Blue screen

[marianne]

Hallo, ik heb al een paar dagen last van een telkens terugkeren blue screen. Kan iemand mij helpen? WhoCrashed geeft de volgende foutmelding:


On Tue 18-9-2012 11:05:34 GMT your computer crashed
crash dump file: C:\Windows\Minidump\Mini091812-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x57AD0)
Bugcheck code: 0xA (0x3E595F, 0x2, 0x1, 0xFFFFF8000366F517)
Error: IRQL_NOT_LESS_OR_EQUAL
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that Microsoft Windows or a kernel-mode driver accessed paged memory at DISPATCH_LEVEL or above.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time.


On Tue 18-9-2012 11:05:34 GMT your computer crashed
crash dump file: C:\Windows\memory.dmp
This was probably caused by the following module: ntkrnlmp.exe (nt!KeBugCheckEx+0x0)
Bugcheck code: 0xA (0x3E595F, 0x2, 0x1, 0xFFFFF8000366F517)
Error: IRQL_NOT_LESS_OR_EQUAL
Bug check description: This indicates that Microsoft Windows or a kernel-mode driver accessed paged memory at DISPATCH_LEVEL or above.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time.


On Sun 16-9-2012 19:45:02 GMT your computer crashed
crash dump file: C:\Windows\Minidump\Mini091612-02.dmp
This was probably caused by the following module: Unknown (0xFFFFFA6000FDD7A2)
Bugcheck code: 0x3B (0xC0000005, 0xFFFFF8000392A4DE, 0xFFFFFA600A213650, 0x0)
Error: SYSTEM_SERVICE_EXCEPTION
Bug check description: This indicates that an exception happened while executing a routine that transitions from non-privileged code to privileged code.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: Unknown .
Google query: Unknown SYSTEM_SERVICE_EXCEPTION




On Sun 16-9-2012 17:45:43 GMT your computer crashed
crash dump file: C:\Windows\Minidump\Mini091612-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x57AD0)
Bugcheck code: 0xA (0x0, 0xC, 0x1, 0xFFFFF800036A827D)
Error: IRQL_NOT_LESS_OR_EQUAL
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that Microsoft Windows or a kernel-mode driver accessed paged memory at DISPATCH_LEVEL or above.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time.


On Sat 15-9-2012 19:10:48 GMT your computer crashed
crash dump file: C:\Windows\Minidump\Mini091512-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x57AD0)
Bugcheck code: 0xA (0x0, 0xC, 0x1, 0xFFFFF800036730E1)
Error: IRQL_NOT_LESS_OR_EQUAL
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This indicates that Microsoft Windows or a kernel-mode driver accessed paged memory at DISPATCH_LEVEL or above.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time.



--------------------------------------------------------------------------------
Conclusion
--------------------------------------------------------------------------------

5 crash dumps have been found and analyzed. A third party driver has been identified to be causing system crashes on your computer. It is strongly suggested that you check for updates for these drivers on their company websites. Click on the links below to search with Google for updates for these drivers:

unknown

If no updates for these drivers are available, try searching with Google on the names of these drivers in combination the errors that have been reported for these drivers and include the brand and model name of your computer as well in the query. This often yields interesting results from discussions from users who have been experiencing similar problems.

[Abraham54]

Doe het volgende:

Welk programma: TDSSStarter .exe
Waarvoor/waarom: Rootkitscanner
Moeilijkheidsgraad: geen
Download TDSSStarter naar het bureaublad.
Tijdelijk downloadlink: TDSSStarter

"TDSSSStarter.exe" gebruiken:

• Sluit nu eerst alle nog openstaande programmavensters!
  • Windows 2000 en Windows XP: start het tool middels dubbelklik op " TDSSStarter .exe".
  • Windows Vista en Windows 7: start het tool middels rechtsklik op "TDSSStarter.exe" en dan kiezen voor Als Administrator uitvoeren.
• Vervolgens zal een CMD-venster gestart worden en wanneer de scan gereed is weer automatisch sluiten.
• Post nu de inhoud van het geopende kladblokbestand in het volgende bericht.

