Archief - Hijackthis logje van mijn pc.

Desolator23 · 12 jun 2007

Hallo

Ik heb iedere keer dat mijn muis uitvalt of dat ik niets meer kan typen. Alle verbindingen zijn goed en software is correct geinstalleerd. Ben ten einde raad, hopelijk helpt dit een beetje.

Logje

Logfile of HijackThis v1.99.1
Scan saved at 18:20:48, on 12/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\system32\Belpic PCSC Service.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe
C:\Program Files\Intel Audio Studio\IntelAudioStudio.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\AGEIA Technologies\TrayIcon.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\LVComSX.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
G:\Software\Programma's\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe
O4 - HKLM\..\Run: [IntelAudioStudio] "C:\Program Files\Intel Audio Studio\IntelAudioStudio.exe" TRAY
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [MediaFace Integration] C:\Program Files\Fellowes\MediaFACE 4.0\SetHook.exe
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [AGEIA PhysX SysTray] C:\Program Files\AGEIA Technologies\TrayIcon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [igndlm.exe] C:\Program Files\Download Manager\DLM.exe /windowsstart /startifwork
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O4 - Global Startup: Pinnacle Scheduler.lnk = ?
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2FDEACE3-43F7-4E3C-B4A6-094DAAA343DC} (CFreeDigital) - https://secured.payvisionservices.com/frs/Freedigital/FreeDigital.ocx
O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - http://launch.gamespyarcade.com/software/launch/alaunch.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: BELPIC PCSC Service (BELGIUM_ID_CARD_SERVICE) - Zetes/CSC - C:\WINDOWS\system32\Belpic PCSC Service.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

Jurgenv1 · 12 jun 2007

Download combofix.exe: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Plaats het op je bureaublad.
Dubbelklik er op om het programma te starten.
In het scherm dat verschijnt tik je een Y in om het cleaningsprocess te starten.
Volg de instructies op het scherm.
Als het tooltje klaar is, opent er een logfile (combofix.txt) Post de inhoud van dit bestandje samen met een nieuwe hijackthislog.

Desolator23 · 12 jun 2007

Combofix

ComboFix 07-06-13 - C:\Documents and Settings\Jeffrey\Bureaublad\ComboFix.exe
"Jeffrey" - 2007-06-12 19:12:39 - Service Pack 2 NTFS

((((((((((((((((((((((((( Files Created from 2007-05-12 to 2007-06-12 )))))))))))))))))))))))))))))))

