NL Computer Forum
Besturingssystemen => Windows => Topic gestart door: hce400 op 3 december 2012, 11:32:32
-
Sinds kort herkent mijn computer geen enkel usb apparaat meer.
In apparaatbeheer staat b.v. wel mijn usb stick met een geel uitroeptekentje. Bij eigenschappen komt de melding:
"Kan het apparaatstuurprogramma voor dit apparaat niet in het geheugen laden. Mogelijk is het stuurprogramma beschadigd of het ontbreekt. (Code 39)"
Bij elk usb apparaat wil de computer het stuurprogramma installeren en komt daarna met de melding "stuurprogramma is niet geinstalleerd".
Vroeger werkte het echter wel.
Ook werkt windows update niet meer, de gedownloade files worden niet geinstalleerd.
Hartelijk dank voor eventuele hulp
-
Welkom hce400,
Je USB apparaten werken wel op een andere computer?
Stap 1:
Sluit je computer af en haal daarna alle kabels los, inclusief het netsnoer.
Druk nu een paar keer op aan/uit-knop om statische lading te verwijderen.
Sluit alle kabels weer aan en herstart je computer.
Werken je USB apparaten nu wel ?
Stap 2:
Download DDS van sUBS van één van deze locaties en plaats het op je bureaublad:
DDS - Bleeping Computer download. (http://download.bleepingcomputer.com/sUBs/dds.com)
DDS - Bleeping Computer download. (http://download.bleepingcomputer.com/sUBs/dds.scr)
(DDS is een diagnosetool en maakt gebruik van scripts.)
Dubbelklik op DDS om de tool te starten.
DDS zal 2 logfiles openen:
* DDS.txt
* Attach.txt
Een scherm vraagt je om beide logjes op te slaan omdat de logjes weg zullen zijn als je ze sluit.
Sla de logjes op, bijvoorbeeld op je bureaublad of een andere plaats waar je ze makkelijk terug vind.
Post beide bestanden als bijlage in je volgend bericht.
Stap 3:
Download MBAM (Malwarebytes' Anti-Malware) (http://www.malwarebytes.org/mbam-download.php).
(klik op Download Now, het bestand mbam--setup-x.xx.x.xxxx.exe wordt dan gedownload)
Na het downloaden, dubbelklik erop om het programma te installeren.
Verander geen instellingen tijdens de installatie.
Updates worden nu automatisch gedownload en geïnstalleerd.
Wacht tot het programma weer verschijnt.
De eerste keer na installatie krijg je een aantal mogelijkheden:
Let op: Haal het vinkje weg bij Start de gratis probeer versie van Malwarebytes Anti-Malware PRO.
Updaten:
Klik op tab Update en dan op "Controleer op updates".
Ga naar tabblad Instellingen.
Vink aan: Sluit Internet Explorer tijdens verwijdering van malware.
Ga naar tab Scanner, kies Volledige Scan en klik op Scan.
Het scannen kan een tijdje duren, dus wees geduldig.
Wanneer de scan voltooid is, klik op OK, daarna "Bekijk Resultaten" om de resultaten te zien.
Zorg ervoor dat daar alles aangevinkt is, daarna klik op "Verwijder geselecteerde".
Na het verwijderen zal een log openen en kan er gevraagd worden om de computer opnieuw op te starten. Herstart dan de computer en MBAM.
Ga naar tab Logs, dubbelklik op de logfile die als laatste gemaakt is.
Post de logfile als bijlage of kopieer de inhoud en plak dat in een nieuw bericht.
Groeten, Peter
-
Dag Peter,
Dank voor je info. Bijgevoegd eerst de twee files voor de scan en dan die van na de scan. Hoop dat je er wat mee kunt.
Groet,
Herman
-
Hoi hce400,
Open de logfile van MBAM en kopieer en plak de inhoud in een bericht als tekst. Niet de logfile als bijlage posten.
Peter
-
Zo beter?
Groet,
Herman
-
Peter,
Ter info:
Externe harddisks worden gezien
Mijn oude HTC met windows mobile zie ik niet staan in computer maar het gekke is dat hij wel synchroniseert. Het is zelfs zo dat het progje "Quick GPS"dat zorgt voor een snelle fix, update op het moment dat mijn HTC aan een computer hangt. Mijn computer communiceert dus wel met de telefoon, echter zie ik geen files.
Wanneer ik mijn Galaxy S2 aankoppel krijg ik eerst de melding "apparaat stuurprogramma installeren" hoewel ik tot een week geleden gewoon mijn Samsung zonder problemen aan mijn computer kon hangen. Na de voornoemde melding krijg ik "het stuurprogramma voor het apparaat is niet geinstalleerd".
Het opnieuw installeren van het stuurprogramma lukt niet.
-
Hoi Herman,
Zo beter?
Nee. Je hebt het logbestand weer als bijlage toegevoegd en niet als tekst in een bericht geplakt.
Dat gaan we opnieuw doen:
Open nogmaals het MBAM logbestand.
Kopieer alle tekst die daarin staat (druk op de toetscombinatie Ctrl+A en vervolgens op de toetscombinatie Ctrl+C).
Start een nieuw bericht op dit forum.
Plak daarin de zojuist gekopieerde tekst, klik in het bericht-invoerveld en druk op de toetscombinatie Ctrl+V.
Als het goed is staat de MBAM logtekst nu in het bericht.
Groeten, Peter
-
Malwarebytes Anti-Malware 1.65.1.1000
www.malwarebytes.org (http://www.malwarebytes.org)
Databaseversie: v2012.12.03.11
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Herman :: HERMAN-PC [administrator]
3-12-2012 20:23:10
mbam-log-2012-12-03 (20-23-10).txt
Scantype: Volledige scan (C:\|)
Ingeschakelde scanopties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM
Uitgeschakelde scanopties: P2P
Objecten gescand: 464239
Verstreken tijd: 1 uur/uren, 4 minuut/minuten, 9 seconde(n)
Geheugenprocessen gedetecteerd: 1
C:\Windows\KMService.exe (RiskWare.Tool.CK) -> 3048 -> Zal worden verwijderd tijdens het herstarten.
Geheugenmodulen gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
Registersleutels gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
Registerwaarden gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
Registerdata gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
Mappen gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
Bestanden gedetecteerd: 12
C:\Windows\KMService.exe (RiskWare.Tool.CK) -> Zal worden verwijderd tijdens het herstarten.
C:\Program Files\VS Revo Group\Revo Uninstaller Pro\Revo.Uninstaller.Pro.2.x.x.Generic.Patch-JW.exe (RiskWare.Tool.CK) -> Succesvol in quarantaine geplaatst en verwijderd.
C:\Users\Herman\Downloads\DownloadSetup.exe (Affiliate.Downloader) -> Succesvol in quarantaine geplaatst en verwijderd.
C:\Users\Herman\Downloads\f1pinballzip_downloader_by_OneOnlineGames.exe (PUP.BundleInstaller.BI) -> Succesvol in quarantaine geplaatst en verwijderd.
C:\Users\Herman\Downloads\installer_itunes.exe (PUP.BundleInstaller.DT) -> Succesvol in quarantaine geplaatst en verwijderd.
C:\Users\Herman\Downloads\installer_media_player_Dutch.exe (Adware.Downware) -> Succesvol in quarantaine geplaatst en verwijderd.
C:\Users\Herman\Downloads\installer_soluto.exe (PUP.BundleInstaller.PHP) -> Succesvol in quarantaine geplaatst en verwijderd.
C:\Users\Herman\Downloads\Google Earth Pro 6226613 Final\Password-Protected-copyPro\google.earth.free2pro.v6.2.2.6613.patch-MPT\google.earth.free2pro.v6.2.2.6613.patch-MPT.exe (PUP.Hacktool.Patcher) -> Succesvol in quarantaine geplaatst en verwijderd.
C:\Users\Herman\Downloads\TuneUp Utilities 2013 1302013195 Final\Password-Protected-TuneUp Utilities 2013 13.0.2013.195\Patch\Patch.exe (Riskware.Tool.CK) -> Succesvol in quarantaine geplaatst en verwijderd.
C:\Users\Herman\Downloads\Windows 7 Manager 414 Final\Password-Protected- 7 Manager 4.1.4\CORE\CORE\CORE10k.EXE (Dont.Steal.Our.Software) -> Succesvol in quarantaine geplaatst en verwijderd.
C:\Users\Herman\Downloads\Windows 7 Manager 414 Final\Password-Protected- 7 Manager 4.1.4\CORE\CORE\keygen.exe (RiskWare.Tool.CK) -> Succesvol in quarantaine geplaatst en verwijderd.
C:\Users\Herman\Local Settings\TempDIR\BetterInstaller.exe (PUP.BundleInstaller.Somoto) -> Succesvol in quarantaine geplaatst en verwijderd.
(einde)
met dank,
Herman
-
Hoi Herman,
OK, de logfile van MBAM is nu wel leesbaar.
Doe nu het volgende:
Stap 1:
Sluit alle openstaande programma's.
De-installeer via Configuratiescherm - Programma's en onderdelen:
Google Toolbar for Internet Explorer
Incredibar Toolbar on IE
Soluto
Web Assistant 2.0.0.100
Herstart je computer.
Stap 2:
Download AdwCleaner (http://general-changelog-team.fr/en/downloads/finish/20-outils-de-xplode/2-adwcleaner) by Xplode naar je bureaublad.
Sluit alle openstaande programma's.
Schakel de realtime-protectie van je antivirus programma tijdelijk uit. Dit kan adwCleaner in de weg zitten.
Start AdwCleaner
Windows Vista en Windows 7 gebruikers: Rechtsklik op adwCleaner en klik op 'als Administrator uitvoeren...'.
Klik op Verwijderen.
In het venster '- AdwCleaner – Afsluiting van de programma's -' klik op OK.
Tijdens de opruim-actie zullen de snelkoppelingen verdwijnen, dit is normaal.
Na het verwijderen verschijnen 2 meldingen:
In het venster '- AdwCleaner – Informatie -' klik op OK.
In het venster '- AdwCleaner – Herstarten noodzakelijk -' klik op OK.
Nadat de computer herstart is, opent een logfile.
De logfile kun je ook vinden in de hoofdmap, bijv. C:\AdwCleaner[xx].txt
Kopieer en plak de inhoud van deze logfile in een nieuw bericht.
-
Komt ie!
# AdwCleaner v2.011 - Verslag gemaakt op 04/12/2012 om 22:52:15
# Geactualiseerd op 02/12/2012 door Xplode
# Besturingssysteem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Gebruiker : Herman - HERMAN-PC
# Opstarten Modus : Normale modus
# Gelanceerd vanaf : C:\Users\Herman\Downloads\adwcleaner.exe
# Optie [Verwijderen]
***** [Diensten] *****
***** [Files / Mappen] *****
File Verwijdert : C:\user.js
Map Verwijdert : C:\ProgramData\Partner
Map Verwijdert : C:\Users\Herman\AppData\Local\TempDir
***** [Register] *****
Sleutel Verwijdert : HKCU\Software\IM
Sleutel Verwijdert : HKCU\Software\ImInstaller
Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{336D0C35-8A85-403a-B9D2-65C292C39087}
Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{336D0C35-8A85-403a-B9D2-65C292C39087}
Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}
Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9639E4A-801B-4843-AEE3-03D9DA199E77}
Sleutel Verwijdert : HKCU\Software\Softonic
Sleutel Verwijdert : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{70D46D94-BF1E-45ED-B567-48701376298E}
Sleutel Verwijdert : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_installer_RASAPI32
Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_installer_RASMANCS
Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASAPI32
Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASMANCS
Sleutel Verwijdert : HKLM\Software\Web Assistant
Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Sleutel Verwijdert : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Sleutel Verwijdert : HKLM\SOFTWARE\Web Assistant
Waarde Verwijdert : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]
***** [Browsers] *****
-\\ Internet Explorer v9.0.8112.16455
Vervangen : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://mystart.incredibar.com/mb174?a=6R8FtmYecw&i=26 --> hxxp://www.google.com
-\\ Google Chrome v23.0.1271.95
File : C:\Users\Herman\AppData\Local\Google\Chrome\User Data\Default\Preferences
[OK] De file bevat geen enkele ongeoorloofde invoer.
*************************
AdwCleaner[S1].txt - [3002 octets] - [04/12/2012 22:52:15]
########## EOF - C:\AdwCleaner[S1].txt - [3062 octets] ##########
-
Hoi Herman,
Mooi. AdwCleaner heeft een boel ongein opgeruimd en de startpagina in IE vervangen (mystart.incredibar is verwijdert).
Hoe staat het nu met de Windows Updates ?
Peter
-
Hoi Peter,
Computer weigert nog steeds de volgende update te installeren:
" update voor framework voor stuurprogramma''s in gebruikersmodus versie 1.11 voor W7 op x64 gebaseerde systemen(KB 2685813)''
Komt met foutcode 800B0100.
Andere update doet ie wel.
Verder nog steeds probleem met mijn Galaxy en HTC telefoon. Kan niet in de files kijken en wanneer ik ze aansluit wil computer stuurprogramma installeren (tot vorige week geen probleem) en zegt dan " stuurprogramma is niet geinstalleerd".
Dank voor je geduld,
Groet,
Herman
-
Hoi Herman,
Computer weigert nog steeds de volgende update te installeren:
" update voor framework voor stuurprogramma''s in gebruikersmodus versie 1.11 voor W7 op x64 gebaseerde systemen(KB 2685813)''
Komt met foutcode 800B0100.
Sluit alle openstaande programma's.
Voer schijfcontrole uit:
Open de verkenner en rechtsklik op de systeemschijf. Dit is meestal C:
Klik op Eigenschappen - Extra
In het kader Schijfcontrole, klik op Nu controleren....
Vink alleen het bovenste item aan en klik dan op Starten.
Als je onderstaande melding krijgt, klik op Schijfcontrole plannen.
(http://www.nlcomputerforum.nl/index.php?action=dlattach;topic=3447.0;attach=2899)
Herstart vervolgens je computer.
Schijfcontrole wordt nu gestart voordat Windows start.
Dit kan even duren dus wees geduldig.
Als Windows opnieuw gestart is, probeer de update opnieuw te installeren.
Lukt het dan nog niet, doe dan het volgende:
Klik op Start - Alle programma's - Bureau-accessoires
Rechtsklik op Opdrachtprompt en klik op"Als administrator uitvoeren.
Er verschijnt nu een zwart venster.
Typ daarin sfc /scannow en druk dan op enter. (let op de spatie na sfc)
Wacht geduldig totdat sfc klaar is.
(meer info over het gebruik van SFC vindt je HIER (http://support.microsoft.com/kb/929833).)
Meldt de resultaten van SFC indien SFC problemen niet kan verhelpen.
Download eventueel de update via DEZE (http://download.windowsupdate.com/msdownload/update/software/updt/2012/11/windows6.1-kb2685813-x64_22a969bada171678b0936bb320e6a7778e8adc07.msu) link.
Peter
-
>> Komt met foutcode 800B0100 <<
Volgens Ms zelf ligt de oorzaak van deze foutcode in een beschadigd of ontbrekend onderdeel van Windows Update.
Loop de informatie op DEZE (http://windows.microsoft.com/nl-NL/windows7/Windows-Update-error-800B0100) site even door en haal de update readyness tool (let op de juiste versie) via de eerste link op.
-
Michel, dank, maar de reparatie tool heeft niet gewerkt.
Peter, heb scannow gedaan. Komt met de tekst: er zijn beschadigde bestanden gevonden maar deze kunnen niet allemaal worden hersteld.
DeOBS logfile weigert om te openen, de filterlist.log zegt:
cumon 0 0
MpFilter 7 0
SysCow 1 0
luafv 1 0
SbieDrv 7 0
FileInfo 7 0
Framework update doet het nog steeds niet en nog steeds problemen met de Samsung MTP driver.