[marianne]

Inmiddels had ik de unknown driver uitgeschakeld en dit schijnt het probleem geweest te zijn. Ik zal in ieder geval je aanwijzingen opslaan voor het geval dat het weer misgaat. Erg bedankt voor je hulp!

[marianne]

Voor alle zekerheid toch nog even je advies opgevolgd maar TDSSSStarter krijg ik niet op mijn bureaublad. Als ik op uitvoeren klik scant ie gelijk mijn computer. In kladblok krijg ik dan een TDSS rootkit removing tool te zien. Is het de bedoeling dat ik dat hier plaats?

[Abraham54]

Je moet ook niet op Uitvoeren klikken maar op Downloaden.
En gaat het dan naar je downloadmap, dan het bestand eerst verplaatsen naar het bureaublad!

[marianne]

13:26:33.0929 4360 TDSS rootkit removing tool 2.8.10.0 Sep 17 2012 19:23:24
13:26:33.0929 4360 ============================================================
13:26:33.0929 4360 Current date / time: 2012/09/23 13:26:33.0929
13:26:33.0929 4360 SystemInfo:
13:26:33.0929 4360
13:26:33.0929 4360 OS Version: 6.0.6002 ServicePack: 2.0
13:26:33.0929 4360 Product type: Workstation
13:26:33.0929 4360 ComputerName: PC_VAN_FAM_URI
13:26:33.0929 4360 UserName: Uri
13:26:33.0929 4360 Windows directory: C:\Windows
13:26:33.0929 4360 System windows directory: C:\Windows
13:26:33.0929 4360 Running under WOW64
13:26:33.0929 4360 Processor architecture: Intel x64
13:26:33.0929 4360 Number of processors: 4
13:26:33.0929 4360 Page size: 0x1000
13:26:33.0929 4360 Boot type: Normal boot
13:26:33.0929 4360 ============================================================
13:26:37.0252 4360 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 (931.51 Gb), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
13:26:37.0267 4360 Drive \Device\Harddisk1\DR1 - Size: 0x2F7B100000 (189.92 Gb), SectorSize: 0x200, Cylinders: 0x60D8, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'W'
13:26:37.0314 4360 ============================================================
13:26:37.0314 4360 \Device\Harddisk0\DR0:
13:26:37.0392 4360 MBR partitions:
13:26:37.0423 4360 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x6FB1F800, BlocksNum 0x4BE6000
13:26:37.0423 4360 \Device\Harddisk1\DR1:
13:26:37.0423 4360 MBR partitions:
13:26:37.0423 4360 \Device\Harddisk1\DR1\Partition1: MBR, Type 0xB, StartLBA 0x3F, BlocksNum 0x17BD5299
13:26:37.0423 4360 ============================================================
13:26:37.0423 4360 F: <-> \Device\Harddisk1\DR1\Partition1
13:26:37.0579 4360 D: <-> \Device\Harddisk0\DR0\Partition1
13:26:37.0579 4360 ============================================================
13:26:37.0579 4360 Initialize success
13:26:37.0579 4360 ============================================================
13:26:37.0642 3432 ============================================================
13:26:37.0642 3432 Scan started
13:26:37.0642 3432 Mode: Auto (DCExact ); SigCheck; TDLFS; Silent;
