dutchgirl

Alles loopt nu soepel, heel erg bedankt, sluit maar af.

Hallo, het opstarten gaat redelijk snel, maar nog wel met http search.conduit.com als automatische opstart. Daar lijkt de pc dan ook even op te blijven hangen, als ik dan in de historie een ander internetadres aanklik gaat ie daar redelijk snel naar toe. Ik kan proberen via configuratiescherm de startpagina te wijzigen in iets anders, of heb je andere suggesties. Zegt dat search conduit jou iets, lijkt me toch niet van microsoft? Oftewel, zijn nu echt alle wormen en virussen end weg? Tot zover heel erg bedankt alvast.

ComboFix 09-07-02.02 - XXXX 03-07-2009 12:06.2 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.3.1252.31.1043.18.511.24 [GMT 2:00] Gestart vanuit: c:\documents and settings\xxxx\Bureaublad\ComboFix.exe gebruikte Opdracht switches :: c:\documents and settings\xxxx\Bureaublad\CFScript.txt..txt AV: G DATA TotalCare 2009 *On-access scanning disabled* (Updated) {71310606-6F3B-49F2-9A81-8315AA75FBB3} FW: G DATA Persoonlijke Firewall *enabled* {6E6F4BA6-C07D-443F-A130-0A57DA59A082} . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\program files\Conduit c:\program files\Conduit\Community Alerts\Alert.dll c:\program files\ToggleDU c:\program files\ToggleDU\INSTALL.LOG c:\program files\ToggleDU\tbTogg.dll c:\program files\ToggleDU\ToggleDUToolbarHelper.exe c:\program files\ToggleDU\toolbar.cfg c:\program files\ToggleDU\UNWISE.EXE . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_PFSVGAE -------\Service_pfsvgae (((((((((((((((((((( Bestanden Gemaakt van 2009-06-03 to 2009-07-03 )))))))))))))))))))))))))))))) . 2009-06-30 21:07 . 2009-06-30 21:07 68424 ----a-w- c:\windows\system32\drivers\GRD.sys 2009-06-30 20:04 . 2009-06-30 20:39 48712 ----a-w- c:\windows\system32\drivers\MiniIcpt.sys 2009-06-30 20:02 . 2009-06-30 20:38 32328 ----a-w- c:\windows\system32\drivers\HookCentre.sys 2009-06-30 20:01 . 2009-06-30 20:01 22272 ----a-w- c:\windows\system32\drivers\GDNdisIc.sys 2009-06-30 20:01 . 2009-06-30 20:38 51016 ----a-w- c:\windows\system32\drivers\GDTdiIcpt.sys 2009-06-30 20:00 . 2009-06-30 20:00 -------- d-sh--w- C:\#GDATA.Trash.Store# 2009-06-30 19:58 . 2009-06-30 20:23 -------- d-----w- c:\documents and settings\All Users\Application Data\G DATA 2009-06-30 19:58 . 2009-06-30 19:59 -------- d-----w- c:\program files\Common Files\G DATA 2009-06-30 19:58 . 2009-06-30 19:58 -------- d-----w- c:\program files\G DATA 2009-06-30 19:34 . 2009-06-30 19:34 -------- d-----w- c:\documents and settings\xxxx\Local Settings\Application Data\Downloaded Installations 2009-06-30 05:19 . 2008-10-16 12:06 208744 ----a-w- c:\windows\system32\muweb.dll 2009-06-29 20:44 . 2009-07-03 09:57 -------- d--h--r- c:\documents and settings\xxxx\Onlangs geopend 2009-06-29 20:31 . 2009-06-29 20:31 -------- d-----w- c:\documents and settings\xxxx\Local Settings\Application Data\Conduit 2009-06-29 20:31 . 2009-06-29 20:58 -------- d-----w- c:\documents and settings\xxxx\Local Settings\Application Data\ToggleDU 2009-06-29 20:31 . 2009-06-29 20:31 -------- d-----w- c:\program files\CCleaner 2009-06-29 18:21 . 2009-06-29 18:21 -------- d-----w- c:\documents and settings\xxxx\Application Data\Malwarebytes 2009-06-29 18:21 . 2009-06-17 09:27 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2009-06-29 18:20 . 2009-06-29 18:20 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes 2009-06-29 18:20 . 2009-06-17 09:27 19096 ----a-w- c:\windows\system32\drivers\mbam.sys 2009-06-29 18:20 . 2009-06-29 18:21 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2009-06-29 17:31 . 2009-07-03 10:04 -------- d-----w- c:\documents and settings\xxxx\Local Settings\Application Data\CyberDefender 2009-06-29 16:49 . 2009-06-29 16:49 -------- d-----w- c:\program files\Trend Micro 2009-06-29 16:22 . 2009-06-29 16:40 -------- d-----w- c:\documents and settings\xxxx\Application Data\Error Fix 2009-06-21 06:59 . 2009-06-21 06:59 -------- d-----w- c:\documents and settings\xxxx\Tracing 2009-06-21 06:25 . 2009-06-21 06:32 -------- d-----w- c:\program files\Microsoft 2009-06-21 06:02 . 2009-06-21 06:02 -------- d-----w- c:\program files\Common Files\Windows Live 2009-06-07 17:36 . 2009-06-07 17:36 -------- d-----w- c:\documents and settings\xxxx\Local Settings\Application Data\PCHealth . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-07-03 10:20 . 2007-09-07 08:16 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP 2009-06-30 19:44 . 2007-09-30 05:53 -------- d-----w- c:\program files\ESET 2009-06-29 20:09 . 2004-11-10 20:35 59696 ----a-w- c:\documents and settings\xxxx\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2009-06-29 20:09 . 2008-07-06 11:01 -------- d-----w- c:\program files\DivX 2009-06-29 19:43 . 2008-12-09 17:43 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help 2009-06-29 19:30 . 2008-02-17 17:52 -------- d-----w- c:\program files\SurfRight 2009-06-29 19:22 . 2007-10-06 16:09 2560 ----a-w- c:\windows\system32\drivers\mchInjDrv.sys 2009-06-28 13:52 . 2009-04-10 05:37 -------- d-----w- c:\documents and settings\xxxx\Application Data\dvdcss 2009-06-23 21:12 . 2004-12-11 09:26 3810 ----a-w- c:\documents and settings\xxxx\Application Data\wklnhst.dat 2009-06-21 07:37 . 2008-03-02 15:56 -------- d-----w- c:\program files\Windows Live 2009-06-21 07:35 . 2009-04-09 17:33 -------- d-----w- c:\program files\MAGIX 2009-06-21 07:34 . 2009-04-09 17:34 -------- d-----w- c:\documents and settings\All Users\Application Data\MAGIX 2009-06-21 06:31 . 2008-03-02 16:09 -------- d-----w- c:\program files\Windows Live Toolbar 2009-05-07 15:34 . 2004-10-09 04:01 347136 ----a-w- c:\windows\system32\localspl.dll 2009-04-29 04:49 . 2004-10-09 04:02 827392 ----a-w- c:\windows\system32\wininet.dll 2009-04-29 04:49 . 2004-10-09 04:01 78336 ----a-w- c:\windows\system32\ieencode.dll 2009-04-19 19:51 . 