Mooi. Geen TDSS-rootkit aanwezig.

Indien je Taakbeheer opstart, wat wordt dan vermeld op de onderste regel in het venster met betrekking tot het aantal processen en CPU-gebruik?

Processen 56

CPU tussen de nul en 100% meer hoger als laag

Wie weet raad: Ik heb heel veel virus - malware scanners mijn systeem laten scannen, tot nu toe geen succes.

Na veel berichten hier op comp. totaal gelezen te hebben heb ik Mbam en combofix gebruikt, deze hebben wel wat gevonden, maar het probleem van het onbekende verzenden van pakketten gaat steeds maar door en is niet op gelost. De snelheid gaat van 54 Mbps terug naar 1 Mbps.

Graag raad

bijvoorbaat mijn dank

Zijn er meerdere mensen die gebruik maken van je draadloze netwerk?

Hier zijn overigens nog wat tooltjes te vinden om te kijken naar de processen en het netwerk verkeer.
http://technet.microsoft.com/en-us/sysinternals/default.aspx
Of je kan kijken naar Netstumbler

[b:fa4a41d95f]download en installeer HijackThis Versie 2.04[/b:fa4a41d95f] (klik)
[list:fa4a41d95f]• Installeer HijackThis op de aangegeven lokatie - alleen dan kan HijackThis back-ups maken!
• N.B.: Gebruikers/sters van Windows Vista en Windows 7 gaan naar de installatielokatie van HijackThis, klikken hijackthis.exe met rechts aan, kiezen Eigenschappen, klikken op de tab Comptabiliteit en zetten dan een vinkje bij Als Administrator uitvoeren.
• Sluit nu alle openstaande vensters en start vervolgens [b:fa4a41d95f]HijackThis[/b:fa4a41d95f] en kies voor [b:fa4a41d95f]Do a system scan and save a logfile[/b:fa4a41d95f]
• Kopieer en plak de inhoud van de logfile in je aansluitende bericht.[/list:u:fa4a41d95f]

Hallo Abraham54
hier de logfile



Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:55:02, on 22-10-2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Security Essentials\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Maxtor\Schedule2\schedul2.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\KPN\bin\sprtsvc.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Maxtor\MaxBlast\MaxBlastMonitor.exe
C:\Program Files\Maxtor\MaxBlast\TimounterMonitor.exe
C:\Program Files\Common Files\Maxtor\Schedule2\schedhlp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Cobian Backup 9\Cobian.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\Program Files\Creative\Mouse Optical\mouse_2k.exe
C:\Program Files\KPN\bin\sprtcmd.exe
C:\Program Files\KPN\KPN Update\KPNAssistentUpdater.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe
C:\Program Files\Cobian Backup 9\cbInterface.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
R3 - URLSearchHook: (no name) - *{EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [MaxBlastMonitor.exe] C:\Program Files\Maxtor\MaxBlast\MaxBlastMonitor.exe
O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Maxtor\MaxBlast\TimounterMonitor.exe
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Maxtor\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Cobian Backup 9] "C:\Program Files\Cobian Backup 9\Cobian.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [OSSelectorReinstall] C:\Program Files\Common Files\Acronis\Acronis Disk Director\oss_reinstall.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [CreativeMouse ] C:\Program Files\Creative\Mouse Optical\mouse_2k.exe
O4 - HKLM\..\Run: [KPN] "C:\Program Files\KPN\bin\sprtcmd.exe" /P KPN
O4 - HKLM\..\Run: [KPNAssistentUpdater] C:\Program Files\KPN\KPN Update\KPNAssistentUpdater.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [MSSE] "C:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Nikon Monitor.lnk = C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1202218963312
O16 - DPF: {A42BE519-4C98-480F-ADCB-346C635F51B0} (ABABSecureClient6.ctlSecureClient) - https://mijn.abab.nl/download/ABABSecureClient6.CAB
O16 - DPF: {A9F8D9EC-3D0A-4A60-BD82-FBD64BAD370D} (DDRevision Class) - http://h20264.www2.hp.com/ediags/dd/install/HPDriverDiagnosticsxp2k.cab
O16 - DPF: {B1E2B96C-12FE-45E2-BEF1-44A219113CDD} - http://www.superadblocker.com/activex/sabspx.cab
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E7DAA261-8195-4606-8342-B949E1D1B2E3} (ABABSecureClient.ctlSecureClient) - https://mijn.abab.nl/download/ABABSecureClient5.CAB
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - avgrsstx.dll (file missing)
O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Maxtor\Schedule2\schedul2.exe
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Google Update Service (gupdate1c98601afa32044) (gupdate1c98601afa32044) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Media Jukebox 14 Service - J. River, Inc. - C:\Program Files\J River\Media Jukebox 14\JRService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: SupportSoft Sprocket Service (KPN) (sprtsvc_KPN) - SupportSoft, Inc. - C:\Program Files\KPN\bin\sprtsvc.exe
O23 - Service: UPnPService - Magix AG - C:\Program Files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

–
End of file - 11136 bytes

Hallo Tomvdlee,

Er zijn meerdere gebrukers van het systeem na mij nog 1.
Ik heb weinig kennis van alle tool programm's. Wat ik nog wel gedaan heb. De computer opgestart in veilige Modus. Mbam en AVG gedraaid ook hier werd niets gevonden. Ben vervolgens over het net gaan surfen wat dingetjes gevonden. De belangrijkste vond ik wel, dat er programmatje op je systeem gezet worden die zich gedragen als een normaal werkend programma. Ook werd daarbij vermeld dat het een hoop geld en tijd kost om dit soort programma's op vinden. Conclusie ik ga alles er maar opnieuw opzetten.

