ComboFix 08-01-31.1 - user 2008-01-31 22:37:06.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1043.18.301 [GMT 1:00]
Gestart vanuit: E:\Documents and Settings\user\Bureaublad\ComboFix.exe
WAARSCHUWING - DE RECOVERY CONSOLE IS NIET OP DIT SYSTEEM GEINSTALLEERD !!
.
(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Previous Run -------
.
C:\Autorun.inf
E:\WINDOWS\system32\prls.dll
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\LEGACY_NPF
(((((((((((((((((((( Bestanden Gemaakt van 2007-12-28 to 2008-01-31 ))))))))))))))))))))))))))))))
.
2008-01-31 22:07 . 2008-01-31 22:07 <DIR> d-------- E:\WINDOWS\system32\tenarchlib
2008-01-31 22:07 . 2006-10-24 15:07 307,200 --a-s---- E:\WINDOWS\system32\InterceptHelper.dll
2008-01-31 22:07 . 2006-10-24 15:07 184,320 --a-s---- E:\WINDOWS\system32\Interceptor.dll
2008-01-31 22:07 . 2005-10-12 22:10 180,224 --a-s---- E:\WINDOWS\system32\archlib.dll
2008-01-30 20:42 . 2008-01-30 20:42 54,156 --ah----- E:\WINDOWS\QTFont.qfn
2008-01-30 20:42 . 2008-01-30 20:42 1,409 --a------ E:\WINDOWS\QTFont.for
2008-01-27 14:11 . 2008-01-27 14:11 <DIR> d-------- E:\Documents and Settings\user\DoctorWeb
2008-01-26 14:02 . 2008-01-26 13:31 129,095 --a------ E:\WINDOWS\system32\winex.exe
2008-01-22 22:28 . 2008-01-27 14:29 <DIR> d-------- E:\Program Files\OneStepSearch
2008-01-21 22:48 . 2008-01-21 22:48 <DIR> d-------- E:\Program Files\iPod
2008-01-21 22:47 . 2008-01-21 22:48 <DIR> d-------- E:\Program Files\iTunes
2008-01-21 22:47 . 2008-01-21 22:47 <DIR> d-------- E:\Program Files\Bonjour
2008-01-20 07:08 . 2008-01-22 22:20 <DIR> d--h----- E:\WINDOWS\system32\GroupPolicy
2008-01-20 02:40 . 2008-01-20 02:49 <DIR> d-------- E:\Documents and Settings\user\Application Data\VoipBuster
2008-01-20 02:38 . 2008-01-20 02:38 <DIR> d-------- E:\Program Files\VoipBuster.com
2008-01-20 02:35 . 2008-01-20 02:45 <DIR> d-------- E:\Program Files\Yahoo!
2008-01-19 23:52 . 2008-01-23 22:42 <DIR> d-------- E:\Program Files\Hitman Pro
2008-01-18 21:25 . 2008-01-24 07:46 <DIR> d-------- E:\Program Files\Enigma Software Group
2008-01-17 21:43 . 2008-01-17 21:43 <DIR> d-------- E:\Program Files\Webroot
2008-01-17 21:43 . 2008-01-17 21:43 <DIR> d-------- E:\Documents and Settings\LocalService\Application Data\Webroot
2008-01-17 21:43 . 2008-01-17 21:43 <DIR> d-------- E:\Documents and Settings\All Users\Application Data\Webroot
2008-01-17 21:43 . 2007-03-01 19:54 144,960 --a------ E:\WINDOWS\system32\drivers\ssidrv.sys
2008-01-17 21:43 . 2007-03-01 19:54 22,080 --a------ E:\WINDOWS\system32\drivers\sshrmd.sys
2008-01-17 21:43 . 2007-03-01 19:54 21,056 --a------ E:\WINDOWS\system32\drivers\sskbfd.sys
2008-01-17 21:43 . 2007-03-01 19:54 20,544 --a------ E:\WINDOWS\system32\drivers\SSFS0509.sys
2008-01-17 21:42 . 2008-01-17 21:42 <DIR> d-------- E:\Documents and Settings\user\Application Data\Webroot
2008-01-17 16:21 . 2008-01-17 16:21 244 --ah----- E:\sqmnoopt00.sqm
2008-01-17 16:21 . 2008-01-17 16:21 232 --ah----- E:\sqmdata00.sqm