2007-06-12 19:12 49,152 --a------ C:\WINDOWS\nircmd.exe
2007-06-12 18:06 <DIR> d-------- C:\DOCUME~1\Jeffrey\APPLIC~1\Logitech
2007-06-12 17:53 81,920 -r------- C:\WINDOWS\bwUnin-6.1.4.68-8876480L.exe
2007-06-12 17:53 38,081 --a------ C:\WINDOWS\system32\drivers\LHidUsbK.sys
2007-06-12 17:53 <DIR> d-------- C:\Program Files\Common Files\Logitech
2007-06-12 17:52 71,405 --a------ C:\WINDOWS\system32\drivers\LMouKE.Sys
2007-06-12 17:52 54,657 --a------ C:\WINDOWS\system32\drivers\L8042mou.Sys
2007-06-12 17:52 29,696 --a------ C:\WINDOWS\KHALMNPR.Exe
2007-06-12 17:52 24,605 --a------ C:\WINDOWS\system32\drivers\LHidKE.Sys
2007-06-12 16:24 <DIR> d-------- C:\Program Files\Windows Defender
2007-06-11 02:16 443,752 --a------ C:\WINDOWS\system32\d3dx10_33.dll
2007-06-11 02:16 3,495,784 --a------ C:\WINDOWS\system32\d3dx9_33.dll
2007-06-11 02:16 261,480 --a------ C:\WINDOWS\system32\xactengine2_7.dll
2007-06-11 02:16 255,848 --a------ C:\WINDOWS\system32\xactengine2_6.dll
2007-06-11 02:16 1,123,696 --a------ C:\WINDOWS\system32\D3DCompiler_33.dll
2007-06-11 00:07 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
2007-06-10 12:25 <DIR> d--h----- C:\WINDOWS\system32\winb0x
2007-06-10 11:52 <DIR> d-------- C:\DOCUME~1\Jeffrey\APPLIC~1\ClonySoft
2007-06-10 02:31 <DIR> d--hs---- C:\Boot
2007-06-10 01:45 <DIR> d--hs---- C:\$RECYCLE.BIN
2007-06-08 15:23 18,048 --a------ C:\WINDOWS\system32\drivers\lirsgt.sys
2007-06-08 15:23 165,376 --a------ C:\WINDOWS\system32\drivers\atksgt.sys
2007-06-08 14:48 <DIR> d-------- C:\DOCUME~1\Jeffrey\APPLIC~1\IGN_DLM
2007-06-08 14:46 <DIR> d-------- C:\Program Files\Download Manager
2007-06-08 14:36 <DIR> d-------- C:\Program Files\GameSpy Arcade
2007-06-08 14:13 <DIR> d-------- C:\Program Files\F1rst3
2007-06-08 14:12 227,323 --a------ C:\WINDOWS\rFactor Data Acquisition Plugin Uninstaller.exe
2007-06-08 14:12 <DIR> d-------- C:\Program Files\Common Files\Thraex Software
2007-06-08 14:09 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
2007-06-07 18:35 2,279,936 --a------ C:\WINDOWS\system32\TUKernel.exe
2007-06-07 18:33 29,704 --a------ C:\WINDOWS\system32\uxtuneup.dll
2007-06-07 18:32 <DIR> d-------- C:\Program Files\TuneUp Utilities 2007
2007-06-07 18:32 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-06-07 18:32 <DIR> d-------- C:\DOCUME~1\Jeffrey\APPLIC~1\TuneUp Software
2007-06-07 18:32 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\TuneUp Software
2007-06-07 16:36 <DIR> d-------- C:\WINDOWS\Downloaded Installations
2007-06-07 16:14 <DIR> d-------- C:\ProgramData
2007-06-07 16:14 <DIR> d-------- C:\Program Files\Electronic Arts
2007-06-07 15:24 <DIR> d-------- C:\Program Files\EA SPORTS
2007-06-07 15:15 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2007-06-07 15:15 <DIR> d-------- C:\Program Files\Windows Media Connect 2
2007-06-07 15:14 <DIR> d-------- C:\WINDOWS\system32\LogFiles
2007-06-07 15:14 <DIR> d-------- C:\WINDOWS\system32\drivers\UMDF
2007-06-07 15:14 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
2007-06-07 15:07 <DIR> d--h----- C:\WINDOWS\$hf_mig$
2007-06-07 15:07 <DIR> d-------- C:\WINDOWS\system32\PreInstall
2007-06-07 15:00 <DIR> d-------- C:\WINDOWS\system32\SoftwareDistribution
2007-06-07 15:00 <DIR> d-------- C:\WINDOWS\pss
2007-06-07 14:36 <DIR> d-------- C:\Program Files\DAEMON Tools
2007-06-07 14:34 682,232 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2007-06-07 13:50 <DIR> d-------- C:\DOCUME~1\Jeffrey\eid-cache
2007-06-06 18:39 86,016 --a------ C:\WINDOWS\system32\OpenAL32.dll
2007-06-06 18:39 409,600 --a------ C:\WINDOWS\system32\wrap_oal.dll
2007-06-06 18:39 <DIR> d-------- C:\Program Files\OpenAL
2007-06-06 17:36 <DIR> d--hs---- C:\WINDOWS\ftpcache
2007-06-06 16:56 <DIR> d-------- C:\WINDOWS\system32\ageia
2007-06-06 16:56 <DIR> d-------- C:\Program Files\AGEIA Technologies
2007-06-06 16:41 <DIR> d-------- C:\DOCUME~1\Jeffrey\APPLIC~1\InstallShield
2007-06-06 16:34 81,768 --a------ C:\WINDOWS\system32\xinput1_3.dll
2007-06-06 16:34 62,744 --a------ C:\WINDOWS\system32\xinput1_2.dll
2007-06-06 16:34 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll
2007-06-06 16:34 251,672 --a------ C:\WINDOWS\system32\xactengine2_5.dll
2007-06-06 16:34 237,848 --a------ C:\WINDOWS\system32\xactengine2_4.dll
2007-06-06 16:34 236,824 --a------ C:\WINDOWS\system32\xactengine2_3.dll
2007-06-06 16:34 2,414,360 --a------ C:\WINDOWS\system32\d3dx9_31.dll
2007-06-06 16:34 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll
2007-06-06 16:22 2,297,552 --a------ C:\WINDOWS\system32\d3dx9_26.dll
2007-06-06 16:14 <DIR> d-------- C:\Program Files\QuickPar
2007-06-06 16:14 <DIR> d-------- C:\Program Files\Fraps
2007-06-06 16:14 <DIR> d-------- C:\Program Files\DAMN NFO Viewer
2007-06-06 16:12 <DIR> d-------- C:\Program Files\Nero
2007-06-06 16:12 <DIR> d-------- C:\Program Files\Common Files\Ahead
2007-06-06 16:12 <DIR> d-------- C:\DOCUME~1\Jeffrey\APPLIC~1\Ahead
2007-06-06 16:10 <DIR> d-------- C:\Program Files\Smart Projects
2007-06-06 16:08 <DIR> d-------- C:\Program Files\cdrLabel 7.1
2007-06-06 16:02 <DIR> d-------- C:\Program Files\NewsLeecher
2007-06-06 16:02 <DIR> d-------- C:\DOCUME~1\Jeffrey\Downloads
2007-06-06 16:02 <DIR> d-------- C:\DOCUME~1\Jeffrey\APPLIC~1\NewsLeecher
2007-06-06 15:55 <DIR> d-------- C:\Program Files\CyberLink
2007-06-06 15:55 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
2007-06-06 15:54 <DIR> d-------- C:\Program Files\Webteh
2007-06-06 15:54 <DIR> d-------- C:\DOCUME~1\Jeffrey\APPLIC~1\BSplayer Pro
2007-06-06 15:53 <DIR> d-------- C:\DOCUME~1\Jeffrey\APPLIC~1\Apple Computer
2007-06-06 15:51 <DIR> d-------- C:\Program Files\QuickTime
2007-06-06 15:51 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
2007-06-06 15:50 1 --a------ C:\WINDOWS\system32\au3305adc.dll
2007-06-06 15:50 <DIR> d-------- C:\Program Files\Apollo DVD Copy
2007-06-06 15:48 47,360 --a------ C:\WINDOWS\system32\drivers\Pcouffin.sys
2007-06-06 15:48 <DIR> d-------- C:\Program Files\LG Software Innovations
2007-06-06 15:37 17,920 --a------ C:\WINDOWS\system32\mdimon.dll
2007-06-06 15:36 <DIR> d-------- C:\WINDOWS\SHELLNEW
2007-06-06 15:36 <DIR> d-------- C:\Program Files\Microsoft.NET
2007-06-06 15:36 <DIR> d-------- C:\Program Files\Microsoft Works
2007-06-06 15:26 163,840 --a------ C:\WINDOWS\BJPSUNST.EXE
2007-06-06 15:24 7,680 --a------ C:\WINDOWS\system32\CNMVS61.DLL
2007-06-06 15:24 116,736 --a------ C:\WINDOWS\system32\CNMLM61.DLL
2007-06-06 15:23 86,016 -ra------ C:\WINDOWS\system32\CNMCP61.exe
2007-06-06 15:23 <DIR> d--h----- C:\BJPrinter
2007-06-06 15:23 <DIR> d-------- C:\WINDOWS\StartHtmico
2007-06-06 15:23 <DIR> d-------- C:\WINDOWS\IP4000,3000