2004-10-09 04:02 1847296 ----a-w- c:\windows\system32\win32k.sys 2009-04-17 15:30 . 2004-10-09 04:02 510980 ----a-w- c:\windows\system32\perfh013.dat 2009-04-17 15:30 . 2004-10-09 04:02 91950 ----a-w- c:\windows\system32\perfc013.dat 2009-04-15 14:55 . 2004-10-09 04:02 585216 ----a-w- c:\windows\system32\rpcrt4.dll 2009-04-12 08:30 . 2009-04-12 08:30 152576 ----a-w- c:\documents and settings\xxxx\Application Data\Sun\Java\jre1.6.0_13\lzma.dll 2009-04-12 07:50 . 2009-04-12 07:50 75048 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 8.1.1.10\SetupAdmin.exe 2009-04-10 05:58 . 2009-04-10 05:57 4710 ----a-r- c:\documents and settings\xxxx\Application Data\Microsoft\Installer\{B99AA278-063C-44A8-AF92-1C4A35DCE9E1}\_4ae13d6c.exe 2009-04-10 05:58 . 2009-04-10 05:57 4710 ----a-r- c:\documents and settings\xxxx\Application Data\Microsoft\Installer\{B99AA278-063C-44A8-AF92-1C4A35DCE9E1}\_294823.exe 2009-04-10 05:58 . 2009-04-10 05:57 4710 ----a-r- c:\documents and settings\xxxx\Application Data\Microsoft\Installer\{B99AA278-063C-44A8-AF92-1C4A35DCE9E1}\_18be6784.exe 2009-04-09 17:27 . 2009-04-09 17:27 47360 ----a-w- c:\windows\system32\drivers\pcouffin.sys 2009-04-09 17:27 . 2009-04-09 17:27 47360 ----a-w- c:\documents and settings\xxxx\Application Data\pcouffin.sys 2009-04-09 17:27 . 2009-04-09 17:27 47360 ----a-w- c:\documents and settings\xxxx\Application Data\pcouffin.sys 2009-02-24 19:34 . 2009-02-24 19:34 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll 2009-02-24 19:34 . 2009-02-24 19:34 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll . ((((((((((((((((((((((((((((( SnapShot@2009-07-02_21.45.54 ))))))))))))))))))))))))))))))))))))))))) . + 2009-07-03 10:18 . 2009-07-03 10:18 16384 c:\windows\Temp\Perflib_Perfdata_188.dat . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A26503FE-B3B8-4910-A9DC-9CBD25C6B8D6}] 2009-06-29 17:28 3962184 ----a-w- c:\documents and settings\xxxx\Local Settings\Application Data\CyberDefender\cdmyidd.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-05-21 68856] "RegistryMechanic"="c:\program files\Registry Mechanic\RegMech.exe" [2009-06-23 2836376] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "UserFaultCheck"="c:\windows\system32\dumprep 0 -u" [X] "IntelliPoint"="c:\program files\Microsoft IntelliPoint\point32.exe" [2003-05-15 163840] "MULTIMEDIA KEYBOARD"="c:\program files\Netropa\Multimedia Keyboard\MMKeybd.exe" [2003-09-30 425984] "HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb11.exe" [2004-04-06 172032] "HPHUPD06"="c:\program files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe" [2004-06-07 49152] "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2004-02-12 49152] "HP Component Manager"="c:\program files\HP\hpcoretech\hpcmpmgr.exe" [2004-05-12 241664] "HPHmon06"="c:\windows\system32\hphmon06.exe" [2004-06-07 659456] "Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe" [2007-03-22 63712] "AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2009-02-06 177472] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-01-05 413696] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-04-02 342312] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888] "GDFirewallTray"="c:\program files\G DATA\TotalCare\Firewall\GDFirewallTray.exe" [2008-09-19 1037992] "G DATA AntiVirus Trayapplication"="c:\program files\G DATA\TotalCare\AVKTray\AVKTray.exe" [2008-11-17 957000] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] "DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-08-24 437160] c:\documents and settings\xxxx\Menu Start\Programma's\Opstarten\ OneNote 2007 Schermopname en Snel starten.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2007-12-7 101440] c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\ HP Digital Imaging Monitor.lnk - c:\program files\HP\digital imaging\bin\hpqtra08.exe [2004-5-28 241664] Sitecom USB Wireless LAN Utility.lnk - c:\program files\Sitecom Europe BV\Sitecom WL-113 Utility\SiteComUSB.exe [2007-4-29 3477504] Snelstart HP Image Zone.lnk - c:\program files\HP\digital imaging\bin\hpqthb08.exe [2004-5-28 53248] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend] @="Service" [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusOverride"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Messenger\\msmsgs.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\LimeWire\\LimeWire.exe"= "c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"= "c:\\Program Files\\Bonjour\\mDNSResponder.exe"= "c:\\Program Files\\iTunes\\iTunes.exe"= "c:\\Program Files\\Java\\jre6\\bin\\java.exe"= R0 GDNdisIc;GDNdisIc;c:\windows\system32\drivers\GDNdisIc.sys [30-6-2009 22:01 22272] R1 GRD;G DATA Rootkit Detector Driver;c:\windows\system32\drivers\GRD.sys [30-6-2009 23:07 68424] R1 mchInjDrv;madCodeHook DLL injection driver;c:\windows\system32\drivers\mchInjDrv.sys [6-10-2007 18:09 2560] R1 msikbd2k;Multimedia Keyboard Filter Driver;c:\windows\system32\drivers\Msikbd2k.sys [25-2-2005 15:54 6656] R2 AVKProxy;G DATA AntiVirus Proxy;c:\program files\Common Files\G DATA\AVKProxy\AVKProxy.exe [19-9-2008 14:46 1016392] R2 AVKService;G DATA Schedule;c:\program files\G DATA\TotalCare\AVK\AVKService.exe [19-9-2008 14:46 386120] R2 AVKWCtl;AntiVirus-bewaker;c:\program files\G DATA\TotalCare\AVK\AVKWCtl.exe [14-8-2008 8:55 1185496] R2 GDTdiInterceptor;GDTdiInterceptor;c:\windows\system32\drivers\GDTdiIcpt.sys [30-6-2009 22:01 51016] R2 nhksrv;Netropa NHK Server;c:\program files\Netropa\Multimedia Keyboard\nhksrv.exe [25-2-2005 15:54 28672] R2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [3-11-2006 19:19 13592] R3 CONAN;CONAN;c:\windows\system32\drivers\o2mmb.sys [27-10-2004 9:28 191092] R3 GDFwSvc;G DATA Persoonlijke Firewall;c:\program files\G DATA\TotalCare\Firewall\GDFwSvc.exe [15-8-2008 14:51 1407976] R3 GDMnIcpt;GDMnIcpt;c:\windows\system32\drivers\MiniIcpt.sys [30-6-2009 22:04 48712] R3 HookCentre;HookCentre;c:\windows\system32\drivers\HookCentre.sys [30-6-2009 22:02 32328] S1 ctredr15.sys;ctredr15.sys;\??