Mededeling

Collapse
No announcement yet.

Computer langzaam, CPU vrijwel constant 100%

Collapse
X
  •  
  • Tijd
  • Show
Clear All
new posts

  • Computer langzaam, CPU vrijwel constant 100%

    Verplaatst Virus --->> Hijackthis logs.

    Hallo,

    Ik heb hier een computer van mijn ouders. Ik weet begod niet wat ze er allemaal mee gedaan hebben, maar totaal foutenboel. De computer is zeer langzaam, CPU vrijwel constant 100%. Ik heb Avast laten scannen in windows. Daar zijn toen al een aantal tronjans gevonden en verwijderd. Vervolgens heb ik Ad-Aware laten scannen. En Spybot aan het werkt gezet Daarna heb ik nog een keer Avast laten scannen voordat dat windows opgestart was. Ook daar zijn weer virussen ontdekt. De computer was toen nog steeds zeer langzaam. Ik heb daarom AVG Anti-Rootkit laten scannen, maar daarmee heeft hij niks gevonden. Verder heb ik nog een aantal ongebruikte onnodige programma's gedeinstalleerd.

    Als laatste heb ik HijackThis gemaakt. Het logje hiervan staat hieronder.


    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 17:41:46, on 24-12-2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16574)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\Explorer.EXE
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
    C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe
    C:\WINDOWS\system32\drivers\CDAC11BA.EXE
    C:\Program Files\ewido anti-malware\ewidoctrl.exe
    C:\Program Files\Microsoft Office\Office10\msoffice.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\MsPMSPSv.exe
    C:\Program Files\Canon\CAL\CALMAIN.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.startpagina.nl/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
    O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
    O4 - HKLM\..\Run: [RoxioAudioCentral] "C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe"
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - Startup: Microsoft Office Werkbalk (2).lnk = ?
    O4 - Global Startup: Event Reminder.lnk = F:\Program Files\Print Master\PrintMaster\PMremind.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: HP Photosmart Premier Snelstart.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
    O4 - Global Startup: HPAiODevice(hp officejet d series) - 1.lnk = C:\Program Files\Hewlett-Packard\AiO\hp officejet d series\Bin\hpoojd07.exe
    O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\kodak\Kodak EasyShare software\bin\EasyShare.exe
    O4 - Global Startup: KODAK Software Updater.lnk = C:\Program Files\kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {003FADA5-8FEE-11D6-AFB7-0004768F6183} (CryptoRSA Control) - https://www.p3.postbank.nl/sesam/CAX.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1099923240559
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1154011422548
    O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/aio/en/check/qdiagh.cab?325
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
    O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
    O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
    O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
    O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
    O23 - Service: Kodak Camera Connection Software (KodakCCS) - Unknown owner - C:\WINDOWS\system32\drivers\KodakCCS.exe (file missing)
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

    --
    End of file - 7812 bytes


    Bij voorbaat dank voor u hulp!,

    Bird

  • #2
    Hallo Bird,

    Je HijackThis-logje ziet er goed uit hoor...
    Alleen je Java-software is niet up-2-date...

    Oudere versies hebben lekken die malware de kans geeft om zich te installeren op je systeem.
    Doe eerst deze stappen om Java te de-installeren en de nieuwere versie te installeren:
    • Download [url=http://javadl.sun.com/webapps/download/AutoDL?BundleId=12798]Java Runtime Environment (JRE) 6u3 en bewaar het naar je Bureaublad.
    • Sluit alle programma's die eventueel open zijn - Zeker je web browser!
    • Ga dan naar Start > Configuratiescherm > Software en verwijder alle oudere versies van Java uit de Softwarelijst.
    • Vink alles aan met Java Runtime Environment (JRE of J2SE) in de naam.
    • Klik dan op Verwijderen of op de Wijzig/Verwijder knop.
    • Herhaal dit tot alle oudere versies verdwenen zijn.
    • Na het verwijderen van alle oudere versies, herstart je pc.
    • Dubbelklik vervolgens op jre-6u3-windows-i586-p.exe op je Bureaublad om de nieuwste versie van Java te installeren.


    Om eventjes je problemen te bekijken, kan je eens kijken welk proces zoveel CPU gebruikt? Druk op ALT + CTRL + DELETE en kijk onder het tabblad "processen" welk proces het meeste CPU gebruikt.

