,e3,af,09,9f,c0,25,47,8c,7b,b6,ef,\
77,98,c8,d1,12,af,b6,4a,4a,73,70,ab,83,4b,c4,ab,41,e5,b8,1d,9c,a6,54,dc,0d,\
07,28,a4,d2,71,c1,69,c2,f4,e5,c4,b7,a2,9e,97,4c,b3,52,c5,cf,2f,31,6c,93,d2,\
bd,9e,3f,6c,9c,c4,02,bb,a9,3f,40,fb,b1,bb,61,3a,a2,ea,a8,9e,8b,b7,59,bf,3a,\
a6,a5,b2,e7,c9,4e,8c,cd,e6,56,1f,8f,6c,15,79,13,46,67,44,5a,bd,ca,7f,0d,f4,\
44,ba,8a,f9,63,dd,8b,ec,a0,59,d5,53,1e,20,3a,a4,35,0d,d5,31,c1,59,82,51,dd,\
45,b0,95,58,30,dd,2d,cc,7b,05,c7,ac,a8,65,dd,0b,57,7f,30,6d,fa,e6,c5,92,05,\
37,c7,77,2e,39,60,79,81,5c,f1,c1,dc,fb,9c,5a,e5,c8,8c,61,af,82,52,3d,9f,50,\
e3,16,a6,07,40,26,45,65,43,60,95,af,7e,bf,2c,44,de,87,7c,b9,23,58,f0,fe,20,\
02,f7,d0,a2,9f,25,cb,6e,7c,f1,ce,bb,a2,f0,3b,4f,1a,78,ef,5e,34,5e,71,9e,d3,\
f4,48,e2,be,fd,ed,21,23,94,f0,46,5c,bb,9d,d6,ca,fb,a9,85,c1,94,f5,39,05,7f,\
38,e9,fb,5a,fd,74,c3,40,f7,f5,69,aa,4a,04,05,fd,76,3c,d0,c6,d4,c2,64,3c,3e,\
10,b6,ee,55,96,8b,12,c1,2b,08,b0,83,a6,cd,e1,3d,21,93,53,9f,f7,4c,aa,dd,70,\
8c,31,79,2b,d9,78,5f,0a,be,e3,74,9d,3c,2d,0c,f9,31,a9,e5,1d,67,93,91,5f,97,\
bb,c0,96,dc,e3,99,08,8d,f3,75,06,b4,32,7c,3f,d8,5d,72,bc,27,ee,4a,70,e7,3f,\
97,d7,41,66,f6,a6,3e,6d,7f,44,5a,a1,07,02,62,86,2a,77,0a,41,e0,22,29,2c,e7,\
e6,c7,9e,b3,07,96,a8,ea,21,ea,7b,e8,24,b4,0a,c4,13,21,29,90,5e,24,dc,77,3b,\
b3,c6,b4,92,c2,84,8d,fa,ba,60,82,b5,71,14,00,00,00,3d,19,c5,20,0b,9e,35,ce,\
eb,4f,19,86,38,5a,56,e6,6d,cc,4f,6e

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon]
"DLLName"="wlnotify.dll"
"Logon"="RegisterTicketExpiredNotificationEvent"
"Logoff"="UnregisterTicketExpiredNotificationEvent"
"Impersonate"=dword:00000001
"Asynchronous"=dword:00000001

Vriendelijk bedankt,

Jan.

ga eerst maar naar windows update pagina en haal daar SP2 op, en daarna al de updates. Er zijn intussen heel veel beveiligings gaten gedicht door ome bill gates en die zijn bij jou niet gedicht dus je systeem is ondanks jou beveiling niet safe.

geef nog eens een HJT logje aub.