Page 2 of 2 FirstFirst
1
2
  1. #21
    Warchief Szemere's Avatar
    Join Date
    May 2010
    Location
    Gnomeregan
    Posts
    2,196
    Done:

    HD Tune Pro: WDC WD6400AAKS-22A7B Error Scan

    Scanned data : 639 gB
    Damaged Blocks : 0.0 %
    Elapsed Time : 2:06:03

    Well, that is excluded, now gonna restart my PC to check whether my CD/DVD player is working.

    ---UPDATE: plugging my cd/dvd-rom player into a different port did not work. But if i got to get just one problem fixed, this was on the bottom of my list:P.
    I will be going to sleep now, as i live in EU regions, and it is 3 am here. ---

    Small sum up of errors, in order of annoyance:
    WoW crashes EVERY time i click on the Login button, together with my entire computer, no error messages, just stopping to respond to EVERYTHING.
    Computer hangs in the very first screen i see when i start my computer for 30 seconds (20% of the time), 5 minutes (30% of the time) or doesn't ever get out of it (40% of the time) instead of just showing it for 3 seconds and moving on (10% of the time) which should be happening.
    Computer hangs while the windows loading bar with blibs from left to right, somewhere blibs hang, and my system is stuck for like 60 seconds (ALWAYS happens if i start my computer).
    My CD/DVD-rom drive is not found by my windows AT ALL, not even showing a message of unidentified object connected, but it does open and close
    NO HDD errors. NO drivers out of date. NO CPU overheating. NO restoring to dates when it worked reverted the problem at all. NO network having anything to do with this. NO reinstalling WoW resolves the WoW related problem.
    Last edited by Szemere; 2010-11-24 at 02:02 AM. Reason: it did not work

  2. #22
    Do you recall the speed at which the error test was running?
    If not run the bench mark tab and report back min/max/avg.

    Well my next step would be:
    First back up your data.
    I would load into bios and change settings to default. It sounds like it sometimes is hanging at the bios which I really dont know how to fix or what the cause would be. I would refer to the more advanced techs that frequent these forums.

    Boot into safe mode (f8 spam for most machines.)
    Run EzPcFix. At the bottom rename 'docs and settings' to 'users'. Load hives. Top left select delete files, check everything in the window that pops up and then delete. (Can take some time in some cases)
    Then run ccleaner 3.0 with default settings.
    Check your run keys in the registry. I made a post about how to that here. If you are not comfortable with that the least you can do is atleast check for blanks.
    Clear out the startup folder while your at it. Start --> All Programs --> Startup. Just move those shortcuts to the desktop for now.
    Read the tutorial on combofix and run it. (It is alot easier to use than you think. Just double click and faceroll agree/yes/please.) Do this from safemode and if it reboots make sure it reboots back to safemode. (Combofix does not yet support 64bit systems fyi.)
    Download and run mwav. This is not active defense just a good scanner and does some windows repair.
    Follow that up with mbam.
    And for good measure run Hijackthis. Go to www.hijackthis.de to have it analyzed. For this there are 2 columns of results. Delete everything that has both negatives. For the inbetweeners it will ultimately be up to you. Or you can reply with a screenshot and I can advise you on what I would do.

    After these rounds you should be infection free, atleast from major stuff.
    Find yourself a copy of WinASO or find a cracked torrent and run the cleaner. Fix everything. On the left column run the system optimizer. That is the only 2 items I have used of this program and can vouch for its effectiveness. Everything else this program can do I have yet to test.

    At this point make sure your windows is up to date.

    If doing all that does not fix it, I would just reload windows.
    Last edited by Dion04; 2010-11-24 at 02:38 AM.
    http://www.orphanguild.com/ - SWTOR Guild US West Coast PvP

  3. #23
    Warchief Szemere's Avatar
    Join Date
    May 2010
    Location
    Gnomeregan
    Posts
    2,196
    It started at 100MB/s, and ended around 60 MB/s, ran benchmark anyways:
    HD Tune Pro: WDC WD6400AAKS-22A7B Benchmark

    Test capacity: full

    Read transfer rate
    Transfer Rate Minimum : 45.2 MB/s
    Transfer Rate Maximum : 110.9 MB/s
    Transfer Rate Average : 88.9 MB/s
    Access Time : 12.4 ms
    Burst Rate : 169.4 MB/s
    CPU Usage : 9.4%