    - Daniël

    Comment


    • #3
      foutje

      hallo Daniel,

      Toen ik jou bericht las dat het logje er goed uitzag, ging er bij mij een belletje rinkelen. Dit kon namelijk niet, want het opstarten en de simpelste handerlingen doen duurt 'uren'. (opstarten duurt 30min, normaal 5 min). Toen ik de vorige keer het logje had gemaakt had ik een hele hoop processen uitgezet om een beetje een handelbare computer te krijgen. Nu heb ik opnieuw een logje aangemaakt zonder al deze processen uit te zetten. Bij dit bericht typen loop ik een zin voor, voordat het tervoorschijn komt, dat kan nooit kloppen lijkt me...

      Mijn excuus voor het verkeerde logje(!),

      Bird


      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 20:02:38, on 27-12-2007
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16574)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\Explorer.EXE
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
      C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe
      C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\Program Files\kodak\Kodak EasyShare software\bin\EasyShare.exe
      C:\Program Files\kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
      C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\Playlist.exe
      C:\Program Files\Microsoft Office\Office10\msoffice.exe
      C:\WINDOWS\system32\drivers\CDAC11BA.EXE
      C:\Program Files\ewido anti-malware\ewidoctrl.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\MsPMSPSv.exe
      C:\Program Files\Canon\CAL\CALMAIN.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.startpagina.nl/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
      O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
      O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
      O4 - HKLM\..\Run: [RoxioAudioCentral] "C:\Program Files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe"
      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
      O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      O4 - Startup: Microsoft Office Werkbalk (2).lnk = ?
      O4 - Global Startup: Event Reminder.lnk = F:\Program Files\Print Master\PrintMaster\PMremind.exe
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: HP Photosmart Premier Snelstart.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
      O4 - Global Startup: HPAiODevice(hp officejet d series) - 1.lnk = C:\Program Files\Hewlett-Packard\AiO\hp officejet d series\Bin\hpoojd07.exe
      O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\kodak\Kodak EasyShare software\bin\EasyShare.exe
      O4 - Global Startup: KODAK Software Updater.lnk = C:\Program Files\kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
      O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {003FADA5-8FEE-11D6-AFB7-0004768F6183} (CryptoRSA Control) - https://www.p3.postbank.nl/sesam/CAX.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1099923240559
      O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1154011422548
      O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/aio/en/check/qdiagh.cab?325
      O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
      O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
      O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
      O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
      O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
      O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
      O23 - Service: Kodak Camera Connection Software (KodakCCS) - Unknown owner - C:\WINDOWS\system32\drivers\KodakCCS.exe (file missing)
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

      --
      End of file - 8079 bytes

      Comment


      • #4
        Hallo Bird,

        1. Download [url=http://www.atribune.org/ccount/click.php?id=1]ATF cleaner (by Atribune)

        Dubbelklik op ATF cleaner om het programma te starten.
        Op het tabblad "Main", plaats je een vinkje bij Select All.
        Klik op de knop Empty Selected.
        Klik op de knop Exit om het programma af te sluiten.

        2. Download SpeedFan en sla het op je bureaublad op.
        Installeer en open daarna SpeedFan.

        Ga naar het tabblad "S.M.A.R.T." en kies daar je hardeschijf.
        Onderin zie je "Fitness" staan, ga hier overheen met je muis (niet klikken!) en post het percentage dat je te zien krijgt in je volgende reactie. Doe het zelfde met "Performance" dat naast Fitness staat.

        3. Zal je ook nog eventjes de instructies willen uitvoeren die ik je eerder gaf?

        Om eventjes je problemen te bekijken, kan je eens kijken welk proces zoveel CPU gebruikt? Druk op ALT + CTRL + DELETE en kijk onder het tabblad "processen" welk proces het meeste CPU gebruikt.
        - Daniël

        Comment


        • #5
          Hallo,

          Ik heb ATF cleaner zijn werk laten doen.

          Program Speedfan heb ik geinstall. Bij tabblad SMART stonden alle schijven zowel Fitness als Performance op 100%.

