Mededeling

Collapse
No announcement yet.

Vreemd virus

Collapse
X
Collapse
  •  
  • Page of 1
  • Filter
  • Tijd
  • Show
Clear All
new posts
Vorige template Volgende
  • #1

    Vreemd virus

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 14:37:20, on 24-12-2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\System32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\CTsvcCDA.EXE
    d:\Program Files\Eset\nod32krn.exe
    C:\WINDOWS\System32\svchost.exe
    d:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\WgaTray.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\WINDOWS\System32\LVCOMSX.EXE
    C:\Program Files\Logitech\Video\LogiTray.exe
    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\WINDOWS\System32\svchost.exe
    D:\Program Files\Hitman Pro\xphelper.exe
    C:\Program Files\MSN Messenger\MsnMsgr.Exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
    C:\Program Files\Logitech\Video\FxSvr2.exe
    D:\Program Files\Morpheus\Morpheus.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\Administrator\Bureaublad\HiJackThis.exe
    C:\Program Files\Java\jre1.6.0_01\bin\jucheck.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl/
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
    R3 - URLSearchHook: (no name) - {D73F49B6-B51B-4d32-A3B7-BD04B8342F53} - C:\Program Files\MorpheusBar\SrchAstt\1.bin\MBSRCAS.DLL (file missing)
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: SystemApp - {163D9676-810E-11DC-8314-0800200C9A66} - C:\Program Files\SystemApp\ie-improver.dll
    O2 - BHO: Info cache - {385AB8C6-FB22-4D17-8834-064E2BA0A6F0} - C:\Documents and Settings\All Users\Application Data\Microsoft\PCTools\pctools.dll (file missing)
    O2 - BHO: MorpheusToolbar BHO - {3F3714A1-89A4-46be-8AF3-D0C9D1FB03F9} - C:\Program Files\MorpheusBar\bar\1.bin\MORPHBAR.DLL (file missing)
    O2 - BHO: (no name) - {47A2A8C1-154D-48D8-B68E-F5AB52C46108} - C:\WINDOWS\system32\ddayw.dll (file missing)
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - d:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O2 - BHO: (no name) - {D73F49B1-B51B-4d32-A3B7-BD04B8342F53} - C:\Program Files\MorpheusBar\SrchAstt\1.bin\MBSRCAS.DLL (file missing)
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
    O3 - Toolbar: Morpheus Toolbar - {3F3714A9-89A4-46be-8AF3-D0C9D1FB03F9} - C:\Program Files\MorpheusBar\bar\1.bin\MORPHBAR.DLL (file missing)
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
    O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
    O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
    O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [RavAV] C:\WINDOWS\RavMonE.exe
    O4 - HKLM\..\Run: [3c1291de] rundll32.exe "C:\WINDOWS\system32\mafayuwy.dll",b
    O4 - HKLM\..\Run: [nod32kui] "d:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
    O4 - HKLM\..\Run: [Hitman Pro Expiration Helper] "d:\Program Files\Hitman Pro\xphelper.exe"
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Lokale service')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Netwerkservice')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Startup: IMVU.lnk = D:\heroes torrent\IMVU\IMVUClient.exe
    O4 - Startup: Morpheus.lnk = D:\Program Files\Morpheus\Morpheus.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)
    O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Administrator\Menu Start\Programma's\IMVU\Run IMVU.lnk (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by109fd.bay109.hotmail.msn.com/resources/MsnPUpld.cab
    O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab2.cab
    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://go.divx.com/plugin/DivXBrowserPlugin.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
    O18 - Protocol: bw+0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw+0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwg0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: offline-8876480 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O20 - AppInit_DLLs: C:\WINDOWS\system32\__c003D086.dat
    O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
    O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - d:\Program Files\Eset\nod32krn.exe
    O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - d:\Program Files\Spyware Doctor\svcntaux.exe
    O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - d:\Program Files\Spyware Doctor\swdsvc.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
    O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - d:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
    O24 - Desktop Component 0: (no name) - http://tn3-1.deviantart.com/fs6/300W/i/2005/091/4/5/Travelling_Without_moving_by_reiq.jpg

    --
    End of file - 22268 bytes

    Na een korte tijd loopt alles vast en ik mijn pc niet meer gebruiken, en moet ik weer opnieuw opstarten.
    Labels: Geen
    • Citaat
  • #2
    Hallo Spek,

    Welkom op Nucia!


    Ga naar Start -> Configuratiescherm -> Software
    Verwijder/de-installeer daar (indien aanwezig!) het volgende:
    • MorpheusBar
    • SrchAstt
    • Yahoo! Toolbar / Yahoo! Toolbar Helper
    • HitmanPro (en alle onderdelen van HitmanPro)