    I will do all those steps you mentioned after i return of university. Funny, I study Computer Science and still can't fix my own computer

  4. #24
    Those benchmarks are normal.
    http://www.orphanguild.com/ - SWTOR Guild US West Coast PvP

  5. #25
    Warchief Szemere's Avatar
    Join Date
    May 2010
    Location
    Gnomeregan
    Posts
    2,196
    Bios set to default. On EzPcFix, the site is currently not working, don't know if that is just me, or that site itself. CCleaner, done. Register-editor, do i only need to check those 2 directories (i am running on 32-bit) if it has those blanks, since i noticed i have a sub-directory of hkey_local_machine --> software --> microsoft --> windows --> currentversion --> run, which has a blank, and the subdirectory of that directory as well.
    Moving on to the next steps right now. And thanks for sharing your expertise on this matter! Really appreciated.

    EDIT: startup folder done, combofix told me to copy this to the forum telling me to run it, so here comes the spam: (again, some things might be dutch, will translate on request)

    ComboFix 10-11-20.05 - Maarten 24-11-2010 18:13:38.1.4 - x86 NETWORK
    Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.31.1043.18.3070.2487 [GMT 1:00]
    Gestart vanuit: c:\users\Maarten\Desktop\ComboFix.exe
    SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
    .

    (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\users\Maarten\AppData\Roaming\.#
    c:\users\Maarten\AppData\Roaming\.#\MBX@494@1BF2990.###
    c:\users\Maarten\AppData\Roaming\.#\MBX@494@1BF29C0.###
    c:\users\Maarten\AppData\Roaming\.#\MBX@494@1BF29F0.###
    c:\users\Maarten\AppData\Roaming\.#\MBX@668@1A82990.###
    c:\users\Maarten\AppData\Roaming\.#\MBX@668@1A829C0.###
    c:\users\Maarten\AppData\Roaming\.#\MBX@668@1A829F0.###

    .
    (((((((((((((((((((( Bestanden Gemaakt van 2010-10-24 to 2010-11-24 ))))))))))))))))))))))))))))))
    .