13:26:37.0642 3432 ============================================================
13:26:39.0404 3432 ================ Scan system memory ========================
13:26:39.0451 3432 System memory - ok
13:26:39.0451 3432 ================ Scan services =============================
13:26:39.0498 3432 ABBYY.Licensing.FineReader.Sprint.9.0 - ok
13:26:39.0498 3432 ACPI - ok
13:26:39.0498 3432 AdobeActiveFileMonitor6.0 - ok
13:26:39.0498 3432 AdobeARMservice - ok
13:26:39.0498 3432 AdobeFlashPlayerUpdateSvc - ok
13:26:39.0498 3432 adp94xx - ok
13:26:39.0498 3432 adpahci - ok
13:26:39.0498 3432 adpu160m - ok
13:26:39.0498 3432 adpu320 - ok
13:26:39.0498 3432 AeLookupSvc - ok
13:26:39.0498 3432 AFD - ok
13:26:39.0498 3432 agp440 - ok
13:26:39.0498 3432 aic78xx - ok
13:26:39.0498 3432 ALG - ok
13:26:39.0498 3432 aliide - ok
13:26:39.0498 3432 amdide - ok
13:26:39.0498 3432 AmdK8 - ok
13:26:39.0514 3432 Appinfo - ok
13:26:39.0514 3432 Apple Mobile Device - ok
13:26:39.0514 3432 arc - ok
13:26:39.0514 3432 arcsas - ok
13:26:39.0529 3432 aswKbd - ok
13:26:39.0529 3432 AsyncMac - ok
13:26:39.0545 3432 atapi - ok
13:26:39.0545 3432 AudioEndpointBuilder - ok
13:26:39.0545 3432 AudioSrv - ok
13:26:39.0545 3432 BBSvc - ok
13:26:39.0545 3432 BBUpdate - ok
13:26:39.0545 3432 bdfsfltr - ok
13:26:39.0545 3432 BFE - ok
13:26:39.0545 3432 BITS - ok
13:26:39.0545 3432 blbdrive - ok
13:26:39.0545 3432 Bonjour Service - ok
13:26:39.0545 3432 bowser - ok
13:26:39.0545 3432 BrFiltLo - ok
13:26:39.0545 3432 BrFiltUp - ok
13:26:39.0545 3432 Browser - ok
13:26:39.0545 3432 Brserid - ok
13:26:39.0545 3432 BrSerWdm - ok
13:26:39.0545 3432 BrUsbMdm - ok
13:26:39.0560 3432 BrUsbSer - ok
13:26:39.0560 3432 BTHMODEM - ok
13:26:39.0592 3432 cdfs - ok
13:26:39.0592 3432 cdrom - ok
13:26:39.0592 3432 CertPropSvc - ok
13:26:39.0592 3432 circlass - ok
13:26:39.0592 3432 CLFS - ok
13:26:39.0592 3432 clr_optimization_v2.0.50727_32 - ok
13:26:39.0592 3432 clr_optimization_v2.0.50727_64 - ok
13:26:39.0592 3432 clr_optimization_v4.0.30319_32 - ok
13:26:39.0592 3432 clr_optimization_v4.0.30319_64 - ok
13:26:39.0592 3432 cmdide - ok
13:26:39.0592 3432 Compbatt - ok
13:26:39.0592 3432 COMSysApp - ok
13:26:39.0592 3432 crcdisk - ok
13:26:39.0592 3432 CryptSvc - ok
13:26:39.0607 3432 DcomLaunch - ok
13:26:39.0607 3432 DfsC - ok
13:26:39.0607 3432 DFSR - ok
13:26:39.0638 3432 Dhcp - ok
13:26:39.0638 3432 disk - ok
13:26:39.0638 3432 Dnscache - ok
13:26:39.0638 3432 dot3svc - ok
13:26:39.0638 3432 DPS - ok
13:26:39.0638 3432 drmkaud - ok
13:26:39.0638 3432 DXGKrnl - ok
13:26:39.0638 3432 E1G60 - ok
13:26:39.0638 3432 EapHost - ok
13:26:39.0638 3432 Ecache - ok
13:26:39.0685 3432 ehRecvr - ok
13:26:39.0685 3432 ehSched - ok
13:26:39.0732 3432 ehstart - ok
13:26:39.0732 3432 elxstor - ok
13:26:39.0763 3432 EMDMgmt - ok
13:26:39.0763 3432 EpsonBidirectionalService - ok