    Start HijackThis en kies voor 'Do a system scan only'.
    Als de scan compleet is vink dan alleen de onderstaande regels in HijackThis aan:
    • R3 - URLSearchHook: (no name) - {D73F49B6-B51B-4d32-A3B7-BD04B8342F53} - C:\Program Files\MorpheusBar\SrchAstt\1.bin\MBSRCAS.DLL (file missing)
    • O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
    • O2 - BHO: SystemApp - {163D9676-810E-11DC-8314-0800200C9A66} - C:\Program Files\SystemApp\ie-improver.dll
    • O2 - BHO: Info cache - {385AB8C6-FB22-4D17-8834-064E2BA0A6F0} - C:\Documents and Settings\All Users\Application Data\Microsoft\PCTools\pctools.dll (file missing)
    • O2 - BHO: MorpheusToolbar BHO - {3F3714A1-89A4-46be-8AF3-D0C9D1FB03F9} - C:\Program Files\MorpheusBar\bar\1.bin\MORPHBAR.DLL (file missing)
    • O2 - BHO: (no name) - {47A2A8C1-154D-48D8-B68E-F5AB52C46108} - C:\WINDOWS\system32\ddayw.dll (file missing)
    • O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    • O2 - BHO: (no name) - {D73F49B1-B51B-4d32-A3B7-BD04B8342F53} - C:\Program Files\MorpheusBar\SrchAstt\1.bin\MBSRCAS.DLL (file missing)
    • O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
    • O3 - Toolbar: Morpheus Toolbar - {3F3714A9-89A4-46be-8AF3-D0C9D1FB03F9} - C:\Program Files\MorpheusBar\bar\1.bin\MORPHBAR.DLL (file missing)
    • O4 - HKLM\..\Run: [RavAV] C:\WINDOWS\RavMonE.exe
    • O4 - HKLM\..\Run: [3c1291de] rundll32.exe "C:\WINDOWS\system32\mafayuwy.dll",b
    • O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)
    • O20 - AppInit_DLLs: C:\WINDOWS\system32\__c003D086.dat


    Sluit nu alle vensters behalve HijackThis zelf en klik op 'Fix checked'.
    Indien er een vraag komt over backups. Antwoord hierop met 'Ja', en sluit hierna HijackThis.

    Download [url=http://download.bleepingcomputer.com/sUBs/ComboFix.exe]Combofix en sla het op je bureaublad op.

    Open Combofix.exe en volg de instructies, aanvaard de disclaimer door "1"te typen.
    Tijdens het runnen van de fix, NIET in het venster klikken, want dit zal je pc doen vasthangen.

    Het is mogelijk dat de PC zichzelf automatisch opnieuw opstart. Wanneer de fix is gedaan en na mogelijk herstart zal een log (combofix.txt) openen. Plaats de inhoud van dit bericht in je volgende reactie samen met een nieuw logje van HijackThis.

    - Daniël
    • Citaat

    Comment

    • #3
      Heej , alvast bedankt voor de moeite, ik zie voor het eerst sinds tijden weer een fire wall tevoorschijn schieten na het rebooten van de computer ( of ik msn moet blokkeren of niet ).

      Van alle bestanden die ik moest verwijderen bij " software" kon ik alleen de bovenste verwijderen ( MorpheusBar )
      De rest stond niet in de lijst.

      Hier is de log van Combofix:
      - wat een lap tekst -
      ComboFix 07-12-21.4 - Administrator 2007-12-27 11:08:42.1 - FAT32x86
      Microsoft Windows XP Professional 5.1.2600.2.1252.1.1043.18.200 [GMT 1:00]
      Gestart vanuit: C:\Documents and Settings\Administrator\Bureaublad\ComboFix.exe
      * Nieuw herstelpunt werd aangemaakt
      .

      (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
      .

      C:\Documents and Settings\Administrator\ravmonlog
      C:\Program Files\internet explorer\iekey.dll
      C:\Program Files\SystemApp
      C:\Program Files\SystemApp\bho.dat
      C:\Program Files\SystemApp\er.dat
      C:\Program Files\SystemApp\uninstall.exe
      C:\WINDOWS\cookies.ini
      C:\WINDOWS\KB611311.log
      C:\WINDOWS\system32\__c00EB5AC.dat
      C:\WINDOWS\system32\~.exe
      C:\WINDOWS\system32\bwhjyyyl.ini
      C:\WINDOWS\system32\d3d1caps.srg
      C:\WINDOWS\system32\lyyyjhwb.dll
      C:\WINDOWS\system32\mafayuwy.dll
      C:\WINDOWS\system32\mprmsgse.axz
      C:\WINDOWS\system32\mscpx32r.det
      C:\WINDOWS\system32\mvwsbvmj.dll
      C:\WINDOWS\system32\sysdl132.exe
      C:\WINDOWS\system32\wyadd.bak1
      C:\WINDOWS\system32\wyadd.bak2
      C:\WINDOWS\system32\wyadd.ini
      C:\WINDOWS\system32\ywuyafam.ini

      .
      ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

      .
      -------\LEGACY_DOMAINSERVICE


      (((((((((((((((((((( Bestanden Gemaakt van 2007-11-27 to 2007-12-27 ))))))))))))))))))))))))))))))
      .

