Archief - HJT log ivm klein probleem externe hdd

Ik heb sinds deze week een klein probleempje met mijn pc en externe schijven..

Iemand op een ander forum heeft me doorverwezen naar dit forum.
Mijn probleem staat in de link hieronder uitgelegd;
https://www.beyondgaming.be/forums

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:15:06, on 8/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\Apoint\Apntex.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
C:\Program Files\MySQL\MySQL Server 5.0\bin\mysqld-nt.exe
C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Together\eclipse\eclipse.exe
C:\Program Files\Together\jre\bin\javaw.exe
C:\PROGRA~1\Intel\Wireless\Bin\1XConfig.exe
C:\Program Files\Cisco Systems\VPN Client\vpngui.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www1.euro.dell.com/content/default.aspx?c=be&l=nl&s=gen
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www1.euro.dell.com/content/default.aspx?c=be&l=nl&s=gen
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe /RUNONCE (User 'Lokale service')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Cisco Systems VPN Client.lnk = C:\Program Files\Cisco Systems\VPN Client\vpngui.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by106w.bay106.mail.live.com/mail/resources/MsnPUpld.cab
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://vandewallepatrick.spaces.live.com/PhotoUpload/MsnPUpld.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C3FA212B-CD9A-40C0-98BB-0CE4ABBCAECF}: NameServer = 193.190.126.26,193.191.155.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = hogent.be
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = hogent.be
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing)
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

--
End of file - 8972 bytes


Dit is gewoon de scan, heb er dus nog zelf niets in aangepast.

Alvast bedankt
Pat

Download Dial-a-fix via
http://wiki.djlizard.net/Dial-a-fix#Standard_version

Start Dial-A-Fix en in het hoofd-venster vink je alles aan en klik onderaan op 'Go'
Laat het tooltje zijn werk doen en herstart je pc, kijk of het dan gebeterd is.

heb dus gedaan wat je gezegd hebt maar probleem blijft..

dit is de log die gemaakt is

Notes about this log:
1) "->" denotes an external command being executed, and "-> (number)" indicates
the return code from the previous command
2) Not all external command return codes are accurate, or useful
3) Sometimes commands return 0 (no error) even when they fail or crash
4) If an error occurs while registering an object, please send an email to:
[email protected] and include a copy of this log

DAF version: v0.60.0.24

--- System info ---
OS: Microsoft Windows XP Service Pack 2
IE version: 6.0.2900.2180
MPC: 76396-OEM
CPU: Intel(R) Pentium(R) M processor 1.86GHz (~800MHz)
BIOS: 21/06/2005
Memory (approx): 1023MB
Uptime: 8 hour(s)
Current directory: C:\Documents and Settings\Patrick Van de Walle\Bureaublad\Dial-a-fix-v0.60.0.24
---