Dank voor je informatie

Hallo platox, je log ziet er gewoon goed uit!

Maar doe het volgende:

Download ComboFix van één van deze locaties:

[b:fad1bbcfc9]Bleepingcomputer[/b:fad1bbcfc9]

[b:fad1bbcfc9]ForoSpyware[/b:fad1bbcfc9]

Hallo Abraham54

Alles gedaan wat je beschreven heb (nog even een nieuwe update van Combofix gedaan) situatie is nog steeds het zelfde.

Wat ik zo op internet gelezen heb zijn dit programmatjes die zich dus danig gedragen dat ze op gewone programma's lijken vandaar dat ik denk dat het er niet met een of ander programma er af te halen is. Dus ik denk maar dat ik alles er opnieuw op ga zetten.

Hier nog de logfile van Combofix

ComboFix 10-10-22.05 - P. Tax 23-10-2010 11:18:48.2.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.31.1043.18.1023.449 [GMT 2:00]
Gestart vanuit: c:\documents and settings\P. Tax\Bureaublad\ComboFix.exe
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: Microsoft Security Essentials *On-access scanning disabled* (Updated) {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
FW: COMODO Firewall Pro *disabled* {043803A3-4F86-4ef6-AFC5-F6E02A79969B}
FW: ZoneAlarm Pro Firewall *disabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}
.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\QUAD Utilities

.
(((((((((((((((((((( Bestanden Gemaakt van 2010-09-23 to 2010-10-23 ))))))))))))))))))))))))))))))
.

2010-10-23 07:51 . 2010-10-07 23:21 6146896 —-a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{A5E1437C-F151-4912-B0B1-0C46C9C951B2}\mpengine.dll
2010-10-22 08:00 . 2010-10-22 14:31 ——– d–h–r- c:\documents and settings\P. Tax\Onlangs geopend
2010-10-18 17:53 . 2010-10-18 17:53 ——– d—–w- c:\documents and settings\P. Tax\Application Data\Wireshark
2010-10-18 17:27 . 2010-10-18 17:27 ——– d—–w- c:\program files\WinPcap
2010-10-18 17:26 . 2010-10-18 17:27 ——– d—–w- c:\program files\Wireshark
2010-10-18 11:38 . 2010-10-07 23:21 6146896 —-a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2010-10-18 10:47 . 2010-10-18 10:47 388096 —-a-r- c:\documents and settings\P. Tax\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2010-10-18 07:01 . 2010-10-18 07:01 ——– d—–w- c:\documents and settings\P. Tax\Application Data\Malwarebytes
2010-10-18 07:01 . 2010-04-29 13:39 38224 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-10-18 07:01 . 2010-10-18 07:01 ——– d—–w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-10-18 07:01 . 2010-04-29 13:39 20952 —-a-w- c:\windows\system32\drivers\mbam.sys
2010-10-18 07:01 . 2010-10-18 07:01 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2010-10-18 05:56 . 2010-10-18 05:56 22457344 —-a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\LocalCopy\{FAF128B6-9443-E6A0-09D8-1557C384C1D7}-6910c6.msp
2010-10-17 10:51 . 2010-10-19 20:51 222080 ——w- c:\windows\system32\MpSigStub.exe
2010-10-17 10:35 . 2010-10-17 10:36 ——– d—–w- c:\program files\Microsoft Security Essentials
2010-10-15 17:07 . 2010-10-15 17:07 ——– d—–w- c:\program files\Enigma Software Group
2010-10-15 09:03 . 2010-09-18 06:53 953856 -c—-w- c:\windows\system32\dllcache\mfc40u.dll
2010-10-15 09:03 . 2010-09-18 06:53 974848 -c—-w- c:\windows\system32\dllcache\mfc42.dll
2010-10-15 08:54 . 2010-08-23 16:13 617472 -c—-w- c:\windows\system32\dllcache\comctl32.dll
2010-10-15 08:53 . 2010-10-15 08:53 ——– d–h–w- c:\windows\PIF
2010-10-15 08:22 . 2010-10-15 08:22 ——– d—–w- c:\program files\Sophos
2010-10-01 14:22 . 2010-10-01 14:22 ——– d—–w- c:\windows\system32\sda
2010-10-01 14:22 . 2010-03-04 08:30 313888 —-a-r- c:\windows\system32\RtsUStor.dll
2010-10-01 14:22 . 2009-08-03 08:45 249856 —-a-r- c:\windows\system32\RtsUCcid.dll
2010-10-01 14:21 . 2010-03-04 08:30 9112096 ——r- c:\windows\system32\RTSUSTORicon.dll
2010-10-01 14:21 . 2010-03-12 03:23 189984 ——r- c:\windows\system32\drivers\RtsUStor.sys
2010-10-01 14:21 . 2009-08-10 04:45 44032 ——r- c:\windows\system32\drivers\RtsUCcid.sys
2010-10-01 14:21 . 2009-03-04 08:45 17536 ——r- c:\windows\system32\drivers\RtsUIr.sys
2010-10-01 14:21 . 2010-10-01 14:21 ——– d—–w- c:\program files\Realtek
2010-09-25 19:05 . 2010-09-25 19:05 ——– d—–w- c:\documents and settings\LocalService\Application Data\J River
2010-09-25 19:03 . 2010-07-15 21:28 621056 ——w- c:\windows\system32\MJ14.exe
2010-09-25 19:03 . 2008-07-12 06:18 3851784 —-a-w- c:\windows\system32\D3DX9_39.dll