      2007-12-27 09:19 . 2007-12-27 09:19 <DIR> d--hs---- C:\FOUND.044
      2007-12-25 23:57 . 2007-12-25 23:57 <DIR> d--hs---- C:\FOUND.043
      2007-12-25 14:39 . 2007-12-25 14:39 <DIR> d--hs---- C:\FOUND.042
      2007-12-25 14:04 . 2007-12-25 14:04 <DIR> d--hs---- C:\FOUND.041
      2007-12-24 12:09 . 2007-12-24 12:09 <DIR> d--hs---- C:\FOUND.040
      2007-12-23 12:09 . 2007-12-23 12:09 <DIR> d--hs---- C:\FOUND.039
      2007-12-22 12:35 . 2007-12-22 12:35 <DIR> d--hs---- C:\FOUND.038
      2007-12-22 11:14 . 2007-12-22 11:14 <DIR> d--hs---- C:\FOUND.037
      2007-12-21 20:05 . 2007-12-21 20:05 <DIR> d--hs---- C:\FOUND.036
      2007-12-20 18:49 . 2007-12-27 11:02 143 --a------ C:\WINDOWS\system32\mcrh.tmp
      2007-12-17 15:18 . 2007-12-17 15:18 <DIR> d--hs---- C:\FOUND.035
      2007-12-13 19:14 . 2007-12-13 19:14 <DIR> d--hs---- C:\FOUND.034
      2007-12-11 23:23 . 2007-12-23 11:32 54,156 --ah----- C:\WINDOWS\QTFont.qfn
      2007-12-11 23:23 . 2007-12-11 23:23 1,409 --a------ C:\WINDOWS\QTFont.for
      2007-12-11 18:42 . 2007-12-11 18:42 <DIR> d--hs---- C:\FOUND.033
      2007-12-09 14:57 . 2007-12-09 14:57 <DIR> d--hs---- C:\FOUND.032
      2007-12-09 13:32 . 2007-12-09 13:32 <DIR> d--hs---- C:\FOUND.031
      2007-12-09 12:18 . 2007-12-09 12:18 <DIR> d--hs---- C:\FOUND.030
      2007-12-08 19:21 . 2007-12-08 19:21 <DIR> d--hs---- C:\FOUND.029
      2007-12-08 18:13 . 2007-12-08 18:13 <DIR> d--hs---- C:\FOUND.028
      2007-12-03 16:37 . 2007-12-03 16:37 <DIR> d--hs---- C:\FOUND.027
      2007-12-02 19:32 . 2007-12-02 19:32 <DIR> d--hs---- C:\FOUND.026
      2007-12-01 18:04 . 2007-12-01 18:04 <DIR> d--hs---- C:\FOUND.025
      2007-12-01 15:46 . 2007-12-01 15:46 <DIR> d--hs---- C:\FOUND.024
      2007-11-30 18:25 . 2007-11-30 18:25 <DIR> d--hs---- C:\FOUND.023
      2007-11-29 22:18 . 2007-11-29 22:18 <DIR> d--hs---- C:\FOUND.022
      2007-11-29 19:52 . 2007-11-29 19:52 <DIR> d--hs---- C:\FOUND.021
      2007-11-29 19:10 . 2007-11-29 19:10 <DIR> d--hs---- C:\FOUND.020
      2007-11-28 23:30 . 2007-11-28 23:30 <DIR> d--hs---- C:\FOUND.019
      2007-11-27 22:38 . 2007-11-27 22:38 <DIR> d--hs---- C:\FOUND.018
      2007-11-27 20:30 . 2007-11-27 20:30 <DIR> d--hs---- C:\FOUND.017
      2007-11-27 19:30 . 2007-11-27 19:30 <DIR> d--hs---- C:\FOUND.016

      .
      ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2007-11-14 07:29 450,560 ------w C:\WINDOWS\system32\dllcache\jscript.dll
      2007-11-13 10:25 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
      2007-10-31 09:58 --------- d-----w C:\Program Files\Image-Line
      2007-10-30 10:20 3,079,680 ------w C:\WINDOWS\system32\dllcache\mshtml.dll
      2007-10-29 22:45 1,291,776 ----a-w C:\WINDOWS\system32\quartz.dll
      2007-10-29 22:45 1,291,776 ------w C:\WINDOWS\system32\dllcache\quartz.dll
      2007-10-27 21:55 --------- d-----w C:\Documents and Settings\Administrator\Application Data\PC Tools
      2007-10-27 21:53 --------- d-----w C:\Documents and Settings\All Users\Application Data\Webroot
      2007-10-27 21:52 --------- d-----w C:\Documents and Settings\Administrator\Application Data\Webroot
      2007-10-27 21:47 512,096 ----a-w C:\WINDOWS\system32\drivers\amon.sys
      2007-10-27 21:47 298,104 ----a-w C:\WINDOWS\system32\imon.dll
      2007-10-27 21:47 15,424 ----a-w C:\WINDOWS\system32\drivers\nod32drv.sys
      2007-10-27 10:17 10,816 ----a-w C:\WINDOWS\system32\orakbexk.dll
      2007-10-27 10:14 10,816 ----a-w C:\WINDOWS\system32\dxpeuojl.dll
      2007-10-26 09:22 10,816 ----a-w C:\WINDOWS\system32\iiieqcqe.dll
      2007-10-25 16:57 8,501,760 ------w C:\WINDOWS\system32\dllcache\shell32.dll
      2007-10-25 14:28 520,192 ----a-w C:\WINDOWS\system32\AssassinsCreed 2.scr
      2007-10-25 14:27 520,192 ----a-w C:\WINDOWS\system32\AssassinsCreed 1.scr
      2007-10-20 05:01 227,328 ----a-w C:\WINDOWS\system32\wmasf.dll
      2007-10-20 05:01 227,328 ----a-w C:\WINDOWS\system32\dllcache\wmasf.dll
      2007-10-11 06:14 96,768 ------w C:\WINDOWS\system32\dllcache\inseng.dll
      2007-10-11 06:14 662,528 ------w C:\WINDOWS\system32\dllcache\wininet.dll
      2007-10-11 06:14 616,960 ------w C:\WINDOWS\system32\dllcache\urlmon.dll
      2007-10-11 06:14 55,808 ------w C:\WINDOWS\system32\dllcache\extmgr.dll
      2007-10-11 06:14 532,480 ------w C:\WINDOWS\system32\dllcache\mstime.dll
      2007-10-11 06:14 474,624 ------w C:\WINDOWS\system32\dllcache\shlwapi.dll
      2007-10-11 06:14 449,024 ------w C:\WINDOWS\system32\dllcache\mshtmled.dll
      2007-10-11 06:14 39,424 ------w C:\WINDOWS\system32\dllcache\pngfilt.dll
      2007-10-11 06:14 357,888 ------w C:\WINDOWS\system32\dllcache\dxtmsft.dll
      2007-10-11 06:14 251,392 ------w C:\WINDOWS\system32\dllcache\iepeers.dll
      2007-10-11 06:14 205,312 ------w C:\WINDOWS\system32\dllcache\dxtrans.dll
      2007-10-11 06:14 16,384 ------w C:\WINDOWS\system32\dllcache\jsproxy.dll
      2007-10-11 06:14 151,552 ------w C:\WINDOWS\system32\dllcache\cdfview.dll
      2007-10-11 06:14 146,432 ------w C:\WINDOWS\system32\dllcache\msrating.dll
      2007-10-11 06:14 1,494,528 ------w C:\WINDOWS\system32\dllcache\shdocvw.dll
      2007-10-11 06:14 1,057,280 ------w C:\WINDOWS\system32\dllcache\danim.dll
      2007-10-11 06:14 1,023,488 ------w C:\WINDOWS\system32\dllcache\browseui.dll
      2007-10-10 11:16 18,432 ----a-w C:\WINDOWS\system32\dllcache\iedw.exe
      2006-11-09 11:51 1 ----a-w C:\Documents and Settings\Administrator\SI.bin
      2005-05-11 22:36 12,288 ----a-w C:\WINDOWS\Fonts\RandFont.dll
      .

      ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      REGEDIT4
      *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "LDM"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" [2005-11-22 13:51]
      "LogitechSoftwareUpdate"="C:\Program Files\Logitech\Video\ManifestEngine.exe" [2004-10-08 12:06]
      "MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:54]
      "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 09:03]
      "Creative Detector"="C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" [2004-12-02 18:23]

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-03-23 21:10]
      "LVCOMSX"="C:\WINDOWS\System32\LVCOMSX.EXE" [2004-10-08 11:52]
      "LogitechVideoRepair"="C:\Program Files\Logitech\Video\ISStart.exe" [2004-10-08 12:31]
      "LogitechVideoTray"="C:\Program Files\Logitech\Video\LogiTray.exe" [2004-10-08 12:24]
      "Symantec NetDriver Monitor"="C:\PROGRA~1\SYMNET~1\SNDMon.exe"
      "HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-05-11 23:12]
      "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 12:50]
      "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 03:43]
      "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-07-26 12:44]
      "nod32kui"="d:\Program Files\Eset\nod32kui.exe" [2007-10-27 21:47]
      "Hitman Pro Expiration Helper"="d:\Program Files\Hitman Pro\xphelper.exe" [2007-01-30 13:41]

      [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
      "CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-04 09:03]
      "LDM"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" [2005-11-22 13:51]

      C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\
      Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [1999-02-17 21:05:56]
      HP Image Zone Fast Start.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe [2005-05-12 00:49:24]
      Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2006-01-12 20:01:49]
      Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe [2005-11-22 13:51:55]

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]
      @=""

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]
      @=""

      S3 mdxgthkn;mdxgthkn;C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\mdxgthkn.sys
      S3 nocashio;nocashio;C:\WINDOWS\system32\drivers\nocashio.sys [2007-06-25 17:47]

      .
      Inhoud van de 'Gedeelde Taken' map
      "2007-12-27 10:11:02 C:\WINDOWS\Tasks\Symantec NetDetect.job"
      - C:\Program Files\Symantec\LiveUpdate\NDetect.exe
      .
      **************************************************************************

      catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2007-12-27 11:12:45
      Windows 5.1.2600 Service Pack 2 FAT NTAPI

      scannen van verborgen processen ...

      scannen van verborgen autostart items ...

      scannen van verborgen bestanden ...

      Scan succesvol afgerond
      verborgen bestanden: 0

      **************************************************************************
      .
      --------------------- DLLs Loaded Under Running Processes ---------------------

      PROCESS: C:\WINDOWS\system32\lsass.exe [5.01.2600.2180]
      -> d:\Program Files\Eset\pr_imon.dll
      .
      Voltooingstijd: 2007-12-27 11:13:57 - machine was rebooted
      .
      2007-12-21 19:22:15 --- E O F ---

