Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

My pc has no internet access

Started by CatBee , May 09 2014 04:08 PM

Please log in to reply

#16
CatBee

Posted 10 May 2014 - 04:23 PM

Member

Topic Starter
Member
65 posts

I just tried with the cable and it still shows unknown network, it did detect that the cable got pluged in but no difference.

and i have Avast installed now

Edited by CatBee, 10 May 2014 - 04:25 PM.

#17
RKinner

Posted 10 May 2014 - 06:15 PM

Malware Expert

Expert
24,701 posts

OK. Let's try minitoolbox. You will have to use your USB to get it back and forth to the sick PC.

Please download , save it to your desktop and run it.

Checkmark the following checkboxes:

Flush DNS
Report IE Proxy Settings
Reset IE Proxy Settings
Report FF Proxy Settings
Reset FF Proxy Settings
List content of Hosts
List IP configuration
List Winsock Entries
List last 10 Event Viewer Errors
List Installed Programs
List Devices
List Users, Partitions and Memory size.
List Minidump Files

Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.

Note: When using "Reset FF Proxy Settings" option Firefox should be closed.

Let's also test for rootkits.

Download aswMBR.exe, save it to your desktop and run it.

Checkmark the following checkboxes:

Flush DNS
Report IE Proxy Settings
Reset IE Proxy Settings
Report FF Proxy Settings
Reset FF Proxy Settings
List content of Hosts
List IP configuration
List Winsock Entries
List last 10 Event Viewer Errors
List Installed Programs
List Devices
List Users, Partitions and Memory size.
List Minidump Files

Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.

Note: When using "Reset FF Proxy Settings" option Firefox should be closed.

Let's also test for rootkits.

Download [url=http://files.avast.com/files/rootkit-scanner/aswmbr.exe]aswMBR.exe to your desktop.
Double click the aswMBR.exe to run it
uncheck trace disk IO calls
Click the "Scan" button to start scan
On completion of the scan (Note if the Fix button is enabled (not the FixMBR button) and tell me) click save log, save it to your desktop and post in your next reply

ComboFix

:!: It must be saved to your desktop, do not run it from your browser:!:

:!: Disable your Antivirus software when downloading or running Combofix. If it has Script Blocking features, please disable these as well. See: http://www.bleepingc...opic114351.html

:!: Turn off your screen saver so you can see what is going on

Download and Save this file -- to your Desktop -- from either of these two sources:
http://download.blee...Bs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe

Rightclick on ComboFix and select Run As Administrator to start the program.

    * :!: Important: Have no other programs running. Your Task Bar should be clear of any program entries including your Browser.


    * A window may open with a series of Disclaimers. Accept the Disclaimers to start the fix.

Do not touch your mouse/keyboard until the scan has completed, as this may cause the process to stall or your computer to lock. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop. Even when ComboFix appears to be doing nothing, look at your Drive light. If it is flashing, Combofix is still at work.
You should get a log when it finishes. If not this may mean you have the new version of Zero Access malware so run Combofix a second time.
If you still don't get a log search for Combofix.txt. It is usually at => C:\Combofix\Combofix.txt. I'll need to see that in your reply.
If you get an error about a registry value when you try to run a program, then just reboot to clear it.

#18
CatBee

Posted 11 May 2014 - 08:24 AM

Member

Topic Starter
Member
65 posts

um, can you fix the links for Minitoolbox and aswMBR.exe? i prefer downloading the right ones instead searching on the internet

#19
RKinner

Posted 11 May 2014 - 09:13 AM

Malware Expert

Expert
24,701 posts

http://www.bleepingcomputer.com/download/minitoolbox

http://files.avast.com/files/rootkit-scanner/aswmbr.exe

#20
CatBee

Posted 11 May 2014 - 10:13 AM

Member

Topic Starter
Member
65 posts

Thank you and at List Devices checkmark next to it there are 3 options: Only Problems, no Driver and All, so which one do i choose?

its default set to Problems only but not sure which one you want

and i dont see the Option... Firefox should be closed. maybe because i don't have firefox?

Edited by CatBee, 11 May 2014 - 10:28 AM.

#21
RKinner

Posted 11 May 2014 - 10:29 AM

Malware Expert

Expert
24,701 posts

Just check what you can and run it.

#22
CatBee

Posted 11 May 2014 - 10:43 AM

Member

Topic Starter
Member
65 posts

Here's the Minitoolbox Reuslt and i'm running now the Aswmbr.exe thing

MiniToolBox by Farbar Version: 23-01-2014

Ran by Susy&Robin (administrator) on 11-05-2014 at 18:31:28

Running from "C:\Users\Susy&Robin\Desktop"

Microsoft Windows 7 Home Premium Service Pack 1 (X64)

Boot Mode: Normal

***************************************************************************

========================= Flush DNS: ===================================

Windows IP-configuratie

De DNS-omzettingscache is leeggemaakt.

========================= IE Proxy Settings: ==============================

Proxy is not enabled.

No Proxy Server is set.

"Reset IE Proxy Settings": IE Proxy Settings were reset.

========================= FF Proxy Settings: ==============================

"Reset FF Proxy Settings": Firefox Proxy settings were reset.

========================= Hosts content: =================================

127.0.0.1 localhost

========================= IP Configuration: ================================

Broadcom 4313 (802.11b/g/n) = Draadloze netwerkverbinding (Connected)

Bluetooth-apparaat (Personal Area Network) = Bluetooth-netwerkverbinding (Media disconnected)

Microsoft Virtual WiFi Miniport Adapter = Draadloze netwerkverbinding 2 (Media disconnected)

# ----------------------------------

# IPv4-configuratie

# ----------------------------------

pushd interface ipv4

reset

set global icmpredirects=enabled

set subinterface interface=?.$ subinterface=ethernet_2 mtu=1477

popd

# Einde van IPv4-configuratie

Windows IP-configuratie

Hostnaam . . . . . . . . . . . . : HPSusyRobin

Primair DNS-achtervoegsel . . . . :

Knooppunttype . . . . . . . . . . : gemengd

IP-routering ingeschakeld . . . . : nee

WINS-proxy ingeschakeld . . . . . : nee

Draadloos LAN-adapter voor Draadloze netwerkverbinding 2:

Mediumstatus. . . . . . . . . . . : medium ontkoppeld

Verbindingsspec. DNS-achtervoegsel:

Beschrijving. . . . . . . . . . . : Microsoft Virtual WiFi Miniport Adapter #2

Fysiek adres. . . . . . . . . . . : 70-F3-95-B9-5E-34

DHCP ingeschakeld . . . . . . . . : ja

Autom. configuratie ingeschakeld : ja

Draadloos LAN-adapter voor Draadloze netwerkverbinding:

Verbindingsspec. DNS-achtervoegsel:

Beschrijving. . . . . . . . . . . : Broadcom 4313 (802.11b/g/n)

Fysiek adres. . . . . . . . . . . : 70-F3-95-B9-5E-34

DHCP ingeschakeld . . . . . . . . : ja

Autom. configuratie ingeschakeld : ja

Link-local IPv6-adres . . . . . . : fe80::d8ad:9eca:626f:36e0%18(voorkeur)

Automatisch geconf.IPv4-adres . . : 169.254.54.224(voorkeur)

Subnetmasker. . . . . . . . . . . : 255.255.0.0

Standaardgateway. . . . . . . . . :

DHCPv6 IAID . . . . . . . . . . . : 376501141

DHCPv6-client DUID. . . . . . . . : 00-01-00-01-14-56-82-E3-64-31-50-61-02-0E

DNS-servers . . . . . . . . . . . : fec0:0:0:ffff::1%1

fec0:0:0:ffff::2%1

fec0:0:0:ffff::3%1

NetBIOS via TCPIP . . . . . . . . : ingeschakeld

Ethernet-adapter voor Bluetooth-netwerkverbinding:

Mediumstatus. . . . . . . . . . . : medium ontkoppeld

Verbindingsspec. DNS-achtervoegsel:

Beschrijving. . . . . . . . . . . : Bluetooth-apparaat (Personal Area Network)

Fysiek adres. . . . . . . . . . . : E0-2A-82-02-C9-8C

DHCP ingeschakeld . . . . . . . . : ja

Autom. configuratie ingeschakeld : ja

Tunnel-adapter voor isatap.{C5DA064A-8B9B-4F19-BF06-C1D30A0A1BE4}:

Mediumstatus. . . . . . . . . . . : medium ontkoppeld

Verbindingsspec. DNS-achtervoegsel:

Beschrijving. . . . . . . . . . . : Microsoft ISATAP Adapter

Fysiek adres. . . . . . . . . . . : 00-00-00-00-00-00-00-E0

DHCP ingeschakeld . . . . . . . . : nee

Autom. configuratie ingeschakeld : ja

Tunnel-adapter voor 6TO4 Adapter:

Mediumstatus. . . . . . . . . . . : medium ontkoppeld

Verbindingsspec. DNS-achtervoegsel:

Beschrijving. . . . . . . . . . . : Microsoft 6to4 Adapter

Fysiek adres. . . . . . . . . . . : 00-00-00-00-00-00-00-E0

DHCP ingeschakeld . . . . . . . . : nee

Autom. configuratie ingeschakeld : ja

Tunnel-adapter voor LAN-verbinding* 11:

Mediumstatus. . . . . . . . . . . : medium ontkoppeld

Verbindingsspec. DNS-achtervoegsel:

Beschrijving. . . . . . . . . . . : Teredo Tunneling Pseudo-Interface

Fysiek adres. . . . . . . . . . . : 00-00-00-00-00-00-00-E0

DHCP ingeschakeld . . . . . . . . : nee

Autom. configuratie ingeschakeld : ja

Tunnel-adapter voor isatap.{05ACF802-3887-4F3B-98CB-429D8A9F4E78}:

Mediumstatus. . . . . . . . . . . : medium ontkoppeld

Verbindingsspec. DNS-achtervoegsel:

Beschrijving. . . . . . . . . . . : Microsoft ISATAP Adapter #2

Fysiek adres. . . . . . . . . . . : 00-00-00-00-00-00-00-E0

DHCP ingeschakeld . . . . . . . . : nee

Autom. configuratie ingeschakeld : ja

Tunnel-adapter voor isatap.{D85AF543-7382-4E45-ABB9-B0457B3B1062}:

Mediumstatus. . . . . . . . . . . : medium ontkoppeld

Verbindingsspec. DNS-achtervoegsel:

Beschrijving. . . . . . . . . . . : Microsoft ISATAP Adapter #3

Fysiek adres. . . . . . . . . . . : 00-00-00-00-00-00-00-E0

DHCP ingeschakeld . . . . . . . . : nee

Autom. configuratie ingeschakeld : ja

Server: UnKnown

Address: fec0:0:0:ffff::1

Ping-aanvraag kan host google.com niet vinden.

Controleer de naam en probeer het opnieuw.

Server: UnKnown

Address: fec0:0:0:ffff::1

Ping-aanvraag kan host yahoo.com niet vinden.

Controleer de naam en probeer het opnieuw.

Pingen naar 127.0.0.1 met 32 bytes aan gegevens:

Algemene fout.

Ping-statistieken voor 127.0.0.1:

Pakketten: verzonden = 2, ontvangen = 0, verloren = 2

(100% verlies).

