Archief - logje (probleem met indows beveiligingscentrum

Io,

ik heb ook al op het ander forum een thread gemaakt, maar het is redelijk dringend.
Andere post:
https://www.beyondgaming.be/forums

Hier wil nog aan toevoegen dat ik het al heb kunnen inschakelen, ik sluit de kader en daarna springt het onmiddellijk op "uitgeschakeld".

Logje:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:14:12, on 9/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\apps\ABoard\ABoard.exe
C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\ACDSYS~1\DEVDET~1\DEVDET~1.EXE
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\Program Files\Telemeter 3.0\telemeter3.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\apps\ABoard\AOSD.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\DynDNS Updater\DynDNS.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\APPS\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\microsoft office\office10\WINWORD.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\wscntfy.exe
C:\DOCUME~1\MUYLAE~1\LOCALS~1\Temp\Tijdelijke map 1 voor HiJackThis.zip\HijackThis.exe
C:\DOCUME~1\MUYLAE~1\LOCALS~1\Temp\Tijdelijke map 3 voor HiJackThis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.immoassim.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\benl.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: (no name) - {487c9905-26a8-42c8-8033-c58ad3d2aec3} - C:\WINDOWS\system32\qoMdCvuR.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: {34c0f719-1ef0-26d8-6184-38fb801c333c} - {c333c108-bf83-4816-8d62-0fe1917f0c43} - C:\WINDOWS\system32\gmkshspt.dll
O2 - BHO: (no name) - {e4641c6d-81f8-4b90-a30c-e26b3108a745} - C:\WINDOWS\system32\jkKeCTkk.dll
O2 - BHO: Microsoft copyright - {ffffffff-bbbb-4146-86fd-a722e8ab3489} - sockins32.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
O4 - HKLM\..\Run: [CleanEasyImg] c:\apps\easydvd\cleanall.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Camera Detector] C:\PROGRA~1\ACDSYS~1\DEVDET~1\DEVDET~1.EXE -autorun
O4 - HKLM\..\Run: [ImInstaller_IncrediMail] C:\DOCUME~1\MUYLAE~1\LOCALS~1\Temp\ImInstaller\IncrediMail\incredimail_install[1].exe -startup -product IncrediMail
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [Telemeter 3.0] "C:\Program Files\Telemeter 3.0\telemeter3.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [advap32] c:\d.exe/r
O4 - HKLM\..\Run: [Windows Network Firewall] C:\WINDOWS\system32\firewall.exe
O4 - HKLM\..\Run: [Advanced DHTML Enable] c:\ple.exe
O4 - HKLM\..\Run: [runner1] C:\WINDOWS\mrofinu1535.exe 61A847B5BBF7281337983D466188719AB689201522886B092CBD44BD8689220221DD325762EA4EBF968951185EFC412806867680AEDE604D64C2661373FC12E6DCD66A47
O4 - HKLM\..\Run: [AntiMalwareGuard] C:\Program Files\AntiMalwareGuard\amg.exe
O4 - HKLM\..\Run: [BM5b495715] Rundll32.exe "C:\WINDOWS\system32\hnccrune.dll",s
O4 - HKLM\..\Run: [587a6489] rundll32.exe "C:\WINDOWS\system32\qcgqkgjk.dll",b
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DynDNS Updater] "C:\Program Files\DynDNS Updater\DynDNS.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background (User 'Default user')
O4 - Startup: Mediacontrole Cyber-shot Viewer.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\microsoft office\Office\OSA9.EXE
O4 - Global Startup: Snelstart HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Ulead Photo Express 4.0 SE Calendar Checker .lnk = C:\APPS\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: (no name) - {2d663d1a-8670-49d9-a1a5-4c56b4e14e84} - (no file)
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\benl.htm
O16 - DPF: {54BE6B6F-3056-470B-97E1-BB92E051B6C4} (DeviceEnum Class) - http://h20264.www2.hp.com/ediags/dd/install/HPDriverDiagnosticsxp2k.cab
O20 - Winlogon Notify: qoMdCvuR - qoMdCvuR.dll (file missing)
O20 - Winlogon Notify: winctrl32 - WinCtrl32.dll (file missing)
O21 - SSODL: WebProxy - {66186F05-BBBB-4a39-864F-72D84615C679} - sockins32.dll (file missing)
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: hpdj - Unknown owner - C:\DOCUME~1\MUYLAE~1\LOCALS~1\Temp\hpdj.exe (file missing)
O23 - Service: Microsoft security update service (msupdate) - Unknown owner - c:\windows\system32\mssrv32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe

--
End of file - 10494 bytes

er zit nog wel heel wat op dat er niet hoort (spyware) ...

