Archief - Logje

"Dowmi" - 2007-07-20 16:40:06 - ComboFix 07-07-14.6 - Service Pack 1 NTFS


((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\DOCUME~1\Dowmi\APPLIC~1.\macromedia\Flash Player\#SharedObjects\HE8XY9T7\www.broadcaster.com
C:\DOCUME~1\Dowmi\APPLIC~1.\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.broadcaster.com
C:\DOCUME~1\Dowmi\APPLIC~1.\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.broadcaster.com\settings.sol
C:\WINDOWS\system32\drivers\npf.sys
C:\WINDOWS\system32\Packet.dll
C:\WINDOWS\system32\pthreadVC.dll
C:\WINDOWS\system32\WanPacket.dll
C:\WINDOWS\system32\wpcap.dll


((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))


-------\LEGACY_NPF
-------\NPF


((((((((((((((((((((((((( Files Created from 2007-06-20 to 2007-07-20 )))))))))))))))))))))))))))))))


2007-07-20 16:39 51,200 --a------ C:\WINDOWS\nircmd.exe
2007-07-20 14:46 <DIR> d-------- C:\WINDOWS\Prefetch
2007-07-20 14:30 <DIR> d-------- C:\WINDOWS\ServicePackFiles
2007-07-20 14:30 <DIR> d-------- C:\WINDOWS\ehome
2007-07-20 14:30 <DIR> d-------- C:\Program Files\messenger
2007-07-20 14:27 9,216 --a------ C:\WINDOWS\system32\wuauserv.dll
2007-07-20 14:27 86,016 --a------ C:\WINDOWS\system32\xactsrv.dll
2007-07-20 14:27 57,344 --a------ C:\WINDOWS\system32\wzcdlg.dll
2007-07-20 14:27 446,464 --a------ C:\WINDOWS\system32\wmvdmoe.dll
2007-07-20 14:27 38,912 --a------ C:\WINDOWS\system32\wsnmp32.dll
2007-07-20 14:27 311,327 --a------ C:\WINDOWS\system32\wmv8dmod.dll
2007-07-20 14:27 296,448 --a------ C:\WINDOWS\system32\wmstream.dll
2007-07-20 14:27 264,704 --a------ C:\WINDOWS\system32\wzcsvc.dll
2007-07-20 14:27 248,320 --a------ C:\WINDOWS\system32\wow32.dll
2007-07-20 14:27 23,552 --a------ C:\WINDOWS\system32\wzcsapi.dll
2007-07-20 14:27 174,200 --a------ C:\WINDOWS\system32\xenroll.dll
2007-07-20 14:27 17,408 --a------ C:\WINDOWS\system32\wtsapi32.dll
2007-07-20 14:27 13,312 --a------ C:\WINDOWS\system32\wship6.dll
2007-07-20 14:27 118,784 --a------ C:\WINDOWS\system32\wmsdmoe.dll
2007-07-20 14:26 91,648 --a------ C:\WINDOWS\system32\rastls.dll
2007-07-20 14:26 9,856 --------- C:\WINDOWS\system32\drivers\tunmp.sys
2007-07-20 14:26 88,576 --a------ C:\WINDOWS\system32\tscfgwmi.dll
2007-07-20 14:26 87,552 --a------ C:\WINDOWS\system32\wlnotify.dll
2007-07-20 14:26 87,304 --a------ C:\WINDOWS\system32\rdpdd.dll
2007-07-20 14:26 84,992 --a------ C:\WINDOWS\system32\smlogsvc.exe
2007-07-20 14:26 84,480 --a------ C:\WINDOWS\system32\psbase.dll
2007-07-20 14:26 81,920 --a------ C:\WINDOWS\system32\trkwks.dll
2007-07-20 14:26 8,192 --a------ C:\WINDOWS\system32\scrnsave.scr
2007-07-20 14:26 77,824 --a------ C:\WINDOWS\system32\wmpstub.exe
2007-07-20 14:26 75,912 --a------ C:\WINDOWS\system32\rdpwsx.dll
2007-07-20 14:26 75,264 --a------ C:\WINDOWS\system32\rtcshare.exe
2007-07-20 14:26 74,752 --a------ C:\WINDOWS\system32\telnet.exe
2007-07-20 14:26 72,704 --a------ C:\WINDOWS\system32\storprop.dll
2007-07-20 14:26 72,192 --a------ C:\WINDOWS\system32\sdbinst.exe
2007-07-20 14:26 676,352 --a------ C:\WINDOWS\system32\sxs.dll
2007-07-20 14:26 671,744 --a------ C:\WINDOWS\system32\ss3dfo.scr
2007-07-20 14:26 67,072 --a------ C:\WINDOWS\system32\sigverif.exe
2007-07-20 14:26 66,560 --a------ C:\WINDOWS\system32\spoolss.dll
2007-07-20 14:26 643,072 --a------ C:\WINDOWS\system32\sstext3d.scr
2007-07-20 14:26 63,488 --a------ C:\WINDOWS\system32\srclient.dll
2007-07-20 14:26 62,976 --a------ C:\WINDOWS\system32\shgina.dll
2007-07-20 14:26 61,952 --a------ C:\WINDOWS\system32\webclnt.dll
2007-07-20 14:26 61,952 --a------ C:\WINDOWS\system32\sti.dll
2007-07-20 14:26 61,440 --a------ C:\WINDOWS\system32\wextract.exe
2007-07-20 14:26 60,928 --a------ C:\WINDOWS\system32\pautoenr.dll
2007-07-20 14:26 60,416 --a------ C:\WINDOWS\system32\shimeng.dll
2007-07-20 14:26 6,144 --a------ C:\WINDOWS\system32\sensapi.dll
2007-07-20 14:26 57,856 --a------ C:\WINDOWS\system32\raschap.dll
2007-07-20 14:26 57,344 --a------ C:\WINDOWS\system32\remotepg.dll
2007-07-20 14:26 569,344 --a------ C:\WINDOWS\system32\sspipes.scr
2007-07-20 14:26 54,784 --a------ C:\WINDOWS\system32\reg.exe
2007-07-20 14:26 534,528 --a------ C:\WINDOWS\system32\spider.exe
2007-07-20 14:26 52,224 --a------ C:\WINDOWS\system32\secur32.dll
2007-07-20 14:26 50,176 --a------ C:\WINDOWS\system32\vfwwdm32.dll
2007-07-20 14:26 5,504 --------- C:\WINDOWS\system32\drivers\smbali.sys
2007-07-20 14:26 48,640 --a------ C:\WINDOWS\system32\vdmredir.dll
2007-07-20 14:26 48,128 --a------ C:\WINDOWS\system32\winsta.dll
2007-07-20 14:26 479,261 --a------ C:\WINDOWS\system32\vbscript.dll
2007-07-20 14:26 47,616 --a------ C:\WINDOWS\system32\utilman.exe
2007-07-20 14:26 44,032 --a------ C:\WINDOWS\system32\regapi.dll
2007-07-20 14:26 44,032 --a------ C:\WINDOWS\system32\rdpclip.exe
2007-07-20 14:26 43,008 --a------ C:\WINDOWS\system32\ssdpsrv.dll
2007-07-20 14:26 422,912 --a------ C:\WINDOWS\system32\shimgvw.dll
2007-07-20 14:26 409,088 --a------ C:\WINDOWS\system32\vssapi.dll
2007-07-20 14:26 40,960 --a------ C:\WINDOWS\system32\tscupgrd.exe
2007-07-20 14:26 388,608 --a------ C:\WINDOWS\system32\themeui.dll
2007-07-20 14:26 364,544 --a------ C:\WINDOWS\system32\ssflwbox.scr
2007-07-20 14:26 36,352 --a------ C:\WINDOWS\system32\sens.dll
2007-07-20 14:26 34,304 --a------ C:\WINDOWS\system32\rcimlby.exe
2007-07-20 14:26 339,968 --a------ C:\WINDOWS\system32\smlogcfg.dll
2007-07-20 14:26 339,456 --a------ C:\WINDOWS\system32\usp10.dll
2007-07-20 14:26 33,280 --a------ C:\WINDOWS\system32\shmgrate.exe
2007-07-20 14:26 32,768 --a------ C:\WINDOWS\system32\umandlg.dll
2007-07-20 14:26 31,744 --a------ C:\WINDOWS\system32\pid.dll
2007-07-20 14:26 308,224 --a------ C:\WINDOWS\system32\scesrv.dll
2007-07-20 14:26 3,352 --a------ C:\WINDOWS\system32\redir.exe
2007-07-20 14:26 270,336 --a------ C:\WINDOWS\winhlp32.exe
2007-07-20 14:26 27,136 --a------ C:\WINDOWS\system32\ssdpapi.dll
2007-07-20 14:26 256,512 --a------ C:\WINDOWS\system32\pdh.dll
2007-07-20 14:26 251,904 --a------ C:\WINDOWS\system32\strmdll.dll
2007-07-20 14:26 24,064 --a------ C:\WINDOWS\system32\skeys.exe
2007-07-20 14:26 233,984 --a------ C:\WINDOWS\system32\tapisrv.dll
2007-07-20 14:26 231,424 --a------ C:\WINDOWS\system32\upnpui.dll
2007-07-20 14:26 23,040 --a------ C:\WINDOWS\system32\slayerxp.dll
2007-07-20 14:26 22,528 --a------ C:\WINDOWS\system32\shfolder.dll
2007-07-20 14:26 22,016 --a------ C:\WINDOWS\system32\udhisapi.dll
2007-07-20 14:26 203,776 --a------ C:\WINDOWS\system32\uxtheme.dll
2007-07-20 14:26 202,240 --a------ C:\WINDOWS\system32\termsrv.dll
2007-07-20 14:26 20,992 --a------ C:\WINDOWS\system32\setup.exe
2007-07-20 14:26 193,536 --a------ C:\WINDOWS\system32\rasppp.dll
2007-07-20 14:26 19,456 --a------ C:\WINDOWS\system32\ssmarque.scr
2007-07-20 14:26 18,944 --a------ C:\WINDOWS\system32\ssbezier.scr
2007-07-20 14:26 179,200 --a------ C:\WINDOWS\system32\scecli.dll
2007-07-20 14:26 174,592 --a------ C:\WINDOWS\system32\winmm.dll
2007-07-20 14:26 171,008 --a------ C:\WINDOWS\system32\sccsccp.dll
2007-07-20 14:26 17,408 --a------ C:\WINDOWS\system32\ssmyst.scr
2007-07-20 14:26 17,408 --a------ C:\WINDOWS\system32\psapi.dll
2007-07-20 14:26 169,984 --a------ C:\WINDOWS\system32\sccbase.dll
2007-07-20 14:26 168,960 --a------ C:\WINDOWS\system32\wldap32.dll
2007-07-20 14:26 166,400 --a------ C:\WINDOWS\system32\w32time.dll


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-07-20 14:44:10 84,266 ----a-w C:\WINDOWS\system32\perfc013.dat
2007-07-20 14:44:10 473,444 ----a-w C:\WINDOWS\system32\perfh013.dat
2007-07-20 12:49:19 -------- d-----w C:\Program Files\MSN Messenger
2007-07-20 12:30:47 -------- d-----w C:\Program Files\Movie Maker
2007-07-08 12:49:53 -------- d-----w C:\Program Files\DivX
2007-07-03 12:14:09 -------- d--h--w C:\Program Files\InstallShield Installation Information
2007-07-03 12:14:05 -------- d-----w C:\Program Files\Logitech
2007-06-14 15:52:49 -------- d-----w C:\Program Files\QuickTime
2007-06-05 19:35:38 -------- d-----w C:\DOCUME~1\Dowmi\APPLIC~1\Skype
2007-06-04 10:22:32 5,632 ----a-r C:\WINDOWS\system32\drivers\Entech64.sys
2007-06-04 10:22:32 21,664 ----a-r C:\WINDOWS\system32\drivers\Entech.sys
2007-05-29 11:28:07 -------- d-----w C:\DOCUME~1\Dowmi\APPLIC~1\Microgaming
2007-04-20 07:16:51 2,275 ----a-w C:\WINDOWS\mozver.dat
2007-01-24 14:36:36 198,275 ----a-w C:\Program Files\FEB2007_XACT_x64.cab
2007-01-24 14:36:34 45,305 ----a-w C:\Program Files\dxdllreg_x86.cab
2007-01-24 14:36:34 151,583 ----a-w C:\Program Files\FEB2007_XACT_x86.cab
2007-01-24 14:21:42 91,265 ------w C:\Program Files\OCT2006_xinput_x64.cab
2007-01-24 14:21:42 86,925 ------w C:\Program Files\Oct2005_xinput_x64.cab
2007-01-24 14:21:42 85,235 ----a-w C:\Program Files\dxupdate.cab
2007-01-24 14:21:42 77,160 -c--a-w C:\Program Files\DSETUP.dll
2007-01-24 14:21:42 503,144 -c--a-w C:\Program Files\DXSETUP.exe
2007-01-24 14:21:42 49,149 ------w C:\Program Files\OCT2006_xinput_x86.cab
2007-01-24 14:21:42 46,247 ------w C:\Program Files\Oct2005_xinput_x86.cab
2007-01-24 14:21:42 183,321 ------w C:\Program Files\OCT2006_XACT_x64.cab
2007-01-24 14:21:42 181,745 ------w C:\Program Files\JUN2006_XACT_x64.cab
2007-01-24 14:21:42 179,247 ------w C:\Program Files\Feb2006_XACT_x64.cab
2007-01-24 14:21:42 138,977 ------w C:\Program Files\OCT2006_XACT_x86.cab
2007-01-24 14:21:42 134,631 ------w C:\Program Files\JUN2006_XACT_x86.cab
2007-01-24 14:21:42 133,297 ------w C:\Program Files\Feb2006_XACT_x86.cab
2007-01-24 14:21:42 1,673,576 -c--a-w C:\Program Files\dsetup32.dll
2007-01-24 14:21:42 1,413,862 ------w C:\Program Files\OCT2006_d3dx9_31_x64.cab
2007-01-24 14:21:42 1,363,684 ------w C:\Program Files\Feb2006_d3dx9_29_x64.cab
2007-01-24 14:21:42 1,336,890 ------w C:\Program Files\Jun2005_d3dx9_26_x64.cab
2007-01-24 14:21:42 1,128,177 ------w C:\Program Files\OCT2006_d3dx9_31_x86.cab
2007-01-24 14:21:42 1,085,608 ------w C:\Program Files\Feb2006_d3dx9_29_x86.cab
2007-01-24 14:21:42 1,065,813 ------w C:\Program Files\Jun2005_d3dx9_26_x86.cab
2007-01-24 14:21:42 1,014,113 ------w C:\Program Files\Feb2005_d3dx9_24_x86.cab
2007-01-24 14:21:40 88,102 ------w C:\Program Files\AUG2006_xinput_x64.cab
2007-01-24 14:21:40 47,018 ------w C:\Program Files\AUG2006_xinput_x86.cab
2007-01-24 14:21:40 213,767 ------w C:\Program Files\DEC2006_d3dx10_00_x64.cab
2007-01-24 14:21:40 193,435 ------w C:\Program Files\DEC2006_XACT_x64.cab
2007-01-24 14:21:40 192,680 ------w C:\Program Files\DEC2006_d3dx10_00_x86.cab
2007-01-24 14:21:40 183,863 ------w C:\Program Files\AUG2006_XACT_x64.cab
2007-01-24 14:21:40 146,559 ------w C:\Program Files\DEC2006_XACT_x86.cab
2007-01-24 14:21:40 138,195 ------w C:\Program Files\AUG2006_XACT_x86.cab
2007-01-24 14:21:40 1,575,336 ------w C:\Program Files\DEC2006_d3dx9_32_x86.cab
2007-01-24 14:21:40 1,572,114 ------w C:\Program Files\DEC2006_d3dx9_32_x64.cab
2007-01-24 14:21:40 1,358,864 ------w C:\Program Files\Dec2005_d3dx9_28_x64.cab
2007-01-24 14:21:40 1,351,430 ------w C:\Program Files\Aug2005_d3dx9_27_x64.cab
2007-01-24 14:21:40 1,248,387 ------w C:\Program Files\Feb2005_d3dx9_24_x64.cab
2007-01-24 14:21:40 1,080,344 ------w C:\Program Files\Dec2005_d3dx9_28_x86.cab
2007-01-24 14:21:40 1,078,532 ------w C:\Program Files\Aug2005_d3dx9_27_x86.cab
2007-01-24 14:21:38 976,020 ------w C:\Program Files\BDAXP.cab
2007-01-24 14:21:38 917,318 ------w C:\Program Files\Apr2006_MDX1_x86.cab
2007-01-24 14:21:38 87,989 ------w C:\Program Files\Apr2006_xinput_x64.cab
2007-01-24 14:21:38 46,898 ------w C:\Program Files\Apr2006_xinput_x86.cab
2007-01-24 14:21:38 4,163,518 -c----w C:\Program Files\Apr2006_MDX1_x86_Archive.cab
2007-01-24 14:21:38 180,021 ------w C:\Program Files\Apr2006_XACT_x64.cab
2007-01-24 14:21:38 133,991 ------w C:\Program Files\Apr2006_XACT_x86.cab
2007-01-24 14:21:38 13,265,040 -c----w C:\Program Files\dxnt.cab
2007-01-24 14:21:38 1,398,718 ------w C:\Program Files\Apr2006_d3dx9_30_x64.cab
2007-01-24 14:21:38 1,348,242 ------w C:\Program Files\Apr2005_d3dx9_25_x64.cab
2007-01-24 14:21:38 1,156,363 ------w C:\Program Files\BDANT.cab
2007-01-24 14:21:38 1,116,109 ------w C:\Program Files\Apr2006_d3dx9_30_x86.cab
2007-01-24 14:21:38 1,079,850 ------w C:\Program Files\Apr2005_d3dx9_25_x86.cab


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
2006-10-22 23:08 62080 --a------ C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
2006-12-15 04:23 440056 --a------ C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PtiuPbmd"="ptipbm.dll" [2003-01-15 13:41 C:\WINDOWS\system32\ptipbm.dll]
"Copperhead"="C:\Program Files\Razer\Copperhead\razerhid.exe" [2005-11-25 11:53]
"CTHelper"="CTHELPER.EXE" [2006-08-11 15:56 C:\WINDOWS\CTHELPER.EXE]
"CTxfiHlp"="CTXFIHLP.EXE" [2006-08-17 12:32 C:\WINDOWS\system32\CTXFIHLP.EXE]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe" [2006-12-15 04:23]
"RemoteControl"="F:\CyberLink\PowerDVD\PDVDServ.exe" [2007-01-08 22:26]
"LanguageShortcut"="F:\CyberLink\PowerDVD\Language\Language.exe" [2007-01-08 22:17]
"DAEMON Tools-1033"="F:\D-Tools\daemon.exe" [2004-08-22 17:05]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-06-14 17:49]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\ctfmon.exe" [2002-09-09 23:08]
"@"="" []
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 13:35]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 13:54]

*Newly Created Service* - ALG
*Newly Created Service* - IPNAT

HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\ccc-core-static
msiexec /fums {3CBBEE47-C8F4-316A-92FF-ED7E3DFAE41E} /qb

**************************************************************************

catchme 0.3.915 W2K/XP/Vista - rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-07-20 16:43:59
Windows 5.1.2600 Service Pack 1 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

Completion time: 2007-07-20 16:45:02 - machine was rebooted
C:\ComboFix-quarantined-files.txt ... 2007-07-20 16:44

--- E O F ---

Klik om te vergroten...

Logfile of HijackThis v1.99.1
Scan saved at 16:46:41, on 20/07/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
F:\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\Cyberlink\Shared Files\RichVideo.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Razer\Copperhead\razerhid.exe
C:\WINDOWS\CTHELPER.EXE
C:\WINDOWS\System32\CTXFIHLP.EXE
C:\WINDOWS\SYSTEM32\CTXFISPI.EXE
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
F:\CyberLink\PowerDVD\PDVDServ.exe
F:\D-Tools\daemon.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Razer\Copperhead\razertra.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Razer\Copperhead\razerofa.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
F:\HiJackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [PtiuPbmd] Rundll32.exe ptipbm.dll,SetWriteBack
O4 - HKLM\..\Run: [Copperhead] C:\Program Files\Razer\Copperhead\razerhid.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [RemoteControl] F:\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [LanguageShortcut] F:\CyberLink\PowerDVD\Language\Language.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "F:\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Snelle start.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Unibet Poker - {C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - C:\Microgaming\Poker\UnibetpokerMPP\MPPoker.exe
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://www.quadv.com/quadvtv2/Rawflow.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/NL-BE/a-UNO1/GAME_UNO1.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase8300.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - WgaLogon.dll (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Diskeeper - Diskeeper Corporation - F:\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared Files\RichVideo.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)

Klik om te vergroten...

• Scroll omlaag naar : "The J2SE Runtime Environment (JRE) allows end-users to run Java applications".
• Klik op de "Download" knop aan de rechterkant.
• Vink aan: "Accept License Agreement".
• De pagina zal herladen.
• Klik op de link om Windows Offline Installation te downloaden met Meerdere-talen, en bewaar het naar je Bureaublad.
• Sluit alle programma's die eventueel open zijn - Zeker je web browser!
• Ga dan naar Start > Configuratiescherm > Software en verwijder alle oudere versies van Java uit de Softwarelijst.
• Vink alles aan met Java Runtime Environment (JRE of J2SE) in de naam.
• Klik dan op Verwijderen of op de Wijzig/Verwijder knop.
• Herhaal dit tot alle oudere versies verdwenen zijn.
• Na het verwijderen van alle oudere versies, herstart je pc.
• Dubbelklik vervolgens op jre-6u2-windows-i586-p.exe op je Bureaublad om de nieuwste versie van Java te installeren.