Archief - MSN, Steam en newsleecher crashen telkens

Desolator23 · 1 mei 2007

Hallo JurgenV

Wil je eens kijken naar mijn logje aub

Logfile of HijackThis v1.99.1
Scan saved at 22:52:39, on 1/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Intel\IDU\awServ.exe
C:\Program Files\Intel\IDU\iptray.exe
C:\Program Files\Intel Audio Studio\IntelAudioStudio.exe
C:\WINDOWS\system32\Belpic PCSC Service.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\LVComSX.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\wuauclt.exe
G:\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [ipTray.exe] "C:\Program Files\Intel\IDU\iptray.exe"
O4 - HKLM\..\Run: [IntelAudioStudio] "C:\Program Files\Intel Audio Studio\IntelAudioStudio.exe" TRAY
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [MediaFace Integration] C:\Program Files\Fellowes\MediaFACE 4.0\SetHook.exe
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [SigmatelSysTrayApp] sttray.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Global Startup: Pinnacle Scheduler.lnk = ?
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Admin Works Agent X8 (AWService) - OSA Technologies Inc., An Avocent Company - C:\Program Files\Intel\IDU\awServ.exe
O23 - Service: BELPIC PCSC Service (BELGIUM_ID_CARD_SERVICE) - Zetes/CSC - C:\WINDOWS\system32\Belpic PCSC Service.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Office Source Engine (ose) - Unknown owner - C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE (file missing)

Jurgenv1 · 2 mei 2007

* Download Dr.Web CureIt naar je bureaublad:
ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe

Dubbelklik drweb-cureit.exe en sta het toe om de express scan te starten.
Dit zal de bestanden scannen die momenteel in het geheugen geladen zijn en wanneer er iets gevonden wordt, klik de Yes to all knop bij de vraag 'cure it?'. Dit is enkel een korte scan.
Eenmaal de korte scan is beeïndigd, Klik Options > Change Settings
Kies de "Scan"-tab en verwijder het vinkje bij "Heuristic analyse"
Terug in het hoofdvenster kan je de drives selecteren die je wilt laten scannen.
Selecteer hier alle drives. Een rood bolletje zal dan tevoorschijn komen op de drives die je laat scannen.
Klik daarna de groene pijl rechts om de scan te starten.
Klik 'Yes to all' wanneer er gevraagd wordt om cure of move uit te voeren.
Wanneer de scan gedaan is, kijk of je volgende icoontje kan aanklikken dat staat naast hetgeen gevonden werd:
Indien wel, klik erop en daarna klik op het icoontje er net onder en kies: Move incurable zoals je zal zien in volgende afbeelding:

Dit zal de bestanden verplaatsen naar volgende map %userprofile%\DoctorWeb\quarantaine-folder indien het niet gedesinfecteerd kan worden. (dit in het geval dat we samples nodig hebben)
Na bovenstaande te selecteren, in het menu bovenaan van Dr.Web CureIt, klik file en kies save report list. Bewaar de log op je bureaublad.
Sluit daarna Dr.Web Cureit.
Herstart je computer!! Belangrijke stap, want het kan zijn dat Dr.Web Cureit bestanden zal verplaatsen/verwijderen tijdens herstart.
Na het herstarten, Kopieer en plak de inhoud van die log die je eerder hebt bewaard in je volgende post met een nieuw hijackthis logje.

Desolator23 · 2 mei 2007

VBAOL11.CHM\html/olobjAddressEntries.htm C:\Program Files\Microsoft Office\OFFICE11\1043\VBAOL11.CHM Modification of VBS.Petik
VBAOL11.CHM C:\Program Files\Microsoft Office\OFFICE11\1043 Archive contains infected objects Moved.
mirc.exe C:\Program Files\mIRC Program.mIRC.60 Incurable.Deleted.

Logfile of HijackThis v1.99.1
Scan saved at 16:58:41, on 2/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Intel\IDU\awServ.exe
C:\WINDOWS\system32\Belpic PCSC Service.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\IDU\iptray.exe
C:\Program Files\Intel Audio Studio\IntelAudioStudio.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\LVComSX.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Internet Explorer\iexplore.exe
G:\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [ipTray.exe] "C:\Program Files\Intel\IDU\iptray.exe"
O4 - HKLM\..\Run: [IntelAudioStudio] "C:\Program Files\Intel Audio Studio\IntelAudioStudio.exe" TRAY
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [MediaFace Integration] C:\Program Files\Fellowes\MediaFACE 4.0\SetHook.exe
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [SigmatelSysTrayApp] sttray.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Global Startup: Pinnacle Scheduler.lnk = ?
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Admin Works Agent X8 (AWService) - OSA Technologies Inc., An Avocent Company - C:\Program Files\Intel\IDU\awServ.exe
O23 - Service: BELPIC PCSC Service (BELGIUM_ID_CARD_SERVICE) - Zetes/CSC - C:\WINDOWS\system32\Belpic PCSC Service.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Office Source Engine (ose) - Unknown owner - C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE (file missing)

Jurgenv1 · 2 mei 2007

Download combofix.exe: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Plaats het op je bureaublad.
Dubbelklik er op om het programma te starten.
In het scherm dat verschijnt tik je een Y in om het cleaningsprocess te starten.
Volg de instructies op het scherm.
Als het tooltje klaar is, opent er een logfile (combofix.txt) Post de inhoud van dit bestandje samen met een nieuwe hijackthislog.

Desolator23 · 2 mei 2007

"Jeffrey" - 07-05-02 20:08:25 Service Pack 2
ComboFix 07-04-25.4V - Running from: "C:\Documents and Settings\Jeffrey\Bureaublad\"

((((((((((((((((((((((((((((((( Files Created from 2007-04-02 to 2007-05-02 ))))))))))))))))))))))))))))))))))

