trage notebook

• 

  erik

  11-01-2012 21:54

  hallo

  ik hoop dat ik hier verder kom. Mijn toshiba notebook is erg traag de laatste tijd. ook heb ik ineens een verdacht mapje swt, maar ik denk niet dat ik een virus heb..

  gr erik

  hier volgen de logjes:

  Malwarebytes Anti-Malware 1.60.0.1800

  www.malwarebytes.org

  Databaseversie: v2012.01.11.04

  Windows Vista Service Pack 2 x86 NTFS

  Internet Explorer 9.0.8112.16421

  Erik :: PC_VAN_ERIK

  11-1-2012 15:00:37

  mbam-log-2012-01-11 (15-00-37).txt

  Scantype: Snelle scan

  Ingeschakelde scanopties: Geheugen | Opstarten | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM

  Uitgeschakelde scanopties: P2P

  Objecten gescand: 185312

  Verstreken tijd: 11 minuut/minuten, 22 seconde(n)

  Geheugenprocessen gedetecteerd: 0

  (Geen kwaadaardige objecten gedetecteerd)

  Geheugenmodulen gedetecteerd: 0

  (Geen kwaadaardige objecten gedetecteerd)

  Registersleutels gedetecteerd: 0

  (Geen kwaadaardige objecten gedetecteerd)

  Registerwaarden gedetecteerd: 0

  (Geen kwaadaardige objecten gedetecteerd)

  Registerdata gedetecteerd: 0

  (Geen kwaadaardige objecten gedetecteerd)

  Mappen gedetecteerd: 0

  (Geen kwaadaardige objecten gedetecteerd)

  Bestanden gedetecteerd: 0

  (Geen kwaadaardige objecten gedetecteerd)

  (einde)

  Logfile of Trend Micro HijackThis v2.0.4

  Scan saved at 21:47:53, on 11-1-2012

  Platform: Windows Vista SP2 (WinNT 6.00.1906)

  MSIE: Internet Explorer v9.00 (9.00.8112.16421)

  Boot mode: Normal

  Running processes:

  C:\Windows\system32\Dwm.exe

  C:\Windows\system32\taskeng.exe

  C:\Windows\Explorer.EXE

  C:\Program Files\Toshiba\Bluetooth Toshiba Stack\ItSecMng.exe

  C:\Program Files\Apoint2K\Apoint.exe

  C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe

  C:\Program Files\Toshiba\Power Saver\TPwrMain.exe

  C:\Program Files\Toshiba\SmoothView\SmoothView.exe

  C:\Program Files\Toshiba\FlashCards\TCrdMain.exe

  C:\Program Files\Apoint2K\ApMsgFwd.exe

  C:\Program Files\Toshiba\HDMICtrlMan\HDMICtrlMan.exe

  C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

  C:\Program Files\Trust\Trust R-series Mouse And Keyboard\MouseDrv.exe

  C:\Program Files\Toshiba TEMPRO\TemproTray.exe

  C:\Program Files\Apoint2K\Apntex.exe

  C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

  C:\Program Files\DivX\DivX Update\DivXUpdate.exe

  C:\Program Files\Alwil Software\Avast5\AvastUI.exe

  C:\Program Files\Apoint2K\HidFind.exe

  C:\Windows\ehome\ehtray.exe

  C:\Windows\WindowsMobile\wmdSync.exe

  C:\Windows\ehome\ehmsas.exe

  C:\Program Files\Windows Media Player\wmpnscfg.exe

  C:\Program Files\Toshiba\HDMICtrlMan\HCMSoundChanger.exe

  C:\Program Files\Internet Explorer\iexplore.exe

  C:\Program Files\Microsoft Office\Office12\WINWORD.EXE

  C:\Program Files\Internet Explorer\iexplore.exe

  C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe

  C:\Windows\system32\Macromed\Flash\FlashUtil11e_ActiveX.exe

  C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

  C:\Program Files\Internet Explorer\iexplore.exe

  C:\Program Files\Internet Explorer\iexplore.exe

  C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

  C:\Windows\system32\SearchFilterHost.exe

  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl/

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl

  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

  R3 - URLSearchHook: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\tbVuze.dll

  O1 - Hosts: ::1 localhost

  O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

  O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll

  O2 - BHO: Increase performance and video formats for your HTML5 - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll

  O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)

  O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

  O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll

  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

  O2 - BHO: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\tbVuze.dll

  O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

  O3 - Toolbar: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\tbVuze.dll

  O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll

  O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

  O4 - HKLM\..\Run: %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START

  O4 - HKLM\..\Run: C:\Program Files\Apoint2K\Apoint.exe

  O4 - HKLM\..\Run: “C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe” /start

  O4 - HKLM\..\Run: %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE

  O4 - HKLM\..\Run: %ProgramFiles%\TOSHIBA\TBS\HSON.exe

  O4 - HKLM\..\Run: %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe

  O4 - HKLM\..\Run: %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe

  O4 - HKLM\..\Run: C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe

  O4 - HKLM\..\Run: C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe

  O4 - HKLM\..\Run: C:\Program Files\Trust\Trust R-series Mouse And Keyboard\StartAutorun.exe MouseDrv.exe

  O4 - HKLM\..\Run: “C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe”

  O4 - HKLM\..\Run: C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

  O4 - HKLM\..\Run: %windir%\WindowsMobile\wmdSync.exe

  O4 - HKLM\..\Run: C:\Program Files\Toshiba TEMPRO\TemproTray.exe

  O4 - HKLM\..\Run: “C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Java\jre6\bin\jusched.exe”