      En hier is het log van HijackThis

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 11:21, on 2007-12-27
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\System32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\CTsvcCDA.EXE
      d:\Program Files\Eset\nod32krn.exe
      C:\WINDOWS\System32\svchost.exe
      d:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\WgaTray.exe
      C:\WINDOWS\system32\wscntfy.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\WINDOWS\System32\LVCOMSX.EXE
      C:\Program Files\Logitech\Video\LogiTray.exe
      C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
      C:\Program Files\QuickTime\qttask.exe
      D:\Program Files\Hitman Pro\xphelper.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
      C:\Program Files\Logitech\Video\FxSvr2.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\Java\jre1.6.0_01\bin\jucheck.exe
      C:\Documents and Settings\Administrator\Bureaublad\HiJackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl/
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - d:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
      O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
      O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
      O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [nod32kui] "d:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
      O4 - HKLM\..\Run: [Hitman Pro Expiration Helper] "d:\Program Files\Hitman Pro\xphelper.exe"
      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Lokale service')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Netwerkservice')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
      O4 - Startup: IMVU.lnk = D:\heroes torrent\IMVU\IMVUClient.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
      O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
      O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
      O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)
      O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Administrator\Menu Start\Programma's\IMVU\Run IMVU.lnk (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by109fd.bay109.hotmail.msn.com/resources/MsnPUpld.cab
      O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab2.cab
      O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://go.divx.com/plugin/DivXBrowserPlugin.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O18 - Protocol: bw+0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw+0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: bwg0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwg0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: offline-8876480 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
      O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
      O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
      O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - d:\Program Files\Eset\nod32krn.exe
      O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - d:\Program Files\Spyware Doctor\svcntaux.exe
      O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - d:\Program Files\Spyware Doctor\swdsvc.exe
      O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
      O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
      O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - d:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
      O24 - Desktop Component 0: (no name) - http://tn3-1.deviantart.com/fs6/300W/i/2005/091/4/5/Travelling_Without_moving_by_reiq.jpg

      --
      End of file - 20554 bytes





      Nu moet ik er wel bij vertellen dat na het verwijderen van de hijackthis bestanden, en tijdens het downloaden van combofix mijn pc vastliep.
      Ik weet neit of dit gevolgen heeft of iets dergelijks.

      MvG
      ik
      • Citaat

      Comment

      • #4
        Hallo Spek,

        Het lijkt erop dat het goed is gegaan hoor

        Start HijackThis en kies voor 'Do a system scan only'.
        Als de scan compleet is vink dan alleen de onderstaande regels in HijackThis aan:
        • O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
        • O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)

        Sluit nu alle vensters behalve HijackThis zelf en klik op 'Fix checked'.
        Indien er een vraag komt over backups. Antwoord hierop met 'Ja', en sluit hierna HijackThis.

        Open vervolgens een nieuw kladblok bestand.

        Kopieer en plak daarin de onderstaande dik gedrukte blauwe tekst.
        Ga naar 'Bestand' -> 'Opslaan als..' en sla het vervolgens op je bureaublad op als CFScript.txt.
        File::
        C:\WINDOWS\system32\mcrh.tmp
        C:\WINDOWS\QTFont.qfn
        C:\WINDOWS\QTFont.for
        C:\WINDOWS\system32\orakbexk.dll
        C:\WINDOWS\system32\dxpeuojl.dll
        C:\WINDOWS\system32\iiieqcqe.dll

        Folder::
        C:\FOUND.044
        C:\FOUND.043
        C:\FOUND.042
        C:\FOUND.041
        C:\FOUND.040
        C:\FOUND.039
        C:\FOUND.038
        C:\FOUND.037
        C:\FOUND.036
        C:\FOUND.035
        C:\FOUND.034
        C:\FOUND.033
        C:\FOUND.032
        C:\FOUND.031
        C:\FOUND.030
        C:\FOUND.029
        C:\FOUND.028
        C:\FOUND.027
        C:\FOUND.026
        C:\FOUND.025
        C:\FOUND.024
        C:\FOUND.023
        C:\FOUND.022
        C:\FOUND.021
        C:\FOUND.020
        C:\FOUND.019
        C:\FOUND.018
        C:\FOUND.017
        C:\FOUND.016

        Driver::
        mdxgthkn
        nocashio
        Sleep CFScript.txt in ComboFix.exe zoals getoond in onderstaand voorbeeld:



        Dit zal ComboFix doen herstarten. Start opnieuw op als dat gevraagd wordt.
        Post na herstart de inhoud van de Combofix.txt in je volgende antwoord samen met een nieuw logje van HijackThis.

        - Daniël
        • Citaat

        Comment

        • #5
          combofix log =

          ComboFix 07-12-21.4 - Administrator 2007-12-27 18:48:47.2 - FAT32x86
          Microsoft Windows XP Professional 5.1.2600.2.1252.1.1043.18.241 [GMT 1:00]
          Gestart vanuit: C:\Documents and Settings\Administrator\Bureaublad\ComboFix.exe
          Command switches used :: C:\Documents and Settings\Administrator\Bureaublad\CFScript.txt
          * Nieuw herstelpunt werd aangemaakt

          FILE
          C:\WINDOWS\QTFont.for
          C:\WINDOWS\QTFont.qfn
          C:\WINDOWS\system32\dxpeuojl.dll
          C:\WINDOWS\system32\iiieqcqe.dll
          C:\WINDOWS\system32\mcrh.tmp
          C:\WINDOWS\system32\orakbexk.dll
          .

          (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
          .