===========================================================================

Interfacelijst

19...70 f3 95 b9 5e 34 ......Microsoft Virtual WiFi Miniport Adapter #2

18...70 f3 95 b9 5e 34 ......Broadcom 4313 (802.11b/g/n)

16...e0 2a 82 02 c9 8c ......Bluetooth-apparaat (Personal Area Network)

1...........................Software Loopback Interface 1

20...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter

11...00 00 00 00 00 00 00 e0 Microsoft 6to4 Adapter

15...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface

21...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2

22...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #3

===========================================================================

IPv4 routetabel

===========================================================================

Actieve routes:

Netwerkadres Netmasker Gateway Interface Metric

127.0.0.0 255.0.0.0 On-link 127.0.0.1 306

127.0.0.1 255.255.255.255 On-link 127.0.0.1 306

127.255.255.255 255.255.255.255 On-link 127.0.0.1 306

169.254.0.0 255.255.0.0 On-link 169.254.54.224 281

169.254.54.224 255.255.255.255 On-link 169.254.54.224 281

169.254.255.255 255.255.255.255 On-link 169.254.54.224 281

224.0.0.0 240.0.0.0 On-link 127.0.0.1 306

224.0.0.0 240.0.0.0 On-link 169.254.54.224 281

255.255.255.255 255.255.255.255 On-link 127.0.0.1 306

255.255.255.255 255.255.255.255 On-link 169.254.54.224 281

===========================================================================

Permanente routes:

Geen

IPv6 routetabel

===========================================================================

Actieve routes:

Indien metrische netwerkbestemming Gateway

1 306 ::1/128 On-link

18 281 fe80::/64 On-link

18 281 fe80::d8ad:9eca:626f:36e0/128

On-link

1 306 ff00::/8 On-link

18 281 ff00::/8 On-link

===========================================================================

Permanente routes:

Geen

========================= Winsock entries =====================================

Catalog5 01 C:\Windows\SysWOW64\NLAapi.dll [52224] (Microsoft Corporation)

Catalog5 02 C:\Windows\SysWOW64\napinsp.dll [52224] (Microsoft Corporation)

Catalog5 03 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)

Catalog5 04 C:\Windows\SysWOW64\pnrpnsp.dll [65024] (Microsoft Corporation)

Catalog5 05 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)

Catalog5 06 C:\Windows\SysWOW64\winrnr.dll [20992] (Microsoft Corporation)

Catalog5 07 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280] (Microsoft Corp.)

Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280] (Microsoft Corp.)

Catalog5 09 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)

Catalog5 10 C:\Windows\SysWOW64\wshbth.dll [36352] (Microsoft Corporation)

Catalog9 01 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 02 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 03 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 04 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 05 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 06 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 07 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 08 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 09 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 10 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)

Catalog9 11 C:\Windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation)

x64-Catalog5 01 C:\Windows\System32\NLAapi.dll [70656] (Microsoft Corporation)

x64-Catalog5 02 C:\Windows\System32\napinsp.dll [68096] (Microsoft Corporation)

x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)

x64-Catalog5 04 C:\Windows\System32\pnrpnsp.dll [86016] (Microsoft Corporation)

x64-Catalog5 05 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

x64-Catalog5 06 C:\Windows\System32\winrnr.dll [28672] (Microsoft Corporation)

x64-Catalog5 07 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [171392] (Microsoft Corp.)

x64-Catalog5 08 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [171392] (Microsoft Corp.)

x64-Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [132968] (Apple Inc.)

x64-Catalog5 10 C:\Windows\System32\wshbth.dll [47104] (Microsoft Corporation)

x64-Catalog9 01 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

x64-Catalog9 02 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

x64-Catalog9 03 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

x64-Catalog9 04 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

x64-Catalog9 05 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

x64-Catalog9 06 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

x64-Catalog9 07 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

x64-Catalog9 08 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

x64-Catalog9 09 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

x64-Catalog9 10 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

x64-Catalog9 11 C:\Windows\System32\mswsock.dll [327168] (Microsoft Corporation)

========================= Event log errors: ===============================

Application errors:

==================

Error: (05/11/2014 00:21:02 AM) (Source: Microsoft-Windows-CAPI2) (User: )

Description: De service Cryptografische services is mislukt tijdens het verwerken van aanroep OnIdentity() op het object System Writer.

Details:

AddLegacyDriverFiles: Unable to back up image of binary qtipxncm.

System Error:

Het systeem kan het opgegeven bestand niet vinden.

Error: (05/11/2014 00:04:14 AM) (Source: Application Error) (User: )

Description: Naam van toepassing met fout: main.exe, versie: 4.2.45.0, tijdstempel: 0x5316ea5b

Naam van module met fout: KERNELBASE.dll, versie: 6.1.7601.18229, tijdstempel: 0x51fb1116

Uitzonderingscode: 0xe0434352

Foutoffset: 0x0000c41f

Id van proces met fout: 0x1174

Starttijd van toepassing met fout: 0xmain.exe0

Pad naar toepassing met fout: main.exe1

Pad naar module met fout: main.exe2

Rapport-id: main.exe3

Error: (05/11/2014 00:04:11 AM) (Source: .NET Runtime) (User: )

Description: Toepassing: main.exe

Framework-versie: v4.0.30319

Beschrijving: het proces is beëindigd als gevolg van een onverwerkte uitzondering.

Uitzonderingsinformatie: System.Net.Sockets.SocketException

Stack:

bij System.Net.Sockets.Socket.DoBind(System.Net.EndPoint, System.Net.SocketAddress)

bij System.Net.Sockets.Socket.Bind(System.Net.EndPoint)

bij System.Net.Sockets.TcpListener.Start(Int32)

bij System.Runtime.Remoting.Channels.ExclusiveTcpListener.Start(Boolean)

bij System.Runtime.Remoting.Channels.Tcp.TcpServerChannel.StartListening(System.Object)

bij System.Runtime.Remoting.Channels.Tcp.TcpServerChannel.SetupChannel()

bij System.Runtime.Remoting.Channels.Tcp.TcpServerChannel..ctor(System.Collections.IDictionary, System.Runtime.Remoting.Channels.IServerChannelSinkProvider, System.Runtime.Remoting.Channels.IAuthorizeRemotingConnection)

bij System.Runtime.Remoting.Channels.Tcp.TcpServerChannel..ctor(System.Collections.IDictionary, System.Runtime.Remoting.Channels.IServerChannelSinkProvider)

bij Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase.RegisterChannel(ChannelType, Boolean)

bij Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase.Run(System.String[])

bij Razer.Kel.GUI.Startup.Main(System.String[])

Error: (05/10/2014 02:54:41 AM) (Source: Application Error) (User: )

Description: Naam van toepassing met fout: main.exe, versie: 4.2.45.0, tijdstempel: 0x5316ea5b

Naam van module met fout: KERNELBASE.dll, versie: 6.1.7601.18229, tijdstempel: 0x51fb1116

Uitzonderingscode: 0xe0434352

Foutoffset: 0x0000c41f

Id van proces met fout: 0x1ab4

Starttijd van toepassing met fout: 0xmain.exe0

Pad naar toepassing met fout: main.exe1

Pad naar module met fout: main.exe2

Rapport-id: main.exe3

Error: (05/10/2014 02:54:38 AM) (Source: .NET Runtime) (User: )

Description: Toepassing: main.exe

Framework-versie: v4.0.30319

Beschrijving: het proces is beëindigd als gevolg van een onverwerkte uitzondering.

Uitzonderingsinformatie: System.Net.Sockets.SocketException

Stack:

bij System.Net.Sockets.Socket.DoBind(System.Net.EndPoint, System.Net.SocketAddress)

bij System.Net.Sockets.Socket.Bind(System.Net.EndPoint)

bij System.Net.Sockets.TcpListener.Start(Int32)

bij System.Runtime.Remoting.Channels.ExclusiveTcpListener.Start(Boolean)

bij System.Runtime.Remoting.Channels.Tcp.TcpServerChannel.StartListening(System.Object)

bij System.Runtime.Remoting.Channels.Tcp.TcpServerChannel.SetupChannel()

bij System.Runtime.Remoting.Channels.Tcp.TcpServerChannel..ctor(System.Collections.IDictionary, System.Runtime.Remoting.Channels.IServerChannelSinkProvider)

bij Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase.RegisterChannel(ChannelType, Boolean)

bij Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase.Run(System.String[])

bij Razer.Kel.GUI.Startup.Main(System.String[])

Error: (05/09/2014 11:22:42 PM) (Source: Application Error) (User: )

Description: Naam van toepassing met fout: main.exe, versie: 4.2.45.0, tijdstempel: 0x5316ea5b

Naam van module met fout: KERNELBASE.dll, versie: 6.1.7601.18229, tijdstempel: 0x51fb1116

Uitzonderingscode: 0xe0434352

Foutoffset: 0x0000c41f

Id van proces met fout: 0x1b80

Starttijd van toepassing met fout: 0xmain.exe0

Pad naar toepassing met fout: main.exe1

Pad naar module met fout: main.exe2

Rapport-id: main.exe3

Error: (05/09/2014 11:22:40 PM) (Source: .NET Runtime) (User: )

Description: Toepassing: main.exe

Framework-versie: v4.0.30319

Beschrijving: het proces is beëindigd als gevolg van een onverwerkte uitzondering.

Uitzonderingsinformatie: System.Net.Sockets.SocketException

Stack:

bij System.Net.Sockets.Socket.DoBind(System.Net.EndPoint, System.Net.SocketAddress)

bij System.Net.Sockets.Socket.Bind(System.Net.EndPoint)

bij System.Net.Sockets.TcpListener.Start(Int32)

bij System.Runtime.Remoting.Channels.ExclusiveTcpListener.Start(Boolean)

bij System.Runtime.Remoting.Channels.Tcp.TcpServerChannel.StartListening(System.Object)

bij System.Runtime.Remoting.Channels.Tcp.TcpServerChannel.SetupChannel()

bij System.Runtime.Remoting.Channels.Tcp.TcpServerChannel..ctor(System.Collections.IDictionary, System.Runtime.Remoting.Channels.IServerChannelSinkProvider)

bij Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase.RegisterChannel(ChannelType, Boolean)

bij Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase.Run(System.String[])

bij Razer.Kel.GUI.Startup.Main(System.String[])

Error: (05/09/2014 11:19:59 PM) (Source: Application Error) (User: )

Description: Naam van toepassing met fout: main.exe, versie: 4.2.45.0, tijdstempel: 0x5316ea5b

Naam van module met fout: KERNELBASE.dll, versie: 6.1.7601.18229, tijdstempel: 0x51fb1116

Uitzonderingscode: 0xe0434352

Foutoffset: 0x0000c41f

Id van proces met fout: 0xe58

Starttijd van toepassing met fout: 0xmain.exe0

Pad naar toepassing met fout: main.exe1

Pad naar module met fout: main.exe2

Rapport-id: main.exe3

Error: (05/09/2014 11:19:56 PM) (Source: .NET Runtime) (User: )

Description: Toepassing: main.exe

Framework-versie: v4.0.30319

Beschrijving: het proces is beëindigd als gevolg van een onverwerkte uitzondering.

Uitzonderingsinformatie: System.Net.Sockets.SocketException

Stack:

bij System.Net.Sockets.Socket.DoBind(System.Net.EndPoint, System.Net.SocketAddress)

bij System.Net.Sockets.Socket.Bind(System.Net.EndPoint)

bij System.Net.Sockets.TcpListener.Start(Int32)

bij System.Runtime.Remoting.Channels.ExclusiveTcpListener.Start(Boolean)

bij System.Runtime.Remoting.Channels.Tcp.TcpServerChannel.StartListening(System.Object)

bij System.Runtime.Remoting.Channels.Tcp.TcpServerChannel.SetupChannel()

bij System.Runtime.Remoting.Channels.Tcp.TcpServerChannel..ctor(System.Collections.IDictionary, System.Runtime.Remoting.Channels.IServerChannelSinkProvider)

bij Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase.RegisterChannel(ChannelType, Boolean)

bij Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase.Run(System.String[])

bij Razer.Kel.GUI.Startup.Main(System.String[])

Error: (05/07/2014 00:57:20 PM) (Source: Application Error) (User: )

Description: Naam van toepassing met fout: IEXPLORE.EXE, versie: 11.0.9600.17041, tijdstempel: 0x531807e4

Naam van module met fout: KrakenDevProps.dll, versie: 0.0.0.0, tijdstempel: 0x51f0d458

Uitzonderingscode: 0xc0000005

Foutoffset: 0x00004362

Id van proces met fout: 0xa68

Starttijd van toepassing met fout: 0xIEXPLORE.EXE0

Pad naar toepassing met fout: IEXPLORE.EXE1

Pad naar module met fout: IEXPLORE.EXE2

Rapport-id: IEXPLORE.EXE3

System errors:

=============

Error: (05/11/2014 06:07:38 PM) (Source: NetBT) (User: )

Description: Initialisatie is mislukt omdat het transport heeft geweigerd beginadressen te openen.