(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-06-07 13:32:48 53,622 ----a-w C:\WINDOWS\system32\perfc013.dat
2007-06-07 13:32:48 364,660 ----a-w C:\WINDOWS\system32\perfh013.dat
2007-04-20 04:05:00 81,920 ----a-w C:\WINDOWS\system32\nvwddi.dll
2007-04-20 04:05:00 81,920 ----a-w C:\WINDOWS\system32\nvmctray.dll
2007-04-20 04:05:00 8,429,568 ----a-w C:\WINDOWS\system32\nvcpl.dll
2007-04-20 04:05:00 745,472 ----a-w C:\WINDOWS\system32\nvcplui.exe
2007-04-20 04:05:00 6,739,168 ----a-w C:\WINDOWS\system32\drivers\nv4_mini.sys
2007-04-20 04:05:00 6,668,288 ----a-w C:\WINDOWS\system32\nvoglnt.dll
2007-04-20 04:05:00 6,217,728 ----a-w C:\WINDOWS\system32\nvdisps.dll
2007-04-20 04:05:00 5,434,880 ----a-w C:\WINDOWS\system32\nv4_disp.dll
2007-04-20 04:05:00 466,944 ----a-w C:\WINDOWS\system32\nvshell.dll
2007-04-20 04:05:00 45,056 ----a-w C:\WINDOWS\system32\nvmccsrs.dll
2007-04-20 04:05:00 442,368 ----a-w C:\WINDOWS\system32\nvappbar.exe
2007-04-20 04:05:00 425,984 ----a-w C:\WINDOWS\system32\keystone.exe
2007-04-20 04:05:00 37,888 ----a-w C:\WINDOWS\system32\nvcodins.dll
2007-04-20 04:05:00 37,888 ----a-w C:\WINDOWS\system32\nvcod.dll
2007-04-20 04:05:00 344,064 ----a-w C:\WINDOWS\system32\nvapi.dll
2007-04-20 04:05:00 307,200 ----a-w C:\WINDOWS\system32\nvexpbar.dll
2007-04-20 04:05:00 3,538,944 ----a-w C:\WINDOWS\system32\nvvitvs.dll
2007-04-20 04:05:00 3,289,088 ----a-w C:\WINDOWS\system32\nvgames.dll
2007-04-20 04:05:00 286,720 ----a-w C:\WINDOWS\system32\nvnt4cpl.dll
2007-04-20 04:05:00 229,376 ----a-w C:\WINDOWS\system32\nvmccs.dll
2007-04-20 04:05:00 2,273,280 ----a-w C:\WINDOWS\system32\nvwss.dll
2007-04-20 04:05:00 188,416 ----a-w C:\WINDOWS\system32\nvmccss.dll
2007-04-20 04:05:00 163,908 ----a-w C:\WINDOWS\system32\nvsvc32.exe
2007-04-20 04:05:00 143,360 ----a-w C:\WINDOWS\system32\nvcolor.exe
2007-04-20 04:05:00 1,703,936 ----a-w C:\WINDOWS\system32\nvwdmcpl.dll
2007-04-20 04:05:00 1,626,112 ----a-w C:\WINDOWS\system32\nwiz.exe
2007-04-20 04:05:00 1,474,560 ----a-w C:\WINDOWS\system32\nview.dll
2007-04-20 04:05:00 1,339,392 ----a-w C:\WINDOWS\system32\nvdspsch.exe
2007-04-20 04:05:00 1,101,824 ----a-w C:\WINDOWS\system32\nvmobls.dll
2007-04-20 04:05:00 1,073,152 ----a-w C:\WINDOWS\system32\nvcpluir.dll
2007-04-20 04:05:00 1,019,904 ----a-w C:\WINDOWS\system32\nvwimg.dll
2007-04-20 04:05:00 1,018,748 ----a-w C:\WINDOWS\system32\nvucode.bin
2007-04-18 16:15:26 2,854,400 ----a-w C:\WINDOWS\system32\msi.dll
2007-04-14 13:57:06 53,248 ----a-w C:\WINDOWS\system32\AgCPanelTraditionalChinese.dll
2007-04-14 13:57:06 53,248 ----a-w C:\WINDOWS\system32\AgCPanelSwedish.dll
2007-04-14 13:57:06 53,248 ----a-w C:\WINDOWS\system32\AgCPanelSpanish.dll
2007-04-14 13:57:04 53,248 ----a-w C:\WINDOWS\system32\AgCPanelSimplifiedChinese.dll
2007-04-14 13:57:04 53,248 ----a-w C:\WINDOWS\system32\AgCPanelPortugese.dll
2007-04-14 13:57:04 53,248 ----a-w C:\WINDOWS\system32\AgCPanelKorean.dll
2007-04-14 13:57:04 53,248 ----a-w C:\WINDOWS\system32\AgCPanelJapanese.dll
2007-04-14 13:57:04 53,248 ----a-w C:\WINDOWS\system32\AgCPanelGerman.dll
2007-04-14 13:57:04 53,248 ----a-w C:\WINDOWS\system32\AgCPanelFrench.dll
2007-03-17 13:45:54 293,376 ----a-w C:\WINDOWS\system32\winsrv.dll

