Archief - msspa.exe error bij opstarten

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:17:20, on 3/10/2007
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\AGEIA Technologies\TrayIcon.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Telemeter 3.0\Telemeter3.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Logitech\Profiler\LWEMon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Last.fm\LastFMHelper.exe
C:\Program Files\Xfire\xfire.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/webhp?hl=nl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [AGEIA PhysX SysTray] C:\Program Files\AGEIA Technologies\TrayIcon.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Telemeter 3.0] "C:\Program Files\Telemeter 3.0\telemeter3.exe"
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AAWTray] C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Program Files\Logitech\Profiler\lwemon.exe" /noui
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\xfire.exe
O4 - Global Startup: Last.fm Helper.lnk = C:\Program Files\Last.fm\LastFMHelper.exe
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {5F5F9FB8-878E-4455-95E0-F64B2314288A} (ijjiPlugin2 Class) - http://gamedownload.ijjimax.com/gamedownload/dist/hgstart/HGPlugin11USA.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab2.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/webplayer/stage6/windows/AutoDLDivXWebPlayerInstaller.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: perfmons Service (perfmons) - Unknown owner - C:\Windows\system32\perfs.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 7801 bytes

Klik om te vergroten...

ComboFix 07-10-03.7 - Brecht 2007-10-03 21:22:12.1 - NTFSx86
Microsoft© Windows VistaT Home Premium 6.0.6000.0.1252.1.1043.18.1286 [GMT 2:00]
Gestart vanuit: C:\Users\Brecht\Desktop\ComboFix.exe
* Nieuw herstelpunt werd aangemaakt
.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Windows\2.exe

.
(((((((((((((((((((( Bestanden Gemaakt van 2007-09-03 to 2007-10-03 ))))))))))))))))))))))))))))))
.

2007-10-03 21:21 51,200 --a------ C:\Windows\NirCmd.exe
2007-10-03 20:34 <DIR> d-------- C:\Users\Brecht\AppData\Roaming\SUPERAntiSpyware.com
2007-10-03 20:34 <DIR> d-------- C:\Users\All Users\SUPERAntiSpyware.com
2007-10-03 20:34 <DIR> d-------- C:\ProgramData\SUPERAntiSpyware.com
2007-10-03 20:34 <DIR> d-------- C:\Program Files\SUPERAntiSpyware
2007-10-03 20:31 <DIR> d-------- C:\Program Files\Trend Micro
2007-10-03 18:50 1,156 --a------ C:\Windows\mozver.dat
2007-10-03 18:44 0 --a------ C:\Windows\nsreg.dat
2007-09-27 23:24 <DIR> d-------- C:\Users\Brecht\AppData\Roaming\NHN Corporation
2007-09-27 20:21 621,056 --a------ C:\Windows\System32\drivers\dxgkrnl.sys
2007-09-27 20:21 36,864 --a------ C:\Windows\System32\cdd.dll
2007-09-27 17:50 <DIR> d-------- C:\Program Files\Common Files\Steam
2007-09-26 18:04 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-09-25 17:20 <DIR> d-------- C:\temp
2007-09-23 14:52 <DIR> d-------- C:\Users\All Users\Spybot - Search & Destroy
2007-09-23 14:52 <DIR> d-------- C:\ProgramData\Spybot - Search & Destroy
2007-09-23 14:38 <DIR> d-------- C:\Windows\pss
2007-09-23 11:58 <DIR> d-------- C:\Users\Brecht\AppData\Roaming\InstallShield
2007-09-21 22:13 <DIR> d-------- C:\Users\All Users\Age of Empires 3
2007-09-21 22:13 <DIR> d-------- C:\ProgramData\Age of Empires 3
2007-09-19 23:06 4,682 --a------ C:\Windows\System32\npptNT2.sys
2007-09-19 22:47 692,224 --a------ C:\Windows\System32\ijjiSetup.exe
2007-09-19 22:47 58,776 --a------ C:\Windows\System32\ijjiPlugin2.dll
2007-09-19 22:47 <DIR> d-------- C:\Program Files\NHN USA
2007-09-16 20:25 356,352 --a------ C:\Windows\eSellerateEngine.dll
2007-09-16 20:24 258,352 --a------ C:\Windows\System32\Unicows.dll
2007-09-16 00:35 <DIR> d-------- C:\Users\Brecht\AppData\Roaming\Nero
2007-09-16 00:26 <DIR> d-------- C:\Users\All Users\Nero
2007-09-16 00:26 <DIR> d-------- C:\ProgramData\Nero
2007-09-16 00:26 <DIR> d-------- C:\Program Files\Nero
2007-09-16 00:26 <DIR> d-------- C:\Program Files\Common Files\Nero
2007-09-13 21:48 <DIR> d-------- C:\Users\All Users\Last.fm
2007-09-13 21:48 <DIR> d-------- C:\ProgramData\Last.fm
2007-09-11 21:09 <DIR> d-------- C:\Users\All Users\NVIDIA
2007-09-11 21:09 <DIR> d-------- C:\ProgramData\NVIDIA
2007-09-11 21:04 1,073,152 --a------ C:\Windows\System32\nvcpluir.dll
2007-09-08 22:43 <DIR> d-------- C:\Program Files\DVD Profiler
2007-09-08 21:41 <DIR> d-------- C:\Users\Brecht\AppData\Roaming\DVD Profiler
2007-09-08 02:23 <DIR> d-------- C:\ijji
2007-09-08 02:22 <DIR> d--h----- C:\Users\Brecht\AppData\Roaming\ijjigame
2007-09-05 19:33 <DIR> d-------- C:\Program Files\rFactor