Error: (05/11/2014 06:07:38 PM) (Source: NetBT) (User: )

Description: Initialisatie is mislukt omdat het transport heeft geweigerd beginadressen te openen.

Error: (05/11/2014 03:51:45 PM) (Source: Service Control Manager) (User: )

Description: De volgende opstartstuurprogramma's zijn niet geladen:

SBRE

Error: (05/11/2014 03:51:41 PM) (Source: Service Control Manager) (User: )

Description: De BullGuard on-access service-service is afhankelijk van de BullGuard main service-service, die vanwege de volgende fout niet kan worden gestart:

%%126

Error: (05/11/2014 03:51:37 PM) (Source: Service Control Manager) (User: )

Description: De IKE and AuthIP IPsec Keying Modules-service is gestopt met de volgende foutcode:

%%13876.

Error: (05/11/2014 03:51:35 PM) (Source: Service Control Manager) (User: )

Description: De BullGuard update service-service kan vanwege de volgende fout niet worden gestart:

%%2

Error: (05/11/2014 03:51:35 PM) (Source: Service Control Manager) (User: )

Description: De BullGuard scanning service-service kan vanwege de volgende fout niet worden gestart:

%%2

Error: (05/11/2014 03:51:35 PM) (Source: Service Control Manager) (User: )

Description: De BullGuard main service-service is gestopt met de volgende foutcode:

%%126.

Error: (05/11/2014 03:51:35 PM) (Source: Service Control Manager) (User: )

Description: De BullGuard e-mail monitoring service-service is gestopt met de volgende foutcode:

%%126.

Error: (05/11/2014 03:51:22 PM) (Source: NetBT) (User: )

Description: Initialisatie is mislukt omdat het transport heeft geweigerd beginadressen te openen.

Microsoft Office Sessions:

=========================

Error: (05/11/2014 00:21:02 AM) (Source: Microsoft-Windows-CAPI2)(User: )

Description:

Details:

AddLegacyDriverFiles: Unable to back up image of binary qtipxncm.

System Error:

Het systeem kan het opgegeven bestand niet vinden.

Error: (05/11/2014 00:04:14 AM) (Source: Application Error)(User: )

Description: main.exe4.2.45.05316ea5bKERNELBASE.dll6.1.7601.1822951fb1116e04343520000c41f117401cf6c9bc5b1c524C:\Program Files (x86)\Razer\Razer Game Booster\main.exeC:\Windows\syswow64\KERNELBASE.dll05a31fc6-d88f-11e3-83bf-e02a8202c98c

Error: (05/11/2014 00:04:11 AM) (Source: .NET Runtime)(User: )

Description: Toepassing: main.exe

Framework-versie: v4.0.30319

Beschrijving: het proces is beëindigd als gevolg van een onverwerkte uitzondering.

Uitzonderingsinformatie: System.Net.Sockets.SocketException

Stack:

bij System.Net.Sockets.Socket.DoBind(System.Net.EndPoint, System.Net.SocketAddress)

bij System.Net.Sockets.Socket.Bind(System.Net.EndPoint)

bij System.Net.Sockets.TcpListener.Start(Int32)

bij System.Runtime.Remoting.Channels.ExclusiveTcpListener.Start(Boolean)

bij System.Runtime.Remoting.Channels.Tcp.TcpServerChannel.StartListening(System.Object)

bij System.Runtime.Remoting.Channels.Tcp.TcpServerChannel.SetupChannel()

bij System.Runtime.Remoting.Channels.Tcp.TcpServerChannel..ctor(System.Collections.IDictionary, System.Runtime.Remoting.Channels.IServerChannelSinkProvider)

bij Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase.RegisterChannel(ChannelType, Boolean)

bij Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase.Run(System.String[])

bij Razer.Kel.GUI.Startup.Main(System.String[])

Error: (05/10/2014 02:54:41 AM) (Source: Application Error)(User: )

Description: main.exe4.2.45.05316ea5bKERNELBASE.dll6.1.7601.1822951fb1116e04343520000c41f1ab401cf6bea6b0a2926C:\Program Files (x86)\Razer\Razer Game Booster\main.exeC:\Windows\syswow64\KERNELBASE.dllaac986e3-d7dd-11e3-bf19-e02a8202c98c

Error: (05/10/2014 02:54:38 AM) (Source: .NET Runtime)(User: )

Description: Toepassing: main.exe

Framework-versie: v4.0.30319

Beschrijving: het proces is beëindigd als gevolg van een onverwerkte uitzondering.

Uitzonderingsinformatie: System.Net.Sockets.SocketException

Stack:

bij System.Net.Sockets.Socket.DoBind(System.Net.EndPoint, System.Net.SocketAddress)

bij System.Net.Sockets.Socket.Bind(System.Net.EndPoint)

bij System.Net.Sockets.TcpListener.Start(Int32)

bij System.Runtime.Remoting.Channels.ExclusiveTcpListener.Start(Boolean)

bij System.Runtime.Remoting.Channels.Tcp.TcpServerChannel.StartListening(System.Object)

bij System.Runtime.Remoting.Channels.Tcp.TcpServerChannel.SetupChannel()

bij System.Runtime.Remoting.Channels.Tcp.TcpServerChannel..ctor(System.Collections.IDictionary, System.Runtime.Remoting.Channels.IServerChannelSinkProvider)

bij Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase.RegisterChannel(ChannelType, Boolean)

bij Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase.Run(System.String[])

bij Razer.Kel.GUI.Startup.Main(System.String[])

Error: (05/09/2014 11:22:42 PM) (Source: Application Error)(User: )

Description: main.exe4.2.45.05316ea5bKERNELBASE.dll6.1.7601.1822951fb1116e04343520000c41f1b8001cf6bccceeb8c89C:\Program Files (x86)\Razer\Razer Game Booster\main.exeC:\Windows\syswow64\KERNELBASE.dll0e01e892-d7c0-11e3-bf19-e02a8202c98c

Error: (05/09/2014 11:22:40 PM) (Source: .NET Runtime)(User: )

Description: Toepassing: main.exe

Framework-versie: v4.0.30319

Beschrijving: het proces is beëindigd als gevolg van een onverwerkte uitzondering.

Uitzonderingsinformatie: System.Net.Sockets.SocketException

Stack:

bij System.Net.Sockets.Socket.DoBind(System.Net.EndPoint, System.Net.SocketAddress)

bij System.Net.Sockets.Socket.Bind(System.Net.EndPoint)

bij System.Net.Sockets.TcpListener.Start(Int32)

bij System.Runtime.Remoting.Channels.ExclusiveTcpListener.Start(Boolean)

bij System.Runtime.Remoting.Channels.Tcp.TcpServerChannel.StartListening(System.Object)

bij System.Runtime.Remoting.Channels.Tcp.TcpServerChannel.SetupChannel()

bij System.Runtime.Remoting.Channels.Tcp.TcpServerChannel..ctor(System.Collections.IDictionary, System.Runtime.Remoting.Channels.IServerChannelSinkProvider)

bij Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase.RegisterChannel(ChannelType, Boolean)

bij Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase.Run(System.String[])

bij Razer.Kel.GUI.Startup.Main(System.String[])

Error: (05/09/2014 11:19:59 PM) (Source: Application Error)(User: )

Description: main.exe4.2.45.05316ea5bKERNELBASE.dll6.1.7601.1822951fb1116e04343520000c41fe5801cf6bcc6bdd6957C:\Program Files (x86)\Razer\Razer Game Booster\main.exeC:\Windows\syswow64\KERNELBASE.dllac6bdecb-d7bf-11e3-bf19-e02a8202c98c

Error: (05/09/2014 11:19:56 PM) (Source: .NET Runtime)(User: )

Description: Toepassing: main.exe

Framework-versie: v4.0.30319

Beschrijving: het proces is beëindigd als gevolg van een onverwerkte uitzondering.

Uitzonderingsinformatie: System.Net.Sockets.SocketException

Stack:

bij System.Net.Sockets.Socket.DoBind(System.Net.EndPoint, System.Net.SocketAddress)

bij System.Net.Sockets.Socket.Bind(System.Net.EndPoint)

bij System.Net.Sockets.TcpListener.Start(Int32)

bij System.Runtime.Remoting.Channels.ExclusiveTcpListener.Start(Boolean)

bij System.Runtime.Remoting.Channels.Tcp.TcpServerChannel.StartListening(System.Object)

bij System.Runtime.Remoting.Channels.Tcp.TcpServerChannel.SetupChannel()

bij System.Runtime.Remoting.Channels.Tcp.TcpServerChannel..ctor(System.Collections.IDictionary, System.Runtime.Remoting.Channels.IServerChannelSinkProvider)

bij Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase.RegisterChannel(ChannelType, Boolean)

bij Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase.Run(System.String[])

bij Razer.Kel.GUI.Startup.Main(System.String[])

Error: (05/07/2014 00:57:20 PM) (Source: Application Error)(User: )

Description: IEXPLORE.EXE11.0.9600.17041531807e4KrakenDevProps.dll0.0.0.051f0d458c000000500004362a6801cf69e2ea135403C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Program Files (x86)\Razer\Razer_Kraken_Driver\Drivers\SysAudio\KrakenDevProps.dll5bdb9f7f-d5d6-11e3-9477-e02a8202c98c

CodeIntegrity Errors:

===================================

Date: 2013-12-08 17:08:54.729

Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem.

Date: 2013-12-08 17:08:54.729

Date: 2013-12-08 17:08:54.714

Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\KLELAMX64\klelam.sys kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem.

Date: 2013-12-08 17:08:54.698

Date: 2013-12-06 16:17:16.033

Date: 2013-12-06 16:17:15.986

=========================== Installed Programs ============================

µTorrent (Version: 3.3.1.30017)

Acrobat.com (Version: 1.6.65)

Adobe AIR (Version: 4.0.0.1390)

Adobe Flash Player 13 ActiveX (Version: 13.0.0.206)

Adobe Reader XI (11.0.06) (Version: 11.0.06)

Adobe Shockwave Player 11.5 (Version: 11.5.7.609)

Adobe Shockwave Player 12.0 (Version: 12.0.3.133)

Agatha Christie - Death on the Nile (Version: 2.2.0.95)

AMD APP SDK Runtime (Version: 10.0.1016.4)

AMD Catalyst Install Manager (Version: 8.0.891.0)

AMD Drag and Drop Transcoding (Version: 2.00.0000)

AMD Media Foundation Decoders (Version: 1.0.70704.0230)

AMD USB Filter Driver (Version: 1.0.15.94)

Apple Application Support (Version: 2.3.6)

Apple Mobile Device Support (Version: 7.0.0.117)

Apple Software Update (Version: 2.1.3.127)

avast! Free Antivirus (Version: 9.0.2018)

Bejeweled 2 Deluxe (Version: 2.2.0.95)

Bing Bar (Version: 7.3.132.0)

Blackhawk Striker 2 (Version: 2.2.0.95)

Bonjour (Version: 3.0.0.10)

Broadcom 2070 Bluetooth 3.0 (Version: 6.3.0.5600)

Broadcom 802.11 Wireless LAN Adapter (Version: 5.60.350.6)

Catalyst Control Center - Branding (Version: 1.00.0000)

Catalyst Control Center Core Implementation (Version: 2010.0416.541.8279)

Catalyst Control Center Graphics Full Existing (Version: 2010.0416.541.8279)

Catalyst Control Center Graphics Full New (Version: 2010.0416.541.8279)

Catalyst Control Center Graphics Light (Version: 2010.0416.541.8279)

Catalyst Control Center Graphics Previews Common (Version: 2010.0416.541.8279)

Catalyst Control Center Graphics Previews Vista (Version: 2010.0416.541.8279)

Catalyst Control Center InstallProxy (Version: 2010.0416.541.8279)

Catalyst Control Center Localization All (Version: 2010.0416.541.8279)

CCC Help Chinese Standard (Version: 2010.0416.0540.8279)

CCC Help Chinese Traditional (Version: 2010.0416.0540.8279)

CCC Help Czech (Version: 2010.0416.0540.8279)