2008-01-13 20:06 . 2008-01-13 20:38 <DIR> d-------- E:\Program Files\WebCam Spy Pro
2008-01-13 18:55 . 2008-01-13 18:56 <DIR> d-------- E:\Program Files\MYMA Decoder and Viewer
2008-01-13 18:36 . 2008-01-13 18:41 <DIR> dr-hs---- E:\Program Files\MSNCS
2008-01-13 18:36 . 2007-06-08 16:15 1,519,616 --a------ E:\WINDOWS\system32\mxpvct25.dat
2008-01-13 18:36 . 1998-06-26 00:00 1,008,432 --a------ E:\WINDOWS\system32\MSCHRT20.OCX
2008-01-13 18:36 . 1998-06-24 00:00 369,696 --a------ E:\WINDOWS\system32\COMCT332.OCX
2008-01-13 18:36 . 2004-03-09 15:45 132,880 --a------ E:\WINDOWS\system32\mxpvct22.dat
2008-01-13 18:36 . 2007-04-04 22:24 20,480 --a------ E:\WINDOWS\system32\adsnwm.exe
2008-01-13 18:36 . 2008-01-13 18:41 89 --a------ E:\WINDOWS\system32\msnappini.ini
2008-01-13 18:04 . 2008-01-13 18:04 <DIR> d-------- E:\temp\helper
2008-01-13 18:04 . 2007-06-09 22:32 155,648 --a------ E:\temp\flasm.exe
2008-01-13 16:12 . 2008-01-14 17:50 <DIR> d-------- E:\Program Files\eMule
2008-01-13 12:38 . 2008-01-20 03:46 <DIR> d-------- E:\Program Files\StuffPlug3
2008-01-13 12:28 . 2008-01-13 12:28 <DIR> d-------- E:\Program Files\MSN Messenger
2008-01-13 12:28 . 2008-01-20 03:45 <DIR> d-------- E:\Program Files\MessengerDiscovery 2
2008-01-12 21:52 . 2008-01-12 22:27 <DIR> d-------- E:\Program Files\Arial Sound Recorder
2008-01-12 20:19 . 2008-01-12 20:19 <DIR> d-------- E:\Program Files\AdVantage
2008-01-12 20:17 . 2008-01-12 20:20 <DIR> d-------- E:\Program Files\DAEMON Tools Lite
2008-01-12 20:17 . 2008-01-12 20:17 <DIR> d-------- E:\Documents and Settings\user\Application Data\DAEMON Tools
2008-01-12 20:09 . 2008-01-12 20:09 715,248 --a------ E:\WINDOWS\system32\drivers\sptd.sys
2008-01-10 22:33 . 2008-01-10 22:33 <DIR> d-------- E:\Documents and Settings\user\Application Data\dvdcss
2008-01-10 15:27 . 2008-01-10 15:27 90,112 --a------ E:\WINDOWS\system32\QuickTimeVR.qtx
2008-01-10 15:27 . 2008-01-10 15:27 57,344 --a------ E:\WINDOWS\system32\QuickTime.qts
2008-01-07 22:40 . 1996-11-05 16:13 299,008 --a------ E:\WINDOWS\uninst.exe
2008-01-07 22:39 . 2008-01-07 22:39 <DIR> d-------- E:\Documents and Settings\user\WINDOWS
2008-01-07 21:33 . 2008-01-07 21:33 118,784 --a------ E:\WINDOWS\system32\prai.dll
2008-01-07 21:27 . 2008-01-07 21:32 1,613,824 --a------ E:\WINDOWS\system32\prmrsr.exe
2008-01-06 07:41 . 2008-01-06 07:51 <DIR> d-------- E:\Program Files\Backspin Billiards
2008-01-06 05:59 . 2008-01-12 18:47 <DIR> d-------- E:\EW.QL.Symphonic.Orchestra.Silver.Edition.Hybrid.DVDR-CoBaLT
2008-01-06 02:19 . 2008-01-06 02:19 <DIR> d-------- E:\Documents and Settings\All Users\Application Data\pixelStorm
2008-01-05 14:25 . 2008-01-05 17:09 <DIR> d-------- E:\Program Files\BitLord
2008-01-05 12:35 . 2008-01-05 12:35 359,808 --a------ E:\WINDOWS\system32\drivers\TCPIP.SYS.ORIGINAL
2008-01-04 18:11 . 2008-01-04 18:12 <DIR> d-------- E:\Program Files\DivX
2008-01-04 02:17 . 2008-01-04 02:17 <DIR> d-------- E:\Program Files\CGN