* Download en bewaar SDFix
op je bureaublad.

Dubbelklik op SDFix.exe en kies voor Install om het tooltje uit te pakken in een eigen map op je bureaubad. Herstart dan je pc in Veilige modus

• In veilige modus, open de SDFix map op je bureaublad en dubbelklik op RunThis.bat om het tooltje te starten.
• Typ Y om het clean proces te starten.
• het verwijdert alle Trojan Services of Registry Entries die met deze infectie te maken hebben, als het tooltje klaar is zal het jou vertellen om eender welke toets te drukken om je pc te herstarten, doe dit ook.
• Wanneer de pc herstart zal het tooltje opnieuw runnen en het opruimproces beëindigen en je de melding Finished tonen, druk dan op eender welke toets om het scriptje te beëindigen en je bureaublad zullen tevoorschijn komen.
• Wanneer je bureaublad icoontjes verschijnen zal het rapportje van SDFix openen en ook in de map bewaren onder de naam Report.txt.
• Kopieer en plak nu de inhoud van dat rapportje hier met een nieuw hijackthis logje.

SDFix: Version 1.189
Run by muylaert gina on ma 09/06/2008 at 13:24

Microsoft Windows XP [versie 5.1.2600]
Running From: C:\DOCUME~1\MUYLAE~1\BUREAU~1\EIGENM~1\SDFix

Checking Services :

Name :
hcnwg4u
msupdate

Path :

hcnwg4u - Deleted
msupdate - Deleted



Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting


Checking Files :

Trojan Files Found:

C:\Program Files\JavaCore\UnInstall.exe - Deleted
C:\d.exe - Deleted
C:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\ise32.exe - Deleted
C:\WINDOWS\index.html - Deleted
C:\WINDOWS\system32\mssrv32.exe - Deleted
C:\WINDOWS\system32\sft.res - Deleted
C:\WINDOWS\system32\WinCtrl32.dl_ - Deleted
C:\WINDOWS\system32\hcnwg4u.sys - Deleted



Folder C:\Program Files\JavaCore - Removed
Folder C:\Program Files\Temporary - Removed


Removing Temp Files

ADS Check :



Final Check :

