antivirus.startpagina.nl

pc loopt steeds vast of supertraag

  • Anonymous avatar

    pejola

    hallo daar,

    Mijn pc doet vervelend: kan ineens vastlopen of supertraag zijn.

    is een nieuwe pc sinds januari.

    Windows 7, verder heb ik Adaware, Spybot,CCcleaner.

    Bij aanschaf 2 maanden MacAfee gehad, dat liep af, toen panda aangeschaft en sindsdien vastlopers en/of traag.

    Panda verwijderd, Avg gedownload.

    alle windows updates binnen, net nog Avg laten scannen en Adware: niks gevonden.

    Malware log:

    Malwarebytes' Anti-Malware 1.44

    Database versie: 3860

    Windows 6.1.7600

    Internet Explorer 8.0.7600.16385

    12-3-2010 17:52:08

    mbam-log-2010-03-12 (17-52-08).txt

    Scan type: Snelle Scan

    Objecten gescand: 102075

    Verstreken tijd: 2 minute(s), 30 second(s)

    Geheugenprocessen geïnfecteerd: 0

    Geheugenmodulen geïnfecteerd: 0

    Registersleutels geïnfecteerd: 0

    Registerwaarden geïnfecteerd: 0

    Registerdata bestanden geïnfecteerd: 1

    Mappen geïnfecteerd: 0

    Bestanden geïnfecteerd: 0

    Geheugenprocessen geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Geheugenmodulen geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Registersleutels geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Registerwaarden geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Registerdata bestanden geïnfecteerd:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

    Mappen geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Bestanden geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    ——————————————————————————————————————————————————————————

    Hijackthis Log:

    Logfile of Trend Micro HijackThis v2.0.2

    Scan saved at 18:48:07, on 12-3-2010

    Platform: Unknown Windows (WinNT 6.01.3504)

    MSIE: Internet Explorer v8.00 (8.00.7600.16385)

    Boot mode: Normal

    Running processes:

    C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe

    C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe

    C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe

    C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

    C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe

    C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe

    C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe

    C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe

    C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe

    C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe

    C:\Program Files (x86)\Java\jre6\bin\jusched.exe

    C:\Program Files (x86)\AVG\AVG9\avgtray.exe

    C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe

    C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe

    C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe

    C:\Program Files (x86)\Internet Explorer\iexplore.exe

    C:\Program Files (x86)\Internet Explorer\iexplore.exe

    C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe

    C:\Windows\SysWow64\Macromed\Flash\FlashUtil10e.exe

    C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe

    C:\Program Files (x86)\Internet Explorer\iexplore.exe

    C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&m=aspire_x3812&r=17361209ln07973480ti5lx8m1j313

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.startpagina.nl/

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&m=aspire_x3812&r=17361209ln07973480ti5lx8m1j313

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&m=aspire_x3812&r=17361209ln07973480ti5lx8m1j313

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

    O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssie.dll

    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll

    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

    O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

    O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

    O4 - HKLM\..\Run: “C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe” -h -k

    O4 - HKLM\..\Run: C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe

    O4 - HKLM\..\Run: “C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe”

    O4 - HKLM\..\Run: “C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe”

    O4 - HKLM\..\Run: “C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe” MSRun

    O4 - HKLM\..\Run: “C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe”

    O4 - HKLM\..\Run: C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe

    O4 - HKLM\..\Run: C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe

    O4 - HKLM\..\Run: “C:\Program Files (x86)\Java\jre6\bin\jusched.exe”

    O4 - HKLM\..\Run: “C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe”

    O4 - HKLM\..\Run: C:\PROGRA~2\AVG\AVG9\avgtray.exe

    O4 - HKCU\..\Run: C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe

    O4 - HKUS\S-1-5-19\..\Run: %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User ‘LOCAL SERVICE’)

    O4 - HKUS\S-1-5-19\..\RunOnce: C:\Windows\System32\mctadmin.exe (User ‘LOCAL SERVICE’)

    O4 - HKUS\S-1-5-20\..\Run: %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User ‘NETWORK SERVICE’)