          Processen:
          Niet-actieve systeemprocessen: CPU 90-100% Geheugengebruik: 16kB
          easyShare.exe: CPU 0% geheugengebr. 27.644kB
          svhost: CPU 0% geheugengebr. 23.588kB
          explorer: CPU 0% geheugengebr. 19.720kB
          wuauclt: CPU 0% geheugengebr. 13.952kB
          ashserv: CPU 0% geheugengebr. 13.220kB
          teatimer: CPU 0% geheugengebr. 11.524kB
          hpqste08: CPU 0% geheugengebr. 11.172kB
          RxMon: CPU 0% geheugengebr. 6.876kB
          hpqtra08: CPU 0% geheugengebr. 6.032kB
          ...


          M.v.g,

          Bird

          Comment


          • #6
            Vreemd... We kunnen eventjes verder kijken....

            Download [url=http://users.telenet.be/marcvn/tools/reglooks.exe]Reglooks.exe en plaats het op je bureaublad.
            Dubbelklik op Reglooks.exe, doe verder niets en wacht tot er een logfile opent. Post de inhoud van deze logfile.

            Comment


            • #7
              Hallo,

              Hier het gevraagde Reglookslogje:

              REGLOOKS logfile

              version 0.977
              01-01-2008 1:28:11,68
              running from: "C:\Documents and Settings\Vogel\Bureaublad"

              --- SSODL regkeys ---

              HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
              only standard or legit regkeys found


              --- STS regkeys ---

              HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
              only standard or legit regkeys found


              --- USERINIT regkey ---

              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
              "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"


              --- SHELL regkey ---

              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
              "Shell"="Explorer.exe"


              --- SYSTEM regkey ---

              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
              "DefaultDomainName"="EQ-SYSTEMS"
              "System"=""
              "AltDefaultDomainName"="EQ-SYSTEMS"


              --- APPINIT_DLLS regkey ---

              HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows
              "AppInit_DLLs"=""


              --- NOTIFY regkeys ---

              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
              only standard or legit regkeys found


              --- RUN / LOAD regkeys ---

              HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows
              "load"=""


              --- BOOTEXECUTE regkey ---

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager
              BootExecute= autocheck autochk *\0\0


              --- PENDINGFILERENAMEOPERATIONS regkey ---

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager
              Pendingfilerenameoperations= \??\C:\WINDOWS\System32\spool\drivers\W32X86\3\Old\1\SDhp1020.HLP\0\0\??\C:\WINDOWS\System32\spool\d rivers\W32X86\3\Old\1\0\0\??\C:\WINDOWS\System32\spool\drivers\W32X86\3\Old\0\0\0


              --- SHELLEXECUTEHOOKS regkey ---

              HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks
              "{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
              "{54D9498B-CF93-414F-8984-8CE7FDE0D391}"="ewido shell guard"


              --- AUTORUN regkeys ---

              HKEY_LOCAL_MACHINE\Software\Microsoft\Command Processor
              "AutoRun"=""


              --- HKLM\Run regkeys ---

              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
              "avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
              "Share-to-Web Namespace Daemon"="C:\\Program Files\\Hewlett-Packard\\HP Share-to-Web\\hpgs2wnd.exe"
              "SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_11\\bin\\jusched.exe\""
              "RoxioAudioCentral"="\"C:\\Program Files\\Roxio\\Easy CD Creator 6\\AudioCentral\\RxMon.exe\""
              "HP Software Update"="C:\\Program Files\\HP\\HP Software Update\\HPWuSchd2.exe"
              "VirtualCloneDrive"="\"C:\\Program Files\\Elaborate Bytes\\VirtualCloneDrive\\VCDDaemon.exe\" /s"
              "KernelFaultCheck"=hex(2):25,73,79,73,74,65,6d,72,6f,6f,74,25,5c,73,79,73,74,\
              65,6d,33,32,5c,64,75,6d,70,72,65,70,20,30,20,2d,6b,00
              [Run\OptionalComponents]
              [Run\OptionalComponents\IMAIL]
              "Installed"="1"
              [Run\OptionalComponents\MAPI]
              "Installed"="1"
              "NoChange"="1"
              [Run\OptionalComponents\MSFS]
              "Installed"="1"


              --- HKLM\RunOnce regkeys ---

              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
              no HKLM RunOnce keys found


              --- HKLM\RunOnceEx regkeys ---

              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
              @=""