Groet,
Herman
-
Kreeg dit na de windows Update troubleshooting info:
Proxy :
Last Installed Update :Update voor framework voor stuurprogramma's in gebruikersmodus versie 1.11 voor Windows 7 voor op x64 gebaseerde systemen (KB2685813),12/06/2012 12:09:34
Last Displayed Error :2012-12-06 13:10:43:737 1348 1890 Agent WARNING: WU client fails CClientCallRecorder::RemoveService with error 0x80248014
Language settings :nl-NL
bits : Running
wuauserv : Running
WORKGROUP :WORKGROUP
Windows Update Agent Version : Not Found
Microsoft Windows 7 Home Premium SP: 1
CPU Type : x64
OS Architecture :64-bits
RES_GenWUError : Bits is stopped
RES_GenWUError : wuauserv is stopped
RES_GenWUError : CryptSvc is stopped
RES_GENWUError : : CryptSvc Running
RES_GENWUError : : bits Running
RES_GENWUError : : wuauserv Running
Herman
-
Hoi Herman,
Download DEZE (http://go.microsoft.com/?linkid=9767096&entrypointid=MATSKB) Microsoft fix it tool.
Na het downloaden, open de downloadmap, rechtsklik op het gedownloade bestand en kies "Als administrator uitvoeren".
Volg de aanwijzingen die verschijnen.
Lukt het updaten dan wel?
Peter
-
Beste Peter,
Na het uitvoeren van de betreffende fix wordt gezegd: reparatie gelukt.
Echter, optionele updates worden nu geinstalleerd, maar de "framework voor stuurprogrammas etc (KB 2685813)." wil nog steeds niet.
Verder nog steeds probleem in apparaatbeheer, Bij overige apparaten staat onbekend apparaat en geen stuurprogramma aanwezig. Als ik dat wil downloaden krijg ik de melding: stuurprogramma gevonden maar fout tijdens installatie, het stuurprogramma is niet voor dit systeem ontworpen.
En tot een week geleden werkte alles normaal. Mijn oude HTC telefoontje als ook mijn Galaxy S2 communiceerden met mijn computer.
Mijn oude Ipaq het zelfde probleem.
Ik ben bang dat het toch een factory reset gaat worden.....
Groet,
Herman
-
Hoi Herman,
Vervelende zaak. Controleer eens of die update al in de lijst staat van geïnstalleerde updates.
Eens kijken waarom wudfpf niet start:
Open de Opdrachtprompt
Typ, of kopieer en plak, in het zwarte venster:
sc query wudfpf > log1.txt en druk op enter.
Typ, of kopieer en plak, in het zwarte venster:
reg export hklm\system\currentcontrolset\services\wudfpf > log2.txt en druk op enter.
Typ, of kopieer en plak, in het zwarte venster:
notepad log1.txt en druk op enter.
Kopieer en plak de inhoud van log1.txt in een nieuw bericht.
Open vervolgens met notepad log2.txt en plak de inhoud hiervan ook in een bericht.
Notepad en de opdrachtprompt kan je daarna afsluiten.
Een andere vraag, heb je recent een malware/virus-infectie gehad wat mogelijk deze problemen heeft veroorzaakt?
Peter
-
Dag Peter,
Eerst je laatste vraag: nee ,volgens mij heb ik geen virus gehad.
Bij de geinstalleerde updates staan wel de framework (drivers?) KB 2737083 en KB 2729460, maar niet de KB 2685813.
Verder krijg ik een syntaxis fout bij "" reg export hklm enz.
De eerste regel werkt wel.
De log1.txt is als volgt:
SERVICE_NAME: wudfpf
TYPE : 1 KERNEL_DRIVER
STATE : 1 STOPPED
WIN32_EXIT_CODE : 193 (0xc1)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
Herman
-
Hoi Herman,
De eerste log is goed verlopen.
Verder krijg ik een syntaxis fout bij "" reg export hklm enz.
Oops, foutje.
De opdracht moet zijn:
Typ, of kopieer en plak, in het zwarte venster:
reg export hklm\system\currentcontrolset\services\wudfpf log2.txt /y en druk op enter.
Typ, of kopieer en plak, in het zwarte venster:
notepad log2.txt en druk op enter.
Kopieer en plak de inhoud van log2.txt in een nieuw bericht.
Peter
-
Het is nu wel gelukt:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\wudfpf]
"DisplayName"="@%SystemRoot%\\system32\\drivers\\Wudfpf.sys,-1000"
"Group"="base"
"ImagePath"=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,64,00,\
72,00,69,00,76,00,65,00,72,00,73,00,5c,00,57,00,75,00,64,00,66,00,50,00,66,\
00,2e,00,73,00,79,00,73,00,00,00
"ErrorControl"=dword:00000001
"Start"=dword:00000003
"Type"=dword:00000001
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\wudfpf\Enum]
"0"="Root\\LEGACY_WUDFPF\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001
"INITSTARTFAILED"=dword:00000001
:)
-
Hoi Herman,
Er klopt toch iets niet met wudfpf.
Eens kijken wat TDSSKiller ervan vindt:
Download TDSSKStarter (http://home.kpn.nl/stefsmeenk/tools/TDSSKStarter.exe) naar je bureaublad.
Sluit eerst alle openstaande programma's.
Windows 2000 en Windows XP: start de tool via dubbelklik op TDSSKStarter.exe.
Windows Vista en Windows 7: start de tool via rechtsklik op TDSSKStarter.exe en klik dan op Als administrator uitvoeren.
Een venster wordt geopend, TDSSKiller wordt gedownload en voert daarna een scan uit.
Wacht geduldig. Na het scannen zal het venster automatisch sluiten.
Notepad wordt geopend met de log van de scan.
Kopieer en plak de inhoud van de logfile in een nieuw bericht.
(Als de logfile niet in 1 bericht past, verdeel het dan over meerdere berichten.)
Peter
-
Past niet in een keer, nieuwe poging!
20:44:05.0979 6608 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
20:44:05.0979 6608 ============================================================
20:44:05.0979 6608 Current date / time: 2012/12/07 20:44:05.0979
20:44:05.0979 6608 SystemInfo:
20:44:05.0979 6608
20:44:05.0979 6608 OS Version: 6.1.7601 ServicePack: 1.0
20:44:05.0979 6608 Product type: Workstation
20:44:05.0979 6608 ComputerName: HERMAN-PC
20:44:05.0979 6608 UserName: Herman
20:44:05.0979 6608 Windows directory: C:\Windows
20:44:05.0979 6608 System windows directory: C:\Windows
20:44:05.0979 6608 Running under WOW64
20:44:05.0979 6608 Processor architecture: Intel x64
20:44:05.0979 6608 Number of processors: 4
20:44:05.0979 6608 Page size: 0x1000
20:44:05.0979 6608 Boot type: Normal boot
20:44:05.0979 6608 ============================================================
20:44:10.0643 6608 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
20:44:10.0659 6608 ============================================================
20:44:10.0659 6608 \Device\Harddisk0\DR0:
20:44:10.0674 6608 MBR partitions:
20:44:10.0674 6608 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
20:44:10.0674 6608 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x6CCD2C66
20:44:10.0674 6608 \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x6CD06000, BlocksNum 0x7800000
20:44:10.0674 6608 ============================================================
20:44:10.0737 6608 C: <-> \Device\Harddisk0\DR0\Partition2
20:44:10.0830 6608 D: <-> \Device\Harddisk0\DR0\Partition3
20:44:10.0830 6608 ============================================================
20:44:10.0830 6608 Initialize success
20:44:10.0830 6608 ============================================================
20:44:10.0908 4516 ============================================================
20:44:10.0908 4516 Scan started
20:44:10.0908 4516 Mode: Auto (DCExact ); SigCheck; TDLFS; Silent;
20:44:10.0908 4516 ============================================================
20:44:14.0044 4516 ================ Scan system memory ========================
20:44:14.0044 4516 ================ Scan services =============================
20:44:14.0917 4516 [ A87D604AEA360176311474C87A63BB88 ] 1394ohci C:\Windows\system32\drivers\1394ohci.sys
20:44:15.0229 4516 [ C863272577DC93199F9A2D108468EDB9 ] 9734BF6A-2DCD-40f0-BAB0-5AAFEEBE1269 C:\Program Files (x86)\Roxio\BackOnTrack\App\SaibSVC.exe
20:44:15.0385 4516 [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI C:\Windows\system32\drivers\ACPI.sys
20:44:15.0510 4516 [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi C:\Windows\system32\drivers\acpipmi.sys
20:44:15.0791 4516 [ 835CE0647E4E9F01BEB26201DA6705B4 ] AdobeActiveFileMonitor11.0 C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
20:44:15.0963 4516 [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx C:\Windows\system32\drivers\adp94xx.sys
20:44:16.0181 4516 [ 597F78224EE9224EA1A13D6350CED962 ] adpahci C:\Windows\system32\drivers\adpahci.sys
20:44:16.0306 4516 [ E109549C90F62FB570B9540C4B148E54 ] adpu320 C:\Windows\system32\drivers\adpu320.sys
-
deel 2
20:44:16.0524 4516 [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
20:44:17.0039 4516 [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD C:\Windows\system32\drivers\afd.sys
20:44:17.0211 4516 [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440 C:\Windows\system32\drivers\agp440.sys
20:44:17.0507 4516 [ 3290D6946B5E30E70414990574883DDB ] ALG C:\Windows\System32\alg.exe
20:44:17.0772 4516 [ 5812713A477A3AD7363C7438CA2EE038 ] aliide C:\Windows\system32\drivers\aliide.sys
20:44:17.0835 4516 [ 1FF8B4431C353CE385C875F194924C0C ] amdide C:\Windows\system32\drivers\amdide.sys
20:44:17.0944 4516 [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8 C:\Windows\system32\drivers\amdk8.sys
20:44:18.0053 4516 [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM C:\Windows\system32\drivers\amdppm.sys
20:44:18.0193 4516 [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata C:\Windows\system32\drivers\amdsata.sys
20:44:18.0256 4516 [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs C:\Windows\system32\drivers\amdsbs.sys
20:44:18.0287 4516 [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata C:\Windows\system32\drivers\amdxata.sys
20:44:18.0537 4516 [ 157B1C973637919DCD0D0464167C86BA ] AMPPAL C:\Windows\system32\DRIVERS\AMPPAL.sys
20:44:18.0630 4516 [ 157B1C973637919DCD0D0464167C86BA ] AMPPALP C:\Windows\system32\DRIVERS\amppal.sys
20:44:19.0036 4516 [ FB70F8C1283C8CC6BFAA6F9971107E68 ] AMPPALR3 C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
20:44:19.0129 4516 [ 89A69C3F2F319B43379399547526D952 ] AppID C:\Windows\system32\drivers\appid.sys
20:44:19.0285 4516 [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc C:\Windows\System32\appidsvc.dll
20:44:19.0363 4516 [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo C:\Windows\System32\appinfo.dll
20:44:19.0707 4516 [ A5299D04ED225D64CF07A568A3E1BF8C ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
20:44:19.0831 4516 [ C484F8CEB1717C540242531DB7845C4E ] arc C:\Windows\system32\drivers\arc.sys
20:44:19.0909 4516 [ 019AF6924AEFE7839F61C830227FE79C ] arcsas C:\Windows\system32\drivers\arcsas.sys
20:44:20.0112 4516 [ EFD89582B55DD32DC79C1A4EB54612A1 ] ASLDRService C:\Program Files (x86)\PHotkey\ASLDRSrv.exe
20:44:20.0471 4516 [ 108FB6DDB69E537A2EA53F425363FAE5 ] aspnet_state C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
20:44:20.0643 4516 [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
20:44:20.0892 4516 [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi C:\Windows\system32\drivers\atapi.sys
20:44:21.0079 4516 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
20:44:21.0111 4516 [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv C:\Windows\System32\Audiosrv.dll
20:44:21.0189 4516 [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV C:\Windows\System32\AxInstSV.dll
20:44:21.0469 4516 [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv C:\Windows\system32\drivers\bxvbda.sys
20:44:21.0594 4516 [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a C:\Windows\system32\DRIVERS\b57nd60a.sys
20:44:21.0781 4516 [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC C:\Windows\System32\bdesvc.dll
20:44:21.0844 4516 [ 16A47CE2DECC9B099349A5F840654746 ] Beep C:\Windows\system32\drivers\Beep.sys
20:44:22.0000 4516 [ 82974D6A2FD19445CC5171FC378668A4 ] BFE C:\Windows\System32\bfe.dll
20:44:23.0295 4516 [ 1EA7969E3271CBC59E1730697DC74682 ] BITS C:\Windows\System32\qmgr.dll
20:44:23.0451 4516 [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive C:\Windows\system32\drivers\blbdrive.sys
20:44:23.0716 4516 [ A52EA1D8C2900055323C93DDB252A3DA ] Bluetooth Device Monitor C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
20:44:24.0324 4516 [ 091210450CA7CED08F360D9D7FEC5D11 ] Bluetooth Media Service C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
20:44:24.0496 4516 [ 392450754E17FF778CBC5B9D20583AD1 ] Bluetooth OBEX Service C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
20:44:25.0026 4516 [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
20:44:25.0073 4516 [ C752A6902163B5E9C3554BA69A275F41 ] BOT4Service C:\Program Files (x86)\Roxio\BackOnTrack\App\BService.exe
20:44:25.0167 4516 [ 92E3765E2F9E7EE2542C9C2F6318464C ] BOTService C:\Program Files (x86)\Roxio\BackOnTrack\Instant Restore\BOTService.exe
20:44:25.0229 4516 [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
20:44:25.0307 4516 [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo C:\Windows\system32\drivers\BrFiltLo.sys
20:44:25.0354 4516 [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp C:\Windows\system32\drivers\BrFiltUp.sys
20:44:25.0385 4516 [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser C:\Windows\System32\browser.dll
20:44:25.0510 4516 [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid C:\Windows\System32\Drivers\Brserid.sys
20:44:25.0635 4516 [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
20:44:25.0697 4516 [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
20:44:25.0744 4516 [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
20:44:25.0822 4516 [ CF98190A94F62E405C8CB255018B2315 ] BthEnum C:\Windows\system32\drivers\BthEnum.sys
20:44:25.0869 4516 [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM C:\Windows\system32\drivers\bthmodem.sys
20:44:25.0931 4516 [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan C:\Windows\system32\DRIVERS\bthpan.sys
20:44:26.0009 4516 [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT C:\Windows\System32\Drivers\BTHport.sys
20:44:26.0103 4516 [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv C:\Windows\system32\bthserv.dll
20:44:26.0149 4516 [ FA2D081709A764F6BEE16B7FFE03E36C ] BTHSSecurityMgr C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
20:44:26.0196 4516 [ F188B7394D81010767B6DF3178519A37 ] BTHUSB C:\Windows\System32\Drivers\BTHUSB.sys
20:44:26.0259 4516 [ 988CC6CC49303665D3B2435C51505C3F ] btmaux C:\Windows\system32\DRIVERS\btmaux.sys
20:44:26.0305 4516 [ 2B4B508AFAC2A563931AF1FE875A5B16 ] btmhsf C:\Windows\system32\DRIVERS\btmhsf.sys
20:44:26.0399 4516 [ 555FA105C22B1616094EDAD1CBFB0551 ] cbfs3 C:\Windows\system32\DRIVERS\cbfs3.sys
20:44:26.0477 4516 [ B8BD2BB284668C84865658C77574381A ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
20:44:26.0617 4516 [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
20:44:26.0727 4516 [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc C:\Windows\System32\certprop.dll
20:44:26.0805 4516 [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass C:\Windows\system32\drivers\circlass.sys
20:44:26.0851 4516 [ FE1EC06F2253F691FE36217C592A0206 ] CLFS C:\Windows\system32\CLFS.sys
20:44:26.0929 4516 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
20:44:27.0007 4516 [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
20:44:27.0132 4516 [ 6D7C8A951AF6AD6835C029B3CB88D333 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
20:44:27.0195 4516 [ 86329C35FF23CFEF0FB6C0023BA06BCE ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
20:44:27.0257 4516 [ E13A438F9E51DD034730678E33B73290 ] clwvd C:\Windows\system32\DRIVERS\clwvd.sys
20:44:27.0304 4516 [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt C:\Windows\system32\drivers\CmBatt.sys
20:44:27.0366 4516 [ E19D3F095812725D88F9001985B94EDD ] cmdide C:\Windows\system32\drivers\cmdide.sys
20:44:27.0429 4516 [ AAFCB52FE0037207FB6FBEA070D25EFE ] CNG C:\Windows\system32\Drivers\cng.sys
