traaaaaaage Laptop

• 

  wim H

  28-12-2009 21:26

  hallo

  We hebben hier een zeer traag internet op één van onze 2 laptops

  het is een Targa met Intel dual core t3200 2gb

  Ik heb alle stappen uitgevoerd ( niets werd er gevonden). behalve de online scan (wegens traagheid lukt dit niet)

  Kunnen jullie misschien iets vinden in de logfiles van hijackthis

  gebruiker 1

  Logfile of Trend Micro HijackThis v2.0.3 (BETA)

  Scan saved at 21:00:22, on 28-12-2009

  Platform: Windows Vista SP2 (WinNT 6.00.1906)

  MSIE: Internet Explorer v8.00 (8.00.6001.18828)

  Boot mode: Normal

  Running processes:

  C:\Windows\system32\Dwm.exe

  C:\Windows\system32\taskeng.exe

  C:\Windows\Explorer.EXE

  C:\Program Files\Windows Media Player\wmpnscfg.exe

  C:\Windows\system32\taskeng.exe

  C:\Windows\system32\Dwm.exe

  C:\Windows\Explorer.EXE

  C:\Program Files\Mozilla Firefox\firefox.exe

  C:\Windows\system32\SearchFilterHost.exe

  C:\Program Files\TrendMicro\HiJackThis\HiJackThis.exe

  C:\Windows\system32\DllHost.exe

  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://nu.nl/

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

  R3 - URLSearchHook: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)

  O1 - Hosts: ::1 localhost

  O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

  O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (file missing)

  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll

  O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

  O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)

  O4 - HKLM\..\Run: “C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe”

  O4 - HKUS\S-1-5-19\..\Run: %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User ‘LOCAL SERVICE’)

  O4 - HKUS\S-1-5-19\..\Run: rundll32.exe oobefldr.dll,ShowWelcomeCenter (User ‘LOCAL SERVICE’)

  O4 - HKUS\S-1-5-20\..\Run: %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User ‘NETWORK SERVICE’)

  O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O13 - Gopher Prefix:

  O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

  O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe

  O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe

  O23 - Service: Google Updateservice (gupdate1c9dd891166a358) (gupdate1c9dd891166a358) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

  O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

  O23 - Service: Micro Star SCM - Unknown owner - C:\Program Files\System Control Manager\MSIService.exe (file missing)

  O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

  O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe

  O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe

  –

  End of file - 4776 bytes

  gebruiker 2

  Logfile of Trend Micro HijackThis v2.0.3 (BETA)

  Scan saved at 21:04:19, on 28-12-2009

  Platform: Windows Vista SP2 (WinNT 6.00.1906)

  MSIE: Internet Explorer v8.00 (8.00.6001.18828)

  Boot mode: Normal

  Running processes:

  C:\Windows\system32\Dwm.exe

  C:\Windows\system32\taskeng.exe

  C:\Windows\Explorer.EXE

  C:\Program Files\Windows Media Player\wmpnscfg.exe

  C:\Windows\system32\taskeng.exe

  C:\Windows\system32\Dwm.exe

  C:\Windows\Explorer.EXE

  C:\Program Files\Mozilla Firefox\firefox.exe

  C:\Windows\system32\SearchFilterHost.exe

  C:\Program Files\TrendMicro\HiJackThis\HiJackThis.exe

  C:\Windows\system32\DllHost.exe

  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://nu.nl/

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

  O1 - Hosts: ::1 localhost

  O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

  O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (file missing)

  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll

  O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

  O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)

  O4 - HKLM\..\Run: “C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe”

  O4 - HKUS\S-1-5-19\..\Run: %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User ‘LOCAL SERVICE’)

  O4 - HKUS\S-1-5-19\..\Run: rundll32.exe oobefldr.dll,ShowWelcomeCenter (User ‘LOCAL SERVICE’)

  O4 - HKUS\S-1-5-20\..\Run: %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User ‘NETWORK SERVICE’)

  O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

  O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O13 - Gopher Prefix:

  O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

  O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe

  O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe

  O23 - Service: Google Updateservice (gupdate1c9dd891166a358) (gupdate1c9dd891166a358) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

  O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

  O23 - Service: Micro Star SCM - Unknown owner - C:\Program Files\System Control Manager\MSIService.exe (file missing)