CCC Help Danish (Version: 2010.0416.0540.8279)

CCC Help Dutch (Version: 2010.0416.0540.8279)

CCC Help English (Version: 2010.0416.0540.8279)

CCC Help Finnish (Version: 2010.0416.0540.8279)

CCC Help French (Version: 2010.0416.0540.8279)

CCC Help German (Version: 2010.0416.0540.8279)

CCC Help Greek (Version: 2010.0416.0540.8279)

CCC Help Hungarian (Version: 2010.0416.0540.8279)

CCC Help Italian (Version: 2010.0416.0540.8279)

CCC Help Japanese (Version: 2010.0416.0540.8279)

CCC Help Korean (Version: 2010.0416.0540.8279)

CCC Help Norwegian (Version: 2010.0416.0540.8279)

CCC Help Polish (Version: 2010.0416.0540.8279)

CCC Help Portuguese (Version: 2010.0416.0540.8279)

CCC Help Russian (Version: 2010.0416.0540.8279)

CCC Help Spanish (Version: 2010.0416.0540.8279)

CCC Help Swedish (Version: 2010.0416.0540.8279)

CCC Help Thai (Version: 2010.0416.0540.8279)

CCC Help Turkish (Version: 2010.0416.0540.8279)

ccc-core-static (Version: 2010.0416.541.8279)

ccc-utility64 (Version: 2010.0416.541.8279)

CCleaner (Version: 4.13)

Chuzzle Deluxe (Version: 2.2.0.95)

CyberLink DVD Suite (Version: 7.0.3003)

Dora's Carnival Adventure (Version: 2.2.0.95)

DVD Menu Pack for HP MediaSmart Video (Version: 4.1.4121)

Energy Star Digital Logo (Version: 1.0.1)

Escape Rosecliff Island (Version: 2.2.0.95)

ESU for Microsoft Windows 7 (Version: 1.0.0)

EVE Online (remove only)

FATE (Version: 2.2.0.95)

FileHippo.com Update Checker

Final Drive Nitro (Version: 2.2.0.95)

Google Chrome (Version: 34.0.1847.131)

Google Update Helper (Version: 1.3.24.7)

Hewlett-Packard ACLM.NET v1.2.2.3 (Version: 1.00.0000)

HP 3D DriveGuard (Version: 4.0.5.1)

HP Advisor (Version: 3.4.10262.3295)

HP Customer Experience Enhancements (Version: 6.0.1.4)

HP Documentation (Version: 1.1.1.0)

HP Game Console

HP Games (Version: 1.0.1.3)

HP MediaSmart DVD (Version: 4.1.4229)

HP MediaSmart Movies and TV (Version: 1.0.0.10)

HP MediaSmart Music (Version: 4.1.4215)

HP MediaSmart Photo (Version: 4.1.4211)

HP MediaSmart SmartMenu (Version: 3.1.1.12)

HP MediaSmart Video (Version: 4.1.4214)

HP MediaSmart Webcam (Version: 4.1.3024)

HP Power Manager (Version: 1.2.3)

HP Quick Launch (Version: 2.4.4)

HP Setup (Version: 8.1.4186.3400)

HP SimplePass Identity Protection (Version: 5.20.233)

HP Software Framework (Version: 4.1.6.1)

HP Support Assistant (Version: 7.4.45.4)

HP Wireless Assistant (Version: 4.0.9.0)

iCloud (Version: 3.0.2.163)

IDT Audio (Version: 1.0.6288.0)

Internet Explorer (Enable DEP)

iTunes (Version: 11.1.0.126)

Java 7 Update 55 (Version: 7.0.550)

Java Auto Updater (Version: 2.1.9.8)

Java™ 6 Update 20 (64-bit) (Version: 6.0.200)

Java™ 6 Update 33 (Version: 6.0.330)

Jewel Quest - Heritage (Version: 2.2.0.95)

Junk Mail filter update (Version: 14.0.8117.416)

LabelPrint (Version: 2.5.2907)

League of Legends (Version: 1.3)

LightScribe System Software (Version: 1.18.15.1)

LOLReplay (Version: 0.8.7)

Magic Desktop

Microsoft .NET Framework 4.5 NLD Language Pack (Version: 4.5.50709)

Microsoft .NET Framework 4.5.1 (Version: 4.5.50938)

Microsoft Application Error Reporting (Version: 12.0.6015.5000)

Microsoft Choice Guard (Version: 2.0.48.0)

Microsoft Office 2010 (Version: 14.0.4763.1000)

Microsoft Silverlight (Version: 5.1.30214.0)

Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)

Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)

Movie Theme Pack for HP MediaSmart Video (Version: 4.1.4030)

MSVCRT (Version: 14.0.1468.721)

MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)

Mumble 1.2.5 (Version: 1.2.5)

Penguins! (Version: 2.2.0.95)

PhotoNow! (Version: 1.1.6904)

Pidgin (Version: 2.10.9)

Plants vs. Zombies (Version: 2.2.0.95)

Poker Superstars III (Version: 2.2.0.95)

Polar Bowler (Version: 2.2.0.95)

Polar Golfer (Version: 2.2.0.95)

Post Apocalyptic Mayhem

Power2Go (Version: 6.1.4204)

PowerDirector (Version: 8.0.3003)

Rapport (Version: 3.5.1304.66)

Razer Game Booster (Version: 4.2.45.0)

Razer Synapse 2.0 (Version: 1.18.02)

Realtek Ethernet Controller Driver For Windows 7 (Version: 7.11.1127.2009)

Realtek USB 2.0 Card Reader (Version: 6.1.7600.30113)

Recovery Manager (Version: 5.5.3023)

Shared C Run-time for x64 (Version: 10.0.0)

Steam (Version: 1.0.0.0)

swMSM (Version: 12.0.0.1)

Synaptics Pointing Device Driver (Version: 15.3.29.0)

Taalpakket voor Microsoft .NET Framework 4.5 - NLD (Version: 4.5.50709)

TeamSpeak 3 Client (Version: 3.0.14)

Trusteer Eindpuntbeveiliging (Version: 3.5.1304.66)

Validity Sensors DDK (Version: 4.1.139.0)

Virtual Villagers - The Secret City (Version: 2.2.0.95)

Visual Studio 2008 x64 Redistributables (Version: 10.0.0.2)

Visual Studio 2010 x64 Redistributables (Version: 13.0.0.1)

Visual Studio 2012 x64 Redistributables (Version: 14.0.0.1)

Visual Studio 2012 x86 Redistributables (Version: 14.0.0.1)

Windows Live - Hulpprogramma voor uploaden (Version: 14.0.8014.1029)

Windows Live Call (Version: 14.0.8117.0416)

Windows Live Communications Platform (Version: 14.0.8117.416)

Windows Live Essentials (Version: 14.0.8117.0416)

Windows Live Essentials (Version: 14.0.8117.416)

Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)

Windows Live Mail (Version: 14.0.8117.0416)

Windows Live Messenger (Version: 14.0.8117.0416)

Windows Live Photo Gallery (Version: 14.0.8117.416)

Windows Live Remote Service (Version: 15.4.5722.2)

Windows Live Sync (Version: 14.0.8117.416)

Windows Live Writer (Version: 14.0.8117.0416)

Zuma Deluxe (Version: 2.2.0.95)

========================= Devices: ================================

Name: ATI Mobility Radeon HD 5650

Description: ATI Mobility Radeon HD 5650

Class Guid: {4d36e968-e325-11ce-bfc1-08002be10318}

Manufacturer: ATI Technologies Inc.

Service: amdkmdap

Name: Microsoft Windows Beheerinterface voor ACPI

Description: Microsoft Windows Beheerinterface voor ACPI

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: WmiAcpi

Name: PCI standard host CPU bridge

Description: PCI standard host CPU bridge

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service:

Name: Microsoft Virtual WiFi Miniport Adapter #2

Description: Microsoft Virtual WiFi Miniport-adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: vwifimp

Name: NativeWiFi Filter

Description: NativeWiFi Filter

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: NativeWifiP

Name: LDDM Graphics Subsystem

Description: LDDM Graphics Subsystem

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: DXGKrnl

Name: ATA Channel 3

Description: IDE-kanaal

Class Guid: {4d36e96a-e325-11ce-bfc1-08002be10318}

Manufacturer: (Standaard IDE ATA/ATAPI-controllers)

Service: atapi

Name: Synaptics PS/2 Port TouchPad

Description: Synaptics PS/2 Port TouchPad

Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}

Manufacturer: Synaptics

Service: i8042prt

Name: ACPI-vaste-functieknop

Description: ACPI-vaste-functieknop

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service:

Name: Security Processor Loader Driver

Description: Security Processor Loader Driver

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: spldr

Name: QWAVE driver

Description: QWAVE driver

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: QWAVEdrv

Name: NDIS-systeemstuurprogramma

Description: NDIS-systeemstuurprogramma

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: NDIS

Name: ACPI-thermale zone

Description: ACPI-thermale zone

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service:

Name: HTTP

Description: HTTP

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: HTTP

Name: Microsoft 6to4 Adapter

Description: Microsoft 6to4 Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Name: Algemeen PnP-beeldscherm

Description: Algemeen PnP-beeldscherm

Class Guid: {4d36e96e-e325-11ce-bfc1-08002be10318}

Manufacturer: (Standaardbeeldschermtypen)

Service: monitor

Name: HP Mobile Data Protection Sensor

Description: HP Mobile Data Protection Sensor

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: Hewlett-Packard

Service: Accelerometer

Name: Windows Socket 2.0 Non-IFS-omgeving voor serviceproviderondersteuning

Description: Windows Socket 2.0 Non-IFS-omgeving voor serviceproviderondersteuning

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: ws2ifsl

Name: aswRdr

Description: aswRdr

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: aswRdr

Name: Standaard Enhanced PCI naar USB-hostcontroller

Description: Standaard Enhanced PCI naar USB-hostcontroller

Class Guid: {36fc9e60-c465-11cf-8056-444553540000}

Manufacturer: (Standaard USB Host Controller)

Service: usbehci

Name: NDIS Usermode I/O Protocol

Description: NDIS Usermode I/O Protocol

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: Ndisuio

Name: AMD M880G with ATI Mobility Radeon HD 4250

Description: AMD M880G with ATI Mobility Radeon HD 4250

Class Guid: {4d36e968-e325-11ce-bfc1-08002be10318}

Manufacturer: ATI Technologies Inc.