20:44:27.0507 4516 [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt C:\Windows\system32\drivers\compbatt.sys
20:44:27.0553 4516 [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus C:\Windows\system32\drivers\CompositeBus.sys
20:44:27.0678 4516 [ 78AF1C499BF02F9814DF959A04A4F9C9 ] cphs C:\Windows\SysWow64\IntelCpHeciSvc.exe
20:44:27.0787 4516 [ 3AFC78A23643D5E99467F607A9201051 ] CPMService C:\Program Files\COMODO\COMODO Programs Manager\CPMService.exe
20:44:27.0897 4516 [ 1C827878A998C18847245FE1F34EE597 ] crcdisk C:\Windows\system32\drivers\crcdisk.sys
20:44:28.0006 4516 [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc C:\Windows\system32\cryptsvc.dll
20:44:28.0084 4516 [ 252E7E440488AB3A27FADA3E52AD258C ] cumon C:\Windows\system32\drivers\cumon.sys
20:44:28.0255 4516 [ 7F5CD87CA5BDB4D83F992D8C77201483 ] CyberLink PowerDVD 10 MS Monitor Service C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
20:44:28.0396 4516 [ 9FAF58E876A3B1DB3030A0A5805F2D86 ] CyberLink PowerDVD 10 MS Service C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
20:44:28.0474 4516 [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch C:\Windows\system32\rpcss.dll
20:44:28.0567 4516 [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc C:\Windows\System32\defragsvc.dll
20:44:28.0645 4516 [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC C:\Windows\system32\Drivers\dfsc.sys
20:44:28.0708 4516 [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp C:\Windows\system32\dhcpcore.dll
20:44:28.0755 4516 [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache C:\Windows\system32\drivers\discache.sys
20:44:28.0848 4516 [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk C:\Windows\system32\drivers\disk.sys
20:44:28.0879 4516 [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache C:\Windows\System32\dnsrslvr.dll
20:44:28.0957 4516 [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc C:\Windows\System32\dot3svc.dll
20:44:29.0035 4516 [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS C:\Windows\system32\dps.dll
20:44:29.0191 4516 [ 9B19F34400D24DF84C858A421C205754 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
20:44:29.0347 4516 [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
20:44:29.0394 4516 [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost C:\Windows\System32\eapsvc.dll
20:44:29.0878 4516 [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv C:\Windows\system32\drivers\evbda.sys
20:44:30.0065 4516 [ C118A82CD78818C29AB228366EBF81C3 ] EFS C:\Windows\System32\lsass.exe
20:44:30.0159 4516 [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr C:\Windows\ehome\ehRecvr.exe
20:44:30.0268 4516 [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched C:\Windows\ehome\ehsched.exe
20:44:30.0361 4516 [ A05FC7ECA0966EBB70E4D17B855A853B ] ElbyCDIO C:\Windows\system32\Drivers\ElbyCDIO.sys
20:44:30.0455 4516 [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor C:\Windows\system32\drivers\elxstor.sys
20:44:30.0533 4516 [ 34A3C54752046E79A126E15C51DB409B ] ErrDev C:\Windows\system32\drivers\errdev.sys
20:44:30.0611 4516 [ E1038A9D1BD3C3D4EC7801882D8BB027 ] Evdd C:\Windows\system32\drivers\evdd.sys
20:44:30.0658 4516 [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem C:\Windows\system32\es.dll
20:44:30.0892 4516 [ 52AE29A233832E0C704FD7FC534AF9FB ] EvtEng C:\Program Files\Intel\WiFi\bin\EvtEng.exe
20:44:30.0970 4516 [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat C:\Windows\system32\drivers\exfat.sys
20:44:31.0048 4516 [ D48F2DD3CA9413BDF52B0A2094A8782D ] Fastboot C:\Windows\system32\DRIVERS\Fastboot.sys
20:44:31.0126 4516 [ 0E9E06315130AC078E5997C933EF0402 ] FastbootService C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe
20:44:31.0173 4516 [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat C:\Windows\system32\drivers\fastfat.sys
20:44:31.0266 4516 [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax C:\Windows\system32\fxssvc.exe
20:44:31.0329 4516 [ D765D19CD8EF61F650C384F62FAC00AB ] fdc C:\Windows\system32\drivers\fdc.sys
20:44:31.0391 4516 [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost C:\Windows\system32\fdPHost.dll
20:44:31.0438 4516 [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub C:\Windows\system32\fdrespub.dll
20:44:31.0516 4516 [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
20:44:31.0531 4516 [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
20:44:31.0578 4516 [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk C:\Windows\system32\drivers\flpydisk.sys
20:44:31.0609 4516 [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
20:44:31.0687 4516 [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache C:\Windows\system32\FntCache.dll
20:44:31.0812 4516 [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
20:44:31.0843 4516 [ D43703496149971890703B4B1B723EAC ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
20:44:31.0968 4516 [ D9095576E7275FAE44C427E6EC0D2F1D ] fshoster C:\Program Files (x86)\Internetbeveiliging\fshoster32.exe
20:44:32.0062 4516 [ C2E475625F2C6F7DCDE4E920523A0573 ] fssfltr C:\Windows\system32\DRIVERS\fssfltr.sys
20:44:32.0265 4516 [ 812E1BA5C52A78F13EA6AA10DF708B1D ] fsssvc C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe
20:44:32.0327 4516 [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
20:44:32.0358 4516 [ 1F7B25B858FA27015169FE95E54108ED ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
20:44:32.0436 4516 [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx C:\Windows\system32\drivers\gagp30kx.sys
20:44:32.0514 4516 [ 8E98D21EE06192492A5671A6144D092F ] GEARAspiWDM C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
20:44:32.0608 4516 [ 4E1D0A246E10CFDDBF856432418DE404 ] GFNEXSrv C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
-
deel 3
20:44:32.0686 4516 GFNEXSrv ( UnsignedFile.Multi.Generic ) - warning
20:44:32.0686 4516 GFNEXSrv - detected UnsignedFile.Multi.Generic (1)
20:44:32.0764 4516 [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc C:\Windows\System32\gpsvc.dll
20:44:32.0857 4516 [ F02A533F517EB38333CB12A9E8963773 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
20:44:32.0920 4516 [ F02A533F517EB38333CB12A9E8963773 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
20:44:32.0951 4516 [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
20:44:32.0998 4516 [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
20:44:33.0076 4516 [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus C:\Windows\system32\drivers\HDAudBus.sys
20:44:33.0123 4516 [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt C:\Windows\system32\drivers\HidBatt.sys
20:44:33.0185 4516 [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth C:\Windows\system32\drivers\hidbth.sys
20:44:33.0247 4516 [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr C:\Windows\system32\drivers\hidir.sys
20:44:33.0279 4516 [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv C:\Windows\system32\hidserv.dll
20:44:33.0357 4516 [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb C:\Windows\system32\drivers\hidusb.sys
20:44:33.0403 4516 [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc C:\Windows\system32\kmsvc.dll
20:44:33.0466 4516 [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
20:44:33.0528 4516 [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
20:44:33.0606 4516 [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD C:\Windows\system32\drivers\HpSAMD.sys
20:44:33.0669 4516 [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP C:\Windows\system32\drivers\HTTP.sys
20:44:33.0715 4516 [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
20:44:33.0762 4516 [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt C:\Windows\system32\drivers\i8042prt.sys
20:44:33.0809 4516 [ CCFA835960E35F30D28A868E0B3B8722 ] iaStor C:\Windows\system32\drivers\iaStor.sys
20:44:33.0887 4516 [ 1F35EFEC56CD1BF62435EAF97EABC3B3 ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
20:44:33.0965 4516 [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV C:\Windows\system32\drivers\iaStorV.sys
20:44:34.0012 4516 [ 60CC7AE9AEDB4D1E7923BD053B176D97 ] ibtfltcoex C:\Windows\system32\DRIVERS\iBtFltCoex.sys
20:44:34.0105 4516 [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
20:44:34.0230 4516 [ A1CF07D24EDCDC6870535471654D957C ] igfx C:\Windows\system32\DRIVERS\igdkmd64.sys
20:44:34.0433 4516 [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp C:\Windows\system32\drivers\iirsp.sys
20:44:34.0495 4516 [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT C:\Windows\System32\ikeext.dll
20:44:34.0589 4516 [ 314285071F7117263BD246E35C17FD82 ] intaud_WaveExtensible C:\Windows\system32\drivers\intelaud.sys
20:44:34.0729 4516 [ 059DDDEDBE5701DC3B779D32798108AC ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
20:44:34.0823 4516 [ 6C9FFFECA9FED31347D211C5D1FFBD2D ] IntcDAud C:\Windows\system32\DRIVERS\IntcDAud.sys
20:44:34.0948 4516 [ 832CE330DD987227B7DEA8C03F22AEFA ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\iCLS Client\HeciServer.exe
20:44:35.0775 4516 [ F00F20E70C6EC3AA366910083A0518AA ] intelide C:\Windows\system32\drivers\intelide.sys
20:44:35.0821 4516 [ ADA036632C664CAA754079041CF1F8C1 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
20:44:35.0884 4516 [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum C:\Windows\system32\ipbusenum.dll
20:44:35.0962 4516 [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
20:44:36.0040 4516 [ 08C2957BB30058E663720C5606885653 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
20:44:36.0118 4516 [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV C:\Windows\system32\drivers\IPMIDrv.sys
20:44:36.0149 4516 [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT C:\Windows\system32\drivers\ipnat.sys
20:44:36.0258 4516 [ B474C756C13960793C7583B766F904C4 ] iPod Service C:\Program Files\iPod\bin\iPodService.exe
20:44:36.0305 4516 [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM C:\Windows\system32\drivers\irenum.sys
20:44:36.0336 4516 [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp C:\Windows\system32\drivers\isapnp.sys
20:44:36.0383 4516 [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt C:\Windows\system32\drivers\msiscsi.sys
20:44:36.0445 4516 [ C8A3C909F0EFF13CAE0C17503B1F5DB2 ] iusb3hcs C:\Windows\system32\drivers\iusb3hcs.sys
20:44:36.0508 4516 [ BB47E889BA2ADB7D1A438F9824F5899B ] iusb3hub C:\Windows\system32\DRIVERS\iusb3hub.sys
20:44:36.0555 4516 [ 7971B368F36042A0EC31FEA15945187B ] iusb3xhc C:\Windows\system32\DRIVERS\iusb3xhc.sys
20:44:36.0633 4516 [ 4487AD9C070D3973FE28AB4406555FC6 ] iwdbus C:\Windows\system32\drivers\iwdbus.sys
20:44:36.0726 4516 [ 13E838EA8652F8451F29301D3B56B17B ] jhi_service C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
20:44:36.0757 4516 [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass C:\Windows\system32\drivers\kbdclass.sys
20:44:36.0820 4516 [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid C:\Windows\system32\drivers\kbdhid.sys
20:44:36.0867 4516 [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso C:\Windows\system32\lsass.exe
20:44:36.0945 4516 [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
20:44:36.0976 4516 [ 7EFB9333E4ECCE6AE4AE9D777D9E553E ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
20:44:37.0007 4516 [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk C:\Windows\system32\drivers\ksthunk.sys
20:44:37.0085 4516 [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm C:\Windows\system32\msdtckrm.dll
20:44:37.0194 4516 [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer C:\Windows\system32\srvsvc.dll
20:44:37.0303 4516 [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
20:44:37.0413 4516 [ 1538831CF8AD2979A04C423779465827 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
20:44:37.0491 4516 [ C1185803384AB3FEED115F79F109427F ] lltdsvc C:\Windows\System32\lltdsvc.dll
20:44:37.0553 4516 [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts C:\Windows\System32\lmhsvc.dll
20:44:37.0615 4516 [ BD9457699AC9C1A0FE43398043617279 ] LMS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
20:44:37.0693 4516 [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC C:\Windows\system32\drivers\lsi_fc.sys
20:44:37.0756 4516 [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS C:\Windows\system32\drivers\lsi_sas.sys
20:44:37.0803 4516 [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2 C:\Windows\system32\drivers\lsi_sas2.sys
20:44:37.0834 4516 [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI C:\Windows\system32\drivers\lsi_scsi.sys
20:44:37.0881 4516 [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv C:\Windows\system32\drivers\luafv.sys
20:44:37.0959 4516 [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
20:44:38.0005 4516 [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas C:\Windows\system32\drivers\megasas.sys
20:44:38.0068 4516 [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR C:\Windows\system32\drivers\MegaSR.sys
20:44:38.0115 4516 [ 772A1DEEDFDBC244183B5C805D1B7D85 ] MEIx64 C:\Windows\system32\DRIVERS\HECIx64.sys
20:44:38.0239 4516 [ E40E80D0304A73E8D269F7141D77250B ] MMCSS C:\Windows\system32\mmcss.dll
20:44:38.0317 4516 [ 800BA92F7010378B09F9ED9270F07137 ] Modem C:\Windows\system32\drivers\modem.sys
20:44:38.0395 4516 [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor C:\Windows\system32\DRIVERS\monitor.sys
20:44:38.0458 4516 [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass C:\Windows\system32\drivers\mouclass.sys
20:44:38.0520 4516 [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid C:\Windows\system32\drivers\mouhid.sys
20:44:38.0567 4516 [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
20:44:38.0645 4516 [ 05BF204EC0E82CC4A054DB189C8A3D84 ] MpFilter C:\Windows\system32\DRIVERS\MpFilter.sys
20:44:38.0692 4516 [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio C:\Windows\system32\drivers\mpio.sys
20:44:38.0739 4516 [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
20:44:38.0832 4516 [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc C:\Windows\system32\mpssvc.dll
20:44:38.0926 4516 [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
20:44:39.0004 4516 [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
20:44:39.0097 4516 [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
20:44:39.0144 4516 [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
20:44:39.0191 4516 [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci C:\Windows\system32\drivers\msahci.sys
20:44:39.0222 4516 [ DB801A638D011B9633829EB6F663C900 ] msdsm C:\Windows\system32\drivers\msdsm.sys
20:44:39.0253 4516 [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC C:\Windows\System32\msdtc.exe
20:44:39.0300 4516 [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs C:\Windows\system32\drivers\Msfs.sys
20:44:39.0363 4516 [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
20:44:39.0425 4516 [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv C:\Windows\system32\drivers\msisadrv.sys
20:44:39.0472 4516 [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
20:44:39.0550 4516 [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
20:44:39.0690 4516 [ CC8E4F72F21340A4D3A3D4DB50313EF5 ] MsMpSvc C:\Program Files\Microsoft Security Client\MsMpEng.exe
20:44:39.0690 4516 [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
20:44:39.0753 4516 [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
20:44:39.0831 4516 [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
