Mededeling

Collapse
No announcement yet.

Computer langzaam, CPU vrijwel constant 100%

Collapse
X
Collapse
  •  
  • Page of 1
  • Tijd
  • Show
Clear All
new posts
Vorige template Volgende
  • #1

    Computer langzaam, CPU vrijwel constant 100%

    Verplaatst Virus --->> Hijackthis logs.

    Hallo,

    Ik heb hier een computer van mijn ouders. Ik weet begod niet wat ze er allemaal mee gedaan hebben, maar totaal foutenboel. De computer is zeer langzaam, CPU vrijwel constant 100%. Ik heb Avast laten scannen in windows. Daar zijn toen al een aantal tronjans gevonden en verwijderd. Vervolgens heb ik Ad-Aware laten scannen. En Spybot aan het werkt gezet Daarna heb ik nog een keer Avast laten scannen voordat dat windows opgestart was. Ook daar zijn weer virussen ontdekt. De computer was toen nog steeds zeer langzaam. Ik heb daarom AVG Anti-Rootkit laten scannen, maar daarmee heeft hij niks gevonden. Verder heb ik nog een aantal ongebruikte onnodige programma's gedeinstalleerd.

    Als laatste heb ik HijackThis gemaakt. Het logje hiervan staat hieronder.


    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 17:41:46, on 24-12-2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16574)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\Explorer.EXE
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
    C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe
    C:\WINDOWS\system32\drivers\CDAC11BA.EXE
    C:\Program Files\ewido anti-malware\ewidoctrl.exe
    C:\Program Files\Microsoft Office\Office10\msoffice.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\MsPMSPSv.exe
    C:\Program Files\Canon\CAL\CALMAIN.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.startpagina.nl/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
    O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
    O4 - HKLM\..\Run: [RoxioAudioCentral] "C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe"
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - Startup: Microsoft Office Werkbalk (2).lnk = ?
    O4 - Global Startup: Event Reminder.lnk = F:\Program Files\Print Master\PrintMaster\PMremind.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: HP Photosmart Premier Snelstart.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
    O4 - Global Startup: HPAiODevice(hp officejet d series) - 1.lnk = C:\Program Files\Hewlett-Packard\AiO\hp officejet d series\Bin\hpoojd07.exe
    O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\kodak\Kodak EasyShare software\bin\EasyShare.exe
    O4 - Global Startup: KODAK Software Updater.lnk = C:\Program Files\kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {003FADA5-8FEE-11D6-AFB7-0004768F6183} (CryptoRSA Control) - https://www.p3.postbank.nl/sesam/CAX.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1099923240559
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1154011422548
    O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/aio/en/check/qdiagh.cab?325
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
    O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
    O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
    O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
    O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
    O23 - Service: Kodak Camera Connection Software (KodakCCS) - Unknown owner - C:\WINDOWS\system32\drivers\KodakCCS.exe (file missing)
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

    --
    End of file - 7812 bytes


    Bij voorbaat dank voor u hulp!,

    Bird
    Labels: Geen
      • Citaat
    • #2
      Hallo Bird,

      Je HijackThis-logje ziet er goed uit hoor...
      Alleen je Java-software is niet up-2-date...

      Oudere versies hebben lekken die malware de kans geeft om zich te installeren op je systeem.
      Doe eerst deze stappen om Java te de-installeren en de nieuwere versie te installeren:
      • Download [url=http://javadl.sun.com/webapps/download/AutoDL?BundleId=12798]Java Runtime Environment (JRE) 6u3 en bewaar het naar je Bureaublad.
      • Sluit alle programma's die eventueel open zijn - Zeker je web browser!
      • Ga dan naar Start > Configuratiescherm > Software en verwijder alle oudere versies van Java uit de Softwarelijst.
      • Vink alles aan met Java Runtime Environment (JRE of J2SE) in de naam.
      • Klik dan op Verwijderen of op de Wijzig/Verwijder knop.
      • Herhaal dit tot alle oudere versies verdwenen zijn.
      • Na het verwijderen van alle oudere versies, herstart je pc.
      • Dubbelklik vervolgens op jre-6u3-windows-i586-p.exe op je Bureaublad om de nieuwste versie van Java te installeren.


      Om eventjes je problemen te bekijken, kan je eens kijken welk proces zoveel CPU gebruikt? Druk op ALT + CTRL + DELETE en kijk onder het tabblad "processen" welk proces het meeste CPU gebruikt.