2007-05-02 20:02 49,152 --a------ C:\WINDOWS\nircmd.exe
2007-05-02 17:43 75,444 --a------ C:\WINDOWS\system32\prfc0413.dat
2007-05-02 17:43 498,224 --a------ C:\WINDOWS\system32\prfh0413.dat
2007-05-02 16:28 <DIR> d-------- C:\Program Files\Windows Defender
2007-05-02 16:17 <DIR> d-------- C:\DOCUME~1\Jeffrey\DoctorWeb
2007-05-01 12:02 <DIR> dr-h----- C:\DOCUME~1\Jeffrey\Onlangs geopend
2007-05-01 12:01 <DIR> d-------- C:\Program Files\CCleaner
2007-05-01 11:47 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logitech
2007-05-01 11:47 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logishrd
2007-05-01 09:52 17,920 --a------ C:\WINDOWS\system32\mdimon.dll
2007-05-01 09:51 <DIR> d-------- C:\Program Files\Microsoft Works
2007-05-01 09:50 <DIR> d-------- C:\WINDOWS\SHELLNEW
2007-05-01 09:50 <DIR> d-------- C:\Program Files\Microsoft.NET
2007-04-30 23:21 <DIR> d-------- C:\Program Files\Relay Anticheat Client
2007-04-30 23:21 <DIR> d-------- C:\Program Files\F1rst3
2007-04-30 22:58 75,264 --a------ C:\WINDOWS\system32\IFORCE2.DLL
2007-04-30 15:34 <DIR> d-------- C:\DOCUME~1\Jeffrey\APPLIC~1\Activision
2007-04-30 15:33 255,848 --a------ C:\WINDOWS\system32\xactengine2_6.dll
2007-04-30 14:47 <DIR> d-------- C:\Program Files\QuickPar
2007-04-29 22:23 <DIR> d-------- C:\Program Files\Common Files\DirectX
2007-04-27 21:59 <DIR> d-------- C:\Program Files\DAMN NFO Viewer
2007-04-26 23:21 <DIR> d-------- C:\DOCUME~1\Jeffrey\APPLIC~1\CyberLink
2007-04-26 22:32 11,904 --a------ C:\WINDOWS\system32\drivers\phylock.sys
2007-04-26 22:32 <DIR> d-------- C:\Program Files\Image for Windows
2007-04-26 21:46 228,246 --a------ C:\WINDOWS\rFactor Data Acquisition Plugin Uninstaller.exe
2007-04-26 21:46 <DIR> d-------- C:\Program Files\Common Files\Thraex Software
2007-04-26 21:33 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Test Drive Unlimited
2007-04-26 21:32 108,144 --a------ C:\WINDOWS\system32\CmdLineExt.dll
2007-04-26 21:32 <DIR> dr-h----- C:\DOCUME~1\Jeffrey\APPLIC~1\SecuROM
2007-04-26 20:03 <DIR> d-------- C:\Program Files\GameSpy
2007-04-26 19:57 786,432 --ah----- C:\DOCUME~1\ADMINI~1\NTUSER.DAT
2007-04-26 19:57 <DIR> dr------- C:\DOCUME~1\ADMINI~1\Menu Start
2007-04-26 19:57 <DIR> d--h----- C:\DOCUME~1\ADMINI~1\Sjablonen
2007-04-26 19:57 <DIR> d--h----- C:\DOCUME~1\ADMINI~1\Onlangs geopend
2007-04-26 19:57 <DIR> d--h----- C:\DOCUME~1\ADMINI~1\Netwerkprinteromgeving
2007-04-26 19:57 <DIR> d-------- C:\DOCUME~1\ADMINI~1\Mijn documenten
2007-04-26 19:57 <DIR> d-------- C:\DOCUME~1\ADMINI~1\Favorieten
2007-04-26 19:57 <DIR> d-------- C:\DOCUME~1\ADMINI~1\Bureaublad
2007-04-26 19:44 <DIR> d-------- C:\WINDOWS\system32\URTTemp
2007-04-26 19:42 82,774 --a------ C:\WINDOWS\Uninstall Jade Empire.exe
2007-04-26 19:37 <DIR> d-------- C:\Program Files\GameSpy Arcade
2007-04-26 17:46 86,016 --a------ C:\WINDOWS\system32\OpenAL32.dll
2007-04-26 17:46 5,632 --a------ C:\WINDOWS\system32\drivers\Entech64.sys
2007-04-26 17:46 3,972 --a------ C:\WINDOWS\system32\drivers\PciBus.sys
2007-04-26 17:46 262,144 --a------ C:\WINDOWS\system32\wrap_oal.dll
2007-04-26 17:46 21,664 --a------ C:\WINDOWS\system32\drivers\Entech.sys
2007-04-26 17:46 <DIR> d-------- C:\WINDOWS\system32\Futuremark
2007-04-26 17:45 <DIR> d-------- C:\Program Files\Futuremark
2007-04-26 17:42 <DIR> d-------- C:\Program Files\EA SPORTS
2007-04-26 17:33 <DIR> d-------- C:\ProgramData
2007-04-26 17:33 <DIR> d-------- C:\Program Files\Electronic Arts
2007-04-26 17:13 2,297,552 --a------ C:\WINDOWS\system32\d3dx9_26.dll
2007-04-25 22:39 <DIR> d-------- C:\Program Files\America's Army Server Manager
2007-04-25 21:48 271,360 --a------ C:\WINDOWS\system32\drivers\atksgt.sys
2007-04-25 21:48 18,048 --a------ C:\WINDOWS\system32\drivers\lirsgt.sys
2007-04-25 21:20 <DIR> d-------- C:\WINDOWS\system32\ageia
2007-04-25 21:20 <DIR> d-------- C:\Program Files\AGEIA Technologies
2007-04-25 20:11 <DIR> d--hs---- C:\WINDOWS\ftpcache
2007-04-25 19:55 <DIR> d-------- C:\DOCUME~1\Jeffrey\APPLIC~1\InstallShield
2007-04-25 18:56 68,888 --a------ C:\WINDOWS\system32\xinput1_3.dll
2007-04-25 18:56 62,744 --a------ C:\WINDOWS\system32\xinput1_2.dll
2007-04-25 18:56 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll
2007-04-25 18:56 251,672 --a------ C:\WINDOWS\system32\xactengine2_5.dll
2007-04-25 18:56 237,848 --a------ C:\WINDOWS\system32\xactengine2_4.dll
2007-04-25 18:56 236,824 --a------ C:\WINDOWS\system32\xactengine2_3.dll
2007-04-25 18:56 2,414,360 --a------ C:\WINDOWS\system32\d3dx9_31.dll
2007-04-25 18:56 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll
2007-04-25 18:15 <DIR> d-------- C:\WINDOWS\pss
2007-04-25 18:13 43,584 --a------ C:\WINDOWS\system32\drivers\avipbb.sys
2007-04-25 18:13 28,352 --a------ C:\WINDOWS\system32\drivers\ssmdrv.sys
2007-04-25 18:13 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\AntiVir PersonalEdition Classic
2007-04-25 17:45 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Trymedia
2007-04-25 17:23 <DIR> d-------- C:\WINDOWS\system32\nl-nl
2007-04-25 17:22 262,144 --a------ C:\DOCUME~1\ALLUSE~1\ntuser.dat
2007-04-25 17:22 <DIR> d-------- C:\WINDOWS\network diagnostic
2007-04-25 17:20 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2007-04-25 17:20 <DIR> d-------- C:\WINDOWS\system32\LogFiles
2007-04-25 17:20 <DIR> d-------- C:\WINDOWS\system32\drivers\UMDF
2007-04-25 17:20 <DIR> d-------- C:\Program Files\Windows Media Connect 2
2007-04-25 17:19 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
2007-04-25 17:10 <DIR> d-------- C:\Program Files\DAEMON Tools
2007-04-25 17:06 639,224 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2007-04-25 17:06 <DIR> d-------- C:\Program Files\Nero
2007-04-25 17:06 <DIR> d-------- C:\Program Files\Common Files\Ahead
2007-04-25 17:06 <DIR> d-------- C:\DOCUME~1\Jeffrey\APPLIC~1\Ahead
2007-04-25 17:04 <DIR> d-------- C:\Program Files\Smart Projects
2007-04-25 17:02 <DIR> d-------- C:\Program Files\cdrLabel 7.1
2007-04-25 17:02 <DIR> d-------- C:\Program Files\Belgium Identity Card
2007-04-25 17:01 24,832 --a------ C:\WINDOWS\system32\drivers\a38usbxp.sys
2007-04-25 17:01 110,592 --a------ C:\WINDOWS\system32\usbr38.dll
2007-04-25 16:57 <DIR> d-------- C:\Program Files\NewsLeecher
2007-04-25 16:57 <DIR> d-------- C:\DOCUME~1\Jeffrey\Downloads
2007-04-25 16:57 <DIR> d-------- C:\DOCUME~1\Jeffrey\APPLIC~1\NewsLeecher
2007-04-25 16:56 <DIR> d-------- C:\Program Files\LimeWire
2007-04-25 16:56 <DIR> d-------- C:\DOCUME~1\Jeffrey\Incomplete
2007-04-25 16:56 <DIR> d-------- C:\DOCUME~1\Jeffrey\APPLIC~1\LimeWire
2007-04-25 16:53 <DIR> d-------- C:\Program Files\mIRC
2007-04-25 16:53 <DIR> d-------- C:\DOCUME~1\Jeffrey\APPLIC~1\SlySoft
2007-04-25 16:52 <DIR> d-------- C:\Program Files\Fraps
2007-04-25 16:51 <DIR> d-------- C:\Program Files\Real Alternative
2007-04-25 16:51 <DIR> d-------- C:\Program Files\Media Player Classic