20:44:39.0877 4516 [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios C:\Windows\system32\drivers\mssmbios.sys
20:44:39.0924 4516 [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
20:44:39.0971 4516 [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig C:\Windows\system32\drivers\MTConfig.sys
20:44:40.0018 4516 [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup C:\Windows\system32\Drivers\mup.sys
20:44:40.0049 4516 [ 4D02A9A4AAE43280D8631F232AAD79BC ] MyWiFiDHCPDNS C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
20:44:40.0111 4516 [ 582AC6D9873E31DFA28A4547270862DD ] napagent C:\Windows\system32\qagentRT.dll
20:44:40.0221 4516 [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
20:44:40.0299 4516 [ 760E38053BF56E501D562B70AD796B88 ] NDIS C:\Windows\system32\drivers\ndis.sys
20:44:40.0330 4516 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
20:44:40.0408 4516 [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
20:44:40.0439 4516 [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
20:44:40.0501 4516 [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
20:44:40.0579 4516 [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
20:44:40.0611 4516 [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
20:44:40.0673 4516 [ 09594D1089C523423B32A4229263F068 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
20:44:40.0720 4516 [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon C:\Windows\system32\lsass.exe
20:44:40.0767 4516 [ 847D3AE376C0817161A14A82C8922A9E ] Netman C:\Windows\System32\netman.dll
20:44:40.0891 4516 [ 5243CFC2E7161C91C2B355240035B9E4 ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
20:44:40.0907 4516 [ 5243CFC2E7161C91C2B355240035B9E4 ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
20:44:40.0954 4516 [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm C:\Windows\System32\netprofm.dll
20:44:41.0016 4516 [ 5243CFC2E7161C91C2B355240035B9E4 ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
20:44:41.0032 4516 [ 5243CFC2E7161C91C2B355240035B9E4 ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
20:44:41.0781 4516 [ 262225F08B891FD7F16B3B93A3177C1F ] NETwNs64 C:\Windows\system32\DRIVERS\Netwsw00.sys
20:44:42.0061 4516 [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960 C:\Windows\system32\drivers\nfrd960.sys
20:44:42.0155 4516 [ 5FF89F20317309D28AC1EDEB0CD1BA72 ] NisDrv C:\Windows\system32\DRIVERS\NisDrvWFP.sys
20:44:42.0202 4516 [ 79E80B10FE8F6662E0C9162A68C43444 ] NisSrv C:\Program Files\Microsoft Security Client\NisSrv.exe
20:44:42.0264 4516 [ 8AD77806D336673F270DB31645267293 ] NlaSvc C:\Windows\System32\nlasvc.dll
20:44:42.0342 4516 [ CD569FA91EC6F59D045C19D0D3850F44 ] nmservice C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
20:44:42.0389 4516 [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs C:\Windows\system32\drivers\Npfs.sys
-
deel 4
20:44:42.0451 4516 [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi C:\Windows\system32\nsisvc.dll
20:44:42.0498 4516 [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
20:44:42.0576 4516 [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
20:44:42.0639 4516 [ 9899284589F75FA8724FF3D16AED75C1 ] Null C:\Windows\system32\drivers\Null.sys
20:44:43.0918 4516 [ 5104BAC2DA2A5BDD86AC6B0708B00F06 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
20:44:44.0089 4516 [ 918841B2454F4F2BD94479692079490B ] nvpciflt C:\Windows\system32\DRIVERS\nvpciflt.sys
20:44:44.0152 4516 [ 0A92CB65770442ED0DC44834632F66AD ] nvraid C:\Windows\system32\drivers\nvraid.sys
20:44:44.0230 4516 [ DAB0E87525C10052BF65F06152F37E4A ] nvstor C:\Windows\system32\drivers\nvstor.sys
20:44:44.0323 4516 [ DDFAFCE89A5C93D04712B86F94E9FCBA ] nvsvc C:\Windows\system32\nvvsvc.exe
20:44:44.0495 4516 [ 84E035225474E48CD3A6A3CE52332095 ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
20:44:44.0557 4516 [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp C:\Windows\system32\drivers\nv_agp.sys
20:44:44.0635 4516 [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394 C:\Windows\system32\drivers\ohci1394.sys
20:44:44.0745 4516 [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
20:44:45.0088 4516 [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
20:44:45.0259 4516 [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
20:44:45.0322 4516 [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc C:\Windows\system32\p2psvc.dll
20:44:45.0353 4516 [ 0086431C29C35BE1DBC43F52CC273887 ] Parport C:\Windows\system32\drivers\parport.sys
20:44:45.0431 4516 [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr C:\Windows\system32\drivers\partmgr.sys
20:44:45.0447 4516 [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc C:\Windows\System32\pcasvc.dll
20:44:45.0509 4516 [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci C:\Windows\system32\drivers\pci.sys
20:44:45.0556 4516 [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide C:\Windows\system32\drivers\pciide.sys
20:44:45.0587 4516 [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia C:\Windows\system32\drivers\pcmcia.sys
20:44:45.0649 4516 [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw C:\Windows\system32\drivers\pcw.sys
20:44:45.0696 4516 [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH C:\Windows\system32\drivers\peauth.sys
20:44:45.0774 4516 [ EE926C59CBD4DC4DC9FBB85014A2F1A5 ] PEGAGFN C:\Program Files (x86)\PHotkey\PEGAGFN.sys
20:44:46.0227 4516 [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost C:\Windows\SysWow64\perfhost.exe
20:44:46.0461 4516 [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla C:\Windows\system32\pla.dll
20:44:46.0554 4516 [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
20:44:46.0632 4516 [ FB83B6C62DFF5ABE36304351D2BED581 ] pnarp C:\Windows\system32\DRIVERS\pnarp.sys
20:44:46.0648 4516 [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
20:44:46.0741 4516 [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
20:44:46.0819 4516 [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
20:44:46.0897 4516 [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power C:\Windows\system32\umpo.dll
20:44:46.0991 4516 [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
20:44:47.0085 4516 [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor C:\Windows\system32\drivers\processr.sys
20:44:47.0163 4516 [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc C:\Windows\system32\profsvc.dll
20:44:47.0194 4516 [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
20:44:47.0272 4516 [ 0557CF5A2556BD58E26384169D72438D ] Psched C:\Windows\system32\DRIVERS\pacer.sys
20:44:47.0334 4516 [ 1B3434642CE3C26E6F24D3A76D749C2A ] purendis C:\Windows\system32\DRIVERS\purendis.sys
20:44:47.0397 4516 [ 07D57B890DD5693A6AB660CBAE8F91B4 ] PxHlpa64 C:\Windows\system32\Drivers\PxHlpa64.sys
20:44:47.0646 4516 [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300 C:\Windows\system32\drivers\ql2300.sys
20:44:47.0740 4516 [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx C:\Windows\system32\drivers\ql40xx.sys
20:44:47.0787 4516 [ 906191634E99AEA92C4816150BDA3732 ] QWAVE C:\Windows\system32\qwave.dll
20:44:47.0849 4516 [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
20:44:47.0989 4516 [ A55E7D0D873B2C97585B3B5926AC6ADE ] RapiMgr C:\Windows\WindowsMobile\rapimgr.dll
20:44:48.0021 4516 [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
20:44:48.0099 4516 [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
20:44:48.0161 4516 [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto C:\Windows\System32\rasauto.dll
20:44:48.0223 4516 [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
20:44:48.0286 4516 [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan C:\Windows\System32\rasmans.dll
20:44:48.0348 4516 [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
20:44:48.0442 4516 [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
20:44:48.0504 4516 [ 77F665941019A1594D887A74F301FA2F ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
20:44:48.0598 4516 [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus C:\Windows\system32\drivers\rdpbus.sys
20:44:48.0660 4516 [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
20:44:48.0676 4516 [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
20:44:48.0738 4516 [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
20:44:48.0832 4516 [ 313F68E1A3E6345A4F47A36B07062F34 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
20:44:48.0894 4516 [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
20:44:48.0941 4516 [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
20:44:49.0019 4516 [ C480D028012881E0136962A49379688D ] RegSrvc C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
20:44:49.0081 4516 [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess C:\Windows\System32\mprdim.dll
20:44:49.0175 4516 [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry C:\Windows\system32\regsvc.dll
20:44:49.0284 4516 [ 9C3AC71A9934B884FAC567A8807E9C4D ] Revoflt C:\Windows\system32\DRIVERS\revoflt.sys
20:44:49.0331 4516 [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM C:\Windows\system32\DRIVERS\rfcomm.sys
20:44:49.0440 4516 [ 0B169FE016039571ECC6DB70073F8979 ] RichVideo64 C:\Program Files\CyberLink\Shared files\RichVideo64.exe
20:44:49.0612 4516 [ 879BF5333A3DF407019FB16B35F2A352 ] RoxMediaDB13 C:\Program Files (x86)\Common Files\Roxio Shared\13.0\SharedCOM\RoxMediaDB13.exe
20:44:49.0674 4516 [ DDB9FE116DF539AD256AB18C9BCA883B ] RoxWatch12 C:\Program Files (x86)\Common Files\Roxio Shared\13.0\SharedCOM\RoxWatch13.exe
20:44:49.0737 4516 [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
20:44:49.0830 4516 [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator C:\Windows\system32\locator.exe
20:44:49.0861 4516 [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs C:\Windows\system32\rpcss.dll
20:44:49.0924 4516 [ DDC86E4F8E7456261E637E3552E804FF ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
20:44:49.0986 4516 [ 5AAB4808E8CCAE8C2ECDA5B791260616 ] RSUSBSTOR C:\Windows\system32\Drivers\RtsUStor.sys
20:44:50.0064 4516 [ 9140DB0911DE035FED0A9A77A2D156EA ] RTL8167 C:\Windows\system32\DRIVERS\Rt64win7.sys
20:44:50.0111 4516 [ 27DB9153D259D632D15483DEEAB799ED ] Sahdad64 C:\Windows\system32\Drivers\Sahdad64.sys
20:44:50.0142 4516 [ F77849D909B90BCACFCF7295AECF299B ] Saibad64 C:\Windows\system32\Drivers\Saibad64.sys
20:44:50.0173 4516 [ 704D415290A568F68DE20942DAC23F7E ] SaibVdAd64 C:\Windows\system32\Drivers\SaibVdAd64.sys
20:44:50.0205 4516 [ C118A82CD78818C29AB228366EBF81C3 ] SamSs C:\Windows\system32\lsass.exe
20:44:50.0298 4516 [ F444EBA4C58AD1D6D1DA9850C2B5D829 ] SbieDrv C:\Program Files\Sandboxie\SbieDrv.sys
20:44:50.0345 4516 [ 9E92ABAE6F6A63C4307FE7CC4AC95831 ] SbieSvc C:\Program Files\Sandboxie\SbieSvc.exe
20:44:50.0407 4516 [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port C:\Windows\system32\drivers\sbp2port.sys
20:44:50.0470 4516 [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr C:\Windows\System32\SCardSvr.dll
20:44:50.0563 4516 [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
20:44:50.0626 4516 [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule C:\Windows\system32\schedsvc.dll
20:44:50.0719 4516 [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc C:\Windows\System32\certprop.dll
20:44:50.0813 4516 [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC C:\Windows\System32\SDRSVC.dll
20:44:50.0875 4516 [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv C:\Windows\system32\drivers\secdrv.sys
20:44:50.0938 4516 [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon C:\Windows\system32\seclogon.dll
20:44:51.0031 4516 [ C32AB8FA018EF34C0F113BD501436D21 ] SENS C:\Windows\System32\sens.dll
20:44:51.0141 4516 [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc C:\Windows\system32\sensrsvc.dll
20:44:51.0219 4516 [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum C:\Windows\system32\drivers\serenum.sys
20:44:51.0265 4516 [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial C:\Windows\system32\drivers\serial.sys
20:44:51.0328 4516 [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse C:\Windows\system32\drivers\sermouse.sys
20:44:51.0359 4516 [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv C:\Windows\system32\sessenv.dll
20:44:51.0468 4516 [ A554811BCD09279536440C964AE35BBF ] sffdisk C:\Windows\system32\drivers\sffdisk.sys
20:44:51.0531 4516 [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc C:\Windows\system32\drivers\sffp_mmc.sys
20:44:51.0593 4516 [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd C:\Windows\system32\drivers\sffp_sd.sys
20:44:51.0671 4516 [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy C:\Windows\system32\drivers\sfloppy.sys
20:44:51.0733 4516 [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess C:\Windows\System32\ipnathlp.dll
20:44:51.0796 4516 [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
20:44:51.0889 4516 [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2 C:\Windows\system32\drivers\SiSRaid2.sys
20:44:51.0921 4516 [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4 C:\Windows\system32\drivers\sisraid4.sys
20:44:51.0983 4516 [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb C:\Windows\system32\DRIVERS\smb.sys
20:44:52.0045 4516 [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP C:\Windows\System32\snmptrap.exe
20:44:52.0077 4516 [ B9E31E5CACDFE584F34F730A677803F9 ] spldr C:\Windows\system32\drivers\spldr.sys
20:44:52.0108 4516 [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler C:\Windows\System32\spoolsv.exe
20:44:52.0342 4516 [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc C:\Windows\system32\sppsvc.exe
20:44:52.0435 4516 [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify C:\Windows\system32\sppuinotify.dll
20:44:52.0513 4516 [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv C:\Windows\system32\DRIVERS\srv.sys
20:44:52.0591 4516 [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
20:44:52.0669 4516 [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
20:44:52.0732 4516 [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
20:44:52.0794 4516 [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc C:\Windows\system32\sstpsvc.dll
20:44:52.0919 4516 [ F0359F7CE712D69ACEF0886BDB4792ED ] Stereo Service C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
20:44:52.0981 4516 [ F3817967ED533D08327DC73BC4D5542A ] stexstor C:\Windows\system32\drivers\stexstor.sys
20:44:53.0059 4516 [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc C:\Windows\System32\wiaservc.dll
20:44:53.0137 4516 [ 5B8E5218A1649E66859DB52A83673DCD ] SWDUMon C:\Windows\system32\DRIVERS\SWDUMon.sys
20:44:53.0169 4516 [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum C:\Windows\system32\drivers\swenum.sys
20:44:53.0215 4516 [ E08E46FDD841B7184194011CA1955A0B ] swprv C:\Windows\System32\swprv.dll
20:44:53.0293 4516 [ E157A3A7A09BDBB74AFEAB352D5D76F1 ] SynTP C:\Windows\system32\drivers\SynTP.sys
20:44:53.0371 4516 [ 1F1D1BCC1B746DE700E3E21D758262A7 ] SysCow C:\Windows\system32\drivers\syscowad64v.sys
20:44:53.0449 4516 [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain C:\Windows\system32\sysmain.dll
20:44:53.0512 4516 [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
-
deel 5 en laatste
20:44:53.0590 4516 [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv C:\Windows\System32\tapisrv.dll
20:44:53.0699 4516 [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS C:\Windows\System32\tbssvc.dll
20:44:53.0824 4516 [ 37608401DFDB388CAF66917F6B2D6FB0 ] Tcpip C:\Windows\system32\drivers\tcpip.sys
