Netwerkcentrum en system restore probs

[Barty001]

Netwerkcentrum icoon blijft rood in systeembalk. Als ik NTWcentrum open volgende melding:

Onbekend
De service die nodig is om de status te detecteren, is uitgeschakeld. Wat ik ook probeer ik krijg daar geen verbinding meer te zien
De pc is verbonden met het internet

Wanneer ik systeem herstel open verdwijnt de mogelijkheid direct om herstelpunten te selecteren. ook telkens ik ereen maak na sluiten en openen, is het herstelpunt weer verdwenen
Er zijn geen herstelpunten op de systeemschijf van uw pc gemaak. Dit is de melding die je ziet als ik rstrui.exe open.

Heb al van alles geprobeerd en gedaan maar niks lijkt te helpen

Deze melding ben ik ook tegengekomen:

A shadow copy could not be created for the following reasons:
The shadow copy provider had an unexpected error while trying to process the
specified operation. (0x8004230F)."

Please kan iemand dit vervelende probleem oplossen aub?



DDS (Ver_09-01-07.01) - NTFSx86
Run by Administrator at 1:47:28,51 on za 10/01/2009
Internet Explorer: 8.0.6001.18241 BrowserJavaVersion: 1.6.0_10
Microsoft® Windows Vista™ Ultimate 6.0.6001.1.1252.32.1033.18.1023.100 [GMT 1:00]

AV: Symantec Endpoint Protection *On-access scanning disabled* (Outdated)
FW: Symantec Endpoint Protection *disabled*