    2010-11-24 16:15 . 2010-11-24 16:15 -------- d-----w- c:\program files\CCleaner
    2010-11-24 06:05 . 2010-10-19 04:27 7680 ----a-w- c:\program files\Internet Explorer\iecompat.dll
    2010-11-23 22:16 . 2010-11-23 22:16 -------- d-----w- c:\program files\HD Tune Pro
    2010-11-23 21:59 . 2010-08-02 16:40 29144 ----a-w- c:\windows\system32\drivers\imdisk.sys
    2010-11-23 21:59 . 2010-08-02 16:40 10240 ----a-w- c:\windows\system32\imdsksvc.exe
    2010-11-23 21:59 . 2010-08-02 16:40 36864 ----a-w- c:\windows\system32\imdisk.exe
    2010-11-23 21:59 . 2010-08-02 16:40 82432 ----a-w- c:\windows\system32\imdisk.cpl
    2010-11-23 21:59 . 2010-07-23 06:33 15184 ----a-w- c:\windows\system32\drivers\awealloc.sys
    2010-11-23 19:13 . 2010-11-23 19:13 -------- d-----w- c:\program files\OCCT
    2010-11-23 19:07 . 2010-11-23 19:07 -------- d-----w- c:\program files\Core Temp
    2010-11-23 17:34 . 2010-11-23 17:34 -------- d-----w- c:\program files\SpeedFan
    2010-11-23 15:17 . 2010-11-23 15:17 -------- d-----w- c:\users\Maarten\AppData\Local\GHISLER
    2010-11-23 13:53 . 2010-11-23 13:53 -------- d-----w- c:\programdata\ATI
    2010-11-23 13:36 . 2010-11-23 13:42 -------- d--h--w- c:\program files\Temp
    2010-11-23 13:30 . 2010-11-23 13:30 -------- d-----w- c:\program files\ATI Stream
    2010-11-23 12:17 . 2010-11-23 12:17 -------- d-----w- C:\totalcmd
    2010-11-23 12:17 . 2010-11-23 12:17 -------- d-----w- c:\users\Maarten\AppData\Roaming\GHISLER
    2010-11-23 12:17 . 2010-07-07 06:55 545 ----a-w- c:\windows\UC.PIF
    2010-11-23 12:17 . 2010-07-07 06:55 545 ----a-w- c:\windows\RAR.PIF
    2010-11-23 12:17 . 2010-07-07 06:55 545 ----a-w- c:\windows\PKZIP.PIF
    2010-11-23 12:17 . 2010-07-07 06:55 545 ----a-w- c:\windows\PKUNZIP.PIF
    2010-11-23 12:17 . 2010-07-07 06:55 545 ----a-w- c:\windows\NOCLOSE.PIF
    2010-11-23 12:17 . 2010-07-07 06:55 545 ----a-w- c:\windows\LHA.PIF
    2010-11-23 12:17 . 2010-07-07 06:55 545 ----a-w- c:\windows\ARJ.PIF
    2010-11-23 00:37 . 2010-11-23 00:39 -------- d-----w- c:\programdata\EmailNotifier(10)
    2010-11-22 19:27 . 2010-11-22 19:27 -------- d-----w- c:\users\Maarten\AppData\Roaming\Uniblue
    2010-11-22 19:17 . 2010-11-22 19:17 -------- d-----w- c:\users\Maarten\AppData\Roaming\Malwarebytes
    2010-11-22 19:17 . 2010-11-22 19:17 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
    2010-11-22 19:17 . 2010-11-22 19:17 -------- d-----w- c:\programdata\Malwarebytes
    2010-11-22 19:05 . 2010-11-22 19:05 -------- d-----w- c:\users\Maarten\AppData\Roaming\InstallShield
    2010-11-22 17:49 . 2010-11-22 18:40 -------- d-----w- c:\programdata\Spybot - Search & Destroy
    2010-11-22 17:49 . 2010-11-22 17:50 -------- d-----w- c:\program files\Spybot - Search & Destroy
    2010-11-12 22:22 . 2010-11-17 19:49 -------- d-----w- c:\users\Maarten\AppData\Roaming\Spotify
    2010-11-12 22:22 . 2010-11-17 19:14 -------- d-----w- c:\users\Maarten\AppData\Local\Spotify
    2010-11-12 22:22 . 2010-11-12 22:22 -------- d-----w- c:\program files\Spotify
    2010-11-10 11:24 . 2010-10-07 11:37 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat
    2010-10-27 12:09 . 2010-08-26 16:34 1696256 ----a-w- c:\windows\system32\gameux.dll
    2010-10-27 12:09 . 2010-08-26 16:33 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
    2010-10-27 12:09 . 2010-08-26 14:23 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
    2010-10-27 03:59 . 2010-10-27 03:59 6573568 ----a-w- c:\windows\system32\drivers\atikmdag.sys
    2010-10-27 03:08 . 2010-10-27 03:08 16281600 ----a-w- c:\windows\system32\atioglxx.dll
    2010-10-27 02:55 . 2010-10-27 02:55 143360 ----a-w- c:\windows\system32\atiapfxx.exe
    2010-10-27 02:55 . 2010-10-27 02:55 547328 ----a-w- c:\windows\system32\aticfx32.dll
    2010-10-27 02:52 . 2010-10-27 02:52 450560 ----a-w- c:\windows\system32\ATIDEMGX.dll
    2010-10-27 02:51 . 2010-10-27 02:51 393216 ----a-w- c:\windows\system32\atieclxx.exe
    2010-10-27 02:51 . 2010-10-27 02:51 176128 ----a-w- c:\windows\system32\atiesrxx.exe
    2010-10-27 02:50 . 2010-10-27 02:50 159744 ----a-w- c:\windows\system32\atitmmxx.dll
    2010-10-27 02:50 . 2010-10-27 02:50 356352 ----a-w- c:\windows\system32\atipdlxx.dll
    2010-10-27 02:49 . 2010-10-27 02:49 278528 ----a-w- c:\windows\system32\Oemdspif.dll
    2010-10-27 02:49 . 2010-10-27 02:49 15872 ----a-w- c:\windows\system32\atimuixx.dll
    2010-10-27 02:49 . 2010-10-27 02:49 43520 ----a-w- c:\windows\system32\ati2edxx.dll
    2010-10-27 02:46 . 2010-10-27 02:46 4020736 ----a-w- c:\windows\system32\atidxx32.dll
    2010-10-27 02:35 . 2010-10-27 02:35 46080 ----a-w- c:\windows\system32\aticalrt.dll
    2010-10-27 02:35 . 2010-10-27 02:35 44032 ----a-w- c:\windows\system32\aticalcl.dll
    2010-10-27 02:33 . 2010-10-27 02:33 5441536 ----a-w- c:\windows\system32\aticaldd.dll
    2010-10-27 02:14 . 2010-10-27 02:14 249856 ----a-w- c:\windows\system32\atiadlxx.dll
    2010-10-27 02:14 . 2010-10-27 02:14 12800 ----a-w- c:\windows\system32\atiglpxx.dll
    2010-10-27 02:14 . 2010-10-27 02:14 27136 ----a-w- c:\windows\system32\atigktxx.dll
    2010-10-27 02:14 . 2010-10-27 02:14 229888 ----a-w- c:\windows\system32\drivers\atikmpag.sys
    2010-10-27 02:13 . 2010-10-27 02:13 30720 ----a-w- c:\windows\system32\atiuxpag.dll
    2010-10-27 02:12 . 2010-10-27 02:12 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
    2010-10-27 01:37 . 2010-10-27 01:37 52736 ----a-w- c:\windows\system32\atimpc32.dll
    2010-10-27 01:37 . 2010-10-27 01:37 52736 ----a-w- c:\windows\system32\amdpcom32.dll