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-09 13:40:11
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gil45]
"Type"=dword:00000001
"Tag"=dword:00000001
"Group"="System Reserved\0Boot Bus Extender\0System Bus Extender\0SCSI miniport\0Port\0Primary Disk\0SCSI Class\0SCSI CDROM Class\0FSFilter Infrastructure\0FSFilter System\0FSFilter Bottom\0FSFilter Copy Protection\0FSFilter Security Enhancer\0FSFilter Open File\0FSFilter Physical Quota Management\0FSFilter Encryption\0FSFilter Compression\0FSFilter HSM\0FSFilter Cluster File System\0FSFilter System Recovery\0FSFilter Quota Management\0FSFilter Content Screener\0FSFilter Continuous Backup\0FSFilter Replication\0FSFilter Anti-Virus\0FSFilter Undelete\0FSFilter Activity Monitor\0FSFilter Top\0Filter\0Boot File System\0Base\0Pointer Port\0Keyboard Port\0Pointer Class\0Keyboard Class\0Video Init\0Video\0Video Save\0File System\0Event Log\0Streams Drivers\0NDIS Wrapper\0COM Infrastructure\0UIGroup\0LocalValidation\0PlugPlay\0PNP_TDI\0NDIS\0TDI\0Symantec Services\0NetBIOSGroup\0ShellSvcGroup\0SchedulerGroup\0SpoolerGroup\0AudioGroup\0SmartCardGroup\0NetworkProvider\0RemoteValidation\0NetDDEGroup\0Parallel arbitrator\0Extended Base\0PCI Configuration\0"
"ErrorControl"=dword:00000001
"Start"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\gil45]
"Type"=dword:00000001
"Tag"=dword:00000001
"Group"="System Reserved\0Boot Bus Extender\0System Bus Extender\0SCSI miniport\0Port\0Primary Disk\0SCSI Class\0SCSI CDROM Class\0FSFilter Infrastructure\0FSFilter System\0FSFilter Bottom\0FSFilter Copy Protection\0FSFilter Security Enhancer\0FSFilter Open File\0FSFilter Physical Quota Management\0FSFilter Encryption\0FSFilter Compression\0FSFilter HSM\0FSFilter Cluster File System\0FSFilter System Recovery\0FSFilter Quota Management\0FSFilter Content Screener\0FSFilter Continuous Backup\0FSFilter Replication\0FSFilter Anti-Virus\0FSFilter Undelete\0FSFilter Activity Monitor\0FSFilter Top\0Filter\0Boot File System\0Base\0Pointer Port\0Keyboard Port\0Pointer Class\0Keyboard Class\0Video Init\0Video\0Video Save\0File System\0Event Log\0Streams Drivers\0NDIS Wrapper\0COM Infrastructure\0UIGroup\0LocalValidation\0PlugPlay\0PNP_TDI\0NDIS\0TDI\0Symantec Services\0NetBIOSGroup\0ShellSvcGroup\0SchedulerGroup\0SpoolerGroup\0AudioGroup\0SmartCardGroup\0NetworkProvider\0RemoteValidation\0NetDDEGroup\0Parallel arbitrator\0Extended Base\0PCI Configuration\0"
"ErrorControl"=dword:00000001
"Start"=dword:00000000

scanning hidden registry entries ...

scanning hidden files ...

C:\WINDOWS\system32\drivers\Gil45.sys 129536 bytes executable

scan completed successfully
hidden processes: 0
hidden services: 1
hidden files: 1


Remaining Services :




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabledxpsp2res.dll,-22019"
"C:\\Program Files\\Internet Explorer\\iexplore.exe"="C:\\Program Files\\Internet Explorer\\iexplore.exe:*:Enabled:Internet Explorer"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Documents and Settings\\muylaert gina\\Local Settings\\Temporary Internet Files\\Content.IE5\\ALNO9GZI\\incredimail_install[1].exe"="C:\\Documents and Settings\\muylaert gina\\Local Settings\\Temporary Internet Files\\Content.IE5\\ALNO9GZI\\incredimail_install[1].exe:*:Enabled:IncrediMail Installer"
"C:\\Documents and Settings\\muylaert gina\\Local Settings\\Temp\\ImInstaller\\IncrediMail\\incredimail_install[1].exe"="C:\\Documents and Settings\\muylaert gina\\Local Settings\\Temp\\ImInstaller\\IncrediMail\\incredimail_install[1].exe:*:Enabled:IncrediMail Installer"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe:*:Enabled:hposid01.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"="C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\\Program Files\\CuteFTP Pro\\ftpte.exe"="C:\\Program Files\\CuteFTP Pro\\ftpte.exe:*isabled:FTP Transfer Engine"
"C:\\WINDOWS\\system32\\firewall.exe"="C:\\WINDOWS\\system32\\firewall.exe:*:Enabled:Windows Network Firewall"
"C:\\ple.exe"="C:\\ple.exe:*isabledle"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabledxpsp2res.dll,-22019"

Remaining Files :


File Backups: - C:\DOCUME~1\MUYLAE~1\BUREAU~1\EIGENM~1\SDFix\backups\backups.zip

Files with Hidden Attributes :

Mon 21 Jun 2004 193 A.SHR --- "C:\BOOT.BAK"
Thu 12 May 2005 74,752 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL0035.tmp"
Fri 16 Jun 2006 69,120 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL0132.tmp"
Thu 12 May 2005 61,952 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL0183.tmp"
Fri 16 Dec 2005 460,288 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL0230.tmp"
Thu 12 May 2005 31,232 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL0319.tmp"
Thu 12 May 2005 49,152 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL0493.tmp"
Thu 12 May 2005 53,248 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL0618.tmp"
Thu 12 May 2005 78,336 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL0635.tmp"
Mon 26 Jun 2006 87,040 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL0835.tmp"
Thu 12 May 2005 62,464 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL0942.tmp"
Thu 12 May 2005 49,664 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL0991.tmp"
Wed 11 May 2005 25,088 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL1040.tmp"
Mon 26 Jun 2006 51,712 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL1132.tmp"
Thu 12 May 2005 63,488 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL1138.tmp"
Thu 12 May 2005 90,112 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL1179.tmp"
Thu 12 May 2005 93,696 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL1386.tmp"
Thu 12 May 2005 62,464 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL1559.tmp"
Thu 12 May 2005 77,312 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL1595.tmp"
Thu 12 May 2005 95,232 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL1984.tmp"
Thu 12 May 2005 96,256 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL1986.tmp"
Mon 26 Jun 2006 87,040 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL1987.tmp"
Mon 26 Jun 2006 51,712 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL2040.tmp"
Mon 26 Jun 2006 86,016 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL2144.tmp"
Mon 26 Jun 2006 86,528 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL2227.tmp"
Fri 16 Jun 2006 25,088 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL2306.tmp"
Thu 12 May 2005 74,240 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL2369.tmp"
Thu 12 May 2005 65,536 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL2402.tmp"
Thu 12 May 2005 54,784 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL2482.tmp"
Thu 12 May 2005 95,744 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL2493.tmp"
Thu 12 May 2005 79,872 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL2526.tmp"
Thu 12 May 2005 47,616 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL2712.tmp"
Thu 12 May 2005 103,936 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL2726.tmp"
Mon 26 Jun 2006 61,440 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL2741.tmp"
Thu 12 May 2005 54,784 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL2758.tmp"
Thu 12 May 2005 67,072 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL2809.tmp"
Thu 12 May 2005 62,976 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL2859.tmp"
Mon 26 Jun 2006 86,016 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL2926.tmp"
Wed 11 May 2005 24,576 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL2995.tmp"
Mon 18 Apr 2005 30,208 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL3119.tmp"
Thu 12 May 2005 58,880 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL3156.tmp"
Thu 12 May 2005 50,688 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL3161.tmp"
Thu 12 May 2005 74,752 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL3229.tmp"
Thu 12 May 2005 60,416 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL3250.tmp"
Thu 12 May 2005 58,880 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL3266.tmp"
Mon 28 Feb 2005 34,304 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL3312.tmp"
Thu 12 May 2005 49,664 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL3444.tmp"
Thu 12 May 2005 102,400 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL3542.tmp"
Thu 12 May 2005 49,152 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL3657.tmp"
Thu 12 May 2005 78,848 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL3747.tmp"
Thu 12 May 2005 24,576 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL3762.tmp"
Thu 12 May 2005 101,888 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL3806.tmp"
Mon 26 Jun 2006 86,528 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL3823.tmp"
Mon 26 Jun 2006 87,040 ...H. --- "C:\Documents and Settings\muylaert gina\Mijn documenten\~WRL3929.tmp"
Fri 24 Sep 2004 38,912 A..H. --- "C:\Documents and Settings\All Users\Documenten\PLB\~WRL0001.tmp"
Mon 3 Sep 2007 59,392 ...H. --- "C:\Documents and Settings\All Users\Documenten\PLB\~WRL0256.tmp"
Fri 25 Nov 2005 36,864 A..H. --- "C:\Documents and Settings\All Users\Documenten\PLB\~WRL0316.tmp"
Wed 26 Jul 2006 70,144 A..H. --- "C:\Documents and Settings\All Users\Documenten\PLB\~WRL0483.tmp"
Thu 8 Sep 2005 49,152 A..H. --- "C:\Documents and Settings\All Users\Documenten\PLB\~WRL0724.tmp"
Wed 16 Feb 2005 51,200 A..H. --- "C:\Documents and Settings\All Users\Documenten\PLB\~WRL0749.tmp"
Wed 26 Jul 2006 69,632 A..H. --- "C:\Documents and Settings\All Users\Documenten\PLB\~WRL0763.tmp"
Mon 3 Sep 2007 59,392 ...H. --- "C:\Documents and Settings\All Users\Documenten\PLB\~WRL0797.tmp"
Wed 26 Jul 2006 70,656 A..H. --- "C:\Documents and Settings\All Users\Documenten\PLB\~WRL0801.tmp"
Mon 3 Sep 2007 57,344 ...H. --- "C:\Documents and Settings\All Users\Documenten\PLB\~WRL0861.tmp"
Mon 3 Sep 2007 57,856 ...H. --- "C:\Documents and Settings\All Users\Documenten\PLB\~WRL0949.tmp"
Mon 3 Sep 2007 54,784 ...H. --- "C:\Documents and Settings\All Users\Documenten\PLB\~WRL1280.tmp"
Wed 26 Jul 2006 68,096 A..H. --- "C:\Documents and Settings\All Users\Documenten\PLB\~WRL1316.tmp"
Thu 17 Feb 2005 51,712 A..H. --- "C:\Documents and Settings\All Users\Documenten\PLB\~WRL1335.tmp"
Mon 3 Sep 2007 59,392 ...H. --- "C:\Documents and Settings\All Users\Documenten\PLB\~WRL1489.tmp"
Mon 3 Sep 2007 57,344 ...H. --- "C:\Documents and Settings\All Users\Documenten\PLB\~WRL2491.tmp"
Wed 26 Jul 2006 69,632 A..H. --- "C:\Documents and Settings\All Users\Documenten\PLB\~WRL2588.tmp"
Mon 3 Sep 2007 59,392 ...H. --- "C:\Documents and Settings\All Users\Documenten\PLB\~WRL2603.tmp"
Wed 26 Jul 2006 69,120 A..H. --- "C:\Documents and Settings\All Users\Documenten\PLB\~WRL2674.tmp"
Wed 26 Jul 2006 69,120 A..H. --- "C:\Documents and Settings\All Users\Documenten\PLB\~WRL2783.tmp"
Wed 26 Jul 2006 69,632 A..H. --- "C:\Documents and Settings\All Users\Documenten\PLB\~WRL3223.tmp"
Fri 31 Aug 2007 54,784 ...H. --- "C:\Documents and Settings\All Users\Documenten\PLB\~WRL3245.tmp"
Mon 3 Sep 2007 54,784 ...H. --- "C:\Documents and Settings\All Users\Documenten\PLB\~WRL3257.tmp"
Thu 17 Feb 2005 51,200 A..H. --- "C:\Documents and Settings\All Users\Documenten\PLB\~WRL3647.tmp"
Wed 26 Jul 2006 69,632 A..H. --- "C:\Documents and Settings\All Users\Documenten\PLB\~WRL3662.tmp"
Thu 17 Feb 2005 51,712 A..H. --- "C:\Documents and Settings\All Users\Documenten\PLB\~WRL4034.tmp"
Fri 10 Sep 2004 28,672 A..H. --- "C:\Documents and Settings\All Users\Documenten\Standaarddocumenten\~WRL0003.tmp"
Fri 10 Sep 2004 28,672 A..H. --- "C:\Documents and Settings\All Users\Documenten\Standaarddocumenten\~WRL3594.tmp"
Wed 12 Apr 2006 78,336 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL0013.tmp"
Fri 28 Apr 2006 67,584 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL0021.tmp"
Wed 12 Apr 2006 77,312 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL0041.tmp"
Wed 23 Apr 2008 109,568 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL0161.tmp"
Mon 3 Sep 2007 161,280 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL0173.tmp"
Mon 3 Sep 2007 160,768 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL0184.tmp"
Fri 28 Apr 2006 67,584 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL0200.tmp"
Mon 3 Sep 2007 103,936 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL0218.tmp"
Tue 21 Feb 2006 78,336 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL0273.tmp"
Wed 23 Apr 2008 110,080 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL0317.tmp"
Mon 3 Sep 2007 161,280 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL0646.tmp"
Mon 20 Dec 2004 61,952 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL0680.tmp"
Wed 12 Apr 2006 76,800 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL0782.tmp"
Wed 12 Apr 2006 77,824 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL0807.tmp"
Tue 21 Feb 2006 77,824 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL0863.tmp"
Mon 3 Sep 2007 160,768 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL1120.tmp"
Tue 26 Apr 2005 67,072 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL1140.tmp"
Wed 23 Apr 2008 110,592 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL1163.tmp"
Mon 3 Sep 2007 161,280 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL1214.tmp"
Mon 10 Jul 2006 63,488 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL1237.tmp"
Wed 23 Apr 2008 109,568 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL1257.tmp"
Wed 12 Apr 2006 79,360 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL1330.tmp"
Wed 12 Apr 2006 76,800 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL1390.tmp"
Mon 3 Sep 2007 160,768 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL1394.tmp"
Mon 3 Sep 2007 162,304 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL1497.tmp"
Thu 16 Feb 2006 78,336 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL1518.tmp"
Tue 11 Apr 2006 77,312 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL1547.tmp"
Mon 3 Sep 2007 160,256 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL1548.tmp"
Wed 12 Apr 2006 78,336 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL1570.tmp"
Wed 12 Apr 2006 78,336 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL1747.tmp"
Wed 12 Apr 2006 76,800 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL1778.tmp"
Thu 28 Apr 2005 67,584 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL1792.tmp"
Wed 12 Apr 2006 79,360 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL1810.tmp"
Thu 28 Apr 2005 68,096 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL1830.tmp"
Fri 20 Aug 2004 58,880 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL1903.tmp"
Wed 12 Apr 2006 75,776 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL1944.tmp"
Wed 23 Apr 2008 110,592 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL2030.tmp"
Wed 23 Apr 2008 110,080 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL2130.tmp"
Wed 23 Apr 2008 109,568 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL2139.tmp"
Wed 12 Apr 2006 76,800 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL2258.tmp"
Mon 3 Sep 2007 67,072 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL2277.tmp"
Mon 3 Sep 2007 161,792 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL2369.tmp"

Mon 3 Sep 2007 156,672 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL2386.tmp"
Wed 12 Apr 2006 78,848 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL2387.tmp"
Mon 3 Sep 2007 67,072 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL2450.tmp"
Mon 3 Sep 2007 163,328 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL2468.tmp"
Tue 5 Feb 2008 141,824 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL2568.tmp"
Wed 12 Apr 2006 77,312 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL2572.tmp"
Fri 28 Apr 2006 67,584 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL2577.tmp"
Wed 12 Apr 2006 77,312 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL2598.tmp"
Fri 21 Dec 2007 85,504 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL2718.tmp"
Wed 23 Apr 2008 110,592 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL2740.tmp"
Wed 12 Apr 2006 76,288 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL2810.tmp"
Wed 12 Apr 2006 79,360 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL3022.tmp"
Wed 12 Apr 2006 76,800 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL3082.tmp"
Mon 18 Oct 2004 58,880 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL3099.tmp"
Wed 12 Apr 2006 76,288 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL3118.tmp"
Thu 12 Oct 2006 73,728 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL3252.tmp"
Mon 3 Sep 2007 163,840 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL3317.tmp"
Mon 3 Sep 2007 67,072 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL3356.tmp"
Mon 3 Sep 2007 160,768 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL3436.tmp"
Tue 11 Jul 2006 64,000 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL3449.tmp"
Wed 12 Apr 2006 77,312 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL3507.tmp"
Tue 21 Feb 2006 78,848 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL3522.tmp"
Mon 3 Sep 2007 157,696 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL3547.tmp"
Mon 3 Sep 2007 161,792 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL3550.tmp"
Wed 23 Apr 2008 110,080 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL3641.tmp"
Fri 21 Dec 2007 86,016 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL3685.tmp"
Fri 21 Dec 2007 85,504 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL3761.tmp"
Wed 12 Apr 2006 78,336 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL3775.tmp"
Thu 27 Apr 2006 67,072 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL3805.tmp"
Wed 12 Apr 2006 76,800 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL3811.tmp"
Wed 12 Apr 2006 76,800 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL3844.tmp"
Wed 12 Apr 2006 77,824 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL3940.tmp"
Wed 12 Apr 2006 77,824 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL3941.tmp"
Fri 28 Apr 2006 67,584 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL3958.tmp"
Tue 10 May 2005 74,752 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL4016.tmp"
Mon 3 Sep 2007 163,328 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL4068.tmp"
Wed 12 Apr 2006 79,360 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL4076.tmp"
Thu 28 Apr 2005 68,096 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\~WRL4087.tmp"
Thu 9 Sep 2004 25,600 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL0001.tmp"
Thu 9 Sep 2004 30,720 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL0002.tmp"
Thu 9 Sep 2004 26,112 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL0003.tmp"
Mon 20 Aug 2007 74,752 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL0083.tmp"
Wed 8 Nov 2006 72,704 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL0200.tmp"
Mon 20 Aug 2007 75,264 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL0495.tmp"
Wed 26 Jul 2006 71,168 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL0711.tmp"
Thu 9 Sep 2004 26,624 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL0879.tmp"
Mon 27 Aug 2007 83,968 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL0965.tmp"
Wed 26 Jul 2006 71,168 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL1000.tmp"
Wed 4 Apr 2007 66,048 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL1049.tmp"
Wed 26 Jul 2006 71,680 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL1172.tmp"
Mon 20 Aug 2007 75,264 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL1269.tmp"
Thu 30 Nov 2006 61,440 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL1271.tmp"
Thu 14 Dec 2006 39,424 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL1512.tmp"