  O4 - HKLM\..\Run: “C:\Program Files\DivX\DivX Update\DivXUpdate.exe” /CHECKNOW

  O4 - HKLM\..\Run: “C:\Program Files\Alwil Software\Avast5\avastUI.exe” /nogui

  O4 - HKCU\..\Run: C:\Windows\ehome\ehTray.exe

  O4 - HKCU\..\Run: C:\Program Files\Windows Media Player\WMPNSCFG.exe

  O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files\Toshiba\TRDCReminder\TRDCReminder.exe (User ‘Default user’)

  O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

  O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MI69AF~1\OFFICE11\EXCEL.EXE/3000

  O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

  O9 - Extra ‘Tools’ menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

  O9 - Extra button: (no name) - {76577871-04EC-495E-A12B-91F7C3600AFA} - http://www.webtip.ch/cgi-bin/toshiba/tracker_url2.pl?NL (file missing)

  O9 - Extra button: Amazon.co.uk - {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.co.uk/exec/obidos/redirect-home?tag=Toshibaukbholink-21&site=home (file missing)

  O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI69AF~1\OFFICE11\REFIEBAR.DLL

  O11 - Options group: Accelerated graphics

  O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab

  O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

  O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

  O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GoogleDesktopNetwork3.dll

  O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

  O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe

  O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

  O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe

  O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

  O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

  O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

  O23 - Service: Jumpstart Wifi Protected Setup (jswpsapi) - Atheros Communications, Inc. - C:\Program Files\Jumpstart\jswpsapi.exe

  O23 - Service: Keyboard And Mouse Communication Service (KMWDSERVICE) - UASSOFT.COM - C:\Program Files\Trust\Trust R-series Mouse And Keyboard\KMWDSrv.exe

  O23 - Service: O2Micro Flash Memory Card Service (o2flash) - O2Micro International - C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe

  O23 - Service: SmartFaceVWatchSrv - Toshiba - C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatchSrv.exe

  O23 - Service: Notebook Performance Tuning Service (TEMPRO) (TemproMonitoringService) - Toshiba Europe GmbH - C:\Program Files\Toshiba TEMPRO\TemproSvc.exe

  O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe

  O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe

  O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe

  O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

  O23 - Service: TOSHIBA SMART Log Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe

  O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

  O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

  –

  End of file - 10501 bytes

  Rapporteren
• 

  fazantje

  11-01-2012 22:17

  Hoi Erik,

  Verwijder als eerst vanuit: C - configuratiescherm - programma's en onderdelen: Conduit Engine en Vuze Remote Toolbar

  Start je notebook opnieuw op en doe het volgende:

  Start HijackThis, klik op scan en vink indien nog aanwezig de volgende regels aan:

  O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll

  O2 - BHO: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\tbVuze.dll

  O3 - Toolbar: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\tbVuze.dll

  O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll

  Sluit alle vensters, behalve HijackThis en klik op Fix checked.

  Update jou virusscanner, je hebt nu versie 5 en versie 6 is er al;)

  Ook jou java is verouderd.

  Klik hier voor Java SE 7u2 en download daar de juiste Java versie naar uw bureaublad, ik neem aan 32 bits.

  Sluit internet en alle programma's die eventueel open zijn.

  Ga naar: Start - Configuratiescherm - Programma's en onderdelen en verwijder alle oudere versies van Java.

  Vink alles aan met Java Runtime Environment (JRE of J2SE) in de naam.

  Klik dan op Verwijderen of op de Wijzig/Verwijder knop.

  Herhaal dit tot alle oudere versies verdwenen zijn.

  Start nu jou computer opnieuw op.

  Dubbelklik vervolgens op jre-7-windows-x86 op je Bureaublad om de nieuwste versie van Java te installeren.

  Plaats nu even een nieuw HijackThis logje.

  Succes,

  Huib;)

  

  Rapporteren
• 

  erik

  12-01-2012 20:47

  hoi huib bedankt voor het snelle reageren.

  heb voor zover alles gedaan behalve:

  -virusscanner is wel versie 6

  -oudere versies van java heb ik niet gevonden

  hier het logje en bedankt

  Logfile of Trend Micro HijackThis v2.0.4

  Scan saved at 20:45:26, on 12-1-2012

  Platform: Windows Vista SP2 (WinNT 6.00.1906)

  MSIE: Internet Explorer v9.00 (9.00.8112.16421)

  Boot mode: Normal

  Running processes:

  C:\Windows\system32\Dwm.exe

  C:\Windows\system32\taskeng.exe

  C:\Windows\Explorer.EXE

  C:\Program Files\Toshiba\Bluetooth Toshiba Stack\ItSecMng.exe

  C:\Program Files\Apoint2K\Apoint.exe

  C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe

  C:\Program Files\Toshiba\Power Saver\TPwrMain.exe

  C:\Program Files\Toshiba\SmoothView\SmoothView.exe

  C:\Program Files\Apoint2K\ApMsgFwd.exe

  C:\Program Files\Toshiba\FlashCards\TCrdMain.exe

  C:\Program Files\Toshiba\HDMICtrlMan\HDMICtrlMan.exe

  C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

  C:\Windows\WindowsMobile\wmdSync.exe

  C:\Program Files\Toshiba TEMPRO\TemproTray.exe

  C:\Program Files\Trust\Trust R-series Mouse And Keyboard\MouseDrv.exe

  C:\Program Files\DivX\DivX Update\DivXUpdate.exe

  C:\Program Files\Apoint2K\Apntex.exe

  C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

  C:\Program Files\Alwil Software\Avast5\AvastUI.exe

  C:\Program Files\Toshiba\HDMICtrlMan\HCMSoundChanger.exe

  C:\Windows\ehome\ehtray.exe

  C:\Program Files\Windows Media Player\wmpnscfg.exe

  C:\Program Files\Apoint2K\HidFind.exe

  C:\Windows\ehome\ehmsas.exe

  C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

  C:\Windows\system32\Macromed\Flash\FlashUtil11e_ActiveX.exe

  C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

  C:\Program Files\Internet Explorer\iexplore.exe

  C:\Program Files\Internet Explorer\iexplore.exe

  C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe

  C:\Program Files\Internet Explorer\iexplore.exe

  C:\Program Files\Internet Explorer\iexplore.exe

  C:\Program Files\Internet Explorer\iexplore.exe

  C:\Windows\system32\SearchProtocolHost.exe

  C:\Windows\system32\SearchFilterHost.exe

  C:\Program Files\Internet Explorer\iexplore.exe

  C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl/

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl

  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

  R3 - URLSearchHook: (no name) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - (no file)

  O1 - Hosts: ::1 localhost

  O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

  O2 - BHO: Increase performance and video formats for your HTML5 - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll

  O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)

  O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

  O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

  O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

  O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

  O4 - HKLM\..\Run: %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START

  O4 - HKLM\..\Run: C:\Program Files\Apoint2K\Apoint.exe

  O4 - HKLM\..\Run: “C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe” /start

  O4 - HKLM\..\Run: %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE

  O4 - HKLM\..\Run: %ProgramFiles%\TOSHIBA\TBS\HSON.exe

  O4 - HKLM\..\Run: %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe

  O4 - HKLM\..\Run: %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe

  O4 - HKLM\..\Run: C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe

  O4 - HKLM\..\Run: C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe

  O4 - HKLM\..\Run: C:\Program Files\Trust\Trust R-series Mouse And Keyboard\StartAutorun.exe MouseDrv.exe

  O4 - HKLM\..\Run: “C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe”

  O4 - HKLM\..\Run: C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

  O4 - HKLM\..\Run: %windir%\WindowsMobile\wmdSync.exe

  O4 - HKLM\..\Run: C:\Program Files\Toshiba TEMPRO\TemproTray.exe

  O4 - HKLM\..\Run: “C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe”

  O4 - HKLM\..\Run: “C:\Program Files\DivX\DivX Update\DivXUpdate.exe” /CHECKNOW

  O4 - HKLM\..\Run: “C:\Program Files\Alwil Software\Avast5\avastUI.exe” /nogui

  O4 - HKLM\..\Run: “C:\Program Files\Common Files\Java\Java Update\jusched.exe”

  O4 - HKCU\..\Run: C:\Windows\ehome\ehTray.exe

  O4 - HKCU\..\Run: C:\Program Files\Windows Media Player\WMPNSCFG.exe

  O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files\Toshiba\TRDCReminder\TRDCReminder.exe (User ‘Default user’)

  O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

  O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MI69AF~1\OFFICE11\EXCEL.EXE/3000

  O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

  O9 - Extra ‘Tools’ menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

  O9 - Extra button: (no name) - {76577871-04EC-495E-A12B-91F7C3600AFA} - http://www.webtip.ch/cgi-bin/toshiba/tracker_url2.pl?NL (file missing)

  O9 - Extra button: Amazon.co.uk - {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.co.uk/exec/obidos/redirect-home?tag=Toshibaukbholink-21&site=home (file missing)

  O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI69AF~1\OFFICE11\REFIEBAR.DLL

  O11 - Options group: Accelerated graphics

  O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab

  O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

  O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

  O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GoogleDesktopNetwork3.dll

  O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

  O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe

  O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

  O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe

  O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

  O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

  O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

  O23 - Service: Jumpstart Wifi Protected Setup (jswpsapi) - Atheros Communications, Inc. - C:\Program Files\Jumpstart\jswpsapi.exe

  O23 - Service: Keyboard And Mouse Communication Service (KMWDSERVICE) - UASSOFT.COM - C:\Program Files\Trust\Trust R-series Mouse And Keyboard\KMWDSrv.exe

  O23 - Service: O2Micro Flash Memory Card Service (o2flash) - O2Micro International - C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe

  O23 - Service: SmartFaceVWatchSrv - Toshiba - C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatchSrv.exe

  O23 - Service: Notebook Performance Tuning Service (TEMPRO) (TemproMonitoringService) - Toshiba Europe GmbH - C:\Program Files\Toshiba TEMPRO\TemproSvc.exe

  O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe

  O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe

  O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe

  O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

  O23 - Service: TOSHIBA SMART Log Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe

  O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

  O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

  –

  End of file - 10040 bytes

  Rapporteren
• 

  Jos H

  12-01-2012 20:56

  Hoi Erik

  Dan staat jou virusscanner van Avast in een verkeerde map;

  Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

  Maar dat kan wel kloppen ,want ik heb ook versie 6 in dezelfde map : Avast 5

  Rapporteren
• 

  Ben

  12-01-2012 21:17

  Hallo erik,

  Heb jij AVG op je pc gehad of nog staan verwijder die dan want 2 virusscanners werken niet samen.