2008-01-03 23:48 . 2002-01-05 11:16 737,280 --a------ E:\WINDOWS\system32\msvcp70d.dll
2008-01-03 23:48 . 2002-01-05 11:16 536,576 --a------ E:\WINDOWS\system32\msvcr70d.dll
2008-01-03 18:39 . 2008-01-05 03:01 <DIR> d-------- E:\Program Files\Microsoft Virtual PC
2008-01-03 18:05 . 2008-01-03 18:05 <DIR> d-------- E:\WINDOWS\system32\NtmsData
2008-01-03 03:10 . 2008-01-03 03:10 0 --a------ E:\WINDOWS\PlayDemo.INI
2008-01-02 12:22 . 2008-01-02 12:22 <DIR> d-------- E:\Program Files\Common Files\Autodesk Shared
2008-01-02 12:22 . 2008-01-02 12:22 <DIR> d-------- E:\Program Files\backburner 2
2008-01-02 12:21 . 2008-01-02 12:23 <DIR> d-------- E:\Documents and Settings\All Users\Application Data\Autodesk
2008-01-02 10:22 . 2008-01-02 10:22 <DIR> d-------- E:\Documents and Settings\user\Application Data\Apple Computer
2008-01-02 10:21 . 2008-01-02 10:21 <DIR> d-------- E:\Program Files\Common Files\Apple
2008-01-02 03:55 . 2008-01-02 03:54 720,896 --a------ E:\WINDOWS\iun6002ev.exe
2008-01-02 03:28 . 2008-01-02 03:28 <DIR> d-------- E:\Program Files\MSNContacts
2008-01-02 01:28 . 2008-01-02 01:28 132 --a------ E:\WINDOWS\wininit.ini
2008-01-02 01:26 . 2008-01-02 01:26 <DIR> d-------- E:\Program Files\Virtools
2008-01-02 01:15 . 1999-12-17 11:13 86,016 --a------ E:\WINDOWS\unvise32.exe
2008-01-02 00:41 . 2008-01-02 00:53 <DIR> d-------- E:\Program Files\LimeWire
2008-01-02 00:41 . 2008-01-02 00:41 <DIR> d-------- E:\Documents and Settings\user\Incomplete
2008-01-02 00:41 . 2008-01-02 01:24 <DIR> d-------- E:\Documents and Settings\user\Application Data\LimeWire
2008-01-02 00:08 . 2008-01-03 03:10 <DIR> d-------- E:\Documents and Settings\user\Application Data\GetRightToGo
2008-01-01 17:46 . 2008-01-01 17:46 0 --a------ E:\WINDOWS\MOTO.INI
2007-12-31 15:37 . 2008-01-22 20:00 <DIR> d-------- E:\Program Files\MusicLab
2007-12-31 04:49 . 2008-01-16 20:45 <DIR> d-------- E:\Documents and Settings\user\Application Data\AdobeUM
2007-12-31 03:59 . 2004-08-04 01:03 221,184 --a------ E:\WINDOWS\system32\wmpns.dll
2007-12-31 02:37 . 2007-12-31 02:37 <DIR> d-------- E:\WINDOWS\Sun
2007-12-31 02:37 . 2007-09-24 23:31 69,632 --a------ E:\WINDOWS\system32\javacpl.cpl
2007-12-31 02:36 . 2007-12-31 02:37 <DIR> d-------- E:\Program Files\Java
2007-12-31 02:35 . 2007-12-31 02:35 <DIR> d-------- E:\Program Files\Common Files\Java
2007-12-31 00:40 . 2007-12-31 00:40 <DIR> d-------- E:\Program Files\Nexus
2007-12-30 21:16 . 2007-12-30 21:16 <DIR> d-------- E:\Program Files\LUXONIX
2007-12-30 21:16 . 2005-03-24 08:26 491,520 --a------ E:\WINDOWS\system32\msvcr80.dll
2007-12-30 19:03 . 2007-12-30 19:03 <DIR> d-------- E:\Program Files\Free Audio Pack
2007-12-30 19:03 . 1998-06-16 23:00 516,173 --a------ E:\WINDOWS\system32\MSVCP60D.DLL
2007-12-30 19:03 . 1998-06-16 23:00 385,100 --a------ E:\WINDOWS\system32\MSVCRTD.DLL
2007-12-30 19:03 . 2002-01-05 15:37 344,064 --a------ E:\WINDOWS\system32\Msvcr70.dll