20:44:53.0902 4516 [ 37608401DFDB388CAF66917F6B2D6FB0 ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
20:44:53.0949 4516 [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
20:44:54.0027 4516 [ 3371D21011695B16333A3934340C4E7C ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
20:44:54.0120 4516 [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
20:44:54.0151 4516 [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
20:44:54.0229 4516 [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD C:\Windows\system32\drivers\termdd.sys
20:44:54.0261 4516 [ 2E648163254233755035B46DD7B89123 ] TermService C:\Windows\System32\termsrv.dll
20:44:54.0323 4516 [ F0344071948D1A1FA732231785A0664C ] Themes C:\Windows\system32\themeservice.dll
20:44:54.0370 4516 [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER C:\Windows\system32\mmcss.dll
20:44:54.0432 4516 [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks C:\Windows\System32\trkwks.dll
20:44:54.0573 4516 [ 370A6907DDF79532A39319492B1FA38A ] truecrypt C:\Windows\system32\drivers\truecrypt.sys
20:44:54.0635 4516 [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
20:44:54.0666 4516 [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
20:44:54.0775 4516 [ 17C6B51CBCCDED95B3CC14E22791F85E ] TsUsbFlt C:\Windows\system32\drivers\tsusbflt.sys
20:44:54.0822 4516 [ AD64450A4ABE076F5CB34CC08EEACB07 ] TsUsbGD C:\Windows\system32\drivers\TsUsbGD.sys
20:44:54.0947 4516 [ 3DBE7B3087EC53EE4AAFA83F2E80A415 ] TuneUp.UtilitiesSvc C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe
20:44:55.0025 4516 [ DCC94C51D27C7EC0DADECA8F64C94FCF ] TuneUpUtilitiesDrv C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys
20:44:55.0072 4516 [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
20:44:55.0150 4516 [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35 C:\Windows\system32\drivers\uagp35.sys
20:44:55.0197 4516 [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs C:\Windows\system32\DRIVERS\udfs.sys
20:44:55.0290 4516 [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect C:\Windows\system32\UI0Detect.exe
20:44:55.0337 4516 [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx C:\Windows\system32\drivers\uliagpkx.sys
20:44:55.0415 4516 [ DC54A574663A895C8763AF0FA1FF7561 ] umbus C:\Windows\system32\DRIVERS\umbus.sys
20:44:55.0446 4516 [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass C:\Windows\system32\drivers\umpass.sys
20:44:55.0587 4516 [ F76057596EF65049869098677AB72C30 ] UNS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
20:44:55.0649 4516 [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost C:\Windows\System32\upnphost.dll
20:44:55.0727 4516 [ 43228F8EDD1B0BCDD3145AD246E63D39 ] USBAAPL64 C:\Windows\system32\Drivers\usbaapl64.sys
20:44:55.0774 4516 [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
20:44:55.0883 4516 [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir C:\Windows\system32\drivers\usbcir.sys
20:44:55.0930 4516 [ C025055FE7B87701EB042095DF1A2D7B ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
20:44:56.0008 4516 [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
20:44:56.0055 4516 [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci C:\Windows\system32\drivers\usbohci.sys
20:44:56.0101 4516 [ 73188F58FB384E75C4063D29413CEE3D ] usbprint C:\Windows\system32\drivers\usbprint.sys
20:44:56.0179 4516 [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
20:44:56.0257 4516 [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci C:\Windows\system32\drivers\usbuhci.sys
20:44:56.0320 4516 [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo C:\Windows\system32\Drivers\usbvideo.sys
20:44:56.0413 4516 [ 70D05EE263568A742D14E1876DF80532 ] usb_rndisx C:\Windows\system32\DRIVERS\usb8023x.sys
20:44:56.0476 4516 [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms C:\Windows\System32\uxsms.dll
20:44:56.0585 4516 [ 4ED86A42DFA3F2EB92D8DE0E22FBAF8D ] UxTuneUp C:\Windows\System32\uxtuneup.dll
20:44:56.0616 4516 [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc C:\Windows\system32\lsass.exe
20:44:56.0663 4516 [ FD911873C0BB6945FA38C16E9A2B58F9 ] VClone C:\Windows\system32\DRIVERS\VClone.sys
20:44:56.0725 4516 [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot C:\Windows\system32\drivers\vdrvroot.sys
20:44:56.0772 4516 [ 8D6B481601D01A456E75C3210F1830BE ] vds C:\Windows\System32\vds.exe
20:44:56.0866 4516 [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
20:44:56.0913 4516 [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave C:\Windows\System32\drivers\vga.sys
20:44:56.0991 4516 [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp C:\Windows\system32\drivers\vhdmp.sys
20:44:57.0069 4516 [ E5689D93FFE4E5D66C0178761240DD54 ] viaide C:\Windows\system32\drivers\viaide.sys
20:44:57.0115 4516 [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr C:\Windows\system32\drivers\volmgr.sys
20:44:57.0147 4516 [ A255814907C89BE58B79EF2F189B843B ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
20:44:57.0193 4516 [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap C:\Windows\system32\drivers\volsnap.sys
20:44:57.0256 4516 [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid C:\Windows\system32\drivers\vsmraid.sys
20:44:57.0318 4516 [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS C:\Windows\system32\vssvc.exe
20:44:57.0412 4516 [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus C:\Windows\system32\DRIVERS\vwifibus.sys
20:44:57.0474 4516 [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt C:\Windows\system32\DRIVERS\vwififlt.sys
20:44:57.0505 4516 [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp C:\Windows\system32\DRIVERS\vwifimp.sys
20:44:57.0552 4516 [ 1C9D80CC3849B3788048078C26486E1A ] W32Time C:\Windows\system32\w32time.dll
20:44:57.0615 4516 [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen C:\Windows\system32\drivers\wacompen.sys
20:44:57.0661 4516 [ 356AFD78A6ED4457169241AC3965230C ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
20:44:57.0708 4516 [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
20:44:57.0849 4516 [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc C:\Windows\system32\Wat\WatAdminSvc.exe
20:44:57.0911 4516 [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine C:\Windows\system32\wbengine.exe
20:44:57.0989 4516 [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
20:44:58.0114 4516 [ 8BDA6DB43AA54E8BB5E0794541DDC209 ] WcesComm C:\Windows\WindowsMobile\wcescomm.dll
20:44:58.0161 4516 [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc C:\Windows\System32\wcncsvc.dll
20:44:58.0192 4516 [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
20:44:58.0223 4516 [ 72889E16FF12BA0F235467D6091B17DC ] Wd C:\Windows\system32\drivers\wd.sys
20:44:58.0285 4516 [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
20:44:58.0332 4516 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost C:\Windows\system32\wdi.dll
20:44:58.0348 4516 [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost C:\Windows\system32\wdi.dll
20:44:58.0410 4516 [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient C:\Windows\System32\webclnt.dll
20:44:58.0441 4516 [ C749025A679C5103E575E3B48E092C43 ] Wecsvc C:\Windows\system32\wecsvc.dll
20:44:58.0504 4516 [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport C:\Windows\System32\wercplsupport.dll
20:44:58.0566 4516 [ 6D137963730144698CBD10F202E9F251 ] WerSvc C:\Windows\System32\WerSvc.dll
20:44:58.0629 4516 [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
20:44:58.0675 4516 [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount C:\Windows\system32\drivers\wimmount.sys
20:44:58.0769 4516 [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
20:44:58.0878 4516 [ BCB1310604AA415C4508708975B3931E ] WinRM C:\Windows\system32\WsmSvc.dll
20:44:58.0972 4516 [ FE88B288356E7B47B74B13372ADD906D ] WinUsb C:\Windows\system32\DRIVERS\WinUSB.sys
20:44:59.0034 4516 [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc C:\Windows\System32\wlansvc.dll
20:44:59.0190 4516 [ 357CABBF155AFD1D3926E62539D2A3A7 ] wlidsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
20:44:59.0284 4516 [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi C:\Windows\system32\drivers\wmiacpi.sys
20:44:59.0362 4516 [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
20:44:59.0455 4516 [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc C:\Windows\System32\wpcsvc.dll
20:44:59.0487 4516 [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
20:44:59.0518 4516 [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
20:44:59.0565 4516 [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc C:\Windows\System32\wscsvc.dll
20:44:59.0658 4516 [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv C:\Windows\system32\wuaueng.dll
20:44:59.0752 4516 [ 30647205C910A613A6A917ACACFC9DCA ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
20:44:59.0752 4516 Suspicious file (Forged): C:\Windows\system32\drivers\WudfPf.sys. Real md5: 30647205C910A613A6A917ACACFC9DCA, Fake md5: B0C23327C24BAC774E345A647023FADB
20:44:59.0752 4516 WudfPf ( ForgedFile.Multi.Generic ) - warning
20:44:59.0752 4516 WudfPf - detected ForgedFile.Multi.Generic (1)
20:44:59.0783 4516 [ 5C4310939222A59BC152916C12C0584A ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
20:44:59.0783 4516 Suspicious file (Forged): C:\Windows\system32\DRIVERS\WUDFRd.sys. Real md5: 5C4310939222A59BC152916C12C0584A, Fake md5: 66E6E5621E341FF0BB2B2CBFA3CFF68C
20:44:59.0783 4516 WUDFRd ( ForgedFile.Multi.Generic ) - warning
20:44:59.0783 4516 WUDFRd - detected ForgedFile.Multi.Generic (1)
20:44:59.0830 4516 [ B2C0FD652AA3827FFEBD3904BF6DC07D ] wudfsvc C:\Windows\System32\WUDFSvc.dll
20:44:59.0830 4516 Suspicious file (Forged): C:\Windows\System32\WUDFSvc.dll. Real md5: B2C0FD652AA3827FFEBD3904BF6DC07D, Fake md5: 5B2A6663E5B74919CF240FB5D81D531C
20:44:59.0830 4516 wudfsvc ( ForgedFile.Multi.Generic ) - warning
20:44:59.0830 4516 wudfsvc - detected ForgedFile.Multi.Generic (1)
20:44:59.0861 4516 [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc C:\Windows\System32\wwansvc.dll
20:45:00.0189 4516 [ 118C018DF1C53B94F8C06D2CABBBDA52 ] ZeroConfigService C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
20:45:00.0345 4516 ================ Scan global ===============================
20:45:00.0376 4516 [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
20:45:00.0407 4516 [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\Windows\system32\winsrv.dll
20:45:00.0423 4516 [ F46BBAAC1C4980F4D0DD463F190A42D3 ] C:\Windows\system32\winsrv.dll
20:45:00.0469 4516 [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
20:45:00.0501 4516 [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
20:45:00.0501 4516 ================ Scan MBR ==================================
20:45:00.0516 4516 [ C79B30CB8852157F6F908E4698CFE0D0 ] \Device\Harddisk0\DR0
20:45:02.0778 4516 ================ Scan VBR ==================================
20:45:02.0809 4516 [ E4A9AF85FF607D9BBA8857BB4D279131 ] \Device\Harddisk0\DR0\Partition1
20:45:02.0841 4516 [ 4FAC4B697B52948D2A496F9A649ECF8F ] \Device\Harddisk0\DR0\Partition2
20:45:02.0872 4516 [ C93D986C301F81ABF8F2CDCE7781EE75 ] \Device\Harddisk0\DR0\Partition3
20:45:02.0903 4516 ================ Scan UEFI extensions ======================
20:45:02.0903 4516 ================ Scan active images ========================
20:45:02.0903 4516 ============================================================
20:45:02.0903 4516 Scan finished
20:45:02.0903 4516 ============================================================
20:45:03.0449 4660 Deinitialize success
.
==============================================
System Restore Point Check:
.
TDSSKiller Starter Restore Point Created Succesfully
==============================================
Registry Export
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile\GloballyOpenPorts\List]
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
==============================================
EOF
-
Hoi Herman,
Er zijn meerdere bestanden corrupt of beschadigd.
Herstart je computer in Veilige mode met opdrachtprompt.
Nadat je computer opgestart is, typ in de opdrachtprompt sfc /scannow en druk op enter.
Kan SFC nu wel alles herstellen?
Zonee, doe het volgende:
Typ in de opdrachtprompt sfc /scanfile=C:\Windows\system32\drivers\WudfPf.sys en druk op enter.
Typ in de opdrachtprompt sfc /scanfile=C:\Windows\system32\DRIVERS\WUDFRd.sys en druk op enter.
Typ in de opdrachtprompt sfc /scanfile=C:\Windows\System32\WUDFSvc.dll en druk op enter.
Geef de resultaten van bovenstaande acties.
Peter
-
Hoi Peter,
scannow zegt:" kan beschadigde bestanden niet herstellen"
Bij de volgende drie krijg ik:" kan aangevraagde bewerking niet uitvoeren".
Misschien syntax probleem?
Herman
-
Hoi Herman,
Bij de volgende drie krijg ik:" kan aangevraagde bewerking niet uitvoeren".
Misschien syntax probleem?
Zorg ervoor dat je de opdrachtprompt als administrator uitvoert. (via rechtsklikken en "Als administrator uitvoeren")
Hier een screenshot wat ik te zien krijg bij de eerste opdracht. Controleer daarmee de door jou ingetypte tekst.
(http://www.nlcomputerforum.nl/index.php?action=dlattach;topic=3447.0;attach=2901)
Als dit geen verbetering geeft weet ik zo snel geen oplossing meer, behalve een herstel installatie of een volledige her-installatie van Windows.
Misschien dat een meelezer nog tips heeft.
Peter
-
Krijg nog steeds ""kan bewerking niet uitvoeren"".
Kan je mij vertellen hoe ik mijn mails kan opslaan? En heb je nog tips voor ik een herstel ga doen?
Foto's en documenten staan op externe harde schijf.
Heel hartelijk dank voor je geduld en expertise. :okee:
Herman
-
Hoi Herman,
Krijg nog steeds ""kan bewerking niet uitvoeren"".
Post daar eens een screenshot van.
Kan je mij vertellen hoe ik mijn mails kan opslaan?
Welk email programma gebruik je?
En heb je nog tips voor ik een herstel ga doen?
Meer informatie kan je HIER (http://windows.microsoft.com/nl-NL/windows7/Installing-and-reinstalling-Windows-7) vinden.
Peter
-
Peter,
Hoe maak ik een screenshot in de safe mode. Weet trouwens ook niet hoe dat normaal moet!
-
Hoi Herman,
Screenshot maken: zie deze (http://www.byte.nl/wiki/Screenshot_Maken) of deze (http://www.leerwiki.nl/Screenshot_maken_met_Windows) handleiding.
Het maakt geen verschil of je dit in Veilige mode of normale mode doet.
Peter
-
Bij deze
Herman
-
O ja,ik gebruik MS Outlook
-
Hoi Herman,
>>O ja,ik gebruik MS Outlook
Outlook 2010 backup maken en overzetten op een andere pc (http://www.youtube.com/watch?v=t9-rRkikyGk#ws)
Peter
-
Hoi Herman,
Als je wilt kunnen we nog even kijken of er goede kopieën van de corrupte bestanden op je systeem staan.
Download daarvoor eerst SystemLook (http://jpshortstuff.247fixes.com/SystemLook.exe) en plaats het op je bureaublad.
Na het downloaden, rechtsklik op SystemLook.exe en klik op "Als administrator uitvoeren".
Kopieer en plak in het witte invoerveld deze code:
:filefind
WudfPf.sys
WUDFRd.sys
WUDFSvc.dll
:file
C:\Windows\system32\drivers\WudfPf.sys
C:\Windows\system32\DRIVERS\WUDFRd.sys
C:\Windows\System32\WUDFSvc.dll
Klik vervolgens op Look.
Wacht geduldig totdat Notepad verschijnt met de scanlog.
Kopieer en plak de scanlog in een nieuw bericht.
Peter
-
Zo je weet van geen ophouden! :applaus:
SystemLook 30.07.11 by jpshortstuff
Log created at 11:43 on 09/12/2012 by Herman
Administrator - Elevation successful
WARNING: SystemLook running under WOW64. Use SystemLook_x64 for accurate results.