              --- HKLM\RunServices regkeys ---

              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
              no HKLM RunServices keys found


              --- HKLM\RunServicesOnce regkeys ---

              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce
              no HKLM RunServicesOnce keys found


              --- HKCU\Run regkeys ---

              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
              "ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
              "SpybotSD TeaTimer"="C:\\Program Files\\Spybot - Search & Destroy\\TeaTimer.exe"


              --- HKCU\RunOnce regkeys ---

              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
              no HKCU RunOnce keys found


              --- HKCU\RunOnceEx regkeys ---

              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
              regkey does not exist


              --- HKCU\RunServices regkeys ---

              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
              no HKCU RunServices keys found


              --- HKCU\RunServicesOnce regkeys ---

              HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce
              no HKCU RunServicesOnce keys found


              --- HKU\.DEFAULT\Run regkeys - Default user ---

              HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
              no HKU\.DEFAULT\Run keys found


              --- HKU\S-1-5-18\Run regkeys - user SYSTEM ---

              HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
              no HKU\S-1-5-18\Run keys found


              --- HKU\S-1-5-19\Run regkeys - User Lokale service ---

              HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
              no HKU\S-1-5-19\Run keys found


              --- HKU\S-1-5-20\Run regkeys - User Netwerkservice ---

              HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
              no HKU\S-1-5-20\Run keys found


              --- HKLM\Explorer\Run regkeys ---

              HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
              regkey does not exist


              --- HKCU\Explorer\Run regkeys ---

              HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
              regkey does not exist


              --- Image File Execution regkeys ---

              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
              no debuggers found


              --- BROWSER HELPER OBJECTS regkeys ---

              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
              "{02478D38-C3F9-4efb-9B51-7695ECA05670}" regkey not found (ERROR)
              "{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}" FILE ="C:\\Program Files\\Adobe\\Acrobat 5.0\\Reader\\ActiveX\\AcroIEHelper.ocx"
              "{22BF413B-C6D2-4d91-82A9-A0F997BA588C}" FILE ="C:\\PROGRA~1\\Skype\\Phone\\IEPlugin\\SKYPEI~1.DLL"
              "{53707962-6F74-2D53-2644-206D7942484F}" FILE ="C:\\PROGRA~1\\SPYBOT~1\\SDHelper.dll"
              "{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}" FILE ="C:\\Program Files\\Java\\jre1.6.0_03\\bin\\ssv.dll"
              "{AA58ED58-01DD-4d91-8333-CF10577473F7}" FILE ="c:\\program files\\google\\googletoolbar3.dll"


              --- TOOLBAR regkeys ---

              HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
              "{2318C2B1-4965-11d4-9B18-009027A5CD4F}" FILE ="c:\\program files\\google\\googletoolbar3.dll"


              --- URLSEARCHHOOKS regkeys ---

              HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks
              only standard regkeys found


              --- CONTEXTMENUHANDLERS regkeys ---

              HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers
              "avast" CLSID ={472083B0-C522-11CF-8763-00608CC02F24} FILE ="C:\\Program Files\\Alwil Software\\Avast4\\ashShell.dll"
              "ewido" CLSID ={57BD36D7-CE32-4600-9B1C-1A0C47EFC02E} FILE ="C:\\Program Files\\ewido anti-malware\\context.dll"
              "Offline Files" CLSID ={750fdf0e-2a26-11d1-a3ea-080036587f03} FILE =%SystemRoot%\System32\cscui.dll
              "Open With" CLSID ={09799AFB-AD67-11d1-ABCD-00C04FC30936} FILE =%SystemRoot%\system32\SHELL32.dll
              "Open With EncryptionMenu" CLSID ={A470F8CF-A1E8-4f65-8335-227475AA5C46} FILE =%SystemRoot%\system32\SHELL32.dll
              "WinRAR" CLSID ={B41DB860-8EE4-11D2-9906-E49FADC173CA} FILE ="C:\\Program Files\\WinRAR\\rarext.dll"
              "{a2a9545d-a0c2-42b4-9708-a0b2badd77c8}" Start Menu Pin FILE =%SystemRoot%\system32\SHELL32.dll

              HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers
              "EncryptionMenu" CLSID ={A470F8CF-A1E8-4f65-8335-227475AA5C46} FILE =%SystemRoot%\system32\SHELL32.dll
              "ewido" CLSID ={57BD36D7-CE32-4600-9B1C-1A0C47EFC02E} FILE ="C:\\Program Files\\ewido anti-malware\\context.dll"
              "LockFolder" CLSID ={4852341A-43E6-4994-B29B-E82904992884} FILE ="C:\\Program Files\\FolderAccess\\LckFldMenu.dll"
              "Offline Files" CLSID ={750fdf0e-2a26-11d1-a3ea-080036587f03} FILE =%SystemRoot%\System32\cscui.dll
              "Sharing" CLSID ={f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} FILE ="ntshrui.dll"
              "WinRAR" CLSID ={B41DB860-8EE4-11D2-9906-E49FADC173CA} FILE ="C:\\Program Files\\WinRAR\\rarext.dll"

              HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers
              "avast" CLSID ={472083B0-C522-11CF-8763-00608CC02F24} FILE ="C:\\Program Files\\Alwil Software\\Avast4\\ashShell.dll"
              "InventorMenu" CLSID ={6FDE7A70-351B-11d6-988B-0010B57A8BB7} FILE ="C:\\Program Files\\Autodesk\\Inventor 9\\Bin\\DT.dll"
              "WinRAR" CLSID ={B41DB860-8EE4-11D2-9906-E49FADC173CA} FILE ="C:\\Program Files\\WinRAR\\rarext.dll"


              --- ALTERNATESHELL regkey ---

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot
              "AlternateShell"="cmd.exe"


              --- SAFEBOOT MINIMAL SERVICES ---

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal
              no unknown services found


              --- SAFEBOOT NETWORK SERVICES ---

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network
              no unknown services found


              --- SERVICES ---

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AVG Anti-Rootkit
              "DisplayName"="AVG Anti-Rootkit"
              System32\DRIVERS\avgarkt.sys

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AvgArCln
              "DisplayName"="Avg Anti-Rootkit Clean Driver"
              System32\DRIVERS\AvgArCln.sys

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\C-DillaCdaC11BA
              "DisplayName"="C-DillaCdaC11BA"
              C:\WINDOWS\system32\drivers\CDAC11BA.EXE

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CCALib8
              "DisplayName"="Canon Camera Access Library 8"
              C:\Program Files\Canon\CAL\CALMAIN.exe

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CdaC15BA
              "DisplayName"="CdaC15BA"
              \??\C:\WINDOWS\system32\drivers\CDAC15BA.SYS

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdr4_xp
              no imagepath value found

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdralw2k
              no imagepath value found

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cdudf_xp
              no imagepath value found

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dot4
              "DisplayName"="MS IEEE-1284.4 Driver"
              system32\DRIVERS\Dot4.sys

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dot4Print
              "DisplayName"="Stuurprogramma voor printerklasse voor IEEE-1284.4"
              system32\DRIVERS\Dot4Prt.sys

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dot4Scan
              "DisplayName"="Scan Class Driver for IEEE-1284.4"
              system32\DRIVERS\Dot4Scan.sys

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dot4usb
              "DisplayName"="Dot4USB Filter Dot4USB Filter"
              system32\DRIVERS\dot4usb.sys

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DVDVRRdr_xp
              no imagepath value found

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dvd_2K
              no imagepath value found

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ElbyDelay
              "DisplayName"="ElbyDelay"
              System32\Drivers\ElbyDelay.sys

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ewido security suite control
              "DisplayName"="ewido security suite control"
              C:\Program Files\ewido anti-malware\ewidoctrl.exe

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ewido security suite driver
              "DisplayName"="ewido security suite driver"
              \??\C:\Program Files\ewido anti-malware\guard.sys

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HP Port Resolver
              "DisplayName"="HP Port Resolver"
              C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HP Status Server
              "DisplayName"="HP Status Server"
              C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Inventor
              no imagepath value found

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\KLSIENET
              "DisplayName"="Driver for USB Ethernet Adapter"
              System32\DRIVERS\usb101et.sys

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mmc_2K
              no imagepath value found

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\pwd_2k
              no imagepath value found

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\swwd
              no imagepath value found

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UDFReadr
              no imagepath value found

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VClone
              system32\DRIVERS\VClone.sys