  Verwijder als eerst vanuit: C - configuratiescherm - programma's en onderdelen: (indien aanwezig)

  AVG

  Start HijackThis, klik op scan en vink indien nog aanwezig de volgende regel aan:

  R3 - URLSearchHook: (no name) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - (no file)

  O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)

  Sluit alle vensters, behalve HijackThis en klik op Fix checked.

  Herstart je pc.

  Verwijder: C:\Program Files\AVG <== deze map

  Kan je mij vertellen wat er in dat verdacht mapje swt staat ?

  Als hij leeg is kan je hem gewoon verwijderen.

  Plaats hierna nog een nieuw HijackThis logje en vertel hoe het met je problemen is.

  Gr. Ben

  

  Rapporteren
• 

  erik

  12-01-2012 22:40

  hoi Ben

  ik kan van AVG niets terugvinden,niet in C - configuratiescherm - programma's en onderdelen, en niet onder programfiles.

  onder de map swt zit:

  nog een mapje met -lib

  nog een mapje met -win32

  nog een mapje met -x86

  daarna twee bestandjes:

  -swt-gdip-win32-3802.dll (toepassingsuitbreiding)

  -swt-win32-3802.dll (toepassingsuitbreiding)

  gr.erik

  Logfile of Trend Micro HijackThis v2.0.4

  Scan saved at 22:39:41, on 12-1-2012

  Platform: Windows Vista SP2 (WinNT 6.00.1906)

  MSIE: Internet Explorer v9.00 (9.00.8112.16421)

  Boot mode: Normal

  Running processes:

  C:\Windows\system32\Dwm.exe

  C:\Windows\system32\taskeng.exe

  C:\Program Files\Toshiba\Bluetooth Toshiba Stack\ItSecMng.exe

  C:\Program Files\Apoint2K\Apoint.exe

  C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe

  C:\Program Files\Toshiba\Power Saver\TPwrMain.exe

  C:\Program Files\Toshiba\SmoothView\SmoothView.exe

  C:\Program Files\Apoint2K\ApMsgFwd.exe

  C:\Program Files\Toshiba\FlashCards\TCrdMain.exe

  C:\Program Files\Toshiba\HDMICtrlMan\HDMICtrlMan.exe

  C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

  C:\Program Files\Apoint2K\Apntex.exe

  C:\Windows\WindowsMobile\wmdSync.exe

  C:\Program Files\Apoint2K\HidFind.exe

  C:\Program Files\Trust\Trust R-series Mouse And Keyboard\MouseDrv.exe

  C:\Program Files\Toshiba TEMPRO\TemproTray.exe

  C:\Program Files\DivX\DivX Update\DivXUpdate.exe

  C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

  C:\Program Files\Toshiba\HDMICtrlMan\HCMSoundChanger.exe

  C:\Program Files\Windows Media Player\wmpnscfg.exe

  C:\Program Files\Alwil Software\Avast5\AvastUI.exe

  C:\Program Files\Common Files\Java\Java Update\jusched.exe

  C:\Windows\ehome\ehtray.exe

  C:\Program Files\Internet Explorer\iexplore.exe

  C:\Windows\ehome\ehmsas.exe

  C:\Program Files\Internet Explorer\iexplore.exe

  C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe

  C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

  C:\Windows\system32\Macromed\Flash\FlashUtil11e_ActiveX.exe

  C:\Program Files\Internet Explorer\iexplore.exe

  C:\Windows\Explorer.exe

  C:\Program Files\Internet Explorer\iexplore.exe

  C:\Windows\system32\cmd.exe

  C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

  C:\Windows\system32\cmd.exe

  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl/

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl

  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

  O1 - Hosts: ::1 localhost

  O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

  O2 - BHO: Increase performance and video formats for your HTML5 - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll

  O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

  O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

  O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

  O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

  O4 - HKLM\..\Run: %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START

  O4 - HKLM\..\Run: C:\Program Files\Apoint2K\Apoint.exe

  O4 - HKLM\..\Run: “C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe” /start

  O4 - HKLM\..\Run: %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE

  O4 - HKLM\..\Run: %ProgramFiles%\TOSHIBA\TBS\HSON.exe

  O4 - HKLM\..\Run: %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe

  O4 - HKLM\..\Run: %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe

  O4 - HKLM\..\Run: C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe

  O4 - HKLM\..\Run: C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe

  O4 - HKLM\..\Run: C:\Program Files\Trust\Trust R-series Mouse And Keyboard\StartAutorun.exe MouseDrv.exe

  O4 - HKLM\..\Run: “C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe”

  O4 - HKLM\..\Run: C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

  O4 - HKLM\..\Run: %windir%\WindowsMobile\wmdSync.exe

  O4 - HKLM\..\Run: C:\Program Files\Toshiba TEMPRO\TemproTray.exe

  O4 - HKLM\..\Run: “C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe”

  O4 - HKLM\..\Run: “C:\Program Files\DivX\DivX Update\DivXUpdate.exe” /CHECKNOW

  O4 - HKLM\..\Run: “C:\Program Files\Alwil Software\Avast5\avastUI.exe” /nogui

  O4 - HKLM\..\Run: “C:\Program Files\Common Files\Java\Java Update\jusched.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe”

  O4 - HKCU\..\Run: C:\Windows\ehome\ehTray.exe

  O4 - HKCU\..\Run: C:\Program Files\Windows Media Player\WMPNSCFG.exe

  O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files\Toshiba\TRDCReminder\TRDCReminder.exe (User ‘Default user’)

  O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

  O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MI69AF~1\OFFICE11\EXCEL.EXE/3000