      - Daniël
        • Citaat

        Comment

        • #3
          foutje

          hallo Daniel,

          Toen ik jou bericht las dat het logje er goed uitzag, ging er bij mij een belletje rinkelen. Dit kon namelijk niet, want het opstarten en de simpelste handerlingen doen duurt 'uren'. (opstarten duurt 30min, normaal 5 min). Toen ik de vorige keer het logje had gemaakt had ik een hele hoop processen uitgezet om een beetje een handelbare computer te krijgen. Nu heb ik opnieuw een logje aangemaakt zonder al deze processen uit te zetten. Bij dit bericht typen loop ik een zin voor, voordat het tervoorschijn komt, dat kan nooit kloppen lijkt me...

          Mijn excuus voor het verkeerde logje(!),

          Bird


          Logfile of Trend Micro HijackThis v2.0.2
          Scan saved at 20:02:38, on 27-12-2007
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v7.00 (7.00.6000.16574)
          Boot mode: Normal

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          C:\Program Files\Alwil Software\Avast4\ashServ.exe
          C:\WINDOWS\Explorer.EXE
          C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
          C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
          C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe
          C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
          C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe
          C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
          C:\Program Files\kodak\Kodak EasyShare software\bin\EasyShare.exe
          C:\Program Files\kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
          C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\Playlist.exe
          C:\Program Files\Microsoft Office\Office10\msoffice.exe
          C:\WINDOWS\system32\drivers\CDAC11BA.EXE
          C:\Program Files\ewido anti-malware\ewidoctrl.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\MsPMSPSv.exe
          C:\Program Files\Canon\CAL\CALMAIN.exe
          C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
          C:\Program Files\Internet Explorer\iexplore.exe
          C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.startpagina.nl/
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
          R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
          O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
          O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
          O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
          O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
          O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
          O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
          O4 - HKLM\..\Run: [RoxioAudioCentral] "C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe"
          O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
          O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
          O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
          O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
          O4 - Startup: Microsoft Office Werkbalk (2).lnk = ?
          O4 - Global Startup: Event Reminder.lnk = F:\Program Files\Print Master\PrintMaster\PMremind.exe
          O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
          O4 - Global Startup: HP Photosmart Premier Snelstart.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
          O4 - Global Startup: HPAiODevice(hp officejet d series) - 1.lnk = C:\Program Files\Hewlett-Packard\AiO\hp officejet d series\Bin\hpoojd07.exe
          O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\kodak\Kodak EasyShare software\bin\EasyShare.exe
          O4 - Global Startup: KODAK Software Updater.lnk = C:\Program Files\kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
          O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
          O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
          O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O16 - DPF: {003FADA5-8FEE-11D6-AFB7-0004768F6183} (CryptoRSA Control) - https://www.p3.postbank.nl/sesam/CAX.cab
          O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1099923240559
          O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1154011422548
          O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/aio/en/check/qdiagh.cab?325
          O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
          O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
          O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
          O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
          O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
          O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
          O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
          O23 - Service: Kodak Camera Connection Software (KodakCCS) - Unknown owner - C:\WINDOWS\system32\drivers\KodakCCS.exe (file missing)
          O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

          --
          End of file - 8079 bytes
            • Citaat

            Comment

            • #4
              Hallo Bird,

              1. Download [url=http://www.atribune.org/ccount/click.php?id=1]ATF cleaner (by Atribune)

              Dubbelklik op ATF cleaner om het programma te starten.
              Op het tabblad "Main", plaats je een vinkje bij Select All.
              Klik op de knop Empty Selected.
              Klik op de knop Exit om het programma af te sluiten.

              2. Download SpeedFan en sla het op je bureaublad op.
              Installeer en open daarna SpeedFan.

              Ga naar het tabblad "S.M.A.R.T." en kies daar je hardeschijf.
              Onderin zie je "Fitness" staan, ga hier overheen met je muis (niet klikken!) en post het percentage dat je te zien krijgt in je volgende reactie. Doe het zelfde met "Performance" dat naast Fitness staat.

              3. Zal je ook nog eventjes de instructies willen uitvoeren die ik je eerder gaf?

              Om eventjes je problemen te bekijken, kan je eens kijken welk proces zoveel CPU gebruikt? Druk op ALT + CTRL + DELETE en kijk onder het tabblad "processen" welk proces het meeste CPU gebruikt.
              - Daniël
                • Citaat

                Comment

                • #5
                  Hallo,

                  Ik heb ATF cleaner zijn werk laten doen.

