Archief - Spyware

Het archief is een bevroren moment uit een vorige versie van dit forum, met andere regels en andere bazen. Deze posts weerspiegelen op geen enkele manier onze huidige ideeën, waarden of wereldbeelden en zijn op sommige plaatsen gecensureerd wegens ontoelaatbaar. Veel zijn in een andere tijdsgeest gemaakt, al dan niet ironisch - zoals in het ironische subforum Off-Topic - en zouden op dit moment niet meer gepost (mogen) worden. Toch bieden we dit archief nog graag aan als informatiedatabank en naslagwerk. Lees er hier meer over of start een gesprek met anderen.

th43ns

Legacy Member
Net format gedaan en het is al zover :-P eigen schuld natuurlijk maarja.

Logfile of HijackThis v1.99.1
Scan saved at 19:02:15, on 13-10-2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Common Files\{54E992D6-0724-1043-0728-06032906001f}\Update.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\Documents and Settings\Ben\Mijn documenten\hjt\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O3 - Toolbar: ToolBar888 - {C004DEC2-2623-438e-9CA2-C9043AB28508} - C:\Program Files\Common Files\{34E992D6-0724-1043-0728-06032906001f}\MyToolBar.dll
O3 - Toolbar: &VSToolBar - {821F87FF-8245-4972-9E28-732E92EC2F51} - C:\Program Files\VSToolbar\VSToolBar.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)

Jurgenv1

Legacy Member
1. Download dit bestand: - combofix.exe
2. Dubbelklik op combofix.exe en volg de instructies die je krijgt.
3. Wanneer het tooltje klaar is zal het een rapport maken voor je, post die log hier met een nieuw hijackthis logje.

Note:
Niet klikken terwijl combofix bezig is, dat zou het tooltje doen vastlopen!

th43ns

Legacy Member
HJT: (het combofix logje is superlang, moet ik het hier nog eens posten in 2 reply's?)

Logfile of HijackThis v1.99.1
Scan saved at 19:22:18, on 13-10-2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Ben\Mijn documenten\hjt\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O3 - Toolbar: ToolBar888 - {C004DEC2-2623-438e-9CA2-C9043AB28508} - C:\Program Files\Common Files\{34E992D6-0724-1043-0728-06032906001f}\MyToolBar.dll (file missing)
O3 - Toolbar: &VSToolBar - {821F87FF-8245-4972-9E28-732E92EC2F51} - C:\Program Files\VSToolbar\VSToolBar.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)

th43ns

Legacy Member
Krijg nog hele tijd meldingen van winantivirus.nl in internet explorer. Mozilla is clean.

Jurgenv1

Legacy Member
Jep, logje moet je posten, desnoods over meerdere reply's.

th43ns

Legacy Member
bij deze

Ben - 06-10-13 19:17:24,12 Service Pack 2
ComboFix 06.10.14 - Running from: "C:\Program Files\Mozilla Firefox"

(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\Program Files\Common Files\{34E992D6-0724-1043-0728-06032906001f}
C:\Program Files\Common Files\{54E992D6-0724-1043-0728-06032906001f}


((((((((((((((((((((((((((((((( Files Created from 2006-09-13 to 2006-10-13 ))))))))))))))))))))))))))))))))))