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}=C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll [2007-03-14 03:43]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"="C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2006-05-11 11:47]
"IntelAudioStudio"="C:\Program Files\Intel Audio Studio\IntelAudioStudio.exe" [2006-08-02 17:17]
"nwiz"="nwiz.exe" [2007-04-20 06:05 C:\WINDOWS\system32\nwiz.exe]
"MediaFace Integration"="C:\Program Files\Fellowes\MediaFACE 4.0\SetHook.exe" [2003-08-18 17:46]
"LogitechCommunicationsManager"="C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" [2007-02-08 01:12]
"LogitechQuickCamRibbon"="C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" [2007-02-08 01:13]
"avgnt"="C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" [2007-04-02 10:35]
"Easy-PrintToolBox"="C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.exe" [2004-01-14 03:10]
"NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 16:40]
"AGEIA PhysX SysTray"="C:\Program Files\AGEIA Technologies\TrayIcon.exe" [2006-03-20 21:43]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 03:43]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 03:06]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2006-11-03 19:20]
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2004-04-26 07:06 C:\WINDOWS\KHALMNPR.Exe]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 02:03]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2006-06-01 13:32]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 18:24]
"igndlm.exe"="C:\Program Files\Download Manager\DLM.exe" [2007-03-05 23:57]
"LDM"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe" [2007-06-12 17:53]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
"C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core]
"C:\Program Files\Electronic Arts\EA Link\Core.exe" -silent