                  Program Speedfan heb ik geinstall. Bij tabblad SMART stonden alle schijven zowel Fitness als Performance op 100%.

                  Processen:
                  Niet-actieve systeemprocessen: CPU 90-100% Geheugengebruik: 16kB
                  easyShare.exe: CPU 0% geheugengebr. 27.644kB
                  svhost: CPU 0% geheugengebr. 23.588kB
                  explorer: CPU 0% geheugengebr. 19.720kB
                  wuauclt: CPU 0% geheugengebr. 13.952kB
                  ashserv: CPU 0% geheugengebr. 13.220kB
                  teatimer: CPU 0% geheugengebr. 11.524kB
                  hpqste08: CPU 0% geheugengebr. 11.172kB
                  RxMon: CPU 0% geheugengebr. 6.876kB
                  hpqtra08: CPU 0% geheugengebr. 6.032kB
                  ...


                  M.v.g,

                  Bird
                    • Citaat

                    Comment

                    • #6
                      Vreemd... We kunnen eventjes verder kijken....

                      Download [url=http://users.telenet.be/marcvn/tools/reglooks.exe]Reglooks.exe en plaats het op je bureaublad.
                      Dubbelklik op Reglooks.exe, doe verder niets en wacht tot er een logfile opent. Post de inhoud van deze logfile.
                        • Citaat

                        Comment

                        • #7
                          Hallo,

                          Hier het gevraagde Reglookslogje:

                          REGLOOKS logfile

                          version 0.977
                          01-01-2008 1:28:11,68
                          running from: "C:\Documents and Settings\Vogel\Bureaublad"

                          --- SSODL regkeys ---

                          HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
                          only standard or legit regkeys found


                          --- STS regkeys ---

                          HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
                          only standard or legit regkeys found


                          --- USERINIT regkey ---

                          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
                          "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"


                          --- SHELL regkey ---

                          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
                          "Shell"="Explorer.exe"


                          --- SYSTEM regkey ---

                          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
                          "DefaultDomainName"="EQ-SYSTEMS"
                          "System"=""
                          "AltDefaultDomainName"="EQ-SYSTEMS"


                          --- APPINIT_DLLS regkey ---

                          HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows
                          "AppInit_DLLs"=""


                          --- NOTIFY regkeys ---

                          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
                          only standard or legit regkeys found


                          --- RUN / LOAD regkeys ---

                          HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows
                          "load"=""


                          --- BOOTEXECUTE regkey ---

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager
                          BootExecute= autocheck autochk *\0\0


                          --- PENDINGFILERENAMEOPERATIONS regkey ---

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager
                          Pendingfilerenameoperations= \??\C:\WINDOWS\System32\spool\drivers\W32X86\3\Old\1\SDhp1020.HLP\0\0\??\C:\WINDOWS\System32\spool\d rivers\W32X86\3\Old\1\0\0\??\C:\WINDOWS\System32\spool\drivers\W32X86\3\Old\0\0\0


                          --- SHELLEXECUTEHOOKS regkey ---

                          HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks
                          "{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
                          "{54D9498B-CF93-414F-8984-8CE7FDE0D391}"="ewido shell guard"


                          --- AUTORUN regkeys ---

                          HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor
                          "AutoRun"=""


                          --- HKLM\Run regkeys ---

                          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
                          "avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
                          "Share-to-Web Namespace Daemon"="C:\\Program Files\\Hewlett-Packard\\HP Share-to-Web\\hpgs2wnd.exe"
                          "SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_11\\bin\\jusched.exe\""
                          "RoxioAudioCentral"="\"C:\\Program Files\\Roxio\\Easy CD Creator 6\\AudioCentral\\RxMon.exe\""
                          "HP Software Update"="C:\\Program Files\\HP\\HP Software Update\\HPWuSchd2.exe"
                          "VirtualCloneDrive"="\"C:\\Program Files\\Elaborate Bytes\\VirtualCloneDrive\\VCDDaemon.exe\" /s"
                          "KernelFaultCheck"=hex(2):25,73,79,73,74,65,6d,72,6f,6f,74,25,5c,73,79,73,74,\
                          65,6d,33,32,5c,64,75,6d,70,72,65,70,20,30,20,2d,6b,00
                          [Run\OptionalComponents]
                          [Run\OptionalComponents\IMAIL]
                          "Installed"="1"
                          [Run\OptionalComponents\MAPI]
                          "Installed"="1"
                          "NoChange"="1"
                          [Run\OptionalComponents\MSFS]
                          "Installed"="1"