2007-12-30 19:03 . 2004-03-08 23:00 224,016 --a------ E:\WINDOWS\system32\TABCTL32.OCX
2007-12-30 19:03 . 1998-07-12 23:00 141,312 --a------ E:\WINDOWS\system32\MSCMCFR.DLL
2007-12-30 19:03 . 2000-10-01 19:00 119,568 --a------ E:\WINDOWS\system32\VB6FR.DLL
2007-12-30 19:03 . 1999-03-25 19:00 101,888 --a------ E:\WINDOWS\system32\VB6STKIT.DLL
.
((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-02 17:26 --------- d--h--w E:\Program Files\Uninstall Information
2007-12-21 17:31 --------- d--h--w E:\Program Files\InstallShield Installation Information
2007-12-18 17:26 --------- d-----w E:\Program Files\Common Files\InstallShield
2007-12-18 17:19 17,801 ----a-w E:\WINDOWS\system32\drivers\AegisP.sys
2007-12-18 16:13 --------- d-----w E:\Program Files\CyberLink
2007-12-18 16:13 --------- d-----w E:\Documents and Settings\All Users\Application Data\CyberLink
2007-12-18 15:32 --------- d-----w E:\Program Files\microsoft frontpage
2007-11-29 22:30 200,704 ----a-w E:\WINDOWS\system32\ssldivx.dll
2007-11-29 22:30 1,044,480 ----a-w E:\WINDOWS\system32\libdivx.dll
2007-11-07 09:30 727,040 ----a-w E:\WINDOWS\system32\lsasrv.dll
2007-10-29 22:45 1,291,776 ----a-w E:\WINDOWS\system32\quartz.dll
2007-10-25 08:28 222,720 ----a-w E:\WINDOWS\system32\wmasf.dll
2007-10-18 10:31 51,224 ----a-w E:\WINDOWS\system32\sirenacm.dll
2007-10-10 23:54 824,832 ----a-w E:\WINDOWS\system32\wininet.dll
.
((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="E:\WINDOWS\system32\ctfmon.exe" [2004-08-04 01:03 15360]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="E:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2006-11-16 19:04 139264]
"MsnMsgr"="E:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2008-01-03 21:44 5724184]
"Orb"="E:\Program Files\Winamp Remote\bin\OrbTray.exe" [2007-10-23 01:47 360448]
"SpybotSD TeaTimer"="E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2007-08-31 16:46 1460560]
"MSMSGS"="E:\Program Files\Messenger\msmsgs.exe" [2004-10-13 17:24 1694208]
"VoipBuster"="E:\Program Files\VoipBuster.com\VoipBuster\VoipBuster.exe" [2008-01-25 19:26 8811824]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"adsnwm"="E:\WINDOWS\system32\adsnwm.exe" [2007-04-04 22:24 20480]
"RemoteControl"="E:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2003-12-08 17:35 32768]
"ACU"="E:\Program Files\Atheros\ACU.exe" [2005-01-31 08:05 253952]
"RTHDCPL"="RTHDCPL.EXE" [2006-01-11 18:23 15961088 E:\WINDOWS\RTHDCPL.exe]
"Broadcom Wireless Manager UI"="E:\WINDOWS\system32\WLTRAY" [ ]
"eDataSecurity Loader"="C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2005-10-19 09:30 69632]
"ADMTray.exe"="C:\Acer\Empowering Technology\admtray.exe" [2005-10-24 16:45 2462208]
"LaunchAp"="E:\Program Files\Launch Manager\LaunchAp.exe" [2005-07-25 13:36 32768]
"PowerKey"="E:\Program Files\Launch Manager\PowerKey.exe" [2002-08-30 15:02 94208]
"LManager"="E:\Program Files\Launch Manager\HotkeyApp.exe" [2005-11-08 10:45 69632]
"CtrlVol"="E:\Program Files\Launch Manager\CtrlVol.exe" [2003-09-16 14:28 20480]
