pc stopt regelmatig

• 

  Geurt Vos

  31-12-2008 11:19

  Hallo,

  mijn pc stopt er regelmatig mee en start dan wel weer automatisch op.Bijgaand een logje van hijackthis. Updates en viruscontroles en scanners zijn goed volgens mij.Kan er misschien iemand naar kijken of ligt het aan de hardware. Er zitten 2 harde schijven in , 80 en 40 G en ik heb een externe van 500 G.

  Groeten , Geurt

  Logfile of Trend Micro HijackThis v2.0.2

  Scan saved at 11:12:49, on 31-12-2008

  Platform: Windows XP SP3 (WinNT 5.01.2600)

  MSIE: Internet Explorer v7.00 (7.00.6000.20935)

  Boot mode: Normal

  Running processes:

  C:\WINDOWS\System32\smss.exe

  C:\WINDOWS\system32\winlogon.exe

  C:\WINDOWS\system32\services.exe

  C:\WINDOWS\system32\lsass.exe

  C:\WINDOWS\system32\svchost.exe

  C:\WINDOWS\System32\svchost.exe

  C:\WINDOWS\system32\spoolsv.exe

  C:\WINDOWS\Explorer.EXE

  C:\WINDOWS\VistaDrive\VistaDrive.exe

  C:\WINDOWS\ehome\ehtray.exe

  C:\Program Files\Desktop Tray Clock\DTClock.exe

  C:\WINDOWS\Mixer.exe

  C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe

  C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe

  C:\Program Files\Cyberlink\Shared Files\brs.exe

  C:\WINDOWS\PixArt\PAC207\Monitor.exe

  C:\WINDOWS\system32\ctfmon.exe

  C:\Program Files\Windows Live\Messenger\msnmsgr.exe

  C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe

  C:\WINDOWS\eHome\ehRecvr.exe

  C:\WINDOWS\eHome\ehSched.exe

  C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe

  C:\WINDOWS\system32\nvsvc32.exe

  C:\WINDOWS\system32\PnkBstrA.exe

  C:\WINDOWS\system32\PnkBstrB.exe

  C:\WINDOWS\System32\PAStiSvc.exe

  C:\WINDOWS\system32\svchost.exe

  C:\Program Files\UPHClean\uphclean.exe

  C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe

  C:\WINDOWS\system32\dllhost.exe

  C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe

  C:\WINDOWS\eHome\ehmsas.exe

  C:\Program Files\Windows Live\Contacts\wlcomm.exe

  C:\Program Files\Windows Media Player\wmplayer.exe

  C:\Program Files\Internet Explorer\IEXPLORE.EXE

  C:\Program Files\IEPro\MiniDM.exe

  C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:

  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.nl

  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.nl

  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl/

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.nl/

  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

  O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\iepro.dll

  O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

  O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

  O4 - HKLM\..\Run: RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

  O4 - HKLM\..\Run: nwiz.exe /install

  O4 - HKLM\..\Run: RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

  O4 - HKLM\..\Run: C:\WINDOWS\VistaDrive\VistaDrive.exe

  O4 - HKLM\..\Run: C:\WINDOWS\ehome\ehtray.exe

  O4 - HKLM\..\Run: C:\Program Files\Desktop Tray Clock\DTClock.exe

  O4 - HKLM\..\Run: Mixer.exe /startup

  O4 - HKLM\..\Run: “C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe” /hide /waitservice

  O4 - HKLM\..\Run: C:\Program Files\NOD32view\NOD32view.exe

  O4 - HKLM\..\Run: “C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe”

  O4 - HKLM\..\Run: “C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe”

  O4 - HKLM\..\Run: C:\Program Files\Cyberlink\Shared Files\brs.exe

  O4 - HKLM\..\Run: C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

  O4 - HKLM\..\Run: C:\WINDOWS\PixArt\PAC207\Monitor.exe

  O4 - HKCU\..\Run: C:\WINDOWS\system32\ctfmon.exe

  O4 - HKCU\..\Run: C:\Program Files\Desktop Tray Clock\DTClock.exe

  O4 - HKCU\..\Run: “C:\Program Files\Windows Live\Messenger\msnmsgr.exe” /background

  O4 - HKCU\..\Run: “C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe”

  O4 - HKUS\S-1-5-19\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘Lokale service’)

  O4 - HKUS\S-1-5-19\..\Run: C:\Program Files\Desktop Tray Clock\DTClock.exe (User ‘Lokale service’)

  O4 - HKUS\S-1-5-19\..\RunOnce: regsvr32 /s /n /i:u shell32 (User ‘Lokale service’)

  O4 - HKUS\S-1-5-20\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘Netwerkservice’)

  O4 - HKUS\S-1-5-20\..\RunOnce: regsvr32 /s /n /i:u shell32 (User ‘Netwerkservice’)