8/11/2007 16:44:52 -- Dial-a-fix : [v0.60.0.24] -- started
16:44:52 | Policy scan started
16:44:52 | Policy scan ended - no restrictive policies were found
--- Emptying temp folders ---
16:45:13 | Deleting C:\Documents and Settings\Patrick Van de Walle\Local Settings\Temp...
16:45:13 | C:\Documents and Settings\Patrick Van de Walle\Local Settings\Temp could not be completely emptied, please reboot and try again
16:45:13 | Deleting C:\WINDOWS\temp...
16:45:13 | C:\WINDOWS\temp could not be completely emptied, please reboot and try again
16:45:13 | Deleting C:\DOCUME~1\PATRIC~1\LOCALS~1\Temp...
16:45:21 | C:\DOCUME~1\PATRIC~1\LOCALS~1\Temp could not be completely emptied, please reboot and try again
--- MSI ---
16:52:34 | Registered: C:\WINDOWS\system32\msi.dll
--- Windows Update ---
--- Registration: Windows Update/Automatic Update DLLs ---
16:52:41 | Unregistered: C:\WINDOWS\system32\msxml.dll
16:52:41 | Registered: C:\WINDOWS\system32\msxml.dll
16:52:41 | Unregistered: C:\WINDOWS\system32\msxml2.dll
16:52:42 | Registered: C:\WINDOWS\system32\msxml2.dll
16:52:43 | Unregistered: C:\WINDOWS\system32\msxml3.dll
16:52:43 | Registered: C:\WINDOWS\system32\msxml3.dll
16:52:44 | Unregistered: C:\WINDOWS\system32\msxml4.dll
16:52:44 | Registered: C:\WINDOWS\system32\msxml4.dll
16:52:44 | Unregistered: C:\WINDOWS\system32\qmgr.dll
16:52:44 | Registered: C:\WINDOWS\system32\qmgr.dll
16:52:44 | Unregistered: C:\WINDOWS\system32\qmgrprxy.dll
16:52:44 | Registered: C:\WINDOWS\system32\qmgrprxy.dll
16:52:44 | Unregistered: C:\WINDOWS\system32\winhttp.dll
16:52:44 | Registered: C:\WINDOWS\system32\winhttp.dll
16:52:45 | Registered: C:\WINDOWS\system32\wuapi.dll
16:52:45 | Unregistered: C:\WINDOWS\system32\wuaueng.dll
16:52:47 | Registered: C:\WINDOWS\system32\wuaueng.dll
16:52:47 | Unregistered: C:\WINDOWS\system32\wuaueng1.dll
16:52:47 | Registered: C:\WINDOWS\system32\wuaueng1.dll
16:52:47 | Unregistered: C:\WINDOWS\system32\wucltui.dll
16:52:47 | Registered: C:\WINDOWS\system32\wucltui.dll
16:52:47 | Unregistered: C:\WINDOWS\system32\wups.dll
16:52:47 | Registered: C:\WINDOWS\system32\wups.dll
16:52:47 | Unregistered: C:\WINDOWS\system32\wups2.dll
16:52:47 | Registered: C:\WINDOWS\system32\wups2.dll
16:52:47 | Unregistered: C:\WINDOWS\system32\wuweb.dll
16:52:47 | Registered: C:\WINDOWS\system32\wuweb.dll
16:52:47 | Registered: C:\WINDOWS\system32\ole32.dll
--- SSL/HTTPS/Cryptography ---
16:53:00 | Executed 'cmd.exe /c rmdir /q /s C:\WINDOWS\system32\Catroot2'
--- Registration: SSL/HTTPS/Cryptography ---
16:53:04 | Unregistered: C:\WINDOWS\system32\cryptdlg.dll
16:53:04 | Registered: C:\WINDOWS\system32\cryptdlg.dll
16:53:04 | Unregistered: C:\WINDOWS\system32\cryptui.dll
16:53:04 | Registered: C:\WINDOWS\system32\cryptui.dll
16:53:04 | Unregistered: C:\WINDOWS\system32\cryptext.dll