                          --- HKLM\RunOnce regkeys ---

                          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
                          no HKLM RunOnce keys found


                          --- HKLM\RunOnceEx regkeys ---

                          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
                          @=""


                          --- HKLM\RunServices regkeys ---

                          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
                          no HKLM RunServices keys found


                          --- HKLM\RunServicesOnce regkeys ---

                          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce
                          no HKLM RunServicesOnce keys found


                          --- HKCU\Run regkeys ---

                          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
                          "ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
                          "SpybotSD TeaTimer"="C:\\Program Files\\Spybot - Search & Destroy\\TeaTimer.exe"


                          --- HKCU\RunOnce regkeys ---

                          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
                          no HKCU RunOnce keys found


                          --- HKCU\RunOnceEx regkeys ---

                          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
                          regkey does not exist


                          --- HKCU\RunServices regkeys ---

                          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
                          no HKCU RunServices keys found


                          --- HKCU\RunServicesOnce regkeys ---

                          HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce
                          no HKCU RunServicesOnce keys found


                          --- HKU\.DEFAULT\Run regkeys - Default user ---

                          HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
                          no HKU\.DEFAULT\Run keys found


                          --- HKU\S-1-5-18\Run regkeys - user SYSTEM ---

                          HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
                          no HKU\S-1-5-18\Run keys found


                          --- HKU\S-1-5-19\Run regkeys - User Lokale service ---

                          HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
                          no HKU\S-1-5-19\Run keys found


                          --- HKU\S-1-5-20\Run regkeys - User Netwerkservice ---

                          HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
                          no HKU\S-1-5-20\Run keys found


                          --- HKLM\Explorer\Run regkeys ---

                          HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
                          regkey does not exist


                          --- HKCU\Explorer\Run regkeys ---

                          HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
                          regkey does not exist


                          --- Image File Execution regkeys ---

                          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
                          no debuggers found


                          --- BROWSER HELPER OBJECTS regkeys ---

                          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
                          "{02478D38-C3F9-4efb-9B51-7695ECA05670}" regkey not found (ERROR)
                          "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" FILE ="C:\\Program Files\\Adobe\\Acrobat 5.0\\Reader\\ActiveX\\AcroIEHelper.ocx"
                          "{22BF413B-C6D2-4d91-82A9-A0F997BA588C}" FILE ="C:\\PROGRA~1\\Skype\\Phone\\IEPlugin\\SKYPEI~1.DLL"
                          "{53707962-6F74-2D53-2644-206D7942484F}" FILE ="C:\\PROGRA~1\\SPYBOT~1\\SDHelper.dll"
                          "{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}" FILE ="C:\\Program Files\\Java\\jre1.6.0_03\\bin\\ssv.dll"
                          "{AA58ED58-01DD-4d91-8333-CF10577473F7}" FILE ="c:\\program files\\google\\googletoolbar3.dll"


                          --- TOOLBAR regkeys ---

                          HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
                          "{2318C2B1-4965-11d4-9B18-009027A5CD4F}" FILE ="c:\\program files\\google\\googletoolbar3.dll"


                          --- URLSEARCHHOOKS regkeys ---

                          HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks
                          only standard regkeys found


                          --- CONTEXTMENUHANDLERS regkeys ---

                          HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers
                          "avast" CLSID ={472083B0-C522-11CF-8763-00608CC02F24} FILE ="C:\\Program Files\\Alwil Software\\Avast4\\ashShell.dll"
                          "ewido" CLSID ={57BD36D7-CE32-4600-9B1C-1A0C47EFC02E} FILE ="C:\\Program Files\\ewido anti-malware\\context.dll"
                          "Offline Files" CLSID ={750fdf0e-2a26-11d1-a3ea-080036587f03} FILE =%SystemRoot%\System32\cscui.dll
                          "Open With" CLSID ={09799AFB-AD67-11d1-ABCD-00C04FC30936} FILE =%SystemRoot%\system32\SHELL32.dll
                          "Open With EncryptionMenu" CLSID ={A470F8CF-A1E8-4f65-8335-227475AA5C46} FILE =%SystemRoot%\system32\SHELL32.dll
                          "WinRAR" CLSID ={B41DB860-8EE4-11D2-9906-E49FADC173CA} FILE ="C:\\Program Files\\WinRAR\\rarext.dll"
                          "{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}" Start Menu Pin FILE =%SystemRoot%\system32\SHELL32.dll