.
((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-10-03 20:23 --------- d--h----- C:\Program Files\InstallShield Installation Information
2007-10-03 14:43 --------- d-------- C:\Users\Brecht\AppData\Roaming\LimeWire
2007-10-03 12:36 --------- d-------- C:\ProgramData\Xfire
2007-09-30 13:46 --------- d-------- C:\Users\Brecht\AppData\Roaming\Xfire
2007-09-26 20:52 --------- d-a------ C:\ProgramData\TEMP
2007-09-26 18:06 --------- d-------- C:\Program Files\AGEIA Technologies
2007-09-25 21:27 --------- d-------- C:\Program Files\Windows Live Safety Center
2007-09-21 22:01 --------- d-------- C:\Program Files\Microsoft Games
2007-09-20 18:15 --------- d-------- C:\Program Files\Last.fm
2007-09-19 23:58 --------- d-------- C:\ProgramData\Microsoft Help
2007-09-19 13:10 --------- d-------- C:\Program Files\Xfire
2007-09-12 17:15 --------- d-------- C:\Program Files\Windows Mail
2007-09-08 22:41 10940723 --a------ C:\Program Files\backup.dpb
2007-09-08 11:49 --------- d-------- C:\Program Files\Common Files\Ahead
2007-09-03 18:00 --------- d-------- C:\Program Files\WinAVIVideoConverter
2007-09-03 17:12 --------- d-------- C:\Users\Brecht\AppData\Roaming\Google
2007-09-03 17:11 --------- d-------- C:\Program Files\Google
2007-09-02 19:01 --------- d-------- C:\ProgramData\Symantec
2007-09-01 18:36 --------- d-------- C:\ProgramData\TrackMania United
2007-08-30 16:51 174 --ahs---- C:\Program Files\desktop.ini
2007-08-30 09:54 88576 --a------ C:\Windows\System32\avifil32.dll
2007-08-30 09:54 82944 --a------ C:\Windows\System32\mciavi32.dll
2007-08-30 09:54 8138240 --a------ C:\Windows\System32\ssBranded.scr
2007-08-30 09:54 712192 --a------ C:\Windows\System32\WindowsCodecs.dll
2007-08-30 09:54 704000 --a------ C:\Windows\System32\PhotoScreensaver.scr
2007-08-30 09:54 69632 --a------ C:\Windows\System32\sendmail.dll
2007-08-30 09:54 65024 --a------ C:\Windows\System32\avicap32.dll
2007-08-30 09:54 61440 --a------ C:\Windows\System32\ntprint.exe
2007-08-30 09:54 3504824 --a------ C:\Windows\System32\ntkrnlpa.exe
2007-08-30 09:54 3470008 --a------ C:\Windows\System32\ntoskrnl.exe
2007-08-30 09:54 31232 --a------ C:\Windows\System32\msvidc32.dll
2007-08-30 09:54 269824 --a------ C:\Windows\System32\schannel.dll
2007-08-30 09:54 220160 --a------ C:\Windows\System32\ntprint.dll
2007-08-30 09:54 1984512 --a------ C:\Windows\System32\authui.dll
2007-08-30 09:54 12800 --a------ C:\Windows\System32\msrle32.dll
2007-08-30 09:54 123904 --a------ C:\Windows\System32\msvfw32.dll
2007-08-30 09:54 120320 --a------ C:\Windows\System32\dhcpcsvc6.dll
2007-08-30 09:54 10240 --a------ C:\Windows\System32\dhcpcmonitor.dll
2007-08-30 00:46 271360 --a------ C:\Windows\system32\drivers\atksgt.sys
2007-08-30 00:46 18048 --a------ C:\Windows\system32\drivers\lirsgt.sys
2007-08-30 00:19 --------- d-------- C:\Program Files\DVDlabPro2
2007-08-29 21:36 --------- d-------- C:\Program Files\Windows Calendar
2007-08-29 21:35 8192 --a------ C:\Windows\System32\riched32.dll
2007-08-29 21:35 77824 --a------ C:\Windows\System32\rascfg.dll
2007-08-29 21:35 70144 --a------ C:\Windows\system32\drivers\pacer.sys
2007-08-29 21:35 694784 --a------ C:\Windows\System32\localspl.dll
2007-08-29 21:35 61952 --a------ C:\Windows\system32\drivers\wanarp.sys
2007-08-29 21:35 52736 --a------ C:\Windows\System32\rasdiag.dll
2007-08-29 21:35 48640 --a------ C:\Windows\system32\drivers\ndproxy.sys
2007-08-29 21:35 384000 --a------ C:\Windows\System32\netcfgx.dll
2007-08-29 21:35 33280 --a------ C:\Windows\System32\traffic.dll
2007-08-29 21:35 32768 --a------ C:\Windows\System32\rasmxs.dll
2007-08-29 21:35 286208 --a------ C:\Windows\System32\ipnathlp.dll
2007-08-29 21:35 22016 --a------ C:\Windows\System32\rasser.dll