    .
    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2010-11-23 13:36 . 2008-04-21 18:52 319456 ----a-w- c:\windows\DIFxAPI.dll
    2010-10-27 02:28 . 2009-02-28 05:40 4094464 ----a-w- c:\windows\system32\atiumdag.dll
    2010-10-27 02:14 . 2010-03-03 03:23 52736 ----a-w- c:\windows\system32\coinst.dll
    2010-10-27 02:13 . 2010-03-03 03:06 28672 ----a-w- c:\windows\system32\atiu9pag.dll
    2010-10-27 02:13 . 2010-03-03 03:06 23040 ----a-w- c:\windows\system32\atitmpxx.dll
    2010-10-27 01:50 . 2009-02-28 05:40 3460096 ----a-w- c:\windows\system32\atiumdva.dll
    2010-10-05 14:10 . 2010-10-05 14:09 188128 ----a-w- c:\programdata\Microsoft\VCSExpress\10.0\1033\ResourceCache.dll
    2010-09-24 12:46 . 2010-09-24 12:46 99856 ----a-w- c:\windows\system32\drivers\AtihdLH3.sys
    2010-09-22 22:47 . 2010-09-22 22:47 49016 ----a-w- c:\windows\system32\sirenacm.dll
    2010-09-15 03:50 . 2010-06-30 08:28 472808 ----a-w- c:\windows\system32\deployJava1.dll
    2010-09-13 13:56 . 2010-10-13 21:40 8147456 ----a-w- c:\windows\system32\wmploc.DLL
    2010-09-08 06:01 . 2010-10-13 21:39 916480 ----a-w- c:\windows\system32\wininet.dll
    2010-09-08 05:57 . 2010-10-13 21:39 43520 ----a-w- c:\windows\system32\licmgr10.dll
    2010-09-08 05:57 . 2010-10-13 21:39 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
    2010-09-08 05:56 . 2010-10-13 21:39 71680 ----a-w- c:\windows\system32\iesetup.dll
    2010-09-08 05:56 . 2010-10-13 21:39 109056 ----a-w- c:\windows\system32\iesysprep.dll
    2010-09-08 05:04 . 2010-10-13 21:39 385024 ----a-w- c:\windows\system32\html.iec
    2010-09-08 04:26 . 2010-10-13 21:39 133632 ----a-w- c:\windows\system32\ieUnatt.exe
    2010-09-08 04:25 . 2010-10-13 21:39 1638912 ----a-w- c:\windows\system32\mshtml.tlb
    2010-09-06 16:20 . 2010-10-13 21:40 125952 ----a-w- c:\windows\system32\srvsvc.dll
    2010-09-06 16:19 . 2010-10-13 21:40 17920 ----a-w- c:\windows\system32\netevent.dll
    2010-09-06 13:45 . 2010-10-13 21:40 304128 ----a-w- c:\windows\system32\drivers\srv.sys
    2010-09-06 13:45 . 2010-10-13 21:40 145408 ----a-w- c:\windows\system32\drivers\srv2.sys
    2010-09-06 13:45 . 2010-10-13 21:40 102400 ----a-w- c:\windows\system32\drivers\srvnet.sys
    2010-08-31 15:46 . 2010-10-13 21:39 954752 ----a-w- c:\windows\system32\mfc40.dll
    2010-08-31 15:46 . 2010-10-13 21:39 954288 ----a-w- c:\windows\system32\mfc40u.dll
    2010-08-31 15:44 . 2010-10-13 21:39 531968 ----a-w- c:\windows\system32\comctl32.dll
    2010-08-31 13:27 . 2010-10-13 21:39 2038272 ----a-w- c:\windows\system32\win32k.sys
    2010-08-27 18:32 . 2010-08-27 18:32 294912 ----a-w- c:\windows\system32\ATIODE.exe
    2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
    2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
    .