    O4 - HKUS\S-1-5-20\..\RunOnce: C:\Windows\System32\mctadmin.exe (User ‘NETWORK SERVICE’)

    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

    O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200

    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000

    O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra ‘Tools’ menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll

    O9 - Extra ‘Tools’ menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL

    O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll

    O9 - Extra ‘Tools’ menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll

    O13 - Gopher Prefix:

    O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - https://asp.photoprintit.de/microsite/8/defaults/activex/XUpload.ocx

    O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgpp.dll

    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

    O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)

    O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG9\avgemc.exe

    O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe

    O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

    O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

    O23 - Service: GRegService (Greg_Service) - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GregHSRW.exe

    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

    O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe

    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe

    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

    O23 - Service: MyWinLocker Service (MWLService) - Egis Technology Inc. - C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe

    O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe

    O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe

    O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe

    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

    O23 - Service: Updater Service - Acer - C:\Program Files\Acer\Acer Updater\UpdaterService.exe

    O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

    O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

    O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

    –

    End of file - 11366 bytes

    ———————————————————————————————————————————————————————————

    Ik hoop dat jullie er wat mee kunnen.

    Net ook weer, zoek ik het Hjt log en gaat het ineens als dikke str. in een dun pijpje zeg maar….

    vast bedankt!

  • Anonymous avatar

    pejola

    Hallo,

    Hier nog een aanvulling:

    Gisteren heb ik systeemherstel toegpast nadat op een gegeven moment de pc zelf afsloot en een blauw scherm verscheen met tekst, dat was echter binnen 2 secondes weg waardoor ik niet kon lezen wat er geschreven stond, en daarna de pc in veilge modus startte.

    Vandaag, na systeemherstel lijkt t weer het weer redelijk afgezien van een spel wat plotsklaps stopt en soms blijven hangen van rpogramma's.

  • Anonymous avatar

    fazantje

    Hoi Perjola,

    Ik ben geen ervaren loglezer meer, maar ik zie zo geen bijzonderheden in jou logjes.

    Maar wat heb jij met: EgisTec Egis Software Update

    Alle sites waar deze exe wordt aangeboden worden door mijn NOD32 scanner geblokkeerd, en dat betekend niet veel goeds:(

    Laat het onderstaand bestand eens controleren bij:

    http://www.virustotal.com/nl/

    Het gaat om dit bestand: C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe

    Een paar sites geven als save en bestemd voor windows 7, maar toch even voor de zekerheid.

    Plaats de uitslag graag hier.

    Heb je het gehele stappenplan nu doorlopen:S:S

    PLaats dan graag even 2 nieuwe logjes.

    Groetjes Huib:)

  • Anonymous avatar

    pejola

    Hoi,

    Hierbij dat log van die virustotal.com, malware en Hjt.

    Heb ook Housecall scan gedaan, geen bedreiging gevonden.

    Alleen dat Java gedoe lukt me niet, ik krijg niet de schermen die ik moet zien zoals omschreven in jullie stappenplan.

    De rest heb ik ook gedaan, alles ok.

    Wat ook nu zo is, is dat windows er zo'n 10 minuten overdoet om op te starten…heel lang “windows starten” mleding, daarna nog een poos het beginscherm met het rondraaiend wieltje….

    Zou het een hardware probleem kunnen zijn?

    Ik heb trouwens geprobeerd nero 6 te verwijderen via Configuratiescherm maar er staan nog allerlei bestanden en mapjes op de pc, enig idee of er een programma voor bestaat om dit soort dingen compleet op te ruimen?

    Ik volg wel alles van het Virushelp stappenplan.