13:26:39.0763 3432 ErrDev - ok
13:26:39.0826 3432 EventSystem - ok
13:26:39.0826 3432 exfat - ok
13:26:39.0904 3432 fastfat - ok
13:26:39.0904 3432 fdc - ok
13:26:39.0904 3432 fdPHost - ok
13:26:39.0904 3432 FDResPub - ok
13:26:39.0904 3432 FileInfo - ok
13:26:39.0904 3432 Filetrace - ok
13:26:39.0904 3432 flpydisk - ok
13:26:39.0904 3432 FltMgr - ok
13:26:39.0904 3432 FontCache - ok
13:26:39.0919 3432 FontCache3.0.0.0 - ok
13:26:39.0919 3432 ForceWare Intelligent Application Manager (IAM) - ok
13:26:39.0919 3432 fssfltr - ok
13:26:39.0919 3432 fsssvc - ok
13:26:39.0919 3432 Fs_Rec - ok
13:26:39.0919 3432 gagp30kx - ok
13:26:39.0919 3432 GEARAspiWDM - ok
13:26:39.0919 3432 GenericHidService - ok
13:26:39.0919 3432 gpsvc - ok
13:26:39.0919 3432 gupdate - ok
13:26:39.0919 3432 gupdatem - ok
13:26:39.0919 3432 gusvc - ok
13:26:39.0919 3432 HBtnKey - ok
13:26:39.0919 3432 HdAudAddService - ok
13:26:39.0919 3432 HDAudBus - ok
13:26:39.0919 3432 HidBth - ok
13:26:39.0919 3432 HidIr - ok
13:26:39.0966 3432 hidserv - ok
13:26:39.0966 3432 HidUsb - ok
13:26:39.0966 3432 hkmsvc - ok
13:26:39.0982 3432 HpCISSs - ok
13:26:39.0982 3432 HTTP - ok
13:26:39.0982 3432 i2omp - ok
13:26:39.0982 3432 i8042prt - ok
13:26:39.0982 3432 iaStorV - ok
13:26:39.0982 3432 idsvc - ok
13:26:39.0982 3432 iirsp - ok
13:26:39.0982 3432 IKEEXT - ok
13:26:39.0982 3432 IntcAzAudAddService - ok
13:26:39.0982 3432 intelide - ok
13:26:39.0982 3432 intelppm - ok
13:26:39.0982 3432 IPBusEnum - ok
13:26:39.0982 3432 IpFilterDriver - ok
13:26:39.0982 3432 iphlpsvc - ok
13:26:39.0982 3432 IpInIp - ok
13:26:39.0982 3432 IPMIDRV - ok
13:26:39.0997 3432 IPNAT - ok
13:26:39.0997 3432 iPod Service - ok
13:26:39.0997 3432 IRENUM - ok
13:26:39.0997 3432 isapnp - ok
13:26:39.0997 3432 iScsiPrt - ok
13:26:39.0997 3432 iteatapi - ok
13:26:39.0997 3432 iteraid - ok
13:26:39.0997 3432 johci - ok
13:26:39.0997 3432 kbdclass - ok
13:26:39.0997 3432 kbdhid - ok
13:26:39.0997 3432 KeyIso - ok
13:26:39.0997 3432 KSecDD - ok
13:26:39.0997 3432 ksthunk - ok
13:26:40.0044 3432 KtmRm - ok
13:26:40.0044 3432 LanmanServer - ok
13:26:40.0044 3432 LanmanWorkstation - ok
13:26:40.0106 3432 LHidFilt - ok
13:26:40.0106 3432 lltdio - ok
13:26:40.0106 3432 lltdsvc - ok
13:26:40.0106 3432 lmhosts - ok
13:26:40.0122 3432 LMouFilt - ok
13:26:40.0122 3432 LSI_FC - ok
13:26:40.0122 3432 LSI_SAS - ok
13:26:40.0122 3432 LSI_SCSI - ok
13:26:40.0122 3432 luafv - ok
13:26:40.0122 3432 LUsbFilt - ok
13:26:40.0278 3432 MBAMProtector - ok
13:26:40.0278 3432 MBAMScheduler - ok
13:26:40.0278 3432 MBAMService - ok
13:26:40.0278 3432 Mcx2Svc - ok
13:26:40.0278 3432 megasas - ok
13:26:40.0294 3432 MegaSR - ok
13:26:40.0325 3432 MMCSS - ok
13:26:40.0325 3432 Modem - ok
13:26:40.0325 3432 monitor - ok
13:26:40.0325 3432 mouclass - ok
13:26:40.0340 3432 mouhid - ok
13:26:40.0340 3432 MountMgr - ok