  O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

  O9 - Extra ‘Tools’ menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

  O9 - Extra button: (no name) - {76577871-04EC-495E-A12B-91F7C3600AFA} - http://www.webtip.ch/cgi-bin/toshiba/tracker_url2.pl?NL (file missing)

  O9 - Extra button: Amazon.co.uk - {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.co.uk/exec/obidos/redirect-home?tag=Toshibaukbholink-21&site=home (file missing)

  O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI69AF~1\OFFICE11\REFIEBAR.DLL

  O11 - Options group: Accelerated graphics

  O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab

  O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

  O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

  O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GoogleDesktopNetwork3.dll

  O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

  O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe

  O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

  O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe

  O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

  O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

  O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

  O23 - Service: Jumpstart Wifi Protected Setup (jswpsapi) - Atheros Communications, Inc. - C:\Program Files\Jumpstart\jswpsapi.exe

  O23 - Service: Keyboard And Mouse Communication Service (KMWDSERVICE) - UASSOFT.COM - C:\Program Files\Trust\Trust R-series Mouse And Keyboard\KMWDSrv.exe

  O23 - Service: O2Micro Flash Memory Card Service (o2flash) - O2Micro International - C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe

  O23 - Service: SmartFaceVWatchSrv - Toshiba - C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatchSrv.exe

  O23 - Service: Notebook Performance Tuning Service (TEMPRO) (TemproMonitoringService) - Toshiba Europe GmbH - C:\Program Files\Toshiba TEMPRO\TemproSvc.exe

  O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe

  O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe

  O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe

  O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

  O23 - Service: TOSHIBA SMART Log Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe

  O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

  O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

  –

  End of file - 9687 bytes

  Rapporteren
• 

  Ben

  13-01-2012 07:45

  Hallo erik,

  Het is van Eclipse Foundation.

  http://www.isthisfilesafe.com/sha1/7B0BEBAD090EC308116E53E5968978FB3DEEC922_details.aspx

  http://en.wikipedia.org/wiki/Standard_Widget_Toolkit

  Kijk of hier: C - configuratiescherm - programma's en onderdelen: (indien aanwezig)

  Eclipse

  Standard Widget Toolkit

  Tussen staat en dan kan verwijderen.

  Staan ze daar niet tussen en je gebruikt het niet, laat dat dan even weten dan kunnen we het anders aanpakken.

  (Als je de map weg wil hebben)

  Gr.Ben

  

  Rapporteren
• 

  erik

  13-01-2012 10:50

  hoi ben

  ik kan Eclipse en Standard Widget Toolkit niet vinden en ik gebruik ze niet dus van mij mogen ze weg!

  heb nog wel het idee dat de pc trager is dan voorheen en op het moment dat ik dit type krijg ik een blue screen met de volgende melding:

  ps;ben de laatste tijd vaker een blauw scherm tegengekomen.was ik nog vergeten te melden..

  Gebeurtenisnaam van probleem: BlueScreen

  Versie van besturingssysteem: 6.0.6002.2.2.0.768.3

  Landinstelling-id: 1043

  Aanvullende informatie over dit probleem:

  BCCode: c5

  BCP1: 0147DC2C

  BCP2: 00000002

  BCP3: 00000001

  BCP4: 82B2F82C

  OS Version: 6_0_6002

  Service Pack: 2_0

  Product: 768_1

  Bestanden die helpen bij het beschrijven van het probleem:

  C:\Windows\Minidump\Mini011312-01.dmp

  C:\Users\Erik\AppData\Local\temp\WER-82165-0.sysdata.xml

  C:\Users\Erik\AppData\Local\temp\WERF814.tmp.version.txt

  gr.erik

  Lees onze privacyverklaring:

  http://go.microsoft.com/fwlink/?linkid=50163&clcid=0x0413

  Rapporteren
• 

  Ben

  13-01-2012 14:20

  Hallo erik,

  Kijk of al je drivers en of stuurprogramma's up-to-date zijn of goed werken ?

  En of er gele vraag tekens in apparaatbeheer staan; http://windows.microsoft.com/nl-NL/windows-vista/Open-Device-Manager

  Voer ook dit even uit:

  Download ComboFix van één van deze locaties:

  Link 1

  Link 2

  * BELANGRIJK !!! Sla ComboFix.exe op je Bureaublad op.

  >>Hier<< kunt u lezen hoe u Combofix dient te gebruiken.

  1. Schakel alle antivirus- en antispywareprogramma's uit, want anders kunnen ze elkaar tegen werken.

  Avast

  •Klik met de rechtermuisknop op het pictogram Avast rechts onder.

  •Klik op Avast schilden instellingen.

  En dan kan je Avast uitschakkelen.

  2. Het kan voorkomen dat de computer meerdere malen opnieuw gestart moet worden, dit is normaal.

  3. Dubbelklik op "Combofix.exe" om de tool te starten.

  4. Klik niet in het scherm van Combofix als deze actief is, hierdoor kan de ‘tool’ vastlopen.

  * Noot !!! Als er een error wordt getoond met de melding “Illegal operation attempted on a registery key that has been marked for deletion.” herstart dan de computer.

  5. Wanneer ComboFix klaar is, zal het het een logbestand voor je maken.

  Het kan enige tijd duren voordat het logje van combofix komt, dus denk niet van hij is op tilt.

  Post de inhoud van dit logbestand (te vinden als C:\ComboFix.txt) in je volgende bericht samen met een nieuw hijackThis logje.