    Bestand EgisUpdate.exe ontvangen op 2010.03.11 23:28:31 (UTC)

    Huidig status: Einde

    Resultaat: 0/42 (0.00%)

    Geformatteerd Resultaten afdrukken Antivirus Versie Laatst geüpdatet Resultaat

    a-squared 4.5.0.50 2010.03.11 -

    AhnLab-V3 5.0.0.2 2010.03.11 -

    AntiVir 8.2.1.180 2010.03.11 -

    Antiy-AVL 2.0.3.7 2010.03.11 -

    Authentium 5.2.0.5 2010.03.11 -

    Avast 4.8.1351.0 2010.03.11 -

    Avast5 5.0.332.0 2010.03.10 -

    AVG 9.0.0.787 2010.03.11 -

    BitDefender 7.2 2010.03.11 -

    CAT-QuickHeal 10.00 2010.03.11 -

    ClamAV 0.96.0.0-git 2010.03.12 -

    Comodo 4229 2010.03.11 -

    DrWeb 5.0.1.12222 2010.03.11 -

    eSafe 7.0.17.0 2010.03.11 -

    eTrust-Vet 35.2.7354 2010.03.11 -

    F-Prot 4.5.1.85 2010.03.11 -

    F-Secure 9.0.15370.0 2010.03.12 -

    Fortinet 4.0.14.0 2010.03.09 -

    GData 19 2010.03.11 -

    Ikarus T3.1.1.80.0 2010.03.11 -

    Jiangmin 13.0.900 2010.03.11 -

    K7AntiVirus 7.10.995 2010.03.11 -

    Kaspersky 7.0.0.125 2010.03.11 -

    McAfee 5917 2010.03.11 -

    McAfee+Artemis 5917 2010.03.11 -

    McAfee-GW-Edition 6.8.5 2010.03.11 -

    Microsoft 1.5502 2010.03.11 -

    NOD32 4937 2010.03.11 -

    Norman 6.04.08 2010.03.11 -

    nProtect 2009.1.8.0 2010.03.11 -

    Panda 10.0.2.2 2010.03.11 -

    PCTools 7.0.3.5 2010.03.11 -

    Prevx 3.0 2010.03.12 -

    Rising 22.38.03.04 2010.03.11 -

    Sophos 4.51.0 2010.03.12 -

    Sunbelt 5828 2010.03.12 -

    Symantec 20091.2.0.41 2010.03.11 -

    TheHacker 6.5.2.0.230 2010.03.11 -

    TrendMicro 9.120.0.1004 2010.03.11 -

    VBA32 3.12.12.2 2010.03.11 -

    ViRobot 2010.3.11.2222 2010.03.11 -

    VirusBuster 5.0.27.0 2010.03.11 -

    Extra informatie

    File size: 199464 bytes

    MD5 : ef533f9d1e4f51c783d4349a7c3f518f

    SHA1 : 882249b4e3db8b4dc29e31958855c56843399d18

    SHA256: 5a4b84cfc96f13af4b5ec1f693152a37da37fc08150ee37913ec5d6eeefd490e

    PEInfo: PE Structure information

    ( base data )

    entrypointaddress.: 0x4D56

    timedatestamp…..: 0x4A77C285 (Tue Aug 4 07:09:25 2009)

    machinetype…….: 0x14C (Intel I386)

    ( 5 sections )

    name viradd virsiz rawdsiz ntrpy md5

    .text 0x1000 0x478F 0x4800 6.05 4fb4ebb55f91810721c4f7324188cb48

    .rdata 0x6000 0x2282 0x2400 4.60 b19be2b236edb13cb6f8418a33e895d4

    .data 0x9000 0xFB8 0x200 3.71 75d26eda7e15c3a891c9044beeed6ed9

    .rsrc 0xA000 0x279C0 0x27A00 7.77 9bc555adb5c491741612ffab886bfd9a

    .reloc 0x32000 0x9EE 0xA00 5.37 3fd0d3173bbe82719db6e88fa3838591

    ( 6 imports )

    > gdi32.dll: GetStockObject

    > kernel32.dll: InterlockedExchange, Sleep, InterlockedCompareExchange, GetStartupInfoW, SetUnhandledExceptionFilter, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, IsDebuggerPresent, GetLastError, SetLastError, ExitProcess, GetModuleHandleW, GetVersionExW, GetProcAddress, FreeLibrary, LoadLibraryW, GetModuleFileNameW, CreateMutexW, ReleaseMutex, GetUserDefaultUILanguage