Service: amdkmdap

Name: PCI standard PCI-to-PCI bridge

Description: PCI standard PCI-to-PCI bridge

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service: pci

Name: Microsoft ISATAP Adapter

Description: Microsoft ISATAP Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Name: Systeem dat voldoet aan Microsoft ACPI

Description: Systeem dat voldoet aan Microsoft ACPI

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: ACPI

Name: Hardware Policy Driver

Description: Hardware Policy Driver

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: hwpolicy

Name: Programmeerbare interruptcontroller

Description: Programmeerbare interruptcontroller

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service:

Name: User Mode Driver Frameworks Platform Driver

Description: User Mode Driver Frameworks Platform Driver

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: WudfPf

Name: avast! Revert

Description: avast! Revert

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: aswRvrt

Name: Microsoft ISATAP Adapter #2

Description: Microsoft ISATAP Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Name: NDProxy

Description: NDProxy

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: NDProxy

Name: Microsoft Bluetooth-enumerator

Description: Microsoft Bluetooth-enumerator

Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}

Manufacturer: Microsoft

Service: BthEnum

Name: hp DVDRAM GT30L ATA Device

Description: Cd-rom-station

Class Guid: {4d36e965-e325-11ce-bfc1-08002be10318}

Manufacturer: (Standaard cd-rom-stations)

Service: cdrom

Name: IP Network Address Translator

Description: IP Network Address Translator

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: IPNAT

Name: Microsoft ISATAP Adapter #3

Description: Microsoft ISATAP Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Name: Systeemtimer

Description: Systeemtimer

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service:

Name: HP Webcam Splitter

Description: HP Webcam Splitter

Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}

Manufacturer: CyberLink

Service: clwvd

Name: Broadcom 2070 Bluetooth

Description: Broadcom 2070 Bluetooth

Class Guid: {e0cbf06c-cd8b-4647-bb8a-263b43f0f974}

Manufacturer: Broadcom

Service: BTHUSB

Name: Bluetooth-apparaat (Personal Area Network)

Description: Bluetooth-apparaat (Personal Area Network)

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: BthPan

Name: Standaard Enhanced PCI naar USB-hostcontroller

Description: Standaard Enhanced PCI naar USB-hostcontroller

Class Guid: {36fc9e60-c465-11cf-8056-444553540000}

Manufacturer: (Standaard USB Host Controller)

Service: usbehci

Name: High Definition Audio-besturing

Description: High Definition Audio-besturing

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: HDAudBus

Name: Microsoft AC-adapter

Description: Microsoft AC-adapter

Class Guid: {72631e54-78a4-11d0-bcf7-00aa00b7b32a}

Manufacturer: Microsoft

Service: CmBatt

Name: Algemeen volume

Description: Algemeen volume

Class Guid: {71a27cdd-812a-11d0-bec7-08002be2092f}

Manufacturer: Microsoft

Service: volsnap

Name: BIOS-stuurprogramma voor Microsoft Systeembeheer

Description: BIOS-stuurprogramma voor Microsoft Systeembeheer

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service: mssmbios

Name: Microsoft ISATAP Adapter #4

Description: Microsoft ISATAP Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Name: PCI standard PCI-to-PCI bridge

Description: PCI standard PCI-to-PCI bridge

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service: pci

Name: RapportCerberus_59849

Description: RapportCerberus_59849

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: RapportCerberus_59849

Name: Gebeurtenistimer met hoge precisie

Description: Gebeurtenistimer met hoge precisie

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service:

Name: UMBus Enumerator

Description: UMBus Enumerator

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: umbus

Name: NETBT

Description: NETBT

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: NetBT

Name: Teredo Tunneling Pseudo-Interface

Description: Microsoft Teredo Tunneling-adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Name: WAN Miniport (IKEv2)

Description: WAN Miniport (IKEv2)

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: RasAgileVpn

Name: Bluetooth-apparaat (RFCOMM Protocol TDI)

Description: Bluetooth-apparaat (RFCOMM Protocol TDI)

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: RFCOMM

Name: AMD Phenom™ II N930 Quad-Core Processor

Description: AMD-processor

Class Guid: {50127dc3-0f36-415e-a6cc-4cb3be910b65}

Manufacturer: Advanced Micro Devices

Service: AmdPPM

Name: AMD High Definition Audio Device

Description: AMD High Definition Audio Device

Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}

Manufacturer: Advanced Micro Devices

Service: AtiHDAudioService

Name: Controller voor directe geheugentoegang

Description: Controller voor directe geheugentoegang

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service:

Name: aswStm

Description: aswStm

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: aswStm

Name: ACPI x64-based PC

Description: ACPI x64-based PC

Class Guid: {4d36e966-e325-11ce-bfc1-08002be10318}

Manufacturer: (Standaardcomputers)

Service: \Driver\ACPI_HAL

Name: TOSHIBA MK7559GSM ATA Device

Description: Schijfstation

Class Guid: {4d36e967-e325-11ce-bfc1-08002be10318}

Manufacturer: (Standaardschijfstations)

Service: disk

Name: RapportEI64

Description: RapportEI64

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: RapportEI64

Name: Bluetooth-audio

Description: Bluetooth-audio

Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}

Manufacturer: Broadcom

Service: btwaudio

Name: WAN-minipoort (L2TP)

Description: WAN-minipoort (L2TP)

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: Rasl2tp

Name: Standard OpenHCD USB Host-controller

Description: Standard OpenHCD USB Host-controller

Class Guid: {36fc9e60-c465-11cf-8056-444553540000}

Manufacturer: (Standaard USB Host Controller)

Service: usbohci

Name: Indelen als volumestuurprogramma

Description: Indelen als volumestuurprogramma

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: blbdrive

Name: PCI standard host CPU bridge

Description: PCI standard host CPU bridge

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service:

Name: PCI standard PCI-to-PCI bridge

Description: PCI standard PCI-to-PCI bridge

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service: pci

Name: Standaard-PS/2-toetsenbord

Description: Standaard-PS/2-toetsenbord

Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardtoetsenbord)

Service: i8042prt

Name: Algemeen volume

Description: Algemeen volume

Class Guid: {71a27cdd-812a-11d0-bec7-08002be2092f}

Manufacturer: Microsoft

Service: volsnap

Name: RapportKE64

Description: RapportKE64

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: RapportKE64

Name: WAN-minipoort (Network Monitor)

Description: WAN-minipoort (Network Monitor)

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: NdisWan

Name: Composite Bus Enumerator

Description: Composite Bus Enumerator

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: CompositeBus

Name: avast! VM Monitor

Description: avast! VM Monitor

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: aswVmm

Name: Systeemluidspreker

Description: Systeemluidspreker

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service:

Name: USB-hoofdhub

Description: USB-hoofdhub

Class Guid: {36fc9e60-c465-11cf-8056-444553540000}

Manufacturer: (Standaard USB Host Controller)

Service: usbhub

Name: KSecDD

Description: KSecDD

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: KSecDD

Name: WAN-minipoort (IP)

Description: WAN-minipoort (IP)

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: NdisWan

Name: Stuurprogramma voor TCP/IP-protocol

Description: Stuurprogramma voor TCP/IP-protocol

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: Tcpip

Name: Microsoft Composite Battery

Description: Microsoft Composite Battery

Class Guid: {72631e54-78a4-11d0-bcf7-00aa00b7b32a}

Manufacturer: Microsoft

Service: Compbatt

Name: RapportPG64

Description: RapportPG64

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: RapportPG64

Name: IDT High Definition Audio CODEC

Description: IDT High Definition Audio CODEC

Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}

Manufacturer: IDT

Service: STHDA

Name: IDE Channel

Description: IDE Channel

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: atapi

Name: AMD PCI Express (3GIO) Filter Driver

Description: AMD PCI Express (3GIO) Filter Driver

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: Advanced Micro Devices Inc

Service: pci

Name: AMD Phenom™ II N930 Quad-Core Processor

Description: AMD-processor

Class Guid: {50127dc3-0f36-415e-a6cc-4cb3be910b65}

Manufacturer: Advanced Micro Devices

Service: AmdPPM

Name: KSecPkg

Description: KSecPkg

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: KSecPkg

Name: High Definition Audio-besturing

Description: High Definition Audio-besturing

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: HDAudBus

Name: USB-hoofdhub

Description: USB-hoofdhub

Class Guid: {36fc9e60-c465-11cf-8056-444553540000}

Manufacturer: (Standaard USB Host Controller)

Service: usbhub

Name: Koppelpuntbeheer

Description: Koppelpuntbeheer

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: mountmgr

Name: Standard OpenHCD USB Host-controller

Description: Standard OpenHCD USB Host-controller

Class Guid: {36fc9e60-c465-11cf-8056-444553540000}

Manufacturer: (Standaard USB Host Controller)

Service: usbohci

Name: Algemene schaduwkopie van volume

Description: Algemene schaduwkopie van volume

Class Guid: {533c5b84-ec70-11d2-9505-00c04f79deaf}

Manufacturer: Microsoft

Service:

Name: PCI standard host CPU bridge

Description: PCI standard host CPU bridge

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service:

Name: Samengesteld USB-apparaat

Description: Samengesteld USB-apparaat

Class Guid: {36fc9e60-c465-11cf-8056-444553540000}

Manufacturer: (Standaard USB Host Controller)

Service: usbccgp

Name: PCI standard PCI-to-PCI bridge

Description: PCI standard PCI-to-PCI bridge

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service: pci

Name: WAN-minipoort (IPv6)

Description: WAN-minipoort (IPv6)

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: NdisWan

Name: TCP/IP Registry Compatibility

Description: TCP/IP Registry Compatibility

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: tcpipreg

Name: Systeem-CMOS/Real-timeklok

Description: Systeem-CMOS/Real-timeklok

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service:

Name: Ancillary Function Driver for Winsock

Description: Ancillary Function Driver for Winsock

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: AFD

Name: Remote Access Auto Connection Driver

Description: Remote Access Auto Connection Driver

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: RasAcd

Name: Algemeen volume

Description: Algemeen volume

Class Guid: {71a27cdd-812a-11d0-bec7-08002be2092f}

Manufacturer: Microsoft

Service: volsnap

Name: NSI proxy service driver.

Description: NSI proxy service driver.

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: nsiproxy

Name: Link-Layer Topology Discovery Mapper I/O Driver

Description: Link-Layer Topology Discovery Mapper I/O Driver

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: lltdio

Name: Bluetooth L2CAP Interface

Description: Bluetooth L2CAP Interface

Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5}

Manufacturer: Broadcom Corp.

Service: btwl2cap

Name: USB-hoofdhub

Description: USB-hoofdhub

Class Guid: {36fc9e60-c465-11cf-8056-444553540000}

Manufacturer: (Standaard USB Host Controller)

Service: usbhub

Name: Autorisatiestuurprogramma van Windows Firewall

Description: Autorisatiestuurprogramma van Windows Firewall

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: mpsdrv

Name: HP Webcam

Description: USB-videoapparaat

Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}

Manufacturer: Microsoft

Service: usbvideo

Name: WAN-minipoort (PPPOE)

Description: WAN-minipoort (PPPOE)

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: RasPppoe

Name: Stuurprogramma voor ondersteuning van NetIO Legacy TDI

Description: Stuurprogramma voor ondersteuning van NetIO Legacy TDI

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: tdx

Name: Systeemkaart

Description: Systeemkaart

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service:

Name: Algemene schaduwkopie van volume

Description: Algemene schaduwkopie van volume

Class Guid: {533c5b84-ec70-11d2-9505-00c04f79deaf}

Manufacturer: Microsoft

Service:

Name: USB-hoofdhub

Description: USB-hoofdhub

Class Guid: {36fc9e60-c465-11cf-8056-444553540000}

Manufacturer: (Standaard USB Host Controller)

Service: usbhub

Name: ATI I/O Communications Processor PCI Bus-controller

Description: ATI I/O Communications Processor PCI Bus-controller

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: ATI

Service: pci

Name: Standard OpenHCD USB Host-controller

Description: Standard OpenHCD USB Host-controller

Class Guid: {36fc9e60-c465-11cf-8056-444553540000}

Manufacturer: (Standaard USB Host Controller)

Service: usbohci

Name: PCI standard host CPU bridge

Description: PCI standard host CPU bridge

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service:

Name: WAN-minipoort (PPTP)

Description: WAN-minipoort (PPTP)

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: PptpMiniport

Name: Beep

Description: Beep

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: Beep

Name: Systeemkaartbronnen

Description: Systeemkaartbronnen

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service:

Name: RDPCDD

Description: RDPCDD

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: RDPCDD

Name: Null

Description: Null

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: Null

Name: USB-hoofdhub

Description: USB-hoofdhub

Class Guid: {36fc9e60-c465-11cf-8056-444553540000}

Manufacturer: (Standaard USB Host Controller)

Service: usbhub

Name: VgaSave

Description: VgaSave

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: VgaSave

Name: AMD Phenom™ II N930 Quad-Core Processor

Description: AMD-processor

Class Guid: {50127dc3-0f36-415e-a6cc-4cb3be910b65}

Manufacturer: Advanced Micro Devices

Service: AmdPPM

Name: amdkmdag

Description: amdkmdag

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: amdkmdag

Name: WAN-minipoort (SSTP)

Description: WAN-minipoort (SSTP)

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: RasSstp

Name: Algemeen volume

Description: Algemeen volume

Class Guid: {71a27cdd-812a-11d0-bec7-08002be2092f}

Manufacturer: Microsoft

Service: volsnap

Name: RDP Encoder Mirror Driver

Description: RDP Encoder Mirror Driver

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: RDPENCDD

Name: Systeemkaartbronnen

Description: Systeemkaartbronnen

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service:

Name: Algemene schaduwkopie van volume

Description: Algemene schaduwkopie van volume

Class Guid: {533c5b84-ec70-11d2-9505-00c04f79deaf}

Manufacturer: Microsoft

Service:

Name: USB-hoofdhub

Description: USB-hoofdhub

Class Guid: {36fc9e60-c465-11cf-8056-444553540000}

Manufacturer: (Standaard USB Host Controller)

Service: usbhub

Name: Dynamisch Volumebeheer

Description: Dynamisch Volumebeheer

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: volmgrx

Name: esgiguard

Description: esgiguard

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: esgiguard

Name: Toetsenbordstuurprogramma voor Terminal Server

Description: Toetsenbordstuurprogramma voor Terminal Server

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service: TermDD

Name: Bluetooth Remote Control

Description: Bluetooth Remote Control

Class Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}

Manufacturer: Broadcom

Service: btwrchid

Name: Validity Sensor

Description: Validity Sensor (VFS301)

Class Guid: {53d29ef7-377c-4d14-864b-eb3a85769359}

Manufacturer: Validity Sensors, Inc.