========== filefind ==========
Searching for "WudfPf.sys"
C:\Windows\winsxs\amd64_microsoft-windows-d..frameworks-usermode_31bf3856ad364e35_6.1.7601.17514_none_fb3795fb0be32033\WUDFPf.sys --a---- 112128 bytes [03:23 21/11/2010] [03:23 21/11/2010] D3381DC54C34D79B22CEE0D65BA91B7C
C:\Windows\winsxs\amd64_microsoft-windows-d..frameworks-usermode_31bf3856ad364e35_6.1.7601.17803_none_fb416b4f0bdbe260\WUDFPf.sys --a---- 87040 bytes [20:49 14/11/2012] [02:26 26/07/2012] B0C23327C24BAC774E345A647023FADB
C:\Windows\winsxs\amd64_microsoft-windows-d..frameworks-usermode_31bf3856ad364e35_6.1.7601.22004_none_fbcbe08624f8cec3\WUDFPf.sys --a---- 87040 bytes [20:49 14/11/2012] [02:26 26/07/2012] B0C23327C24BAC774E345A647023FADB
Searching for "WUDFRd.sys"
C:\Windows\winsxs\amd64_microsoft-windows-d..frameworks-usermode_31bf3856ad364e35_6.1.7601.17514_none_fb3795fb0be32033\WUDFRd.sys --a---- 172544 bytes [03:23 21/11/2010] [03:23 21/11/2010] CF8D590BE3373029D57AF80914190682
C:\Windows\winsxs\amd64_microsoft-windows-d..frameworks-usermode_31bf3856ad364e35_6.1.7601.17803_none_fb416b4f0bdbe260\WUDFRd.sys --a---- 198656 bytes [20:49 14/11/2012] [02:26 26/07/2012] 66E6E5621E341FF0BB2B2CBFA3CFF68C
C:\Windows\winsxs\amd64_microsoft-windows-d..frameworks-usermode_31bf3856ad364e35_6.1.7601.22004_none_fbcbe08624f8cec3\WUDFRd.sys --a---- 198656 bytes [20:49 14/11/2012] [02:26 26/07/2012] 66E6E5621E341FF0BB2B2CBFA3CFF68C
Searching for "WUDFSvc.dll"
C:\Windows\winsxs\amd64_microsoft-windows-d..frameworks-usermode_31bf3856ad364e35_6.1.7601.17514_none_fb3795fb0be32033\WUDFSvc.dll --a---- 78848 bytes [03:23 21/11/2010] [03:23 21/11/2010] 7A95C95B6C4CF292D689106BCAE49543
C:\Windows\winsxs\amd64_microsoft-windows-d..frameworks-usermode_31bf3856ad364e35_6.1.7601.17803_none_fb416b4f0bdbe260\WUDFSvc.dll --a---- 84992 bytes [20:49 14/11/2012] [03:08 26/07/2012] 5B2A6663E5B74919CF240FB5D81D531C
C:\Windows\winsxs\amd64_microsoft-windows-d..frameworks-usermode_31bf3856ad364e35_6.1.7601.22004_none_fbcbe08624f8cec3\WUDFSvc.dll --a---- 84992 bytes [20:49 14/11/2012] [03:08 26/07/2012] 5B2A6663E5B74919CF240FB5D81D531C
========== file ==========
C:\Windows\system32\drivers\WudfPf.sys - Unable to find/read file.
C:\Windows\system32\DRIVERS\WUDFRd.sys - Unable to find/read file.
C:\Windows\System32\WUDFSvc.dll - Unable to find/read file.
-= EOF =-
-
Hoi Herman,
We moeten een andere scanner gebruiken, jij hebt een 64bits systeem.
Download SystemLook (http://jpshortstuff.247fixes.com/SystemLook_x64.exe) en plaats het op je bureaublad.
Na het downloaden, rechtsklik op SystemLook_x64.exe en klik op "Als administrator uitvoeren".
Kopieer en plak in het witte invoerveld deze code:
:filefind
WudfPf.sys
WUDFRd.sys
WUDFSvc.dll
:file
C:\Windows\system32\drivers\WudfPf.sys
C:\Windows\system32\DRIVERS\WUDFRd.sys
C:\Windows\System32\WUDFSvc.dll
Klik vervolgens op Look.
Wacht geduldig totdat Notepad verschijnt met de scanlog.
Kopieer en plak de scanlog in een nieuw bericht.
Peter
-
OK.
SystemLook 30.07.11 by jpshortstuff
Log created at 13:47 on 09/12/2012 by Herman
Administrator - Elevation successful
========== filefind ==========
Searching for "WudfPf.sys"
C:\Windows\System32\drivers\WUDFPf.sys --a---- 87040 bytes [20:49 14/11/2012] [02:26 26/07/2012] B0C23327C24BAC774E345A647023FADB
C:\Windows\winsxs\amd64_microsoft-windows-d..frameworks-usermode_31bf3856ad364e35_6.1.7601.17514_none_fb3795fb0be32033\WUDFPf.sys --a---- 112128 bytes [03:23 21/11/2010] [03:23 21/11/2010] D3381DC54C34D79B22CEE0D65BA91B7C
C:\Windows\winsxs\amd64_microsoft-windows-d..frameworks-usermode_31bf3856ad364e35_6.1.7601.17803_none_fb416b4f0bdbe260\WUDFPf.sys --a---- 87040 bytes [20:49 14/11/2012] [02:26 26/07/2012] B0C23327C24BAC774E345A647023FADB
C:\Windows\winsxs\amd64_microsoft-windows-d..frameworks-usermode_31bf3856ad364e35_6.1.7601.22004_none_fbcbe08624f8cec3\WUDFPf.sys --a---- 87040 bytes [20:49 14/11/2012] [02:26 26/07/2012] B0C23327C24BAC774E345A647023FADB
Searching for "WUDFRd.sys"
C:\Windows\System32\drivers\WUDFRd.sys --a---- 198656 bytes [20:49 14/11/2012] [02:26 26/07/2012] 66E6E5621E341FF0BB2B2CBFA3CFF68C
C:\Windows\winsxs\amd64_microsoft-windows-d..frameworks-usermode_31bf3856ad364e35_6.1.7601.17514_none_fb3795fb0be32033\WUDFRd.sys --a---- 172544 bytes [03:23 21/11/2010] [03:23 21/11/2010] CF8D590BE3373029D57AF80914190682
C:\Windows\winsxs\amd64_microsoft-windows-d..frameworks-usermode_31bf3856ad364e35_6.1.7601.17803_none_fb416b4f0bdbe260\WUDFRd.sys --a---- 198656 bytes [20:49 14/11/2012] [02:26 26/07/2012] 66E6E5621E341FF0BB2B2CBFA3CFF68C
C:\Windows\winsxs\amd64_microsoft-windows-d..frameworks-usermode_31bf3856ad364e35_6.1.7601.22004_none_fbcbe08624f8cec3\WUDFRd.sys --a---- 198656 bytes [20:49 14/11/2012] [02:26 26/07/2012] 66E6E5621E341FF0BB2B2CBFA3CFF68C
Searching for "WUDFSvc.dll"
C:\Windows\System32\WUDFSvc.dll --a---- 84992 bytes [20:49 14/11/2012] [03:08 26/07/2012] 5B2A6663E5B74919CF240FB5D81D531C
C:\Windows\winsxs\amd64_microsoft-windows-d..frameworks-usermode_31bf3856ad364e35_6.1.7601.17514_none_fb3795fb0be32033\WUDFSvc.dll --a---- 78848 bytes [03:23 21/11/2010] [03:23 21/11/2010] 7A95C95B6C4CF292D689106BCAE49543
C:\Windows\winsxs\amd64_microsoft-windows-d..frameworks-usermode_31bf3856ad364e35_6.1.7601.17803_none_fb416b4f0bdbe260\WUDFSvc.dll --a---- 84992 bytes [20:49 14/11/2012] [03:08 26/07/2012] 5B2A6663E5B74919CF240FB5D81D531C
C:\Windows\winsxs\amd64_microsoft-windows-d..frameworks-usermode_31bf3856ad364e35_6.1.7601.22004_none_fbcbe08624f8cec3\WUDFSvc.dll --a---- 84992 bytes [20:49 14/11/2012] [03:08 26/07/2012] 5B2A6663E5B74919CF240FB5D81D531C
========== file ==========
C:\Windows\system32\drivers\WudfPf.sys - File found and opened.
MD5: B0C23327C24BAC774E345A647023FADB
Created at 20:49 on 14/11/2012
Modified at 02:26 on 26/07/2012
Size: 87040 bytes
Attributes: --a----
No version information available.
C:\Windows\system32\DRIVERS\WUDFRd.sys - File found and opened.
MD5: 66E6E5621E341FF0BB2B2CBFA3CFF68C
Created at 20:49 on 14/11/2012
Modified at 02:26 on 26/07/2012
Size: 198656 bytes
Attributes: --a----
No version information available.
C:\Windows\System32\WUDFSvc.dll - File found and opened.
MD5: 5B2A6663E5B74919CF240FB5D81D531C
Created at 20:49 on 14/11/2012
Modified at 03:08 on 26/07/2012
Size: 84992 bytes
Attributes: --a----
No version information available.
-= EOF =-
-
Hoi Herman,
Ok. Dit verklaart de (valse) melding van TDSSKiller.
Het verklaart niet waarom de drivers dan foutmelding 193 geven. De bestanden lijken in orde.
Tenzij iemand anders nog suggesties heeft lijkt me een herstel-installatie of een verse installatie de snelste oplossing.
Peter
-
Ok, ik wacht het nog even af en anders over een week een herstel operatie.
Nogmaals hartelijk dank voor je inzet,
Herman
-
Hoi Herman,
Nog even terugkomend op het USB probleem.
Je zegt, geen enkel usb apparaat wordt niet meer herkend door Windows7.
Doe eens het volgende:
Stap 1:
Sluit Windows af en schakel je computer uit.
Haal alle kabels los, inclusief het netsnoer.
Druk een paar keer op de aan/uit-knop om statische lading te verwijderen.
Sluit daarna het netsnoer en alleen de belangrijkste kabels weer aan, zoals netwerk, monitor, muis en toetsenbord.
(Gebruik je een usb muis / toetsenbord of een PS/2 versie (met een rond stekkertje)?
Herstart je computer en controleer de usb-poorten middels een usb-stick.
Note: Controleer bij elke stap alle USB poorten, mogelijk zijn niet alle poorten defect.!
Stap 2:
Geen verbetering:
In een van je logjes staan herstelpunten waarvan de oudste is: RP265: 2-12-2012 14:25:28 - Windows Update.
Klopt dat of zijn er nog oudere. Dit kun je controleren door systeemherstel te starten en te bladeren in de lijst van herstelpunten.
Waren de usb problemen toen ook al aanwezig?
Stap 3:
In een van je logjes staat een vermelding van activesync. Dit is om onbekende reden uitgeschakeld maar activesync zie ik niet terug in de lijst van geinstalleerde software.
Heb je ooit activesync geinstalleerd gehad?
De-installeer alle software mbt tot je mobieltjes en andere usb apparaten.
Herstart je computer en controleer de usb-poorten middels een usb-stick.
Stap 4:
Geen verbetering:
Alle USB-controllers verwijderen en opnieuw installeren
Ga als volgt te werk om alle USB-controllers te verwijderen en opnieuw te installeren:
1. Klik op Start, typ sysdm.cpl in het witte invoerveld en druk op de enter-toets.
2. Open het tabblad Hardware.
3. Klik op de knop Apparaatbeheer.
4. Open de sectie Universal Serial Bus-controllers.
5. Klik met de rechtermuisknop op elk apparaat in deze sectie en klik op Verwijderen om ze een voor een te verwijderen.
6. Start de computer opnieuw op en installeer de USB-controllers opnieuw.
7. Sluit een USB-opslagapparaat aan en controleer de werking.
Meer informatie vindt je HIER (http://support.microsoft.com/kb/310575)
Stap 5:
Geen verbetering:
Installeer Windows 7 opnieuw.
Geeft dit ook geen verbetering dan blijft een hardware defect over.
Stap 6:
Geef in een volgend bericht per stap aan wat je bevindingen zijn.
Peter
-
Dag Peter,
Toevallig heb ik net al alle USB controllers gedeinstalleerd en weer opnieuw geinstalleerd.
Mijn externe HD, USB stick worden herkend, maar dat was al zo.
Het vreemde is dat ik niet in de files van mijn Windows mobile HTC telefoon kan kijken, maar hij synct wel via active sync. Als ik dubbelklik in act. sync zegt ie: kan niet verbinden. Maar hoe heeft ie dan kunnen syncen?
Wat betreft mijn Android Galaxy S2: Als ik deze inplug wil mijn computer een driver installeren, maar dat lukt niet. Als ik echter in mijn telefoon USB verbinding selecteer kan ik wel via "mijn computer" in de files op mijn telefoon kijken. De computer ziet de files, maar niet de telefoon zelf. Ik bedoel dat normaal gesproken je de naam van de telefoon hoort te zien , er daarna op klikt en dan pas de files kan zien
Maar tot een week geleden kon ik mijn HTC en Galaxy gewoon inpluggen en via de computer in de files kijken of editen.
Verder werken denk ik Windows updates wel, behalve de KB2685813. Ik heb n.l. een paar, niet essentiele, updates kunnen installeren. Ben er echter niet zeker van.
Het stroomloos maken van de computer heb ik al eerder geprobeerd.
Groet,
Herman
-
Hoi Herman,
Toevallig heb ik net al alle USB controllers gedeinstalleerd en weer opnieuw geinstalleerd.
Mijn externe HD, USB stick worden herkend, maar dat was al zo.
Ok, als je ook op de usb-stick kunt schrijven/lezen kunnen we een defect in de hardware uitsluiten.
Het vreemde is dat ik niet in de files van mijn Windows mobile HTC telefoon kan kijken, maar hij synct wel via active sync.
Waar staat dat ActiveSync dan geïnstalleerd?
Deze logmelding lijkt me niet goed en mogelijk relevant in dit geval:
==== Disabled Device Manager Items =============
.Class GUID:
Description:
Device ID: ACTIVESYNCWPDENUMERATOR\UMB\2&306B293B&0&ACTIVESYNCWPDDEVICE-9850D194-9106-E351-76E4-A381748112DB-
Manufacturer:
Name: PNP Device ID: ACTIVESYNCWPDENUMERATOR\UMB\2&306B293B&0&ACTIVESYNCWPDDEVICE-9850D194-9106-E351-76E4-A381748112DB-
Service:
De-installeer ook eens MyFreeCodec
Peter
-
Peter,
Ik kan my free codecs niet vinden
-
Hoi Herman,
Vreemd, dat zou in de softwarelijst moeten staan. Dit is vermoedelijk een onderdeel van de Samsung telefoon.
Download RSIT (http://images.malwareremoval.com/random/RSIT.exe) naar je bureaublad.
Start RSIT
(WinVista of Win7: Rechtsklik op RSIT en klik op "Als administrator uitvoeren")
Klik op Continue
Wacht tot het scannen klaar is, dit kan even duren!
(Start geen andere programma's zolang RSIT bezig is)
Notepad wordt geopend met het logbestand log.txt. Dit kan je afsluiten.
In de map C:\RSIT verschijnen nu 2 logbestanden: log.txt en info.txt
Post deze 2 bestanden als bijlage in een nieuw bericht.