2007-04-25 16:51 <DIR> d-------- C:\DOCUME~1\Jeffrey\APPLIC~1\Real
2007-04-25 16:51 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Real
2007-04-25 16:47 974,848 --------- C:\WINDOWS\system32\MFC70.DLL
2007-04-25 16:47 964,608 --------- C:\WINDOWS\system32\MFC70U.DLL
2007-04-25 16:47 89,088 --------- C:\WINDOWS\system32\atl71.dll
2007-04-25 16:47 84,992 --------- C:\WINDOWS\system32\ATL70.DLL
2007-04-25 16:47 61,440 --------- C:\WINDOWS\system32\pclepim1.dll
2007-04-25 16:47 61,440 --------- C:\WINDOWS\system32\MFC70ITA.DLL
2007-04-25 16:47 61,440 --------- C:\WINDOWS\system32\MFC70FRA.DLL
2007-04-25 16:47 61,440 --------- C:\WINDOWS\system32\MFC70ESP.DLL
2007-04-25 16:47 61,440 --------- C:\WINDOWS\system32\MFC70DEU.DLL
2007-04-25 16:47 6,400 --a------ C:\WINDOWS\system32\drivers\pctvvbi.sys
2007-04-25 16:47 57,856 --------- C:\WINDOWS\system32\Masd32.dll
2007-04-25 16:47 54,784 --------- C:\WINDOWS\system32\MSVCI70.DLL
2007-04-25 16:47 49,152 --------- C:\WINDOWS\system32\PCLEGetGuid.dll
2007-04-25 16:47 49,152 --------- C:\WINDOWS\system32\MFC70KOR.DLL
2007-04-25 16:47 49,152 --------- C:\WINDOWS\system32\MFC70JPN.DLL
2007-04-25 16:47 487,424 --------- C:\WINDOWS\system32\MSVCP70.DLL
2007-04-25 16:47 450,641 --------- C:\WINDOWS\system32\DiskIO.dll
2007-04-25 16:47 45,056 --------- C:\WINDOWS\system32\MFC70CHT.DLL
2007-04-25 16:47 420,240 --a------ C:\WINDOWS\system32\mpg4c32.dll
2007-04-25 16:47 40,960 --------- C:\WINDOWS\system32\MFC70CHS.DLL
2007-04-25 16:47 344,064 --------- C:\WINDOWS\system32\MSVCR70.DLL
2007-04-25 16:47 32,838 --------- C:\WINDOWS\system32\Cachex.dll
2007-04-25 16:47 32,768 --------- C:\WINDOWS\system32\MLPagAx.dll
2007-04-25 16:47 27,648 --------- C:\WINDOWS\system32\Ma32.dll
2007-04-25 16:47 196,096 --------- C:\WINDOWS\system32\Macd32.dll
2007-04-25 16:47 17,664 --a------ C:\WINDOWS\system32\drivers\rob_a.sys
2007-04-25 16:47 143,360 --------- C:\WINDOWS\system32\RALMain.dll
2007-04-25 16:47 14,604 --------- C:\WINDOWS\system32\drivers\pfc.sys
2007-04-25 16:47 138,752 --------- C:\WINDOWS\system32\Mase32.dll
2007-04-25 16:47 136,192 --------- C:\WINDOWS\system32\Mamc32.dll
2007-04-25 16:47 125,568 --a------ C:\WINDOWS\system32\drivers\rob_v.sys
2007-04-25 16:47 <DIR> d-------- C:\Program Files\Pinnacle
2007-04-25 16:47 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Pinnacle
2007-04-25 16:46 <DIR> d-------- C:\Program Files\CyberLink
2007-04-25 16:46 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
2007-04-25 16:45 <DIR> d-------- C:\Program Files\Webteh
2007-04-25 16:45 <DIR> d-------- C:\DOCUME~1\Jeffrey\APPLIC~1\BSplayer Pro
2007-04-25 16:44 1 --a------ C:\WINDOWS\system32\au3305adc.dll
2007-04-25 16:44 <DIR> d-------- C:\Program Files\SlySoft
2007-04-25 16:44 <DIR> d-------- C:\Program Files\Apollo DVD Copy
2007-04-25 16:43 47,360 --a------ C:\WINDOWS\system32\drivers\Pcouffin.sys
2007-04-25 16:43 <DIR> d-------- C:\Program Files\LG Software Innovations
2007-04-25 16:42 85,376 --a------ C:\WINDOWS\system32\drivers\NABTSFEC.sys
2007-04-25 16:42 5,504 --a------ C:\WINDOWS\system32\drivers\MSTEE.sys
2007-04-25 16:42 19,328 --a------ C:\WINDOWS\system32\drivers\WSTCODEC.SYS
2007-04-25 16:42 15,360 --a------ C:\WINDOWS\system32\drivers\StreamIP.sys
2007-04-25 16:42 11,136 --a------ C:\WINDOWS\system32\drivers\SLIP.sys
2007-04-25 16:42 10,880 --a------ C:\WINDOWS\system32\drivers\NdisIP.sys
2007-04-25 16:41 54,272 --a------ C:\WINDOWS\system32\vfwwdm32.dll
2007-04-25 16:41 17,024 --a------ C:\WINDOWS\system32\drivers\CCDECODE.sys
2007-04-25 16:38 527,136 --a------ C:\WINDOWS\system32\LVUI2RC.dll
2007-04-25 16:38 41,504 --a------ C:\WINDOWS\system32\drivers\LVUSBSta.sys
2007-04-25 16:38 348,160 --a------ C:\WINDOWS\system\msvcr71.dll
2007-04-25 16:38 264,992 --a------ C:\WINDOWS\system32\lvcodec2.dll
2007-04-25 16:38 22,560 --a------ C:\WINDOWS\system32\drivers\lvuvcflt.sys
2007-04-25 16:38 215,840 --a------ C:\WINDOWS\system32\LVUI2.dll
2007-04-25 16:38 13,398 --a------ C:\WINDOWS\system32\Repository.reg
2007-04-25 16:38 129,824 --a------ C:\WINDOWS\system32\lvci1051.dll
2007-04-25 16:38 1,939,360 --a------ C:\WINDOWS\system32\drivers\lvuvc.sys
2007-04-25 16:38 1,507,232 --a------ C:\WINDOWS\system32\drivers\lvpopflt.sys
2007-04-25 16:38 <DIR> d-------- C:\Program Files\Common Files\LogiShrd
2007-04-25 16:37 <DIR> d-------- C:\Program Files\Logitech
2007-04-25 16:34 <DIR> d-------- C:\Program Files\Intel Desktop Board
2007-04-25 16:33 90,112 --a------ C:\WINDOWS\system32\dpl100.dll
2007-04-25 16:33 856,064 --a------ C:\WINDOWS\system32\xvidcore.dll
2007-04-25 16:33 81,924 --------- C:\WINDOWS\system32\drivers\VC4CB104.SYS
2007-04-25 16:33 69,632 --------- C:\WINDOWS\system32\FREGSHEX.DLL
2007-04-25 16:33 65,536 --------- C:\WINDOWS\system32\FINFCHECK.dll
2007-04-25 16:33 630,784 --a------ C:\WINDOWS\system32\vp7vfw.dll
2007-04-25 16:33 620,180 --a------ C:\WINDOWS\system32\divx.dll
2007-04-25 16:33 594,450 --a------ C:\WINDOWS\system32\x264vfw.dll
2007-04-25 16:33 5,120 --a------ C:\WINDOWS\system32\ff_vfw.dll
2007-04-25 16:33 45,056 --------- C:\WINDOWS\system32\FINFCOPY.dll
2007-04-25 16:33 45,056 --------- C:\WINDOWS\system32\FCLKBTN.DLL
2007-04-25 16:33 438,272 --a------ C:\WINDOWS\system32\vp6vfw.dll
2007-04-25 16:33 39,936 --a------ C:\WINDOWS\system32\huffyuv.dll
2007-04-25 16:33 3,596,288 --a------ C:\WINDOWS\system32\qt-dx331.dll
2007-04-25 16:33 217,088 --a------ C:\WINDOWS\system32\yv12vfw.dll
2007-04-25 16:33 217,088 --a------ C:\WINDOWS\system32\xvidvfw.dll
2007-04-25 16:33 217,088 --a------ C:\WINDOWS\system32\i420vfw.dll
2007-04-25 16:33 200,704 --a------ C:\WINDOWS\system32\ssldivx.dll
2007-04-25 16:33 200,704 --a------ C:\WINDOWS\system32\dtu100.dll
2007-04-25 16:33 144,384 --a------ C:\WINDOWS\system32\Iacenc.dll
2007-04-25 16:33 1,415,680 --a------ C:\WINDOWS\system32\WMV9VCM.dll
2007-04-25 16:33 1,044,480 --a------ C:\WINDOWS\system32\libdivx.dll
2007-04-25 16:33 <DIR> d-------- C:\Program Files\REGSHAVE
2007-04-25 16:33 <DIR> d-------- C:\Program Files\K-Lite Codec Pack
2007-04-25 16:32 212,480 --a------ C:\WINDOWS\PCDLIB32.DLL
2007-04-25 16:32 <DIR> d-------- C:\Program Files\ArcSoft
2007-04-25 16:32 <DIR> d-------- C:\DOCUME~1\Jeffrey\WINDOWS
2007-04-25 16:31 318,976 -ra------ C:\WINDOWS\system32\UCS32P.DLL
2007-04-25 16:31 311,296 -ra------ C:\WINDOWS\system32\N065UFW.dll
2007-04-25 16:31 28,718 -ra------ C:\WINDOWS\system32\N065UCPL.DLL
2007-04-25 16:31 163,888 -ra------ C:\WINDOWS\system32\N065UUD.DLL
2007-04-25 16:31 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
2007-04-25 16:20 163,840 --a------ C:\WINDOWS\BJPSUNST.EXE
2007-04-25 16:19 499,712 --a------ C:\WINDOWS\system32\msvcp71.dll
2007-04-25 16:19 348,160 --a------ C:\WINDOWS\system32\msvcr71.dll
2007-04-25 16:19 1,060,864 --a------ C:\WINDOWS\system32\MFC71.dll