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Program Files\Windows SteadyState\SCTSvc.exe
C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k apphost
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Windows\system32\inetsrv\inetinfo.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
C:\Program Files\AddinForUNCFAT\UNCFATDMS.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k regsvc
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Windows\System32\snmptrap.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe
C:\Windows\System32\TUProgSt.exe
C:\Windows\system32\svchost.exe -k iissvcs
C:\Program Files\WindowsAdvisorBeta\WindowsAdvisorBetaSrvHost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\RUNDLL32.EXE
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Windows\system32\iashost.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\Program Files\SiSoftware\SiSoftware Sandra Professional Home XII.SP2c\RpcAgentSrv.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\rundll32.exe
C:\Windows\system32\taskeng.exe
C:\Windows\System32\Magnify.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe
C:\Program Files\Trust\Wireless Optical Deskset 310KD\Keyboard\Ikeymain.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Labtec\Desktop\6.0\Mouse32V.exe
C:\Windows\System32\taskmgr.exe
C:\Program Files\JGsoft\EditPadLite\EditPadLite.exe
C:\Windows\System32\svchost.exe -k LocalService
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\System32\notepad.exe
E:\Programmas\Te installeren Programma's en Toepassingen\Microsoft VISTA Updates and Patches Tools\Computer helemaal schoonmaken\dds.scr
C:\Windows\system32\conime.exe
C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uSearch Bar = Preserve
uStart Page = https://ssl.rapidshare.com/cgi-bin/collectorszone.cgi
uInternet Settings,ProxyOverride = localhost;127.0.0.1
mWinlogon: Userinit=c:\windows\system32\userinit.exe
BHO: IE7Pro BHO: {00011268-e188-40df-a514-835fcd78b1bf} - c:\program files\iepro\iepro.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
BHO: BitComet Helper: {39f7e362-828a-4b5a-bcaf-5b79bfdfea60} - c:\program files\bitcomet\tools\BitCometBHO_1.2.6.26.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: Click-to-Call BHO: {5c255c8a-e604-49b4-9d64-90988571cecb} - c:\program files\windows live\messenger\wlchtc.dll
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SearchHelper.dll
BHO: RoboForm: {724d43a9-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\roboform.dll
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: Windows Live Aanmelden - Help: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: FoxmarksDLLBHO Class: {a2a71aba-3939-43b2-bd8f-8c1767ef9020} - c:\program files\foxmarks\ie extension\foxmarksdll.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\googletoolbar1.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\4.1.805.4472\swg.dll
BHO: Explorer Breadcrumbs Helper Class: {db5fc78c-0d12-448b-a0b0-db0f0e6b67db} - c:\program files\minimalist\explorer breadcrumbs\BCToolbar.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: Google Gears Helper: {e0fefe40-fbf9-42ae-ba58-794ca7e3fb53} - c:\program files\google\google gears\internet explorer\0.5.4.2\gears.dll
BHO: FlashFXP Helper for Internet Explorer: {e5a1691b-d188-4419-ad02-90002030b8ee} - c:\progra~1\flashfxp\IEFlash.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
TB: &RoboForm: {724d43a0-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\roboform.dll
TB: Explorer Breadcrumbs: {a3eb65ec-d9b4-4dc1-88af-0c7a21ebe5f9} - c:\program files\minimalist\explorer breadcrumbs\BCToolbar.dll
TB: &Google: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\googletoolbar1.dll
TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll
uRun: [AlcoholAutomount] "c:\program files\alcohol soft\alcohol 120\axcmd.exe" /automount
mRun: [iKeyWorks] c:\progra~1\trust\wirele~1\keyboard\Ikeymain.exe
mRun: [UnlockerAssistant] "c:\program files\unlocker\UnlockerAssistant.exe"
mRun: [WinPatrol] c:\program files\billp studios\winpatrol\winpatrol.exe -expressboot
mRun: [ccApp] "c:\program files\common files\symantec shared\ccApp.exe"
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\moffice.lnk - c:\program files\labtec\desktop\6.0\MOffice.exe
uPolicies-explorer: AlwaysShowClassicMenu = 1 (0x1)
uPolicies-explorer: HideClock = 0 (0x0)
uPolicies-explorer: NoStartMenuSubFolders = 0 (0x0)
uPolicies-explorer: NoCommonGroups = 0 (0x0)
uPolicies-explorer: NoPrinters = 0 (0x0)
uPolicies-explorer: NoRecentDocsNetHood = 0 (0x0)
uPolicies-explorer: NoChangeAnimation = 0 (0x0)
uPolicies-explorer: NoThemesTab = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorUser = 0 (0x0)
mPolicies-system: EnableInstallerDetection = 0 (0x0)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: HideFastUserSwitching = 1 (0x1)
IE: Afmelden - file://c:\program files\siber systems\ai roboform\RoboFormComLogoff.html
IE: Formulieren opslaan - file://c:\program files\siber systems\ai roboform\RoboFormComSavePass.html
IE: Identiteiten - file://c:\program files\siber systems\ai roboform\RoboFormComEditIdent.html
IE: Invul Formulieren - file://c:\program files\siber systems\ai roboform\RoboFormComFillForms.html
IE: Menu aanpassen - file://c:\program files\siber systems\ai roboform\RoboFormComCustomizeIEMenu.html
IE: Passcards - file://c:\program files\siber systems\ai roboform\RoboFormComEditPass.html
IE: RoboForm Opties - file://c:\program files\siber systems\ai roboform\RoboFormComOptions.html
IE: RoboForm Taakbalk Pictogram - file://c:\program files\siber systems\ai roboform\RoboFormComTaskBarIcon.html
IE: RoboForm Werkbalk - file://c:\program files\siber systems\ai roboform\RoboFormComShowToolbar.html
IE: SafeNotes - file://c:\program files\siber systems\ai roboform\RoboFormComEditNote.html
IE: Velden bezetten - file://c:\program files\siber systems\ai roboform\RoboFormComSetFields.html
IE: Velden terugzetten - file://c:\program files\siber systems\ai roboform\RoboFormComResetFields.html
IE: Velden wissen - file://c:\program files\siber systems\ai roboform\RoboFormComClearFields.html
IE: Wachtwoord Generator - file://c:\program files\siber systems\ai roboform\RoboFormComPasswordGenerator.html
IE: {320AF880-6646-11D3-ABEE-C5DBF3571F46} - c:\program files\siber systems\ai roboform\RoboFormComFillForms.html
IE: {320AF880-6646-11D3-ABEE-C5DBF3571F49} - c:\program files\siber systems\ai roboform\RoboFormComSavePass.html
IE: {320AF880-6646-11D3-ABEE-C5DBF3571F4C} - c:\program files\siber systems\ai roboform\RoboFormComOptions.html
IE: {320AF880-6646-11D3-ABEE-C5DBF3571F4E} - c:\program files\siber systems\ai roboform\RoboFormComCustomizeIEMenu.html
IE: {320AF880-6646-11D3-ABEE-C5DBF3571F50} - c:\program files\siber systems\ai roboform\RoboFormComPasswordGenerator.html
IE: {320AF880-6646-11D3-ABEE-C5DBF3571F51} - c:\program files\siber systems\ai roboform\RoboFormComTaskBarIcon.html
IE: {320AF880-6646-11D3-ABEE-C5DBF3571F52} - c:\program files\siber systems\ai roboform\RoboFormComSetFields.html
IE: {320AF880-6646-11D3-ABEE-C5DBF3571F53} - c:\program files\siber systems\ai roboform\RoboFormComResetFields.html
IE: {320AF880-6646-11D3-ABEE-C5DBF3571F54} - c:\program files\siber systems\ai roboform\RoboFormComClearFields.html
IE: {320AF880-6646-11D3-ABEE-C5DBF3571F55} - c:\program files\siber systems\ai roboform\RoboFormComLogoff.html
IE: {45DB34C3-955C-11D3-ABEF-444553540000} - c:\program files\siber systems\ai roboform\RoboFormComEditIdent.html
IE: {45DB34C3-955C-11D3-ABEF-444553540001} - c:\program files\siber systems\ai roboform\RoboFormComEditPass.html
IE: {45DB34C3-955C-11D3-ABEF-444553540002} - c:\program files\siber systems\ai roboform\RoboFormComEditNote.html
IE: {724d43aa-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\RoboFormComShowToolbar.html
IE: {000002a3-84fe-43f1-b958-f2c3ca804f1a} - {CD275D4E-791A-4993-9D4D-6A071EDD2709} - c:\program files\iepro\iepro.dll
IE: {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - {B119EB0C-C021-46CF-85B0-34A760E0D5FE} - c:\program files\iepro\iepro.dll
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC} - c:\program files\java\jre6\bin\jp2iexp.dll
IE: {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - {0B4350D1-055F-47A3-B112-5F2F2B0D6F08} - c:\program files\google\google gears\internet explorer\0.5.4.2\gears.dll
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - c:\program files\hp\digital imaging\smart web printing\hpswp_BHO.dll
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
AppInit_DLLs: advrstub.dll c:\progra~1\google\google~3\GOEC62~1.DLL
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - %SystemRoot%\system32\wpdshserviceobj.dll
STS: Windows DreamScene: {e31004d1-a431-41b8-826f-e902f9d95c81} - %SystemRoot%\System32\DreamScene.dll