Peter
-
Logfile of random's system information tool 1.09 (written by random/random)
Run by Herman at 2012-12-10 22:30:14
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 538 GB (60%) free of 891 GB
Total RAM: 8088 MB (64% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:31:16, on 10-12-2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal
Running processes:
C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\PHotkey\HCSynApi.exe
C:\Program Files (x86)\POP Peeper\POPPeeper.exe
C:\Users\Herman\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\svchost.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Program Files (x86)\Google\Drive\googledrivesync.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Users\Herman\Desktop\RSIT.exe
C:\Program Files (x86)\trend micro\Herman.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.aldi.com (http://www.aldi.com)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 (http://go.microsoft.com/fwlink/?LinkId=54896)
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 (http://go.microsoft.com/fwlink/?LinkId=69157)
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Aanmeldhulp voor Microsoft-account - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
O4 - HKLM\..\Run: [Fastboot] "C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe"
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files (x86)\Common Files\Roxio Shared\13.0\SharedCOM\RoxWatchTray13.exe"
O4 - HKLM\..\Run: [ISUSPM] C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe -scheduler
O4 - HKLM\..\Run: [CPMonitor] "C:\Program Files (x86)\Roxio 2012\5.0\CPMonitor.exe"
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [Dolby Home Theater v4] "C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe" -autostart
O4 - HKCU\..\Run: [5F3C7605EF2C645D99E15BEE42F1C7EBE15F88E0._service_run] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=service
O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
O4 - HKCU\..\Run: [{58650E32-3FEA-5CE4-13EA-5C68517462C3}] C:\Users\Herman\AppData\Roaming\Hatui\incae.exe
O4 - HKCU\..\Run: [POP Peeper] "C:\Program Files (x86)\POP Peeper\POPPeeper.exe" -min
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-331470883-3602895302-3708635514-1000\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-331470883-3602895302-3708635514-1000\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Startup: Dropbox.lnk = C:\Users\Herman\AppData\Roaming\Dropbox\bin\Dropbox.exe
O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000
O9 - Extra button: eBay.nl - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/1346-72745-17534-1/4 (http://rover.ebay.com/rover/1/1346-72745-17534-1/4) (file missing)
O9 - Extra 'Tools' menuitem: eBay.nl - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/1346-72745-17534-1/4 (http://rover.ebay.com/rover/1/1346-72745-17534-1/4) (file missing)
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: eBay.nl - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/1346-72745-17534-1/4 (http://rover.ebay.com/rover/1/1346-72745-17534-1/4) (file missing) (HKCU)
O9 - Extra 'Tools' menuitem: eBay.nl - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/1346-72745-17534-1/4 (http://rover.ebay.com/rover/1/1346-72745-17534-1/4) (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll C:\PROGRA~2\Google\GOOGLE~4\GO36F4~1.DLL
O21 - SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll
O22 - SharedTaskScheduler: Virtual Storage Mount Notification - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll
O23 - Service: Adobe Active File Monitor V11 (AdobeActiveFileMonitor11.0) - Adobe Systems Incorporated - C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files (x86)\PHotkey\ASLDRSrv.exe
O23 - Service: Bluetooth Device Monitor - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth Media Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
O23 - Service: Bluetooth OBEX Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: BOT4Service - Unknown owner - C:\Program Files (x86)\Roxio\BackOnTrack\App\BService.exe
O23 - Service: BOTService - Rovi Corporation - C:\Program Files (x86)\Roxio\BackOnTrack\Instant Restore\BOTService.exe
O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: COMODO Programs Manager Service (CPMService) - Unknown owner - C:\Program Files\COMODO\COMODO Programs Manager\CPMService.exe
O23 - Service: CyberLink PowerDVD 10 MS Monitor Service - CyberLink - C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
O23 - Service: CyberLink PowerDVD 10 MS Service - CyberLink - C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: FastbootService - Lenovo - C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: F-Secure Dll Hoster (fshoster) - F-Secure Corporation - C:\Program Files (x86)\Internetbeveiliging\fshoster32.exe
O23 - Service: GFNEX Service (GFNEXSrv) - Unknown owner - C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
O23 - Service: Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) - Unknown owner - C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe (file missing)
O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: KMService - Unknown owner - C:\Windows\system32\srvany.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Pure Networks Platform Service (nmservice) - Cisco Systems, Inc. - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmsrvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo64.exe
O23 - Service: Remote Procedure Call (RPC) Locator (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Sandboxie Service (SbieSvc) - SANDBOXIE L.T.D - C:\Program Files\Sandboxie\SbieSvc.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
--
End of file - 16901 bytes
-
======Scheduled tasks folder======
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [2012-08-16 4171424]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2012-12-02 449512]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Aanmeldhulp voor Microsoft-account - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL [2010-12-21 561552]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2012-12-02 155384]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"=C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-10-24 290688]
"Fastboot"=C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [2012-07-02 1098032]
"CLMLServer"=C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2010-08-03 107816]
"BCSSync"=C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [2010-03-13 91520]
""= []
"RoxWatchTray"=C:\Program Files (x86)\Common Files\Roxio Shared\13.0\SharedCOM\RoxWatchTray13.exe [2011-07-13 293360]
"ISUSPM"=C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe [2010-05-21 324976]
"CPMonitor"=C:\Program Files (x86)\Roxio 2012\5.0\CPMonitor.exe [2011-07-08 84464]
"VirtualCloneDrive"=C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2011-03-07 89456]
"Dolby Home Theater v4"=C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [2011-02-03 506712]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"5F3C7605EF2C645D99E15BEE42F1C7EBE15F88E0._service_run"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2012-11-28 1242728]
"GoogleDriveSync"=C:\Program Files (x86)\Google\Drive\googledrivesync.exe [2012-11-08 16070136]
"{58650E32-3FEA-5CE4-13EA-5C68517462C3}"=C:\Users\Herman\AppData\Roaming\Hatui\incae.exe [2009-12-02 12536057]
"POP Peeper"=C:\Program Files (x86)\POP Peeper\POPPeeper.exe [2011-11-16 1613824]
C:\Users\Herman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Herman\AppData\Roaming\Dropbox\bin\Dropbox.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" C:\Windows\SysWOW64\nvinit.dll C:\PROGRA~2\Google\GOOGLE~4\GO36F4~1.DLL"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll [2012-04-09 158224]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
Virtual Storage Mount Notification - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWOW64\CbFsMntNtf3.dll [2012-04-09 158224]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL [2012-08-16 4171424]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\32686138.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\32686138.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=0
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\3dphotocreator.exe]
"Debugger="
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AcroRd32.exe]
"Debugger="
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\creator13.exe]
"Debugger="
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\discimageloader13.exe]
"Debugger="
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\musicdisccreator13.exe]
"Debugger="
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mydvd13.exe]
"Debugger="
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\photosuite13.exe]
"Debugger="
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\retrieve13.exe]
"Debugger="
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\roxio burn.exe]
"Debugger="
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\roxiocentralfx.exe]
"Debugger="
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\roxwizardlauncher13.exe]
"Debugger="
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rxlabelcreator13.exe]
"Debugger="
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\soundedit13.exe]
"Debugger="
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\videoconvert13.exe]
"Debugger="
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\videowave13.exe]
"Debugger="
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\SysWOW64\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.l3codecp"=l3codecp.acm
"msacm.siren"=sirenacm.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2012-12-10 22:30:14 ----D---- C:\rsit
2012-12-10 22:30:14 ----D---- C:\Program Files (x86)\trend micro
2012-12-10 21:59:18 ----D---- C:\Windows\SysWOW64\BestPractices
2012-12-10 15:30:34 ----A---- C:\TDSSKiller.2.8.15.0_10.12.2012_15.30.34_log.txt
2012-12-10 15:29:14 ----A---- C:\TDSSKiller.2.7.42.0_10.12.2012_15.29.14_log.txt
2012-12-10 14:54:22 ----A---- C:\TDSSKiller.2.8.15.0_10.12.2012_14.54.22_log.txt
2012-12-10 14:51:54 ----D---- C:\TDSSKiller_Quarantine
2012-12-10 14:49:58 ----A---- C:\TDSSKiller.2.8.15.0_10.12.2012_14.49.58_log.txt
2012-12-10 14:49:38 ----A---- C:\TDSSKiller.2.7.42.0_10.12.2012_14.49.38_log.txt
2012-12-08 17:42:55 ----A---- C:\Users\Herman\AppData\Roaming\cspmau.dll
2012-12-08 17:12:58 ----A---- C:\Windows\SysWOW64\wamregps.dll
2012-12-08 17:12:58 ----A---- C:\Windows\SysWOW64\iisRtl.dll
2012-12-08 17:12:58 ----A---- C:\Windows\SysWOW64\iisreset.exe
2012-12-08 17:12:58 ----A---- C:\Windows\SysWOW64\ahadmin.dll
2012-12-08 17:12:58 ----A---- C:\Windows\SysWOW64\admwprox.dll
2012-12-08 17:12:57 ----A---- C:\Windows\SysWOW64\iisrstap.dll
2012-12-08 16:55:21 ----D---- C:\inetpub
2012-12-07 20:44:01 ----D---- C:\TDSSStarter
2012-12-07 16:37:18 ----D---- C:\Program Files (x86)\Internetbeveiliging
2012-12-06 20:56:24 ----D---- C:\Windows\SoftwareDistribution
2012-12-06 13:12:05 ----D---- C:\Windows\softwaredistribution.bak11
2012-12-04 22:52:15 ----A---- C:\AdwCleaner[S1].txt
2012-12-04 18:36:48 ----D---- C:\Users\Herman\AppData\Roaming\tor
2012-12-04 18:36:48 ----D---- C:\Users\Herman\AppData\Roaming\Roagxy
2012-12-04 18:36:48 ----D---- C:\Users\Herman\AppData\Roaming\Hatui
2012-12-03 20:21:29 ----D---- C:\Users\Herman\AppData\Roaming\Malwarebytes
2012-12-03 20:20:55 ----D---- C:\ProgramData\Malwarebytes
2012-12-03 20:20:54 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2012-12-03 18:39:49 ----A---- C:\Windows\ntbtlog.txt
2012-12-03 11:15:21 ----D---- C:\Program Files (x86)\Microsoft Security Client
2012-12-03 10:33:53 ----D---- C:\Users\Herman\AppData\Roaming\Intel Corporation
2012-12-02 13:18:51 ----A---- C:\Windows\SysWOW64\RtsUStoricon.dll
2012-12-02 12:20:22 ----D---- C:\Program Files (x86)\Common Files\Java
2012-12-02 12:20:13 ----A---- C:\Windows\SysWOW64\javaws.exe
2012-12-02 12:20:07 ----A---- C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2012-12-02 12:20:07 ----A---- C:\Windows\SysWOW64\javaw.exe
2012-12-02 12:20:07 ----A---- C:\Windows\SysWOW64\java.exe
2012-12-01 23:35:58 ----D---- C:\Users\Herman\AppData\Roaming\InstallShield
2012-12-01 21:48:32 ----D---- C:\Driver_Win7
2012-12-01 13:21:41 ----D---- C:\Users\Herman\AppData\Roaming\Samsung
2012-12-01 13:20:30 ----A---- C:\Windows\SysWOW64\Redemption.dll
2012-12-01 13:20:03 ----D---- C:\ProgramData\Samsung
2012-12-01 13:20:03 ----D---- C:\Program Files (x86)\Samsung
2012-12-01 12:52:49 ----D---- C:\Users\Herman\AppData\Roaming\ParetoLogic
2012-12-01 12:52:41 ----D---- C:\ProgramData\ParetoLogic
2012-12-01 11:02:14 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2012-12-01 11:02:14 ----D---- C:\Program Files (x86)\iTunes
2012-11-30 14:26:48 ----D---- C:\Windows\softwaredistribution.bak10
2012-11-30 14:21:16 ----D---- C:\Windows\softwaredistribution.bak9
2012-11-30 14:17:45 ----D---- C:\Program Files (x86)\Common Files\Symantec Shared
2012-11-30 14:16:06 ----D---- C:\ProgramData\Symantec
2012-11-30 14:08:30 ----D---- C:\ProgramData\Norton
2012-11-29 22:20:03 ----D---- C:\Users\Herman\AppData\Roaming\PCCUStubInstaller
2012-11-29 20:59:30 ----A---- C:\Windows\SysWOW64\MRT.exe
2012-11-29 16:13:13 ----A---- C:\Windows\SysWOW64\wksprtPS.dll
2012-11-29 16:13:13 ----A---- C:\Windows\SysWOW64\tsgqec.dll
2012-11-29 16:13:13 ----A---- C:\Windows\SysWOW64\rdpendp_winip.dll
2012-11-29 16:13:13 ----A---- C:\Windows\SysWOW64\MsRdpWebAccess.dll
2012-11-29 16:13:13 ----A---- C:\Windows\SysWOW64\aaclient.dll
2012-11-29 16:13:12 ----A---- C:\Windows\SysWOW64\mstscax.dll
2012-11-29 16:13:12 ----A---- C:\Windows\SysWOW64\mstsc.exe
2012-11-29 16:04:56 ----A---- C:\Windows\SysWOW64\schannel.dll
2012-11-29 16:04:55 ----A---- C:\Windows\SysWOW64\sspicli.dll
2012-11-29 16:04:55 ----A---- C:\Windows\SysWOW64\secur32.dll
2012-11-29 16:04:55 ----A---- C:\Windows\SysWOW64\ncrypt.dll
2012-11-29 14:50:35 ----D---- C:\Windows\softwaredistribution.bak8
2012-11-28 17:03:55 ----D---- C:\Windows\softwaredistribution.bak7
2012-11-27 17:22:14 ----D---- C:\Windows\softwaredistribution.bak6
2012-11-27 17:17:38 ----D---- C:\Windows\softwaredistribution.bak5
2012-11-26 21:40:20 ----D---- C:\Windows\softwaredistribution.bak4
2012-11-25 18:33:26 ----D---- C:\Windows\softwaredistribution.bak3
2012-11-24 20:20:15 ----D---- C:\ProgramData\Windows Genuine Advantage
2012-11-23 17:23:04 ----D---- C:\Windows\softwaredistribution.bak2
2012-11-23 13:01:23 ----D---- C:\Windows\softwaredistribution.bak1
2012-11-19 12:21:38 ----D---- C:\Windows\CheckSur
2012-11-16 19:33:48 ----A---- C:\Windows\SysWOW64\nlaapi.dll
2012-11-16 19:33:48 ----A---- C:\Windows\SysWOW64\netcorehc.dll
2012-11-16 19:33:48 ----A---- C:\Windows\SysWOW64\ncsi.dll
2012-11-16 19:33:47 ----A---- C:\Windows\SysWOW64\netevent.dll
2012-11-16 18:51:14 ----D---- C:\ProgramData\AVAST Software
2012-11-15 18:14:02 ----D---- C:\ProgramData\Spotnet
2012-11-15 18:14:02 ----D---- C:\Program Files (x86)\Spotnet
2012-11-15 16:29:32 ----D---- C:\Program Files (x86)\SpotLite
2012-11-15 16:05:56 ----A---- C:\Windows\SysWOW64\mshtmled.dll
2012-11-15 16:05:55 ----A---- C:\Windows\SysWOW64\vbscript.dll
2012-11-15 16:05:55 ----A---- C:\Windows\SysWOW64\url.dll
2012-11-15 16:05:55 ----A---- C:\Windows\SysWOW64\ieUnatt.exe
2012-11-15 16:05:55 ----A---- C:\Windows\SysWOW64\ieui.dll
2012-11-15 16:05:54 ----A---- C:\Windows\SysWOW64\wininet.dll
2012-11-15 16:05:54 ----A---- C:\Windows\SysWOW64\urlmon.dll
2012-11-15 16:05:54 ----A---- C:\Windows\SysWOW64\msfeeds.dll
2012-11-15 16:05:53 ----A---- C:\Windows\SysWOW64\jsproxy.dll
2012-11-15 16:05:53 ----A---- C:\Windows\SysWOW64\jscript9.dll
2012-11-15 16:05:53 ----A---- C:\Windows\SysWOW64\jscript.dll
2012-11-15 16:05:53 ----A---- C:\Windows\SysWOW64\iertutil.dll
2012-11-15 16:05:52 ----A---- C:\Windows\SysWOW64\mshtml.dll
2012-11-15 16:05:51 ----A---- C:\Windows\SysWOW64\ieframe.dll
2012-11-14 16:57:51 ----A---- C:\Windows\SysWOW64\dhcpcsvc6.dll
2012-11-14 16:57:51 ----A---- C:\Windows\SysWOW64\dhcpcore6.dll
2012-11-14 16:56:26 ----A---- C:\Windows\SysWOW64\synceng.dll
2012-11-13 17:16:22 ----D---- C:\ProgramData\Spotnet.bak
2012-11-12 22:36:24 ----D---- C:\Users\Herman\AppData\Roaming\Binreader