  Gr.Ben

  

  Rapporteren
• 

  erik

  14-01-2012 12:18

  hoi ben hier volgen de logjes;

  ComboFix 12-01-13.05 - Erik 14-01-2012 11:28:38.11.2 - x86

  Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.31.1043.18.3070.1815

  Gestart vanuit: c:\users\Erik\Desktop\ComboFix.exe

  AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}

  SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}

  SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

  .

  .

  (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

  .

  .

  c:\users\Erik\Documents\~WRL0005.tmp

  c:\users\Erik\Documents\~WRL2524.tmp

  c:\windows\security\Database\tmp.edb

  c:\windows\system32\SET9BC7.tmp

  .

  .

  (((((((((((((((((((( Bestanden Gemaakt van 2011-12-14 to 2012-01-14 ))))))))))))))))))))))))))))))

  .

  .

  2012-01-13 09:22 . 2012-01-13 09:34 56200 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{06095A76-2078-4469-8F59-46F9244B16FF}\offreg.dll

  2012-01-13 09:19 . 2011-11-21 10:47 6823496 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{06095A76-2078-4469-8F59-46F9244B16FF}\mpengine.dll

  2012-01-12 19:44 . 2012-01-12 19:44 ——– d—–w- c:\program files\Common Files\Java

  2012-01-11 20:36 . 2012-01-11 20:36 388096 —-a-r- c:\users\Erik\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

  2012-01-11 14:44 . 2011-11-17 06:48 440192 —-a-w- c:\windows\system32\drivers\ksecdd.sys

  2012-01-11 14:44 . 2011-11-16 16:23 278528 —-a-w- c:\windows\system32\schannel.dll

  2012-01-11 14:44 . 2011-11-16 16:23 377344 —-a-w- c:\windows\system32\winhttp.dll

  2012-01-11 14:44 . 2011-11-16 16:23 72704 —-a-w- c:\windows\system32\secur32.dll

  2012-01-11 14:44 . 2011-11-16 16:21 1259008 —-a-w- c:\windows\system32\lsasrv.dll

  2012-01-11 14:44 . 2011-11-16 14:12 9728 —-a-w- c:\windows\system32\lsass.exe

  2012-01-11 09:38 . 2011-11-18 17:47 66560 —-a-w- c:\windows\system32\packager.dll

  2012-01-11 09:38 . 2011-11-25 15:59 376320 —-a-w- c:\windows\system32\winsrv.dll

  2012-01-11 09:38 . 2011-11-18 20:23 1205064 —-a-w- c:\windows\system32\ntdll.dll

  2012-01-11 09:37 . 2011-10-14 16:03 189952 —-a-w- c:\windows\system32\winmm.dll

  2012-01-11 09:37 . 2011-10-14 16:00 23552 —-a-w- c:\windows\system32\mciseq.dll

  2012-01-11 09:37 . 2011-12-01 15:21 2409784 —-a-w- c:\program files\Windows Mail\OESpamFilter.dat

  2012-01-11 09:37 . 2011-10-25 15:58 1314816 —-a-w- c:\windows\system32\quartz.dll

  2012-01-11 09:37 . 2011-10-25 15:58 497152 —-a-w- c:\windows\system32\qdvd.dll

  2012-01-03 07:22 . 2012-01-03 07:22 103864 —-a-w- c:\program files\Internet Explorer\Plugins\nppdf32.dll

  2011-12-15 11:42 . 2011-11-23 13:37 2043904 —-a-w- c:\windows\system32\win32k.sys

  2011-12-15 11:42 . 2011-10-14 16:02 429056 —-a-w- c:\windows\system32\EncDec.dll

  2011-12-15 11:41 . 2011-10-27 08:01 3602816 —-a-w- c:\windows\system32\ntkrnlpa.exe

  2011-12-15 11:41 . 2011-10-27 08:01 3550080 —-a-w- c:\windows\system32\ntoskrnl.exe

  2011-12-15 11:41 . 2011-10-25 15:56 49152 —-a-w- c:\windows\system32\csrsrv.dll

  2011-12-15 11:35 . 2011-11-08 14:42 2048 —-a-w- c:\windows\system32\tzres.dll

  .

  .

  .

  ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

  .

  2012-01-12 19:42 . 2010-05-14 10:22 544656 —-a-w- c:\windows\system32\deployJava1.dll

  2011-12-10 14:24 . 2008-08-24 18:30 20464 —-a-w- c:\windows\system32\drivers\mbam.sys

  2011-11-28 18:01 . 2010-07-03 21:45 41184 —-a-w- c:\windows\avastSS.scr

  2011-11-28 18:01 . 2009-01-28 11:28 199816 —-a-w- c:\windows\system32\aswBoot.exe

  2011-11-28 17:53 . 2011-03-23 20:25 435032 —-a-w- c:\windows\system32\drivers\aswSnx.sys

  2011-11-28 17:53 . 2009-01-28 11:29 314456 —-a-w- c:\windows\system32\drivers\aswSP.sys

  2011-11-28 17:52 . 2009-01-28 11:29 34392 —-a-w- c:\windows\system32\drivers\aswRdr.sys

  2011-11-28 17:52 . 2009-01-28 11:29 52952 —-a-w- c:\windows\system32\drivers\aswTdi.sys

  2011-11-28 17:52 . 2009-01-28 11:28 55128 —-a-w- c:\windows\system32\drivers\aswMonFlt.sys

  2011-11-28 17:51 . 2009-01-28 11:29 20568 —-a-w- c:\windows\system32\drivers\aswFsBlk.sys

  2011-11-21 22:41 . 2011-07-31 17:01 414368 —-a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

  2011-10-20 23:26 . 2011-10-20 23:26 94208 —-a-w- c:\windows\system32\dpl100.dll

  .

  .

  ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

  .

  .

  *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

  REGEDIT4

  .

  @=“{472083B0-C522-11CF-8763-00608CC02F24}”

  2011-11-28 18:01 122512 —-a-w- c:\program files\Alwil Software\Avast5\ashShell.dll

  .

  “ehTray.exe”=“c:\windows\ehome\ehTray.exe”

  “WMPNSCFG”=“c:\program files\Windows Media Player\WMPNSCFG.exe”

  .

  “ITSecMng”=“c:\program files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe”

  “Apoint”=“c:\program files\Apoint2K\Apoint.exe”

  “Camera Assistant Software”=“c:\program files\Camera Assistant Software for Toshiba\traybar.exe”

  “TPwrMain”=“c:\program files\TOSHIBA\Power Saver\TPwrMain.EXE”

  “HSON”=“c:\program files\TOSHIBA\TBS\HSON.exe”

  “SmoothView”=“c:\program files\Toshiba\SmoothView\SmoothView.exe”

  “00TCrdMain”=“c:\program files\TOSHIBA\FlashCards\TCrdMain.exe”

  “HDMICtrlMan”=“c:\program files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe”

  “Toshiba Registration”=“c:\program files\Toshiba\Registration\ToshibaRegistration.exe”

  “WireLessMouse”=“c:\program files\Trust\Trust R-series Mouse And Keyboard\StartAutorun.exe”

  “GrooveMonitor”=“c:\program files\Microsoft Office\Office12\GrooveMonitor.exe”

  “NeroFilterCheck”=“c:\program files\Common Files\Ahead\Lib\NeroCheck.exe”

  “Windows Mobile-based device management”=“c:\windows\WindowsMobile\wmdSync.exe”

  “Toshiba TEMPRO”=“c:\program files\Toshiba TEMPRO\TemproTray.exe”

  “StartCCC”=“c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe”

  “DivXUpdate”=“c:\program files\DivX\DivX Update\DivXUpdate.exe”

  “avast”=“c:\program files\Alwil Software\Avast5\avastUI.exe”

  “SunJavaUpdateSched”=“c:\program files\Common Files\Java\Java Update\jusched.exe”

  “Adobe Reader Speed Launcher”=“c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe”

  “Adobe ARM”=“c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe”

  .

  c:\users\Erik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

  OneNote 2007 Schermopname en Snel starten.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE

  .

  c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

  TRDCReminder.lnk - c:\program files\Toshiba\TRDCReminder\TRDCReminder.exe

  .

  “EnableUIADesktopToggle”= 0 (0x0)

  “DisableCAD”= 1 (0x1)

  .

  “aux”=wdmaud.drv

  .

  “DisableMonitoring”=dword:00000001

  .

  WindowsMobile REG_MULTI_SZ wcescomm rapimgr

  LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr

  HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12

  LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

  .

  Inhoud van de ‘Gedeelde Taken’ map

  .

  2012-01-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

  - c:\program files\Google\Update\GoogleUpdate.exe

  .

  2012-01-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

  - c:\program files\Google\Update\GoogleUpdate.exe

  .

  .

  ——- Bijkomende Scan ——-

  .

  uStart Page = hxxp://www.google.nl/

  mStart Page = hxxp://www.google.nl

  IE: E&xporteren naar Microsoft Excel - c:\progra~1\MI69AF~1\OFFICE11\EXCEL.EXE/3000

  TCP: DhcpNameServer = 192.168.1.1

  .

  - - - - ORPHANS VERWIJDERD - - - -

  .

  WebBrowser-{BA14329E-9550-4989-B3F2-9732E92D17CC} - (no file)

  WebBrowser-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file)

  AddRemove-{7B63B2922B174135AFC0E1377DD81EC2} - c:\program files\DivX\DivXCodecUninstall.exe

  .

  .

  .

  **************************************************************************

  .

  catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

  Rootkit scan 2012-01-14 11:44

  Windows 6.0.6002 Service Pack 2 NTFS

  .

  scannen van verborgen processen …

  .

  scannen van verborgen autostart items …

  .

  scannen van verborgen bestanden …

  .

  Scan succesvol afgerond

  verborgen bestanden: 0

  .

  **************************************************************************

  .

  ——————— VERGRENDELDE REGISTER SLEUTELS ———————

  .

  @Denied: (A) (Users)

  @Denied: (A) (Everyone)

  @Allowed: (B 1 2 3 4 5) (S-1-5-20)

  “BlindDial”=dword:00000000

  .

  Voltooingstijd: 2012-01-14 11:50:59

  ComboFix-quarantined-files.txt 2012-01-14 10:50

  ComboFix2.txt 2009-12-28 10:56

  .

  Pre-Run: 36.488.122.368 bytes beschikbaar

  Post-Run: 36.618.006.528 bytes beschikbaar

  .

  - - End Of File - - DE6999EE8C12BA1DD2E762ED468A10C1

  Logfile of Trend Micro HijackThis v2.0.4

  Scan saved at 12:16:57, on 14-1-2012

  Platform: Windows Vista SP2 (WinNT 6.00.1906)

  MSIE: Internet Explorer v9.00 (9.00.8112.16421)

  Boot mode: Normal

  Running processes:

  C:\Windows\system32\Dwm.exe

  C:\Windows\system32\taskeng.exe

  C:\Program Files\Apoint2K\Apoint.exe

  C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe

  C:\Program Files\Toshiba\Power Saver\TPwrMain.exe

  C:\Program Files\Toshiba\SmoothView\SmoothView.exe

  C:\Program Files\Toshiba\FlashCards\TCrdMain.exe

  C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

  C:\Program Files\Apoint2K\ApMsgFwd.exe

  C:\Windows\WindowsMobile\wmdSync.exe

  C:\Program Files\Trust\Trust R-series Mouse And Keyboard\MouseDrv.exe

  C:\Program Files\Toshiba TEMPRO\TemproTray.exe

  C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

  C:\Program Files\DivX\DivX Update\DivXUpdate.exe

  C:\Program Files\Alwil Software\Avast5\AvastUI.exe

  C:\Program Files\Common Files\Java\Java Update\jusched.exe

  C:\Program Files\Apoint2K\HidFind.exe

  C:\Windows\ehome\ehtray.exe

  C:\Program Files\Windows Media Player\wmpnscfg.exe

  C:\Windows\ehome\ehmsas.exe

  C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

  C:\Windows\system32\notepad.exe

  C:\Windows\explorer.exe

  C:\Program Files\Internet Explorer\iexplore.exe

  C:\Program Files\Internet Explorer\iexplore.exe

  C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe

  C:\Program Files\Internet Explorer\iexplore.exe

  C:\Program Files\Internet Explorer\iexplore.exe

  C:\Windows\system32\SearchProtocolHost.exe

  C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

  C:\Windows\system32\SearchFilterHost.exe

  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl/

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl

  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

  O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

  O2 - BHO: Increase performance and video formats for your HTML5 - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll

  O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

  O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

  O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

  O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

  O4 - HKLM\..\Run: %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START

  O4 - HKLM\..\Run: C:\Program Files\Apoint2K\Apoint.exe

  O4 - HKLM\..\Run: “C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe” /start

  O4 - HKLM\..\Run: %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE

  O4 - HKLM\..\Run: %ProgramFiles%\TOSHIBA\TBS\HSON.exe

  O4 - HKLM\..\Run: %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe

  O4 - HKLM\..\Run: %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe

  O4 - HKLM\..\Run: C:\Program Files\TOSHIBA\HDMICtrlMan\HDMICtrlMan.exe

  O4 - HKLM\..\Run: C:\Program Files\Toshiba\Registration\ToshibaRegistration.exe

  O4 - HKLM\..\Run: C:\Program Files\Trust\Trust R-series Mouse And Keyboard\StartAutorun.exe MouseDrv.exe

  O4 - HKLM\..\Run: “C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe”

  O4 - HKLM\..\Run: C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

  O4 - HKLM\..\Run: %windir%\WindowsMobile\wmdSync.exe

  O4 - HKLM\..\Run: C:\Program Files\Toshiba TEMPRO\TemproTray.exe

  O4 - HKLM\..\Run: “C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe”

  O4 - HKLM\..\Run: “C:\Program Files\DivX\DivX Update\DivXUpdate.exe” /CHECKNOW

  O4 - HKLM\..\Run: “C:\Program Files\Alwil Software\Avast5\avastUI.exe” /nogui

  O4 - HKLM\..\Run: “C:\Program Files\Common Files\Java\Java Update\jusched.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe”

  O4 - HKCU\..\Run: C:\Windows\ehome\ehTray.exe

  O4 - HKCU\..\Run: C:\Program Files\Windows Media Player\WMPNSCFG.exe

  O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:\Program Files\Toshiba\TRDCReminder\TRDCReminder.exe (User ‘Default user’)

  O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

  O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MI69AF~1\OFFICE11\EXCEL.EXE/3000

  O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

  O9 - Extra ‘Tools’ menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

  O9 - Extra button: (no name) - {76577871-04EC-495E-A12B-91F7C3600AFA} - http://www.webtip.ch/cgi-bin/toshiba/tracker_url2.pl?NL (file missing)

  O9 - Extra button: Amazon.co.uk - {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.co.uk/exec/obidos/redirect-home?tag=Toshibaukbholink-21&site=home (file missing)

  O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI69AF~1\OFFICE11\REFIEBAR.DLL

  O11 - Options group: Accelerated graphics

  O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab

  O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

  O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

  O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

  O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe

  O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

  O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe

  O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

  O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

  O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

  O23 - Service: Jumpstart Wifi Protected Setup (jswpsapi) - Atheros Communications, Inc. - C:\Program Files\Jumpstart\jswpsapi.exe

  O23 - Service: Keyboard And Mouse Communication Service (KMWDSERVICE) - UASSOFT.COM - C:\Program Files\Trust\Trust R-series Mouse And Keyboard\KMWDSrv.exe

  O23 - Service: O2Micro Flash Memory Card Service (o2flash) - O2Micro International - C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe

  O23 - Service: SmartFaceVWatchSrv - Toshiba - C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatchSrv.exe

  O23 - Service: Notebook Performance Tuning Service (TEMPRO) (TemproMonitoringService) - Toshiba Europe GmbH - C:\Program Files\Toshiba TEMPRO\TemproSvc.exe

  O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\TOSHIBA DVD PLAYER\TNaviSrv.exe

  O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\system32\TODDSrv.exe

  O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe

  O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - c:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

  O23 - Service: TOSHIBA SMART Log Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe

  O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

  O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

  –

  End of file - 9372 bytes

  gr erik

  Rapporteren