          C:\FOUND.016
          C:\FOUND.016\FILE0000.CHK
          C:\FOUND.016\FILE0001.CHK
          C:\FOUND.016\FILE0002.CHK
          C:\FOUND.016\FILE0003.CHK
          C:\FOUND.017
          C:\FOUND.017\FILE0000.CHK
          C:\FOUND.018
          C:\FOUND.018\FILE0000.CHK
          C:\FOUND.019
          C:\FOUND.019\FILE0000.CHK
          C:\FOUND.020
          C:\FOUND.020\FILE0000.CHK
          C:\FOUND.020\FILE0001.CHK
          C:\FOUND.020\FILE0002.CHK
          C:\FOUND.020\FILE0003.CHK
          C:\FOUND.020\FILE0004.CHK
          C:\FOUND.020\FILE0005.CHK
          C:\FOUND.020\FILE0006.CHK
          C:\FOUND.020\FILE0007.CHK
          C:\FOUND.020\FILE0008.CHK
          C:\FOUND.020\FILE0009.CHK
          C:\FOUND.020\FILE0010.CHK
          C:\FOUND.020\FILE0011.CHK
          C:\FOUND.020\FILE0012.CHK
          C:\FOUND.020\FILE0013.CHK
          C:\FOUND.020\FILE0014.CHK
          C:\FOUND.020\FILE0015.CHK
          C:\FOUND.020\FILE0016.CHK
          C:\FOUND.020\FILE0017.CHK
          C:\FOUND.021
          C:\FOUND.021\FILE0000.CHK
          C:\FOUND.021\FILE0001.CHK
          C:\FOUND.022
          C:\FOUND.022\FILE0000.CHK
          C:\FOUND.022\FILE0001.CHK
          C:\FOUND.023
          C:\FOUND.023\FILE0000.CHK
          C:\FOUND.024
          C:\FOUND.024\FILE0000.CHK
          C:\FOUND.025
          C:\FOUND.025\FILE0000.CHK
          C:\FOUND.026
          C:\FOUND.026\FILE0000.CHK
          C:\FOUND.026\FILE0001.CHK
          C:\FOUND.026\FILE0002.CHK
          C:\FOUND.026\FILE0003.CHK
          C:\FOUND.026\FILE0004.CHK
          C:\FOUND.026\FILE0005.CHK
          C:\FOUND.026\FILE0006.CHK
          C:\FOUND.026\FILE0007.CHK
          C:\FOUND.026\FILE0008.CHK
          C:\FOUND.026\FILE0009.CHK
          C:\FOUND.027
          C:\FOUND.027\FILE0000.CHK
          C:\FOUND.027\FILE0001.CHK
          C:\FOUND.027\FILE0002.CHK
          C:\FOUND.028
          C:\FOUND.028\FILE0000.CHK
          C:\FOUND.028\FILE0001.CHK
          C:\FOUND.029
          C:\FOUND.029\FILE0000.CHK
          C:\FOUND.030
          C:\FOUND.030\FILE0000.CHK
          C:\FOUND.030\FILE0001.CHK
          C:\FOUND.031
          C:\FOUND.031\FILE0000.CHK
          C:\FOUND.032
          C:\FOUND.032\FILE0000.CHK
          C:\FOUND.033
          C:\FOUND.033\FILE0000.CHK
          C:\FOUND.034
          C:\FOUND.034\FILE0000.CHK
          C:\FOUND.035
          C:\FOUND.035\FILE0000.CHK
          C:\FOUND.036
          C:\FOUND.036\FILE0000.CHK
          C:\FOUND.036\FILE0001.CHK
          C:\FOUND.036\FILE0002.CHK
          C:\FOUND.036\FILE0003.CHK
          C:\FOUND.036\FILE0004.CHK
          C:\FOUND.036\FILE0005.CHK
          C:\FOUND.036\FILE0006.CHK
          C:\FOUND.036\FILE0007.CHK
          C:\FOUND.036\FILE0008.CHK
          C:\FOUND.036\FILE0009.CHK
          C:\FOUND.036\FILE0010.CHK
          C:\FOUND.036\FILE0011.CHK
          C:\FOUND.036\FILE0012.CHK
          C:\FOUND.036\FILE0013.CHK
          C:\FOUND.036\FILE0014.CHK
          C:\FOUND.037
          C:\FOUND.037\FILE0000.CHK
          C:\FOUND.037\FILE0001.CHK
          C:\FOUND.037\FILE0002.CHK
          C:\FOUND.038
          C:\FOUND.038\FILE0000.CHK
          C:\FOUND.039
          C:\FOUND.039\FILE0000.CHK
          C:\FOUND.039\FILE0001.CHK
          C:\FOUND.040
          C:\FOUND.040\FILE0000.CHK
          C:\FOUND.041
          C:\FOUND.041\FILE0000.CHK
          C:\FOUND.042
          C:\FOUND.042\FILE0000.CHK
          C:\FOUND.043
          C:\FOUND.043\FILE0000.CHK
          C:\FOUND.043\FILE0001.CHK
          C:\FOUND.044
          C:\FOUND.044\FILE0000.CHK
          C:\WINDOWS\QTFont.for
          C:\WINDOWS\QTFont.qfn
          C:\WINDOWS\system32\dxpeuojl.dll
          C:\WINDOWS\system32\iiieqcqe.dll
          C:\WINDOWS\system32\mcrh.tmp
          C:\WINDOWS\system32\orakbexk.dll

          .
          ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

          .
          -------\LEGACY_MDXGTHKN
          -------\LEGACY_NOCASHIO
          -------\mdxgthkn
          -------\nocashio


          (((((((((((((((((((( Bestanden Gemaakt van 2007-11-27 to 2007-12-27 ))))))))))))))))))))))))))))))
          .