16:53:05 | Registered: C:\WINDOWS\system32\cryptext.dll
16:53:05 | Unregistered: C:\WINDOWS\system32\dssenh.dll
16:53:05 | Registered: C:\WINDOWS\system32\dssenh.dll
16:53:05 | Unregistered: C:\WINDOWS\system32\gpkcsp.dll
16:53:05 | Registered: C:\WINDOWS\system32\gpkcsp.dll
16:53:05 | Unregistered: C:\WINDOWS\system32\initpki.dll
16:54:05 | Registered: C:\WINDOWS\system32\initpki.dll
16:54:05 | Unregistered: C:\WINDOWS\system32\licdll.dll
16:54:05 | Registered: C:\WINDOWS\system32\licdll.dll
16:54:05 | Unregistered: C:\WINDOWS\system32\mssign32.dll
16:54:05 | Registered: C:\WINDOWS\system32\mssign32.dll
16:54:05 | Unregistered: C:\WINDOWS\system32\mssip32.dll
16:54:06 | Registered: C:\WINDOWS\system32\mssip32.dll
16:54:06 | Unregistered: C:\WINDOWS\system32\scardssp.dll
16:54:06 | Registered: C:\WINDOWS\system32\scardssp.dll
16:54:06 | Unregistered: C:\WINDOWS\system32\sccbase.dll
16:54:06 | Registered: C:\WINDOWS\system32\sccbase.dll
16:54:06 | Unregistered: C:\WINDOWS\system32\scecli.dll
16:54:07 | Registered: C:\WINDOWS\system32\scecli.dll
16:54:08 | Unregistered: C:\WINDOWS\system32\softpub.dll
16:54:08 | Registered: C:\WINDOWS\system32\softpub.dll
16:54:08 | Unregistered: C:\WINDOWS\system32\slbcsp.dll
16:54:08 | Registered: C:\WINDOWS\system32\slbcsp.dll
16:54:08 | Unregistered: C:\WINDOWS\system32\regwizc.dll
16:54:08 | Registered: C:\WINDOWS\system32\regwizc.dll
16:54:08 | Unregistered: C:\WINDOWS\system32\rsaenh.dll
16:54:08 | Registered: C:\WINDOWS\system32\rsaenh.dll
16:54:08 | Unregistered: C:\WINDOWS\system32\winhttp.dll
16:54:08 | Registered: C:\WINDOWS\system32\winhttp.dll
16:54:08 | Unregistered: C:\WINDOWS\system32\wintrust.dll
16:54:09 | Registered: C:\WINDOWS\system32\wintrust.dll
--- Registration: ActiveX controls/codecs ---
16:54:09 | Registered: C:\WINDOWS\system32\acelpdec.ax
16:54:09 | Registered: C:\WINDOWS\system32\actxprxy.dll
16:54:09 | Registered: C:\WINDOWS\system32\asctrls.ocx
16:54:09 | Registered: C:\WINDOWS\system32\daxctle.ocx
16:54:09 | Registered: C:\WINDOWS\system32\hhctrl.ocx
16:54:09 | Registered: C:\WINDOWS\system32\l3codecx.ax
16:54:10 | Registered: C:\WINDOWS\system32\licmgr10.dll
16:54:10 | Registered: C:\WINDOWS\system32\mpg4ds32.ax
16:54:12 | Registered: C:\WINDOWS\system32\msdxm.ocx
16:54:12 | Registered: C:\WINDOWS\system32\proctexe.ocx
16:54:12 | Registered: C:\WINDOWS\system32\tdc.ocx
16:54:13 | Registered: C:\WINDOWS\system32\wshom.ocx
--- Registration: Control Panel applets ---
16:54:14 | DllInstalled: C:\WINDOWS\system32\inetcpl.cpl
16:54:14 | DllInstalled: C:\WINDOWS\system32\appwiz.cpl
16:54:14 | Registered: C:\WINDOWS\system32\appwiz.cpl
16:54:14 | DllInstalled: C:\WINDOWS\system32\nusrmgr.cpl
16:54:14 | Registered: C:\WINDOWS\system32\nusrmgr.cpl
--- Registration: Direct[X|Draw|Show|Media] ---