.
((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-13 10:56 . 2010-03-19 14:16 16968 —-a-w- c:\windows\system32\drivers\hitmanpro35.sys
2010-09-18 10:23 . 2006-03-02 12:00 974848 —-a-w- c:\windows\system32\mfc42u.dll
2010-09-18 06:53 . 2006-03-02 12:00 974848 —-a-w- c:\windows\system32\mfc42.dll
2010-09-18 06:53 . 2006-03-02 12:00 954368 —-a-w- c:\windows\system32\mfc40.dll
2010-09-18 06:53 . 2006-03-02 12:00 953856 —-a-w- c:\windows\system32\mfc40u.dll
2010-09-10 05:52 . 2006-03-02 12:00 916480 —-a-w- c:\windows\system32\wininet.dll
2010-09-10 05:52 . 2006-03-02 12:00 43520 —-a-w- c:\windows\system32\licmgr10.dll
2010-09-10 05:52 . 2006-03-02 12:00 1469440 —-a-w- c:\windows\system32\inetcpl.cpl
2010-09-01 11:52 . 2006-03-02 12:00 285824 —-a-w- c:\windows\system32\atmfd.dll
2010-09-01 07:57 . 2006-03-02 12:00 1852928 —-a-w- c:\windows\system32\win32k.sys
2010-08-28 14:35 . 2010-08-28 14:35 3527680 —-a-w- c:\windows\system32\M2LU_Server.exe
2010-08-28 14:34 . 2010-08-28 14:34 1120768 —-a-w- c:\windows\system32\M2ElevatedCalls.dll
2010-08-27 08:03 . 2006-03-02 12:00 119808 —-a-w- c:\windows\system32\t2embed.dll
2010-08-27 05:55 . 2006-03-02 12:00 99840 —-a-w- c:\windows\system32\srvsvc.dll
2010-08-27 01:43 . 2008-05-05 05:25 5632 —-a-w- c:\windows\system32\xpsp4res.dll
2010-08-26 13:39 . 2006-03-02 12:00 357248 —-a-w- c:\windows\system32\drivers\srv.sys
2010-08-23 16:13 . 2006-03-02 12:00 617472 —-a-w- c:\windows\system32\comctl32.dll
2010-08-17 13:17 . 2006-03-02 12:00 58880 —-a-w- c:\windows\system32\spoolsv.exe
2010-08-16 08:45 . 2006-03-02 12:00 590848 —-a-w- c:\windows\system32\rpcrt4.dll
.

((((((((((((((((((((((((((((( SnapShot@2010-10-18_08.34.20 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-10-23 08:59 . 2010-10-23 08:59 16384 c:\windows\Temp\Perflib_Perfdata_7f0.dat
+ 2010-06-25 17:03 . 2010-06-25 17:03 53299 c:\windows\system32\pthreadVC.dll
+ 2010-06-25 17:07 . 2010-06-25 17:07 35088 c:\windows\system32\drivers\npf.sys
+ 2008-07-13 09:37 . 2010-10-23 07:56 4212 c:\windows\system32\zllictbl.dat
- 2008-07-13 09:37 . 2010-10-18 08:04 4212 c:\windows\system32\zllictbl.dat
+ 2010-06-25 17:07 . 2010-06-25 17:07 281104 c:\windows\system32\wpcap.dll
+ 2010-06-25 17:07 . 2010-06-25 17:07 100880 c:\windows\system32\Packet.dll
+ 2010-10-18 10:47 . 2010-10-18 10:47 1094656 c:\windows\Installer\712048.msi
.
((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-02-23 68856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-01-15 13680640]
"nwiz"="nwiz.exe" [2009-01-15 1657376]
"MaxBlastMonitor.exe"="c:\program files\Maxtor\MaxBlast\MaxBlastMonitor.exe" [2007-09-03 1191752]
"AcronisTimounterMonitor"="c:\program files\Maxtor\MaxBlast\TimounterMonitor.exe" [2007-09-03 1966800]
"Acronis Scheduler2 Service"="c:\program files\Common Files\Maxtor\Schedule2\schedhlp.exe" [2007-08-30 148760]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"Cobian Backup 9"="c:\program files\Cobian Backup 9\Cobian.exe" [2008-07-03 579584]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-01-15 86016]
"OSSelectorReinstall"="c:\program files\Common Files\Acronis\Acronis Disk Director\oss_reinstall.exe" [2007-02-22 2209224]
"ZoneAlarm Client"="c:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2009-09-23 1011080]
"AVG9_TRAY"="c:\progra~1\AVG\AVG9\avgtray.exe" [2010-10-05 2067808]
"CreativeMouse "="c:\program files\Creative\Mouse Optical\mouse_2k.exe" [2003-06-27 503808]
"KPN"="c:\program files\KPN\bin\sprtcmd.exe" [2008-06-06 198184]
"KPNAssistentUpdater"="c:\program files\KPN\KPN Update\KPNAssistentUpdater.exe" [2010-08-28 1964928]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]
"MSSE"="c:\program files\Microsoft Security Essentials\msseces.exe" [2010-09-15 1094224]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\P. Tax\Menu Start\Programma's\Opstarten\
Nikon Monitor.lnk - c:\program files\Common Files\Nikon\Monitor\NkMonitor.exe [2007-10-18 479232]

c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2006-2-19 288472]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2010-07-17 08:37 12536 —-a-w- c:\windows\system32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LMIinit]
2008-10-16 19:35 87352 —-a-w- c:\windows\system32\LMIinit.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\Program Files\\FrostWire\\FrostWire.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"=
"c:\\Program Files\\KPN\\agent\\bin\\bcont.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"4662:TCP"= 4662:TCP:emule
"4672:TCP"= 4672:TCP:emule

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)