2007-04-25 16:18 86,016 -ra------ C:\WINDOWS\system32\CNMCP61.exe
2007-04-25 16:18 7,680 --a------ C:\WINDOWS\system32\CNMVS61.DLL
2007-04-25 16:18 116,736 --a------ C:\WINDOWS\system32\CNMLM61.DLL
2007-04-25 16:18 <DIR> d--h----- C:\BJPrinter
2007-04-25 16:18 <DIR> d-------- C:\WINDOWS\StartHtmico
2007-04-25 16:18 <DIR> d-------- C:\WINDOWS\IP4000,3000
2007-04-25 16:17 <DIR> d-------- C:\Program Files\Canon
2007-04-25 16:16 <DIR> d-------- C:\Program Files\Fellowes
2007-04-25 16:16 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Fellowes
2007-04-24 22:57 <DIR> d--hs---- C:\RECYCLER
2007-04-24 22:50 <DIR> d-------- C:\DOCUME~1\Jeffrey\Contacts
2007-04-24 22:49 <DIR> d-------- C:\Program Files\MSN Messenger
2007-04-24 22:48 <DIR> d--h----- C:\WINDOWS\$hf_mig$
2007-04-24 22:48 <DIR> d-------- C:\WINDOWS\system32\PreInstall
2007-04-24 22:46 59,264 --a------ C:\WINDOWS\system32\drivers\USBAUDIO.sys
2007-04-24 20:35 3,072 --a------ C:\WINDOWS\system32\drivers\audstub.sys
2007-04-24 20:34 6,400 --a------ C:\WINDOWS\system32\drivers\enum1394.sys
2007-04-24 20:34 57,856 --a------ C:\WINDOWS\system32\drivers\redbook.sys
2007-04-24 20:34 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2007-04-24 20:34 21,504 --a------ C:\WINDOWS\system32\hidserv.dll
2007-04-24 20:33 8,192 -ra------ C:\WINDOWS\system32\kbdhept.dll
2007-04-24 20:33 76,288 --a------ C:\WINDOWS\system32\usbui.dll
2007-04-24 20:33 7,168 -ra------ C:\WINDOWS\system32\kbdcz.dll
2007-04-24 20:33 6,656 -ra------ C:\WINDOWS\system32\kbdycl.dll
2007-04-24 20:33 6,656 -ra------ C:\WINDOWS\system32\kbdsl1.dll
2007-04-24 20:33 6,656 -ra------ C:\WINDOWS\system32\kbdsl.dll
2007-04-24 20:33 6,656 -ra------ C:\WINDOWS\system32\kbdpl.dll
2007-04-24 20:33 6,656 -ra------ C:\WINDOWS\system32\kbdhu.dll
2007-04-24 20:33 6,656 -ra------ C:\WINDOWS\system32\kbdhela3.dll
2007-04-24 20:33 6,656 -ra------ C:\WINDOWS\system32\kbdcz2.dll
2007-04-24 20:33 6,656 -ra------ C:\WINDOWS\system32\kbdcz1.dll
2007-04-24 20:33 6,656 -ra------ C:\WINDOWS\system32\kbdcr.dll
2007-04-24 20:33 6,656 -ra------ C:\WINDOWS\system32\KBDAL.DLL
2007-04-24 20:33 6,144 -ra------ C:\WINDOWS\system32\kbdtuq.dll
2007-04-24 20:33 6,144 -ra------ C:\WINDOWS\system32\kbdtuf.dll
2007-04-24 20:33 6,144 -ra------ C:\WINDOWS\system32\kbdlv1.dll
2007-04-24 20:33 6,144 -ra------ C:\WINDOWS\system32\kbdlv.dll
2007-04-24 20:33 6,144 -ra------ C:\WINDOWS\system32\kbdhela2.dll
2007-04-24 20:33 6,144 -ra------ C:\WINDOWS\system32\kbdgkl.dll
2007-04-24 20:33 6,144 -ra------ C:\WINDOWS\system32\kbdest.dll
2007-04-24 20:33 5,632 -ra------ C:\WINDOWS\system32\kbdro.dll
2007-04-24 20:33 5,632 -ra------ C:\WINDOWS\system32\kbdpl1.dll
2007-04-24 20:33 5,632 -ra------ C:\WINDOWS\system32\kbdmon.dll
2007-04-24 20:33 5,632 -ra------ C:\WINDOWS\system32\kbdlt1.dll
2007-04-24 20:33 5,632 -ra------ C:\WINDOWS\system32\kbdlt.dll
2007-04-24 20:33 5,632 -ra------ C:\WINDOWS\system32\kbdkyr.dll
2007-04-24 20:33 5,632 -ra------ C:\WINDOWS\system32\kbdhu1.dll
2007-04-24 20:33 5,632 -ra------ C:\WINDOWS\system32\kbdhe319.dll
2007-04-24 20:33 5,632 -ra------ C:\WINDOWS\system32\kbdhe220.dll
2007-04-24 20:33 5,632 -ra------ C:\WINDOWS\system32\kbdhe.dll
2007-04-24 20:33 5,632 -ra------ C:\WINDOWS\system32\kbdazel.dll
2007-04-24 20:33 <DIR> dr------- C:\Program Files
2007-04-24 20:33 <DIR> d--hs---- C:\WINDOWS\Installer
2007-04-24 20:33 <DIR> d-------- C:\Program Files\Common Files\SpeechEngines
2007-04-24 20:33 <DIR> d-------- C:\Program Files\Common Files\ODBC
2007-04-24 20:32 9,936 --a------ C:\WINDOWS\system\LZEXPAND.DLL
2007-04-24 20:32 9,040 --a------ C:\WINDOWS\system\VER.DLL
2007-04-24 20:32 86,556 --a------ C:\WINDOWS\system32\dgsetup.dll
2007-04-24 20:32 82,944 --a------ C:\WINDOWS\system\OLECLI.DLL
2007-04-24 20:32 8,704 --a------ C:\WINDOWS\system32\batt.dll
2007-04-24 20:32 76,288 --a------ C:\WINDOWS\system32\storprop.dll
2007-04-24 20:32 70,192 --a------ C:\WINDOWS\system\MMSYSTEM.DLL
2007-04-24 20:32 70,144 --a------ C:\WINDOWS\system\AVICAP.DLL
2007-04-24 20:32 70,144 --a------ C:\WINDOWS\NOTEPAD.EXE
2007-04-24 20:32 5,120 --a------ C:\WINDOWS\system\SHELL.DLL
2007-04-24 20:32 33,696 --a------ C:\WINDOWS\system\COMMDLG.DLL
2007-04-24 20:32 24,661 --a------ C:\WINDOWS\system32\spxcoins.dll
2007-04-24 20:32 24,064 --a------ C:\WINDOWS\system\OLESVR.DLL
2007-04-24 20:32 19,200 --a------ C:\WINDOWS\system\TAPI.DLL
2007-04-24 20:32 176,157 --a------ C:\WINDOWS\system32\dgrpsetu.dll
2007-04-24 20:32 15,872 --a------ C:\WINDOWS\TASKMAN.EXE
2007-04-24 20:32 13,312 --a------ C:\WINDOWS\system32\irclass.dll
2007-04-24 20:32 126,976 --a------ C:\WINDOWS\system\MSVIDEO.DLL
2007-04-24 20:32 11,264 --a------ C:\WINDOWS\system32\drivers\irenum.sys
2007-04-24 20:32 109,552 --a------ C:\WINDOWS\system\AVIFILE.DLL
2007-04-24 20:32 103,936 --a------ C:\WINDOWS\system32\EqnClass.Dll
2007-04-24 20:32 <DIR> dr------- C:\DOCUME~1\DEFAUL~1\Menu Start
2007-04-24 20:32 <DIR> dr------- C:\DOCUME~1\ALLUSE~1\Menu Start
2007-04-24 20:32 <DIR> dr------- C:\DOCUME~1\ALLUSE~1\Documenten
2007-04-24 20:32 <DIR> d--hs---- C:\System Volume Information
2007-04-24 20:32 <DIR> d--h----- C:\DOCUME~1\DEFAUL~1\Sjablonen
2007-04-24 20:32 <DIR> d--h----- C:\DOCUME~1\DEFAUL~1\Onlangs geopend
2007-04-24 20:32 <DIR> d--h----- C:\DOCUME~1\DEFAUL~1\Netwerkprinteromgeving
2007-04-24 20:32 <DIR> d--h----- C:\DOCUME~1\ALLUSE~1\Sjablonen
2007-04-24 20:32 <DIR> d-------- C:\WINDOWS\system32\CatRoot2
2007-04-24 20:32 <DIR> d-------- C:\WINDOWS\system32\CatRoot
2007-04-24 20:32 <DIR> d-------- C:\Documents and Settings
2007-04-24 20:32 <DIR> d-------- C:\DOCUME~1\DEFAUL~1\Mijn documenten
2007-04-24 20:32 <DIR> d-------- C:\DOCUME~1\DEFAUL~1\Favorieten
2007-04-24 20:32 <DIR> d-------- C:\DOCUME~1\DEFAUL~1\Bureaublad
2007-04-24 20:32 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\Favorieten
2007-04-24 20:32 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\Bureaublad
2007-04-24 20:26 <DIR> dr-hsc--- C:\WINDOWS\system32\dllcache
2007-04-24 20:26 <DIR> dr--s---- C:\WINDOWS\Fonts
2007-04-24 20:26 <DIR> dr------- C:\WINDOWS\Web
2007-04-24 20:26 <DIR> d--h----- C:\WINDOWS\inf
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\WinSxS
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\twain_32
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\wins
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\wbem
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\usmt
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\spool
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\ShellExt
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\Setup
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\ras
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\oobe
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\npp
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\mui