\c:\windows\system32\drivers\ctredr15.sys --> c:\windows\system32\drivers\ctredr15.sys [?] S1 ctredrv.sys;ctredrv.sys; [x] S2 gupdate1c9b621f59694c0;Google Updateservice (gupdate1c9b621f59694c0);c:\program files\Google\Update\GoogleUpdate.exe [5-4-2009 21:08 133104] S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files\MAGIX\Common\Database\bin\fbserver.exe [9-4-2009 19:44 1527900] S3 G DATA Backup Service;G DATA Backup Service;c:\program files\G DATA\TotalCare\AVKBackup\AVKBackupService.exe [22-8-2008 21:50 880200] S3 G DATA Tuner Service;G DATA Tuner Service;c:\program files\G DATA\TotalCare\AVKTuner\AVKTunerService.exe [19-8-2008 14:38 925768] S3 MbxStby;MbxStby;c:\windows\system32\drivers\MbxStby.sys [27-10-2004 9:28 6100] S3 ZD1211U(Sitecom);Sitecom Wireless Network USB Adapter Driver(Sitecom);c:\windows\system32\drivers\ZD1211U.sys [29-4-2007 16:04 233472] S4 UPnPService;UPnPService;c:\program files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe [9-4-2009 19:46 544768] . Inhoud van de 'Gedeelde Taken' map 2009-06-26 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34] 2009-07-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2009-04-05 19:08] 2009-07-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2009-04-05 19:08] 2009-07-03 c:\windows\Tasks\MP Scheduled Scan.job - c:\program files\Windows Defender\MpCmdRun.exe [2006-11-03 17:20] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2088433 uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7 mStart Page = hxxp://www.shareware-ne.com/nl/index.php?rvs=hompag uInternet Connection Wizard,ShellNext = hxxp://connect.adslvandaag.nl/ uInternet Settings,ProxyOverride = *.local IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2009-07-03 12:18 Windows 5.1.2600 Service Pack 3 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... c:\windows\TEMP\TMP0000000C3A0A2E0AFF8F9E17 524288 bytes executable Scan succesvol afgerond verborgen bestanden: 1 ************************************************************************** . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- [HKEY_USERS\S-1-5-21-3727300539-1845347935-658281404-1006\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*] "??"=hex:04,0d,c9,2c,04,ae,29,e4,15,f4,10,28,9d,5a,80,b3,6a,d7,ca,c8,c5,e4,e6, 1f,0c,5e,9b,f6,e0,1e,fc,d0,cb,86,6f,21,f7,da,7a,08,d9,37,a8,a8,42,14,b2,d1,\ "??"=hex:12,55,04,68,0e,3e,78,ae,6b,4d,91,4e,a8,9b,e1,fe . --------------------- DLLs Geladen Onder Lopende Processen --------------------- - - - - - - - > 'explorer.exe'(2432) c:\windows\system32\WPDShServiceObj.dll c:\windows\system32\PortableDeviceTypes.dll c:\windows\system32\PortableDeviceApi.dll . ------------------------ Andere Aktieve Processen ------------------------ . c:\windows\system32\ati2evxx.exe c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe c:\program files\Bonjour\mDNSResponder.exe c:\program files\Java\jre6\bin\jqs.exe c:\program files\Netropa\Multimedia Keyboard\Traymon.exe c:\program files\Netropa\Onscreen Display\osd.exe c:\program files\iPod\bin\iPodService.exe c:\program files\HP\digital imaging\bin\hpqgalry.exe . ************************************************************************** . Voltooingstijd: 2009-07-03 12:34 - machine werd herstart ComboFix-quarantined-files.txt 2009-07-03 10:34 ComboFix2.txt 2009-07-02 22:05 Pre-Run: 33.928.933.376 bytes beschikbaar Post-Run: 33.840.017.408 bytes beschikbaar 226 --- E O F --- 2009-07-03 01:44

Alles gedaan zoals je voorstelde, hieronder de logs ComboFix 09-07-02.02 - xxxx 02-07-2009 23:28.1 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.3.1252.31.1043.18.511.72 [GMT 2:00] Gestart vanuit: c:\documents and settings\xxxx\Bureaublad\ComboFix.exe AV: G DATA TotalCare 2009 *On-access scanning disabled* (Updated) {71310606-6F3B-49F2-9A81-8315AA75FBB3} FW: G DATA Persoonlijke Firewall *enabled* {6E6F4BA6-C07D-443F-A130-0A57DA59A082} * Nieuw herstelpunt werd aangemaakt . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\documents and settings\elly\Application Data\inst.exe C:\test.txt c:\windows\cdmxtras c:\windows\system32\Ati2evxx.dll c:\windows\system32\cache329 c:\windows\system32\cache329\B_103900.htm c:\windows\system32\cache329\B_116800.htm c:\windows\system32\cache329\B_121000.htm c:\windows\system32\cache329\B_137900.htm c:\windows\system32\cache329\B_145700.htm c:\windows\system32\cache329\B_145900.htm c:\windows\system32\cache329\B_201100.htm c:\windows\system32\cache329\B_203800.htm c:\windows\system32\cache329\B_209400.htm c:\windows\system32\cache329\B_215700.htm c:\windows\system32\cache329\B_239500.htm c:\windows\system32\cache329\B_247800.htm c:\windows\system32\cache329\B_247900.htm c:\windows\system32\cache329\B_286500.htm c:\windows\system32\cache329\B_329_0_0_106800.htm c:\windows\system32\cache329\B_329_0_0_107400.htm c:\windows\system32\cache329\B_329_0_0_389300.gif c:\windows\system32\cache329\B_329_0_1_389800.htm c:\windows\system32\cache329\B_329_0_1_389800.swf c:\windows\system32\cache329\B_329_0_1_509500.htm c:\windows\system32\cache329\B_329_0_2_522000.htm c:\windows\system32\cache329\B_329_0_2_522000.swf c:\windows\system32\cache329\B_329_0_2_531800.gif c:\windows\system32\cache329\B_329_0_2_568800.gif c:\windows\system32\cache329\B_329_0_2_572000.gif c:\windows\system32\cache329\B_329_0_2_572300.gif c:\windows\system32\cache329\B_329_0_2_572500.gif c:\windows\system32\cache329\B_329_0_2_572800.gif c:\windows\system32\cache329\B_329_0_2_576200.gif c:\windows\system32\cache329\B_329_0_2_577200.gif c:\windows\system32\cache329\B_329_0_2_578900.gif c:\windows\system32\cache329\B_329_0_2_580000.gif c:\windows\system32\cache329\B_329_0_2_582500.gif c:\windows\system32\cache329\B_329_0_2_657500.gif