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
"C:\Program Files\Messenger\msmsgs.exe" /background

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
"C:\Program Files\QuickTime\qttask.exe" -atboottime

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
"E:\spellen\Steam\Steam.exe" -silent
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost - netsvcs
UxTuneUp

*Newly Created Service* - HTTPFILTER

Contents of the 'Scheduled Tasks' folder
2007-06-08 15:15:57 C:\WINDOWS\tasks\Easy Onderhoud.job
2007-06-12 16:23:01 C:\WINDOWS\tasks\MP Scheduled Scan.job

**************************************************************************

catchme 0.3.721 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-06-12 19:13:42
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

Completion time: 2007-06-12 19:13:52

--- E O F ---

Logfile of HijackThis v1.99.1
Scan saved at 19:15:52, on 12/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\system32\Belpic PCSC Service.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe
C:\Program Files\Intel Audio Studio\IntelAudioStudio.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\AGEIA Technologies\TrayIcon.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\LVComSX.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
G:\Software\Programma's\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe
O4 - HKLM\..\Run: [IntelAudioStudio] "C:\Program Files\Intel Audio Studio\IntelAudioStudio.exe" TRAY
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [MediaFace Integration] C:\Program Files\Fellowes\MediaFACE 4.0\SetHook.exe
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [AGEIA PhysX SysTray] C:\Program Files\AGEIA Technologies\TrayIcon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [igndlm.exe] C:\Program Files\Download Manager\DLM.exe /windowsstart /startifwork
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O4 - Global Startup: Pinnacle Scheduler.lnk = ?
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2FDEACE3-43F7-4E3C-B4A6-094DAAA343DC} (CFreeDigital) - https://secured.payvisionservices.com/frs/Freedigital/FreeDigital.ocx
O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - http://launch.gamespyarcade.com/software/launch/alaunch.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: BELPIC PCSC Service (BELGIUM_ID_CARD_SERVICE) - Zetes/CSC - C:\WINDOWS\system32\Belpic PCSC Service.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

Jurgenv1 · 12 jun 2007

Heb je soms een draadloze muis?

Desolator23 · 12 jun 2007

Jurgenv1 zei:
Heb je soms een draadloze muis?

Ja, dat klopt. Het is een draadloze muis maar vroeger werkte hij perfect.

Jurgenv1 · 12 jun 2007

Laad je batterij eens op of vervang ze als het wegwerp batterijen zijn. reconnect ook even met de ontvanger daarna.

Archief - Hijackthis logje van mijn pc.

Desolator23

Legacy Member

Jurgenv1

Legacy Member

Desolator23

Legacy Member

Jurgenv1

Legacy Member

Desolator23

Legacy Member

Jurgenv1

Legacy Member