16:54:15 | Registered: C:\WINDOWS\system32\quartz.dll
16:54:15 | Registered: C:\WINDOWS\system32\danim.dll
16:54:15 | Registered: C:\WINDOWS\system32\dmscript.dll
16:54:15 | Registered: C:\WINDOWS\system32\dmstyle.dll
16:54:15 | Registered: C:\WINDOWS\system32\dxmasf.dll
16:54:16 | Registered: C:\WINDOWS\system32\dxtmsft.dll
16:54:16 | Registered: C:\WINDOWS\system32\dxtrans.dll
16:54:16 | Registered: C:\WINDOWS\system32\sbe.dll
--- Registration: Programming cores/runtimes ---
16:54:16 | Registered: C:\WINDOWS\system32\atl.dll
16:54:16 | Registered: C:\WINDOWS\system32\corpol.dll
16:54:16 | Registered: C:\WINDOWS\system32\jscript.dll
16:54:16 | Registered: C:\WINDOWS\system32\dispex.dll
16:54:17 | Registered: C:\WINDOWS\system32\scrrun.dll
16:54:17 | Registered: C:\WINDOWS\system32\scrobj.dll
16:54:17 | Registered: C:\WINDOWS\system32\vbscript.dll
16:54:17 | Registered: C:\WINDOWS\system32\wshext.dll
--- Registration: Explorer/IE/OE/shell/WMP ---
16:54:17 | Registered: C:\WINDOWS\system32\activeds.dll
16:54:17 | Registered: C:\WINDOWS\system32\audiodev.dll
16:54:17 | DllInstalled: C:\WINDOWS\system32\browseui.dll
16:54:17 | Registered: C:\WINDOWS\system32\browseui.dll
16:54:17 | Registered: C:\WINDOWS\system32\browsewm.dll
16:54:18 | Registered: C:\WINDOWS\system32\cabview.dll
16:54:18 | Registered: C:\WINDOWS\system32\cdfview.dll
16:54:18 | Registered: C:\WINDOWS\system32\clbcatex.dll
16:54:18 | Registered: C:\WINDOWS\system32\clbcatq.dll
16:54:18 | Registered: C:\WINDOWS\system32\comcat.dll
16:54:18 | Registered: C:\WINDOWS\system32\cscui.dll
16:54:18 | Registered: C:\WINDOWS\system32\credui.dll
16:54:18 | Registered: C:\WINDOWS\system32\datime.dll
16:54:18 | Registered: C:\WINDOWS\system32\devmgr.dll
16:54:18 | Registered: C:\WINDOWS\system32\dfsshlex.dll
16:54:19 | Registered: C:\WINDOWS\system32\dmdlgs.dll
16:54:19 | Registered: C:\WINDOWS\system32\dmdskmgr.dll
16:54:19 | Registered: C:\WINDOWS\system32\dmloader.dll
16:54:19 | Registered: C:\WINDOWS\system32\dmocx.dll
16:54:19 | Registered: C:\WINDOWS\system32\dmview.ocx
16:54:19 | DllInstalled: C:\WINDOWS\system32\dsuiext.dll
16:54:19 | Registered: C:\WINDOWS\system32\dsuiext.dll
16:54:19 | DllInstalled: C:\WINDOWS\system32\dsquery.dll
16:54:19 | Registered: C:\WINDOWS\system32\dsquery.dll
16:54:19 | Registered: C:\WINDOWS\system32\dskquoui.dll
16:54:20 | Registered: C:\WINDOWS\system32\els.dll
16:54:20 | Registered: C:\WINDOWS\system32\es.dll
16:54:20 | Registered: C:\WINDOWS\system32\fontext.dll
16:54:20 | Registered: C:\WINDOWS\system32\hlink.dll
16:54:21 | Registered: C:\WINDOWS\system32\hnetcfg.dll
16:54:21 | Registered: C:\WINDOWS\system32\iedkcs32.dll
16:54:21 | Registered: C:\WINDOWS\system32\iepeers.dll
16:54:21 | DllInstalled: C:\WINDOWS\system32\iesetup.dll