2007-08-29 21:35 20480 --a------ C:\Windows\system32\drivers\ndistapi.sys
2007-08-29 21:35 15360 --a------ C:\Windows\System32\pacerprf.dll
2007-08-29 21:35 13824 --a------ C:\Windows\System32\wshqos.dll
2007-08-29 21:35 13824 --a------ C:\Windows\System32\icsunattend.exe
2007-08-29 21:35 134656 --a------ C:\Windows\System32\dps.dll
2007-08-29 21:33 750080 --a------ C:\Windows\System32\qmgr.dll
2007-08-27 21:15 --------- d-------- C:\Program Files\SystemRequirementsLab
2007-08-27 21:00 --------- d-------- C:\Users\Brecht\AppData\Roaming\Joost
2007-08-27 16:34 3012 --a------ C:\drmHeader.bin
2007-08-25 00:24 --------- d-------- C:\Program Files\America's Army
2007-08-24 17:18 53080 --a------ C:\Windows\System32\wuauclt.exe
2007-08-24 17:18 43352 --a------ C:\Windows\System32\wups2.dll
2007-08-24 17:18 1712984 --a------ C:\Windows\System32\wuaueng.dll
2007-08-24 17:18 1524224 --a------ C:\Windows\System32\wucltux.dll
2007-08-24 17:17 80896 --a------ C:\Windows\System32\wudriver.dll
2007-08-24 17:17 549720 --a------ C:\Windows\System32\wuapi.dll
2007-08-24 17:17 33624 --a------ C:\Windows\System32\wups.dll
2007-08-24 17:16 31232 --a------ C:\Windows\System32\wuapp.exe
2007-08-24 17:16 163000 --a------ C:\Windows\System32\wuwebv.dll
2007-08-24 01:33 --------- d-------- C:\Program Files\Microsoft Works
2007-08-20 00:01 --------- d-------- C:\Program Files\netbeans-5.5.1
2007-08-19 23:57 --------- d-------- C:\Program Files\Common Files\InstallShield
2007-08-16 01:27 8147968 --a------ C:\Windows\System32\wmploc.DLL
2007-08-16 01:27 7680 --a------ C:\Windows\System32\spwmp.dll
2007-08-16 01:27 4096 --a------ C:\Windows\System32\dxmasf.dll
2007-08-16 01:27 1191936 --a------ C:\Windows\System32\msxml3.dll
2007-08-16 01:26 1335296 --a------ C:\Windows\System32\msxml6.dll
2007-08-16 01:24 56320 --a------ C:\Windows\System32\iesetup.dll
2007-08-16 01:24 52736 --a------ C:\Windows\AppPatch\iebrshim.dll
2007-08-16 01:24 26624 --a------ C:\Windows\System32\ieUnatt.exe
2007-08-14 18:36 --------- d-------- C:\Program Files\Telemeter 3.0
2007-08-09 13:49 --------- d-------- C:\Program Files\NVIDIA Corporation
2007-08-07 22:49 --------- d-------- C:\Program Files\Razer
2007-08-06 16:42 --------- d-------- C:\Program Files\LimeWire
2007-08-06 16:15 43602 --a------ C:\Windows\System32\xvid-uninstall.exe
2007-08-06 16:15 --------- d-------- C:\Program Files\Gabest
2007-08-06 16:15 --------- d-------- C:\Program Files\AviSynth 2.5
2007-08-06 16:15 --------- d-------- C:\Program Files\AutoGK
2007-08-06 16:14 --------- d-------- C:\Program Files\MSN Messenger
2007-08-05 18:39 --------- d-------- C:\Program Files\Tools
2007-08-04 10:40 972072 --a------ C:\Windows\UNRecode.exe
2007-08-04 10:10 95600 --a------ C:\Windows\System32\NeroCo.dll
2007-08-04 01:05 --------- d-------- C:\ProgramData\Messenger Plus!
2007-08-04 01:03 --------- d-------- C:\Program Files\Windows Live
2007-08-04 01:03 --------- d-------- C:\Program Files\Messenger Plus! Live
2007-08-03 12:52 972072 --a------ C:\Windows\UNNeroMediaHome.exe
.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2007-07-13 20:08]
"AGEIA PhysX SysTray"="C:\Program Files\AGEIA Technologies\TrayIcon.exe" [2006-03-20 21:43]
"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 00:47]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2004-06-16 06:03]
"Telemeter 3.0"="C:\Program Files\Telemeter 3.0\telemeter3.exe" [2007-04-16 00:38]
"NvSvc"="C:\Windows\system32\nvsvc.dll" [2007-07-06 20:15]
"NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-07-06 20:15]
"NvMediaCenter"="C:\Windows\system32\NvMcTray.dll" [2007-07-06 20:15]
"AAWTray"="C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe" []