2006-10-13 18:55 9,600 --a------ C:\WINDOWS\system32\drivers\hidusb.sys
2006-10-13 18:55 12,288 --a------ C:\WINDOWS\system32\drivers\mouhid.sys
2006-10-13 18:40 1,331,200 --------- C:\WINDOWS\UNNMP.exe
2006-10-13 18:37 155,648 -ra------ C:\WINDOWS\system32\NeroCheck.exe
2006-10-13 18:36 24,064 -ra------ C:\WINDOWS\system32\msxml3a.dll
2006-10-13 18:36 1,331,200 --------- C:\WINDOWS\UNNeroVision.exe
2006-10-13 18:35 569,344 -ra------ C:\WINDOWS\system32\imagr5.dll
2006-10-13 18:35 544,768 -ra------ C:\WINDOWS\system32\imagx5.dll
2006-10-13 18:35 38,912 -ra------ C:\WINDOWS\system32\picn20.dll
2006-10-13 18:35 283,920 -ra------ C:\WINDOWS\system32\ImagXpr5.dll
2006-10-13 18:21 98,324 --a------ C:\WINDOWS\system32\axbeukno.dll
2006-10-13 18:21 403,308 ---hs---- C:\WINDOWS\system32\sstwa.bak1
2006-10-13 18:21 143,380 --a------ C:\WINDOWS\system32\misktvhf.exe
2006-10-13 18:20 684,084 ---hs---- C:\WINDOWS\system32\awtss.dll
2006-10-13 18:17 17,920 --a------ C:\WINDOWS\system32\mdimon.dll
2006-10-13 18:09 40,973 ---hs---- C:\WINDOWS\system32\wvutrqr.dll
2006-10-13 18:09 18,432 --a------ C:\WINDOWS\system32\winmxw32.dll
2006-10-13 17:27 6,400 --a------ C:\WINDOWS\system32\drivers\enum1394.sys
2006-10-13 17:27 57,856 --a------ C:\WINDOWS\system32\drivers\redbook.sys
2006-10-13 17:27 3,072 --a------ C:\WINDOWS\system32\drivers\audstub.sys
2006-10-13 17:26 9,344 --a------ C:\WINDOWS\system32\drivers\compbatt.sys
2006-10-13 17:26 14,080 --a------ C:\WINDOWS\system32\drivers\cmbatt.sys
2006-10-13 17:26 14,080 --a------ C:\WINDOWS\system32\drivers\battc.sys
2006-10-13 17:25 86,556 --a------ C:\WINDOWS\system32\dgsetup.dll
2006-10-13 17:25 8,704 --a------ C:\WINDOWS\system32\batt.dll
2006-10-13 17:25 8,192 -ra------ C:\WINDOWS\system32\kbdhept.dll
2006-10-13 17:25 76,288 --a------ C:\WINDOWS\system32\storprop.dll
2006-10-13 17:25 70,144 --a------ C:\WINDOWS\notepad.exe
2006-10-13 17:25 7,168 -ra------ C:\WINDOWS\system32\kbdcz.dll
2006-10-13 17:25 6,656 -ra------ C:\WINDOWS\system32\kbdycl.dll
2006-10-13 17:25 6,656 -ra------ C:\WINDOWS\system32\kbdsl1.dll
2006-10-13 17:25 6,656 -ra------ C:\WINDOWS\system32\kbdsl.dll
2006-10-13 17:25 6,656 -ra------ C:\WINDOWS\system32\kbdpl.dll
2006-10-13 17:25 6,656 -ra------ C:\WINDOWS\system32\kbdhu.dll
2006-10-13 17:25 6,656 -ra------ C:\WINDOWS\system32\kbdhela3.dll
2006-10-13 17:25 6,656 -ra------ C:\WINDOWS\system32\kbdcz2.dll
2006-10-13 17:25 6,656 -ra------ C:\WINDOWS\system32\kbdcz1.dll
2006-10-13 17:25 6,656 -ra------ C:\WINDOWS\system32\kbdcr.dll
2006-10-13 17:25 6,656 -ra------ C:\WINDOWS\system32\KBDAL.DLL
2006-10-13 17:25 6,144 -ra------ C:\WINDOWS\system32\kbdtuq.dll
2006-10-13 17:25 6,144 -ra------ C:\WINDOWS\system32\kbdtuf.dll
2006-10-13 17:25 6,144 -ra------ C:\WINDOWS\system32\kbdlv1.dll
2006-10-13 17:25 6,144 -ra------ C:\WINDOWS\system32\kbdlv.dll
2006-10-13 17:25 6,144 -ra------ C:\WINDOWS\system32\kbdhela2.dll
2006-10-13 17:25 6,144 -ra------ C:\WINDOWS\system32\kbdgkl.dll
2006-10-13 17:25 6,144 -ra------ C:\WINDOWS\system32\kbdest.dll
2006-10-13 17:25 5,632 -ra------ C:\WINDOWS\system32\kbdycc.dll
2006-10-13 17:25 5,632 -ra------ C:\WINDOWS\system32\kbduzb.dll
2006-10-13 17:25 5,632 -ra------ C:\WINDOWS\system32\kbdur.dll
2006-10-13 17:25 5,632 -ra------ C:\WINDOWS\system32\kbdtat.dll
2006-10-13 17:25 5,632 -ra------ C:\WINDOWS\system32\kbdru1.dll
2006-10-13 17:25 5,632 -ra------ C:\WINDOWS\system32\kbdru.dll
2006-10-13 17:25 5,632 -ra------ C:\WINDOWS\system32\kbdro.dll
2006-10-13 17:25 5,632 -ra------ C:\WINDOWS\system32\kbdpl1.dll
2006-10-13 17:25 5,632 -ra------ C:\WINDOWS\system32\kbdmon.dll
2006-10-13 17:25 5,632 -ra------ C:\WINDOWS\system32\kbdlt1.dll
2006-10-13 17:25 5,632 -ra------ C:\WINDOWS\system32\kbdlt.dll
2006-10-13 17:25 5,632 -ra------ C:\WINDOWS\system32\kbdkyr.dll
2006-10-13 17:25 5,632 -ra------ C:\WINDOWS\system32\kbdkaz.dll
2006-10-13 17:25 5,632 -ra------ C:\WINDOWS\system32\kbdhu1.dll
2006-10-13 17:25 5,632 -ra------ C:\WINDOWS\system32\kbdhe319.dll
2006-10-13 17:25 5,632 -ra------ C:\WINDOWS\system32\kbdhe220.dll
2006-10-13 17:25 5,632 -ra------ C:\WINDOWS\system32\kbdhe.dll
2006-10-13 17:25 5,632 -ra------ C:\WINDOWS\system32\kbdbu.dll
2006-10-13 17:25 5,632 -ra------ C:\WINDOWS\system32\kbdblr.dll
2006-10-13 17:25 5,632 -ra------ C:\WINDOWS\system32\kbdazel.dll
2006-10-13 17:25 5,632 -ra------ C:\WINDOWS\system32\kbdaze.dll
2006-10-13 17:25 24,661 --a------ C:\WINDOWS\system32\spxcoins.dll
2006-10-13 17:25 176,157 --a------ C:\WINDOWS\system32\dgrpsetu.dll
2006-10-13 17:25 15,872 --a------ C:\WINDOWS\TASKMAN.EXE
2006-10-13 17:25 13,312 --a------ C:\WINDOWS\system32\irclass.dll
2006-10-13 17:25 11,264 --a------ C:\WINDOWS\system32\drivers\irenum.sys
2006-10-13 17:25 103,936 --a------ C:\WINDOWS\system32\EqnClass.Dll
2006-10-13 17:22 90,112 --a------ C:\WINDOWS\system32\AVASTSS.scr
2006-10-13 17:22 87,424 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys
2006-10-13 17:22 85,952 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
2006-10-13 17:22 666,240 --a------ C:\WINDOWS\system32\aswBoot.exe
2006-10-13 17:22 499,712 --a------ C:\WINDOWS\system32\MSVCP71.dll
2006-10-13 17:22 36,176 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
2006-10-13 17:22 348,160 --a------ C:\WINDOWS\system32\MSVCR71.dll
2006-10-13 17:22 24,560 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
2006-10-13 17:22 16,352 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
2006-10-13 17:22 1,060,864 --a------ C:\WINDOWS\system32\MFC71.dll
2006-10-13 17:08 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2006-10-13 17:07 95,424 --------- C:\WINDOWS\system32\drivers\slnthal.sys
2006-10-13 17:07 9,728 --------- C:\WINDOWS\system32\proxycfg.exe
2006-10-13 17:07 896,512 --------- C:\WINDOWS\system32\wmspdmoe.dll
2006-10-13 17:07 88,064 --------- C:\WINDOWS\system32\p2pnetsh.dll
2006-10-13 17:07 870,784 --------- C:\WINDOWS\system32\ati3d1ag.dll
2006-10-13 17:07 86,016 --------- C:\WINDOWS\system32\p2pgasvc.dll
2006-10-13 17:07 86,016 --------- C:\WINDOWS\system32\mdmxsdk.dll
2006-10-13 17:07 81,920 --------- C:\WINDOWS\system32\ieencode.dll
2006-10-13 17:07 81,408 --------- C:\WINDOWS\system32\wscsvc.dll
2006-10-13 17:07 8,192 --------- C:\WINDOWS\system32\smbinst.exe
2006-10-13 17:07 8,192 --------- C:\WINDOWS\system32\bitsprx2.dll
2006-10-13 17:07 78,464 --------- C:\WINDOWS\system32\drivers\usbvideo.sys
2006-10-13 17:07 755,200 --------- C:\WINDOWS\system32\ir50_32.dll
2006-10-13 17:07 75,776 --------- C:\WINDOWS\system32\strmfilt.dll
2006-10-13 17:07 73,832 --------- C:\WINDOWS\system32\slcoinst.dll
2006-10-13 17:07 73,796 --------- C:\WINDOWS\system32\slserv.exe
2006-10-13 17:07 73,216 --------- C:\WINDOWS\system32\drivers\atintuxx.sys
2006-10-13 17:07 71,680 --------- C:\WINDOWS\system32\blastcln.exe
2006-10-13 17:07 7,680 --------- C:\WINDOWS\system32\kbdsmsno.dll
2006-10-13 17:07 7,680 --------- C:\WINDOWS\system32\kbdsmsfi.dll
2006-10-13 17:07 7,168 --------- C:\WINDOWS\system32\kbdukx.dll
2006-10-13 17:07 7,168 --------- C:\WINDOWS\system32\kbdno1.dll
2006-10-13 17:07 7,168 --------- C:\WINDOWS\system32\kbdfi1.dll
2006-10-13 17:07 7,168 --------- C:\WINDOWS\system32\bitsprx3.dll
2006-10-13 17:07 685,056 --------- C:\WINDOWS\system32\drivers\hsfcxts2.sys
2006-10-13 17:07 67,584 --------- C:\WINDOWS\system32\drivers\sdbus.sys
2006-10-13 17:07 63,663 --------- C:\WINDOWS\system32\drivers\ati1rvxx.sys
2006-10-13 17:07 63,488 --------- C:\WINDOWS\system32\drivers\atinxsxx.sys
2006-10-13 17:07 61,440 --------- C:\WINDOWS\system32\logman.exe
2006-10-13 17:07 60,416 --------- C:\WINDOWS\system32\fwcfg.dll
2006-10-13 17:07 6,656 --------- C:\WINDOWS\system32\kbdinmal.dll
2006-10-13 17:07 6,656 --------- C:\WINDOWS\system32\kbdinben.dll
2006-10-13 17:07 6,144 --------- C:\WINDOWS\system32\kbdmlt48.dll
2006-10-13 17:07 6,144 --------- C:\WINDOWS\system32\kbdmlt47.dll
2006-10-13 17:07 6,144 --------- C:\WINDOWS\system32\kbdinbe1.dll
2006-10-13 17:07 6,016 --------- C:\WINDOWS\system32\drivers\smbali.sys
2006-10-13 17:07 59,648 --------- C:\WINDOWS\system32\drivers\rfcomm.sys
2006-10-13 17:07 57,856 --------- C:\WINDOWS\system32\drivers\atinbtxx.sys
2006-10-13 17:07 56,623 --------- C:\WINDOWS\system32\drivers\ati1btxx.sys
2006-10-13 17:07 526,848 --------- C:\WINDOWS\system32\p2psvc.dll
2006-10-13 17:07 52,736 --------- C:\WINDOWS\system32\mspmsnsv.dll
2006-10-13 17:07 52,224 --------- C:\WINDOWS\system32\drivers\atinraxx.sys
2006-10-13 17:07 50,688 --------- C:\WINDOWS\system32\btpanui.dll
2006-10-13 17:07 50,176 --------- C:\WINDOWS\system32\xmlprovi.dll
2006-10-13 17:07 5,632 --------- C:\WINDOWS\system32\kbdmaori.dll
2006-10-13 17:07 49,152 --------- C:\WINDOWS\system32\powercfg.exe
2006-10-13 17:07 484,864 --------- C:\WINDOWS\system32\wmspdmod.dll
2006-10-13 17:07 48,640 --------- C:\WINDOWS\system32\pnrpnsp.dll
2006-10-13 17:07 466,200 --a------ C:\WINDOWS\system32\wuapi.dll
2006-10-13 17:07 46,464 --------- C:\WINDOWS\system32\drivers\gagp30kx.sys
2006-10-13 17:07 452,736 --------- C:\WINDOWS\system32\drivers\mtxparhm.sys
2006-10-13 17:07 44,928 --------- C:\WINDOWS\system32\drivers\agpcpq.sys
2006-10-13 17:07 44,672 --------- C:\WINDOWS\system32\drivers\uagp35.sys
2006-10-13 17:07 44,032 --------- C:\WINDOWS\system32\twext.dll
2006-10-13 17:07 437,248 --------- C:\WINDOWS\system32\xpob2res.dll
2006-10-13 17:07 43,008 --------- C:\WINDOWS\system32\drivers\amdagp.sys
2006-10-13 17:07 42,752 --------- C:\WINDOWS\system32\drivers\alim1541.sys
2006-10-13 17:07 42,368 --------- C:\WINDOWS\system32\drivers\agp440.sys
2006-10-13 17:07 42,240 --------- C:\WINDOWS\system32\drivers\viaagp.sys
2006-10-13 17:07 41,240 --a------ C:\WINDOWS\system32\wups.dll
2006-10-13 17:07 41,088 --------- C:\WINDOWS\system32\drivers\sisagp.sys
2006-10-13 17:07 404,990 --------- C:\WINDOWS\system32\drivers\slntamr.sys
2006-10-13 17:07 40,192 --------- C:\WINDOWS\system32\drivers\intelppm.sys
2006-10-13 17:07 4,274,816 --------- C:\WINDOWS\system32\nv4_disp.dll
2006-10-13 17:07 4,255 --------- C:\WINDOWS\system32\drivers\adv01nt5.dll
2006-10-13 17:07 397,056 --------- C:\WINDOWS\system32\s3gnb.dll
2006-10-13 17:07 384,512 --------- C:\WINDOWS\system32\mp4sdmod.dll
2006-10-13 17:07 38,016 --------- C:\WINDOWS\system32\drivers\bthmodem.sys
2006-10-13 17:07 377,984 --------- C:\WINDOWS\system32\ati2dvaa.dll
2006-10-13 17:07 36,463 --------- C:\WINDOWS\system32\drivers\ati1tuxx.sys
2006-10-13 17:07 35,456 --------- C:\WINDOWS\system32\drivers\bthprint.sys
2006-10-13 17:07 34,735 --------- C:\WINDOWS\system32\drivers\ati1xsxx.sys
2006-10-13 17:07 338,432 --------- C:\WINDOWS\system32\ir41_qcx.dll
2006-10-13 17:07 327,168 --------- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2006-10-13 17:07 32,866 --------- C:\WINDOWS\system32\slrundll.exe
2006-10-13 17:07 32,866 --------- C:\WINDOWS\slrundll.exe
2006-10-13 17:07 32,768 --------- C:\WINDOWS\system32\ativtmxx.dll
2006-10-13 17:07 32,285 --------- C:\WINDOWS\system32\hsfcisp2.dll
2006-10-13 17:07 312,320 --------- C:\WINDOWS\system32\p2pgraph.dll
2006-10-13 17:07 310,272 --------- C:\WINDOWS\system32\mp43dmod.dll
2006-10-13 17:07 31,744 --------- C:\WINDOWS\system32\drivers\atinxbxx.sys
2006-10-13 17:07 30,671 --------- C:\WINDOWS\system32\drivers\ati1raxx.sys
2006-10-13 17:07 30,208 --------- C:\WINDOWS\system32\bthserv.dll
2006-10-13 17:07 30,080 --------- C:\WINDOWS\system32\drivers\rndismpx.sys
2006-10-13 17:07 3,967 --------- C:\WINDOWS\system32\drivers\adv02nt5.dll
2006-10-13 17:07 3,901 --------- C:\WINDOWS\system32\drivers\siint5.dll
2006-10-13 17:07 3,775 --------- C:\WINDOWS\system32\drivers\adv11nt5.dll
2006-10-13 17:07 3,711 --------- C:\WINDOWS\system32\drivers\adv09nt5.dll
2006-10-13 17:07 3,647 --------- C:\WINDOWS\system32\drivers\adv07nt5.dll
2006-10-13 17:07 3,615 --------- C:\WINDOWS\system32\drivers\adv05nt5.dll
2006-10-13 17:07 3,135 --------- C:\WINDOWS\system32\drivers\adv08nt5.dll
2006-10-13 17:07 29,455 --------- C:\WINDOWS\system32\drivers\ati1xbxx.sys
2006-10-13 17:07 29,184 --------- C:\WINDOWS\system32\sdhcinst.dll
2006-10-13 17:07 29,056 --------- C:\WINDOWS\system32\drivers\ip6fw.sys
2006-10-13 17:07 286,792 --------- C:\WINDOWS\system32\slextspk.dll
2006-10-13 17:07 28,672 --------- C:\WINDOWS\system32\drivers\atinsnxx.sys
2006-10-13 17:07 274,816 --------- C:\WINDOWS\system32\drivers\bthport.sys
2006-10-13 17:07 263,040 --------- C:\WINDOWS\system32\drivers\http.sys
2006-10-13 17:07 26,367 --------- C:\WINDOWS\system32\drivers\ati1snxx.sys
2006-10-13 17:07 25,728 --------- C:\WINDOWS\system32\drivers\hidbth.sys
2006-10-13 17:07 25,471 --------- C:\WINDOWS\system32\drivers\watv10nt.sys
2006-10-13 17:07 25,471 --------- C:\WINDOWS\system32\drivers\atv04nt5.dll
2006-10-13 17:07 24,576 --------- C:\WINDOWS\system32\httpapi.dll
2006-10-13 17:07 233,472 --------- C:\WINDOWS\system32\wmpdxm.dll
2006-10-13 17:07 220,032 --------- C:\WINDOWS\system32\drivers\hsfbs2s2.sys
2006-10-13 17:07 22,528 --------- C:\WINDOWS\system32\fltmc.exe
2006-10-13 17:07 22,271 --------- C:\WINDOWS\system32\drivers\watv06nt.sys
2006-10-13 17:07 21,343 --------- C:\WINDOWS\system32\drivers\ati1ttxx.sys
2006-10-13 17:07 21,183 --------- C:\WINDOWS\system32\drivers\atv01nt5.dll
2006-10-13 17:07 200,192 --------- C:\WINDOWS\system32\ir50_qc.dll
2006-10-13 17:07 20,992 --------- C:\WINDOWS\system32\bthci.dll
2006-10-13 17:07 2,962,432 --------- C:\WINDOWS\system32\xpsp2res.dll
2006-10-13 17:07 2,113,536 --------- C:\WINDOWS\system32\dxdiagn.dll
2006-10-13 17:07 194,840 --a------ C:\WINDOWS\system32\wuaueng1.dll
2006-10-13 17:07 193,024 --------- C:\WINDOWS\system32\fsquirt.exe
2006-10-13 17:07 189,952 --------- C:\WINDOWS\system32\wmerror.dll
2006-10-13 17:07 188,508 --------- C:\WINDOWS\system32\slgen.dll
2006-10-13 17:07 183,808 --------- C:\WINDOWS\system32\ir50_qcx.dll
2006-10-13 17:07 180,360 --------- C:\WINDOWS\system32\drivers\ntmtlfax.sys
2006-10-13 17:07 18,944 --------- C:\WINDOWS\system32\drivers\bthusb.sys
2006-10-13 17:07 174,360 --a------ C:\WINDOWS\system32\wuauclt1.exe
2006-10-13 17:07 173,536 --a------ C:\WINDOWS\system32\wuweb.dll
2006-10-13 17:07 17,408 --------- C:\WINDOWS\system32\winshfhc.dll
2006-10-13 17:07 17,279 --------- C:\WINDOWS\system32\drivers\atv10nt5.dll
2006-10-13 17:07 17,024 --------- C:\WINDOWS\system32\drivers\bthenum.sys
2006-10-13 17:07 166,912 --------- C:\WINDOWS\system32\drivers\s3gnbm.sys
2006-10-13 17:07 16,896 --------- C:\WINDOWS\system32\fltlib.dll
2006-10-13 17:07 151,552 --------- C:\WINDOWS\system32\wmidx.dll
2006-10-13 17:07 15,872 --------- C:\WINDOWS\system32\w3ssl.dll
2006-10-13 17:07 15,488 --------- C:\WINDOWS\system32\drivers\mssmbios.sys
2006-10-13 17:07 15,423 --------- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
2006-10-13 17:07 15,104 --------- C:\WINDOWS\system32\drivers\hidir.sys
2006-10-13 17:07 14,336 --------- C:\WINDOWS\system32\drivers\atinpdxx.sys
2006-10-13 17:07 14,336 --------- C:\WINDOWS\system32\auditusr.exe
2006-10-13 17:07 14,143 --------- C:\WINDOWS\system32\drivers\atv06nt5.dll
2006-10-13 17:07 13,824 --------- C:\WINDOWS\system32\wscntfy.exe
2006-10-13 17:07 13,824 --------- C:\WINDOWS\system32\drivers\atinttxx.sys
2006-10-13 17:07 13,824 --------- C:\WINDOWS\system32\drivers\atinmdxx.sys
2006-10-13 17:07 13,824 --------- C:\WINDOWS\system32\cmsetacl.dll
2006-10-13 17:07 13,776 --------- C:\WINDOWS\system32\drivers\recagent.sys
2006-10-13 17:07 13,568 --------- C:\WINDOWS\system32\drivers\wacompen.sys
2006-10-13 17:07 13,240 --------- C:\WINDOWS\system32\drivers\slwdmsup.sys
2006-10-13 17:07 129,536 --------- C:\WINDOWS\system32\xmlprov.dll
2006-10-13 17:07 129,535 --------- C:\WINDOWS\system32\drivers\slnt7554.sys
2006-10-13 17:07 128,280 --a------ C:\WINDOWS\system32\wucltui.dll
2006-10-13 17:07 126,686 --------- C:\WINDOWS\system32\drivers\mtlmnt5.sys
2006-10-13 17:07 124,800 --------- C:\WINDOWS\system32\drivers\fltmgr.sys
2006-10-13 17:07 120,320 --------- C:\WINDOWS\system32\ir41_qc.dll
2006-10-13 17:07 12,672 --------- C:\WINDOWS\system32\drivers\usb8023x.sys
2006-10-13 17:07 12,672 --------- C:\WINDOWS\system32\drivers\mutohpen.sys
2006-10-13 17:07 12,047 --------- C:\WINDOWS\system32\drivers\ati1pdxx.sys
2006-10-13 17:07 118,784 --------- C:\WINDOWS\system32\msdadiag.dll
2006-10-13 17:07 116,224 --------- C:\WINDOWS\system32\p2p.dll
2006-10-13 17:07 114,688 --------- C:\WINDOWS\system32\wmpasf.dll
2006-10-13 17:07 11,935 --------- C:\WINDOWS\system32\drivers\wadv11nt.sys
2006-10-13 17:07 11,871 --------- C:\WINDOWS\system32\drivers\wadv09nt.sys
2006-10-13 17:07 11,868 --------- C:\WINDOWS\system32\drivers\mdmxsdk.sys
2006-10-13 17:07 11,807 --------- C:\WINDOWS\system32\drivers\wadv07nt.sys
2006-10-13 17:07 11,615 --------- C:\WINDOWS\system32\drivers\ati1mdxx.sys
2006-10-13 17:07 11,359 --------- C:\WINDOWS\system32\drivers\atv02nt5.dll
2006-10-13 17:07 11,325 --------- C:\WINDOWS\system32\drivers\vchnt5.dll
2006-10-13 17:07 11,295 --------- C:\WINDOWS\system32\drivers\wadv08nt.sys
2006-10-13 17:07 11,136 --------- C:\WINDOWS\system32\drivers\sffdisk.sys
2006-10-13 17:07 108,032 --------- C:\WINDOWS\system32\wshbth.dll
2006-10-13 17:07 104,960 --------- C:\WINDOWS\system32\drivers\atinrvxx.sys
2006-10-13 17:07 100,992 --------- C:\WINDOWS\system32\drivers\bthpan.sys
2006-10-13 17:07 10,240 --------- C:\WINDOWS\system32\drivers\sffp_sd.sys
2006-10-13 17:07 1,897,408 --------- C:\WINDOWS\system32\drivers\nv4_mini.sys
2006-10-13 17:07 1,737,856 --------- C:\WINDOWS\system32\mtxparhd.dll
2006-10-13 17:07 1,689,088 --------- C:\WINDOWS\system32\d3d9.dll
2006-10-13 17:07 1,309,184 --------- C:\WINDOWS\system32\drivers\mtlstrm.sys
2006-10-13 17:07 1,119,744 --------- C:\WINDOWS\system32\wmsdmoe2.dll
2006-10-13 17:07 1,041,536 --------- C:\WINDOWS\system32\drivers\hsfdpsp2.sys

th43ns

Legacy Member
2006-10-13 17:07 1,001,472 --------- C:\WINDOWS\system32\wmvdmoe2.dll
2006-10-13 17:04 15,872 --a------ C:\WINDOWS\system32\spupdsvc.exe
2006-10-13 16:51 94,299 --a------ C:\WINDOWS\system32\SynTPAPI.dll
2006-10-13 16:51 82,014 --a------ C:\WINDOWS\system32\SynCOM.dll
2006-10-13 16:51 81,920 --a------ C:\WINDOWS\system32\SynTPCo2.dll
2006-10-13 16:51 69,723 --a------ C:\WINDOWS\system32\SynTPFcs.dll
2006-10-13 16:51 191,872 --a------ C:\WINDOWS\system32\drivers\SynTP.sys
2006-10-13 16:51 114,688 --a------ C:\WINDOWS\system32\SynCtrl.dll
2006-10-13 16:31 95,360 --a------ C:\WINDOWS\system32\drivers\atapi.sys
2006-10-13 16:31 76,288 --a------ C:\WINDOWS\system32\usbui.dll
2006-10-13 16:31 7,168 --a------ C:\WINDOWS\system32\hccoin.dll
2006-10-13 16:31 68,224 --a------ C:\WINDOWS\system32\drivers\pci.sys
2006-10-13 16:31 57,600 --a------ C:\WINDOWS\system32\drivers\usbhub.sys
2006-10-13 16:31 36,352 --a------ C:\WINDOWS\system32\drivers\isapnp.sys
2006-10-13 16:31 3,328 --a------ C:\WINDOWS\system32\drivers\pciide.sys
2006-10-13 16:31 26,624 --a------ C:\WINDOWS\system32\drivers\usbehci.sys
2006-10-13 16:31 25,088 --a------ C:\WINDOWS\system32\drivers\pciidex.sys
2006-10-13 16:31 20,480 --a------ C:\WINDOWS\system32\drivers\usbuhci.sys
2006-10-13 16:31 142,976 --a------ C:\WINDOWS\system32\drivers\usbport.sys
2006-10-13 16:18 198,424 --a------ C:\WINDOWS\system32\iuengine.dll
2006-10-13 15:36 31,616 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys
2006-10-13 15:36 26,496 --a------ C:\WINDOWS\system32\drivers\usbstor.sys
2006-10-13 15:32 112,128 --a------ C:\WINDOWS\system32\mapi32.dll
2006-10-13 15:32 0 -rahs---- C:\MSDOS.SYS
2006-10-13 15:32 0 -rahs---- C:\IO.SYS
2006-10-13 15:32 0 --a------ C:\CONFIG.SYS
2006-10-13 15:32 0 --a------ C:\AUTOEXEC.BAT
2006-10-13 15:31 67,584 --a------ C:\WINDOWS\system32\acctres.dll
2006-10-13 15:31 50,176 --a------ C:\WINDOWS\system32\inetres.dll
2006-10-13 15:31 45,568 --a------ C:\WINDOWS\system32\safrslv.dll
2006-10-13 15:31 43,520 --a------ C:\WINDOWS\system32\safrcdlg.dll
2006-10-13 15:31 43,520 --a------ C:\WINDOWS\system32\racpldlg.dll
2006-10-13 15:31 32,768 --a------ C:\WINDOWS\system32\mnmsrvc.exe
2006-10-13 15:31 32,768 --a------ C:\WINDOWS\system32\isrdbg32.dll
2006-10-13 15:31 29,696 --a------ C:\WINDOWS\system32\safrdm.dll
2006-10-13 15:31 12,288 --a------ C:\WINDOWS\system32\nmevtmsg.dll
2006-10-13 15:31 11,264 --a------ C:\WINDOWS\system32\atrace.dll
2006-10-13 15:30 86,016 --a------ C:\WINDOWS\system32\isign32.dll
2006-10-13 15:30 81,920 --a------ C:\WINDOWS\system32\ils.dll
2006-10-13 15:30 73,728 --a------ C:\WINDOWS\system32\icwdial.dll
2006-10-13 15:30 73,472 --a------ C:\WINDOWS\system32\drivers\sr.sys
2006-10-13 15:30 69,632 --a------ C:\WINDOWS\system32\msconf.dll
2006-10-13 15:30 678,400 --a------ C:\WINDOWS\system32\inetcomm.dll
2006-10-13 15:30 67,584 --a------ C:\WINDOWS\system32\srclient.dll
2006-10-13 15:30 65,536 --a------ C:\WINDOWS\system32\icwphbk.dll
2006-10-13 15:30 382,464 --a------ C:\WINDOWS\system32\qmgr.dll
2006-10-13 15:30 34,560 --a------ C:\WINDOWS\system32\mnmdd.dll
2006-10-13 15:30 28,672 --a------ C:\WINDOWS\system32\nmmkcert.dll
2006-10-13 15:30 278,528 --a------ C:\WINDOWS\system32\mstask.dll
2006-10-13 15:30 278,528 --a------ C:\WINDOWS\system32\inetcfg.dll
2006-10-13 15:30 252,928 --a------ C:\WINDOWS\system32\msoeacct.dll
2006-10-13 15:30 241,152 --a------ C:\WINDOWS\system32\srrstr.dll
2006-10-13 15:30 192,000 --a------ C:\WINDOWS\system32\schedsvc.dll
2006-10-13 15:30 18,944 --a------ C:\WINDOWS\system32\qmgrprxy.dll
2006-10-13 15:30 170,496 --a------ C:\WINDOWS\system32\srsvc.dll
2006-10-13 15:30 16,384 --a------ C:\WINDOWS\system32\icfgnt5.dll
2006-10-13 15:30 12,288 --a------ C:\WINDOWS\system32\mstinit.exe
2006-10-13 15:30 105,984 --a------ C:\WINDOWS\system32\msoert2.dll
2006-10-13 15:29 949,248 --a------ C:\WINDOWS\system32\msdtctm.dll
2006-10-13 15:29 94,208 --a------ C:\WINDOWS\system32\tscfgwmi.dll
2006-10-13 15:29 90,112 --a------ C:\WINDOWS\system32\mtxoci.dll
2006-10-13 15:29 9,728 --a------ C:\WINDOWS\system32\reset.exe
2006-10-13 15:29 87,176 --a------ C:\WINDOWS\system32\rdpwsx.dll
2006-10-13 15:29 85,504 --a------ C:\WINDOWS\system32\catsrvps.dll
2006-10-13 15:29 82,432 --a------ C:\WINDOWS\system32\comrepl.dll
2006-10-13 15:29 80,896 --a------ C:\WINDOWS\system32\charmap.exe
2006-10-13 15:29 73,216 --a------ C:\WINDOWS\system32\avwav.dll
2006-10-13 15:29 67,072 --a------ C:\WINDOWS\system32\rdshost.exe
2006-10-13 15:29 662,528 --a------ C:\WINDOWS\system32\getuname.dll
2006-10-13 15:29 655,360 --a------ C:\WINDOWS\system32\mstscax.dll
2006-10-13 15:29 628,224 --a------ C:\WINDOWS\system32\catsrvut.dll
2006-10-13 15:29 62,464 --a------ C:\WINDOWS\system32\rdpclip.exe
2006-10-13 15:29 62,464 --a------ C:\WINDOWS\system32\colbact.dll
2006-10-13 15:29 61,440 --a------ C:\WINDOWS\system32\remotepg.dll
2006-10-13 15:29 6,656 --a------ C:\WINDOWS\system32\wuauserv.dll
2006-10-13 15:29 6,144 --a------ C:\WINDOWS\system32\msdtc.exe
2006-10-13 15:29 58,880 --a------ C:\WINDOWS\system32\msdtclog.dll
2006-10-13 15:29 57,344 --a------ C:\WINDOWS\system32\sol.exe
2006-10-13 15:29 56,320 --a------ C:\WINDOWS\system32\servdeps.dll
2006-10-13 15:29 55,808 --a------ C:\WINDOWS\system32\freecell.exe
2006-10-13 15:29 540,160 --a------ C:\WINDOWS\system32\comuid.dll
2006-10-13 15:29 54,272 --a------ C:\WINDOWS\system32\stclient.dll
2006-10-13 15:29 539,136 --a------ C:\WINDOWS\system32\spider.exe
2006-10-13 15:29 501,248 --a------ C:\WINDOWS\system32\clbcatq.dll
2006-10-13 15:29 5,632 --a------ C:\WINDOWS\system32\write.exe
2006-10-13 15:29 5,120 --a------ C:\WINDOWS\system32\dcomcnfg.exe
2006-10-13 15:29 44,544 --a------ C:\WINDOWS\system32\tscupgrd.exe
2006-10-13 15:29 44,544 --a------ C:\WINDOWS\system32\hticons.dll
2006-10-13 15:29 425,472 --a------ C:\WINDOWS\system32\msdtcprx.dll
2006-10-13 15:29 412,160 --a------ C:\WINDOWS\system32\mstsc.exe
2006-10-13 15:29 4,608 --a------ C:\WINDOWS\system32\rdpcfgex.dll
2006-10-13 15:29 4,096 --a------ C:\WINDOWS\system32\mtxex.dll
2006-10-13 15:29 39,424 --a------ C:\WINDOWS\system32\cfgbkend.dll
2006-10-13 15:29 350,720 --a------ C:\WINDOWS\system32\hypertrm.dll
2006-10-13 15:29 35,840 --a------ C:\WINDOWS\system32\winchat.exe
2006-10-13 15:29 345,600 --a------ C:\WINDOWS\system32\mspaint.exe
2006-10-13 15:29 33,792 --a------ C:\WINDOWS\system32\regini.exe
2006-10-13 15:29 297,472 --a------ C:\WINDOWS\system32\termsrv.dll
2006-10-13 15:29 25,600 --a------ C:\WINDOWS\system32\comaddin.dll
2006-10-13 15:29 25,088 --a------ C:\WINDOWS\system32\mtxlegih.dll
2006-10-13 15:29 233,472 --a------ C:\WINDOWS\system32\avtapi.dll
2006-10-13 15:29 23,040 --a------ C:\WINDOWS\system32\qwinsta.exe
2006-10-13 15:29 229,888 --a------ C:\WINDOWS\system32\catsrv.dll
2006-10-13 15:29 22,016 --a------ C:\WINDOWS\system32\msg.exe
2006-10-13 15:29 21,896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys
2006-10-13 15:29 20,480 --a------ C:\WINDOWS\system32\qprocess.exe
2006-10-13 15:29 20,480 --a------ C:\WINDOWS\system32\mtxdm.dll
2006-10-13 15:29 19,968 --a------ C:\WINDOWS\system32\rdpsnd.dll
2006-10-13 15:29 188,928 --a------ C:\WINDOWS\system32\cmprops.dll
2006-10-13 15:29 187,392 --a------ C:\WINDOWS\system32\accwiz.exe
2006-10-13 15:29 17,920 --a------ C:\WINDOWS\system32\tsshutdn.exe
2006-10-13 15:29 17,920 --a------ C:\WINDOWS\system32\mmfutil.dll
2006-10-13 15:29 17,408 --a------ C:\WINDOWS\system32\qappsrv.exe
2006-10-13 15:29 161,280 --a------ C:\WINDOWS\system32\msdtcuiu.dll
2006-10-13 15:29 16,384 --a------ C:\WINDOWS\system32\tskill.exe
2006-10-13 15:29 16,384 --a------ C:\WINDOWS\system32\rwinsta.exe
2006-10-13 15:29 16,384 --a------ C:\WINDOWS\system32\avmeter.dll
2006-10-13 15:29 15,872 --a------ C:\WINDOWS\system32\cdmodem.dll
2006-10-13 15:29 15,360 --a------ C:\WINDOWS\system32\tsdiscon.exe
2006-10-13 15:29 15,360 --a------ C:\WINDOWS\system32\tscon.exe
2006-10-13 15:29 15,360 --a------ C:\WINDOWS\system32\shadow.exe
2006-10-13 15:29 15,360 --a------ C:\WINDOWS\system32\logoff.exe
2006-10-13 15:29 147,968 --a------ C:\WINDOWS\system32\rdchost.dll
2006-10-13 15:29 147,456 --a------ C:\WINDOWS\system32\comsnap.dll
2006-10-13 15:29 142,336 --a------ C:\WINDOWS\system32\sessmgr.exe
2006-10-13 15:29 139,400 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys
2006-10-13 15:29 139,264 --a------ C:\WINDOWS\system32\sndvol32.exe
2006-10-13 15:29 132,608 --a------ C:\WINDOWS\system32\sndrec32.exe
2006-10-13 15:29 13,824 --a------ C:\WINDOWS\system32\rdsaddin.exe
2006-10-13 15:29 128,000 --a------ C:\WINDOWS\system32\mshearts.exe
2006-10-13 15:29 125,208 --a------ C:\WINDOWS\system32\wuauclt.exe
2006-10-13 15:29 124,416 --a------ C:\WINDOWS\system32\mplay32.exe
2006-10-13 15:29 12,040 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys
2006-10-13 15:29 119,808 --a------ C:\WINDOWS\system32\winmine.exe
2006-10-13 15:29 114,688 --a------ C:\WINDOWS\system32\calc.exe
2006-10-13 15:29 110,080 --a------ C:\WINDOWS\system32\clbcatex.dll
2006-10-13 15:29 11,776 --a------ C:\WINDOWS\system32\xolehlp.dll
2006-10-13 15:29 11,264 --a------ C:\WINDOWS\system32\icaapi.dll
2006-10-13 15:29 104,448 --a------ C:\WINDOWS\system32\clipbrd.exe
2006-10-13 15:29 1,343,768 --a------ C:\WINDOWS\system32\wuaueng.dll
2006-10-13 15:29 1,161 --a------ C:\WINDOWS\system32\usrlogon.cmd
2006-10-13 15:28 58,880 --a------ C:\WINDOWS\system32\licwmi.dll
2006-10-13 15:28 40,840 --a------ C:\WINDOWS\system32\drivers\termdd.sys
2006-10-13 15:28 196,864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys
2006-10-13 15:28 1,251,840 --a------ C:\WINDOWS\system32\comsvcs.dll
2006-10-02 21:04 806,912 --a------ C:\WINDOWS\system32\divx_xx0c.dll
2006-10-02 21:04 806,912 --a------ C:\WINDOWS\system32\divx_xx07.dll
2006-10-02 21:04 790,528 --a------ C:\WINDOWS\system32\divx_xx11.dll
2006-10-02 21:04 635,486 --a------ C:\WINDOWS\system32\DivX.dll
2006-09-23 01:16 90,112 --a------ C:\WINDOWS\system32\snymsico.dll
2006-09-23 01:16 77,824 --a------ C:\WINDOWS\system32\Oemdspif.dll
2006-09-23 01:16 61,440 --a------ C:\WINDOWS\system32\ati2evxx.dll
2006-09-23 01:16 6,684,672 --a------ C:\WINDOWS\system32\atioglx1.dll
2006-09-23 01:16 53,248 --a------ C:\WINDOWS\system32\ATIDDC.DLL
2006-09-23 01:16 51,328 --a------ C:\WINDOWS\system32\drivers\rimsptsk.sys
2006-09-23 01:16 5,050,368 --a------ C:\WINDOWS\system32\atioglxx.dll
2006-09-23 01:16 491,520 --a------ C:\WINDOWS\system32\w39NCPA.dll
2006-09-23 01:16 45,312 --a------ C:\WINDOWS\system32\drivers\bcm4sbxp.sys
2006-09-23 01:16 45,056 --a------ C:\WINDOWS\system32\drivers\ati2erec.dll
2006-09-23 01:16 41,984 --a------ C:\WINDOWS\system32\ati2edxx.dll
2006-09-23 01:16 409,600 --a------ C:\WINDOWS\system32\ati2evxx.exe
2006-09-23 01:16 307,968 --a------ C:\WINDOWS\system32\drivers\rixdptsk.sys
2006-09-23 01:16 307,200 --a------ C:\WINDOWS\system32\atiiiexx.dll
2006-09-23 01:16 290,816 --a------ C:\WINDOWS\system32\ATIDEMGR.dll
2006-09-23 01:16 282,624 --a------ C:\WINDOWS\system32\ati2cqag.dll
2006-09-23 01:16 28,544 --a------ C:\WINDOWS\system32\drivers\rimmptsk.sys
2006-09-23 01:16 260,096 --a------ C:\WINDOWS\system32\ati2dvag.dll
2006-09-23 01:16 26,112 --a------ C:\WINDOWS\system32\Ati2mdxx.exe
2006-09-23 01:16 24,064 --a------ C:\WINDOWS\system32\ativcoxx.dll
2006-09-23 01:16 204,800 --a------ C:\WINDOWS\system32\atikvmag.dll
2006-09-23 01:16 2,754,848 --a------ C:\WINDOWS\system32\ati3duag.dll
2006-09-23 01:16 2,633,728 --a------ C:\WINDOWS\system32\w39MLRes.dll
2006-09-23 01:16 17,408 --a------ C:\WINDOWS\system32\atitvo32.dll
2006-09-23 01:16 16,480 --a------ C:\WINDOWS\system32\rixdicon.dll
2006-09-23 01:16 114,688 --a------ C:\WINDOWS\system32\atipdlxx.dll
2006-09-23 01:16 1,751,296 --a------ C:\WINDOWS\system32\ativvaxx.dll
2006-09-23 01:16 1,578,496 --a------ C:\WINDOWS\system32\drivers\ati2mtag.sys
2006-09-23 01:16 1,429,632 --a------ C:\WINDOWS\system32\drivers\w39n51.sys


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


2006-10-13 19:18 -------- d-------- C:\Program Files\Common Files
2006-10-13 19:17 -------- d-------- C:\Program Files\Mozilla Firefox
2006-10-13 18:40 -------- d-------- C:\Documents and Settings\Ben\Application Data\Ahead
2006-10-13 18:39 -------- d-------- C:\Program Files\Ahead
2006-10-13 18:35 -------- d-------- C:\Program Files\Common Files\Ahead
2006-10-13 18:21 -------- d-------- C:\Program Files\VSToolbar
2006-10-13 18:21 -------- d-------- C:\Documents and Settings\Ben\Application Data\SearchToolbarCorp
2006-10-13 18:20 -------- d-------- C:\Program Files\Windows Defender
2006-10-13 18:14 -------- d-------- C:\Program Files\Microsoft.NET
2006-10-13 18:14 -------- d-------- C:\Program Files\Microsoft Office
2006-10-13 18:14 -------- d-------- C:\Program Files\Common Files\Microsoft Shared
2006-10-13 18:13 -------- d-------- C:\Program Files\Common Files\System
2006-10-13 18:13 -------- d-------- C:\Program Files\Common Files\DESIGNER
2006-10-13 17:36 -------- d---s---- C:\Documents and Settings\Ben\Application Data\Microsoft
2006-10-13 17:25 62 --ahs---- C:\Documents and Settings\Ben\Application Data\desktop.ini
2006-10-13 17:25 -------- d-------- C:\Program Files\Common Files\SpeechEngines
2006-10-13 17:25 -------- d-------- C:\Program Files\Common Files\ODBC
2006-10-13 17:22 -------- d-------- C:\Program Files\Alwil Software
2006-10-13 17:16 -------- d-------- C:\Documents and Settings\Ben\Application Data\Sun
2006-10-13 17:15 -------- d-------- C:\Program Files\MSN Messenger
2006-10-13 17:15 -------- d-------- C:\Documents and Settings\Ben\Application Data\Mozilla
2006-10-13 17:14 -------- d--h----- C:\Program Files\WindowsUpdate
2006-10-13 17:08 -------- d-------- C:\Program Files\Windows Media Player
2006-10-13 17:08 -------- d-------- C:\Program Files\Messenger
2006-10-13 17:07 -------- d-------- C:\Program Files\Movie Maker
2006-10-13 17:07 -------- d-------- C:\Program Files\Internet Explorer
2006-10-13 17:06 -------- d-------- C:\Program Files\Windows NT
2006-10-13 17:06 -------- d-------- C:\Program Files\Outlook Express
2006-10-13 17:06 -------- d-------- C:\Program Files\NetMeeting
2006-10-13 17:01 -------- d-------- C:\Program Files\Save
2006-10-13 17:00 -------- d-------- C:\Program Files\Java
2006-10-13 16:58 -------- d-------- C:\Program Files\Common Files\Java
2006-10-13 16:54 -------- d-------- C:\Program Files\Webteh
2006-10-13 16:51 -------- d-------- C:\Program Files\Synaptics
2006-10-13 16:51 -------- d-------- C:\Program Files\Google
2006-10-13 16:51 -------- d-------- C:\Program Files\Common Files\InstallShield
2006-10-13 16:50 -------- d-------- C:\Program Files\WinRAR
2006-10-13 16:50 -------- d-------- C:\Program Files\DivX
2006-10-13 16:49 -------- d-------- C:\Program Files\KBC-online
2006-10-13 16:31 -------- d-------- C:\Program Files\Intel
2006-10-13 16:27 -------- d-------- C:\Documents and Settings\Ben\Application Data\Macromedia
2006-10-13 15:36 -------- d-------- C:\Documents and Settings\Ben\Application Data\Identities
2006-10-13 15:35 -------- d--h----- C:\Program Files\Uninstall Information
2006-10-13 15:32 -------- d-------- C:\Program Files\xerox
2006-10-13 15:32 -------- d-------- C:\Program Files\microsoft frontpage
2006-10-13 15:31 -------- d-------- C:\Program Files\Online Services
2006-10-13 15:31 -------- d-------- C:\Program Files\Common Files\Services
2006-10-13 15:30 -------- d-------- C:\Program Files\ComPlus Applications
2006-10-13 15:30 -------- d-------- C:\Program Files\Common Files\MSSoap
2006-10-13 15:29 -------- d-------- C:\Program Files\MSN Gaming Zone
2006-10-13 15:29 -------- d-------- C:\Program Files\MSN
2006-08-11 01:03 73728 --a------ C:\WINDOWS\system32\dpl100.dll
2006-08-11 01:03 196608 --a------ C:\WINDOWS\system32\dtu100.dll
2006-07-27 19:28 3596288 --a------ C:\WINDOWS\system32\qt-dx331.dll


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries are not shown

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"
"msnmsgr"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"SynTPEnh"="C:\\Program Files\\Synaptics\\SynTP\\SynTPEnh.exe"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_09\\bin\\jusched.exe\""
"avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
"Windows Defender"="\"C:\\Program Files\\Windows Defender\\MSASCui.exe\" -hide"
"NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000005

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Mijn huidige introductiepagina"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,00,01,00,00,00,00,00,00,00,04,00,00,e4,02,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,50,00,00,00,00,00,00,00,d0,02,00,00,3a,02,\
00,00,04,00,00,40
"RestoredStateInfo"=hex:18,00,00,00,50,00,00,00,00,00,00,00,d0,02,00,00,3a,02,\
00,00,01,00,00,00

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Preloader van browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Cache-daemon voor onderdeelcategorieën"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"="Microsoft AntiMalware ShellExecuteHook"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\awtss
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winmxw32

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"


Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\MP Scheduled Scan.job

Completion time: 06-10-13 19:19:27.01
C:\ComboFix.txt ... 06-10-13 19:19

Jurgenv1

Legacy Member
Download VundoFix.exe naar je bureaublad.
  • Dubbelklik VundoFix.exe om het te starten.
  • Klik de Scan for Vundo knop.
  • Eenmaal gedaan met scannen, klik de Remove Vundo knop.
  • Je zal een melding krijgen of je de bestanden wilt laten verwijderen, klik YES
  • Nadat je Yes hebt geklikt, zullen de icoontjes op je bureaublad verdwijnen tijdens het verwijderen van Vundo.
  • Wanneer voltooid zal je de melding krijgen dat het je PC zal afsluiten, klik OK.
  • Start je pc terug opnieuw op.
  • Post de inhoud van C:\vundofix.txt en een nieuwe hijackthislog in je volgende post.
Note: Het is mogelijk dat vundofix een bestand gevonden heeft dat niet kon verwijderd worden.
In dit geval zal VundoFix na het heropstarten van je pc nog eens opstarten. Dan moet je de instructies van hierboven nog eens uitvoeren vanaf: "Click the Scan for Vundo."

th43ns

Legacy Member
VundoFix V6.2.2

Checking Java version...

Java version is 1.5.0.9

Scan started at 20:30:56 13-10-2006

Listing files found while scanning....

C:\WINDOWS\system32\axbeukno.dll
C:\WINDOWS\system32\winmxw32.dll
C:\WINDOWS\system32\wvutrqr.dll
C:\WINDOWS\system32\misktvhf.exe
C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\sstwa.ini
C:\WINDOWS\system32\sstwa.bak1

Beginning removal...

Attempting to delete C:\WINDOWS\system32\axbeukno.dll
C:\WINDOWS\system32\axbeukno.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\winmxw32.dll
C:\WINDOWS\system32\winmxw32.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\wvutrqr.dll
C:\WINDOWS\system32\wvutrqr.dll Has been deleted!

Attempting to delete C:\WINDOWS\system32\misktvhf.exe
C:\WINDOWS\system32\misktvhf.exe Has been deleted!

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Could not be deleted.

Attempting to delete C:\WINDOWS\system32\sstwa.ini
C:\WINDOWS\system32\sstwa.ini Has been deleted!

Attempting to delete C:\WINDOWS\system32\sstwa.bak1
C:\WINDOWS\system32\sstwa.bak1 Has been deleted!

Performing Repairs to the registry.
Done!

Beginning removal...

Attempting to delete C:\WINDOWS\system32\awtss.dll
C:\WINDOWS\system32\awtss.dll Has been deleted!

Performing Repairs to the registry.
Done!

th43ns

Legacy Member
Logfile of HijackThis v1.99.1
Scan saved at 20:37:52, on 13-10-2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Creative\Mixer\CTSVolFE.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Ben\Mijn documenten\hjt\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: (no name) - {1DAEFCB9-06C8-47c6-8F20-3FB54B244DAA} - C:\WINDOWS\system32\axbeukno.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: (no name) - {A6F13C97-15DA-48F0-A82A-88FD4A0C1CD6} - C:\WINDOWS\system32\awtss.dll (file missing)
O2 - BHO: ToolBar888 - {C004DEC2-2623-438e-9CA2-C9043AB28508} - C:\Program Files\Common Files\{34E992D6-0724-1043-0728-06032906001f}\MyToolBar.dll (file missing)
O3 - Toolbar: ToolBar888 - {C004DEC2-2623-438e-9CA2-C9043AB28508} - C:\Program Files\Common Files\{34E992D6-0724-1043-0728-06032906001f}\MyToolBar.dll (file missing)
O3 - Toolbar: &VSToolBar - {821F87FF-8245-4972-9E28-732E92EC2F51} - C:\Program Files\VSToolbar\VSToolBar.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [CTSVolFE.exe] "C:\Program Files\Creative\Mixer\CTSVolFE.exe" /r
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)

Jurgenv1

Legacy Member
* Open hijackthis en vink volgende regels aan:

O2 - BHO: (no name) - {1DAEFCB9-06C8-47c6-8F20-3FB54B244DAA} - C:\WINDOWS\system32\axbeukno.dll (file missing)
O2 - BHO: (no name) - {A6F13C97-15DA-48F0-A82A-88FD4A0C1CD6} - C:\WINDOWS\system32\awtss.dll (file missing)
O2 - BHO: ToolBar888 - {C004DEC2-2623-438e-9CA2-C9043AB28508} - C:\Program Files\Common Files\{34E992D6-0724-1043-0728-06032906001f}\MyToolBar.dll (file missing)
O3 - Toolbar: ToolBar888 - {C004DEC2-2623-438e-9CA2-C9043AB28508} - C:\Program Files\Common Files\{34E992D6-0724-1043-0728-06032906001f}\MyToolBar.dll (file missing)
O3 - Toolbar: &VSToolBar - {821F87FF-8245-4972-9E28-732E92EC2F51} - C:\Program Files\VSToolbar\VSToolBar.dll


* Sluit dan alle vensters behalve hijackthis en klik op 'fix checked'

* Ga naar start==>configuratiescherm==>software en de-installeer indien aanwezig:
VSToolbar

* Verwijder volgende map indien aanwezig:

C:\Program Files\VSToolbar

* Post dan een nieuw hijackthis logje hier en vertel hoe alles verder werkt.

th43ns

Legacy Member
Logfile of HijackThis v1.99.1
Scan saved at 21:04:00, on 13-10-2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Creative\Mixer\CTSVolFE.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wuauclt.exe
D:\GetDataBack\GetDataBack for NTFS\gdbnt.exe
C:\Documents and Settings\Ben\Mijn documenten\hjt\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O3 - Toolbar: (no name) - {C004DEC2-2623-438e-9CA2-C9043AB28508} - (no file)
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [CTSVolFE.exe] "C:\Program Files\Creative\Mixer\CTSVolFE.exe" /r
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)


Ik veronderstel dat alles nu weer deftig werkt, hartelijk bedankt!

Jurgenv1

Legacy Member
Dit restandje moet ook nog gefixt worden:

O3 - Toolbar: (no name) - {C004DEC2-2623-438e-9CA2-C9043AB28508} - (no file)

Nog een paar tips om problemen te voorkomen in de toekomst:

Installeer alvast volgende GRATIS programmatjes indien je ze nog niet hebt:

Spywareblaster
Adaware se
Spybot s&d


Tijdens het surfen, klik niet overal klakkeloos op ja als je dit gevraagd wordt... doe dit enkel wanneer je het volledig vertrouwt.

En kies eventueel een alternatieve browser zoals Opera of Firefox.

En ik raad je ook aan om af en toe een online virusscan uit te voeren. housecall en/of Bitdefender. Want, wat de ene scanner niet kan vinden, kan een andere misschien wel.
Zorg er ook voor dat je virusscanner die op je systeem geïnstalleerd is altijd up to date is!!

En... geregeld eens een bezoekje brengen aan: http://windowsupdate.microsoft.com/

Bekijk ook eens deze 2 filmpjes.. Heel interessant:
http://www2.trosradar.nl/mediaplayer/player.php?videoID=524&mode=dossier#
http://www.benedelman.org/spyware/security-111804.wmv


Meer preventietips zijn ook op volgende sites te vinden:

http://www.bluemedicine.be
http://users.telenet.be/marcvn/spyware
How did I get infected in the first place (article by TonyKlein)
Het voorkomen van spyware-infecties en browserhijacking
Het archief is een bevroren moment uit een vorige versie van dit forum, met andere regels en andere bazen. Deze posts weerspiegelen op geen enkele manier onze huidige ideeën, waarden of wereldbeelden en zijn op sommige plaatsen gecensureerd wegens ontoelaatbaar. Veel zijn in een andere tijdsgeest gemaakt, al dan niet ironisch - zoals in het ironische subforum Off-Topic - en zouden op dit moment niet meer gepost (mogen) worden. Toch bieden we dit archief nog graag aan als informatiedatabank en naslagwerk. Lees er hier meer over of start een gesprek met anderen.
Terug
Bovenaan