Service: WinUSB

Name: Reflector Display Driver used to gain access to graphics data

Description: Reflector Display Driver used to gain access to graphics data

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: RDPREFMP

Name: ATI I/O Communications Processor SMBus-controller

Description: ATI I/O Communications Processor SMBus-controller

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: ATI

Service:

Name: Numerieke-gegevensprocessor

Description: Numerieke-gegevensprocessor

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service:

Name: Standard OpenHCD USB Host-controller

Description: Standard OpenHCD USB Host-controller

Class Guid: {36fc9e60-c465-11cf-8056-444553540000}

Manufacturer: (Standaard USB Host Controller)

Service: usbohci

Name: PCI standard host CPU bridge

Description: PCI standard host CPU bridge

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service:

Name: Broadcom 4313 (802.11b/g/n)

Description: Broadcom 4313 (802.11b/g/n)

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Broadcom

Service: BCM43XX

Name: Opslagvolumes

Description: Opslagvolumes

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: volsnap

Name: USB-hoofdhub

Description: USB-hoofdhub

Class Guid: {36fc9e60-c465-11cf-8056-444553540000}

Manufacturer: (Standaard USB Host Controller)

Service: usbhub

Name: Muisstuurprogramma voor Terminal Server

Description: Muisstuurprogramma voor Terminal Server

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service: TermDD

Name: Generic USB Hub

Description: Generic USB Hub

Class Guid: {36fc9e60-c465-11cf-8056-444553540000}

Manufacturer: (Generic USB Hub)

Service: usbhub

Name: Algemene schaduwkopie van volume

Description: Algemene schaduwkopie van volume

Class Guid: {533c5b84-ec70-11d2-9505-00c04f79deaf}

Manufacturer: Microsoft

Service:

Name: Link-Layer Topology Discovery Responder

Description: Link-Layer Topology Discovery Responder

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: rspndr

Name: Ingesloten controller die voldoet aan Microsoft ACPI

Description: Ingesloten controller die voldoet aan Microsoft ACPI

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service:

Name: Performance Counters for Windows Driver

Description: Performance Counters for Windows Driver

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: pcw

Name: msahci

Description: msahci

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: msahci

Name: Teller voor Plug en Play-apparatuur

Description: Teller voor Plug en Play-apparatuur

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service: swenum

Name: Virtual WiFi Filter Driver

Description: Virtual WiFi Filter Driver

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: vwififlt

Name: Common Log (CLFS)

Description: Common Log (CLFS)

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: CLFS

Name: Algemene schaduwkopie van volume

Description: Algemene schaduwkopie van volume

Class Guid: {533c5b84-ec70-11d2-9505-00c04f79deaf}

Manufacturer: Microsoft

Service:

Name: Accu die voldoet aan Microsoft ACPI-besturingsmethode

Description: Accu die voldoet aan Microsoft ACPI-besturingsmethode

Class Guid: {72631e54-78a4-11d0-bcf7-00aa00b7b32a}

Manufacturer: Microsoft

Service: CmBatt

Name: Infraroodapparaten voor consumenten

Description: Infraroodapparaten voor consumenten

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: circlass

Name: PEAUTH

Description: PEAUTH

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: PEAUTH

Name: AMD Phenom™ II N930 Quad-Core Processor

Description: AMD-processor

Class Guid: {50127dc3-0f36-415e-a6cc-4cb3be910b65}

Manufacturer: Advanced Micro Devices

Service: AmdPPM

Name: Standard AHCI 1.0 Serial ATA Controller

Description: Standard AHCI 1.0 Serial ATA Controller

Class Guid: {4d36e96a-e325-11ce-bfc1-08002be10318}

Manufacturer: Standard AHCI 1.0 Serial ATA Controller

Service: msahci

Name: PCI standard ISA bridge

Description: PCI standard ISA bridge

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service: msisadrv

Name: CNG

Description: CNG

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: CNG

Name: PCI standard host CPU bridge

Description: PCI standard host CPU bridge

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service:

Name: IPv6 ARP-stuurprogramma voor externe toegang

Description: IPv6 ARP-stuurprogramma voor externe toegang

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: Wanarpv6

Name: ATA Channel 0

Description: IDE-kanaal

Class Guid: {4d36e96a-e325-11ce-bfc1-08002be10318}

Manufacturer: (Standaard IDE ATA/ATAPI-controllers)

Service: atapi

Name: ACPI-aan/uit-knop

Description: ACPI-aan/uit-knop

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service:

Name: Algemene schaduwkopie van volume

Description: Algemene schaduwkopie van volume

Class Guid: {533c5b84-ec70-11d2-9505-00c04f79deaf}

Manufacturer: Microsoft

Service:

Name: UMBus Root Bus Enumerator

Description: UMBus Root Bus Enumerator

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: umbus

Name: SBRE

Description: SBRE

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: SBRE

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Algemene schaduwkopie van volume

Description: Algemene schaduwkopie van volume

Class Guid: {533c5b84-ec70-11d2-9505-00c04f79deaf}

Manufacturer: Microsoft

Service:

Name: msisadrv

Description: msisadrv

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: msisadrv

Name: Microsoft Virtual Drive Enumerator-stuurprogramma

Description: Microsoft Virtual Drive Enumerator-stuurprogramma

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service: vdrvroot

Name: Kernel Mode Driver Frameworks service

Description: Kernel Mode Driver Frameworks service

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: Wdf01000

Name: ACPI-deksel

Description: ACPI-deksel

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service:

Name: Security Driver

Description: Security Driver

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: secdrv

Name: avast! HardwareID

Description: avast! HardwareID

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: aswHwid

Name: ATA Channel 1

Description: IDE-kanaal

Class Guid: {4d36e96a-e325-11ce-bfc1-08002be10318}

Manufacturer: (Standaard IDE ATA/ATAPI-controllers)

Service: atapi

Name: QoS-pakketplanner

Description: QoS-pakketplanner

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: Psched

Name: System Attribute Cache

Description: System Attribute Cache

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: discache

Name: Volumebeheer

Description: Volumebeheer

Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}

Manufacturer: (standaardsysteemapparaten)

Service: volmgr

Name: Filterstuurprogramma Bitlocker-stationsvergrendeling

Description: Filterstuurprogramma Bitlocker-stationsvergrendeling

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: fvevol

Name: WFP Lightweight Filter

Description: WFP Lightweight Filter

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: WfpLwf

Name: Standaard Enhanced PCI naar USB-hostcontroller

Description: Standaard Enhanced PCI naar USB-hostcontroller

Class Guid: {36fc9e60-c465-11cf-8056-444553540000}

Manufacturer: (Standaard USB Host Controller)

Service: usbehci

========================= Memory info: ===================================

Percentage of memory in use: 41%

Total physical RAM: 3834.9 MB

Available physical RAM: 2240.06 MB

Total Pagefile: 7667.98 MB

Available Pagefile: 5691.28 MB

Total Virtual: 4095.88 MB

Available Virtual: 3965.53 MB

========================= Partitions: =====================================

1 Drive c: () (Fixed) (Total:678.07 GB) (Free:495.03 GB) NTFS

2 Drive d: (RECOVERY) (Fixed) (Total:20.27 GB) (Free:2.92 GB) NTFS

4 Drive f: (HP_TOOLS) (Fixed) (Total:0.1 GB) (Free:0.09 GB) FAT32

========================= Users: ========================================

Gebruikersaccounts voor \\HPSUSYROBIN

Administrator Gast Susy&Robin

De opdracht is voltooid.

========================= Minidump Files ==================================

No minidump file found

========================= Restore Points ==================================

01-05-2014 19:10:01 Windows Update

04-05-2014 17:00:17 Windows Back-up

08-05-2014 11:48:52 Installed osu!

08-05-2014 19:13:23 avast! antivirus system restore point

08-05-2014 20:43:11 avast! antivirus system restore point

08-05-2014 22:15:32 Removed osu!

10-05-2014 22:20:48 avast! antivirus system restore point

**** End of log ****

#23
CatBee

Posted 11 May 2014 - 11:08 AM

Member

Topic Starter
Member
65 posts

Run date: 2014-05-11 18:36:10

-----------------------------

18:36:10.140 OS Version: Windows x64 6.1.7601 Service Pack 1

18:36:10.140 Number of processors: 4 586 0x503

18:36:10.140 ComputerName: HPSUSYROBIN UserName: Susy&Robin

18:36:11.980 Initialize success

18:36:15.600 AVAST engine defs: 14041700

18:38:19.168 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0

18:38:19.168 Disk 0 Vendor: TOSHIBA_MK7559GSM GL002C Size: 715404MB BusType: 11

18:38:19.324 Disk 0 MBR read successfully

18:38:19.324 Disk 0 MBR scan

18:38:19.324 Disk 0 unknown MBR code

18:38:19.339 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 199 MB offset 2048

18:38:19.355 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 694343 MB offset 409600

18:38:19.386 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 20758 MB offset 1422424064

18:38:19.402 Disk 0 Partition 4 00 0C FAT32 LBA MSDOS5.0 102 MB offset 1464936448

18:38:19.526 Disk 0 scanning C:\Windows\system32\drivers

18:38:30.805 Service scanning

18:39:12.785 Modules scanning

18:39:14.220 AVAST engine scan C:\Windows

18:39:18.463 AVAST engine scan C:\Windows\system32

18:42:36.194 AVAST engine scan C:\Windows\system32\drivers

18:42:52.043 AVAST engine scan C:\Users\Susy&Robin

18:54:20.192 AVAST engine scan C:\ProgramData

19:03:00.499 Scan finished successfully

19:05:32.990 Disk 0 MBR has been saved successfully to "C:\Users\Susy&Robin\Desktop\MBR.dat"

19:05:32.990 The log file has been saved successfully to "C:\Users\Susy&Robin\Desktop\aswMBR.txt"

#24
CatBee

Posted 11 May 2014 - 11:12 AM

Member

Topic Starter
Member
65 posts

And the Fix button wasnt enabled

#25
RKinner

Posted 11 May 2014 - 12:12 PM

Malware Expert

Expert
24,701 posts

Clear the Java Cache by following the instructions on

http://www.java.com/...lugin_cache.xml

You have the latest Java but you also have older obsolete and dangerous versions.

First go into Control Panel, Add/Remove Software (XP) or Programs and Features (Vista/Win 7) and remove any old versions (which may call themselves: Java Runtime, Runtime Environment, Runtime, JRE, Java Virtual Machine, Virtual Machine, Java VM, JVM, VM, J2RE, J2SE)

I see:

Java™ 6 Update 20 (64-bit) (Version: 6.0.200)

Java™ 6 Update 33 (Version: 6.0.330)

Above won't fix anything but I hate to see old Java. Makes you a sitting duck for malware infections if you ever do get back on line.

Leftover from adaware:

Error: (05/11/2014 03:51:45 PM) (Source: Service Control Manager) (User: )

Description: De volgende opstartstuurprogramma's zijn niet geladen:

SBRE

Open an elevated command prompt and type:

sc  delete  SBRE

then hit Enter.

AddLegacyDriverFiles: Unable to back up image of binary qtipxncm.

qtipxncm has no hits when googled so this may be malware even tho aswmbr didn't find anything. I'm not supposed to run OTL and FRST outside of the malware forums so send me the logs from these two in a PM.