"LMgrOSD"="E:\Program Files\Launch Manager\OSDCtrl.exe" [2005-07-25 10:45 241664]
"Wbutton"="E:\Program Files\Launch Manager\Wbutton.exe" [2005-11-08 10:19 81920]
"SynTPLpr"="E:\Program Files\Synaptics\SynTP\SynTPLpr.exe" [2004-10-05 17:25 98394]
"SynTPEnh"="E:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2004-10-05 17:24 688218]
"ATICCC"="E:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2005-08-12 14:43 45056]
"NeroFilterCheck"="E:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 15:40 155648]
"AVG7_CC"="E:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2007-12-22 10:47 579072]
"WinampAgent"="E:\Program Files\Winamp\winampa.exe" [2007-10-10 06:28 36352]
"TkBellExe"="E:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2007-12-19 22:58 185896]
"LogitechVideoRepair"="E:\Program Files\Logitech\Video\ISStart.exe" [2003-12-16 22:37 188416]
"LogitechVideoTray"="E:\Program Files\Logitech\Video\LogiTray.exe" [2003-12-16 22:39 77824]
"SpySweeper"="E:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" [2007-03-01 19:55 4865600]
"CamWizard"="E:\Program Files\Common Files\Logitech\QCDRV\BIN\CamWizrd.exe" [2003-08-29 07:24 106496]
"MP10_EnsureFileVer"="E:\WINDOWS\inf\unregmp2.exe" [2007-06-27 15:57 317952]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"KB926239"="apphelp.dll" [2004-08-04 01:03 126976 E:\WINDOWS\system32\apphelp.dll]
"wextract_cleanup1"="E:\WINDOWS\system32\advpack.dll" [2007-10-11 00:53 124928]
"wextract_cleanup0"="E:\WINDOWS\system32\advpack.dll" [2007-10-11 00:53 124928]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="E:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 01:03 15360]
"AVG7_Run"="E:\PROGRA~1\Grisoft\AVG7\avgw.exe" [2007-12-18 18:43 219136]
E:\Documents and Settings\user\Menu Start\Programma's\Opstarten\
Stardock ObjectDock.lnk - E:\Program Files\Stardock\ObjectDock\ObjectDock.exe [2007-12-20 03:12:35 3450608]
Yahoo! Widgets.lnk - E:\Program Files\Yahoo!\Widgets\YahooWidgets.exe [2007-12-11 23:34:48 3746856]
E:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\
Adobe Reader Speed Launch.lnk - E:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 22:05:26 29696]
Logitech Desktop Messenger.lnk - E:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe [2007-12-21 18:57:29 169472]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=interceptor.dll,e:\windows\system32\prai.dll
R1 Hotkey;Hotkey;E:\WINDOWS\system32\drivers\Hotkey.sys [2003-04-28 11:27]
R1 OsaFsLoc;OsaFsLoc;E:\WINDOWS\system32\drivers\OsaFsLoc.sys [2005-10-15 18:20]
R2 osaio;osaio;E:\WINDOWS\system32\drivers\osaio.sys [2005-06-30 16:58]
R2 osanbm;osanbm;E:\WINDOWS\system32\drivers\osanbm.sys [2005-01-14 15:57]
R3 NdisFilt;OSA NdisFilter Protocol;E:\WINDOWS\system32\Drivers\NdisFilt.sys [2005-09-13 15:34]
R3 POWERKEY;POWERKEY;E:\Program Files\Launch Manager\POWERKEY.sys [2000-12-19 18:29]
S1 Wbutton;Wbutton;E:\WINDOWS\system32\drivers\Wbutton.sys []
.