c:\windows\system32\cache329\B_329_0_3_485900.gif c:\windows\system32\cache329\B_329_0_3_615800.gif c:\windows\system32\cache329\B_329_0_4_266700.gif c:\windows\system32\cache329\B_329_0_4_335600.htm c:\windows\system32\cache329\B_329_0_4_386600.gif c:\windows\system32\cache329\B_329_0_4_388100.gif c:\windows\system32\cache329\B_329_0_4_444900.gif c:\windows\system32\cache329\B_329_0_4_485900.gif c:\windows\system32\cache329\B_329_1_0_449200.htm c:\windows\system32\cache329\B_329_1_0_449600.htm c:\windows\system32\cache329\B_329_1_0_454300.htm c:\windows\system32\cache329\B_329_2_0_106800.htm c:\windows\system32\cache329\B_329_2_0_107400.htm c:\windows\system32\cache329\B_329_2_0_389300.gif c:\windows\system32\cache329\B_329_2_1_389800.htm c:\windows\system32\cache329\B_329_2_1_389800.swf c:\windows\system32\cache329\B_329_2_1_509500.htm c:\windows\system32\cache329\B_329_2_2_522000.htm c:\windows\system32\cache329\B_329_2_2_522000.swf c:\windows\system32\cache329\B_329_2_2_531800.gif c:\windows\system32\cache329\B_329_2_2_568800.gif c:\windows\system32\cache329\B_329_2_2_572000.gif c:\windows\system32\cache329\B_329_2_2_572300.gif c:\windows\system32\cache329\B_329_2_2_572500.gif c:\windows\system32\cache329\B_329_2_2_572800.gif c:\windows\system32\cache329\B_329_2_2_576200.gif c:\windows\system32\cache329\B_329_2_2_577200.gif c:\windows\system32\cache329\B_329_2_2_578900.gif c:\windows\system32\cache329\B_329_2_2_580000.gif c:\windows\system32\cache329\B_329_2_2_582500.gif c:\windows\system32\cache329\B_329_2_2_657500.gif c:\windows\system32\cache329\B_329_2_3_485900.gif c:\windows\system32\cache329\B_329_2_3_615800.gif c:\windows\system32\cache329\B_329_2_4_335600.htm c:\windows\system32\cache329\B_329_2_4_386600.gif c:\windows\system32\cache329\B_329_2_4_388100.gif c:\windows\system32\cache329\B_329_2_4_444900.gif c:\windows\system32\cache329\B_329_2_4_485900.gif c:\windows\system32\cache329\B_329_3_0_106800.htm c:\windows\system32\cache329\B_329_3_0_107400.htm c:\windows\system32\cache329\B_329_3_0_389300.gif c:\windows\system32\cache329\B_329_3_1_389800.htm c:\windows\system32\cache329\B_329_3_1_389800.swf c:\windows\system32\cache329\B_329_3_1_509500.htm c:\windows\system32\cache329\B_329_3_2_522000.htm c:\windows\system32\cache329\B_329_3_2_522000.swf c:\windows\system32\cache329\B_329_3_2_531800.gif c:\windows\system32\cache329\B_329_3_2_568800.gif c:\windows\system32\cache329\B_329_3_2_572000.gif c:\windows\system32\cache329\B_329_3_2_572300.gif c:\windows\system32\cache329\B_329_3_2_572500.gif c:\windows\system32\cache329\B_329_3_2_572800.gif c:\windows\system32\cache329\B_329_3_2_576200.gif c:\windows\system32\cache329\B_329_3_2_577200.gif c:\windows\system32\cache329\B_329_3_2_578900.gif c:\windows\system32\cache329\B_329_3_2_580000.gif c:\windows\system32\cache329\B_329_3_2_582500.gif c:\windows\system32\cache329\B_329_3_2_657500.gif c:\windows\system32\cache329\B_329_3_3_485900.gif c:\windows\system32\cache329\B_329_3_3_615800.gif c:\windows\system32\cache329\B_329_3_4_266700.gif c:\windows\system32\cache329\B_329_3_4_335600.htm c:\windows\system32\cache329\B_329_3_4_386600.gif c:\windows\system32\cache329\B_329_3_4_388100.gif c:\windows\system32\cache329\B_329_3_4_444900.gif c:\windows\system32\cache329\B_329_3_4_485900.gif c:\windows\system32\cache329\B_329_4_0_104000.htm c:\windows\system32\cache329\B_329_4_0_111600.htm c:\windows\system32\cache329\B_329_4_0_152400.htm c:\windows\system32\cache329\B_329_4_0_155300.htm c:\windows\system32\cache329\B_329_4_0_164100.htm c:\windows\system32\cache329\B_329_4_0_171300.htm c:\windows\system32\cache329\B_329_4_0_242500.gif c:\windows\system32\cache329\B_329_4_0_242500.htm c:\windows\system32\cache329\B_329_4_0_255800.htm c:\windows\system32\cache329\B_329_4_0_333900.htm c:\windows\system32\cache329\B_329_4_0_359100.htm c:\windows\system32\cache329\B_329_4_0_389900.htm c:\windows\system32\cache329\B_329_4_0_390100.htm c:\windows\system32\cache329\B_329_4_0_390400.htm c:\windows\system32\cache329\B_329_4_0_391200.htm c:\windows\system32\cache329\B_329_4_0_391400.htm c:\windows\system32\cache329\B_329_4_0_444800.htm c:\windows\system32\cache329\B_329_4_0_444800.jpg c:\windows\system32\cache329\B_329_4_0_469600.htm c:\windows\system32\cache329\B_329_4_1_172700.htm c:\windows\system32\cache329\B_329_4_1_391400.htm c:\windows\system32\cache329\B_329_4_1_469600.htm c:\windows\system32\cache329\B_329_4_1_502400.htm c:\windows\system32\cache329\B_329_4_1_510400.htm c:\windows\system32\cache329\B_329_4_1_535600.gif c:\windows\system32\cache329\B_329_4_1_535600.htm c:\windows\system32\cache329\B_329_4_1_603700.htm c:\windows\system32\cache329\B_329_4_1_640500.htm c:\windows\system32\cache329\B_329_4_2_171300.htm c:\windows\system32\cache329\B_329_4_2_333900.htm c:\windows\system32\cache329\B_329_4_2_390100.htm c:\windows\system32\cache329\B_329_4_2_391200.htm c:\windows\system32\cache329\B_329_4_2_391400.htm c:\windows\system32\cache329\B_329_4_2_516300.htm c:\windows\system32\cache329\B_329_4_2_516300.swf c:\windows\system32\cache329\B_329_4_2_526700.gif c:\windows\system32\cache329\B_329_4_2_526700.htm c:\windows\system32\cache329\B_329_4_2_529300.gif c:\windows\system32\cache329\B_329_4_2_529300.htm c:\windows\system32\cache329\B_329_4_2_534700.gif c:\windows\system32\cache329\B_329_4_2_534700.htm c:\windows\system32\cache329\B_329_4_2_536900.htm c:\windows\system32\cache329\B_329_4_2_541500.htm c:\windows\system32\cache329\B_329_4_2_541500.swf c:\windows\system32\cache329\B_329_4_2_543500.htm c:\windows\system32\cache329\B_329_4_2_543500.swf c:\windows\system32\cache329\B_329_4_2_544300.htm c:\windows\system32\cache329\B_329_4_2_544300.swf c:\windows\system32\cache329\B_329_4_3_172500.htm c:\windows\system32\cache329\B_329_4_3_172600.htm c:\windows\system32\cache329\B_329_4_3_172700.htm c:\windows\system32\cache329\B_329_4_3_216100.htm