Please download Farbar Recovery Scan Tool

http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/

and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.

Press Scan button.

It will produce a log called FRST.txt in the same directory the tool is run from.

Please copy and paste log back here.

The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your PM.

Download OTL from

http://www.geekstogo.com/forum/files/file/398-otl-oldtimers-list-it/

and Save it to your desktop.

Run OTL (Vista or Win 7 => right click and Run As Administrator)

select the All option in the Extra Registry group then Run Scan.

You should get two logs. Please copy and paste both of them into a PM

Finally let's run Combofix:

ComboFix

:!: It must be saved to your desktop, do not run it from your browser:!:

:!: Disable your Antivirus software when downloading or running Combofix. If it has Script Blocking features, please disable these as well. See: http://www.bleepingc...opic114351.html

Download and Save this file -- to your Desktop -- from either of these two sources:

http://download.blee...Bs/ComboFix.exe

http://subs.geekstogo.com/ComboFix.exe

Rightclick on ComboFix and select Run As Administrator to start the program.

* :!: Important: Have no other programs running. Your Task Bar should be clear of any program entries including your Browser.

* A window may open with a series of Disclaimers. Accept the Disclaimers to start the fix.

Do not touch your mouse/keyboard until the scan has completed, as this may cause the process to stall or your computer to lock. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop. Even when ComboFix appears to be doing nothing, look at your Drive light. If it is flashing, Combofix is still at work.

A file will be created at => C:\Combofix\Combofix.txt. I'll need to see that in your reply.

#26
CatBee

Posted 11 May 2014 - 12:25 PM

Member

Topic Starter
Member
65 posts

Here is the ComboFix log:

ComboFix 14-05-10.01 - Susy&Robin 11-05-2014 19:56:19.2.4 - x64

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.3835.1482 [GMT 2:00]

Gestart vanuit: c:\users\Susy&Robin\Desktop\ComboFix.exe

AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}

SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

c:\programdata\1380984072.bdinstall.bin

c:\users\Susy&Robin\BIT70DB.tmp

(((((((((((((((((((( Bestanden Gemaakt van 2014-04-11 to 2014-05-11 ))))))))))))))))))))))))))))))

2014-05-11 18:15 . 2014-05-11 18:15 -------- d-----w- c:\users\Public\AppData\Local\temp

2014-05-11 18:15 . 2014-05-11 18:15 -------- d-----w- c:\users\Default\AppData\Local\temp

2014-05-11 18:15 . 2014-05-11 18:15 -------- d-----w- c:\users\Administrator\AppData\Local\temp

2014-05-11 16:09 . 2014-05-11 16:09 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{FB5FEA3F-D066-44E3-823A-240861A07D46}\offreg.dll

2014-05-10 22:22 . 2014-05-10 22:22 85328 ----a-w- c:\windows\system32\drivers\aswStm.sys

2014-05-10 22:22 . 2014-05-10 22:22 208416 ----a-w- c:\windows\system32\drivers\aswVmm.sys

2014-05-10 22:22 . 2014-05-10 22:22 1039096 ----a-w- c:\windows\system32\drivers\aswSnx.sys

2014-05-10 22:22 . 2014-05-10 22:22 423240 ----a-w- c:\windows\system32\drivers\aswSP.sys

2014-05-10 22:22 . 2014-05-10 22:22 65776 ----a-w- c:\windows\system32\drivers\aswRvrt.sys

2014-05-10 22:22 . 2014-05-10 22:22 79184 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys

2014-05-10 22:22 . 2014-05-10 22:22 93568 ----a-w- c:\windows\system32\drivers\aswRdr2.sys

2014-05-10 22:22 . 2014-05-10 22:22 334648 ----a-w- c:\windows\system32\aswBoot.exe

2014-05-10 22:22 . 2014-05-10 22:22 43152 ----a-w- c:\windows\avastSS.scr

2014-05-10 20:32 . 2014-05-10 20:32 -------- d-----w- c:\programdata\AVAST Software

2014-05-09 21:25 . 2014-05-09 21:25 -------- d-----w- c:\program files\CCleaner

2014-05-09 21:04 . 2014-05-09 21:04 -------- d-----w- c:\users\Susy&Robin\AppData\Roaming\IObit

2014-05-09 21:03 . 2014-05-09 21:03 -------- d-----w- c:\programdata\IObit

2014-05-09 21:03 . 2014-05-09 21:03 -------- d-----w- c:\program files (x86)\IObit

2014-05-08 11:50 . 2014-05-08 22:16 -------- d-----w- c:\program files (x86)\osu!

2014-05-01 19:11 . 2014-04-29 14:01 23547904 ----a-w- c:\windows\system32\mshtml.dll

2014-05-01 19:11 . 2014-04-29 13:40 2724864 ----a-w- c:\windows\system32\mshtml.tlb

2014-05-01 19:11 . 2014-04-29 12:34 2724864 ----a-w- c:\windows\SysWow64\mshtml.tlb

2014-05-01 19:11 . 2014-05-01 19:11 -------- d-s---w- c:\windows\system32\CompatTel

2014-05-01 19:11 . 2014-04-17 03:31 10651704 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{FB5FEA3F-D066-44E3-823A-240861A07D46}\mpengine.dll

2014-05-01 19:09 . 2014-04-14 02:24 465408 ----a-w- c:\windows\system32\aepdu.dll

2014-05-01 19:09 . 2014-04-14 02:19 424448 ----a-w- c:\windows\system32\aeinv.dll

2014-04-18 17:54 . 2014-05-10 22:22 29208 ----a-w- c:\windows\system32\drivers\aswHwid.sys

2014-04-18 17:29 . 2014-04-18 17:29 -------- d-----w- c:\users\Susy&Robin\AppData\Local\TeamSpeak 3 Client

2014-04-18 17:02 . 2014-04-18 17:05 -------- d-----w- c:\program files (x86)\Mumble

2014-04-18 16:58 . 2014-04-18 16:59 -------- d-----w- c:\program files (x86)\Pidgin

2014-04-17 14:57 . 2014-04-17 14:57 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll

2014-04-15 15:20 . 2014-04-15 15:20 -------- d-----w- c:\program files (x86)\CCP

2014-04-15 13:18 . 2014-04-15 13:18 -------- d-----w- c:\users\Susy&Robin\AppData\Local\CCP

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

2014-04-28 17:40 . 2013-12-11 18:40 692400 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe

2014-04-28 17:40 . 2011-07-04 14:26 70832 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2014-04-09 02:24 . 2014-04-09 02:24 88576 ----a-w- c:\windows\SysWow64\rzdevinfo.dll

2014-04-09 02:24 . 2014-04-09 02:24 154624 ----a-w- c:\windows\SysWow64\rztouchdll.dll

2014-04-09 02:24 . 2014-04-09 02:24 117248 ----a-w- c:\windows\SysWow64\rzdisplaydll.dll

2014-04-09 02:24 . 2014-04-09 02:24 856576 ----a-w- c:\windows\SysWow64\rzdevicedll.dll

2014-04-09 02:24 . 2014-04-09 02:24 306688 ----a-w- c:\windows\SysWow64\rzaudiodll.dll

2014-04-08 22:33 . 2012-01-20 17:49 90655440 ----a-w- c:\windows\system32\MRT.exe

2014-03-31 07:35 . 2011-08-28 01:24 270496 ------w- c:\windows\system32\MpSigStub.exe

2014-03-30 18:30 . 2013-09-05 15:46 316312 ----a-w- c:\windows\system32\drivers\RapportKE64.sys

2014-03-06 09:31 . 2014-04-08 22:38 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll

2014-03-06 08:59 . 2014-04-08 22:38 66048 ----a-w- c:\windows\system32\iesetup.dll

2014-03-06 08:57 . 2014-04-08 22:38 548352 ----a-w- c:\windows\system32\vbscript.dll

2014-03-06 08:57 . 2014-04-08 22:38 48640 ----a-w- c:\windows\system32\ieetwproxystub.dll

2014-03-06 08:53 . 2014-04-08 22:38 2767360 ----a-w- c:\windows\system32\iertutil.dll

2014-03-06 08:40 . 2014-04-08 22:38 51200 ----a-w- c:\windows\system32\jsproxy.dll

2014-03-06 08:39 . 2014-04-08 22:38 33792 ----a-w- c:\windows\system32\iernonce.dll

2014-03-06 08:32 . 2014-04-08 22:39 574976 ----a-w- c:\windows\system32\ieui.dll

2014-03-06 08:29 . 2014-04-08 22:38 139264 ----a-w- c:\windows\system32\ieUnatt.exe

2014-03-06 08:29 . 2014-04-08 22:38 111616 ----a-w- c:\windows\system32\ieetwcollector.exe

2014-03-06 08:28 . 2014-04-08 22:38 752640 ----a-w- c:\windows\system32\jscript9diag.dll

2014-03-06 08:15 . 2014-04-08 22:38 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe

2014-03-06 08:11 . 2014-04-08 22:38 5784064 ----a-w- c:\windows\system32\jscript9.dll

2014-03-06 08:09 . 2014-04-08 22:38 453120 ----a-w- c:\windows\system32\dxtmsft.dll

2014-03-06 08:03 . 2014-04-08 22:38 586240 ----a-w- c:\windows\system32\ie4uinit.exe

2014-03-06 08:02 . 2014-04-08 22:38 61952 ----a-w- c:\windows\SysWow64\iesetup.dll

2014-03-06 08:02 . 2014-04-08 22:38 455168 ----a-w- c:\windows\SysWow64\vbscript.dll

2014-03-06 08:01 . 2014-04-08 22:38 51200 ----a-w- c:\windows\SysWow64\ieetwproxystub.dll

2014-03-06 07:56 . 2014-04-08 22:38 38400 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll

2014-03-06 07:48 . 2014-04-08 22:38 195584 ----a-w- c:\windows\system32\msrating.dll

2014-03-06 07:46 . 2014-04-08 22:38 4254720 ----a-w- c:\windows\SysWow64\jscript9.dll

2014-03-06 07:42 . 2014-04-08 22:38 296960 ----a-w- c:\windows\system32\dxtrans.dll

2014-03-06 07:38 . 2014-04-08 22:38 112128 ----a-w- c:\windows\SysWow64\ieUnatt.exe

2014-03-06 07:36 . 2014-04-08 22:38 592896 ----a-w- c:\windows\SysWow64\jscript9diag.dll

2014-03-06 07:21 . 2014-04-08 22:38 628736 ----a-w- c:\windows\system32\msfeeds.dll

2014-03-06 07:13 . 2014-04-08 22:38 32256 ----a-w- c:\windows\SysWow64\JavaScriptCollectionAgent.dll

2014-03-06 07:11 . 2014-04-08 22:38 2043904 ----a-w- c:\windows\system32\inetcpl.cpl

2014-03-06 06:53 . 2014-04-08 22:38 13551104 ----a-w- c:\windows\system32\ieframe.dll

2014-03-06 06:40 . 2014-04-08 22:38 1967104 ----a-w- c:\windows\SysWow64\inetcpl.cpl

2014-03-06 06:22 . 2014-04-08 22:38 2260480 ----a-w- c:\windows\system32\wininet.dll

2014-03-06 05:58 . 2014-04-08 22:38 1400832 ----a-w- c:\windows\system32\urlmon.dll

2014-03-06 05:50 . 2014-04-08 22:38 846336 ----a-w- c:\windows\system32\ieapfltr.dll

2014-03-06 05:41 . 2014-04-08 22:38 1789440 ----a-w- c:\windows\SysWow64\wininet.dll

2014-03-04 09:44 . 2014-04-08 22:30 243712 ----a-w- c:\windows\system32\wow64.dll

2014-03-04 09:44 . 2014-04-08 22:30 362496 ----a-w- c:\windows\system32\wow64win.dll

2014-03-04 09:44 . 2014-04-08 22:30 13312 ----a-w- c:\windows\system32\wow64cpu.dll

2014-03-04 09:44 . 2014-04-08 22:30 16384 ----a-w- c:\windows\system32\ntvdm64.dll