    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
    REGEDIT4

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
    "{cd90bf73-20f6-44ef-993d-bb920303bd2e}"= "c:\program files\Veoh_Web_Player\tbVeoh.dll" [2010-06-13 2734688]

    [HKEY_CLASSES_ROOT\clsid\{cd90bf73-20f6-44ef-993d-bb920303bd2e}]

    [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{cd90bf73-20f6-44ef-993d-bb920303bd2e}]
    2010-06-13 17:10 2734688 ----a-w- c:\program files\Veoh_Web_Player\tbVeoh.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
    "{cd90bf73-20f6-44ef-993d-bb920303bd2e}"= "c:\program files\Veoh_Web_Player\tbVeoh.dll" [2010-06-13 2734688]

    [HKEY_CLASSES_ROOT\clsid\{cd90bf73-20f6-44ef-993d-bb920303bd2e}]

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
    "{CD90BF73-20F6-44EF-993D-BB920303BD2E}"= "c:\program files\Veoh_Web_Player\tbVeoh.dll" [2010-06-13 2734688]

    [HKEY_CLASSES_ROOT\clsid\{cd90bf73-20f6-44ef-993d-bb920303bd2e}]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayiden tifiers\egisPSDP]
    @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
    [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
    2008-03-04 21:38 121392 ----a-w- c:\acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "NvSvc"="c:\windows\system32\nvsvc.dll" [2007-12-21 86016]
    "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-12-21 8497696]
    "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-12-21 81920]
    "eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe" [2008-03-04 526896]
    "PCMMediaSharing"="c:\program files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe" [2008-01-25 204908]
    "NVRaidService"="c:\windows\system32\nvraidservice.exe" [2008-06-06 203296]
    "WheelMouse"="c:\program files\Trust\GM-4600 Gamer Mouse\Amoumain.exe" [2008-06-29 196608]
    "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
    "StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-10-26 98304]
    "ATICustomerCare"="c:\program files\ATI\ATICustomerCare\ATICustomerCare.exe" [2010-05-04 311296]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
    "GrpConv"="grpconv -o" [X]
    "AvgUninstallURL"="start http:" [X]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "EnableUIADesktopToggle"= 0 (0x0)

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "AppInit_DLLs"=c:\progra~1\Google\GOOGLE~1\GOEC62~1.DLL

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
    @="Service"

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
    "DisableMonitoring"=dword:00000001