    > kernelcontroller.dll: _OnQueryStart@CUpdateMgr@elu@@MAEXXZ, _PauseTask@CUpdateMgr@elu@@IAEXXZ, _OnQueryEnd@CUpdateMgr@elu@@MAEXH@Z, _OnGetStart@CUpdateMgr@elu@@MAEXXZ, _OnGetEnd@CUpdateMgr@elu@@MAEXXZ, _OnInstallStart@CUpdateMgr@elu@@MAEXXZ, __0CUpdateMgr@elu@@QAE@XZ, __1CUpdateMgr@elu@@UAE@XZ, _Init@CUpdateMgr@elu@@IAEHXZ, _CommandQuery@CUpdateMgr@elu@@MAEPAXPAUHWND__@@KAAH@Z, _CommandDownload@CUpdateMgr@elu@@MAEPAXPAUHWND__@@AAV_$list@U__tagELU_UI_UPDATE_ITEM@@@2@AAH@Z, _CommandCancel@CUpdateMgr@elu@@IAEPAXXZ, _GetSchedulingType@CUpdateMgr@elu@@IAEHAAK@Z, _SetSchedulingType@CUpdateMgr@elu@@IAEHK@Z, _GetHistoryCount@CUpdateMgr@elu@@IAEHXZ, _GetHistoryInfo@CUpdateMgr@elu@@IAEHHAAUtagELUUPATEHISTORY@@@Z, _ResumeTask@CUpdateMgr@elu@@IAEXXZ

    > msvcr90.dll: _crt_debugger_hook, __type_info_dtor_internal_method@type_info@@QAEXXZ, _invoke_watson, _except_handler4_common, _terminate@@YAXXZ, _decode_pointer, _onexit, _lock, __dllonexit, _unlock, __set_app_type, _encode_pointer, __p__fmode, __p__commode, _adjust_fdiv, __setusermatherr, _configthreadlocale, _initterm_e, _initterm, _wcmdln, __CxxFrameHandler3, _controlfp_s, _CxxThrowException, exit, memset, __3@YAXPAX@Z, __1exception@std@@UAE@XZ, __0exception@std@@QAE@ABV01@@Z, wcslen, __2@YAPAXI@Z, wcsncpy, wcscpy, wcsrchr, wcsncpy_s, wcscat_s, wcscpy_s, __0exception@std@@QAE@XZ, __set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z, wprintf, _set_invalid_parameter_handler, _amsg_exit, __wgetmainargs, _cexit, _exit, _XcptFilter

    > shell32.dll: Shell_NotifyIconW

    > user32.dll: GetMessageW, wsprintfW, TranslateMessage, DispatchMessageW, FindWindowW, PostQuitMessage, RegisterWindowMessageW, SetForegroundWindow, LoadStringW, IsWindow, SendMessageW, EnableWindow, EndPaint, DestroyWindow, PostMessageW, LoadCursorW, BeginPaint, LoadIconW, GetWindowLongW, SetWindowLongW, ShowWindow, CreateWindowExW, MessageBoxW, ReleaseCapture, RegisterClassW, IsWindowVisible, UpdateWindow, DefWindowProcW, SetCapture

    ( 0 exports )

    TrID : File type identification

    Win32 Executable MS Visual C++ (generic) (75.0%)

    Win32 Executable Generic (16.9%)

    Generic Win/DOS Executable (3.9%)

    DOS Executable Generic (3.9%)

    Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)

    ssdeep: 6144:ZSoOOv1Kw1IjGBAPbzbFC91Kw1IjGBAPbzbFCl:zrIiBcbzbs9rIiBcbzbsl

    sigcheck: publisher….: Egis Technology Inc.

    copyright….: Copyright ©2008 Egis Technology Inc. All rights reserved.

    product……: EgisTec In-Product Service

    description..: EgisUpdate Release Application

    original name: EgisUpdate.exe

    internal name: LiveUpda

    file version.: 1. 0. 14. 1021

    comments…..: n/a

    signers……: EGIS TECHNOLOGY INC.

    VeriSign Class 3 Code Signing 2004 CA

    Class 3 Public Primary Certification Authority

    signing date.: 6:09 AM 8/4/2009

    verified…..: -

    PEiD : -

    RDS : NSRL Reference Data Set

    ——————————————————————————————————————————————————————————–

    Logfile of Trend Micro HijackThis v2.0.2

    Scan saved at 13:56:32, on 14-3-2010

    Platform: Unknown Windows (WinNT 6.01.3504)

    MSIE: Internet Explorer v8.00 (8.00.7600.16385)

    Boot mode: Normal

    Running processes:

    C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe

    C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe

    D:\D-documenten,foto's etc\pc cleaners\Spybot - Search & Destroy\TeaTimer.exe

    C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

    C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe

    C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe

    C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe

    C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe

    C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe

    C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe

    C:\Program Files (x86)\Java\jre6\bin\jusched.exe

    C:\Program Files (x86)\AVG\AVG9\avgtray.exe

    C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe

    C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe

    C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe

    C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWTray.exe

    C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe

    C:\Windows\SysWow64\Macromed\Flash\FlashUtil10d.exe

    C:\Program Files (x86)\Internet Explorer\iexplore.exe

    C:\Program Files (x86)\Internet Explorer\iexplore.exe

    C:\Program Files (x86)\Internet Explorer\iexplore.exe

    D:\D-documenten,foto's etc\pc cleaners\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&m=aspire_x3812&r=17361209ln07973480ti5lx8m1j313

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.startpagina.nl/

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&m=aspire_x3812&r=17361209ln07973480ti5lx8m1j313

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&m=aspire_x3812&r=17361209ln07973480ti5lx8m1j313

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

    R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dll

    O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssie.dll

    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - D:\D-DOCU~1\PCCLEA~1\SPYBOT~1\SDHelper.dll

    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

    O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dll

    O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

    O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

    O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files (x86)\AVG\AVG9\Toolbar\IEToolbar.dll

    O4 - HKLM\..\Run: “C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe” -h -k

    O4 - HKLM\..\Run: C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe

    O4 - HKLM\..\Run: “C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe”

    O4 - HKLM\..\Run: “C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe”

    O4 - HKLM\..\Run: “C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe” MSRun

    O4 - HKLM\..\Run: “C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe”

    O4 - HKLM\..\Run: “C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe”

    O4 - HKLM\..\Run: C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe

    O4 - HKLM\..\Run: C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe

    O4 - HKLM\..\Run: “C:\Program Files (x86)\Java\jre6\bin\jusched.exe”

    O4 - HKLM\..\Run: “C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe”

    O4 - HKLM\..\Run: C:\PROGRA~2\AVG\AVG9\avgtray.exe

    O4 - HKCU\..\Run: D:\D-documenten,foto's etc\pc cleaners\Spybot - Search & Destroy\TeaTimer.exe

    O4 - HKUS\S-1-5-19\..\Run: %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User ‘LOCAL SERVICE’)

    O4 - HKUS\S-1-5-19\..\RunOnce: C:\Windows\System32\mctadmin.exe (User ‘LOCAL SERVICE’)

    O4 - HKUS\S-1-5-20\..\Run: %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User ‘NETWORK SERVICE’)

    O4 - HKUS\S-1-5-20\..\RunOnce: C:\Windows\System32\mctadmin.exe (User ‘NETWORK SERVICE’)

    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

    O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200

    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000

    O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra ‘Tools’ menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll

    O9 - Extra ‘Tools’ menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL

    O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\D-DOCU~1\PCCLEA~1\SPYBOT~1\SDHelper.dll

    O9 - Extra ‘Tools’ menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\D-DOCU~1\PCCLEA~1\SPYBOT~1\SDHelper.dll

    O13 - Gopher Prefix:

    O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - https://asp.photoprintit.de/microsite/8/defaults/activex/XUpload.ocx

    O16 - DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} (Image Uploader Control) - http://cache.hyves-static.net/statics/Aurigma/ImageUploader4.cab

    O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgpp.dll

    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

    O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)

    O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG9\avgemc.exe

    O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe

    O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

    O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

    O23 - Service: GRegService (Greg_Service) - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GregHSRW.exe

    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

    O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe

    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files (x86)\Lavasoft\Ad-Aware\AAWService.exe

    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

    O23 - Service: MyWinLocker Service (MWLService) - Egis Technology Inc. - C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe

    O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe

    O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe

    O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - D:\D-documenten,foto's etc\pc cleaners\Spybot - Search & Destroy\SDWinSec.exe

    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

    O23 - Service: Updater Service - Acer - C:\Program Files\Acer\Acer Updater\UpdaterService.exe

    O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

    O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

    O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

    –

    End of file - 12092 bytes

    ———————————————————————————————————————————————————————————

    Malwarebytes' Anti-Malware 1.44

    Database versie: 3865

    Windows 6.1.7600

    Internet Explorer 8.0.7600.16385

    14-3-2010 14:13:39

    mbam-log-2010-03-14 (14-13-39).txt

    Scan type: Snelle Scan

    Objecten gescand: 102255

    Verstreken tijd: 3 minute(s), 6 second(s)

    Geheugenprocessen geïnfecteerd: 0

    Geheugenmodulen geïnfecteerd: 0

    Registersleutels geïnfecteerd: 0

    Registerwaarden geïnfecteerd: 0

    Registerdata bestanden geïnfecteerd: 0

    Mappen geïnfecteerd: 0

    Bestanden geïnfecteerd: 0

    Geheugenprocessen geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Geheugenmodulen geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Registersleutels geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Registerwaarden geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Registerdata bestanden geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Mappen geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Bestanden geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    ————————————————————————————————————————————————————————–

    Tot zover mijn bevindingen, en bedankt maar weer…

  • Anonymous avatar

    Ruudje

    pejola Schreef:

    ——————————————————-

    Hoi,

    > Wat ook nu zo is, is dat windows er zo'n 10 minuten overdoet om op te starten…heel lang “windows starten” melding,

    > daarna nog een poos het beginscherm met het rondraaiend wieltje….

    > Zou het een hardware probleem kunnen zijn?

    Zou kunnen.

    Voer eerst eens schijfcontrole uit op de harde schijf.

    Voer daarna eens schijfdefragmentatie uit.

    > O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

    > O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)

    > O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

    > O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

    > O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    > O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

    > O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    > O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    > O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

    > O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    > O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

    > O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

    > O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

    > O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

    > O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    > O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

    > O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

    > O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

    > O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

    > O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

    Als ik zo de bovenstaande meldingen zie denk ik eerder dat jou Windows-systeem behoorlijk beschadigd is.

    De bestanden die vermist worden zijn wel essentiele bestanden van Windows.

  • Anonymous avatar

    Argus

    Deze bestanden worden niet vermist :)

    Hijack This ondersteunt Windows 7 niet

    “De bestanden die vermist worden zijn wel essentiele bestanden van Windows”

  • Anonymous avatar

    pejola

    Bedoel je met schijfcontrole: schijfopruiming van de C en de D schijf?

    dat heb ik al gedaan….of bedoel je iets anders??

    Gr. Pejola

  • Anonymous avatar

    pejola

    heb inmiddels de schijven gecontroleerd én gedefragmenteerd..

    heb je nog andere opties??:S

  • Anonymous avatar

    fazantje

    Argus schreef o.a.:

    >>>Hijack This ondersteunt Windows 7 niet<<<

    Is dat zo:S:S

    Hier draait ie perfect hoor(tu)

    Huib:)

  • Anonymous avatar

    fazantje

    Hoi Pejola,

    Download eerst eens Avast:

    http://www.avast.nl/avast_antivirus_producten/avast_Free_Antivirus

    Nog niet installeren!!

    Verwijder nu Ad aware, Spybot SD en panda.

    Doe nu een scan met Ccleaner en clean up.

    http://www.wurksjops.nl/ccleaner/

    Loop ook de handleiding door!!

    http://www.stevengould.org/index.php?option=com_content&task=view&id=29&Itemid=72

    Installeer nu Avast.

    Start je computer opnieuw op en laat hierna even weten hoe het nu gaat.

    Succes,

    Huib:)