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WebPost
              no imagepath value found

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WMDM PMSP Service
              "DisplayName"="WMDM PMSP Service"
              C:\WINDOWS\system32\MsPMSPSv.exe

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{0A0EAAA4-62F6-405E-9371-67131173C038}
              no imagepath value found

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{1A853898-E662-4FE8-A026-BDF1F868AAED}
              no imagepath value found

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{3902BC77-7D74-4E07-9CCC-35799B679F23}
              no imagepath value found


              --- SECURITYPROVIDERS regkey ---

              HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders
              "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"


              --- SVCHOST regkey ---

              HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost
              LocalService: Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
              NetworkService: DnsCache\0\0
              netsvcs: 6to4\0AppMgmt\0AudioSrv\0Browser\0CryptSvc\0DMServer\0DHCP\0ERSvc\0EventSystem\0FastUserSwitchingCom patibility\0HidServ\0Ias\0Iprip\0Irmon\0LanmanServer\0LanmanWorkstation\0Messenger\0Netman\0Nla\0Ntm ssvc\0NWCWorkstation\0Nwsapagent\0Rasauto\0Rasman\0Remoteaccess\0Schedule\0Seclogon\0SENS\0Sharedacc ess\0SRService\0Tapisrv\0Themes\0TrkWks\0W32Time\0WZCSVC\0Wmi\0WmdmPmSp\0winmgmt\0TermService\0wuaus erv\0BITS\0ShellHWDetection\0helpsvc\0xmlprov\0wscsvc\0WmdmPmSN\0\0
              rpcss: RpcSs\0\0
              imgsvc: StiSvc\0\0
              termsvcs: TermService\0\0
              HTTPFilter: HTTPFilter\0\0
              DcomLaunch: DcomLaunch\0TermService\0\0


              --- WOW-CMDLINE regkeys ---

              HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WOW
              "cmdline" = %SystemRoot%\system32\ntvdm.exe
              "wowcmdline" = %SystemRoot%\system32\ntvdm.exe -a %SystemRoot%\system32\krnl386


              --- DNS SERVER regkeys ---

              no "NameServer" values found


              --- STARTUP FOLDERS ---

              C:\Documents and Settings\Vogel\Menu Start\Programma's\Opstarten\desktop.ini
              C:\Documents and Settings\Vogel\Menu Start\Programma's\Opstarten\Microsoft Office Werkbalk (2).lnk
              C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\desktop.ini
              C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\Event Reminder.lnk
              C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\HP Digital Imaging Monitor.lnk
              C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\HP Photosmart Premier Snelstart.lnk
              C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\Microsoft Office.lnk


              --- TASK SCHEDULER JOBS ---

              no .job files found


              --- File associations ---

              .BAT files: ("%1" %*)
              .COM files: ("%1" %*)
              .EXE files: ("%1" %*)
              .HLP files: (%SystemRoot%\System32\winhlp32.exe %1)
              .INF files: (%SystemRoot%\System32\NOTEPAD.EXE %1)
              .INI files: (%SystemRoot%\System32\NOTEPAD.EXE %1)
              .JS files: (%SystemRoot%\System32\WScript.exe "%1" %*)
              .PIF files: ("%1" %*)
              .REG files: (regedit.exe "%1")
              .SCR files: ("%1" /S)
              .TXT files: (%SystemRoot%\system32\NOTEPAD.EXE %1)
              .VBS files: (%SystemRoot%\System32\WScript.exe "%1" %*)


              FINISHED

              PS: zou graag willen weten wat je hiermee kunt zien...

              M.v.g,

              Bird

              Comment


              • #8
                format.

                Hallo,

                Ik wil even mededelen dat ik de computer heb geformatteerd en opnieuw heb geïnstalleerd. Dit ging namelijk toch iets sneller dat al die troep eraf halen.

                Maar toch heel erg bedankt voor de goede hulp tot dus ver...!

                Ik had graag willen weten waar het probleem zat, maar m'n ouders waren de computer nu wel echt zat.

                Nogmaals bedank voor uw hulp!!!

                M.v.g,

                Bird

                Comment

                Sorry, you are not authorized to view this page
                Working...
                X
                😀
                🥰
                🤢
                😎
                😡
                👍
                👎