  O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

  O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe

  O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe

  –

  End of file - 4809 bytes

  Alvast bedankt

  Rapporteren
• 

  wim H

  28-12-2009 21:54

  hieronder de nieuwe logfiles

  Gebruiker 1

  Logfile of Trend Micro HijackThis v2.0.3 (BETA)

  Scan saved at 21:42:23, on 28-12-2009

  Platform: Windows Vista SP2 (WinNT 6.00.1906)

  MSIE: Internet Explorer v8.00 (8.00.6001.18828)

  Boot mode: Normal

  Running processes:

  C:\Windows\system32\Dwm.exe

  C:\Windows\Explorer.EXE

  C:\Windows\system32\taskeng.exe

  C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe

  C:\Program Files\Alwil Software\Avast4\ashDisp.exe

  C:\Program Files\Windows Media Player\wmpnscfg.exe

  C:\Program Files\TrendMicro\HiJackThis\HiJackThis.exe

  C:\Windows\system32\SearchFilterHost.exe

  C:\Windows\system32\DllHost.exe

  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://nu.nl/

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

  O1 - Hosts: ::1 localhost

  O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

  O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (file missing)

  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll

  O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

  O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)

  O4 - HKLM\..\Run: “C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe”

  O4 - HKLM\..\Run: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

  O4 - HKUS\S-1-5-19\..\Run: %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User ‘LOCAL SERVICE’)

  O4 - HKUS\S-1-5-19\..\Run: rundll32.exe oobefldr.dll,ShowWelcomeCenter (User ‘LOCAL SERVICE’)

  O4 - HKUS\S-1-5-20\..\Run: %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User ‘NETWORK SERVICE’)

  O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

  O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O13 - Gopher Prefix:

  O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

  O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe

  O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

  O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe

  O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

  O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

  O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

  O23 - Service: Google Updateservice (gupdate1c9dd891166a358) (gupdate1c9dd891166a358) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

  O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

  O23 - Service: Micro Star SCM - Unknown owner - C:\Program Files\System Control Manager\MSIService.exe (file missing)

  O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

  O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe

  O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe

  –

  End of file - 5295 bytes

  gebruiker 2

  Logfile of Trend Micro HijackThis v2.0.3 (BETA)

  Scan saved at 21:43:43, on 28-12-2009

  Platform: Windows Vista SP2 (WinNT 6.00.1906)

  MSIE: Internet Explorer v8.00 (8.00.6001.18828)

  Boot mode: Normal

  Running processes:

  C:\Windows\system32\Dwm.exe

  C:\Windows\Explorer.EXE

  C:\Windows\system32\taskeng.exe

  C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe

  C:\Program Files\Alwil Software\Avast4\ashDisp.exe

  C:\Program Files\Windows Media Player\wmpnscfg.exe

  C:\Windows\system32\SearchFilterHost.exe

  C:\Windows\system32\taskeng.exe

  C:\Windows\system32\Dwm.exe

  C:\Windows\Explorer.EXE

  C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe

  C:\Program Files\Alwil Software\Avast4\ashDisp.exe

  C:\Program Files\TrendMicro\HiJackThis\HiJackThis.exe

  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://nu.nl/

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

  R3 - URLSearchHook: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)

  O1 - Hosts: ::1 localhost

  O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

  O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (file missing)

  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll

  O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

  O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)

  O4 - HKLM\..\Run: “C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe”

  O4 - HKLM\..\Run: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

  O4 - HKUS\S-1-5-19\..\Run: %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User ‘LOCAL SERVICE’)

  O4 - HKUS\S-1-5-19\..\Run: rundll32.exe oobefldr.dll,ShowWelcomeCenter (User ‘LOCAL SERVICE’)

  O4 - HKUS\S-1-5-20\..\Run: %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User ‘NETWORK SERVICE’)

  O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O10 - Unknown file in Winsock LSP: c:\windows\system32\bglsp.dll

  O13 - Gopher Prefix:

  O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

  O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe

  O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

  O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe

  O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

  O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

  O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

  O23 - Service: Google Updateservice (gupdate1c9dd891166a358) (gupdate1c9dd891166a358) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

  O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

  O23 - Service: Micro Star SCM - Unknown owner - C:\Program Files\System Control Manager\MSIService.exe (file missing)

  O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

  O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe

  O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\system32\IoctlSvc.exe

  –

  End of file - 5424 bytes

  Rapporteren
• 

  wimH

  28-12-2009 22:06

  sorry bij de eerste logfiles stond de virusscanner uit

  Rapporteren
• 

  Jos H

  28-12-2009 22:51

  Waar is het logje van stap 5.?