                          HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers
                          "EncryptionMenu" CLSID ={A470F8CF-A1E8-4f65-8335-227475AA5C46} FILE =%SystemRoot%\system32\SHELL32.dll
                          "ewido" CLSID ={57BD36D7-CE32-4600-9B1C-1A0C47EFC02E} FILE ="C:\\Program Files\\ewido anti-malware\\context.dll"
                          "LockFolder" CLSID ={4852341A-43E6-4994-B29B-E82904992884} FILE ="C:\\Program Files\\FolderAccess\\LckFldMenu.dll"
                          "Offline Files" CLSID ={750fdf0e-2a26-11d1-a3ea-080036587f03} FILE =%SystemRoot%\System32\cscui.dll
                          "Sharing" CLSID ={f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} FILE ="ntshrui.dll"
                          "WinRAR" CLSID ={B41DB860-8EE4-11D2-9906-E49FADC173CA} FILE ="C:\\Program Files\\WinRAR\\rarext.dll"

                          HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers
                          "avast" CLSID ={472083B0-C522-11CF-8763-00608CC02F24} FILE ="C:\\Program Files\\Alwil Software\\Avast4\\ashShell.dll"
                          "InventorMenu" CLSID ={6FDE7A70-351B-11d6-988B-0010B57A8BB7} FILE ="C:\\Program Files\\Autodesk\\Inventor 9\\Bin\\DT.dll"
                          "WinRAR" CLSID ={B41DB860-8EE4-11D2-9906-E49FADC173CA} FILE ="C:\\Program Files\\WinRAR\\rarext.dll"


                          --- ALTERNATESHELL regkey ---

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot
                          "AlternateShell"="cmd.exe"


                          --- SAFEBOOT MINIMAL SERVICES ---

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal
                          no unknown services found


                          --- SAFEBOOT NETWORK SERVICES ---

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network
                          no unknown services found


                          --- SERVICES ---

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AVG Anti-Rootkit
                          "DisplayName"="AVG Anti-Rootkit"
                          System32\DRIVERS\avgarkt.sys

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AvgArCln
                          "DisplayName"="Avg Anti-Rootkit Clean Driver"
                          System32\DRIVERS\AvgArCln.sys

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\C-DillaCdaC11BA
                          "DisplayName"="C-DillaCdaC11BA"
                          C:\WINDOWS\system32\drivers\CDAC11BA.EXE

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CCALib8
                          "DisplayName"="Canon Camera Access Library 8"
                          C:\Program Files\Canon\CAL\CALMAIN.exe

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CdaC15BA
                          "DisplayName"="CdaC15BA"
                          \??\C:\WINDOWS\system32\drivers\CDAC15BA.SYS

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdr4_xp
                          no imagepath value found

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdralw2k
                          no imagepath value found

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cdudf_xp
                          no imagepath value found

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dot4
                          "DisplayName"="MS IEEE-1284.4 Driver"
                          system32\DRIVERS\Dot4.sys

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dot4Print
                          "DisplayName"="Stuurprogramma voor printerklasse voor IEEE-1284.4"
                          system32\DRIVERS\Dot4Prt.sys

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dot4Scan
                          "DisplayName"="Scan Class Driver for IEEE-1284.4"
                          system32\DRIVERS\Dot4Scan.sys

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dot4usb
                          "DisplayName"="Dot4USB Filter Dot4USB Filter"
                          system32\DRIVERS\dot4usb.sys

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DVDVRRdr_xp
                          no imagepath value found

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dvd_2K
                          no imagepath value found

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ElbyDelay
                          "DisplayName"="ElbyDelay"
                          System32\Drivers\ElbyDelay.sys

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ewido security suite control
                          "DisplayName"="ewido security suite control"
                          C:\Program Files\ewido anti-malware\ewidoctrl.exe

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ewido security suite driver
                          "DisplayName"="ewido security suite driver"
                          \??\C:\Program Files\ewido anti-malware\guard.sys

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HP Port Resolver
                          "DisplayName"="HP Port Resolver"
                          C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HP Status Server
                          "DisplayName"="HP Status Server"
                          C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Inventor
                          no imagepath value found

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\KLSIENET
                          "DisplayName"="Driver for USB Ethernet Adapter"
                          System32\DRIVERS\usb101et.sys

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mmc_2K
                          no imagepath value found

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pwd_2k
                          no imagepath value found

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\swwd
                          no imagepath value found

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UDFReadr
                          no imagepath value found

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VClone
                          system32\DRIVERS\VClone.sys