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2006-11-02 14:35]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:54]
"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 14:35]
"DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2007-04-04 00:29]
"ISUSPM Startup"="C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe" [2004-06-16 06:03]
"Start WingMan Profiler"="C:\Program Files\Logitech\Profiler\lwemon.exe" [2006-07-05 13:17]
"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-16 12:36]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 14:36]
"SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2007-06-21 14:06]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Last.fm Helper.lnk - C:\Program Files\Last.fm\LastFMHelper.exe [2007-07-29 13:52:06]

C:\Users\Brecht\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Xfire.lnk - C:\Program Files\Xfire\xfire.exe [2007-09-13 00:25:18]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Last.fm Helper.lnk - C:\Program Files\Last.fm\LastFMHelper.exe [2007-07-29 13:52:06]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"=2 (0x2)
"EnableLUA"=0 (0x0)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 13:55 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=C:\Windows\pss\Adobe Reader Speed Launch.lnk.CommonStartup
backupExtension=.CommonStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Habu]
C:\Program Files\Razer\Habu\razerhid.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
"C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PKR Pal]
"C:\Games\PKR\pkrpal.exe" -osboot

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
"C:\Program Files\QuickTime\qttask.exe" -atboottime

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
"C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3;C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
R2 perfmons;perfmons Service;C:\Windows\system32\perfs.exe
R3 HabuFltr;Habu Mouse;C:\Windows\system32\drivers\habu.sys
R3 nvlddmkm;nvlddmkm;C:\Windows\system32\DRIVERS\nvlddmkm.sys
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver;C:\Windows\system32\drivers\WmBEnum.sys
R3 WmFilter;Logitech Gaming HID Filter Driver;C:\Windows\system32\drivers\WmFilter.sys
R3 WmHidLo;Logitech Gaming USB Filter Driver;C:\Windows\system32\drivers\WmHidLo.sys
R3 WmVirHid;Logitech Virtual Hid Device Driver;C:\Windows\system32\drivers\WmVirHid.sys
R3 WmXlCore;Logitech WingMan Translation Layer Driver;C:\Windows\system32\drivers\WmXlCore.sys
S3 Steam Client Service;Steam Client Service;C:\Program Files\Common Files\Steam\SteamService.exe /RunAsService

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalSystemNetworkRestricted hidserv UxSms WdiSystemHost Netman trkwks AudioEndpointBuilder WUDFSvc irmon sysmain IPBusEnum dot3svc PcaSvc EMDMgmt TabletInputService wlansvc WPDBusEnum


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{193e2b0e-3189-11dc-b171-0019d12122ad}]
AutoRun\command- G:\Autorun.exe

*Newly Created Service* - CATCHME
.
**************************************************************************

catchme 0.3.1169 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-10-03 21:26:13
Windows 6.0.6000 NTFS

scannen van verborgen processen ...

scannen van verborgen autostart items ...

scannen van verborgen bestanden ...

Scan succesvol afgerond
verborgen bestanden: 0

**************************************************************************
.
Voltooingstijd: 2007-10-03 21:26:54
C:\ComboFix-quarantined-files.txt ... 2007-10-03 21:26
.
--- E O F ---

Klik om te vergroten...