2012-11-12 22:36:12 ----D---- C:\Program Files (x86)\Binreader
2012-11-12 20:24:47 ----D---- C:\Users\Herman\AppData\Roaming\WebApp
2012-11-12 16:12:14 ----A---- C:\Windows\prodsett_copy.ini
-
======List of files/folders modified in the last 1 month======
2012-12-10 22:30:57 ----D---- C:\Windows\Temp
2012-12-10 22:30:31 ----D---- C:\Windows\Prefetch
2012-12-10 22:30:14 ----RD---- C:\Program Files (x86)
2012-12-10 22:06:18 ----D---- C:\Users\Herman\AppData\Roaming\POP Peeper
2012-12-10 21:59:19 ----D---- C:\Windows\winsxs
2012-12-10 21:59:19 ----D---- C:\Windows\SysWOW64\inetsrv
2012-12-10 21:59:18 ----D---- C:\Windows\SysWOW64
2012-12-10 21:59:18 ----D---- C:\Windows\System32
2012-12-10 21:59:05 ----SHD---- C:\System Volume Information
2012-12-10 21:53:43 ----SHD---- C:\Windows\Installer
2012-12-10 21:53:43 ----SHD---- C:\Config.Msi
2012-12-10 21:53:42 ----D---- C:\Windows\WindowsMobile
2012-12-10 21:52:19 ----D---- C:\Windows\inf
2012-12-10 21:04:27 ----A---- C:\Windows\SysWOW64\log.txt
2012-12-10 21:04:10 ----D---- C:\Users\Herman\AppData\Roaming\Dropbox
2012-12-10 20:59:50 ----D---- C:\ProgramData\NVIDIA
2012-12-10 19:22:53 ----D---- C:\Users\Herman\AppData\Roaming\vlc
2012-12-10 18:06:06 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-12-10 18:05:45 ----D---- C:\Windows
2012-12-10 18:02:58 ----D---- C:\Windows\Microsoft.NET
2012-12-10 15:23:29 ----A---- C:\Windows\SysWOW64\PerfStringBackup.INI
2012-12-10 15:22:10 ----D---- C:\Windows\SysWOW64\en-US
2012-12-10 15:14:08 ----D---- C:\Users\Herman\AppData\Roaming\uTorrent
2012-12-09 16:03:57 ----D---- C:\Users\Herman\AppData\Roaming\dvdcss
2012-12-09 13:00:50 ----D---- C:\Windows\rescache
2012-12-08 20:01:16 ----D---- C:\Users\Herman\AppData\Roaming\Apple Computer
2012-12-08 19:50:47 ----D---- C:\Windows\Logs
2012-12-08 18:04:31 ----RSD---- C:\Windows\assembly
2012-12-08 17:25:39 ----D---- C:\Windows\SysWOW64\migration
2012-12-08 17:01:25 ----D---- C:\ProgramData\Soluto
2012-12-08 16:56:53 ----D---- C:\Program Files (x86)\Internet Explorer
2012-12-08 16:55:21 ----D---- C:\Windows\SysWOW64\nl-NL
2012-12-08 16:46:25 ----HD---- C:\ProgramData
2012-12-08 16:42:54 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2012-12-08 14:53:58 ----SD---- C:\Users\Herman\AppData\Roaming\Microsoft
2012-12-07 20:29:16 ----D---- C:\ProgramData\f-secure
2012-12-07 15:32:20 ----D---- C:\Program Files (x86)\Youtube Downloader HD
2012-12-04 22:46:22 ----D---- C:\Program Files (x86)\uTorrent
2012-12-04 22:46:22 ----D---- C:\Program Files (x86)\Google
2012-12-04 22:45:28 ----RD---- C:\Program Files
2012-12-04 18:59:14 ----A---- C:\Windows\Sandboxie.ini
2012-12-04 17:16:35 ----D---- C:\Windows\Tasks
2012-12-04 17:16:33 ----D---- C:\Program Files (x86)\Common Files
2012-12-04 12:50:26 ----D---- C:\Windows\registration
2012-12-04 12:19:37 ----D---- C:\System Rollback Data
2012-12-03 11:56:45 ----D---- C:\Windows\SysWOW64\drivers
2012-12-03 11:15:21 ----SD---- C:\ProgramData\Microsoft
2012-12-03 10:31:53 ----D---- C:\ProgramData\Intel
2012-12-03 10:28:35 ----D---- C:\Program Files (x86)\Intel
2012-12-02 13:18:49 ----D---- C:\Program Files (x86)\Realtek
2012-12-02 12:20:02 ----A---- C:\Windows\SysWOW64\npDeployJava1.dll
2012-12-02 12:20:02 ----A---- C:\Windows\SysWOW64\deployJava1.dll
2012-12-01 15:43:14 ----D---- C:\Program Files (x86)\Bit Che
2012-12-01 11:02:14 ----D---- C:\Program Files (x86)\Common Files\Apple
2012-12-01 10:57:07 ----D---- C:\Program Files (x86)\QuickTime
2012-11-29 22:23:55 ----D---- C:\Program Files (x86)\Microsoft.NET
2012-11-29 16:16:08 ----D---- C:\Windows\SysWOW64\NV
2012-11-29 16:13:54 ----D---- C:\Windows\SysWOW64\wbem
2012-11-29 16:13:52 ----D---- C:\Windows\PolicyDefinitions
2012-11-29 16:10:00 ----D---- C:\Program Files (x86)\NVIDIA Corporation
2012-11-28 17:05:02 ----D---- C:\Windows\AppPatch
2012-11-26 19:07:50 ----D---- C:\Windows\AppCompat
2012-11-26 17:44:34 ----D---- C:\Users\Herman\AppData\Roaming\GrabIt
2012-11-15 17:47:10 ----D---- C:\ProgramData\Microsoft Help
2012-11-15 15:51:02 ----RSD---- C:\Windows\Fonts
2012-11-14 21:46:54 ----A---- C:\Windows\win.ini
2012-11-12 20:22:41 ----D---- C:\Users\Herman\AppData\Roaming\CyberLink
2012-11-12 15:07:23 ----D---- C:\Windows\Resources
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 cumon;cumon; C:\Windows\system32\drivers\cumon.sys []
R0 Evdd;evdd; C:\Windows\system32\drivers\evdd.sys []
R0 Fastboot;Fastboot; C:\Windows\System32\DRIVERS\Fastboot.sys []
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys []
R0 iusb3hcs;Intel(R) USB 3.0 hostcontrollerswitch-stuurprogramma; C:\Windows\system32\drivers\iusb3hcs.sys []
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys []
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys []
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys []
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys []
R0 Sahdad64;HDD Filter Driver; C:\Windows\System32\Drivers\Sahdad64.sys []
R0 Saibad64;Volume Filter Driver; C:\Windows\System32\Drivers\Saibad64.sys []
R0 SysCow;SysCow; C:\Windows\system32\drivers\syscowad64v.sys []
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys []
R1 SaibVdAd64;Virtual Disk Driver; C:\Windows\System32\Drivers\SaibVdAd64.sys []
R1 truecrypt;truecrypt; C:\Windows\System32\drivers\truecrypt.sys []
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys []
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys []
R2 PEGAGFN;PEGAGFN; \??\C:\Program Files (x86)\PHotkey\PEGAGFN.sys [2009-09-11 14344]
R2 pnarp;Pure Networks Device Discovery Driver; C:\Windows\system32\DRIVERS\pnarp.sys []
R2 purendis;Pure Networks Wireless Driver; C:\Windows\system32\DRIVERS\purendis.sys []
R3 AMPPAL;Intel® Centrino® Wireless Bluetooth® + High Speed Virtual Adapter; C:\Windows\system32\DRIVERS\AMPPAL.sys []
R3 cbfs3;EldoS Callback File System driver v3; C:\Windows\system32\DRIVERS\cbfs3.sys []
R3 clwvd;CyberLink WebCam Virtual Driver; C:\Windows\system32\DRIVERS\clwvd.sys []
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys []
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys []
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys []
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys []
R3 iusb3hub;Intel(R) USB 3.0 hub-stuurprogramma; C:\Windows\system32\DRIVERS\iusb3hub.sys []
R3 iusb3xhc;Intel(R) USB 3.0 uitbreidbare hostcontroller-stuurprogramma; C:\Windows\system32\DRIVERS\iusb3xhc.sys []
R3 iwdbus;IWD Bus Enumerator; C:\Windows\system32\drivers\iwdbus.sys []
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys []
R3 NETwNs64;___ Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\Windows\system32\DRIVERS\Netwsw00.sys []
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys []
R3 SbieDrv;SbieDrv; \??\C:\Program Files\Sandboxie\SbieDrv.sys [2012-08-25 202632]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\drivers\SynTP.sys []
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [2011-10-31 11856]
R3 VClone;VClone; C:\Windows\system32\DRIVERS\VClone.sys []
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys []
S3 AMPPALP;Intel® Centrino® Wireless Bluetooth® + High Speed Protocol; C:\Windows\system32\DRIVERS\amppal.sys []
S3 BthEnum;Bluetooth-stuurprogramma voor aanvraagblok; C:\Windows\system32\drivers\BthEnum.sys []
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys []
S3 BTHPORT;Stuurprogramma voor Bluetooth-poort; C:\Windows\System32\Drivers\BTHport.sys []
S3 BTHUSB;USB-stuurprogramma voor Bluetooth-radio; C:\Windows\System32\Drivers\BTHUSB.sys []
S3 btmaux;Intel Bluetooth Auxiliary Service; C:\Windows\system32\DRIVERS\btmaux.sys []
S3 btmhsf;btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys []
S3 cpuz135;cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys []
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys []
S3 ibtfltcoex;ibtfltcoex; C:\Windows\system32\DRIVERS\iBtFltCoex.sys []
S3 intaud_WaveExtensible;Intel WiDi Audio Device; C:\Windows\system32\drivers\intelaud.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys []
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys []
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys []
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys []
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys []
S3 SWDUMon;SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys []
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys []
S3 usb_rndisx;USB RNDIS-adapter; C:\Windows\system32\DRIVERS\usb8023x.sys []
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeActiveFileMonitor11.0;Adobe Active File Monitor V11; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [2012-09-23 171600]
R2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® + High Speed Service; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [2012-01-09 659968]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2012-08-11 55184]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [2009-12-18 104968]
R2 Bluetooth Device Monitor;Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [2012-02-22 1014096]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [2012-02-22 1104208]
R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) + High Speed Security Service; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [2012-01-18 135952]
R2 CPMService;COMODO Programs Manager Service; C:\Program Files\COMODO\COMODO Programs Manager\CPMService.exe [2011-09-05 116032]
R2 CyberLink PowerDVD 10 MS Monitor Service;CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [2011-04-13 70952]
R2 CyberLink PowerDVD 10 MS Service;CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [2011-04-13 312616]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2012-03-29 626960]
R2 FastbootService;FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [2012-07-02 172336]
R2 fshoster;F-Secure Dll Hoster; C:\Program Files (x86)\Internetbeveiliging\fshoster32.exe [2012-08-27 167632]
R2 GFNEXSrv;GFNEX Service; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [2011-10-13 156672]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2012-05-30 13632]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-02-03 628448]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-08-03 162648]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-08-03 276824]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-09-12 22072]
R2 nmservice;Pure Networks Platform Service; C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmsrvc.exe [2009-07-07 647216]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe []
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-10-08 1258856]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2012-03-29 148752]
R2 RichVideo64;Cyberlink RichVideo64 Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo64.exe [2010-08-19 386344]
R2 SbieSvc;Sandboxie Service; C:\Program Files\Sandboxie\SbieSvc.exe [2012-08-25 123664]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-10-02 382824]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2011-11-02 2072896]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-08-03 362840]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 W3SVC;@%windir%\system32\inetsrv\iisres.dll,-30003; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 Bluetooth Media Service;Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [2012-02-22 1304912]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2012-09-12 368896]
R3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2012-07-09 104912]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2012-07-08 123856]
S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-12 136176]
S2 KMService;KMService; C:\Windows\system32\srvany.exe [2012-10-13 8192]
S3 BOT4Service;BOT4Service; C:\Program Files (x86)\Roxio\BackOnTrack\App\BService.exe [2011-07-15 21488]
S3 BOTService;BOTService; C:\Program Files (x86)\Roxio\BackOnTrack\Instant Restore\BOTService.exe [2011-07-14 211440]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-10-10 277024]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-09-12 1512448]
S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335; C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe []
S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-09-12 136176]
S3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2012-11-29 640912]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2012-09-20 30785672]
S3 MyWiFiDHCPDNS;Wireless PAN DHCP Server; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2012-03-29 273168]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe []
S4 9734BF6A-2DCD-40f0-BAB0-5AAFEEBE1269;Roxio SAIB Service; C:\Program Files (x86)\Roxio\BackOnTrack\App\SaibSVC.exe [2011-02-09 457200]
S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2012-07-08 51648]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]
S4 RoxMediaDB13;RoxMediaDB13; C:\Program Files (x86)\Common Files\Roxio Shared\13.0\SharedCOM\RoxMediaDB13.exe [2011-07-13 1095664]
S4 RoxWatch12;Roxio Hard Drive Watcher 12; C:\Program Files (x86)\Common Files\Roxio Shared\13.0\SharedCOM\RoxWatch13.exe [2011-07-13 340976]
-----------------EOF-----------------
-
Hoi Herman,
Ga naar VirusTotal (https://www.virustotal.com/).
Klik op Choose file en blader naar dit bestand:
C:\Users\Herman\AppData\Roaming\Hatui\incae.exe
Klik vervolgens op Scan it!.
Wacht geduldig totdat het scannen klaar is.
Kopieer en plak de link die nu in de adresbalk staat, met de scan-resultaten, in een nieuw bericht.
Klik op Start
In het witte invoerveld typ MSCONFIG
msconfig.exe verschijnt nu bovenaan de lijst. Rechtsklik erop en kies Als administrator uitvoeren.
Open tabblad Opstarten
Vink uit USB3MON
Klik op Toepassen en vervolgens op OK.
Herstart je computer.
Hoe gaat het nu met de USB apparaten?
Peter
-
Peter,
Bedoel je dit?
https://www.virustotal.com/file/f8a361f510a5b489593713d1669dfdbe5392872665e7ffd21648de05a74b6133/analysis/1355217011/ (https://www.virustotal.com/file/f8a361f510a5b489593713d1669dfdbe5392872665e7ffd21648de05a74b6133/analysis/1355217011/)
Kan je zo de scan resultaten zien? Anders weet ik niet hoe ik het naar je toe moet sturen!
Anti vir zegt: TR/Crypt.XPACK.Gen7
Eset-nod 32: a variant of Win32/Injector.YYR
Kaspersky: HEUR:Trojan.Win32.Generic
De USB3MON wordt niet genoemd
Na het opstarten geen verbetering
Herman
-
Hoi Herman,
Kan je zo de scan resultaten zien? Anders weet ik niet hoe ik het naar je toe moet sturen!
Prima gedaan. Echter de map en bestandsnaam zien er verdacht uit.
Doe het volgende:
Rechtsklik op SystemLook_x64.exe en klik op "Als administrator uitvoeren".
Kopieer en plak in het witte invoerveld deze code:
:filefind
incae.exe
:file
C:\Users\Herman\AppData\Roaming\Hatui\incae.exe
Klik vervolgens op Look.
Wacht geduldig totdat Notepad verschijnt met de scanlog.
Kopieer en plak de scanlog in een nieuw bericht.
De USB3MON wordt niet genoemd
Niet?, de-installeer dan via Configuratiescherm - Programma's en onderdelen:
Intel(R) USB 3.0 eXtensible Host Controller Driver
Herstart je computer.
Hoe gaat het nu met de USB apparaten?
Peter
-
Dag Peter,
Deinstalleren heeft niet geholpen.
SystemLook 30.07.11 by jpshortstuff
Log created at 20:34 on 11/12/2012 by Herman
Administrator - Elevation successful
========== filefind ==========
Searching for "incae.exe"
C:\Users\Herman\AppData\Roaming\Hatui\incae.exe --a---- 12536057 bytes [06:19 02/12/2009] [06:19 02/12/2009] BD4C4115699D1E59C9E16FD7241A9A4D
========== file ==========
C:\Users\Herman\AppData\Roaming\Hatui\incae.exe - File found and opened.
MD5: BD4C4115699D1E59C9E16FD7241A9A4D
Created at 06:19 on 02/12/2009
Modified at 06:19 on 02/12/2009
Size: 12536057 bytes
Attributes: --a----
FileDescription: SoundPolicyMonitor
FileVersion: 3.10.13.2
ProductVersion: 3.10.13.2
OriginalFilename: SoundPolicyMonitor.exe
InternalName: SoundPolicyMonitor
ProductName: SoundPolicyMonitor
CompanyName: The Batteries Group
LegalCopyright: Copyright The Batteries Group
-= EOF =-
groet
-
Hoi Herman,
Deinstalleren heeft niet geholpen.
Ok, ook een dood spoor.
FileDescription: SoundPolicyMonitor
Hmm, ik kan er verder niets over vinden.
Er blijft weinig anders over dan een nieuwe installatie van Windows 7...
Peter
-
Was ik al bang voor. Nogmaals heel erg bedankt voor je hulp.
Hartelijke groet,
Herman