2014-03-04 09:44 . 2014-04-08 22:30 1163264 ----a-w- c:\windows\system32\kernel32.dll

2014-03-04 09:17 . 2014-04-08 22:30 14336 ----a-w- c:\windows\SysWow64\ntvdm64.dll

2014-03-04 09:17 . 2014-04-08 22:30 44032 ----a-w- c:\windows\apppatch\acwow64.dll

2014-03-04 09:16 . 2014-04-08 22:30 25600 ----a-w- c:\windows\SysWow64\setup16.exe

2014-03-04 09:16 . 2014-04-08 22:30 5120 ----a-w- c:\windows\SysWow64\wow32.dll

2014-03-04 08:09 . 2014-04-08 22:30 7680 ----a-w- c:\windows\SysWow64\instnm.exe

2014-03-04 08:09 . 2014-04-08 22:30 2048 ----a-w- c:\windows\SysWow64\user.exe

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"HPAdvisorDock"="c:\program files (x86)\Hewlett-Packard\HP Advisor\Dock\HPAdvisorDock.exe" [2010-02-09 1712184]

"LightScribe Control Panel"="c:\program files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe" [2010-05-19 2736128]

"ISUSPM"="c:\programdata\Macrovision\FLEXnet Connect\6\ISUSPM.exe" [2008-10-20 210208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"Easybits Recovery"="c:\program files (x86)\EasyBits For Kids\ezRecover.exe" [2010-06-02 61112]

"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-04-16 98304]

"HP Quick Launch"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe" [2011-06-14 587320]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]

"Razer Synapse"="c:\program files (x86)\Razer\Synapse\RzSynapse.exe" [2014-04-17 585048]

"KrakenLauncher"="c:\program files (x86)\Razer\Razer_Kraken_Driver\Drivers\SysAudio\KrakenSysAudioLauncher.exe" [2013-07-25 865624]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]

"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-05-10 3873704]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-6-8 1128224]

LOLRecorder.lnk - c:\program files (x86)\LOLReplay\LOLRecorder.exe -minimize [2014-3-21 494592]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

"HideFastUserSwitching"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]

"EnableShellExecuteHooks"= 1 (0x1)

[hkey_local_machine\software\Wow6432Node\microsoft\windows\currentversion\explorer\ShellExecuteHooks]

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"LoadAppInit_DLLs"=1 (0x1)

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Notification Packages REG_MULTI_SZ DPPassFilter scecli

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsMain]

@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsScanner]

@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]

@=""

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe"

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"

R1 SBRE;SBRE;c:\windows\system32\drivers\SBREdrv.sys;c:\windows\SYSNATIVE\drivers\SBREdrv.sys [x]

R2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]

R2 BBSvc;BingBar Service;c:\program files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.exe;c:\program files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.exe [x]

R2 BsFileScan;BullGuard on-access service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]

R2 BsMailProxy;BullGuard e-mail monitoring service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]

R2 BsMain;BullGuard main service;c:\windows\System32\SvcHost.exe;c:\windows\SYSNATIVE\SvcHost.exe [x]

R2 BsScanner;BullGuard scanning service;c:\program files\BullGuard Ltd\BullGuard\BullGuardScanner.exe;c:\program files\BullGuard Ltd\BullGuard\BullGuardScanner.exe [x]

R2 BsUpdate;BullGuard update service;c:\program files\BullGuard Ltd\BullGuard\BullGuardUpdate.exe;c:\program files\BullGuard Ltd\BullGuard\BullGuardUpdate.exe [x]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]

R3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys;c:\windows\SYSNATIVE\DRIVERS\amdiox64.sys [x]

R3 aswTap;avast! SecureLine TAP Adapter v3;c:\windows\system32\DRIVERS\aswTap.sys;c:\windows\SYSNATIVE\DRIVERS\aswTap.sys [x]

R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x]

R3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\DRIVERS\ew_hwusbdev.sys;c:\windows\SYSNATIVE\DRIVERS\ew_hwusbdev.sys [x]

R3 huawei_cdcacm;huawei_cdcacm;c:\windows\system32\DRIVERS\ew_jucdcacm.sys;c:\windows\SYSNATIVE\DRIVERS\ew_jucdcacm.sys [x]

R3 huawei_enumerator;huawei_enumerator;c:\windows\system32\DRIVERS\ew_jubusenum.sys;c:\windows\SYSNATIVE\DRIVERS\ew_jubusenum.sys [x]

R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]

R3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys;c:\windows\SYSNATIVE\DRIVERS\netw5v64.sys [x]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]

R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]

R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]

R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTAZL6.SYS [x]

R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTDPV6.SYS [x]

R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTCNXT6.SYS [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]

R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]

R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]

R3 WinRing0_1_2_0;WinRing0_1_2_0;c:\program files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys;c:\program files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [x]

R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys;c:\windows\SYSNATIVE\DRIVERS\yk62x64.sys [x]

R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]

S0 aswRvrt;avast! Revert; [x]

S0 aswVmm;avast! VM Monitor; [x]

S0 RapportKE64;RapportKE64;c:\windows\System32\Drivers\RapportKE64.sys;c:\windows\SYSNATIVE\Drivers\RapportKE64.sys [x]

S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]

S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]

S1 RapportCerberus_59849;RapportCerberus_59849;c:\programdata\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_59849.sys;c:\programdata\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_59849.sys [x]

S1 RapportEI64;RapportEI64;c:\program files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys;c:\program files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [x]

S1 RapportPG64;RapportPG64;c:\program files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys;c:\program files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys [x]

S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe;c:\program files\IDT\WDM\AESTSr64.exe [x]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]

S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]

S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]

S2 ezSharedSvc;Easybits Services for Windows;c:\windows\System32\ezSharedSvcHost.exe;c:\windows\SYSNATIVE\ezSharedSvcHost.exe [x]

S2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [x]

S2 HP Wireless Assistant Service;HP Wireless Assistant Service;c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe;c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [x]

S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe;c:\windows\SYSNATIVE\Hpservice.exe [x]

S2 HPWMISVC;HPWMISVC;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [x]

S2 RapportMgmtService;Rapport Management Service;c:\program files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe;c:\program files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [x]

S2 RzKLService;RzKLService;c:\program files (x86)\Razer\Razer Game Booster\RzKLService.exe;c:\program files (x86)\Razer\Razer Game Booster\RzKLService.exe [x]

S2 vcsFPService;Validity VCS Fingerprint Service;c:\windows\system32\vcsFPService.exe;c:\windows\SYSNATIVE\vcsFPService.exe [x]

S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]

S3 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.exe;c:\program files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.exe [x]

S3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x]

S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]

S3 clwvd;HP Webcam Splitter;c:\windows\system32\DRIVERS\clwvd.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd.sys [x]

S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]

--- Andere Services/Drivers In Geheugen ---

*NewlyCreated* - ASWMBR

*NewlyCreated* - ASWRVRT

*Deregistered* - aswMBR

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]

2010-05-19 08:36 451872 ----a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]

2014-04-28 20:07 1078088 ----a-w- c:\program files (x86)\Google\Chrome\Application\34.0.1847.131\Installer\chrmstp.exe

Inhoud van de 'Gedeelde Taken' map

2014-05-11 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-12 17:40]

2014-05-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-12-05 17:42]

2014-05-11 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-12-05 17:42]

2014-04-30 c:\windows\Tasks\HPCeeScheduleForHPSUSYROBIN$.job

- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-01-05 01:53]

2014-05-10 c:\windows\Tasks\HPCeeScheduleForSusy&Robin.job

- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-01-05 01:53]

--------- X64 Entries -----------

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]

@="{472083B0-C522-11CF-8763-00608CC02F24}"

[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]

2014-05-10 22:22 290888 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2010-06-09 487424]

"SmartMenu"="c:\program files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" [2010-01-20 611896]

"HPWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe" [2010-06-18 8192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]

"NCPluginUpdater"="c:\program files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" [2014-04-22 21720]

------- Bijkomende Scan -------

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://google.com/

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyOverride = *.local

uSearchAssistant =

- - - - ORPHANS VERWIJDERD - - - -

Wow6432Node-HKLM-Run-<NO NAME> - (no file)

HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start

HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe

HKLM-Run-InstallerLauncher - c:\program files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\setuplauncher.exe

AddRemove-EasyBits Magic Desktop - c:\windows\system32\ezMDUninstall.exe

AddRemove-{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE} - c:\program files (x86)\InstallShield Installation Information\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}\setup.exe

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions]

@Denied: (2) (LocalSystem)

"{8DCB7100-DF86-4384-8842-8FA844297B3F}"=hex:51,66,7a,6c,4c,1d,38,12,6e,72,d8,

89,b4,91,ea,06,f7,54,cc,e8,41,77,3f,2b

"{18DF081C-E8AD-4283-A596-FA578C2EBDC3}"=hex:51,66,7a,6c,4c,1d,38,12,72,0b,cc,

1c,9f,a6,ed,07,da,80,b9,17,89,70,f9,d7

"{6EBF7485-159F-4BFF-A14F-B9E3AAC4465B}"=hex:51,66,7a,6c,4c,1d,38,12,eb,77,ac,

6a,ad,5b,91,0e,de,59,fa,a3,af,9a,02,4f

"{9030D464-4C02-4ABF-8ECC-5164760863C6}"=hex:51,66,7a,6c,4c,1d,38,12,0a,d7,23,

94,30,02,d1,0f,f1,da,12,24,73,56,27,d2

"{D2CE3E00-F94A-4740-988E-03DC2F38C34F}"=hex:51,66,7a,6c,4c,1d,38,12,6e,3d,dd,

d6,78,b7,2e,02,e7,98,40,9c,2a,66,87,5b

"{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,38,12,2a,03,db,

df,77,ea,35,06,c3,62,df,65,c4,9b,cc,bd

[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]

@Denied: (2) (LocalSystem)

"Timestamp"=hex:6f,c9,66,8c,f5,c6,cc,01

[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]

@Denied: (2) (LocalSystem)

"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,

d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,f5,f1,a4,c7,60,27,53,42,90,01,7c,\

"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,

d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,f5,f1,a4,c7,60,27,53,42,90,01,7c,\

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_13_0_0_206_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_13_0_0_206_ActiveX.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_13_0_0_206_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_13_0_0_206_ActiveX.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_206.ocx"

"ThreadingModel"="Apartment"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.13"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_206.ocx, 1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_206.ocx"

"ThreadingModel"="Apartment"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_206.ocx, 1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

Voltooingstijd: 2014-05-11 20:22:17

ComboFix-quarantined-files.txt 2014-05-11 18:22

Pre-Run: 531.281.248.256 bytes beschikbaar

Post-Run: 530.361.802.752 bytes beschikbaar

- - End Of File - - 6E26A38EA2DB7C45558F4E8A583B0852

8F401FAB9E5EAC873EDDCA10434209F3

#27
RKinner

Posted 11 May 2014 - 12:49 PM

Malware Expert

Expert
24,701 posts

Copy the text between the lines of stars by highlighting and Ctrl + c.

******************************************

DirLook::

C:\Program Files\Common

%user%\library

Driver::

SBRE

BBSvc

BsFileScan

BsMailProxy

BsMain

BsScanner

BsUpdate

BBUpdate

esgiguard

Registry::

[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsMain]

[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsScanner]

[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]

******************************************

Now open notepad (Start, Run, notepad, OK) and Ctrl + V to paste the text into Notepad. Make sure you got it all then File, SAVE AS, (to your Desktop), CFScript , OK. Close notepad. (Overwrite the old one if it's still there.) You should see a file CFScript.txt on your desktop.

Pause your anti-virus.

Drag CFScript.txt over to Combofix and let go Combofix should start on its own.

Post the new log.

Would it be possible to uninstall the Trusteer Rapport program? Lot of problems reported with it.

#28
CatBee

Posted 11 May 2014 - 01:17 PM

Member

Topic Starter
Member
65 posts

I'm doing the OTL thing now after that i'll send you the log and do you want me to run another Combofix scan? or do i do that text between the lines after the OTL is done?

and sure i'll uninstall Trusteer Rapport after the scan is done.