13:26:40.0340 3432 mpio - ok
13:26:40.0340 3432 mpsdrv - ok
13:26:40.0340 3432 MpsSvc - ok
13:26:40.0340 3432 Mraid35x - ok
13:26:40.0340 3432 MRxDAV - ok
13:26:40.0340 3432 mrxsmb - ok
13:26:40.0340 3432 mrxsmb10 - ok
13:26:40.0340 3432 mrxsmb20 - ok
13:26:40.0340 3432 msahci - ok
13:26:40.0340 3432 msdsm - ok
13:26:40.0340 3432 MSDTC - ok
13:26:40.0356 3432 Msfs - ok
13:26:40.0356 3432 msisadrv - ok
13:26:40.0356 3432 MSiSCSI - ok
13:26:40.0356 3432 msiserver - ok
13:26:40.0356 3432 MSKSSRV - ok
13:26:40.0356 3432 MSPCLOCK - ok
13:26:40.0356 3432 MSPQM - ok
13:26:40.0356 3432 MsRPC - ok
13:26:40.0356 3432 mssmbios - ok
13:26:40.0356 3432 MSTEE - ok
13:26:40.0356 3432 Mup - ok
13:26:40.0356 3432 MWAgent - ok
13:26:40.0403 3432 napagent - ok
13:26:40.0450 3432 NativeWifiP - ok
13:26:40.0450 3432 NDIS - ok
13:26:40.0450 3432 NdisTapi - ok
13:26:40.0450 3432 Ndisuio - ok
13:26:40.0450 3432 NdisWan - ok
13:26:40.0450 3432 NDProxy - ok
13:26:40.0465 3432 Nero BackItUp Scheduler 3 - ok
13:26:40.0465 3432 NetBIOS - ok
13:26:40.0465 3432 netbt - ok
13:26:40.0465 3432 Netlogon - ok
13:26:40.0465 3432 Netman - ok
13:26:40.0465 3432 netprofm - ok
13:26:40.0465 3432 NetTcpPortSharing - ok
13:26:40.0465 3432 nfrd960 - ok
13:26:40.0465 3432 NlaSvc - ok
13:26:40.0465 3432 NMIndexingService - ok
13:26:40.0496 3432 Npfs - ok
13:26:40.0496 3432 nsi - ok
13:26:40.0496 3432 nsiproxy - ok
13:26:40.0496 3432 nSvcIp - ok
13:26:40.0496 3432 Ntfs - ok
13:26:40.0496 3432 Null - ok
13:26:40.0496 3432 nvamacpi - ok
13:26:40.0512 3432 NVENETFD - ok
13:26:40.0512 3432 NVHDA - ok
13:26:40.0512 3432 nvlddmkm - ok
13:26:40.0512 3432 NVNET - ok
13:26:40.0512 3432 nvraid - ok
13:26:40.0512 3432 nvrd64 - ok
13:26:40.0512 3432 nvsmu - ok
13:26:40.0512 3432 nvstor - ok
13:26:40.0512 3432 nvstor64 - ok
13:26:40.0512 3432 nvsvc - ok
13:26:40.0512 3432 nvUpdatusService - ok
13:26:40.0512 3432 nv_agp - ok
13:26:40.0512 3432 NwlnkFlt - ok
13:26:40.0528 3432 NwlnkFwd - ok
13:26:40.0528 3432 odserv - ok
13:26:40.0528 3432 ohci1394 - ok
13:26:40.0528 3432 ose - ok
13:26:40.0528 3432 p2pimsvc - ok
13:26:40.0528 3432 p2psvc - ok
13:26:40.0528 3432 Parport - ok
13:26:40.0528 3432 partmgr - ok
13:26:40.0528 3432 PcaSvc - ok
13:26:40.0528 3432 pci - ok
13:26:40.0528 3432 pciide - ok
13:26:40.0528 3432 pcmcia - ok
13:26:40.0528 3432 PEAUTH - ok
13:26:40.0528 3432 PerfHost - ok
13:26:40.0543 3432 pla - ok
13:26:40.0543 3432 PlugPlay - ok
13:26:40.0543 3432 PNRPAutoReg - ok
13:26:40.0559 3432 PNRPsvc - ok
13:26:40.0559 3432 PolicyAgent - ok
13:26:40.0559 3432 PptpMiniport - ok
13:26:40.0574 3432 Processor - ok
13:26:40.0574 3432 ProfSvc - ok
13:26:40.0574 3432 ProtectedStorage - ok
13:26:40.0574 3432 PSched - ok
13:26:40.0574 3432 PxHlpa64 - ok
13:26:40.0574 3432 ql2300 - ok
13:26:40.0574 3432 ql40xx - ok
13:26:40.0574 3432 QWAVE - ok