R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [13-7-2008 12:03 216400]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [20-3-2009 12:43 243024]
R2 avg9wd;AVG Free WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [17-7-2010 10:37 308136]
R2 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [25-6-2010 19:07 35088]
R2 SBKUPNT;SBKUPNT;c:\windows\system32\drivers\SBKUPNT.SYS [14-1-2009 11:13 14976]
R2 sprtsvc_KPN;SupportSoft Sprocket Service (KPN);c:\program files\KPN\bin\sprtsvc.exe [6-6-2008 16:08 202016]
R3 RTL8187B;TG123g USB Wireless Adapter;c:\windows\system32\drivers\RTL8187B.sys [28-7-2010 14:44 264576]
S2 AKEProtect;AKEProtect;\??\c:\program files\Anti Keylogger Elite\AKEProtect.sys –> c:\program files\Anti Keylogger Elite\AKEProtect.sys [?]
S2 gupdate1c98601afa32044;Google Update Service (gupdate1c98601afa32044);c:\program files\Google\Update\GoogleUpdate.exe [3-2-2009 15:16 133104]
S2 LMIInfo;LogMeIn Kernel Information Provider;\??\c:\program files\LogMeIn\x86\RaInfo.sys –> c:\program files\LogMeIn\x86\RaInfo.sys [?]
S3 esgiguard;esgiguard;\??\c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys –> c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [?]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files\MAGIX\Common\Database\bin\fbserver.exe [10-10-2009 15:37 1527900]
S3 Media Jukebox 14 Service;Media Jukebox 14 Service;c:\program files\J River\Media Jukebox 14\JRService.exe [25-9-2010 21:03 379400]
S3 MEMSWEEP2;MEMSWEEP2;\??\c:\windows\system32\29.tmp –> c:\windows\system32\29.tmp [?]
S3 PciCon;PciCon;\??\d:\pcicon.sys –> d:\PciCon.sys [?]
S3 RSUSBCCID;Realtek Smartcard Reader Driver;c:\windows\system32\drivers\RtsUCcid.sys [1-10-2010 16:21 44032]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\drivers\RtsUStor.sys [1-10-2010 16:21 189984]
S3 RtsUIr;Realtek IR Driver;c:\windows\system32\drivers\RtsUIr.sys [1-10-2010 16:21 17536]
S3 UPnPService;UPnPService;c:\program files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe [10-10-2009 15:43 544768]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [28-3-2009 16:24 721904]
.
Inhoud van de 'Gedeelde Taken' map

2010-08-10 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

2010-10-23 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-02-13 10:36]

2010-10-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-02-03 13:16]

2010-10-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-02-03 13:16]
.
.
——- Bijkomende Scan ——-
.
uStart Page = about:blank
IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
DPF: {A42BE519-4C98-480F-ADCB-346C635F51B0} - hxxps://mijn.abab.nl/download/ABABSecureClient6.CAB
DPF: {E7DAA261-8195-4606-8342-B949E1D1B2E3} - hxxps://mijn.abab.nl/download/ABABSecureClient5.CAB
FF - ProfilePath - c:\documents and settings\P. Tax\Application Data\Mozilla\Firefox\Profiles\wqm55bgi.default\
FF - component: c:\program files\AVG\AVG9\Firefox\components\avgssff.dll
FF - plugin: c:\documents and settings\All Users\Application Data\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll
FF - plugin: c:\program files\Google\Update\1.2.183.23\npGoogleOneClick8.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

—- FIREFOX POLICIES —-
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn–mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn–mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-10-23 11:24
Windows 5.1.2600 Service Pack 3 NTFS

scannen van verborgen processen …

scannen van verborgen autostart items …

scannen van verborgen bestanden …

Scan succesvol afgerond
verborgen bestanden: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\MEMSWEEP2]
"ImagePath"="\??\c:\windows\system32\29.tmp"
.
——————— VERGRENDELDE REGISTER SLEUTELS ———————

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10k_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•¤|ÿÿÿÿ•¤|ù•9~*]
"3140110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
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
.
——————— DLLs Geladen Onder Lopende Processen ———————

- - - - - - - > 'winlogon.exe'(836)
c:\windows\system32\LMIinit.dll
c:\windows\system32\LMIRfsClientNP.dll

- - - - - - - > 'lsass.exe'(896)
c:\windows\system32\relog_ap.dll

- - - - - - - > 'explorer.exe'(2596)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\windows\system32\LMIRfsClientNP.dll
.
Voltooingstijd: 2010-10-23 11:30:20
ComboFix-quarantined-files.txt 2010-10-23 09:30
ComboFix2.txt 2010-10-18 08:38

Pre-Run: 53.333.970.944 bytes beschikbaar
Post-Run: 53.329.260.544 bytes beschikbaar

WindowsXP-KB310994-SP2-Home-BootDisk-NLD.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /fastdetect

- - End Of File - - 8BF17489CABFBD7A7DE89FA2C10E640E

Vertel eens wat meer over die pakketten die volgens jou verzonden worden.

En ook hoe je dat constateert.


Ga NetSpeedMonitor gebruiken!

http://www.floriangilles.com/software/netspeedmonitor[b:e5572b63df][/b:e5572b63df]

Pakketten die verzonden worden:
De computer is traag en heeft ontzettend lang nodig om een site te openen of E-mail ter verzenden of te ontvangen.

Bij status van Draadloze Netwerkverbinding zie je duitdelijk de snelheid terug lopen naar 1Mbps.

Bij verzenden van E-mail wordt aangeven dat er drie taken worden uitgevoerd dit klopt zo wie zo niet want dit behoren er twee te zijn. Wat jee ook ziet bij verzenden en ontvangen is dat de balk die mee loopt eerst naar rechts gaat daarna weer een stuk terug loopt dan weer verder gaat naar rechts maar dat het allemaal heel erg lang duurt.