          Geen nieuwe bestanden aangemaakt in deze periode

          .
          ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
          .
          2007-11-14 07:29 450,560 ------w C:\WINDOWS\system32\dllcache\jscript.dll
          2007-11-13 10:25 20,480 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys
          2007-10-31 09:58 --------- d-----w C:\Program Files\Image-Line
          2007-10-30 10:20 3,079,680 ------w C:\WINDOWS\system32\dllcache\mshtml.dll
          2007-10-29 22:45 1,291,776 ----a-w C:\WINDOWS\system32\quartz.dll
          2007-10-29 22:45 1,291,776 ------w C:\WINDOWS\system32\dllcache\quartz.dll
          2007-10-27 21:55 --------- d-----w C:\Documents and Settings\Administrator\Application Data\PC Tools
          2007-10-27 21:53 --------- d-----w C:\Documents and Settings\All Users\Application Data\Webroot
          2007-10-27 21:52 --------- d-----w C:\Documents and Settings\Administrator\Application Data\Webroot
          2007-10-27 21:47 512,096 ----a-w C:\WINDOWS\system32\drivers\amon.sys
          2007-10-27 21:47 298,104 ----a-w C:\WINDOWS\system32\imon.dll
          2007-10-27 21:47 15,424 ----a-w C:\WINDOWS\system32\drivers\nod32drv.sys
          2007-10-25 16:57 8,501,760 ------w C:\WINDOWS\system32\dllcache\shell32.dll
          2007-10-25 14:28 520,192 ----a-w C:\WINDOWS\system32\AssassinsCreed 2.scr
          2007-10-25 14:27 520,192 ----a-w C:\WINDOWS\system32\AssassinsCreed 1.scr
          2007-10-20 05:01 227,328 ----a-w C:\WINDOWS\system32\wmasf.dll
          2007-10-20 05:01 227,328 ----a-w C:\WINDOWS\system32\dllcache\wmasf.dll
          2007-10-11 06:14 96,768 ------w C:\WINDOWS\system32\dllcache\inseng.dll
          2007-10-11 06:14 662,528 ------w C:\WINDOWS\system32\dllcache\wininet.dll
          2007-10-11 06:14 616,960 ------w C:\WINDOWS\system32\dllcache\urlmon.dll
          2007-10-11 06:14 55,808 ------w C:\WINDOWS\system32\dllcache\extmgr.dll
          2007-10-11 06:14 532,480 ------w C:\WINDOWS\system32\dllcache\mstime.dll
          2007-10-11 06:14 474,624 ------w C:\WINDOWS\system32\dllcache\shlwapi.dll
          2007-10-11 06:14 449,024 ------w C:\WINDOWS\system32\dllcache\mshtmled.dll
          2007-10-11 06:14 39,424 ------w C:\WINDOWS\system32\dllcache\pngfilt.dll
          2007-10-11 06:14 357,888 ------w C:\WINDOWS\system32\dllcache\dxtmsft.dll
          2007-10-11 06:14 251,392 ------w C:\WINDOWS\system32\dllcache\iepeers.dll
          2007-10-11 06:14 205,312 ------w C:\WINDOWS\system32\dllcache\dxtrans.dll
          2007-10-11 06:14 16,384 ------w C:\WINDOWS\system32\dllcache\jsproxy.dll
          2007-10-11 06:14 151,552 ------w C:\WINDOWS\system32\dllcache\cdfview.dll
          2007-10-11 06:14 146,432 ------w C:\WINDOWS\system32\dllcache\msrating.dll
          2007-10-11 06:14 1,494,528 ------w C:\WINDOWS\system32\dllcache\shdocvw.dll
          2007-10-11 06:14 1,057,280 ------w C:\WINDOWS\system32\dllcache\danim.dll
          2007-10-11 06:14 1,023,488 ------w C:\WINDOWS\system32\dllcache\browseui.dll
          2007-10-10 11:16 18,432 ----a-w C:\WINDOWS\system32\dllcache\iedw.exe
          2006-11-09 11:51 1 ----a-w C:\Documents and Settings\Administrator\SI.bin
          2005-05-11 22:36 12,288 ----a-w C:\WINDOWS\Fonts\RandFont.dll
          .

          ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
          .
          .
          REGEDIT4
          *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

          [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
          "LDM"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" [2005-11-22 13:51]
          "LogitechSoftwareUpdate"="C:\Program Files\Logitech\Video\ManifestEngine.exe" [2004-10-08 12:06]
          "MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:54]
          "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 09:03]
          "Creative Detector"="C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" [2004-12-02 18:23]

          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
          "ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-03-23 21:10]
          "LVCOMSX"="C:\WINDOWS\System32\LVCOMSX.EXE" [2004-10-08 11:52]
          "LogitechVideoRepair"="C:\Program Files\Logitech\Video\ISStart.exe" [2004-10-08 12:31]
          "LogitechVideoTray"="C:\Program Files\Logitech\Video\LogiTray.exe" [2004-10-08 12:24]
          "Symantec NetDriver Monitor"="C:\PROGRA~1\SYMNET~1\SNDMon.exe"
          "HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" [2005-05-11 23:12]
          "NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 12:50]
          "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 03:43]
          "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-07-26 12:44]
          "nod32kui"="d:\Program Files\Eset\nod32kui.exe" [2007-10-27 21:47]
          "Hitman Pro Expiration Helper"="d:\Program Files\Hitman Pro\xphelper.exe" [2007-01-30 13:41]

          [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
          "CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-04 09:03]
          "LDM"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" [2005-11-22 13:51]

          C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\
          Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [1999-02-17 21:05:56]
          HP Image Zone Fast Start.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe [2005-05-12 00:49:24]
          Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2006-01-12 20:01:49]
          Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe [2005-11-22 13:51:55]

          [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice]
          @=""

          [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice]
          @=""


          .
          Inhoud van de 'Gedeelde Taken' map
          "2007-12-27 17:51:02 C:\WINDOWS\Tasks\Symantec NetDetect.job"
          - C:\Program Files\Symantec\LiveUpdate\NDetect.exe
          .
          **************************************************************************

          catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
          Rootkit scan 2007-12-27 18:52:57
          Windows 5.1.2600 Service Pack 2 FAT NTAPI

          scannen van verborgen processen ...

          scannen van verborgen autostart items ...

          scannen van verborgen bestanden ...