13:26:40.0574 3432 QWAVEdrv - ok
13:26:40.0574 3432 RasAcd - ok
13:26:40.0574 3432 RasAuto - ok
13:26:40.0574 3432 Rasl2tp - ok
13:26:40.0574 3432 RasMan - ok
13:26:40.0574 3432 RasPppoe - ok
13:26:40.0590 3432 RasSstp - ok
13:26:40.0590 3432 rdbss - ok
13:26:40.0621 3432 RDPCDD - ok
13:26:40.0621 3432 rdpdr - ok
13:26:40.0621 3432 RDPENCDD - ok
13:26:40.0621 3432 RDPWD - ok
13:26:40.0621 3432 RemoteAccess - ok
13:26:40.0637 3432 RemoteRegistry - ok
13:26:40.0637 3432 RpcLocator - ok
13:26:40.0637 3432 RpcSs - ok
13:26:40.0637 3432 rspndr - ok
13:26:40.0684 3432 s116bus - ok
13:26:40.0684 3432 SamSs - ok
13:26:40.0684 3432 sbp2port - ok
13:26:40.0684 3432 SCardSvr - ok
13:26:40.0684 3432 Schedule - ok
13:26:40.0684 3432 SCPolicySvc - ok
13:26:40.0684 3432 SDRSVC - ok
13:26:40.0684 3432 secdrv - ok
13:26:40.0684 3432 seclogon - ok
13:26:40.0699 3432 SENS - ok
13:26:40.0699 3432 Serenum - ok
13:26:40.0699 3432 Serial - ok
13:26:40.0699 3432 sermouse - ok
13:26:40.0746 3432 SessionEnv - ok
13:26:40.0746 3432 sffdisk - ok
13:26:40.0746 3432 sffp_mmc - ok
13:26:40.0746 3432 sffp_sd - ok
13:26:40.0746 3432 sfloppy - ok
13:26:40.0855 3432 SharedAccess - ok
13:26:41.0089 3432 ShellHWDetection - ok
13:26:41.0089 3432 SiSRaid2 - ok
13:26:41.0089 3432 SiSRaid4 - ok
13:26:41.0089 3432 slsvc - ok
13:26:41.0152 3432 SLUINotify - ok
13:26:41.0152 3432 Smb - ok
13:26:41.0152 3432 SNMPTRAP - ok
13:26:41.0152 3432 spldr - ok
13:26:41.0152 3432 Spooler - ok
13:26:41.0152 3432 srv - ok
13:26:41.0152 3432 srv2 - ok
13:26:41.0167 3432 srvnet - ok
13:26:41.0167 3432 SSDPSRV - ok
13:26:41.0167 3432 SstpSvc - ok
13:26:41.0214 3432 Stereo Service - ok
13:26:41.0214 3432 stisvc - ok
13:26:41.0214 3432 swenum - ok
13:26:41.0214 3432 swprv - ok
13:26:41.0214 3432 Symc8xx - ok
13:26:41.0214 3432 Sym_hi - ok
13:26:41.0214 3432 Sym_u3 - ok
13:26:41.0214 3432 SysMain - ok
13:26:41.0214 3432 TabletInputService - ok
13:26:41.0230 3432 TapiSrv - ok
13:26:41.0230 3432 TBS - ok
13:26:41.0230 3432 Tcpip - ok
13:26:41.0230 3432 Tcpip6 - ok
13:26:41.0230 3432 tcpipreg - ok
13:26:41.0230 3432 TDPIPE - ok
13:26:41.0230 3432 TDTCP - ok
13:26:41.0230 3432 tdx - ok
13:26:41.0230 3432 TermDD - ok
13:26:41.0230 3432 TermService - ok
13:26:41.0245 3432 Themes - ok
13:26:41.0245 3432 THREADORDER - ok
13:26:41.0245 3432 TrkWks - ok
13:26:41.0245 3432 TrustedInstaller - ok
13:26:41.0245 3432 tssecsrv - ok
13:26:41.0245 3432 tunmp - ok
13:26:41.0245 3432 tunnel - ok
13:26:41.0245 3432 uagp35 - ok
13:26:41.0245 3432 udfs - ok
13:26:41.0245 3432 UI0Detect - ok
13:26:41.0245 3432 uliagpkx - ok
13:26:41.0261 3432 uliahci - ok
13:26:41.0261 3432 UlSata - ok
13:26:41.0261 3432 ulsata2 - ok
13:26:41.0261 3432 umbus - ok
13:26:41.0261 3432 upnphost - ok
13:26:41.0261 3432 usbccgp - ok
13:26:41.0261 3432 usbcir - ok
13:26:41.0261 3432 usbehci - ok
13:26:41.0261 3432 usbhub - ok