c:\windows\system32\cache329\B_329_4_3_242500.gif c:\windows\system32\cache329\B_329_4_3_242500.htm c:\windows\system32\cache329\B_329_4_3_246800.htm c:\windows\system32\cache329\B_329_4_3_254400.htm c:\windows\system32\cache329\B_329_4_3_307700.htm c:\windows\system32\cache329\B_329_4_3_336900.htm c:\windows\system32\cache329\B_329_4_3_366600.htm c:\windows\system32\cache329\B_329_4_3_369500.htm c:\windows\system32\cache329\B_329_4_3_374000.htm c:\windows\system32\cache329\B_329_4_3_385900.htm c:\windows\system32\cache329\B_329_4_3_391400.htm c:\windows\system32\cache329\B_329_4_3_444800.htm c:\windows\system32\cache329\B_329_4_3_444800.jpg c:\windows\system32\cache329\B_329_4_4_246800.htm c:\windows\system32\cache329\B_329_4_4_254400.htm c:\windows\system32\cache329\B_329_4_4_255800.htm c:\windows\system32\cache329\B_329_4_4_273100.htm c:\windows\system32\cache329\B_329_4_4_276800.htm c:\windows\system32\cache329\B_329_4_4_307700.htm c:\windows\system32\cache329\B_329_4_4_313300.gif c:\windows\system32\cache329\B_329_4_4_313300.htm c:\windows\system32\cache329\B_329_4_4_336900.htm c:\windows\system32\cache329\B_329_4_4_369200.htm c:\windows\system32\cache329\B_329_4_4_393100.htm c:\windows\system32\cache329\B_329_4_4_523900.htm c:\windows\system32\cache329\B_331000.htm c:\windows\system32\cache329\B_453700.htm c:\windows\system32\cache329\B_466200.htm c:\windows\system32\cache329\B_478400.htm c:\windows\system32\cache329\t_B_103900.htm c:\windows\system32\cache329\t_B_116800.htm c:\windows\system32\cache329\t_B_121000.htm c:\windows\system32\cache329\t_B_137900.htm c:\windows\system32\cache329\t_B_145700.htm c:\windows\system32\cache329\t_B_145900.htm c:\windows\system32\cache329\t_B_201100.htm c:\windows\system32\cache329\t_B_203800.htm c:\windows\system32\cache329\t_B_209400.htm c:\windows\system32\cache329\t_B_215700.htm c:\windows\system32\cache329\t_B_239500.htm c:\windows\system32\cache329\t_B_247800.htm c:\windows\system32\cache329\t_B_247900.htm c:\windows\system32\cache329\t_B_286500.htm c:\windows\system32\cache329\t_B_329_0_0_106800.htm c:\windows\system32\cache329\t_B_329_0_0_107400.htm c:\windows\system32\cache329\t_B_329_0_4_335600.htm c:\windows\system32\cache329\t_B_329_1_0_449200.htm c:\windows\system32\cache329\t_B_329_1_0_449600.htm c:\windows\system32\cache329\t_B_329_1_0_454300.htm c:\windows\system32\cache329\t_B_329_2_0_106800.htm c:\windows\system32\cache329\t_B_329_2_0_107400.htm c:\windows\system32\cache329\t_B_329_2_4_335600.htm c:\windows\system32\cache329\t_B_329_3_0_106800.htm c:\windows\system32\cache329\t_B_329_3_0_107400.htm c:\windows\system32\cache329\t_B_329_3_4_335600.htm c:\windows\system32\cache329\t_B_329_4_0_104000.htm c:\windows\system32\cache329\t_B_329_4_0_111600.htm c:\windows\system32\cache329\t_B_329_4_0_152400.htm c:\windows\system32\cache329\t_B_329_4_0_155300.htm c:\windows\system32\cache329\t_B_329_4_0_164100.htm c:\windows\system32\cache329\t_B_329_4_0_171300.htm c:\windows\system32\cache329\t_B_329_4_0_255800.htm c:\windows\system32\cache329\t_B_329_4_0_333900.htm c:\windows\system32\cache329\t_B_329_4_0_359100.htm c:\windows\system32\cache329\t_B_329_4_0_389900.htm c:\windows\system32\cache329\t_B_329_4_0_390100.htm c:\windows\system32\cache329\t_B_329_4_0_390400.htm c:\windows\system32\cache329\t_B_329_4_0_391200.htm c:\windows\system32\cache329\t_B_329_4_0_391400.htm c:\windows\system32\cache329\t_B_329_4_0_469600.htm c:\windows\system32\cache329\t_B_329_4_1_172700.htm c:\windows\system32\cache329\t_B_329_4_1_391400.htm c:\windows\system32\cache329\t_B_329_4_1_469600.htm c:\windows\system32\cache329\t_B_329_4_1_502400.htm c:\windows\system32\cache329\t_B_329_4_1_510400.htm c:\windows\system32\cache329\t_B_329_4_1_603700.htm c:\windows\system32\cache329\t_B_329_4_1_640500.htm c:\windows\system32\cache329\t_B_329_4_2_171300.htm c:\windows\system32\cache329\t_B_329_4_2_333900.htm c:\windows\system32\cache329\t_B_329_4_2_390100.htm c:\windows\system32\cache329\t_B_329_4_2_391200.htm c:\windows\system32\cache329\t_B_329_4_2_391400.htm c:\windows\system32\cache329\t_B_329_4_2_536900.htm c:\windows\system32\cache329\t_B_329_4_3_172500.htm c:\windows\system32\cache329\t_B_329_4_3_172600.htm c:\windows\system32\cache329\t_B_329_4_3_172700.htm c:\windows\system32\cache329\t_B_329_4_3_216100.htm c:\windows\system32\cache329\t_B_329_4_3_246800.htm c:\windows\system32\cache329\t_B_329_4_3_254400.htm c:\windows\system32\cache329\t_B_329_4_3_307700.htm c:\windows\system32\cache329\t_B_329_4_3_336900.htm c:\windows\system32\cache329\t_B_329_4_3_366600.htm c:\windows\system32\cache329\t_B_329_4_3_369500.htm c:\windows\system32\cache329\t_B_329_4_3_374000.htm c:\windows\system32\cache329\t_B_329_4_3_385900.htm c:\windows\system32\cache329\t_B_329_4_3_391400.htm c:\windows\system32\cache329\t_B_329_4_4_246800.htm c:\windows\system32\cache329\t_B_329_4_4_254400.htm c:\windows\system32\cache329\t_B_329_4_4_255800.htm c:\windows\system32\cache329\t_B_329_4_4_273100.htm c:\windows\system32\cache329\t_B_329_4_4_276800.htm c:\windows\system32\cache329\t_B_329_4_4_307700.htm c:\windows\system32\cache329\t_B_329_4_4_336900.htm c:\windows\system32\cache329\t_B_329_4_4_369200.htm c:\windows\system32\cache329\t_B_329_4_4_393100.htm c:\windows\system32\cache329\t_B_329_4_4_523900.htm c:\windows\system32\cache329\t_B_331000.htm c:\windows\system32\cache329\t_B_453700.htm c:\windows\system32\cache329\t_B_466200.htm c:\windows\system32\cache329\t_B_478400.htm c:\windows\system32\cache329\t_B_524700.htm c:\windows\system32\cache329\t_B_538300.htm . (((((((((((((((((((( Bestanden Gemaakt van 2009-06-02 to 2009-07-02 )))))))))))))))))))))))))))))) . 2009-06-30 21:07 . 2009-06-30 21:07 68424 ----a-w- c:\windows\system32\drivers\GRD.sys 2009-06-30 20:04 . 2009-06-30 20:39 48712 ----a-w- c:\windows\system32\drivers\MiniIcpt.sys 2009-06-30 20:02 . 2009-06-30 20:38 32328 ----a-w- c:\windows\system32\drivers\HookCentre.sys 2009-06-30 20:01 . 2009-06-30 20:01 22272 ----a-w- c:\windows\system32\drivers\GDNdisIc.sys 2009-06-30 20:01 . 2009-06-30 20:38 51016 ----a-w- c:\windows\system32\drivers\GDTdiIcpt.sys 2009-06-30 20:00 . 2009-06-30 20:00 -------- d-sh--w- C:\#GDATA.Trash.Store# 2009-06-30 19:58 . 2009-06-30 20:23 -------- d-----w- c:\documents and settings\All Users\Application Data\G DATA 2009-06-30 19:58 . 2009-06-30 19:59 -------- d-----w- c:\program files\Common Files\G DATA 2009-06-30 19:58 . 2009-06-30 19:58 -------- d-----w- c:\program files\G DATA 2009-06-30 19:34 . 2009-06-30 19:34 -------- d-----w- c:\documents and settings\xxxx\Local Settings\Application Data\Downloaded Installations 2009-06-30 05:19 . 2008-10-16 12:06 208744 ----a-w- c:\windows\system32\muweb.dll 2009-06-29 20:44 . 2009-06-29 20:44 -------- d--h--r- c:\documents and settings\xxxx\Onlangs geopend 2009-06-29 20:31 . 2009-06-29 20:31 -------- d-----w- c:\program files\Conduit 2009-06-29 20:31 . 2009-06-29 20:31 -------- d-----w- c:\documents and settings\xxxx\Local Settings\Application Data\Conduit 2009-06-29 20:31 . 2009-06-29 20:58 -------- d-----w- c:\documents and settings\xxxx\Local Settings\Application Data\ToggleDU 2009-06-29 20:31 . 2009-06-30 17:00 -------- d-----w- c:\program files\ToggleDU 2009-06-29 20:31 . 2009-06-29 20:31 -------- d-----w- c:\program files\CCleaner 2009-06-29 18:21 . 2009-06-29 18:21 -------- d-----w- c:\documents and settings\xxxx\Application Data\Malwarebytes 2009-06-29 18:21 . 2009-06-17 09:27 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2009-06-29 18:20 . 2009-06-29 18:20 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes 2009-06-29 18:20 . 2009-06-17 09:27 19096 ----a-w- c:\windows\system32\drivers\mbam.sys 2009-06-29 18:20 . 2009-06-29 18:21 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2009-06-29 17:31 . 2009-07-02 21:16 -------- d-----w- c:\documents and settings\xxxx\Local Settings\Application Data\CyberDefender 2009-06-29 16:49 . 2009-06-29 16:49 -------- d-----w- c:\program files\Trend Micro 2009-06-29 16:22 . 2009-06-29 16:40 -------- d-----w- c:\documents and settings\xxxx\Application Data\Error Fix 2009-06-21 06:59 . 2009-06-21 06:59 -------- d-----w- c:\documents and settings\xxxx\Tracing 2009-06-21 06:25 . 2009-06-21 06:32 -------- d-----w- c:\program files\Microsoft 2009-06-21 06:02 . 2009-06-21 06:02 -------- d-----w- c:\program files\Common Files\Windows Live 2009-06-07 17:36 . 2009-06-07 17:36 -------- d-----w- c:\documents and settings\xxxx\Local Settings\Application Data\PCHealth . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2009-07-02 21:45 . 2007-09-07 08:16 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP 2009-06-30 19:44 . 2007-09-30 05:53 -------- d-----w- c:\program files\ESET 2009-06-29 20:09 . 2004-11-10 20:35 59696 ----a-w- c:\documents and settings\xxxx\Local Settings\Application Data\GDIPFONTCACHEV1.DAT 2009-06-29 20:09 . 2008-07-06 11:01 -------- d-----w- c:\program files\DivX 2009-06-29 19:43 . 2008-12-09 17:43 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help 2009-06-29 19:30 . 2008-02-17 17:52 -------- d-----w- c:\program files\SurfRight 2009-06-29 19:22 . 2007-10-06 16:09 2560 ----a-w- c:\windows\system32\drivers\mchInjDrv.sys 2009-06-28 13:52 . 2009-04-10 05:37 -------- d-----w- c:\documents and settings\xxxx\Application Data\dvdcss 2009-06-23 21:12 . 2004-12-11 09:26 3810 ----a-w- c:\documents and settings\xxxx\Application Data\wklnhst.dat 2009-06-21 07:37 . 2008-03-02 15:56 -------- d-----w- c:\program files\Windows Live 2009-06-21 07:35 . 2009-04-09 17:33 -------- d-----w- c:\program files\MAGIX 2009-06-21 07:34 . 2009-04-09 17:34 -------- d-----w- c:\documents and settings\All Users\Application Data\MAGIX 2009-06-21 06:31 . 2008-03-02 16:09 -------- d-----w- c:\program files\Windows Live Toolbar 2009-05-07 15:34 . 2004-10-09 04:01 347136 ----a-w- c:\windows\system32\localspl.dll 2009-04-29 04:49 . 2004-10-09 04:02 827392 ----a-w- c:\windows\system32\wininet.dll 2009-04-29 04:49 . 2004-10-09 04:01 78336 ----a-w- c:\windows\system32\ieencode.dll 2009-04-19 19:51 . 2004-10-09 04:02 1847296 ----a-w- c:\windows\system32\win32k.sys 2009-04-17 15:30 . 2004-10-09 04:02 510980 ----a-w- c:\windows\system32\perfh013.dat 2009-04-17 15:30 . 2004-10-09 04:02 91950 ----a-w- c:\windows\system32\perfc013.dat 2009-04-15 14:55 . 2004-10-09 04:02 585216 ----a-w- c:\windows\system32\rpcrt4.dll 2009-04-12 08:30 . 2009-04-12 08:30 152576 ----a-w- c:\documents and settings\xxxx\Application Data\Sun\Java\jre1.6.0_13\lzma.dll 2009-04-12 07:50 . 2009-04-12 07:50 75048 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 8.1.1.10\SetupAdmin.exe 2009-04-10 05:58 . 2009-04-10 05:57 4710 ----a-r- c:\documents and settings\xxxx\Application Data\Microsoft\Installer\{B99AA278-063C-44A8-AF92-1C4A35DCE9E1}\_4ae13d6c.exe 2009-04-10 05:58 . 2009-04-10 05:57 4710 ----a-r- c:\documents and settings\xxxx\Application Data\Microsoft\Installer\{B99AA278-063C-44A8-AF92-1C4A35DCE9E1}\_294823.exe 2009-04-10 05:58 . 2009-04-10 05:57 4710 ----a-r- c:\documents and settings\xxxx\Application Data\Microsoft\Installer\{B99AA278-063C-44A8-AF92-1C4A35DCE9E1}\_18be6784.exe 2009-04-09 17:27 . 2009-04-09 17:27 47360 ----a-w- c:\windows\system32\drivers\pcouffin.sys 2009-04-09 17:27 . 2009-04-09 17:27 47360 ----a-w- c:\documents and settings\xxxx\Application Data\pcouffin.sys 2009-04-09 17:27 . 2009-04-09 17:27 47360 ----a-w- c:\documents and settings\xxxx\Application Data\pcouffin.sys 2009-02-24 19:34 . 2009-02-24 19:34 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll 2009-02-24 19:34 . 2009-02-24 19:34 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A26503FE-B3B8-4910-A9DC-9CBD25C6B8D6}] 2009-06-29 17:28 3962184 ----a-w- c:\documents and settings\xxxx\Local Settings\Application Data\CyberDefender\cdmyidd.