  Rapporteren
• 

  Wim H

  28-12-2009 23:00

  Hallo Jos,

  stap 5 is uitgevoerd maar daar kwam niets uit

  gr. Wim

  Rapporteren
• 

  Argus

  29-12-2009 01:52

  Start Hijack This

  Start Hijack This,Klik: Do a Systemscan only

  Rechtsonder klik Config…. klik Misc Tools

  Klik “Open Uninstall Manager”

  Klik “Safe List”

  Kopïeer Uninstall_list naar je Bureaublad en post de inhoud in je volgende Antwoord

  Sluit Hijack This

  Rapporteren
• 

  win H

  29-12-2009 09:53

  voor Argus( door het aantal programma,s kan de traagheid niet ontstaan:)-D

  Aangifte inkomstenbelasting 2008

  Aangifte loonheffingen 2009

  Adobe Flash Player 10 ActiveX

  Adobe Flash Player 10 Plugin

  Adobe Reader 8.1.3 - Nederlands

  Agere Systems HDA Modem

  avast! Antivirus

  Corel Home Office

  CorelDRAW Essential Edition 3

  CorelDRAW Essential Edition 3

  DivX Codec

  Google Earth

  Google Update Helper

  Google Updater

  HiJackThis

  Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

  Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)

  Huur- en zorgtoeslag 2009

  Huur- en zorgtoeslag 2010

  Java(TM) 6 Update 17

  Microsoft .NET Framework 3.5 Language Pack SP1 - nld

  Microsoft .NET Framework 3.5 SP1

  Microsoft .NET Framework 3.5 SP1

  Microsoft Office Professional Editie 2003

  Microsoft Visual C++ 2005 Redistributable

  Mozilla Firefox (3.5.6)

  MSXML 4.0 SP2 (KB936181)

  MSXML 4.0 SP2 (KB941833)

  MSXML 4.0 SP2 (KB954430)

  Nero 8 Essentials

  neroxml

  NL

  Ralink RT2860 Wireless LAN Card

  Realtek High Definition Audio Driver

  Realtek USB 2.0 Card Reader

  Taalpakket voor Microsoft .NET Framework 3.5 SP1 - NL

  Update for Microsoft .NET Framework 3.5 SP1 (KB963707)

  Update Manager

  VCRedistSetup

  Rapporteren
• 

  Argus

  29-12-2009 10:50

  Download LSPFix.exe van deze site http://cexx.org/lspfix.htm

  1. Start het programma.

  2. Selecteer “I know what I'm doing”

  3. Selecteer ALLEEN dit, vetgedrukte bestand: bglsp.dll

  4. Klik op “remove” zodat het bestand naar het rechter venster gaat.

  5. Klik op “Finish”

  6. Herstart de pc.

  7. Verwijder het bovengenoemde bestand uit de C:\Windows\System32\ directory (als het bestand nog aanwezig is)

  Gebruiker 1

  Klik met de rechtermuis op het programma Hijackthis en Kies voor uitvoeren als administrator en dan

  'Do a system scan only'

  Selecteer alleen de items die hieronder zijn genoemd:

  O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (file missing)

  O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)

  O23 - Service: Micro Star SCM - Unknown owner - C:\Program Files\System Control Manager\MSIService.exe (file missing)

  Klik op ‘Fix checked’ om de items te verwijderen.

  Gebruiker 2

  Klik met de rechtermuis op het programma Hijackthis en Kies voor uitvoeren als administrator en dan

  'Do a system scan only'

  Selecteer alleen de items die hieronder zijn genoemd:

  R3 - URLSearchHook: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)

  O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll (file missing)

  O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)

  Klik op ‘Fix checked’ om de items te verwijderen.

  Rapporteren
• 

  wimH

  29-12-2009 11:56

  Argus, alles uitgevoerd

  Laptoppie draait weer toppie

  Je ben een topper

  dank

  Wim

  Rapporteren