Inhoud van de 'Gedeelde Taken' map
"2008-01-23 07:26:45 E:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- E:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2008-01-31 21:34:01 E:\WINDOWS\Tasks\Controleren op updates voor Windows Live Toolbar.job"
- E:\Program Files\Windows Live Toolbar\MSNTBUP.EXE
.
**************************************************************************
catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2008-01-31 22:41:08
Windows 5.1.2600 Service Pack 2 NTFS
detected NTDLL code modification:
ZwQuerySystemInformation
scannen van verborgen processen ...
scannen van verborgen autostart items ...
scannen van verborgen bestanden ...
Scan succesvol afgerond
verborgen bestanden: 0
**************************************************************************
.
Voltooingstijd: 2008-01-31 22:42:19
ComboFix-quarantined-files.txt 2008-01-31 21:42:14
.
2008-01-21 21:55:54 --- E O F ---
Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 20:55:00, on 1/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal
Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\System32\wltrysvc.exe
E:\WINDOWS\System32\bcmwltry.exe
E:\WINDOWS\Explorer1.exe
E:\WINDOWS\system32\spoolsv.exe
E:\WINDOWS\system32\acs.exe
E:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
E:\Program Files\Atheros\ACU.exe
E:\WINDOWS\RTHDCPL.EXE
E:\WINDOWS\system32\WLTRAY.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
E:\Program Files\MSNCS\data\dpnsvrm.exe
C:\Acer\Empowering Technology\admtray.exe
E:\Program Files\Launch Manager\LaunchAp.exe
E:\Program Files\Launch Manager\PowerKey.exe
E:\Program Files\Launch Manager\HotkeyApp.exe
E:\Program Files\Launch Manager\OSDCtrl.exe
E:\Program Files\Launch Manager\Wbutton.exe
E:\Program Files\Synaptics\SynTP\SynTPLpr.exe
E:\Program Files\MSNCS\data\vssvcm.exe
E:\Program Files\Synaptics\SynTP\SynTPEnh.exe
E:\PROGRA~1\Grisoft\AVG7\avgcc.exe
E:\Program Files\Winamp\winampa.exe
E:\Program Files\Common Files\Real\Update_OB\realsched.exe
E:\Program Files\Logitech\Video\LogiTray.exe
E:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
E:\WINDOWS\system32\LVComS.exe
E:\WINDOWS\system32\ctfmon.exe
E:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
E:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
E:\Program Files\Winamp Remote\bin\OrbTray.exe
E:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
E:\Program Files\Messenger\msmsgs.exe
E:\Program Files\VoipBuster.com\VoipBuster\VoipBuster.exe
E:\Program Files\Stardock\ObjectDock\ObjectDock.exe
E:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
E:\Program Files\Winamp Remote\bin\Orb.exe
E:\DOCUME~1\user\LOCALS~1\Temp\RtkBtMnt.exe
E:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
E:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
E:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
E:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
E:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Acer\Empowering Technology\admServ.exe
E:\Program Files\Bonjour\mDNSResponder.exe
E:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
E:\WINDOWS\system32\svchost.exe
E:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
E:\Program Files\Webroot\Spy Sweeper\SSU.EXE
E:\WINDOWS\system32\wbem\wmiapsrv.exe
E:\WINDOWS\system32\wscntfy.exe
E:\WINDOWS\System32\svchost.exe
E:\Program Files\Windows Live\Messenger\usnsvc.exe
E:\PROGRA~1\MOZILL~1\FIREFOX.EXE
E:\Program Files\Winamp\winamp.exe
C:\Mijn Documenten\HiJackThis_v2.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
F2 - REG
ystem.ini: Shell=Explorer1.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - E:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - E:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - E:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [adsnwm] E:\WINDOWS\system32\adsnwm.exe
O4 - HKLM\..\Run: [RemoteControl] "E:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [ACU] "E:\Program Files\Atheros\ACU.exe" -nogui
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] E:\WINDOWS\system32\WLTRAY
O4 - HKLM\..\Run: [eDataSecurity Loader] "C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe"
O4 - HKLM\..\Run: [ADMTray.exe] "C:\Acer\Empowering Technology\admtray.exe"
O4 - HKLM\..\Run: [LaunchAp] "E:\Program Files\Launch Manager\LaunchAp.exe"
O4 - HKLM\..\Run: [PowerKey] "E:\Program Files\Launch Manager\PowerKey.exe"
O4 - HKLM\..\Run: [LManager] "E:\Program Files\Launch Manager\HotkeyApp.exe"
O4 - HKLM\..\Run: [CtrlVol] "E:\Program Files\Launch Manager\CtrlVol.exe"
O4 - HKLM\..\Run: [LMgrOSD] "E:\Program Files\Launch Manager\OSDCtrl.exe"