================= FIREFOX ===================

FF - ProfilePath - c:\users\administrator.pc_barty001\appdata\roaming\mozilla\firefox\profiles\3cxjtpl7.default\
FF - prefs.js: browser.search.selectedEngine - FireSearch
FF - prefs.js: browser.startup.homepage - hxxp://www2.firesearch.com/
FF - prefs.js: network.proxy.type - 2
FF - component: c:\program files\google\google gears\firefox\components\gears_ff2.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon2\components\hpClipBook.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon2\components\hpClipBookDB.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon2\components\hpSmartSelect.dll
FF - component: c:\program files\hp\digital imaging\smart web printing\mozillaaddon2\components\hpSmartWebPrinting.dll
FF - component: c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
FF - component: c:\program files\real\realplayer\browserrecord\components\nprpbrowserrecordplugin.dll
FF - component: c:\program files\siber systems\ai roboform\firefox\components\rfproxy_19.dll
FF - component: c:\users\administrator.pc_barty001\appdata\roaming\mozilla\firefox\profiles\3cxjtpl7.default\extensions\{3b56bcc7-54e5-44a2-9b44-66c3ef58c13e}\components\nstidy.dll
FF - component: c:\users\administrator.pc_barty001\appdata\roaming\mozilla\firefox\profiles\3cxjtpl7.default\extensions\{463f6ca5-ee3c-4be1-b7e6-7fee11953374}\platform\winnt\components\FoxyTunes.dll
FF - plugin: c:\program files\google\google updater\2.4.1368.5602\npCIDetect13.dll
FF - plugin: c:\program files\google\update\1.2.133.33\npGoogleOneClick7.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npGoogleGadgetPluginFirefoxWin.dll
FF - plugin: c:\program files\photosynth\npPhotosynthMozilla.dll
FF - plugin: c:\program files\vistacodecpack\rm\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\vistacodecpack\rm\browser\plugins\nprpjplug.dll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
FF - plugin: c:\users\administrator.pc_barty001\appdata\local\google\update\1.2.133.33\npGoogleOneClick7.dll
FF - plugin: c:\users\administrator.pc_barty001\appdata\roaming\mozilla\plugins\npgoogletalk.dll