Thu 9 Sep 2004 24,576 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL1602.tmp"
Mon 10 Sep 2007 84,992 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL1799.tmp"
Mon 20 Aug 2007 74,752 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL1885.tmp"
Thu 9 Sep 2004 27,648 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL1891.tmp"
Mon 10 Sep 2007 83,968 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL1976.tmp"
Mon 10 Sep 2007 83,968 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL1993.tmp"
Fri 16 Feb 2007 67,072 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL2111.tmp"
Mon 10 Sep 2007 86,016 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL2118.tmp"
Wed 4 Apr 2007 67,072 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL2359.tmp"
Wed 26 Jul 2006 71,168 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL2453.tmp"
Thu 30 Nov 2006 62,464 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL2593.tmp"
Mon 10 Oct 2005 61,440 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL2757.tmp"
Mon 20 Aug 2007 74,240 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL2860.tmp"
Wed 8 Nov 2006 72,704 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL2958.tmp"
Thu 30 Nov 2006 61,952 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL3079.tmp"
Tue 24 May 2005 59,904 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL3103.tmp"
Wed 8 Nov 2006 72,704 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL3110.tmp"
Thu 9 Sep 2004 24,064 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL3399.tmp"
Wed 8 Nov 2006 72,704 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL3437.tmp"
Wed 29 Nov 2006 60,416 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL3618.tmp"
Mon 20 Aug 2007 75,264 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL3654.tmp"
Mon 10 Sep 2007 86,528 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL3680.tmp"
Thu 9 Sep 2004 26,112 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL3683.tmp"
Thu 30 Nov 2006 61,952 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL3697.tmp"
Mon 10 Sep 2007 84,992 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL3899.tmp"
Thu 9 Sep 2004 24,064 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\~WRL3980.tmp"
Wed 7 May 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\9ace568958858279a6c5830b433e310b\BIT754.tmp"
Mon 11 Apr 2005 51,712 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\Standaarddocumenten\~WRL0053.tmp"
Wed 30 Apr 2008 248,832 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\Standaarddocumenten\~WRL0260.tmp"
Wed 17 Oct 2007 44,544 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\Standaarddocumenten\~WRL0890.tmp"
Wed 17 Oct 2007 43,008 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\Standaarddocumenten\~WRL1175.tmp"
Thu 24 Apr 2008 248,832 ...H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\Standaarddocumenten\~WRL1303.tmp"
Wed 13 Dec 2006 53,248 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\Standaarddocumenten\~WRL1550.tmp"
Wed 13 Dec 2006 51,712 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\Standaarddocumenten\~WRL2576.tmp"
Wed 13 Dec 2006 51,712 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\Standaarddocumenten\~WRL2619.tmp"
Wed 13 Dec 2006 52,736 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\Standaarddocumenten\~WRL2689.tmp"
Wed 13 Dec 2006 51,712 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\Standaarddocumenten\~WRL2845.tmp"
Wed 13 Dec 2006 51,712 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\Standaarddocumenten\~WRL3158.tmp"
Wed 13 Dec 2006 51,712 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verhuur\Standaarddocumenten\~WRL3259.tmp"
Mon 16 Jan 2006 78,848 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\Standaarddocumenten\~WRL0003.tmp"
Tue 20 Nov 2007 78,336 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\Standaarddocumenten\~WRL0594.tmp"
Thu 10 Jan 2008 105,984 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\Standaarddocumenten\~WRL2412.tmp"
Thu 23 Feb 2006 136,704 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\Standaarddocumenten\~WRL2886.tmp"
Fri 15 Sep 2006 69,120 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\Standaarddocumenten\~WRL2890.tmp"
Wed 3 May 2006 77,312 A..H. --- "C:\Documents and Settings\All Users\Documenten\Verkoop\Standaarddocumenten\~WRL2960.tmp"
Wed 23 Mar 2005 0 ...H. --- "C:\Documents and Settings\muylaert gina\Application Data\Microsoft\Word\~WRL1759.tmp"
Mon 12 Feb 2007 3,096,576 A..H. --- "C:\Documents and Settings\muylaert gina\Application Data\U3\temp\Launchpad Removal.exe"