  O4 - HKUS\S-1-5-18\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘SYSTEM’)

  O4 - HKUS\S-1-5-18\..\RunOnce: regsvr32 /s /n /i:u shell32 (User ‘SYSTEM’)

  O4 - HKUS\.DEFAULT\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘Default user’)

  O4 - HKUS\.DEFAULT\..\RunOnce: regsvr32 /s /n /i:u shell32 (User ‘Default user’)

  O4 - Global Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe

  O9 - Extra button: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\iepro.dll

  O9 - Extra ‘Tools’ menuitem: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\iepro.dll

  O9 - Extra button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll

  O9 - Extra ‘Tools’ menuitem: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll

  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

  O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

  O9 - Extra button: MS-KB - {8b2d996f-b7d1-4961-a929-414d9cf5ba7b} - http://support.microsoft.com/default.aspx?scid=FH;EN-US;KBHOWTO (file missing)

  O9 - Extra ‘Tools’ menuitem: MS-KB - {8b2d996f-b7d1-4961-a929-414d9cf5ba7b} - http://support.microsoft.com/default.aspx?scid=FH;EN-US;KBHOWTO (file missing)

  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

  O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

  O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe

  O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe

  O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe

  O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

  O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

  O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe

  O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe

  –

  End of file - 7526 bytes

  Rapporteren
• 

  lucas

  31-12-2008 17:45

  Start HijackThis kies voor “do a system scan only”, vink de volgende regels aan:

  O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

  O9 - Extra button: MS-KB - {8b2d996f-b7d1-4961-a929-414d9cf5ba7b} - support.microsoft.com/default.aspx?scid=FH;EN-US;KBHOWTO (file missing)

  O9 - Extra ‘Tools’ menuitem: MS-KB - {8b2d996f-b7d1-4961-a929-414d9cf5ba7b} - support.microsoft.com/default.aspx?scid=FH;EN-US;KBHOWTO (file missing)

  Klik op fix checked.

  Vermoed idd een hardware of temperatuur probleem.

  Mag ik het logje van malwarebytes even zien http://www.prikpagina.nl/read.php?f=123&i=186977&t=186977

  Plaast het malwarebytes en een nieuw HijackThis logje even hier

  Rapporteren
• 

  geurt

  05-01-2009 13:14

  Hallo, het heeft even geduurd maar ik kon vorige week niets posten. hieronder de logs van beide waar je om gevraagd hebt.

  allemaal in ieder geval nog de bestw wensen en virusvrije cq spyware vrije pc's toegewenst.

  Geurt

  Malwarebytes' Anti-Malware 1.32

  Database versie: 1617

  Windows 5.1.2600 Service Pack 3

  5-1-2009 11:17:38

  mbam-log-2009-01-05 (11-17-38).txt

  Scan type: Snelle Scan

  Objecten gescand: 50940

  Verstreken tijd: 5 minute(s), 23 second(s)

  Geheugenprocessen geïnfecteerd: 0

  Geheugenmodulen geïnfecteerd: 0

  Registersleutels geïnfecteerd: 0

  Registerwaarden geïnfecteerd: 0

  Registerdata bestanden geïnfecteerd: 0

  Mappen geïnfecteerd: 0

  Bestanden geïnfecteerd: 0

  Geheugenprocessen geïnfecteerd:

  (Geen kwaadaardige items gevonden)

  Geheugenmodulen geïnfecteerd:

  (Geen kwaadaardige items gevonden)

  Registersleutels geïnfecteerd:

  (Geen kwaadaardige items gevonden)

  Registerwaarden geïnfecteerd:

  (Geen kwaadaardige items gevonden)

  Registerdata bestanden geïnfecteerd:

  (Geen kwaadaardige items gevonden)

  Mappen geïnfecteerd:

  (Geen kwaadaardige items gevonden)

  Bestanden geïnfecteerd:

  (Geen kwaadaardige items gevonden)

  Logfile of Trend Micro HijackThis v2.0.2

  Scan saved at 11:22:20, on 5-1-2009

  Platform: Windows XP SP3 (WinNT 5.01.2600)

  MSIE: Internet Explorer v7.00 (7.00.6000.20935)

  Boot mode: Normal

  Running processes:

  C:\WINDOWS\System32\smss.exe

  C:\WINDOWS\system32\winlogon.exe

  C:\WINDOWS\system32\services.exe

  C:\WINDOWS\system32\lsass.exe

  C:\WINDOWS\system32\svchost.exe

  C:\WINDOWS\System32\svchost.exe

  C:\WINDOWS\system32\spoolsv.exe

  C:\WINDOWS\Explorer.EXE

  C:\WINDOWS\system32\RUNDLL32.EXE

  C:\WINDOWS\VistaDrive\VistaDrive.exe

  C:\WINDOWS\ehome\ehtray.exe

  C:\Program Files\Desktop Tray Clock\DTClock.exe

  C:\WINDOWS\Mixer.exe

  C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe

  C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe

  C:\Program Files\Cyberlink\Shared Files\brs.exe

  C:\WINDOWS\PixArt\PAC207\Monitor.exe

  C:\WINDOWS\system32\ctfmon.exe

  C:\Program Files\Windows Live\Messenger\msnmsgr.exe

  C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe

  C:\Program Files\RocketDock\RocketDock.exe

  C:\WINDOWS\eHome\ehRecvr.exe

  C:\WINDOWS\eHome\ehSched.exe

  C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe

  C:\WINDOWS\system32\nvsvc32.exe

  C:\WINDOWS\system32\PnkBstrA.exe

  C:\WINDOWS\system32\PnkBstrB.exe

  C:\WINDOWS\System32\PAStiSvc.exe

  C:\WINDOWS\system32\svchost.exe

  C:\Program Files\UPHClean\uphclean.exe

  C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe

  C:\WINDOWS\system32\dllhost.exe

  C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe

  C:\WINDOWS\eHome\ehmsas.exe

  C:\Program Files\Windows Live\Contacts\wlcomm.exe

  C:\Program Files\Internet Explorer\IEXPLORE.EXE

  C:\Program Files\Internet Explorer\IEXPLORE.EXE

  C:\Program Files\IEPro\MiniDM.exe

  C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:

  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.nl

  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.nl

  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.nl/

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = go.microsoft.com/fwlink/?LinkId=69157

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = go.microsoft.com/fwlink/?LinkId=54896

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = go.microsoft.com/fwlink/?LinkId=54896

  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = go.microsoft.com/fwlink/?LinkId=69157

  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = www.google.nl/

  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

  O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\iepro.dll

  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

  O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

  O4 - HKLM\..\Run: RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

  O4 - HKLM\..\Run: nwiz.exe /install

  O4 - HKLM\..\Run: RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

  O4 - HKLM\..\Run: C:\WINDOWS\VistaDrive\VistaDrive.exe

  O4 - HKLM\..\Run: C:\WINDOWS\ehome\ehtray.exe

  O4 - HKLM\..\Run: C:\Program Files\Desktop Tray Clock\DTClock.exe

  O4 - HKLM\..\Run: Mixer.exe /startup

  O4 - HKLM\..\Run: “C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe” /hide /waitservice

  O4 - HKLM\..\Run: C:\Program Files\NOD32view\NOD32view.exe

  O4 - HKLM\..\Run: “C:\Program Files\CyberLink\PowerDVD8\PDVD8Serv.exe”

  O4 - HKLM\..\Run: “C:\Program Files\CyberLink\PowerDVD8\Language\Language.exe”

  O4 - HKLM\..\Run: C:\Program Files\Cyberlink\Shared Files\brs.exe

  O4 - HKLM\..\Run: C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

  O4 - HKLM\..\Run: C:\WINDOWS\PixArt\PAC207\Monitor.exe

  O4 - HKLM\..\RunOnce: C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent

  O4 - HKCU\..\Run: C:\WINDOWS\system32\ctfmon.exe

  O4 - HKCU\..\Run: C:\Program Files\Desktop Tray Clock\DTClock.exe

  O4 - HKCU\..\Run: “C:\Program Files\Windows Live\Messenger\msnmsgr.exe” /background

  O4 - HKCU\..\Run: “C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe”

  O4 - HKUS\S-1-5-19\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘Lokale service’)

  O4 - HKUS\S-1-5-19\..\Run: C:\Program Files\Desktop Tray Clock\DTClock.exe (User ‘Lokale service’)

  O4 - HKUS\S-1-5-19\..\RunOnce: regsvr32 /s /n /i:u shell32 (User ‘Lokale service’)

  O4 - HKUS\S-1-5-20\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘Netwerkservice’)

  O4 - HKUS\S-1-5-20\..\RunOnce: regsvr32 /s /n /i:u shell32 (User ‘Netwerkservice’)

  O4 - HKUS\S-1-5-18\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘SYSTEM’)

  O4 - HKUS\S-1-5-18\..\RunOnce: regsvr32 /s /n /i:u shell32 (User ‘SYSTEM’)

  O4 - HKUS\.DEFAULT\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘Default user’)

  O4 - HKUS\.DEFAULT\..\RunOnce: regsvr32 /s /n /i:u shell32 (User ‘Default user’)

  O4 - Global Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe

  O9 - Extra button: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\iepro.dll

  O9 - Extra ‘Tools’ menuitem: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\iepro.dll

  O9 - Extra button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll

  O9 - Extra ‘Tools’ menuitem: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll

  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

  O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

  O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

  O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe

  O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe

  O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe

  O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

  O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

  O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe

  O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe

  Rapporteren