---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\all.js - pref("ui.allow_platform_file_picker", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("network.cookie.p3plevel", 1); // 0=low, 1=medium, 2=high, 3=custom
c:\program files\mozilla firefox\greprefs\all.js - pref("network.enablePad", false); // Allow client to do proxy autodiscovery
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.urlbar.hideGoButton", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.search.param.Google.1.default", "chrome://branding/content/searchconfig.properties");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.search.param.Google.1.custom", "chrome://branding/content/searchconfig.properties");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("signon.prefillForms", true);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.safebrowsing.enabled", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.safebrowsing.remoteLookups", false);
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.safebrowsing.provider.0.updateURL", "http://sb.google.com/safebrowsing/update?client={moz:client}&appver={moz:version}&");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.safebrowsing.provider.0.lookupURL", "http://sb.google.com/safebrowsing/lookup?sourceid=firefox-antiphish&features=TrustRank&client={moz:client}&appver={moz:version}&");
c:\program files\mozilla firefox\defaults\pref\firefox.js - pref("browser.safebrowsing.provider.0.reportURL", "http://sb.google.com/safebrowsing/report?");

============= SERVICES / DRIVERS ===============

R0 ViBus;ViBus;c:\windows\system32\drivers\ViBus.sys [2008-4-14 20632]
R0 ViPrt;VIA SATA IDE Device Driver;c:\windows\system32\drivers\ViPrt.sys [2008-4-14 56984]
R1 ElRawDisk;ElRawDisk;c:\windows\system32\drivers\elrawdsk.sys [2008-10-19 12800]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2009-1-4 99376]
R3 Ph3xIB32;Philips 713x Inbox PCI TV Card;c:\windows\system32\drivers\Ph3xIB32.sys [2007-4-3 1131136]
R4 msunid01;Microsoft PCHealth UniDriver v.2.0.130.0;c:\windows\system32\drivers\unidr001\msunidrv.sys [2008-6-25 6144]
R4 wabproct;Microsoft Corporation Process Trigger Driver for Windows Advisor Beta;c:\windows\system32\drivers\wabproct.sys [2008-6-25 5504]
S3 3xHybrid;Pinnacle PCTV 100i-110i-300i-310i-MCE;c:\windows\system32\drivers\3xHybrid.sys [2008-6-5 1121536]
S3 AMD64CA;AMD64CA;c:\windows\system32\drivers\AMD64CAx86.sys [2008-5-11 7296]
S3 COH_Mon;COH_Mon;c:\windows\system32\drivers\COH_Mon.sys [2008-11-18 23888]
S3 DrvSnSht;DrvSnSht;d:\r-drive image\DrvSnSht.sys [2007-12-21 94608]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files\magix\common\database\bin\fbserver.exe --> c:\program files\magix\common\database\bin\fbserver.exe [?]
S3 GoogleDesktopManager-061008-081103;Google Desktop Manager 5.7.806.10245;c:\program files\google\google desktop search\GoogleDesktop.exe [2008-8-29 29744]
S3 s125bus;Sony Ericsson Device 125 driver (WDM);c:\windows\system32\drivers\s125bus.sys [2008-4-30 83336]
S3 s125mdfl;Sony Ericsson Device 125 USB WMC Modem Filter;c:\windows\system32\drivers\s125mdfl.sys [2008-4-30 15112]
S3 s125mdm;Sony Ericsson Device 125 USB WMC Modem Driver;c:\windows\system32\drivers\s125mdm.sys [2008-4-30 108680]
S3 s125mgmt;Sony Ericsson Device 125 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s125mgmt.sys [2008-4-30 100488]
S3 s125obex;Sony Ericsson Device 125 USB WMC OBEX Interface;c:\windows\system32\drivers\s125obex.sys [2008-4-30 98696]
S3 SkLaggProtocol;Marvell Link Aggregation Protocol;c:\windows\system32\drivers\yk60x32l.sys [2007-12-14 57856]
S3 SkVlanProtocol;Marvell VLAN Protocol;c:\windows\system32\drivers\yk60x32v.sys [2007-11-23 20992]
S4 gupdate1c9152091a90257;Google Update Service (gupdate1c9152091a90257);c:\program files\google\update\GoogleUpdate.exe [2008-9-12 133104]