Finished!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:54:47, on 9/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\apps\ABoard\ABoard.exe
C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
C:\apps\ABoard\AOSD.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\ACDSYS~1\DEVDET~1\DEVDET~1.EXE
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\Program Files\Telemeter 3.0\telemeter3.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\DynDNS Updater\DynDNS.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\APPS\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\microsoft office\office10\WINWORD.EXE
C:\DOCUME~1\MUYLAE~1\LOCALS~1\Temp\Tijdelijke map 5 voor HiJackThis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.immoassim.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\benl.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
O4 - HKLM\..\Run: [CleanEasyImg] c:\apps\easydvd\cleanall.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Camera Detector] C:\PROGRA~1\ACDSYS~1\DEVDET~1\DEVDET~1.EXE -autorun
O4 - HKLM\..\Run: [ImInstaller_IncrediMail] C:\DOCUME~1\MUYLAE~1\LOCALS~1\Temp\ImInstaller\IncrediMail\incredimail_install[1].exe -startup -product IncrediMail
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [Telemeter 3.0] "C:\Program Files\Telemeter 3.0\telemeter3.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [587a6489] rundll32.exe "C:\WINDOWS\system32\qcgqkgjk.dll",b
O4 - HKLM\..\Run: [BM5b495715] Rundll32.exe "C:\WINDOWS\system32\hnccrune.dll",s
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [DynDNS Updater] "C:\Program Files\DynDNS Updater\DynDNS.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Lokale service')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: Mediacontrole Cyber-shot Viewer.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\microsoft office\Office\OSA9.EXE
O4 - Global Startup: Snelstart HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Ulead Photo Express 4.0 SE Calendar Checker .lnk = C:\APPS\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: (no name) - {2d663d1a-8670-49d9-a1a5-4c56b4e14e84} - (no file)
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\benl.htm
O16 - DPF: {54BE6B6F-3056-470B-97E1-BB92E051B6C4} (DeviceEnum Class) - http://h20264.www2.hp.com/ediags/dd/install/HPDriverDiagnosticsxp2k.cab
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: hpdj - Unknown owner - C:\DOCUME~1\MUYLAE~1\LOCALS~1\Temp\hpdj.exe (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe

--
End of file - 8918 bytes

Download combofix.exe: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Plaats het op je bureaublad.
Dubbelklik er op om het programma te starten.
In het scherm dat verschijnt tik je een 1 in om het cleaning- en analysesproces te laten uitvoeren.
Volg de instructies op het scherm.
Als het tooltje klaar is, opent er een logfile (combofix.txt).
Post de inhoud van dit bestandje samen met een nieuwe hijackthislog.

Jurgenv1 zei:

Download combofix.exe: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Plaats het op je bureaublad.
Dubbelklik er op om het programma te starten.
In het scherm dat verschijnt tik je een 1 in om het cleaning- en analysesproces te laten uitvoeren.
Volg de instructies op het scherm.
Als het tooltje klaar is, opent er een logfile (combofix.txt).
Post de inhoud van dit bestandje samen met een nieuwe hijackthislog.

Klik om te vergroten...

Heb diene comboxifx laten lopen ma da logje hebbek ni kunnen laten maken, kmoest mijnen trein halen ma die automatische updates kunnen terug worden ingeschakeld, dus merci he

No prob.