    R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2009-02-28 717296]
    R2 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service;c:\program files\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [2008-01-25 269448]
    R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-10-27 176128]
    R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
    R2 gupdate1ca13a119372ff0;Google Updateservice (gupdate1ca13a119372ff0);c:\program files\Google\Update\GoogleUpdate.exe [2009-08-02 133104]
    R2 RaAutoInstSrv_RT2870;RT2870 AutoInstall Service;c:\program files\Sitecom\RT2870 Flash Install Wireless LAN Card\AutoInstSvc\RaAutoInstSrv.exe [2008-09-11 20480]
    R2 VideoAcceleratorService;VideoAcceleratorService;c:\progra~1\SPEEDB~1\VideoAcceleratorServi ce.exe [2009-03-24 288368]
    R3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2010-10-27 6573568]
    R3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2010-10-27 229888]
    R3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdLH3.sys [2010-09-24 99856]
    R3 AWEAlloc;AWE Memory Allocation Driver;c:\windows\system32\DRIVERS\awealloc.sys [2010-07-23 15184]
    R3 GoogleDesktopManager-080708-050100;Google Desktop Manager 5.7.808.7150;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2009-02-27 24064]
    R3 ImDisk;ImDisk Virtual Disk Driver;c:\windows\system32\DRIVERS\imdisk.sys [2010-08-02 29144]
    R3 ImDskSvc;ImDisk Virtual Disk Driver Helper;c:\windows\system32\imdsksvc.exe [2010-08-02 10240]
    R3 netr28u;RT2870 USB Wireless LAN Card Driver for Vista;c:\windows\system32\DRIVERS\netr28u.sys [2008-10-29 655872]
    R3 nosGetPlusHelper;getPlus(R) Helper 3004;c:\windows\System32\svchost.exe [2008-01-21 21504]
    R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des [2009-02-17 2736890]
    R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32v.sys [2008-04-28 42528]
    R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
    S3 netr73;Sitecom RT73 Wireless Driver for Vista;c:\windows\system32\DRIVERS\netr73.sys [2007-05-11 329728]


    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
    LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
    nosGetPlusHelper REG_MULTI_SZ nosGetPlusHelper
    .
    Inhoud van de 'Gedeelde Taken' map

    2010-11-24 c:\windows\Tasks\Google Software Updater.job
    - c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-02-27 18:42]

    2010-11-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2009-08-02 18:43]

    2010-11-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
    - c:\program files\Google\Update\GoogleUpdate.exe [2009-08-02 18:43]

    2010-11-24 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-1382170220-330116531-3314398447-1000.job
    - c:\program files\Real\RealUpgrade\realupgrade.exe [2010-02-24 20:09]

    2010-11-24 c:\windows\Tasks\User_Feed_Synchronization-{31C4A4D1-2479-4D33-AEAF-772E9C3123A7}.job
    - c:\windows\system32\msfeedssync.exe [2010-10-13 04:25]
    .
    .
    ------- Bijkomende Scan -------
    .
    uStart Page = hxxp://www.google.nl/ig?hl=nl&source=iglk
    mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&s=1&o=vp32&d=0209&m=aspire_m3641
    uInternet Settings,ProxyOverride = *.local
    IE: Download Link Using Mega Manager... - c:\program files\Megaupload\Mega Manager\mm_file.htm
    IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    TCP: {74573CDE-C8A4-4D65-A502-B063E694F98A} = 192.168.1.1
    DPF: {11D5C0F9-6D73-429B-9002-0B53D7F94611} - hxxp://www.referentiemateriaalvo.noordhoff.nl/VuSoft/vg5/vg5.cab
    FF - ProfilePath - c:\users\Maarten\AppData\Roaming\Mozilla\Firefox\Profiles\99ez5d13.default\
    FF - prefs.js: browser.search.selectedEngine - Google
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
    FF - prefs.js: keyword.URL - hxxp://nl.search.yahoo.com/search?ei=utf-8&fr=megaup&p=
    FF - component: c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll
    FF - component: c:\programdata\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\components\nprpffbrowserrec ordext.dll
    FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
    FF - plugin: c:\program files\Google\Google Updater\2.4.1636.7222\npCIDetect13.dll
    FF - plugin: c:\program files\Google\Update\1.2.183.39\npGoogleOneClick8.dll
    FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\npijjiautoinstallpluginff.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\npPandoWebInst.dll
    FF - plugin: c:\program files\Veoh Networks\VeohWebPlayer\npWebPlayerVideoPluginATL.dll
    FF - plugin: c:\programdata\NexonEU\NGM\npNxGameeu.dll
    FF - plugin: c:\programdata\NexonUS\NGM\npNxGameUS.dll
    FF - plugin: c:\programdata\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
    FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