=============== Created Last 30 ================

2009-01-10 01:16 <DIR> --d----- c:\program files\Trend Micro
2009-01-09 01:05 <DIR> --d----- c:\program files\EsetOnlineScanner
2009-01-09 00:25 <DIR> --d----- c:\users\administrator.pc_barty001\appdata\roaming\Ketarin
2009-01-08 23:31 <DIR> --d----- c:\program files\NVIDIA Corporation
2009-01-08 23:17 <DIR> --d----- c:\windows\LastGood.Tmp
2009-01-08 22:58 <DIR> --d----- c:\program files\XdN Software
2009-01-08 17:34 <DIR> --d----- c:\users\administrator.pc_barty001\appdata\roaming\Simply Super Software
2009-01-08 17:12 3,426,072 a------- c:\windows\system32\d3dx9_32.dll
2009-01-08 17:09 <DIR> --d----- c:\program files\Windows Live SkyDrive
2009-01-06 03:14 <DIR> --d----- c:\users\administrator.pc_barty001\SecurityScans
2009-01-04 23:53 <DIR> --d----- c:\program files\Lavasoft
2009-01-04 23:25 <DIR> --d----- c:\users\administrator.pc_barty001\appdata\roaming\Malwarebytes
2009-01-04 23:25 15,504 a------- c:\windows\system32\drivers\mbam.sys
2009-01-04 23:25 38,496 a------- c:\windows\system32\drivers\mbamswissarmy.sys
2009-01-04 23:25 <DIR> --d----- c:\programdata\Malwarebytes
2009-01-04 23:25 <DIR> --d----- c:\progra~2\Malwarebytes
2009-01-04 23:25 <DIR> --d----- c:\program files\Malwarebytes' Anti-Malware
2009-01-04 21:52 92,488 a------- c:\windows\system32\drivers\SysPlant.sys
2009-01-04 21:51 123,952 a------- c:\windows\system32\drivers\SYMEVENT.SYS
2009-01-04 21:51 10,563 a------- c:\windows\system32\drivers\SYMEVENT.CAT
2009-01-04 21:51 805 a------- c:\windows\system32\drivers\SYMEVENT.INF
2009-01-03 00:51 <DIR> --d----- c:\users\administrator.pc_barty001\appdata\roaming\MiniDm
2009-01-02 19:17 <DIR> --d----- c:\programdata\SUPERAntiSpyware.com
2009-01-02 19:17 <DIR> --d----- c:\progra~2\SUPERAntiSpyware.com
2009-01-02 19:17 <DIR> --d----- c:\users\administrator.pc_barty001\appdata\roaming\SUPERAntiSpyware.com
2009-01-02 19:17 <DIR> --d----- c:\program files\SUPERAntiSpyware
2008-12-31 22:02 219,723,588 a------- c:\windows\MEMORY.DMP
2008-12-31 20:14 <DIR> --d----- c:\program files\Free Extended Task Manager
2008-12-31 20:14 <DIR> --d----- c:\programdata\TaskManager
2008-12-31 20:14 <DIR> --d----- c:\progra~2\TaskManager
2008-12-27 08:14 255 ---shr-- C:\autorun.inf
2008-12-26 00:08 1,253,376 a------- c:\windows\system32\NvPVEnc.ax
2008-12-26 00:08 958,464 a------- c:\windows\system32\nvsvcr.dll
2008-12-26 00:08 135,168 a------- c:\windows\system32\nvcod136.dll
2008-12-26 00:08 4,160 a------- c:\windows\system32\drivers\nvBridge.kmd
2008-12-25 03:31 <DIR> --d----- c:\program files\WhoCrashed
2008-12-25 01:49 <DIR> --d----- c:\users\administrator.pc_barty001\DoctorWeb
2008-12-25 01:25 <DIR> --d----- c:\program files\WinTricks v5.0r
2008-12-20 06:14 <DIR> --d----- c:\users\administrator.pc_barty001\Tracing
2008-12-17 21:59 1,659,392 a------- c:\windows\system32\mshtml.tlb
2008-12-14 21:52 12,288 a------- c:\windows\system32\rsatclient.dll
2008-12-13 16:55 <DIR> --d----- c:\program files\deepinvent
2008-12-11 17:18 <DIR> --d----- c:\programdata\FlashFXP
2008-12-11 17:18 <DIR> --d----- c:\progra~2\FlashFXP
2008-12-11 17:14 <DIR> --d----- c:\program files\FlashFXP

==================== Find3M ====================

2009-01-08 23:44 143,360 a------- c:\windows\inf\infstrng.dat
2009-01-08 23:44 86,016 a------- c:\windows\inf\infpub.dat
2009-01-08 23:17 143,360 a------- c:\windows\inf\infstor.dat
2008-12-26 00:08 1,108,512 a------- c:\windows\system32\nvcpluir.dll
2008-12-26 00:08 801,312 a------- c:\windows\system32\nvcplui.exe
2008-12-23 21:58 453,152 a------- c:\windows\system32\nvuninst.exe
2008-12-09 03:02 702,854 a------- c:\windows\system32\perfh013.dat
2008-12-09 03:02 147,060 a------- c:\windows\system32\perfc013.dat
2008-12-08 23:24 603,904 a------- c:\windows\system32\TUProgSt.exe
2008-12-08 23:23 362,240 a------- c:\windows\system32\TuneUpDefragService.exe
2008-12-08 21:43 42,312 a------- c:\windows\system32\drivers\WPSDRVnt.sys
2008-12-08 21:43 357,704 a------- c:\windows\system32\sysfer.dll
2008-12-08 21:43 107,848 a------- c:\windows\system32\SymVPN.dll
2008-12-08 21:42 49,480 a------- c:\windows\system32\FwsVpn.dll
2008-12-05 00:31 308,584 a------- c:\windows\WLXPGSS.SCR
2008-12-02 22:37 49,480 a------- c:\windows\system32\sirenacm.dll
2008-11-26 01:00 61,440 a------- c:\windows\xspeech.dll
2008-11-21 22:47 524,288 a------- c:\windows\system32\DivXsm.exe
2008-11-21 22:47 3,596,288 a------- c:\windows\system32\qt-dx331.dll
2008-11-21 22:46 1,044,480 a------- c:\windows\system32\libdivx.dll
2008-11-21 22:46 200,704 a------- c:\windows\system32\ssldivx.dll
2008-11-21 22:44 161,096 a------- c:\windows\system32\DivXCodecVersionChecker.exe
2008-11-21 22:44 12,288 a------- c:\windows\system32\DivXWMPExtType.dll
2008-11-21 05:34 428,544 a------- c:\windows\system32\EncDec.dll
2008-11-18 18:17 23,888 a------- c:\windows\system32\drivers\COH_Mon.sys
2008-11-18 18:01 10,537 a------- c:\windows\system32\drivers\coh_mon.cat
2008-11-18 18:01 706 a------- c:\windows\system32\drivers\COH_Mon.inf
2008-11-12 16:44 27,904 a------- c:\windows\system32\uxtuneup.dll
2008-11-12 16:44 17,152 a------- c:\windows\system32\authuitu.dll
2008-11-06 22:54 336,440 a------- c:\windows\system32\perfi013.dat
2008-11-06 22:54 336,440 a------- c:\windows\inf\perflib\0413\perfi.dat
2008-11-06 22:54 336,440 a------- c:\windows\inf\perflib\0413\perfh.dat
2008-11-06 22:54 41,976 a------- c:\windows\system32\perfd013.dat
2008-11-06 22:54 41,976 a------- c:\windows\inf\perflib\0413\perfd.dat
2008-11-06 22:54 41,976 a------- c:\windows\inf\perflib\0413\perfc.dat
2008-11-06 13:59 2,241,536 a------- c:\windows\system32\msi.dll
2008-11-06 13:59 332,800 a------- c:\windows\system32\msihnd.dll
2008-11-06 13:59 16,384 a------- c:\windows\system32\msisip.dll
2008-11-06 13:58 73,216 a------- c:\windows\system32\msiexec.exe
2008-11-06 11:39 2,560 a------- c:\windows\system32\msimsg.dll
2008-11-05 23:49 104,456 a------- c:\windows\system32\fmapi.dll
2008-11-03 01:58 10,049 a------- c:\windows\msvrc20.dll
2008-11-02 22:13 83,456 a------- c:\windows\system32\wudriver.dll
2008-11-02 22:13 218,896 a------- c:\windows\system32\wuwebv.dll
2008-11-02 22:13 31,232 a------- c:\windows\system32\wuapp.exe
2008-11-02 22:13 1,524,736 a------- c:\windows\system32\wucltux.dll
2008-11-01 04:44 52,736 a------- c:\windows\apppatch\iebrshim.dll
2008-11-01 04:44 2,154,496 a------- c:\windows\apppatch\AcGenral.dll
2008-11-01 04:44 541,696 a------- c:\windows\apppatch\AcLayers.dll
2008-11-01 04:44 460,288 a------- c:\windows\apppatch\AcSpecfc.dll
2008-11-01 04:44 173,056 a------- c:\windows\apppatch\AcXtrnal.dll
2008-11-01 04:44 28,672 a------- c:\windows\system32\Apphlpdm.dll
2008-11-01 02:21 4,240,384 a------- c:\windows\system32\GameUXLegacyGDFs.dll
2008-10-29 07:16 511,488 a------- c:\windows\system32\newdev.dll
2008-10-29 07:16 74,752 a------- c:\windows\system32\newdev.exe
2008-10-27 10:04 514,384 a------- c:\windows\system32\XAudio2_3.dll
2008-10-27 10:04 235,856 a------- c:\windows\system32\xactengine3_3.dll
2008-10-27 10:04 23,376 a------- c:\windows\system32\X3DAudio1_5.dll
2008-10-27 10:04 70,992 a------- c:\windows\system32\XAPOFX1_2.dll
2008-10-22 04:57 241,152 a------- c:\windows\system32\PortableDeviceApi.dll
2008-10-22 02:22 2,048 a------- c:\windows\system32\tzres.dll
2008-10-21 06:25 296,960 a------- c:\windows\system32\gdi32.dll
2008-10-21 06:25 1,703,424 a------- c:\windows\system32\connect.dll
2008-10-19 13:22 74,703 a------- c:\windows\system32\mfc45.dll
2008-09-28 19:45 262,144 a------- c:\progra~2\ntuser.dat
2008-09-08 05:11 665,600 a------- c:\windows\inf\drvindex.dat
2008-01-21 03:41 174 a--sh--- c:\program files\desktop.ini
2006-11-02 13:40 287,440 a------- c:\windows\inf\perflib\0409\perfi.dat
2006-11-02 13:40 287,440 a------- c:\windows\inf\perflib\0409\perfh.dat
2006-11-02 13:40 30,674 a------- c:\windows\inf\perflib\0409\perfd.dat
2006-11-02 13:40 30,674 a------- c:\windows\inf\perflib\0409\perfc.dat
2006-11-02 10:20 287,440 a------- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 10:20 287,440 a------- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 10:20 30,674 a------- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 10:20 30,674 a------- c:\windows\inf\perflib\0000\perfc.dat

============= FINISH: 1:50:45,84 ===============

 

[gast99]

Download MBAM (Malwarebytes' Anti-Malware) via hier of hier.

• Dubbelklik op mbam-setup.exe om het programma te installeren.
  • Zorg ervoor dat er een vinkje geplaatst is voor Update Malwarebytes' Anti-Malware en Start Malwarebytes' Anti-Malware, Klik daarna op "Voltooien".
  • Indien een update gevonden werd, zal die gedownload en geïnstalleerd worden.
  • Wanneer het programma volledig up to date is, selecteer dan in het tabblad Scanner : "Snelle Scan", daarna klik op Scan.
  • Het scannen kan een tijdje duren, dus wees geduldig.
  • Wanneer de scan voltooid is, klik op OK, daarna "Bekijk Resultaten" om de resultaten te zien.
  • Zorg ervoor dat daar alles aangevinkt is, daarna klik op: Verwijder geselecteerde.
  • Na het verwijderen zal een log openen en zal er gevraagd worden om de computer opnieuw op te starten. (Zie verder)
  • De log wordt automatisch bewaard door MBAM en kan je terugvinden door op de "Logs" tab te klikken in MBAM.
  • Kopieer en plak de inhoud van het logje in je volgend antwoord, samen met een nieuw HijackThis log.
  Indien MBAM moeilijkheden heeft met het verwijderen van bepaalde bestanden zal het enkele meldingen geven waar je OK moet klikken.
  Daarna zal het vragen om de Computer opnieuw op te starten... dus sta toe dat MBAM de computer opnieuw opstart.