Al deze reacties van Internet en E-mail heb ik daar voor niet gehad.

Vooral Bij surfen over het Internet is de Computer traag, zo ook bij het verzenden en ontvangen van Mail.

Ik heb draadloos netwerk via de Glasvezel kabel.

Onderstaande link om te downloaden lukt mij niet.
http://www.floriangilles.com/software/netspeedmonitor

Over jouw mail gesproken: gebruik je daarvoor een programma in Windows of gebruik jij webmail?


En doe ook dit:

[b:64921a54e2]Download tdsskiller naar je bureaublad (klik)[/b:64921a54e2]
[list:64921a54e2][*:64921a54e2] pak het bestand uit en klik\dubbelkik erop om het op te starten
[*:64921a54e2] Vista en Win 7 gebruikers gebruiken dit tool via rechtsklik en kiezen voor Als Administrator uitvoeren.
[*:64921a54e2] indien de scan klaar is, vindt je het log in de C:\ partitie
[*:64921a54e2] Post de inhoud van dat log[/list:u:64921a54e2]

Ik gebruik Outlook. En de browser maakt niet uit welke dat ik gebruik of dat nu IE, safari of Firefox is.

2010/10/24 10:11:07.0843 TDSS rootkit removing tool 2.4.4.0 Oct 4 2010 09:06:59
2010/10/24 10:11:07.0843 ================================================================================
2010/10/24 10:11:07.0843 SystemInfo:
2010/10/24 10:11:07.0843
2010/10/24 10:11:07.0843 OS Version: 5.1.2600 ServicePack: 3.0
2010/10/24 10:11:07.0843 Product type: Workstation
2010/10/24 10:11:07.0843 ComputerName: P
2010/10/24 10:11:07.0843 UserName: P. Tax
2010/10/24 10:11:07.0843 Windows directory: C:\WINDOWS
2010/10/24 10:11:07.0843 System windows directory: C:\WINDOWS
2010/10/24 10:11:07.0843 Processor architecture: Intel x86
2010/10/24 10:11:07.0843 Number of processors: 1
2010/10/24 10:11:07.0843 Page size: 0x1000
2010/10/24 10:11:07.0843 Boot type: Normal boot
2010/10/24 10:11:07.0843 ================================================================================
2010/10/24 10:11:08.0703 Initialize success
2010/10/24 10:11:19.0843 ================================================================================
2010/10/24 10:11:19.0843 Scan started
2010/10/24 10:11:19.0843 Mode: Manual;
2010/10/24 10:11:19.0843 ================================================================================
2010/10/24 10:11:21.0500 ACPI (02273a448ba21a7d447daeb47810d40c) C:\WINDOWS\system32\DRIVERS\ACPI.sys
2010/10/24 10:11:21.0953 ACPIEC (63f517b1a87dabf3f5acb8a7952fc1d1) C:\WINDOWS\system32\drivers\ACPIEC.sys
2010/10/24 10:11:22.0703 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
2010/10/24 10:11:23.0187 AFD (7e775010ef291da96ad17ca4b17137d7) C:\WINDOWS\System32\drivers\afd.sys
2010/10/24 10:11:24.0625 AmdK7 (5e8eb512f516247e8c1b96a9dcab6c9c) C:\WINDOWS\system32\DRIVERS\amdk7.sys
2010/10/24 10:11:24.0953 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
2010/10/24 10:11:25.0562 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
2010/10/24 10:11:25.0765 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
2010/10/24 10:11:26.0093 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
2010/10/24 10:11:26.0296 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
2010/10/24 10:11:26.0500 AvgLdx86 (b8c187439d27aba430dd69fdcf1fa657) C:\WINDOWS\System32\Drivers\avgldx86.sys
2010/10/24 10:11:26.0703 AvgMfx86 (53b3f979930a786a614d29cafe99f645) C:\WINDOWS\System32\Drivers\avgmfx86.sys
2010/10/24 10:11:26.0921 AvgTdiX (22e3b793c3e61720f03d3a22351af410) C:\WINDOWS\System32\Drivers\avgtdix.sys
2010/10/24 10:11:27.0140 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
2010/10/24 10:11:27.0625 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
2010/10/24 10:11:27.0968 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
2010/10/24 10:11:28.0140 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
2010/10/24 10:11:28.0312 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
2010/10/24 10:11:28.0968 ctljystk (71007bd2e1e26927fe3e4eb00c0beedf) C:\WINDOWS\system32\DRIVERS\ctljystk.sys
2010/10/24 10:11:29.0500 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
2010/10/24 10:11:29.0718 dmboot (dec123e0c75971d0cc7a6c6a75e28429) C:\WINDOWS\system32\drivers\dmboot.sys
2010/10/24 10:11:29.0937 dmio (7268e66259722f6228c730685b201092) C:\WINDOWS\system32\drivers\dmio.sys
2010/10/24 10:11:30.0187 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
2010/10/24 10:11:30.0375 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
2010/10/24 10:11:30.0703 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
2010/10/24 10:11:30.0921 emu10k (01f83e1b5dce05f5cb7d99113ca9e890) C:\WINDOWS\system32\drivers\emu10k1m.sys
2010/10/24 10:11:31.0093 emu10k1 (7ffa171cce6a8bfc774862a578ba39a2) C:\WINDOWS\system32\drivers\ctlfacem.sys
2010/10/24 10:11:31.0500 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
2010/10/24 10:11:31.0703 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys
2010/10/24 10:11:31.0890 Fips (8bfffb5ac954e19dfdb96d56512aa518) C:\WINDOWS\system32\drivers\Fips.sys
2010/10/24 10:11:32.0109 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
2010/10/24 10:11:32.0312 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
2010/10/24 10:11:32.0515 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
2010/10/24 10:11:32.0687 Ftdisk (fa8ca22e70245c81ff29c36af56292fc) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
2010/10/24 10:11:32.0890 gameenum (065639773d8b03f33577f6cdaea21063) C:\WINDOWS\system32\DRIVERS\gameenum.sys