O4 - HKLM\..\Run: [Wbutton] "E:\Program Files\Launch Manager\Wbutton.exe"
O4 - HKLM\..\Run: [SynTPLpr] "E:\Program Files\Synaptics\SynTP\SynTPLpr.exe"
O4 - HKLM\..\Run: [SynTPEnh] "E:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
O4 - HKLM\..\Run: [ATICCC] "E:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [NeroFilterCheck] "E:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe"
O4 - HKLM\..\Run: [AVG7_CC] "E:\PROGRA~1\Grisoft\AVG7\avgcc.exe" /STARTUP
O4 - HKLM\..\Run: [WinampAgent] "E:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [TkBellExe] "E:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [LogitechVideoRepair] "E:\Program Files\Logitech\Video\ISStart.exe"
O4 - HKLM\..\Run: [LogitechVideoTray] E:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SpySweeper] "E:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKLM\..\Run: [CamWizard] E:\Program Files\Common Files\Logitech\QCDRV\BIN\CamWizrd.exe
O4 - HKLM\..\Run: [MP10_EnsureFileVer] "E:\WINDOWS\inf\unregmp2.exe" /EnsureFileVersions
O4 - HKLM\..\RunOnce: [KB926239] rundll32.exe apphelp.dll,ShimFlushCache
O4 - HKLM\..\RunOnce: [wextract_cleanup1] rundll32.exe E:\WINDOWS\system32\advpack.dll,DelNodeRunDLL32 "E:\DOCUME~1\user\LOCALS~1\Temp\IXP000.TMP\"
O4 - HKLM\..\RunOnce: [wextract_cleanup0] rundll32.exe E:\WINDOWS\system32\advpack.dll,DelNodeRunDLL32 "E:\DOCUME~1\user\LOCALS~1\Temp\IXP000.TMP\"
O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "E:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MsnMsgr] "E:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Orb] "E:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] "E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe"
O4 - HKCU\..\Run: [MSMSGS] "E:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [VoipBuster] "E:\Program Files\VoipBuster.com\VoipBuster\VoipBuster.exe" -nosplash -minimized
O4 - HKCU\..\Run: [LDM] E:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\RunOnce: [WMC_WMPDBExport] "E:\Program Files\Windows Media Player\wmdbexport.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] E:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Lokale service')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Stardock ObjectDock.lnk = E:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O4 - Startup: Yahoo! Widgets.lnk = E:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = E:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = E:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: &Windows Live Search - res://E:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites -
http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://E:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Save Flash - res://E:\Program Files\UnH Solutions\Flash Saving Plugin\FlashSButton.dll/210
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Flash - {43CF38F3-5AEC-45a3-AD31-04EB06E9C6CA} - E:\Program Files\UnH Solutions\Flash Saving Plugin\FlashSButton.dll (file missing) (HKCU)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://www.update.microsoft.com/win...ls/en/x86/client/wuweb_site.cab?1198085735421
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) -
http://messenger.zone.msn.com/binary/Bankshot.cab57213.cab
O20 - AppInit_DLLs: interceptor.dll,e:\windows\system32\prai.dll
O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - E:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - E:\WINDOWS\system32\browseui.dll
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - E:\WINDOWS\system32\acs.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - E:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - E:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Autodesk Licensing Service - Unknown owner - E:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - E:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - E:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - E:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: AdminWorks Agent X6 (AWService) - Avocent Inc. - C:\Acer\Empowering Technology\admServ.exe
O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - E:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: iPod-service (iPod Service) - Apple Inc. - E:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - E:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - E:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
O23 - Service: Broadcom Wireless LAN Tray Service (wltrysvc) - Unknown owner - E:\WINDOWS\System32\wltrysvc.exe
--
End of file - 12103 bytes
Is dit wat je nodig hebt?