13:26:41.0261 3432 usbohci - ok
13:26:41.0261 3432 usbprint - ok
13:26:41.0261 3432 usbscan - ok
13:26:41.0276 3432 USBSTOR - ok
13:26:41.0276 3432 usbuhci - ok
13:26:41.0276 3432 UxSms - ok
13:26:41.0276 3432 vds - ok
13:26:41.0276 3432 vga - ok
13:26:41.0276 3432 VgaSave - ok
13:26:41.0276 3432 viaide - ok
13:26:41.0276 3432 volmgr - ok
13:26:41.0276 3432 volmgrx - ok
13:26:41.0276 3432 volsnap - ok
13:26:41.0276 3432 vsmraid - ok
13:26:41.0292 3432 VSS - ok
13:26:41.0292 3432 W32Time - ok
13:26:41.0292 3432 WacomPen - ok
13:26:41.0292 3432 Wanarp - ok
13:26:41.0292 3432 Wanarpv6 - ok
13:26:41.0292 3432 wcncsvc - ok
13:26:41.0292 3432 WcsPlugInService - ok
13:26:41.0292 3432 Wd - ok
13:26:41.0292 3432 Wdf01000 - ok
13:26:41.0292 3432 WdiServiceHost - ok
13:26:41.0292 3432 WdiSystemHost - ok
13:26:41.0308 3432 WebClient - ok
13:26:41.0308 3432 Wecsvc - ok
13:26:41.0308 3432 wercplsupport - ok
13:26:41.0308 3432 WerSvc - ok
13:26:41.0308 3432 WinDefend - ok
13:26:41.0308 3432 WinHttpAutoProxySvc - ok
13:26:41.0308 3432 Winmgmt - ok
13:26:41.0308 3432 WinRM - ok
13:26:41.0308 3432 winusb - ok
13:26:41.0323 3432 Wlansvc - ok
13:26:41.0323 3432 wlcrasvc - ok
13:26:41.0323 3432 wlidsvc - ok
13:26:41.0323 3432 WmiAcpi - ok
13:26:41.0323 3432 wmiApSrv - ok
13:26:41.0323 3432 WMPNetworkSvc - ok
13:26:41.0323 3432 WPCSvc - ok
13:26:41.0323 3432 WPDBusEnum - ok
13:26:41.0323 3432 WpdUsb - ok
13:26:41.0323 3432 WPFFontCache_v0400 - ok
13:26:41.0323 3432 ws2ifsl - ok
13:26:41.0339 3432 wscsvc - ok
13:26:41.0339 3432 WSearch - ok
13:26:41.0339 3432 wuauserv - ok
13:26:41.0339 3432 WUDFRd - ok
13:26:41.0339 3432 wudfsvc - ok
13:26:41.0339 3432 ================ Scan global ===============================
13:26:41.0620 3432 [Global] - ok
13:26:41.0620 3432 ================ Scan MBR ==================================
13:26:41.0651 3432 [ 4C1C466E0D9E7B73AD314F6E31C2964F ] \Device\Harddisk0\DR0
13:26:47.0133 3432 \Device\Harddisk0\DR0 - ok
13:26:47.0135 3432 [ A4A15D6782E6FE1DCE41A606CB3AFFE3 ] \Device\Harddisk1\DR1
13:26:50.0250 3432 \Device\Harddisk1\DR1 - ok
13:26:50.0251 3432 ================ Scan VBR ==================================
13:26:50.0286 3432 [ AE705AB480A243FE20952C13B19E9723 ] \Device\Harddisk0\DR0\Partition1
13:26:50.0312 3432 \Device\Harddisk0\DR0\Partition1 - ok
13:26:50.0314 3432 [ B86DA1B12B926978C6793B79F8A0470A ] \Device\Harddisk1\DR1\Partition1
13:26:50.0315 3432 \Device\Harddisk1\DR1\Partition1 - ok
13:26:50.0315 3432 ================ Scan UEFI extensions ======================
13:26:50.0315 3432 ================ Scan active images ========================
13:26:50.0315 3432 ============================================================
13:26:50.0315 3432 Scan finished
13:26:50.0315 3432 ============================================================
13:26:51.0476 0544 Deinitialize success