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\inetsrv
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\IME
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\icsxml
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\ias
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\export
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\drivers\etc
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\drivers\disdn
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\drivers
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\dhcp
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\config
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\3com_dmi
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\3076
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\2052
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\1054
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\1043
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\1042
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\1041
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\1037
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\1033
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\1031
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\1028
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32\1025
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system32
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\system
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\security
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\Resources
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\repair
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\Provisioning
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\PeerNet
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\pchealth
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\OemDir
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\mui
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\msapps
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\msagent
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\Media
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\ime
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\Help
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\Driver Cache
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\Debug
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\Cursors
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\Connection Wizard
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\Config
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\AppPatch
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS\addins
2007-04-24 20:26 <DIR> d-------- C:\WINDOWS
2007-04-24 19:14 356,352 --a------ C:\WINDOWS\system32\NVUNINST.EXE
2007-04-24 19:14 356,352 --a------ C:\WINDOWS\system32\nvudisp.exe
2007-04-24 19:14 <DIR> d-------- C:\WINDOWS\nview
2007-04-24 19:14 <DIR> d-------- C:\NVIDIA
2007-04-24 19:13 <DIR> d-------- C:\WINDOWS\system32\SoftwareDistribution
2007-04-24 19:13 <DIR> d-------- C:\WINDOWS\Profiles
2007-04-24 19:13 <DIR> d-------- C:\DOCUME~1\Jeffrey\APPLIC~1\InterTrust
2007-04-24 19:12 306,688 --a------ C:\WINDOWS\IsUninst.exe
2007-04-24 19:10 56,832 -ra------ C:\WINDOWS\system32\NicEtCoE.dll
2007-04-24 19:10 253,952 -ra------ C:\WINDOWS\system32\e1000msg.dll
2007-04-24 19:10 230,400 -ra------ C:\WINDOWS\system32\drivers\e1e5132.sys
2007-04-24 19:10 21,504 -ra------ C:\WINDOWS\system32\NicCo.dll
2007-04-24 19:10 20,480 -ra------ C:\WINDOWS\system32\NicInstE.dll
2007-04-24 19:10 126,976 -ra------ C:\WINDOWS\system32\Prounstl.exe
2007-04-24 19:08 89,360 --a------ C:\WINDOWS\system32\VB5DB.DLL
2007-04-24 19:08 82,944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys
2007-04-24 19:08 7,552 --a------ C:\WINDOWS\system32\drivers\MSKSSRV.sys
2007-04-24 19:08 61,440 --a------ C:\WINDOWS\system32\SFIDLOCK.dll
2007-04-24 19:08 60,800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys
2007-04-24 19:08 60,288 --a------ C:\WINDOWS\system32\drivers\drmk.sys
2007-04-24 19:08 6,400 --a------ C:\WINDOWS\system32\drivers\splitter.sys
2007-04-24 19:08 54,272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys
2007-04-24 19:08 53,248 --a------ C:\WINDOWS\system32\IASBB.dll
2007-04-24 19:08 52,864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys
2007-04-24 19:08 5,376 --a------ C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2007-04-24 19:08 41,728 --a------ C:\WINDOWS\system32\drivers\sfng32.sys
2007-04-24 19:08 40,960 --a------ C:\WINDOWS\system32\SFIMLARK.dll
2007-04-24 19:08 4,992 --a------ C:\WINDOWS\system32\drivers\MSPQM.sys
2007-04-24 19:08 4,096 --a------ C:\WINDOWS\system32\ksuser.dll
2007-04-24 19:08 274,432 --a------ C:\WINDOWS\system32\IASDLL.dll
2007-04-24 19:08 266,240 --a------ C:\WINDOWS\system32\IASMXDLL.dll
2007-04-24 19:08 23,856 --a------ C:\WINDOWS\system32\spupdsvc.exe
2007-04-24 19:08 229,376 --a------ C:\WINDOWS\system32\stacapi.dll
2007-04-24 19:08 2,944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys
2007-04-24 19:08 172,416 --a------ C:\WINDOWS\system32\drivers\kmixer.sys
2007-04-24 19:08 142,464 --a------ C:\WINDOWS\system32\drivers\aec.sys
2007-04-24 19:08 117,248 --a------ C:\WINDOWS\system32\staco.dll
2007-04-24 19:08 1,178,088 --a------ C:\WINDOWS\system32\drivers\sthda.sys
2007-04-24 19:08 1,097,728 --a------ C:\WINDOWS\system32\stlang.dll
2007-04-24 19:08 <DIR> d-------- C:\Program Files\SigmaTel
2007-04-24 19:08 <DIR> d-------- C:\Program Files\Intel Audio Studio
2007-04-24 19:07 126,976 --a------ C:\WINDOWS\system32\Imsmudlg.exe
2007-04-24 19:07 <DIR> d-------- C:\WINDOWS\system32\NLD
2007-04-24 19:03 <DIR> d-------- C:\WINDOWS\system32\ReinstallBackups
2007-04-24 19:03 <DIR> d-------- C:\TempEI4
2007-04-24 19:03 <DIR> d-------- C:\Program Files\MSXML 4.0
2007-04-24 19:02 <DIR> d-------- C:\DOCUME~1\Jeffrey\APPLIC~1\Intel
2007-04-24 19:02 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avocent AdminWorks
2007-04-24 19:01 6,784 --a------ C:\WINDOWS\system32\drivers\osaio.sys
2007-04-24 19:01 44,416 --a------ C:\WINDOWS\system32\drivers\HECI.sys
2007-04-24 19:01 364,544 --a------ C:\WINDOWS\system32\heciudlg.exe
2007-04-24 19:01 36,484 --a------ C:\WINDOWS\system32\drivers\SMBios.sys
2007-04-24 19:01 312,320 --a------ C:\WINDOWS\system32\difxapi.dll
2007-04-24 19:01 22,272 --a------ C:\WINDOWS\system32\drivers\intelsmb.sys
2007-04-24 19:01 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE
2007-04-24 19:01 <DIR> d-------- C:\WINDOWS\Downloaded Installations
2007-04-24 19:01 <DIR> d-------- C:\Program Files\Intel
2007-04-24 19:01 <DIR> d-------- C:\Intel
2007-04-24 18:48 8,192 --a------ C:\WINDOWS\system32\wnaspi32.dll
2007-04-24 18:48 4,239,360 --a------ C:\WINDOWS\system32\qtp-mt334.dll
2007-04-24 18:48 30,808 --a------ C:\WINDOWS\system32\drivers\hotcore2.sys