    ---- FIREFOX POLICIES ----
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqz9s", true); // Traditional
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--fiqs8s", true); // Simplified
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--j6w193g", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4a87g", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7c0a67fbc", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbqly7cvafr", true);
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kpry57d", true); // Traditional
    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--kprw13d", true); // Simplified
    .
    - - - - ORPHANS VERWIJDERD - - - -

    HKLM-Run-Apanel - c:\acersw\config\SetApanel.cmd
    HKLM-Run-eRecoveryService - (no file)
    HKLM-RunOnce-<NO NAME> - (no file)
    SafeBoot-mcmscsvc
    SafeBoot-MCODS
    AddRemove-Call of Duty Modern Warfare 2_is1 - d:\games\Modern Warfare 2\unins000.exe
    AddRemove-Counter-Strike 1.6 - d:\games\Counter Strike 1.6\Uninstal.exe
    AddRemove-Europe MapleStory_is1 - d:\games\Europe MapleStory\unins000.exe
    AddRemove-Fiesta Online(EU_English) - d:\games\Fiesta Online(EU_English)\uninst.exe
    AddRemove-Halo - d:\games\Halo\UNINSTAL.EXE
    AddRemove-KaM - The Peasants Rebellion - c:\progra~1\KAM-TH~1\UNWISE.EXE



    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2010-11-24 18:19
    Windows 6.0.6002 Service Pack 2 NTFS

    scannen van verborgen processen ...

    scannen van verborgen autostart items ...

    scannen van verborgen bestanden ...

    Scan succesvol afgerond
    verborgen bestanden: 0

    **************************************************************************

    [HKEY_LOCAL_MACHINE\system\ControlSet001\Services\npggsvc]
    "ImagePath"="c:\windows\system32\GameMon.des -service"
    .
    --------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

    [HKEY_USERS\S-1-5-21-1382170220-330116531-3314398447-1000\Software\SecuROM\License information*]
    "datasecu"=hex:f5,fd,dc,60,4b,b9,98,fe,76,08,81,8a,c4,9c,75,d1,f3,dd,ea,54,16,
    f8,18,83,19,ac,83,6f,ba,b1,55,b0,94,17,b3,d7,b0,bd,54,92,8d,04,f9,6a,6c,14,\
    "rkeysecu"=hex:a9,9a,fc,66,e8,d3,ae,77,80,e6,24,47,b6,94,6a,c8
    .
    --------------------- DLLs Geladen Onder Lopende Processen ---------------------

    - - - - - - - > 'Explorer.exe'(1640)
    c:\acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll
    c:\acer\Empowering Technology\eDataSecurity\x86\sysenv.dll
    .
    Voltooingstijd: 2010-11-24 18:22:19
    ComboFix-quarantined-files.txt 2010-11-24 17:22

    Pre-Run: 165.125.083.136 bytes beschikbaar
    Post-Run: 167.473.369.088 bytes beschikbaar

    - - End Of File - - 93FA2BE96224EE5ECE2A548B2C0FA141
    Last edited by Szemere; 2010-11-24 at 05:28 PM. Reason: added combofix

  6. #26
    Andere Verwijderingen I assume means deleted files. So it found something in your app data folder that looked suspicious atleast. I am not sure if it is the root cause of your problem.

    Try using a proxy for EZPCFIX because the download works fine on my end.
    http://www.orphanguild.com/ - SWTOR Guild US West Coast PvP

  7. #27
    Warchief Szemere's Avatar
    Join Date
    May 2010
    Location
    Gnomeregan
    Posts
    2,196
    YES.
    My brother is a genious.
    Unplugging my CD/DVD drive fixed most issues =D.
    One issue yet remains, WoW crashing.
    And that i do not have a CD/DVD drive now. (in before buy a new one, i will:P)

    So as this topic is not appropriately named anymore, i will first try and milk out the official WoW forums, and after that maybe start a new topic here.

    Thanks for all the help, apparantly that piece of hardware was breaking my system.
    I will keep checking on this threat to see whether anyone has an idea why WoW crashes.

    EDIT: link to my posts on official forums:
    old forum 2 days ago: http://forums.wow-europe.com/thread....504526&sid=1#1
    new forum: http://eu.battle.net/wow/en/forum/topic/916822503#1
    Last edited by Szemere; 2010-11-24 at 09:32 PM. Reason: GREAT NEWS

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •