Archief - verschillende problemen

geachte,

ik zou willen vragen of jullie dit kunnen na kijken want ik denk dat ik met een virus zit .
want mijn internet explorer gaat ven zijn eigen open enzo
computer start trager op en doet soms heel raar .
bedankt voor dit na te kijken

Logfile of HijackThis v1.99.1
Scan saved at 19:50:35, on 18/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\D-Link\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\svchosts.exe
C:\VIRUSfighter\Bin\Zanda.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\VIRUSfighter\bin\NJEEVES.EXE
C:\VIRUSfighter\Nvc\bin\nvcoas.exe
C:\VIRUSfighter\Nvc\BIN\NVCSCHED.EXE
C:\VIRUSfighter\Nvc\BIN\nipsvc.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\retadpu1000137.exe
C:\VIRUSfighter\bin\ZLH.EXE
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\webHancer\Programs\whagent.exe
C:\Program Files\Common Files\{2C224D1A-06C0-2067-0727-050711050020}\Update.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\VIRUSfighter\Nvc\BIN\NIP.EXE
C:\VIRUSfighter\Nvc\bin\cclaw.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\STEM32~1\csrss.exe
C:\Program Files\s?stem32\?vchost.exe
C:\Program Files\D-Link\Bluetooth Software\BTTray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\SpamWeed\swengine.exe
C:\Program Files\WinPop\winpop.exe
C:\Program Files\SpamWeed\addinoe\addinoe.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\Platte\LOCALS~1\Temp\Rar$EX00.547\HijackThis.exe
C:\VIRUSfighter\bin\niu.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ycomp/defaults/sb/*http://www.yahoo.com/search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ycomp/defaults/sp/*http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {45B0DF14-46D5-3B25-AB4F-19E33DE2F2EF} - C:\WINDOWS\system32\otvlrqr.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: 0 - {7921C99B-A6CB-46DD-4AA5-FCA8AEB26BC2} - C:\Program Files\ComPlus Applications\xumavy.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {96583968-F7F9-AF52-8809-F9ADA8B173C3} - C:\WINDOWS\system32\vfbrw.dll (file missing)
O2 - BHO: (no name) - {A11E700A-910E-4876-A1D6-23EE73F2402D} - C:\Program Files\Outlook Express\tebo.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Bar888 - {C1B4DEC2-2623-438e-9CA2-C9043AB28508} - C:\PROGRA~1\COMMON~1\{3C224~1\Bar888.dll
O2 - BHO: Plugin - {C318CD44-E327-4377-A28E-6EC16A921AE8} - C:\Program Files\Web Buying\v1.6.8\webbuying.dll
O2 - BHO: (no name) - {C50C3C6A-A7AD-8908-8808-FDADD9E475B7} - C:\WINDOWS\system32\dzvdt.dll
O2 - BHO: WhIeHelperObj Class - {c900b400-cdfe-11d3-976a-00e02913a9e0} - C:\Program Files\webHancer\programs\whiehlpr.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Bar888 - {C1B4DEC2-2623-438e-9CA2-C9043AB28508} - C:\PROGRA~1\COMMON~1\{3C224~1\Bar888.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [runner1] C:\WINDOWS\retadpu1000137.exe 61A847B5BBF72813329B385771FE01F0B3E35B6638993F4661AA4EBD86D67C56389B284534F310
O4 - HKLM\..\Run: [Norman ZANDA] C:\VIRUSfighter\bin\ZLH.EXE /LOAD /SPLASH
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [webHancer Agent] C:\Program Files\webHancer\Programs\whagent.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKCU\..\Run: [WebBuying] C:\Program Files\Web Buying\v1.6.8\webbuying.exe
O4 - HKCU\..\Run: [IpWins] C:\Program Files\Ipwindows\ipwins.exe
O4 - HKCU\..\Run: [WinPop] C:\Program Files\WinPop\winpop.exe
O4 - HKCU\..\Run: [Apln] "C:\WINDOWS\system32\STEM32~1\csrss.exe" -vt yazb
O4 - HKCU\..\Run: [Wxe] "C:\Program Files\s?stem32\?vchost.exe"
O4 - Startup: CCC.lnk = ?
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: SpamWeed.lnk = C:\Program Files\SpamWeed\swupinst.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\MICROS~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Openen in een nieuwe achtergrondtab - res://C:\Program Files\Windows Live Toolbar\Components\nl-be\msntabres.dll.mui/229?f7ad4e2a11ec4b1bbf02603d3fe38619
O8 - Extra context menu item: Openen in een nieuwe voorgrondtab - res://C:\Program Files\Windows Live Toolbar\Components\nl-be\msntabres.dll.mui/230?f7ad4e2a11ec4b1bbf02603d3fe38619
O8 - Extra context menu item: Verzenden naar &Bluetooth - C:\Program Files\D-Link\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\D-Link\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\D-Link\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Hijacked Internet access by WebHancer
O10 - Hijacked Internet access by WebHancer
O10 - Hijacked Internet access by WebHancer
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\D-Link\Bluetooth Software\bin\btwdins.exe
O23 - Service: Client IP-IPX - Unknown owner - C:\WINDOWS\system32\svchosts.exe" -e mc-110-12-0000140 (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\VIRUSfighter\Nvc\BIN\nipsvc.exe
O23 - Service: Norman NJeeves - Unknown owner - C:\VIRUSfighter\bin\NJEEVES.EXE
O23 - Service: Norman ZANDA - Unknown owner - C:\VIRUSfighter\Bin\Zanda.exe
O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\VIRUSfighter\Nvc\bin\nvcoas.exe
O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\VIRUSfighter\Nvc\BIN\NVCSCHED.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

Download combofix.exe: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Plaats het op je bureaublad.
Dubbelklik er op om het programma te starten.
In het scherm dat verschijnt tik je een Y in om het cleaningsprocess te starten.
Volg de instructies op het scherm.
Als het tooltje klaar is, opent er een logfile (combofix.txt) Post de inhoud van dit bestandje samen met een nieuwe hijackthislog.

ik heb onder tussen ook adware afgehaald en serch & distroy en heb deze ok al uit gevoer

dit is de scan de je vroeg en hier onder zal ik die nieuw log van hijack plaatsen

en ik had nog een probleem bij het her opstarten van de computer krijg ik altijd een map die va haar eigen open gaat van ATI en ook een foutmelding van ATI

fout melding

could not load file or assembly ' CCC.Implemantation' or one of its dependencies.het systeem kan het opgegeven bestand niet vinden.

en dat doet hij uit zijn eigen

en mijn norman krijg ik door het ding waar de computer zo raar van doet er ook niet meer op

zeer hartelijk bedankt dat je diet doet echt waar



ComboFix 07-06-18.2 - C:\Documents and Settings\Platte\Mijn documenten\Ontvangen Bestanden\ComboFix.exe
"Platte" - 2007-06-18 22:59:15 - Service Pack 2 NTFS


((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\DOCUME~1\Platte\APPLIC~1.\macromedia\Flash Player\#SharedObjects\J22CMJ8H\www.broadcaster.com
C:\DOCUME~1\Platte\APPLIC~1.\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.broadcaster.com
C:\DOCUME~1\Platte\APPLIC~1.\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#www.broadcaster.com\settings.sol
C:\Program Files\Common Files\{2C224~1
C:\Program Files\Common Files\{2C224~1\Update.exe
C:\Program Files\Common Files\{2C224~2
C:\Program Files\Common Files\{2C224~2\Update.exe
C:\Program Files\Common Files\{3C224~1
C:\Program Files\Common Files\{3C224~1\Bar888.dll
C:\Program Files\Common Files\{3C224~1\UnInstall.exe
C:\Program Files\Common Files\Yazzle1122OinUninstaller.exe
C:\Program Files\ComPlus Applications\ceveku.html
C:\Program Files\ComPlus Applications\xumavy.dll
C:\Program Files\mantec~1
C:\Program Files\outerinfo
C:\Program Files\outerinfo\OiUninstaller.exe
C:\Program Files\outerinfo\outerinfo.ico
C:\Program Files\outerinfo\Terms.rtf
C:\Program Files\sstem3~1
C:\Program Files\sstem3~1\?vchost.exe
C:\Temp\17O7
C:\Temp\17O7\tmpTF.log
C:\Temp\tn3
C:\WINDOWS\b122.exe
C:\WINDOWS\b133.exe
C:\WINDOWS\b136.exe
C:\WINDOWS\retadpu.exe
C:\WINDOWS\retadpu1000106.exe
C:\WINDOWS\system32\crosof~1.net
C:\WINDOWS\system32\drivers\core.cache.dsk
C:\WINDOWS\system32\drivers\core.sys
C:\WINDOWS\system32\smpi1
C:\WINDOWS\system32\smpi1\lb13.exe
C:\WINDOWS\system32\smpi1\lib06.exe
C:\WINDOWS\system32\smpi1\lib67.exe
C:\WINDOWS\system32\stem32~1
C:\WINDOWS\system32\wnstssv.exe


((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))


-------\LEGACY_CLIENT_IP-IPX
-------\LEGACY_CORE
-------\core


((((((((((((((((((((((((( Files Created from 2007-05-18 to 2007-06-18 )))))))))))))))))))))))))))))))


2007-06-18 22:58 49,152 --a--c--- C:\WINDOWS\nircmd.exe
2007-06-18 20:49 <DIR> d----c--- C:\Program Files\Lavasoft
2007-06-18 20:49 <DIR> d----c--- C:\Program Files\Common Files\Wise Installation Wizard
2007-06-18 20:49 <DIR> d----c--- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
2007-06-18 20:40 <DIR> d----c--- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
2007-06-18 17:48 <DIR> d----c--- C:\Program Files\WinPop
2007-06-14 18:33 2,560 -----c--- C:\WINDOWS\system32\drivers\cdralw2k.sys
2007-06-14 18:33 2,432 -----c--- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2007-06-13 19:40 60,928 --a--c--- C:\WINDOWS\system32\dzvdt.dll
2007-06-13 17:19 167 --a--c--- C:\DOCUME~1\Platte\4823.bat
2007-06-11 19:02 167 --a--c--- C:\DOCUME~1\Platte\8444.bat
2007-06-10 22:00 167 --a--c--- C:\DOCUME~1\Platte\4644.bat
2007-06-10 18:12 167 --a--c--- C:\DOCUME~1\Platte\5567.bat
2007-06-09 21:09 167 --a--c--- C:\DOCUME~1\Platte\4460.bat
2007-06-08 23:16 <DIR> d----c--- C:\DOCUME~1\Platte\APPLIC~1\Yahoo!
2007-06-08 23:16 <DIR> d----c--- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
2007-06-08 22:13 <DIR> d----c--- C:\Program Files\Yahoo!
2007-06-08 22:13 <DIR> d----c--- C:\Program Files\Shockwave.com
2007-06-08 22:02 167 --a--c--- C:\DOCUME~1\Platte\1852.bat
2007-06-08 20:53 167 --a--c--- C:\DOCUME~1\Platte\7214.bat
2007-06-08 19:03 <DIR> d----c--- C:\Program Files\Gamenext
2007-06-08 18:02 167 --a--c--- C:\DOCUME~1\Platte\6598.bat
2007-06-07 12:07 167 --a--c--- C:\DOCUME~1\Platte\6586.bat
2007-06-07 09:39 <DIR> d----c--- C:\Program Files\Norman
2007-06-07 09:37 <DIR> d----c--- C:\Program Files\SpamWeed
2007-06-07 08:16 167 --a--c--- C:\DOCUME~1\Platte\1202.bat
2007-06-06 19:25 167 --a--c--- C:\DOCUME~1\Platte\9784.bat
2007-06-06 19:10 167 --a--c--- C:\DOCUME~1\Platte\6767.bat
2007-06-06 18:56 167 --a--c--- C:\DOCUME~1\Platte\2181.bat
2007-06-06 12:25 167 --a--c--- C:\DOCUME~1\Platte\5570.bat
2007-06-05 03:04 167 --a--c--- C:\DOCUME~1\Platte\5371.bat
2007-06-05 03:04 10,838 --a--c--- C:\DOCUME~1\Platte\install.exe
2007-06-04 15:18 9,344 --a--c--- C:\WINDOWS\system32\drivers\NSDriver.sys
2007-06-04 15:17 8,320 --a--c--- C:\WINDOWS\system32\drivers\AWRTRD.sys
2007-06-04 15:14 6,272 --a--c--- C:\WINDOWS\system32\drivers\AWRTPD.sys
2007-06-03 15:53 32,768 --a--c--- C:\DOCUME~1\Platte\setup9x.exe
2007-06-03 15:53 167 --a--c--- C:\DOCUME~1\Platte\8716.bat
2007-06-03 08:29 167 --a--c--- C:\DOCUME~1\Platte\8591.bat
2007-05-31 11:43 167 --a--c--- C:\DOCUME~1\Platte\8032.bat
2007-05-31 06:15 167 --a--c--- C:\DOCUME~1\Platte\9811.bat
2007-05-30 14:54 167 --a--c--- C:\DOCUME~1\Platte\2499.bat
2007-05-29 16:41 <DIR> d----c--- C:\Program Files\XnFoto
2007-05-29 16:38 <DIR> d----c--- C:\Program Files\Picasa2
2007-05-29 16:30 167 --a--c--- C:\DOCUME~1\Platte\8176.bat
2007-05-29 06:04 167 --a--c--- C:\DOCUME~1\Platte\8571.bat
2007-05-28 11:50 167 --a--c--- C:\DOCUME~1\Platte\5707.bat
2007-05-27 06:53 167 --a--c--- C:\DOCUME~1\Platte\4825.bat
2007-05-26 10:35 167 --a--c--- C:\DOCUME~1\Platte\7691.bat
2007-05-25 10:40 167 --a--c--- C:\DOCUME~1\Platte\4064.bat
2007-05-24 06:31 167 --a--c--- C:\DOCUME~1\Platte\3334.bat
2007-05-23 15:20 167 --a--c--- C:\DOCUME~1\Platte\9847.bat
2007-05-23 14:55 167 --a--c--- C:\DOCUME~1\Platte\3871.bat
2007-05-23 13:06 167 --a--c--- C:\DOCUME~1\Platte\9620.bat
2007-05-23 11:47 167 --a--c--- C:\DOCUME~1\Platte\9172.bat
2007-05-23 08:48 167 --a--c--- C:\DOCUME~1\Platte\2373.bat
2007-05-23 05:01 90,112 --a--c--- C:\DOCUME~1\Platte\ps.exe
2007-05-23 05:01 73 --a--c--- C:\DOCUME~1\Platte\n.bat
2007-05-23 05:01 167 --a--c--- C:\DOCUME~1\Platte\5126.bat
2007-05-22 10:51 167 --a--c--- C:\DOCUME~1\Platte\6391.bat
2007-05-21 14:54 167 --a--c--- C:\DOCUME~1\Platte\4891.bat
2007-05-21 10:41 167 --a--c--- C:\DOCUME~1\Platte\3592.bat
2007-05-20 12:00 <DIR> d----c--- C:\VIRUSfighter
2007-05-20 11:56 76,560 --a--c--- C:\WINDOWS\system32\drivers\tmcomm.sys
2007-05-20 11:48 <DIR> d----c--- C:\DOCUME~1\Platte\APPLIC~1\Sammsoft
2007-05-20 11:46 167 --a--c--- C:\DOCUME~1\Platte\8429.bat
2007-05-20 06:09 167 --a--c--- C:\DOCUME~1\Platte\3138.bat
2007-05-20 06:08 90,112 --a--c--- C:\DOCUME~1\Platte\st.exe
2007-05-19 13:56 167 --a--c--- C:\DOCUME~1\Platte\6041.bat
2007-05-19 05:46 625 --a--c--- C:\DOCUME~1\Platte\x.dat
2007-05-18 19:16 167 --a--c--- C:\DOCUME~1\Platte\2938.bat
2007-05-18 13:01 167 --a--c--- C:\DOCUME~1\Platte\5407.bat
2007-05-18 12:55 167 --a--c--- C:\DOCUME~1\Platte\1233.bat
2007-05-18 12:49 167 --a--c--- C:\WINDOWS\system32\5214.bat
2007-05-18 12:48 625 --a--c--- C:\WINDOWS\system32\x.dat
2007-05-18 12:48 10,326 --a--c--- C:\WINDOWS\system32\install.exe
2007-05-18 12:47 32,768 --a--c--- C:\WINDOWS\system32\setup9x.exe
2007-05-18 12:47 109,360 --a--c--- C:\WINDOWS\system32\app.exe
2007-05-18 12:47 0 --a--c--- C:\WINDOWS\system32\taskkill.exe
2007-05-18 12:47 <DIR> d----c--- C:\WINDOWS\system32\SBO
2007-05-18 12:47 <DIR> d----c--- C:\Temp
2007-05-18 12:39 <DIR> d----c--- C:\Program Files\Magic DVD Creator


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-06-14 16:33:41 -------- dc----w C:\Program Files\Google
2007-06-13 17:40:35 -------- dc----w C:\Program Files\LimeWire
2007-06-11 13:22:55 -------- dc----w C:\Program Files\mIRC
2007-06-08 17:03:23 -------- dc----w C:\Program Files\Common Files\Oberon Media
2007-06-07 07:36:13 -------- dc-h--w C:\Program Files\InstallShield Installation Information
2007-05-27 07:18:12 -------- dc----w C:\Program Files\Windows Live Toolbar
2007-05-20 15:39:33 89,384 ----a-w C:\WINDOWS\system32\perfc013.dat
2007-05-20 15:39:33 503,462 ----a-w C:\WINDOWS\system32\perfh013.dat
2007-05-18 10:39:10 47,360 -c--a-w C:\WINDOWS\system32\drivers\Pcouffin.sys
2007-05-16 15:19:43 683,520 -c--a-w C:\WINDOWS\system32\inetcomm.dll
2007-05-14 00:27:43 -------- dc----w C:\Program Files\MSN Messenger
2007-05-13 16:43:44 -------- dc----w C:\Program Files\iWin
2007-04-30 11:53:15 21,312 -c-ha-w C:\WINDOWS\system32\mlfcache.dat
2007-04-30 10:05:46 -------- dc----w C:\Program Files\ImTOO
2007-04-25 14:22:52 144,896 -c--a-w C:\WINDOWS\system32\schannel.dll
2007-04-22 13:38:52 -------- dc----w C:\Program Files\R2
2007-04-21 16:19:03 29,371 -c--a-w C:\WINDOWS\hpoins03.dat
2007-04-21 16:17:12 -------- dc----w C:\Program Files\HP
2007-04-21 16:16:54 -------- dc----w C:\Program Files\Common Files\Hewlett-Packard
2007-04-21 16:14:09 -------- dc----w C:\Program Files\Common Files\HP
2007-04-18 19:24:13 25,664 -c--a-w C:\DOCUME~1\Platte\APPLIC~1\GDIPFONTCACHEV1.DAT
2007-04-18 16:15:26 2,854,400 -c--a-w C:\WINDOWS\system32\msi.dll
2007-04-16 20:47:36 33,624 -c--a-w C:\WINDOWS\system32\wups.dll
2007-04-16 20:45:54 1,710,936 -c--a-w C:\WINDOWS\system32\wuaueng.dll
2007-04-16 20:45:48 549,720 -c--a-w C:\WINDOWS\system32\wuapi.dll
2007-04-16 20:45:42 325,976 -c--a-w C:\WINDOWS\system32\wucltui.dll
2007-04-16 20:45:36 203,096 -c--a-w C:\WINDOWS\system32\wuweb.dll
2007-04-16 20:45:28 92,504 -c--a-w C:\WINDOWS\system32\cdm.dll
2007-04-16 20:45:20 53,080 -c--a-w C:\WINDOWS\system32\wuauclt.exe
2007-04-16 20:45:20 43,352 -c--a-w C:\WINDOWS\system32\wups2.dll
2007-04-16 20:44:20 271,224 -c--a-w C:\WINDOWS\system32\mucltui.dll
2007-04-16 20:44:18 208,248 -c--a-w C:\WINDOWS\system32\muweb.dll
2007-04-13 13:19:52 7,680 -c--a-w C:\WINDOWS\system32\lsdelete.exe
2007-03-31 21:15:44 41 -c--a-w C:\WINDOWS\system32\fbcacadda3_s.dll


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{02478D38-C3F9-4efb-9B51-7695ECA05670}=C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2007-03-20 23:39]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}=C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 02:56]
{45B0DF14-46D5-3B25-AB4F-19E33DE2F2EF}=C:\WINDOWS\system32\otvlrqr.dll []
{53707962-6F74-2D53-2644-206D7942484F}=C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2005-05-31 01:04]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}=C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll [2007-03-14 03:43]
{9030D464-4C02-4ABF-8ECC-5164760863C6}=C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2006-08-31 20:33]
{96583968-F7F9-AF52-8809-F9ADA8B173C3}=C:\WINDOWS\system32\vfbrw.dll []
{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}=C:\Program Files\Windows Live Toolbar\msntb.dll [2006-09-27 17:45]
{C50C3C6A-A7AD-8908-8808-FDADD9E475B7}=C:\WINDOWS\system32\dzvdt.dll [2007-05-21 15:59]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 17:40]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 03:43]
"ISUSPM"="C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" []
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-02-08 22:05]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd.exe" [2003-08-04 17:28]
"HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [2003-12-22 08:38]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2006-03-02 14:00 C:\WINDOWS\system32\bthprops.cpl]
"Norman ZANDA"="C:\VIRUSfighter\bin\ZLH.exe" [2005-05-25 13:11]
"Picasa Media Detector"="C:\Program Files\Picasa2\PicasaMediaDetector.exe" [2007-05-02 08:08]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2006-03-02 14:00]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2006-09-13 12:12]
"@"="" []
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 13:35]
"WinPop"="C:\Program Files\WinPop\winpop.exe" [2007-06-18 17:48]
"Apln"="C:\WINDOWS\system32\STEM32~1\csrss.exe" []
"Wxe"="C:\Program Files\s?stem32\?vchost.exe" []

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runonce]
"combofix"=C:\WINDOWS\system32\cmd.exe /c C:\ComboFix\Combobatch.bat

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
Source= C:\Program Files\ComPlus Applications\ceveku.html
FriendlyName=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\aawservice]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs BthServ


Contents of the 'Scheduled Tasks' folder
2007-06-18 20:08:34 C:\WINDOWS\tasks\Controleren op updates voor Windows Live Toolbar.job

**************************************************************************

catchme 0.3.721 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-06-18 23:04:35
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\BTHPORT\Parameters\Services\{00001000-0000-1000-8000-00805f9b34fb}]


[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\BTHPORT\Parameters\Services\{00001115-0000-1000-8000-00805f9b34fb}]


Completion time: 2007-06-18 23:05:56 - machine was rebooted
C:\ComboFix-quarantined-files.txt ... 2007-06-18 23:05

--- E O F ---







Logfile of HijackThis v1.99.1
Scan saved at 23:16:54, on 18/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\D-Link\Bluetooth Software\bin\btwdins.exe
C:\VIRUSfighter\Bin\Zanda.exe
C:\WINDOWS\system32\svchost.exe
C:\VIRUSfighter\Nvc\BIN\nipsvc.exe
C:\VIRUSfighter\bin\NJEEVES.EXE
C:\VIRUSfighter\Nvc\BIN\NVCSCHED.EXE
C:\VIRUSfighter\Nvc\bin\nvcoas.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\rundll32.exe
C:\VIRUSfighter\bin\ZLH.EXE
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\VIRUSfighter\Nvc\BIN\NIP.EXE
C:\VIRUSfighter\Nvc\bin\cclaw.exe
C:\Program Files\WinPop\winpop.exe
C:\Program Files\D-Link\Bluetooth Software\BTTray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\SpamWeed\swengine.exe
C:\Program Files\SpamWeed\addinoe\addinoe.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\Platte\LOCALS~1\Temp\Rar$EX00.172\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {45B0DF14-46D5-3B25-AB4F-19E33DE2F2EF} - C:\WINDOWS\system32\otvlrqr.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {96583968-F7F9-AF52-8809-F9ADA8B173C3} - C:\WINDOWS\system32\vfbrw.dll (file missing)
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: (no name) - {C50C3C6A-A7AD-8908-8808-FDADD9E475B7} - C:\WINDOWS\system32\dzvdt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [Norman ZANDA] C:\VIRUSfighter\bin\ZLH.EXE /LOAD /SPLASH
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKCU\..\Run: [WinPop] C:\Program Files\WinPop\winpop.exe
O4 - HKCU\..\Run: [Apln] "C:\WINDOWS\system32\STEM32~1\csrss.exe" -vt yazb
O4 - HKCU\..\Run: [Wxe] "C:\Program Files\s?stem32\?vchost.exe"
O4 - Startup: CCC.lnk = ?
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: SpamWeed.lnk = C:\Program Files\SpamWeed\swupinst.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\MICROS~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Openen in een nieuwe achtergrondtab - res://C:\Program Files\Windows Live Toolbar\Components\nl-be\msntabres.dll.mui/229?f7ad4e2a11ec4b1bbf02603d3fe38619
O8 - Extra context menu item: Openen in een nieuwe voorgrondtab - res://C:\Program Files\Windows Live Toolbar\Components\nl-be\msntabres.dll.mui/230?f7ad4e2a11ec4b1bbf02603d3fe38619
O8 - Extra context menu item: Verzenden naar &Bluetooth - C:\Program Files\D-Link\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\D-Link\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\D-Link\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\D-Link\Bluetooth Software\bin\btwdins.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\VIRUSfighter\Nvc\BIN\nipsvc.exe
O23 - Service: Norman NJeeves - Unknown owner - C:\VIRUSfighter\bin\NJEEVES.EXE
O23 - Service: Norman ZANDA - Unknown owner - C:\VIRUSfighter\Bin\Zanda.exe
O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\VIRUSfighter\Nvc\bin\nvcoas.exe
O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\VIRUSfighter\Nvc\BIN\NVCSCHED.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

Download OTMoveIt.exe en plaats het op je bureaublad:

Start OTMoveIt door dubbel te klikken op OTMoveIt.exe
In het linkerpaneel, waar het zegt: Paste List of Files/Folders to be Moved ,kopieer en plak je onderstaand gedeelte:

C:\WINDOWS\system32\dzvdt.dll
C:\DOCUME~1\Platte\4823.bat
C:\DOCUME~1\Platte\8444.bat
C:\DOCUME~1\Platte\4644.bat
C:\DOCUME~1\Platte\5567.bat
C:\DOCUME~1\Platte\4460.bat
C:\DOCUME~1\Platte\1852.bat
C:\DOCUME~1\Platte\7214.bat
C:\DOCUME~1\Platte\6598.bat
C:\DOCUME~1\Platte\6586.bat
C:\DOCUME~1\Platte\1202.bat
C:\DOCUME~1\Platte\9784.bat
C:\DOCUME~1\Platte\6767.bat
C:\DOCUME~1\Platte\2181.bat
C:\DOCUME~1\Platte\5570.bat
C:\DOCUME~1\Platte\5371.bat
C:\DOCUME~1\Platte\install.exe
C:\DOCUME~1\Platte\8716.bat
C:\DOCUME~1\Platte\8591.bat
C:\DOCUME~1\Platte\8032.bat
C:\DOCUME~1\Platte\9811.bat
C:\DOCUME~1\Platte\2499.bat
C:\DOCUME~1\Platte\8176.bat
C:\DOCUME~1\Platte\8571.bat
C:\DOCUME~1\Platte\5707.bat
C:\DOCUME~1\Platte\4825.bat
C:\DOCUME~1\Platte\7691.bat
C:\DOCUME~1\Platte\4064.bat
C:\DOCUME~1\Platte\3334.bat
C:\DOCUME~1\Platte\9847.bat
C:\DOCUME~1\Platte\3871.bat
C:\DOCUME~1\Platte\9620.bat
C:\DOCUME~1\Platte\9172.bat
C:\DOCUME~1\Platte\2373.bat
C:\DOCUME~1\Platte\n.bat
C:\DOCUME~1\Platte\x.bat
C:\DOCUME~1\Platte\5126.bat
C:\DOCUME~1\Platte\6391.bat
C:\DOCUME~1\Platte\4891.bat
C:\DOCUME~1\Platte\3592.bat
C:\VIRUSfighter
C:\DOCUME~1\Platte\8429.bat
C:\DOCUME~1\Platte\3138.bat
C:\DOCUME~1\Platte\st.exe
C:\DOCUME~1\Platte\6041.bat
C:\DOCUME~1\Platte\2938.bat
C:\DOCUME~1\Platte\5407.bat
C:\DOCUME~1\Platte\1233.bat
C:\WINDOWS\system32\5214.bat
C:\WINDOWS\system32\app.exe
C:\WINDOWS\system32\install.exe
C:\WINDOWS\system32\fbcacadda3_s.dll
C:\Program Files\WinPop

Klik daarna op de knop MoveIt onderaan.
Wanneer voltooid zal het een log aanmaken (********_******.log -- de * staat voor datum en tijd) in de volgende map: C:\_OTMoveIt\MovedFiles.
Post de inhoud daarvan in je volgende bericht met een nieuw hijackthis logje.

dit is het resultaat van die move it
nogmaals bedankt

C:\WINDOWS\system32\dzvdt.dll unregistered successfully.
C:\WINDOWS\system32\dzvdt.dll moved successfully.
C:\DOCUME~1\Platte\4823.bat moved successfully.
C:\DOCUME~1\Platte\8444.bat moved successfully.
C:\DOCUME~1\Platte\4644.bat moved successfully.
C:\DOCUME~1\Platte\5567.bat moved successfully.
C:\DOCUME~1\Platte\4460.bat moved successfully.
C:\DOCUME~1\Platte\1852.bat moved successfully.
C:\DOCUME~1\Platte\7214.bat moved successfully.
C:\DOCUME~1\Platte\6598.bat moved successfully.
C:\DOCUME~1\Platte\6586.bat moved successfully.
C:\DOCUME~1\Platte\1202.bat moved successfully.
C:\DOCUME~1\Platte\9784.bat moved successfully.
C:\DOCUME~1\Platte\6767.bat moved successfully.
C:\DOCUME~1\Platte\2181.bat moved successfully.
C:\DOCUME~1\Platte\5570.bat moved successfully.
C:\DOCUME~1\Platte\5371.bat moved successfully.
C:\DOCUME~1\Platte\install.exe moved successfully.
C:\DOCUME~1\Platte\8716.bat moved successfully.
C:\DOCUME~1\Platte\8591.bat moved successfully.
C:\DOCUME~1\Platte\8032.bat moved successfully.
C:\DOCUME~1\Platte\9811.bat moved successfully.
C:\DOCUME~1\Platte\2499.bat moved successfully.
C:\DOCUME~1\Platte\8176.bat moved successfully.
C:\DOCUME~1\Platte\8571.bat moved successfully.
C:\DOCUME~1\Platte\5707.bat moved successfully.
C:\DOCUME~1\Platte\4825.bat moved successfully.
C:\DOCUME~1\Platte\7691.bat moved successfully.
C:\DOCUME~1\Platte\4064.bat moved successfully.
C:\DOCUME~1\Platte\3334.bat moved successfully.
C:\DOCUME~1\Platte\9847.bat moved successfully.
C:\DOCUME~1\Platte\3871.bat moved successfully.
C:\DOCUME~1\Platte\9620.bat moved successfully.
C:\DOCUME~1\Platte\9172.bat moved successfully.
C:\DOCUME~1\Platte\2373.bat moved successfully.
C:\DOCUME~1\Platte\n.bat moved successfully.
File/Folder C:\DOCUME~1\Platte\x.bat not found.
C:\DOCUME~1\Platte\5126.bat moved successfully.
C:\DOCUME~1\Platte\6391.bat moved successfully.
C:\DOCUME~1\Platte\4891.bat moved successfully.
C:\DOCUME~1\Platte\3592.bat moved successfully.
C:\VIRUSfighter\Temp moved successfully.
C:\VIRUSfighter\Qtn\qtn moved successfully.
C:\VIRUSfighter\Qtn\Bin moved successfully.
C:\VIRUSfighter\Qtn moved successfully.
C:\VIRUSfighter\Nvc\Tasks moved successfully.
C:\VIRUSfighter\Nvc\Qarantin moved successfully.
C:\VIRUSfighter\Nvc\Config moved successfully.
Folder cleanup failed. C:\VIRUSfighter\Nvc\Bin scheduled to be deleted on reboot.
Folder cleanup failed. C:\VIRUSfighter\Nvc scheduled to be deleted on reboot.
C:\VIRUSfighter\Nse\Bin moved successfully.
C:\VIRUSfighter\Nse moved successfully.
C:\VIRUSfighter\Msg moved successfully.
C:\VIRUSfighter\Logs moved successfully.
C:\VIRUSfighter\Info moved successfully.
C:\VIRUSfighter\Download moved successfully.
C:\VIRUSfighter\Config moved successfully.
Folder cleanup failed. C:\VIRUSfighter\Bin scheduled to be deleted on reboot.
Folder cleanup failed. C:\VIRUSfighter scheduled to be deleted on reboot.
C:\DOCUME~1\Platte\8429.bat moved successfully.
C:\DOCUME~1\Platte\3138.bat moved successfully.
C:\DOCUME~1\Platte\st.exe moved successfully.
C:\DOCUME~1\Platte\6041.bat moved successfully.
C:\DOCUME~1\Platte\2938.bat moved successfully.
C:\DOCUME~1\Platte\5407.bat moved successfully.
C:\DOCUME~1\Platte\1233.bat moved successfully.
C:\WINDOWS\system32\5214.bat moved successfully.
C:\WINDOWS\system32\app.exe moved successfully.
C:\WINDOWS\system32\install.exe moved successfully.
LoadLibrary failed for C:\WINDOWS\system32\fbcacadda3_s.dll
C:\WINDOWS\system32\fbcacadda3_s.dll NOT unregistered.
C:\WINDOWS\system32\fbcacadda3_s.dll moved successfully.
C:\Program Files\WinPop moved successfully.

Created on 06/19/2007 13:33:38

de hijack this log


Logfile of HijackThis v1.99.1
Scan saved at 13:37:37, on 19/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\D-Link\Bluetooth Software\bin\btwdins.exe
C:\VIRUSfighter\Bin\Zanda.exe
C:\WINDOWS\system32\svchost.exe
C:\VIRUSfighter\bin\NJEEVES.EXE
C:\VIRUSfighter\Nvc\BIN\nipsvc.exe
C:\VIRUSfighter\Nvc\bin\nvcoas.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\VIRUSfighter\Nvc\bin\cclaw.exe
C:\VIRUSfighter\Nvc\BIN\NIP.EXE
C:\Program Files\WinPop\winpop.exe
C:\Program Files\D-Link\Bluetooth Software\BTTray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\SpamWeed\swengine.exe
C:\Program Files\SpamWeed\addinoe\addinoe.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\VIRUSfighter\bin\niu.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\Platte\LOCALS~1\Temp\Rar$EX04.032\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {45B0DF14-46D5-3B25-AB4F-19E33DE2F2EF} - C:\WINDOWS\system32\otvlrqr.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {96583968-F7F9-AF52-8809-F9ADA8B173C3} - C:\WINDOWS\system32\vfbrw.dll (file missing)
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [Norman ZANDA] C:\VIRUSfighter\bin\ZLH.EXE /LOAD /SPLASH
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKCU\..\Run: [WinPop] C:\Program Files\WinPop\winpop.exe
O4 - HKCU\..\Run: [Apln] "C:\WINDOWS\system32\STEM32~1\csrss.exe" -vt yazb
O4 - HKCU\..\Run: [Wxe] "C:\Program Files\s?stem32\?vchost.exe"
O4 - Startup: CCC.lnk = ?
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: SpamWeed.lnk = C:\Program Files\SpamWeed\swupinst.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\MICROS~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Openen in een nieuwe achtergrondtab - res://C:\Program Files\Windows Live Toolbar\Components\nl-be\msntabres.dll.mui/229?f7ad4e2a11ec4b1bbf02603d3fe38619
O8 - Extra context menu item: Openen in een nieuwe voorgrondtab - res://C:\Program Files\Windows Live Toolbar\Components\nl-be\msntabres.dll.mui/230?f7ad4e2a11ec4b1bbf02603d3fe38619
O8 - Extra context menu item: Verzenden naar &Bluetooth - C:\Program Files\D-Link\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\D-Link\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\D-Link\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\D-Link\Bluetooth Software\bin\btwdins.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\VIRUSfighter\Nvc\BIN\nipsvc.exe (file missing)
O23 - Service: Norman NJeeves - Unknown owner - C:\VIRUSfighter\bin\NJEEVES.EXE (file missing)
O23 - Service: Norman ZANDA - Unknown owner - C:\VIRUSfighter\Bin\Zanda.exe
O23 - Service: Norman Virus Control on-access component (nvcoas) - Unknown owner - C:\VIRUSfighter\Nvc\bin\nvcoas.exe (file missing)
O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Unknown owner - C:\VIRUSfighter\Nvc\BIN\NVCSCHED.EXE (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

* Open hijackthis en vink volgende regels aan:

O2 - BHO: (no name) - {45B0DF14-46D5-3B25-AB4F-19E33DE2F2EF} - C:\WINDOWS\system32\otvlrqr.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {96583968-F7F9-AF52-8809-F9ADA8B173C3} - C:\WINDOWS\system32\vfbrw.dll (file missing)
O4 - HKCU\..\Run: [WinPop] C:\Program Files\WinPop\winpop.exe
O4 - HKCU\..\Run: [Apln] "C:\WINDOWS\system32\STEM32~1\csrss.exe" -vt yazb
O4 - HKCU\..\Run: [Wxe] "C:\Program Files\s?stem32\?vchost.exe"

* Sluit dan alle vensters behalve hijackthis en klik op 'fix checked'

* Herstart dan je pc en vertel hoe alles verder werkt.

hij start terug normaal op en momenteel gaat internet explore niet van zelf open
alleen als ik opstart krijg ik nog altijd die foudmelding van ATi die had ik heerder al vermeld.
is alles dan terug normaal?
en zijn de virussen er dan af ?
mag ik nu die norman doen ?

ik heb voor de veiligheid nog eens een log gemaakt .

hartelijk bedankt

Logfile of HijackThis v1.99.1
Scan saved at 19:30:43, on 19/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\D-Link\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\rundll32.exe
C:\VIRUSfighter\bin\ZLH.EXE
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\D-Link\Bluetooth Software\BTTray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\SpamWeed\swengine.exe
C:\Program Files\SpamWeed\addinoe\addinoe.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\Platte\LOCALS~1\Temp\Rar$EX00.219\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [Norman ZANDA] C:\VIRUSfighter\bin\ZLH.EXE /LOAD /SPLASH
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - Startup: CCC.lnk = ?
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: SpamWeed.lnk = C:\Program Files\SpamWeed\swupinst.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\MICROS~1\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Openen in een nieuwe achtergrondtab - res://C:\Program Files\Windows Live Toolbar\Components\nl-be\msntabres.dll.mui/229?f7ad4e2a11ec4b1bbf02603d3fe38619
O8 - Extra context menu item: Openen in een nieuwe voorgrondtab - res://C:\Program Files\Windows Live Toolbar\Components\nl-be\msntabres.dll.mui/230?f7ad4e2a11ec4b1bbf02603d3fe38619
O8 - Extra context menu item: Verzenden naar &Bluetooth - C:\Program Files\D-Link\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\D-Link\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\D-Link\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\D-Link\Bluetooth Software\bin\btwdins.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\VIRUSfighter\Nvc\BIN\nipsvc.exe (file missing)
O23 - Service: Norman NJeeves - Unknown owner - C:\VIRUSfighter\bin\NJEEVES.EXE (file missing)
O23 - Service: Norman ZANDA - Unknown owner - C:\VIRUSfighter\Bin\Zanda.exe
O23 - Service: Norman Virus Control on-access component (nvcoas) - Unknown owner - C:\VIRUSfighter\Nvc\bin\nvcoas.exe (file missing)
O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Unknown owner - C:\VIRUSfighter\Nvc\BIN\NVCSCHED.EXE (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

Herinstalleer eens de software van Ati.

sorry hoor maar ik heb daar infeiten zelfs geen idee van hoe je dat moet doen en voor wat dat die ATi dient .

als je het niet erg vind zou je dan aub me kunnen vertellen hoe ik dat moet herinstalleren .
sorry hoor .

bedankt

jeske2006 zei:

sorry hoor maar ik heb daar infeiten zelfs geen idee van hoe je dat moet doen en voor wat dat die ATi dient .

als je het niet erg vind zou je dan aub me kunnen vertellen hoe ik dat moet herinstalleren .
sorry hoor .

bedankt

Klik om te vergroten...

Dat is de driver van je grafische kaart, post anders een topic in het software forum als je wat hulp daarbij nodig hebt.