          Scan succesvol afgerond
          verborgen bestanden: 0

          **************************************************************************
          .
          --------------------- DLLs Loaded Under Running Processes ---------------------

          PROCESS: C:\WINDOWS\system32\lsass.exe [5.01.2600.2180]
          -> d:\Program Files\Eset\pr_imon.dll
          .
          Voltooingstijd: 2007-12-27 18:53:59 - machine was rebooted
          C:\ComboFix2.txt ... 2007-12-27 11:14
          .
          2007-12-21 19:22:15 --- E O F ---

          Hijackthis log:

          Logfile of Trend Micro HijackThis v2.0.2
          Scan saved at 18:59, on 2007-12-27
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
          Boot mode: Normal

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\System32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\System32\Ati2evxx.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\WINDOWS\system32\CTsvcCDA.EXE
          d:\Program Files\Eset\nod32krn.exe
          C:\WINDOWS\System32\svchost.exe
          d:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
          C:\WINDOWS\System32\Ati2evxx.exe
          C:\WINDOWS\Explorer.EXE
          C:\WINDOWS\system32\wscntfy.exe
          C:\WINDOWS\system32\WgaTray.exe
          C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
          C:\WINDOWS\System32\LVCOMSX.EXE
          C:\Program Files\Logitech\Video\LogiTray.exe
          C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
          C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
          C:\Program Files\QuickTime\qttask.exe
          D:\Program Files\Hitman Pro\xphelper.exe
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\MSN Messenger\MsnMsgr.Exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
          C:\Program Files\Logitech\Video\FxSvr2.exe
          C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
          C:\WINDOWS\system32\wuauclt.exe
          C:\Program Files\Mozilla Firefox\firefox.exe
          C:\Program Files\Java\jre1.6.0_01\bin\jucheck.exe
          C:\Documents and Settings\Administrator\Bureaublad\HiJackThis.exe

          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl/
          R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
          O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
          O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - d:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
          O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
          O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
          O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
          O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
          O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
          O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
          O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
          O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
          O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
          O4 - HKLM\..\Run: [nod32kui] "d:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
          O4 - HKLM\..\Run: [Hitman Pro Expiration Helper] "d:\Program Files\Hitman Pro\xphelper.exe"
          O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
          O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
          O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
          O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R
          O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Lokale service')
          O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Netwerkservice')
          O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
          O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
          O4 - Startup: IMVU.lnk = D:\heroes torrent\IMVU\IMVUClient.exe
          O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
          O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
          O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
          O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
          O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Administrator\Menu Start\Programma's\IMVU\Run IMVU.lnk (file missing)
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
          O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
          O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
          O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
          O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by109fd.bay109.hotmail.msn.com/resources/MsnPUpld.cab
          O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab2.cab
          O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://go.divx.com/plugin/DivXBrowserPlugin.cab
          O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
          O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
          O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
          O18 - Protocol: bw+0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw+0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw-0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw-0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw00 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw00s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw10 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw10s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw20 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw20s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw30 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw30s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw40 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw40s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw50 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw50s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw60 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw60s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw70 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw70s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw80 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw80s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw90 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw90s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwa0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwa0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwb0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwb0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwc0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwc0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwd0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwd0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwe0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwe0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwf0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwf0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
          O18 - Protocol: bwg0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwg0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwh0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwh0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwi0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwi0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwj0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwj0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwk0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwk0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwl0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwl0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwm0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwm0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwn0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwn0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwo0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwo0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwp0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwp0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwq0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwq0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwr0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwr0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bws0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bws0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwt0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwt0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwu0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwu0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwv0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwv0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bww0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bww0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwx0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwx0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwy0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwy0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwz0 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwz0s - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: offline-8876480 - {5880A8C4-8C05-4432-9DBB-F8772DF15CAB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
          O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
          O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
          O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
          O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
          O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
          O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - d:\Program Files\Eset\nod32krn.exe
          O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - d:\Program Files\Spyware Doctor\svcntaux.exe
          O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - d:\Program Files\Spyware Doctor\swdsvc.exe
          O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
          O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
          O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - d:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
          O24 - Desktop Component 0: (no name) - http://tn3-1.deviantart.com/fs6/300W/i/2005/091/4/5/Travelling_Without_moving_by_reiq.jpg

          --
          End of file - 20329 bytes
          • Citaat

          Comment

          • #6
            Hi,

            Ziet er weer aardig goed uit, heb je nog problemen?

            - Dani&#235;l
            • Citaat

            Comment

            • #7
              nee, hij loopt minder snel vast enzo, ff defragmenteren en goed schoonmaken , that schould do the trick.

              heel erg bedankt voor je hulp
              • Citaat

              Comment

              • #8
                Nog gelukt?
                • Citaat

                Comment

                • #9
                  jup.

                  en nu door naar familie -> vrienden -> grote tent op het dorp -> cafe -> bed , dus totziens
                  • Citaat

                  Comment

                  • #10
                    Fijne jaarwisseling!
                    • Citaat

                    Comment

                    Vorige template Volgende
                    Sorry, you are not authorized to view this page
                    Working...
                    X