16:54:21 | Registered: C:\WINDOWS\system32\iesetup.dll
16:54:21 | Registered: C:\WINDOWS\system32\ils.dll
16:54:21 | Registered: C:\WINDOWS\system32\imgutil.dll
16:54:21 | Registered: C:\WINDOWS\system32\inetcfg.dll
16:54:22 | Registered: C:\WINDOWS\system32\inetcomm.dll
16:54:22 | DllInstalled: C:\WINDOWS\system32\inseng.dll
16:54:22 | Registered: C:\WINDOWS\system32\inseng.dll
16:54:22 | Registered: C:\WINDOWS\system32\laprxy.dll
16:54:22 | Registered: C:\WINDOWS\system32\lmrt.dll
16:54:23 | Registered: C:\WINDOWS\system32\mlang.dll
16:54:23 | Registered: C:\WINDOWS\system32\mmcndmgr.dll
16:54:23 | Registered: C:\WINDOWS\system32\mmcshext.dll
16:54:24 | Registered: C:\WINDOWS\system32\mscoree.dll
16:54:24 | DllInstalled: C:\WINDOWS\system32\mshtml.dll
16:54:25 | Registered: C:\WINDOWS\system32\mshtml.dll
16:54:25 | Registered: C:\WINDOWS\system32\mshtmled.dll
16:54:25 | Registered: C:\WINDOWS\system32\msieftp.dll
16:54:25 | Registered: C:\WINDOWS\system32\msoeacct.dll
16:54:25 | Registered: C:\WINDOWS\system32\msr2c.dll
16:54:25 | Registered: C:\WINDOWS\system32\msrating.dll
16:54:26 | DllInstalled: C:\WINDOWS\system32\mydocs.dll
16:54:26 | Registered: C:\WINDOWS\system32\mydocs.dll
16:54:26 | Registered: C:\WINDOWS\system32\mstime.dll
16:54:26 | Registered: C:\WINDOWS\system32\netcfgx.dll
16:54:26 | DllInstalled: C:\WINDOWS\system32\netplwiz.dll
16:54:26 | Registered: C:\WINDOWS\system32\netplwiz.dll
16:54:26 | Registered: C:\WINDOWS\system32\netman.dll
16:54:26 | Registered: C:\WINDOWS\system32\netshell.dll
16:54:27 | Registered: C:\WINDOWS\system32\ntmsevt.dll
16:54:27 | Registered: C:\WINDOWS\system32\ntmsmgr.dll
16:54:27 | DllInstalled: C:\WINDOWS\system32\ntmssvc.dll
16:54:27 | Registered: C:\WINDOWS\system32\ntmssvc.dll
16:54:27 | DllInstalled: C:\WINDOWS\system32\occache.dll
16:54:27 | Registered: C:\WINDOWS\system32\occache.dll
16:54:27 | Registered: C:\WINDOWS\system32\ole32.dll
16:54:27 | Registered: C:\WINDOWS\system32\oleaut32.dll
16:54:27 | Registered: C:\WINDOWS\system32\oleacc.dll
16:54:27 | Registered: C:\WINDOWS\system32\olepro32.dll
16:54:27 | DllInstalled: C:\WINDOWS\system32\photowiz.dll
16:54:27 | Registered: C:\WINDOWS\system32\photowiz.dll
16:54:27 | Registered: C:\WINDOWS\system32\pngfilt.dll
16:54:28 | Registered: C:\WINDOWS\system32\remotepg.dll
16:54:28 | Registered: C:\WINDOWS\system32\rpcrt4.dll
16:54:28 | Registered: C:\WINDOWS\system32\rshx32.dll
16:54:28 | Registered: C:\WINDOWS\system32\sendmail.dll
16:54:28 | Registered: C:\WINDOWS\system32\slayerxp.dll
16:54:29 | DllInstalled: C:\WINDOWS\system32\shdocvw.dll
16:54:29 | Registered: C:\WINDOWS\system32\shdocvw.dll
16:54:29 | Registered: C:\WINDOWS\system32\shell32.dll
16:54:38 | DllInstalled: C:\WINDOWS\system32\shell32.dll
16:54:38 | Registered: C:\WINDOWS\system32\shmedia.dll
16:54:38 | DllInstalled: C:\WINDOWS\system32\shimgvw.dll
16:54:38 | Registered: C:\WINDOWS\system32\shimgvw.dll
16:54:38 | DllInstalled: C:\WINDOWS\system32\shsvcs.dll
16:54:39 | Registered: C:\WINDOWS\system32\shsvcs.dll
16:54:39 | Registered: C:\WINDOWS\system32\srclient.dll
16:54:39 | Unregistered: C:\WINDOWS\system32\stobject.dll
16:54:39 | Registered: C:\WINDOWS\system32\stobject.dll
16:54:39 | DllInstalled: C:\WINDOWS\system32\themeui.dll
16:54:40 | Registered: C:\WINDOWS\system32\themeui.dll
16:54:40 | Registered: C:\WINDOWS\system32\twext.dll
16:54:40 | DllInstalled: C:\WINDOWS\system32\urlmon.dll
16:54:40 | Registered: C:\WINDOWS\system32\urlmon.dll
16:54:40 | Registered: C:\WINDOWS\system32\userenv.dll
16:54:40 | DllInstalled: C:\WINDOWS\system32\webcheck.dll
16:54:40 | Registered: C:\WINDOWS\system32\webcheck.dll
16:54:40 | Registered: C:\WINDOWS\system32\webvw.dll
16:54:40 | Registered: C:\WINDOWS\system32\winhttp.dll
16:54:41 | DllInstalled: C:\WINDOWS\system32\wininet.dll
16:54:41 | Registered: C:\WINDOWS\system32\zipfldr.dll
16:54:41 | Registered: C:\Program Files\Common Files\system\Ole DB\msdadc.dll
16:54:41 | Registered: C:\Program Files\Common Files\system\Ole DB\msdaenum.dll
16:54:41 | Registered: C:\Program Files\Common Files\system\Ole DB\msdaer.dll
16:54:41 | Registered: C:\Program Files\Common Files\system\Ole DB\msdaipp.dll
16:54:41 | Registered: C:\Program Files\Common Files\system\Ole DB\msdaora.dll
16:54:41 | Registered: C:\Program Files\Common Files\system\Ole DB\msdaosp.dll
16:54:41 | Registered: C:\Program Files\Common Files\system\Ole DB\msdaps.dll
16:54:41 | Registered: C:\Program Files\Common Files\system\Ole DB\msdasc.dll
16:54:41 | Registered: C:\Program Files\Common Files\system\Ole DB\msdasql.dll
16:54:42 | Registered: C:\Program Files\Common Files\system\Ole DB\msdatt.dll
16:54:42 | Registered: C:\Program Files\Common Files\system\Ole DB\msdaurl.dll
16:54:42 | Registered: C:\Program Files\Common Files\system\Ole DB\msdmeng.dll
16:54:42 | Registered: C:\Program Files\Common Files\system\Ole DB\msdmine.dll
16:54:43 | Registered: C:\Program Files\Common Files\system\Ole DB\msmdcb80.dll
16:54:43 | Registered: C:\Program Files\Common Files\system\Ole DB\msmdgd80.dll
16:54:43 | Registered: C:\Program Files\Common Files\system\Ole DB\msolap80.dll
16:54:44 | Registered: C:\Program Files\Common Files\system\Ole DB\msolui80.dll
16:54:44 | Registered: C:\Program Files\Common Files\system\Ole DB\msxactps.dll
16:54:44 | Registered: C:\Program Files\Common Files\system\Ole DB\oledb32.dll
16:54:44 | Registered: C:\Program Files\Common Files\system\Ole DB\oledb32r.dll
16:54:44 | Registered: C:\Program Files\Common Files\system\Ole DB\sqloledb.dll
16:54:44 | Registered: C:\Program Files\Common Files\system\Ole DB\sqlxmlx.dll

* Download Dr.Web CureIt naar je bureaublad:
ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe

• Dubbelklik drweb-cureit.exe en sta het toe om de express scan te starten.
• Dit zal de bestanden scannen die momenteel in het geheugen geladen zijn en wanneer er iets gevonden wordt, klik de Yes to all knop bij de vraag 'cure it?'. Dit is enkel een korte scan.
• Eenmaal de korte scan is beeïndigd, Klik Options > Change Settings
• Kies de "Scan"-tab en verwijder het vinkje bij "Heuristic analyse"
• Terug in het hoofdvenster kan je de drives selecteren die je wilt laten scannen.
• Selecteer hier alle drives. Een rood bolletje zal dan tevoorschijn komen op de drives die je laat scannen.
• Klik daarna de groene pijl rechts om de scan te starten.
• Klik 'Yes to all' wanneer er gevraagd wordt om cure of move uit te voeren.
• Wanneer de scan gedaan is, kijk of je volgende icoontje kan aanklikken dat staat naast hetgeen gevonden werd:
  
• Indien wel, klik erop en daarna klik op het icoontje er net onder en kies: Move incurable zoals je zal zien in volgende afbeelding:
  
  
  
  Dit zal de bestanden verplaatsen naar volgende map %userprofile%\DoctorWeb\quarantaine-folder indien het niet gedesinfecteerd kan worden. (dit in het geval dat we samples nodig hebben)
• Na bovenstaande te selecteren, in het menu bovenaan van Dr.Web CureIt, klik file en kies save report list. Bewaar de log op je bureaublad.
• Sluit daarna Dr.Web Cureit.
• Herstart je computer!! Belangrijke stap, want het kan zijn dat Dr.Web Cureit bestanden zal verplaatsen/verwijderen tijdens herstart.
• Na het herstarten, Kopieer en plak de inhoud van die log die je eerder hebt bewaard in je volgende post.

A0006396.exe;K:\System Volume Information\_restore{085AD766-52D1-4F06-9C68-EBF17131F9CA}\RP35;Worm.Peerav;Niet repareerbaar.Verplaatst.;
A0006396.exe;C:\Documents and Settings\Patrick Van de Walle\DoctorWeb\Quarantine;Worm.Peerav;Niet repareerbaar.Verplaatst.;


sorry voor de late response, ben niet meer thuis geweest
heb dus gedaan wat je gezegd hebt en hier is dat logje


edit: ik heb men externe er weer op aangesloten, maar het is nog steeds hetzelfde probleem
edit2: ik ben dan eens naar die map gegaan waar die file ingeplaatst zat, en dan zei avg dat er een threat was, ik heb dit geheald.. maar probleem blijft dus
edit3: in die map rp35 staat dus een .inf bestand met naam A0006397, maar kan dit niet verwijderen

nog eens gescanned


log :
00288343.FIL;C:\$VAULT$.AVG;Worm.Peerav;Niet repareerbaar.Verplaatst.;
00288343.FIL;C:\Documents and Settings\Patrick Van de Walle\DoctorWeb\Quarantine;Worm.Peerav;Niet repareerbaar.Verplaatst.;

Ziet er goed uit hoor.

G6Service.exe;C:\Program Files\BPFTP Server;Trojan.Runas;Verwijderd.;
hltv.exe;C:\Program Files\Half-life 1.5\Half-Life;Tool.ProxyHLTV;Niet repareerbaar.Verwijderd.;
mirc.exe;C:\Program Files\mIRC;Program.mIRC.616;Niet repareerbaar.Verwijderd.;
stdio.dll;C:\Program Files\mIRC\script\dlls;IRC.Flood;Verwijderd.;
A0113168.exe;C:\System Volume Information\_restore{CB32FFED-FFB0-4F82-9D41-E1A8368D0A19}\RP693;Trojan.Runas;Verwijderd.;
A0113174.dll;C:\System Volume Information\_restore{CB32FFED-FFB0-4F82-9D41-E1A8368D0A19}\RP693;IRC.Flood;Verwijderd.;


is van men laptop..
probleem blijft wel ze jurgen

Dan zal het niet aan malware liggen vrees ik...

mja, maar hoe kannek het dan oplossen? en ik vind formateren een beetje drastisch aangezien het om 750 gb data gaat

Geen idee, mss eens in software vragen?

k, alvast bedankt