2010/10/24 10:11:33.0062 GEARAspiWDM (ab8a6a87d9d7255c3884d5b9541a6e80) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
2010/10/24 10:11:33.0265 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
2010/10/24 10:11:33.0515 hidusb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
2010/10/24 10:11:33.0906 HPZid412 (30ca91e657cede2f95359d6ef186f650) C:\WINDOWS\system32\DRIVERS\HPZid412.sys
2010/10/24 10:11:34.0062 HPZipr12 (efd31afa752aa7c7bbb57bcbe2b01c78) C:\WINDOWS\system32\DRIVERS\HPZipr12.sys
2010/10/24 10:11:34.0265 HPZius12 (7ac43c38ca8fd7ed0b0a4466f753e06e) C:\WINDOWS\system32\DRIVERS\HPZius12.sys
2010/10/24 10:11:34.0437 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
2010/10/24 10:11:34.0906 i8042prt (c43372d0682f8e32e4ec21117e089ec0) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
2010/10/24 10:11:35.0140 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
2010/10/24 10:11:35.0312 InCDRec (2a4da98596f90224a78012103b02712b) C:\WINDOWS\system32\DRIVERS\InCDRec.sys
2010/10/24 10:11:35.0781 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
2010/10/24 10:11:35.0937 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
2010/10/24 10:11:36.0218 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
2010/10/24 10:11:36.0515 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
2010/10/24 10:11:36.0671 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
2010/10/24 10:11:36.0875 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
2010/10/24 10:11:37.0093 isapnp (0b78e1a31340e1fb1e389d5633f7c3a0) C:\WINDOWS\system32\DRIVERS\isapnp.sys
2010/10/24 10:11:37.0281 Kbdclass (380397621e94b32c744e7b2cc1330390) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
2010/10/24 10:11:37.0437 kbdhid (b833b70fe639f01fb36cedabe57ef031) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
2010/10/24 10:11:37.0656 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
2010/10/24 10:11:37.0828 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
2010/10/24 10:11:38.0312 lmimirr (4477689e2d8ae6b78ba34c9af4cc1ed1) C:\WINDOWS\system32\DRIVERS\lmimirr.sys
2010/10/24 10:11:38.0640 LMIRfsDriver (3faa563ddf853320f90259d455a01d79) C:\WINDOWS\system32\drivers\LMIRfsDriver.sys
2010/10/24 10:11:38.0968 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
2010/10/24 10:11:39.0203 Modem (8114eeac353f549331ab73e9af4219ed) C:\WINDOWS\system32\drivers\Modem.sys
2010/10/24 10:11:39.0375 Mouclass (1a4e2214dd63e4a876463d3427ee8261) C:\WINDOWS\system32\DRIVERS\mouclass.sys
2010/10/24 10:11:39.0546 mouhid (18017899254e01371e1a39754d6bf98c) C:\WINDOWS\system32\DRIVERS\mouhid.sys
2010/10/24 10:11:39.0750 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
2010/10/24 10:11:39.0937 MpFilter (c98301ad8173a2235a9ab828955c32bb) C:\WINDOWS\system32\DRIVERS\MpFilter.sys
2010/10/24 10:11:40.0312 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
2010/10/24 10:11:40.0468 MRxSmb (f3aefb11abc521122b67095044169e98) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
2010/10/24 10:11:40.0687 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
2010/10/24 10:11:40.0875 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
2010/10/24 10:11:41.0046 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2010/10/24 10:11:41.0218 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
2010/10/24 10:11:41.0406 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
2010/10/24 10:11:41.0593 Mup (2f625d11385b1a94360bfc70aaefdee1) C:\WINDOWS\system32\drivers\Mup.sys
2010/10/24 10:11:41.0812 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
2010/10/24 10:11:42.0000 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
2010/10/24 10:11:42.0187 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
2010/10/24 10:11:42.0343 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
2010/10/24 10:11:42.0515 NDProxy (6215023940cfd3702b46abc304e1d45a) C:\WINDOWS\system32\drivers\NDProxy.sys
2010/10/24 10:11:42.0703 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
2010/10/24 10:11:42.0890 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
2010/10/24 10:11:43.0312 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys
2010/10/24 10:11:43.0546 NPF (b48dc6abcd3aeff8618350ccbdc6b09a) C:\WINDOWS\system32\drivers\npf.sys
2010/10/24 10:11:43.0703 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
2010/10/24 10:11:43.0921 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
2010/10/24 10:11:44.0171 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
2010/10/24 10:11:44.0687 nv (9e143fb3ef13b7ec1c1dd06529debadd) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
2010/10/24 10:11:45.0234 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
2010/10/24 10:11:45.0437 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
2010/10/24 10:11:45.0656 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
2010/10/24 10:11:45.0875 Parport (e3934ccc20a4d24f1924e13d36d2a5bd) C:\WINDOWS\system32\DRIVERS\parport.sys
2010/10/24 10:11:46.0062 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
2010/10/24 10:11:46.0234 ParVdm (1eade28746a64c21e0a808bb12a63326) C:\WINDOWS\system32\drivers\ParVdm.sys
2010/10/24 10:11:46.0421 PCI (3b166f9f753c21aedaa9a6bd76b49655) C:\WINDOWS\system32\DRIVERS\pci.sys
2010/10/24 10:11:46.0906 Pcmcia (2137ffd65f8e609a3a5acd487c56cce0) C:\WINDOWS\system32\drivers\Pcmcia.sys
2010/10/24 10:11:48.0593 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
2010/10/24 10:11:48.0812 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
2010/10/24 10:11:49.0015 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
2010/10/24 10:11:49.0171 PxHelp20 (d86b4a68565e444d76457f14172c875a) C:\WINDOWS\system32\Drivers\PxHelp20.sys
2010/10/24 10:11:50.0203 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
2010/10/24 10:11:50.0390 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
2010/10/24 10:11:50.0625 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
2010/10/24 10:11:50.0828 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
2010/10/24 10:11:51.0046 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
2010/10/24 10:11:51.0218 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
2010/10/24 10:11:51.0421 RDPWD (6728e45b66f93c08f11de2e316fc70dd) C:\WINDOWS\system32\drivers\RDPWD.sys
2010/10/24 10:11:51.0640 redbook (4173bc66e485fd77a03c4819f60bd0da) C:\WINDOWS\system32\DRIVERS\redbook.sys
2010/10/24 10:11:51.0890 RSUSBCCID (aea02865b8fecd6fcab10910a950d39a) C:\WINDOWS\system32\DRIVERS\RtsUCcid.sys
2010/10/24 10:11:52.0109 RSUSBSTOR (5bef0fd9b6e57bbc6f7920e3118ae108) C:\WINDOWS\system32\Drivers\RtsUStor.sys
2010/10/24 10:11:52.0390 rtl8139 (d507c1400284176573224903819ffda3) C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
2010/10/24 10:11:52.0593 RTL8187B (fe999b16e967c84790be6dc1b4e78f2d) C:\WINDOWS\system32\DRIVERS\RTL8187B.sys
2010/10/24 10:11:52.0781 RtsUIr (bd396a6c54ef003c5df52812ba61ba1b) C:\WINDOWS\system32\DRIVERS\RtsUIr.sys
2010/10/24 10:11:53.0156 SBKUPNT (729248b54aff21e740054acebfdbcb1c) C:\WINDOWS\system32\Drivers\SBKUPNT.SYS
2010/10/24 10:11:53.0406 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
2010/10/24 10:11:53.0640 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
2010/10/24 10:11:53.0843 Serial (92c21762653bb2ce51147eb8a9aa654f) C:\WINDOWS\system32\DRIVERS\serial.sys
2010/10/24 10:11:54.0109 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
2010/10/24 10:11:54.0296 sfman (0b1a5e9cacb5cdd54a2815107bd7c772) C:\WINDOWS\system32\drivers\sfmanm.sys
2010/10/24 10:11:54.0828 snapman (b6aa9bbff890ffea333ffe81d0b888ff) C:\WINDOWS\system32\DRIVERS\snapman.sys
2010/10/24 10:11:55.0515 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
2010/10/24 10:11:56.0109 sptd (d15da1ba189770d93eea2d7e18f95af9) C:\WINDOWS\system32\Drivers\sptd.sys
2010/10/24 10:11:56.0734 sr (64d2a7640e0767ecd3bcb38d3200e7ce) C:\WINDOWS\system32\DRIVERS\sr.sys
2010/10/24 10:11:57.0328 Srv (0f6aefad3641a657e18081f52d0c15af) C:\WINDOWS\system32\DRIVERS\srv.sys
2010/10/24 10:11:58.0312 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
2010/10/24 10:11:58.0671 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
2010/10/24 10:11:59.0375 symsnap (c9273531eac75ee225e3170fb6107fa3) C:\WINDOWS\system32\DRIVERS\symsnap.sys
2010/10/24 10:11:59.0843 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
2010/10/24 10:12:00.0078 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
2010/10/24 10:12:00.0265 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
2010/10/24 10:12:00.0437 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
2010/10/24 10:12:00.0625 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
2010/10/24 10:12:00.0875 tifsfilter (b84b82c0cbeb1b0d7eb7a946bade5830) C:\WINDOWS\system32\DRIVERS\tifsfilt.sys
2010/10/24 10:12:01.0125 timounter (68b3daa08ea06737022832fccffb9b75) C:\WINDOWS\system32\DRIVERS\timntr.sys
2010/10/24 10:12:01.0515 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
2010/10/24 10:12:01.0812 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
2010/10/24 10:12:02.0062 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
2010/10/24 10:12:02.0250 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
2010/10/24 10:12:02.0453 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
2010/10/24 10:12:02.0609 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
2010/10/24 10:12:02.0765 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
2010/10/24 10:12:02.0953 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
2010/10/24 10:12:03.0171 v2imount (b4d63048d6358e7c6ab61b98b8cff263) C:\WINDOWS\system32\DRIVERS\v2imount.sys
2010/10/24 10:12:03.0359 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
2010/10/24 10:12:03.0531 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys
2010/10/24 10:12:03.0718 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys
2010/10/24 10:12:03.0906 VolSnap (8ab662b3c4691e6ddf61c96bb5b7d103) C:\WINDOWS\system32\drivers\VolSnap.sys
2010/10/24 10:12:04.0093 vsdatant (847be2a5d1c0d32833475db9ace5cf53) C:\WINDOWS\system32\vsdatant.sys
2010/10/24 10:12:04.0421 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
2010/10/24 10:12:04.0734 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
2010/10/24 10:12:05.0109 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
2010/10/24 10:12:05.0312 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
2010/10/24 10:12:05.0593 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
2010/10/24 10:12:06.0000 ================================================================================
2010/10/24 10:12:06.0000 Scan finished
2010/10/24 10:12:06.0000 ================================================================================

[b:d3d8d7642e]Download OTL naar je bureaublad.[/b:d3d8d7642e]

[list:d3d8d7642e][*:d3d8d7642e] Dubbelklik nu op [b:d3d8d7642e]OTL.exe[/b:d3d8d7642e] ([b:d3d8d7642e]N.B.: Vista- en Windows 7 gebruik(st)ers starten het hier vermede tool middels rechtsklikken en dan kiezen voor Als Administrator uitvoeren.[/b:d3d8d7642e])

[*:d3d8d7642e] Vink het hokje aan bij [b:d3d8d7642e]Scan All Users[/b:d3d8d7642e]

[*:d3d8d7642e] Plak vervolgens in het [b:d3d8d7642e]Customs Scans/Fixes[/b:d3d8d7642e]venster de volgende tekst:[/list:u:d3d8d7642e]
[code:1:d3d8d7642e][B]msconfig
safebootminimal
activex
drivers32
netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys
symmpi.sys
adp3132.sys
mv61xx.sys
nvraid.sys
/md5stop
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\drivers\*.sys /90[/B][/code:1:d3d8d7642e]


[list:d3d8d7642e][*:d3d8d7642e] Vink ook de opies [b:d3d8d7642e]Lop Check[/b:d3d8d7642e] en [b:d3d8d7642e]Purity Check[/b:d3d8d7642e] aan.
[*:d3d8d7642e] Klik vervolgens op de knop [b:d3d8d7642e]Run Scan[/b:d3d8d7642e].

[*:d3d8d7642e] Er zullen twee logs geproduceert worden:

[*:d3d8d7642e] [b:d3d8d7642e]OTL.txt[/b:d3d8d7642e] <– zal zich openen
[*:d3d8d7642e] [b:d3d8d7642e]Extra.txt[/b:d3d8d7642e]<–zal geminimaliseerd zijn.[/list:u:d3d8d7642e]

Post in je volgende bericht beide logs; zeer waarschijnlijk heb je meerdere posts nodig om de logs te plaatsen!

Hallo,

OTL werkt helaas niet.

Ik krijg de foutmelding dat er een fout is opgetreden in OTL

Dan denk ik ondertussen, dat het maar het beste is, dat je een schone installatie van XP gaat uitvoeren.
Dus inclusief formattering van de besturingspartitie!

Hoi Abraham54,

Nog bedankt voor je medewerking. Het lijkt mij ook veel verstandiger om opnieuw te installeren. Want hier gaat ontzettend veel tijd in zitten.

bedankt

Hallo platox, maak dus een schone installatie.

Zorg er voor, dat je Pc enkel stroom heeft, monitor, toetsenbord en muis zijn aangesloten en de rest moet afgekoppeld zijn - ook de internetverbinding!

Het beste kan je voor het formatteren de besturingspartitie eerst verwijderen, dan opnieuw aanmaken en formatteren.

Een mogelijke aanwezige bootsectorvirus wordt hierdoor ook onschadelijk gemaakt!

Hoi Abraham54,

Bedankt voor je reactie. Wat ik ga doen om de schijf geheel opnieuw in te richten is het volgende.

Allereerst ga ik de schijf met [b:7b8d33cee0]Maxtor een lowlevel format [/b:7b8d33cee0]geven, dan formateren en partitie maken met de Windows installatie CD.

Hierna eerst een firewall en Virus scanner installeren, vervolgens mijn Internet verbinding werkbaar maken. Windows updaten.
Hierna Windows Office installeren en Outlook aan de praat brengen(kan ik tevens zien of het probleem bij Verzenden en Ontvangen ook opgelost is). {Nu wordt inplaats van 2 taken uitvoeren, aangeven dat er 3 taken worden uitgevoerd, klopt volgens mij niet}.

Als alles weer naar behoren werkt ga ik de rest van de programma's installeren.

Ps misschien heeft het wel iets te maken met de Botnek waar momenteel zoveel over te doen is.

Als het allemaal weer werkt zoals het hoort dan bericht ik je dit even.

Waarom een low level format? Dat is helemaal niet nodig.

Ter info:

[i:00291068f4][b:00291068f4]Indeling op harddisk[/b:00291068f4]

Een harde schijf is in de fabriek geformatteerd (het z.g. low-level format) en is verdeeld in cilinders of tracks en sectoren. De gebruikersgegevens worden opgeslagen als een lange rij bits. De mappenstructuur van de schijf wordt bepaald door het bestandssysteem dat de conversie tussen mappen en bestanden enerzijds en bits anderzijds verzorgt.
De formattering op laag niveau verdeelt de schijf in sectoren, de kleinste eenheid die in één bewerking door een lees/schrijfkop kan verwerkt worden. Elke sector krijgt een uniek nummer zodat de diskcontroller (het stuurorgaan van de harde schijf) straks weet hoe de koppen moeten worden gepositioneerd.
Recentere schijven hebben echter een complexe structuur, waarbij de buitenste sporen meer sectoren hebben dan de binnenste sporen. Bij deze schijven kan de low-level formattering uitsluitend door de fabrikant worden uitgevoerd.
De low-level formattering wordt gewoonlijk door de producent gedaan met formatteringsroutines die specifiek voor de betrokken harde schijf geschreven zijn. Indien je andere routines gebruikt, bijvoorbeeld Calibrate of Spinrite die op BIOS-niveau werken, kan de schijf hierdoor definitief onbruikbaar worden!
Het kan zijn dat er tijdens het formatteren slechte plekken op de schijf of diskette worden gevonden, die beschadigde sectoren (bad blocks of bad sectors) worden genoemd.
Veel moderne harddisks constateren de slechte blokken automatisch, en proberen ze door een speciaal gereserveerd, goed blok te herstellen. Voor het besturingssysteem is dit niet zichtbaar.[/i:00291068f4]