==============================================
Last Created System Restore Point
==============================================
RP780: 23-9-2012 1:29:46 - RegClean Pro zo, sep 23, 12 01:29
==============================================

Older logs
==============================================
C:\TDSSStarter\Report.log
C:\TDSSStarter\Report_22-09-2012_1541_.log
C:\TDSSStarter\Report_22-09-2012_1549_.log
==============================================
EOF

[Abraham54]

Hallo Marianne, ik adviseer jou in [urlhttp://www.hijackthis.nl/forum/viewforum.php?f=4]DDS/HijackThis logfiles[/url] een nieuw topic te starten.
Ik heb het sterke vermoeden dat er malware in het spel zit.

Een vraag nog: heb jij via een driverupdate programma drivers vernieuwd?

[marianne]

Ja Ik heb advanced driver updater gebruikt.

[Abraham54]

Dan is dat de veroorzaker van de ellende.
Jouw PC - is dat een dektop PC of een notebook?

[marianne]

Een desktop. Echter voor ik advanced driver updater gekocht heb, had ik al problemen met m'n computer. Hij crashte en vaak gebeurde het ook dat hij zomaar ineens uitviel. Kan ik nu beter de advanced updater uitschakelen?

[Abraham54]

Verwijderen via Start\Configuratiescherm\Programma's en onderdelen is de beste optie.

En doe het volgende:

Welk programma: Speccy van Piriform
Waarvoor/waarom: specialistisch tool om een grondige analyse van jouw Windows PC te geven.
Moeilijkheidsgraad: geen.
Download: Speccy

Bij de installatie van "Speccy" wordt gevraagd om de Google Chrome webbrowser mee te installeren.
Indien je dit niet wenst, verwijder dan de vinkjes.

Speccy van Piriform opstarten:

• Windows 2000 en Windows XP: start "Speccy" middels dubbelklikken.
• Windows Vista en Windows 7: start "Speccy" middels rechtsklik en dan kiezen voor Als Administrator uitvoeren.

Speccy van Piriform gebruiken:

• nadat de analyse van Windows klaar is, plaatst "Speccy" de uitkomst daarvan in een nieuw venster.
• Klik nu in de menubalk op Bestand(File) en kies voor Publiceren(Publish Snapshot)
• Bevestig het publiceren door JA(Yes) te klikken.
• Nu zal een pop-upvenster openen met daarin de link waar de "snapshot" te zien is.
  
• Kopieer nu de link in dat venster en plak die link in jouw volgende bericht.

[marianne]

http://speccy.piriform.com/results/vyNx ... jSJRWLmjsK

[Abraham54]

Zozo, Softwareraid...

Je hebt dat vieze Datamanager in jouw Windows.
Dat is welliswaar niet verantwoordelijk voor de BSOD's.

Ik vermoed zelf dat de BSod's mogelijk verband houden met de software raid.

Waarom zit er geen antivirus in deze Windows?

[marianne]

Oef, ik weet niet eens dat er geen antivirus is mijn windows zit, ik gebruik wel een antivirusprogramma..
Van datamanager heb ik nog nooit gehoord en BSOD is iets met Blue Screen?

[Abraham54]

BSOD = BlueScreenOfDeath.
Die term is ontstaan al ten tijde van Windows 95!

Je zegt een AV te gebruiken - bedoel je soms MBAM?