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WebPost
                          no imagepath value found

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WMDM PMSP Service
                          "DisplayName"="WMDM PMSP Service"
                          C:\WINDOWS\system32\MsPMSPSv.exe

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{0A0EAAA4-62F6-405E-9371-67131173C038}
                          no imagepath value found

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{1A853898-E662-4FE8-A026-BDF1F868AAED}
                          no imagepath value found

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{3902BC77-7D74-4E07-9CCC-35799B679F23}
                          no imagepath value found


                          --- SECURITYPROVIDERS regkey ---

                          HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders
                          "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"


                          --- SVCHOST regkey ---

                          HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost
                          LocalService: Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
                          NetworkService: DnsCache\0\0
                          netsvcs: 6to4\0AppMgmt\0AudioSrv\0Browser\0CryptSvc\0DMServer\0DHCP\0ERSvc\0EventSystem\0FastUserSwitchingCom patibility\0HidServ\0Ias\0Iprip\0Irmon\0LanmanServer\0LanmanWorkstation\0Messenger\0Netman\0Nla\0Ntm ssvc\0NWCWorkstation\0Nwsapagent\0Rasauto\0Rasman\0Remoteaccess\0Schedule\0Seclogon\0SENS\0Sharedacc ess\0SRService\0Tapisrv\0Themes\0TrkWks\0W32Time\0WZCSVC\0Wmi\0WmdmPmSp\0winmgmt\0TermService\0wuaus erv\0BITS\0ShellHWDetection\0helpsvc\0xmlprov\0wscsvc\0WmdmPmSN\0\0
                          rpcss: RpcSs\0\0
                          imgsvc: StiSvc\0\0
                          termsvcs: TermService\0\0
                          HTTPFilter: HTTPFilter\0\0
                          DcomLaunch: DcomLaunch\0TermService\0\0


                          --- WOW-CMDLINE regkeys ---

                          HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WOW
                          "cmdline" = %SystemRoot%\system32\ntvdm.exe
                          "wowcmdline" = %SystemRoot%\system32\ntvdm.exe -a %SystemRoot%\system32\krnl386


                          --- DNS SERVER regkeys ---

                          no "NameServer" values found


                          --- STARTUP FOLDERS ---

                          C:\Documents and Settings\Vogel\Menu Start\Programma's\Opstarten\desktop.ini
                          C:\Documents and Settings\Vogel\Menu Start\Programma's\Opstarten\Microsoft Office Werkbalk (2).lnk
                          C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\desktop.ini
                          C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\Event Reminder.lnk
                          C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\HP Digital Imaging Monitor.lnk
                          C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\HP Photosmart Premier Snelstart.lnk
                          C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\Microsoft Office.lnk


                          --- TASK SCHEDULER JOBS ---

                          no .job files found


                          --- File associations ---

                          .BAT files: ("%1" %*)
                          .COM files: ("%1" %*)
                          .EXE files: ("%1" %*)
                          .HLP files: (%SystemRoot%\System32\winhlp32.exe %1)
                          .INF files: (%SystemRoot%\System32\NOTEPAD.EXE %1)
                          .INI files: (%SystemRoot%\System32\NOTEPAD.EXE %1)
                          .JS files: (%SystemRoot%\System32\WScript.exe "%1" %*)
                          .PIF files: ("%1" %*)
                          .REG files: (regedit.exe "%1")
                          .SCR files: ("%1" /S)
                          .TXT files: (%SystemRoot%\system32\NOTEPAD.EXE %1)
                          .VBS files: (%SystemRoot%\System32\WScript.exe "%1" %*)


                          FINISHED

                          PS: zou graag willen weten wat je hiermee kunt zien...

                          M.v.g,

                          Bird
                            • Citaat

                            Comment

                            • #8
                              format.

                              Hallo,

                              Ik wil even mededelen dat ik de computer heb geformatteerd en opnieuw heb geïnstalleerd. Dit ging namelijk toch iets sneller dat al die troep eraf halen.

                              Maar toch heel erg bedankt voor de goede hulp tot dus ver...!

                              Ik had graag willen weten waar het probleem zat, maar m'n ouders waren de computer nu wel echt zat.

                              Nogmaals bedank voor uw hulp!!!

                              M.v.g,

                              Bird
                                • Citaat

                                Comment

                                Vorige template Volgende
                                Sorry, you are not authorized to view this page
                                Working...
                                X
                                😀
                                🥰
                                🤢
                                😎
                                😡
                                👍
                                👎