Desolator23 · 2 mei 2007

2007-04-24 18:47 <DIR> d-------- C:\Program Files\Paragon Software
2007-04-24 18:46 <DIR> d--h----- C:\Program Files\InstallShield Installation Information
2007-04-24 18:46 <DIR> d-------- C:\Program Files\PowerQuest
2007-04-24 18:46 <DIR> d-------- C:\Program Files\Common Files\InstallShield
2007-04-24 18:45 3,145,728 --ah----- C:\DOCUME~1\Jeffrey\NTUSER.DAT
2007-04-24 18:45 <DIR> dr------- C:\DOCUME~1\Jeffrey\Mijn documenten
2007-04-24 18:45 <DIR> dr------- C:\DOCUME~1\Jeffrey\Menu Start
2007-04-24 18:45 <DIR> dr------- C:\DOCUME~1\Jeffrey\Favorieten
2007-04-24 18:45 <DIR> d--h----- C:\DOCUME~1\Jeffrey\Sjablonen
2007-04-24 18:45 <DIR> d--h----- C:\DOCUME~1\Jeffrey\Netwerkprinteromgeving
2007-04-24 18:45 <DIR> d-------- C:\DOCUME~1\Jeffrey\Bureaublad
2007-04-24 18:44 229,376 --ah----- C:\DOCUME~1\NETWOR~1\NTUSER.DAT
2007-04-24 18:44 229,376 --ah----- C:\DOCUME~1\LOCALS~1\NTUSER.DAT
2007-04-24 18:44 <DIR> d-------- C:\WINDOWS\SoftwareDistribution
2007-04-24 18:44 <DIR> d-------- C:\WINDOWS\Prefetch
2007-04-24 18:42 229,376 ---h----- C:\DOCUME~1\DEFAUL~1\NTUSER.DAT
2007-04-24 18:42 112,128 --a------ C:\WINDOWS\system32\mapi32.dll
2007-04-24 18:42 0 -rahs---- C:\MSDOS.SYS
2007-04-24 18:42 0 -rahs---- C:\IO.SYS
2007-04-24 18:42 0 --a------ C:\CONFIG.SYS
2007-04-24 18:42 0 --a------ C:\AUTOEXEC.BAT
2007-04-24 18:42 <DIR> dr------- C:\WINDOWS\Offline Web Pages
2007-04-24 18:42 <DIR> d--hs---- C:\DOCUME~1\ALLUSE~1\DRM
2007-04-24 18:42 <DIR> d---s---- C:\WINDOWS\Downloaded Program Files
2007-04-24 18:42 <DIR> d-------- C:\WINDOWS\system32\xircom
2007-04-24 18:42 <DIR> d-------- C:\Program Files\microsoft frontpage
2007-04-24 18:41 8,192 --a------ C:\WINDOWS\system32\bitsprx2.dll
2007-04-24 18:41 7,168 --a------ C:\WINDOWS\system32\bitsprx3.dll
2007-04-24 18:41 67,584 --a------ C:\WINDOWS\system32\acctres.dll
2007-04-24 18:41 6,656 --a------ C:\WINDOWS\system32\wuauserv.dll
2007-04-24 18:41 466,200 --a------ C:\WINDOWS\system32\wuapi.dll
2007-04-24 18:41 41,240 --a------ C:\WINDOWS\system32\wups.dll
2007-04-24 18:41 382,464 --a------ C:\WINDOWS\system32\qmgr.dll
2007-04-24 18:41 194,840 --a------ C:\WINDOWS\system32\wuaueng1.dll
2007-04-24 18:41 18,944 --a------ C:\WINDOWS\system32\qmgrprxy.dll
2007-04-24 18:41 174,360 --a------ C:\WINDOWS\system32\wuauclt1.exe
2007-04-24 18:41 173,536 --a------ C:\WINDOWS\system32\wuweb.dll
2007-04-24 18:41 16,384 --a------ C:\WINDOWS\system32\icfgnt5.dll
2007-04-24 18:41 128,280 --a------ C:\WINDOWS\system32\wucltui.dll
2007-04-24 18:41 125,208 --a------ C:\WINDOWS\system32\wuauclt.exe
2007-04-24 18:41 12,288 --a------ C:\WINDOWS\system32\nmevtmsg.dll
2007-04-24 18:41 11,264 --a------ C:\WINDOWS\system32\atrace.dll
2007-04-24 18:41 1,343,768 --a------ C:\WINDOWS\system32\wuaueng.dll
2007-04-24 18:41 <DIR> d--h----- C:\Program Files\WindowsUpdate
2007-04-24 18:41 <DIR> d---s---- C:\WINDOWS\Tasks
2007-04-24 18:41 <DIR> d-------- C:\WINDOWS\system32\Macromed
2007-04-24 18:41 <DIR> d-------- C:\WINDOWS\system32\DirectX
2007-04-24 18:41 <DIR> d-------- C:\WINDOWS\srchasst
2007-04-24 18:41 <DIR> d-------- C:\Program Files\Online Services
2007-04-24 18:41 <DIR> d-------- C:\Program Files\Common Files\MSSoap
2007-04-24 18:40 86,016 --a------ C:\WINDOWS\system32\isign32.dll
2007-04-24 18:40 81,920 --a------ C:\WINDOWS\system32\ils.dll
2007-04-24 18:40 73,728 --a------ C:\WINDOWS\system32\icwdial.dll
2007-04-24 18:40 73,472 --a------ C:\WINDOWS\system32\drivers\sr.sys
2007-04-24 18:40 69,632 --a------ C:\WINDOWS\system32\msconf.dll
2007-04-24 18:40 679,424 --a------ C:\WINDOWS\system32\inetcomm.dll
2007-04-24 18:40 67,584 --a------ C:\WINDOWS\system32\srclient.dll
2007-04-24 18:40 65,536 --a------ C:\WINDOWS\system32\icwphbk.dll
2007-04-24 18:40 50,176 --a------ C:\WINDOWS\system32\inetres.dll
2007-04-24 18:40 5,632 --a------ C:\WINDOWS\system32\write.exe
2007-04-24 18:40 45,568 --a------ C:\WINDOWS\system32\safrslv.dll
2007-04-24 18:40 44,544 --a------ C:\WINDOWS\system32\hticons.dll
2007-04-24 18:40 43,520 --a------ C:\WINDOWS\system32\safrcdlg.dll
2007-04-24 18:40 43,520 --a------ C:\WINDOWS\system32\racpldlg.dll
2007-04-24 18:40 34,560 --a------ C:\WINDOWS\system32\mnmdd.dll
2007-04-24 18:40 32,768 --a------ C:\WINDOWS\system32\mnmsrvc.exe
2007-04-24 18:40 32,768 --a------ C:\WINDOWS\system32\isrdbg32.dll
2007-04-24 18:40 29,696 --a------ C:\WINDOWS\system32\safrdm.dll
2007-04-24 18:40 28,672 --a------ C:\WINDOWS\system32\nmmkcert.dll
2007-04-24 18:40 278,528 --a------ C:\WINDOWS\system32\mstask.dll
2007-04-24 18:40 278,528 --a------ C:\WINDOWS\system32\inetcfg.dll
2007-04-24 18:40 252,928 --a------ C:\WINDOWS\system32\msoeacct.dll
2007-04-24 18:40 241,152 --a------ C:\WINDOWS\system32\srrstr.dll
2007-04-24 18:40 23,040 --a------ C:\WINDOWS\system32\fltmc.exe
2007-04-24 18:40 21,748 --a------ C:\WINDOWS\system32\emptyregdb.dat
2007-04-24 18:40 192,000 --a------ C:\WINDOWS\system32\schedsvc.dll
2007-04-24 18:40 170,496 --a------ C:\WINDOWS\system32\srsvc.dll
2007-04-24 18:40 16,896 --a------ C:\WINDOWS\system32\fltlib.dll
2007-04-24 18:40 139,264 --a------ C:\WINDOWS\system32\sndvol32.exe
2007-04-24 18:40 128,896 --a------ C:\WINDOWS\system32\drivers\fltmgr.sys
2007-04-24 18:40 12,288 --a------ C:\WINDOWS\system32\mstinit.exe
2007-04-24 18:40 105,984 --a------ C:\WINDOWS\system32\msoert2.dll
2007-04-24 18:40 <DIR> d-------- C:\WINDOWS\system32\Restore
2007-04-24 18:40 <DIR> d-------- C:\WINDOWS\Registration
2007-04-24 18:40 <DIR> d-------- C:\Program Files\MSN Gaming Zone
2007-04-24 18:40 <DIR> d-------- C:\Program Files\Movie Maker
2007-04-24 18:40 <DIR> d-------- C:\Program Files\Messenger
2007-04-24 18:39 97,792 --a------ C:\WINDOWS\system32\comrepl.dll
2007-04-24 18:39 956,416 --a------ C:\WINDOWS\system32\msdtctm.dll
2007-04-24 18:39 94,208 --a------ C:\WINDOWS\system32\tscfgwmi.dll
2007-04-24 18:39 91,136 --a------ C:\WINDOWS\system32\mtxoci.dll
2007-04-24 18:39 9,728 --a------ C:\WINDOWS\system32\reset.exe
2007-04-24 18:39 87,176 --a------ C:\WINDOWS\system32\rdpwsx.dll
2007-04-24 18:39 85,504 --a------ C:\WINDOWS\system32\catsrvps.dll
2007-04-24 18:39 80,896 --a------ C:\WINDOWS\system32\charmap.exe
2007-04-24 18:39 73,216 --a------ C:\WINDOWS\system32\avwav.dll
2007-04-24 18:39 67,072 --a------ C:\WINDOWS\system32\rdshost.exe
2007-04-24 18:39 662,528 --a------ C:\WINDOWS\system32\getuname.dll
2007-04-24 18:39 655,360 --a------ C:\WINDOWS\system32\mstscax.dll
2007-04-24 18:39 625,152 --a------ C:\WINDOWS\system32\catsrvut.dll
2007-04-24 18:39 62,464 --a------ C:\WINDOWS\system32\rdpclip.exe
2007-04-24 18:39 61,440 --a------ C:\WINDOWS\system32\remotepg.dll
2007-04-24 18:39 60,416 --a------ C:\WINDOWS\system32\colbact.dll
2007-04-24 18:39 6,144 --a------ C:\WINDOWS\system32\msdtc.exe
2007-04-24 18:39 58,880 --a------ C:\WINDOWS\system32\msdtclog.dll
2007-04-24 18:39 58,880 --a------ C:\WINDOWS\system32\licwmi.dll
2007-04-24 18:39 57,344 --a------ C:\WINDOWS\system32\sol.exe
2007-04-24 18:39 56,320 --a------ C:\WINDOWS\system32\servdeps.dll
2007-04-24 18:39 55,808 --a------ C:\WINDOWS\system32\freecell.exe
2007-04-24 18:39 540,160 --a------ C:\WINDOWS\system32\comuid.dll
2007-04-24 18:39 54,272 --a------ C:\WINDOWS\system32\stclient.dll
2007-04-24 18:39 539,136 --a------ C:\WINDOWS\system32\spider.exe
2007-04-24 18:39 5,120 --a------ C:\WINDOWS\system32\dcomcnfg.exe
2007-04-24 18:39 498,688 --a------ C:\WINDOWS\system32\clbcatq.dll
2007-04-24 18:39 44,544 --a------ C:\WINDOWS\system32\tscupgrd.exe
2007-04-24 18:39 426,496 --a------ C:\WINDOWS\system32\msdtcprx.dll
2007-04-24 18:39 412,160 --a------ C:\WINDOWS\system32\mstsc.exe
2007-04-24 18:39 40,840 --a------ C:\WINDOWS\system32\drivers\termdd.sys
2007-04-24 18:39 4,608 --a------ C:\WINDOWS\system32\rdpcfgex.dll
2007-04-24 18:39 4,096 --a------ C:\WINDOWS\system32\mtxex.dll
2007-04-24 18:39 39,424 --a------ C:\WINDOWS\system32\cfgbkend.dll
2007-04-24 18:39 352,768 --a------ C:\WINDOWS\system32\hypertrm.dll
2007-04-24 18:39 35,840 --a------ C:\WINDOWS\system32\winchat.exe
2007-04-24 18:39 345,600 --a------ C:\WINDOWS\system32\mspaint.exe
2007-04-24 18:39 33,792 --a------ C:\WINDOWS\system32\regini.exe
2007-04-24 18:39 297,472 --a------ C:\WINDOWS\system32\termsrv.dll
2007-04-24 18:39 25,600 --a------ C:\WINDOWS\system32\comaddin.dll
2007-04-24 18:39 25,088 --a------ C:\WINDOWS\system32\mtxlegih.dll
2007-04-24 18:39 233,472 --a------ C:\WINDOWS\system32\avtapi.dll
2007-04-24 18:39 23,040 --a------ C:\WINDOWS\system32\qwinsta.exe
2007-04-24 18:39 225,792 --a------ C:\WINDOWS\system32\catsrv.dll
2007-04-24 18:39 22,016 --a------ C:\WINDOWS\system32\msg.exe
2007-04-24 18:39 21,896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys
2007-04-24 18:39 20,480 --a------ C:\WINDOWS\system32\qprocess.exe
2007-04-24 18:39 20,480 --a------ C:\WINDOWS\system32\mtxdm.dll
2007-04-24 18:39 196,864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys
2007-04-24 18:39 19,968 --a------ C:\WINDOWS\system32\rdpsnd.dll
2007-04-24 18:39 188,928 --a------ C:\WINDOWS\system32\cmprops.dll
2007-04-24 18:39 187,392 --a------ C:\WINDOWS\system32\accwiz.exe
2007-04-24 18:39 17,920 --a------ C:\WINDOWS\system32\tsshutdn.exe
2007-04-24 18:39 17,920 --a------ C:\WINDOWS\system32\mmfutil.dll
2007-04-24 18:39 17,408 --a------ C:\WINDOWS\system32\qappsrv.exe
2007-04-24 18:39 161,280 --a------ C:\WINDOWS\system32\msdtcuiu.dll
2007-04-24 18:39 16,384 --a------ C:\WINDOWS\system32\tskill.exe
2007-04-24 18:39 16,384 --a------ C:\WINDOWS\system32\rwinsta.exe
2007-04-24 18:39 16,384 --a------ C:\WINDOWS\system32\avmeter.dll
2007-04-24 18:39 15,872 --a------ C:\WINDOWS\system32\cdmodem.dll
2007-04-24 18:39 15,360 --a------ C:\WINDOWS\system32\tsdiscon.exe
2007-04-24 18:39 15,360 --a------ C:\WINDOWS\system32\tscon.exe
2007-04-24 18:39 15,360 --a------ C:\WINDOWS\system32\shadow.exe
2007-04-24 18:39 15,360 --a------ C:\WINDOWS\system32\logoff.exe
2007-04-24 18:39 147,968 --a------ C:\WINDOWS\system32\rdchost.dll
2007-04-24 18:39 147,456 --a------ C:\WINDOWS\system32\comsnap.dll
2007-04-24 18:39 142,336 --a------ C:\WINDOWS\system32\sessmgr.exe
2007-04-24 18:39 139,528 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys
2007-04-24 18:39 132,608 --a------ C:\WINDOWS\system32\sndrec32.exe
2007-04-24 18:39 13,824 --a------ C:\WINDOWS\system32\rdsaddin.exe
2007-04-24 18:39 128,000 --a------ C:\WINDOWS\system32\mshearts.exe
2007-04-24 18:39 124,416 --a------ C:\WINDOWS\system32\mplay32.exe
2007-04-24 18:39 12,040 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys
2007-04-24 18:39 119,808 --a------ C:\WINDOWS\system32\winmine.exe
2007-04-24 18:39 114,688 --a------ C:\WINDOWS\system32\calc.exe
2007-04-24 18:39 110,080 --a------ C:\WINDOWS\system32\clbcatex.dll
2007-04-24 18:39 11,776 --a------ C:\WINDOWS\system32\xolehlp.dll
2007-04-24 18:39 11,264 --a------ C:\WINDOWS\system32\icaapi.dll
2007-04-24 18:39 104,448 --a------ C:\WINDOWS\system32\clipbrd.exe
2007-04-24 18:39 1,267,200 --a------ C:\WINDOWS\system32\comsvcs.dll
2007-04-24 18:39 1,161 --a------ C:\WINDOWS\system32\usrlogon.cmd
2007-04-24 18:39 <DIR> d-------- C:\WINDOWS\system32\MsDtc
2007-04-24 18:39 <DIR> d-------- C:\WINDOWS\system32\Com
2007-04-24 18:39 <DIR> d-------- C:\Program Files\Windows NT
2007-04-12 23:44 929,744 --a------ C:\WINDOWS\system32\nvucode.bin
2007-04-12 23:44 81,920 --a------ C:\WINDOWS\system32\nvwddi.dll
2007-04-12 23:44 81,920 --a------ C:\WINDOWS\system32\nvmctray.dll
2007-04-12 23:44 8,429,568 --a------ C:\WINDOWS\system32\nvcpl.dll
2007-04-12 23:44 745,472 --a------ C:\WINDOWS\system32\nvcplui.exe
2007-04-12 23:44 6,738,656 --a------ C:\WINDOWS\system32\drivers\nv4_mini.sys
2007-04-12 23:44 6,668,288 --a------ C:\WINDOWS\system32\nvoglnt.dll
2007-04-12 23:44 6,217,728 --a------ C:\WINDOWS\system32\nvdisps.dll
2007-04-12 23:44 5,439,488 --a------ C:\WINDOWS\system32\nvdispsr.dll
2007-04-12 23:44 5,433,216 --a------ C:\WINDOWS\system32\nv4_disp.dll
2007-04-12 23:44 466,944 --a------ C:\WINDOWS\system32\nvshell.dll
2007-04-12 23:44 458,752 --a------ C:\WINDOWS\system32\nvmccssr.dll
2007-04-12 23:44 45,056 --a------ C:\WINDOWS\system32\nvmccsrs.dll
2007-04-12 23:44 442,368 --a------ C:\WINDOWS\system32\nvappbar.exe
2007-04-12 23:44 425,984 --a------ C:\WINDOWS\system32\keystone.exe
2007-04-12 23:44 37,888 --a------ C:\WINDOWS\system32\nvcodins.dll
2007-04-12 23:44 37,888 --a------ C:\WINDOWS\system32\nvcod.dll
2007-04-12 23:44 344,064 --a------ C:\WINDOWS\system32\nvapi.dll
2007-04-12 23:44 335,872 --a------ C:\WINDOWS\system32\nvwrses.dll
2007-04-12 23:44 335,872 --a------ C:\WINDOWS\system32\nvwrsel.dll
2007-04-12 23:44 327,680 --a------ C:\WINDOWS\system32\nvwrsfr.dll
2007-04-12 23:44 327,680 --a------ C:\WINDOWS\system32\nvwrsesm.dll
2007-04-12 23:44 327,680 --a------ C:\WINDOWS\system32\nvrshe.dll
2007-04-12 23:44 327,680 --a------ C:\WINDOWS\system32\nvrsar.dll
2007-04-12 23:44 323,584 --a------ C:\WINDOWS\system32\nvwrspt.dll
2007-04-12 23:44 323,584 --a------ C:\WINDOWS\system32\nvwrsit.dll
2007-04-12 23:44 319,488 --a------ C:\WINDOWS\system32\nvwrsptb.dll
2007-04-12 23:44 319,488 --a------ C:\WINDOWS\system32\nvwrsnl.dll
2007-04-12 23:44 315,392 --a------ C:\WINDOWS\system32\nvwrsru.dll
2007-04-12 23:44 315,392 --a------ C:\WINDOWS\system32\nvwrshu.dll
2007-04-12 23:44 311,296 --a------ C:\WINDOWS\system32\nvwrsde.dll
2007-04-12 23:44 307,200 --a------ C:\WINDOWS\system32\nvexpbar.dll
2007-04-12 23:44 303,104 --a------ C:\WINDOWS\system32\nvwrstr.dll
2007-04-12 23:44 303,104 --a------ C:\WINDOWS\system32\nvwrssl.dll
2007-04-12 23:44 303,104 --a------ C:\WINDOWS\system32\nvwrsfi.dll
2007-04-12 23:44 3,645,440 --a------ C:\WINDOWS\system32\nvvitvsr.dll
2007-04-12 23:44 3,538,944 --a------ C:\WINDOWS\system32\nvvitvs.dll
2007-04-12 23:44 3,289,088 --a------ C:\WINDOWS\system32\nvgames.dll
2007-04-12 23:44 3,235,840 --a------ C:\WINDOWS\system32\nvgamesr.dll
2007-04-12 23:44 299,008 --a------ C:\WINDOWS\system32\nvwrssk.dll
2007-04-12 23:44 299,008 --a------ C:\WINDOWS\system32\nvwrsno.dll
2007-04-12 23:44 294,912 --a------ C:\WINDOWS\system32\nvwrssv.dll
2007-04-12 23:44 294,912 --a------ C:\WINDOWS\system32\nvwrspl.dll
2007-04-12 23:44 294,912 --a------ C:\WINDOWS\system32\nvwrsda.dll
2007-04-12 23:44 286,720 --a------ C:\WINDOWS\system32\nvwrseng.dll
2007-04-12 23:44 286,720 --a------ C:\WINDOWS\system32\nvwrscs.dll
2007-04-12 23:44 286,720 --a------ C:\WINDOWS\system32\nvnt4cpl.dll
2007-04-12 23:44 282,624 --a------ C:\WINDOWS\system32\nvwrsar.dll
2007-04-12 23:44 282,624 --a------ C:\WINDOWS\system32\nvrsfr.dll
2007-04-12 23:44 282,624 --a------ C:\WINDOWS\system32\nvrses.dll
2007-04-12 23:44 282,624 --a------ C:\WINDOWS\system32\nvrsel.dll
2007-04-12 23:44 278,528 --a------ C:\WINDOWS\system32\nvwrshe.dll
2007-04-12 23:44 278,528 --a------ C:\WINDOWS\system32\nvrsit.dll
2007-04-12 23:44 274,432 --a------ C:\WINDOWS\system32\nvrsnl.dll
2007-04-12 23:44 274,432 --a------ C:\WINDOWS\system32\nvrsesm.dll
2007-04-12 23:44 274,432 --a------ C:\WINDOWS\system32\nvrsde.dll
2007-04-12 23:44 270,336 --a------ C:\WINDOWS\system32\nvrspt.dll
2007-04-12 23:44 266,240 --a------ C:\WINDOWS\system32\nvrsru.dll
2007-04-12 23:44 266,240 --a------ C:\WINDOWS\system32\nvrsptb.dll
2007-04-12 23:44 266,240 --a------ C:\WINDOWS\system32\nvrsja.dll
2007-04-12 23:44 258,048 --a------ C:\WINDOWS\system32\nvrssk.dll
2007-04-12 23:44 258,048 --a------ C:\WINDOWS\system32\nvrsko.dll
2007-04-12 23:44 258,048 --a------ C:\WINDOWS\system32\nvrshu.dll
2007-04-12 23:44 253,952 --a------ C:\WINDOWS\system32\nvrstr.dll
2007-04-12 23:44 253,952 --a------ C:\WINDOWS\system32\nvrssv.dll
2007-04-12 23:44 253,952 --a------ C:\WINDOWS\system32\nvrssl.dll
2007-04-12 23:44 253,952 --a------ C:\WINDOWS\system32\nvrspl.dll
2007-04-12 23:44 253,952 --a------ C:\WINDOWS\system32\nvrsno.dll
2007-04-12 23:44 253,952 --a------ C:\WINDOWS\system32\nvrsda.dll
2007-04-12 23:44 245,760 --a------ C:\WINDOWS\system32\nvrsfi.dll
2007-04-12 23:44 245,760 --a------ C:\WINDOWS\system32\nvrseng.dll
2007-04-12 23:44 245,760 --a------ C:\WINDOWS\system32\nvrscs.dll
2007-04-12 23:44 229,376 --a------ C:\WINDOWS\system32\nvmccs.dll
2007-04-12 23:44 225,280 --a------ C:\WINDOWS\system32\nvrszhc.dll
2007-04-12 23:44 212,992 --a------ C:\WINDOWS\system32\nvwrsja.dll
2007-04-12 23:44 2,854,912 --a------ C:\WINDOWS\system32\nvmoblsr.dll
2007-04-12 23:44 2,387,968 --a------ C:\WINDOWS\system32\nvwssr.dll
2007-04-12 23:44 2,273,280 --a------ C:\WINDOWS\system32\nvwss.dll
2007-04-12 23:44 196,608 --a------ C:\WINDOWS\system32\nvwrsko.dll
2007-04-12 23:44 188,416 --a------ C:\WINDOWS\system32\nvmccss.dll
2007-04-12 23:44 167,936 --a------ C:\WINDOWS\system32\nvwrszht.dll
2007-04-12 23:44 163,908 --a------ C:\WINDOWS\system32\nvsvc32.exe
2007-04-12 23:44 163,840 --a------ C:\WINDOWS\system32\nvwrszhc.dll
2007-04-12 23:44 143,360 --a------ C:\WINDOWS\system32\nvcolor.exe
2007-04-12 23:44 122,880 --a------ C:\WINDOWS\system32\nvrszht.dll
2007-04-12 23:44 1,703,936 --a------ C:\WINDOWS\system32\nvwdmcpl.dll
2007-04-12 23:44 1,626,112 --a------ C:\WINDOWS\system32\nwiz.exe
2007-04-12 23:44 1,474,560 --a------ C:\WINDOWS\system32\nview.dll
2007-04-12 23:44 1,339,392 --a------ C:\WINDOWS\system32\nvdspsch.exe
2007-04-12 23:44 1,101,824 --a------ C:\WINDOWS\system32\nvmobls.dll
2007-04-12 23:44 1,073,152 --a------ C:\WINDOWS\system32\nvcpluir.dll
2007-04-12 23:44 1,019,904 --a------ C:\WINDOWS\system32\nvwimg.dll

(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-04-26 20:03 75444 --a------ C:\WINDOWS\system32\perfc013.dat
2007-04-26 20:03 498224 --a------ C:\WINDOWS\system32\perfh013.dat
2007-04-24 20:32 62 --ahs---- C:\DOCUME~1\Jeffrey\APPLIC~1\desktop.ini
2007-03-17 15:45 293376 --a------ C:\WINDOWS\system32\winsrv.dll
2007-03-08 17:39 579072 --a------ C:\WINDOWS\system32\user32.dll
2007-03-08 17:39 40960 --a------ C:\WINDOWS\system32\mf3216.dll
2007-03-08 17:39 281600 --a------ C:\WINDOWS\system32\gdi32.dll
2007-03-08 17:37 1843712 --a------ C:\WINDOWS\system32\win32k.sys
2007-02-08 00:24 323624 --a------ C:\WINDOWS\system32\wiaaut.dll
2007-02-05 22:20 185344 --a------ C:\WINDOWS\system32\upnphost.dll

(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"ipTray.exe"="\"C:\\Program Files\\Intel\\IDU\\iptray.exe\""
"IntelAudioStudio"="\"C:\\Program Files\\Intel Audio Studio\\IntelAudioStudio.exe\" TRAY"
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"nwiz"="nwiz.exe /install"
"NvMediaCenter"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvMcTray.dll,NvTaskbarInit"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.6.0_01\\bin\\jusched.exe\""
"MediaFace Integration"="C:\\Program Files\\Fellowes\\MediaFACE 4.0\\SetHook.exe"
"Easy-PrintToolBox"="C:\\Program Files\\Canon\\Easy-PrintToolBox\\BJPSMAIN.EXE /logon"
"REGSHAVE"="C:\\Program Files\\REGSHAVE\\REGSHAVE.EXE /AUTORUN"
"SigmatelSysTrayApp"="sttray.exe"
"NeroFilterCheck"="C:\\Program Files\\Common Files\\Ahead\\Lib\\NeroCheck.exe"
"avgnt"="\"C:\\Program Files\\AntiVir PersonalEdition Classic\\avgnt.exe\" /min"
"LogitechCommunicationsManager"="\"C:\\Program Files\\Common Files\\LogiShrd\\LComMgr\\Communications_Helper.exe\""
"LogitechQuickCamRibbon"="\"C:\\Program Files\\Logitech\\QuickCam10\\QuickCam10.exe\" /hide"
"Windows Defender"="\"C:\\Program Files\\Windows Defender\\MSASCui.exe\" -hide"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="\"C:\\Program Files\\Common Files\\Ahead\\Lib\\NMBgMonitor.exe\""
"Steam"="\"E:\\spellen\\Steam\\Steam.exe\" -silent"

HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa
Authentication Packages REG_MULTI_SZ msv1_0\0\0
Security Packages REG_MULTI_SZ kerberos\0msv1_0\0schannel\0wdigest\0\0
Notification Packages REG_MULTI_SZ scecli\0\0

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AGEIA PhysX SysTray]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="TrayIcon"
"hkey"="HKLM"
"command"="C:\\Program Files\\AGEIA Technologies\\TrayIcon.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="daemon"
"hkey"="HKCU"
"command"="\"C:\\Program Files\\DAEMON Tools\\daemon.exe\" -lang 1033"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Core"
"hkey"="HKCU"
"command"="\"C:\\Program Files\\Electronic Arts\\EA Link\\Core.exe\" -silent"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAAnotif]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Iaanotif"
"hkey"="HKLM"
"command"="C:\\Program Files\\Intel\\Intel Matrix Storage Manager\\Iaanotif.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="msmsgs"
"hkey"="HKCU"
"command"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Steam"
"hkey"="HKCU"
"command"="\"E:\\spellen\\Steam\\Steam.exe\" -silent"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0
WudfServiceGroup REG_MULTI_SZ WUDFSvc\0\0

*newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\LEGACY_HTTPFILTER

Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\MP Scheduled Scan.job

********************************************************************

catchme 0.3.660 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-05-02 20:09:04
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0

********************************************************************

Completion time: 07-05-02 20:09:06
C:\ComboFix-quarantined-files.txt ... 07-05-02 20:09
C:\ComboFix2.txt ... 07-05-02 20:02

Desolator23 · 2 mei 2007

Logfile of HijackThis v1.99.1
Scan saved at 20:09:33, on 2/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Intel\IDU\awServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\Belpic PCSC Service.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\IDU\iptray.exe
C:\Program Files\Intel Audio Studio\IntelAudioStudio.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\LVComSX.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\PROGRA~1\Pinnacle\SHARED~1\Filter\server.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\svchost.exe
C:\ComboFix\15936.cfexe
C:\Program Files\Pinnacle\Pinnacle PCTV\Vision\Vision.exe
C:\PROGRA~1\Pinnacle\SHARED~1\Filter\VBI_SE~1.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
G:\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [ipTray.exe] "C:\Program Files\Intel\IDU\iptray.exe"
O4 - HKLM\..\Run: [IntelAudioStudio] "C:\Program Files\Intel Audio Studio\IntelAudioStudio.exe" TRAY
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [MediaFace Integration] C:\Program Files\Fellowes\MediaFACE 4.0\SetHook.exe
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [SigmatelSysTrayApp] sttray.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Steam] "E:\spellen\Steam\Steam.exe" -silent
O4 - Global Startup: Pinnacle Scheduler.lnk = ?
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Admin Works Agent X8 (AWService) - OSA Technologies Inc., An Avocent Company - C:\Program Files\Intel\IDU\awServ.exe
O23 - Service: BELPIC PCSC Service (BELGIUM_ID_CARD_SERVICE) - Zetes/CSC - C:\WINDOWS\system32\Belpic PCSC Service.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Office Source Engine (ose) - Unknown owner - C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE (file missing)

Desolator23 · 2 mei 2007

Dit is de foutmelding die ik krijg bij steam

http://www.mediahump.com/image/66854/

Jurgenv1 · 2 mei 2007

Probeer anders Steam eens te herinstalleren.

Desolator23 · 2 mei 2007

Jurgenv1 zei:
Probeer anders Steam eens te herinstalleren.

Heb ik al gedaan en dat helpt ook niet.

Vind je nergens meer iets dat verkeerd is met mijn logs. Zou niet graag een format willen doen.

Desolator23 · 2 mei 2007

Je zal het nooit geloven maar alles werkt terug. Had geprobeerd een ander programma die gelijkaardig is aan newsleecher te installeren maar dat crashte ook. Toen viel mijn frank, het ligt waarschijnlijk aan de internetinstellingen. Heb alles gereset op de fabrieksinstellingen en voila. Alles werkt terug zoals behoren. Dank je wel, JurgenV

Is voor de rest alles goed in mijn log files.

Dank je wel voor al je hulp. Er zouden meer mensen moeten zijn zoals jij.

Greetz

Jurgenv1 · 3 mei 2007

Ha, was alles maar zo snel opgelost.

Archief - MSN, Steam en newsleecher crashen telkens

Desolator23

Legacy Member

Jurgenv1

Legacy Member

Desolator23

Legacy Member

Jurgenv1

Legacy Member

Desolator23

Legacy Member

Desolator23

Legacy Member

Desolator23

Legacy Member

Desolator23

Legacy Member

Jurgenv1

Legacy Member

Desolator23

Legacy Member

Desolator23

Legacy Member

Jurgenv1

Legacy Member