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360] "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-05-21 68856] "RegistryMechanic"="c:\program files\Registry Mechanic\RegMech.exe" [2009-06-23 2836376] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IntelliPoint"="c:\program files\Microsoft IntelliPoint\point32.exe" [2003-05-15 163840] "MULTIMEDIA KEYBOARD"="c:\program files\Netropa\Multimedia Keyboard\MMKeybd.exe" [2003-09-30 425984] "HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb11.exe" [2004-04-06 172032] "HPHUPD06"="c:\program files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe" [2004-06-07 49152] "HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2004-02-12 49152] "HP Component Manager"="c:\program files\HP\hpcoretech\hpcmpmgr.exe" [2004-05-12 241664] "HPHmon06"="c:\windows\system32\hphmon06.exe" [2004-06-07 659456] "Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe" [2007-03-22 63712] "AppleSyncNotifier"="c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2009-02-06 177472] "QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2009-01-05 413696] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-04-02 342312] "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888] "GDFirewallTray"="c:\program files\G DATA\TotalCare\Firewall\GDFirewallTray.exe" [2008-09-19 1037992] "G DATA AntiVirus Trayapplication"="c:\program files\G DATA\TotalCare\AVKTray\AVKTray.exe" [2008-11-17 957000] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] "DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-08-24 437160] c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\ HP Digital Imaging Monitor.lnk - c:\program files\HP\digital imaging\bin\hpqtra08.exe [2004-5-28 241664] Sitecom USB Wireless LAN Utility.lnk - c:\program files\Sitecom Europe BV\Sitecom WL-113 Utility\SiteComUSB.exe [2007-4-29 3477504] Snelstart HP Image Zone.lnk - c:\program files\HP\digital imaging\bin\hpqthb08.exe [2004-5-28 53248] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend] @="Service" [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusOverride"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Program Files\\Messenger\\msmsgs.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Program Files\\LimeWire\\LimeWire.exe"= "c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"= "c:\\Program Files\\Bonjour\\mDNSResponder.exe"= "c:\\Program Files\\iTunes\\iTunes.exe"= "c:\\Program Files\\Java\\jre6\\bin\\java.exe"= R1 ctredr15.sys;ctredr15.sys;c:\windows\system32\drivers\ctredr15.sys [x] R1 ctredrv.sys;ctredrv.sys; [x] R2 AVKProxy;G DATA AntiVirus Proxy;c:\program files\Common Files\G DATA\AVKProxy\AVKProxy.exe [2008-11-17 1016392] R2 gupdate1c9b621f59694c0;Google Updateservice (gupdate1c9b621f59694c0);c:\program files\Google\Update\GoogleUpdate.exe [2009-04-05 133104] R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files\MAGIX\Common\Database\bin\fbserver.exe [2005-11-17 1527900] R3 G DATA Backup Service;G DATA Backup Service;c:\program files\G DATA\TotalCare\AVKBackup\AVKBackupService.exe [2008-10-28 880200] R3 G DATA Tuner Service;G DATA Tuner Service;c:\program files\G DATA\TotalCare\AVKTuner\AVKTunerService.exe [2008-08-19 925768] R3 MbxStby;MbxStby;c:\windows\system32\drivers\MbxStby.sys [2004-01-27 6100] R3 pfsvgae;pfsvgae; [x] R3 ZD1211U(Sitecom);Sitecom Wireless Network USB Adapter Driver(Sitecom);c:\windows\system32\DRIVERS\zd1211u.sys [2004-07-05 233472] R4 UPnPService;UPnPService;c:\program files\Common Files\MAGIX Shared\UPnPService\UPnPService.exe [2006-12-14 544768] S0 GDNdisIc;GDNdisIc;c:\windows\system32\drivers\GDNdisIc.sys [2009-06-30 22272] S1 GRD;G DATA Rootkit Detector Driver;c:\windows\system32\drivers\GRD.sys [2009-06-30 68424] S1 mchInjDrv;madCodeHook DLL injection driver;c:\windows\system32\Drivers\mchInjDrv.sys [2009-06-29 2560] S1 msikbd2k;Multimedia Keyboard Filter Driver;c:\windows\system32\DRIVERS\msikbd2k.sys [2001-12-20 6656] S2 AVKService;G DATA Schedule;c:\program files\G DATA\TotalCare\AVK\AVKService.exe [2008-09-19 386120] S2 AVKWCtl;AntiVirus-bewaker;c:\program files\G DATA\TotalCare\AVK\AVKWCtl.exe [2008-09-08 1185496] S2 GDTdiInterceptor;GDTdiInterceptor;c:\windows\system32\drivers\GDTdiIcpt.sys [2009-06-30 51016] S2 nhksrv;Netropa NHK Server;c:\program files\Netropa\Multimedia Keyboard\nhksrv.exe [2001-08-06 28672] S2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [2006-11-03 13592] S3 CONAN;CONAN;c:\windows\system32\drivers\o2mmb.sys [2004-02-11 191092] S3 GDFwSvc;G DATA Persoonlijke Firewall;c:\program files\G DATA\TotalCare\Firewall\GDFwSvc.exe [2008-10-30 1407976] S3 GDMnIcpt;GDMnIcpt;c:\windows\system32\drivers\MiniIcpt.sys [2009-06-30 48712] S3 HookCentre;HookCentre;c:\windows\system32\drivers\HookCentre.sys [2009-06-30 32328] . Inhoud van de 'Gedeelde Taken' map 2009-06-26 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34] 2009-07-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2009-04-05 19:08] 2009-07-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2009-04-05 19:08] 2009-07-02 c:\windows\Tasks\MP Scheduled Scan.job - c:\program files\Windows Defender\MpCmdRun.exe [2006-11-03 17:20] . - - - - ORPHANS VERWIJDERD - - - - Notify-WRNotifier - (no file) . ------- Bijkomende Scan ------- . uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2088433 uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7 mStart Page = hxxp://www.shareware-ne.com/nl/index.php?rvs=hompag uInternet Connection Wizard,ShellNext = hxxp://connect.adslvandaag.nl/ uInternet Settings,ProxyOverride = *.local IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 . ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2009-07-02 23:43 Windows 5.1.2600 Service Pack 3 NTFS scannen van verborgen processen ... scannen van verborgen autostart items ... scannen van verborgen bestanden ... Scan succesvol afgerond verborgen bestanden: 0 ************************************************************************** . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- [HKEY_USERS\S-1-5-21-3727300539-1845347935-658281404-1006\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*] "??"=hex:04,0d,c9,2c,04,ae,29,e4,15,f4,10,28,9d,5a,80,b3,6a,d7,ca,c8,c5,e4,e6, 1f,0c,5e,9b,f6,e0,1e,fc,d0,cb,86,6f,21,f7,da,7a,08,d9,37,a8,a8,42,14,b2,d1,\ "??"=hex:12,55,04,68,0e,3e,78,ae,6b,4d,91,4e,a8,9b,e1,fe . --------------------- DLLs Geladen Onder Lopende Processen --------------------- - - - - - - - > 'explorer.exe'(1784) c:\program files\Netropa\Multimedia Keyboard\nhkdll.dll c:\windows\system32\WPDShServiceObj.dll c:\windows\system32\PortableDeviceTypes.dll c:\windows\system32\PortableDeviceApi.dll . ------------------------ Andere Aktieve Processen ------------------------ . c:\windows\system32\ati2evxx.exe c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe c:\program files\Bonjour\mDNSResponder.exe c:\program files\Java\jre6\bin\jqs.exe c:\windows\system32\slserv.exe c:\program files\Netropa\Multimedia Keyboard\Traymon.exe c:\program files\Netropa\Onscreen Display\osd.exe c:\program files\Microsoft Office\Office12\ONENOTEM.EXE c:\program files\iPod\bin\iPodService.exe c:\program files\HP\digital imaging\bin\hpqgalry.exe . ************************************************************************** . Voltooingstijd: 2009-07-02 0:05 - machine werd herstart ComboFix-quarantined-files.txt 2009-07-02 22:05 Pre-Run: 32.806.723.584 bytes beschikbaar Post-Run: 33.927.397.376 bytes beschikbaar WindowsXP-KB310994-SP2-Home-BootDisk-NLD.exe [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect alwarebytes' Anti-Malware 1.38 Database versie: 2351 Windows 5.1.2600 Service Pack 3 3-7-2009 3:01:30 mbam-log-2009-07-03 (03-01-30).txt Scan type: Snelle Scan Objecten gescand: 89048 Verstreken tijd: 7 minute(s), 54 second(s) Geheugenprocessen geïnfecteerd: 0 Geheugenmodulen geïnfecteerd: 0 Registersleutels geïnfecteerd: 0 Registerwaarden geïnfecteerd: 0 Registerdata bestanden geïnfecteerd: 0 Mappen geïnfecteerd: 0 Bestanden geïnfecteerd: 0 Geheugenprocessen geïnfecteerd: (Geen kwaadaardige items gevonden) Geheugenmodulen geïnfecteerd: (Geen kwaadaardige items gevonden) Registersleutels geïnfecteerd: (Geen kwaadaardige items gevonden) Registerwaarden geïnfecteerd: (Geen kwaadaardige items gevonden) Registerdata bestanden geïnfecteerd: (Geen kwaadaardige items gevonden) Mappen geïnfecteerd: (Geen kwaadaardige items gevonden) Bestanden geïnfecteerd: (Geen kwaadaardige items gevonden) Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 3:02:10, on 3-7-2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16850) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Defender\MsMpEng.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\G DATA\TotalCare\AVK\AVKService.exe C:\Program Files\G DATA\TotalCare\AVK\AVKWCtl.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\system32\slserv.exe C:\Program Files\Microsoft IntelliPoint\point32.exe C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\HP\hpcoretech\hpcmpmgr.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\G DATA\TotalCare\Firewall\GDFirewallTray.exe C:\Program Files\G DATA\TotalCare\AVKTray\AVKTray.exe C:\Program Files\Netropa\Multimedia Keyboard\TrayMon.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Netropa\Onscreen Display\OSD.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Registry Mechanic\RegMech.exe C:\Program Files\Sitecom Europe BV\Sitecom WL-113 Utility\SiteComUSB.exe C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE C:\Program Files\G DATA\TotalCare\Firewall\GDFwSvc.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe C:\WINDOWS\explorer.exe C:\Program Files\Common Files\G DATA\AVKProxy\AVKProxy.exe C:\WINDOWS\system32\notepad.exe C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Search R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Downloads - Programmadownloads zijn gecheckt tegen virus en spyware R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = Activeer uw internetverbinding R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen R3 - URLSearchHook: MyIdentityDefender - {A26503FE-B3B8-4910-A9DC-9CBD25C6B8D6} - C:\Documents and Settings\xxxx\Local Settings\Application Data\CyberDefender\cdmyidd.dll O2 - BHO: G DATA WebFilter Class - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files\G DATA\TotalCare\Webfilter\AvkWebIE.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\AddOn\AcrobatReader\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: MyIdentityDefender - {A26503FE-B3B8-4910-A9DC-9CBD25C6B8D6} - C:\Documents and Settings\xxxx\Local Settings\Application Data\CyberDefender\cdmyidd.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O3 - Toolbar: MyIdentityDefender - {A26503FE-B3B8-4910-A9DC-9CBD25C6B8D6} - C:\Documents and Settings\xxxx\Local Settings\Application Data\CyberDefender\cdmyidd.dll O3 - Toolbar: G DATA WebFilter - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files\G DATA\TotalCare\Webfilter\AvkWebIE.dll O4 - HKLM\..\Run: [intelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe" O4 - HKLM\..\Run: [MULTIMEDIA KEYBOARD] C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe O4 - HKLM\..\Run: [HPHUPD06] C:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe" O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [GDFirewallTray] C:\Program Files\G DATA\TotalCare\Firewall\GDFirewallTray.exe O4 - HKLM\..\Run: [G DATA AntiVirus Trayapplication] C:\Program Files\G DATA\TotalCare\AVKTray\AVKTray.exe O4 - HKLM\..\Run: [userFaultCheck] %systemroot%\system32\dumprep 0 -u O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [RegistryMechanic] C:\Program Files\Registry Mechanic\RegMech.exe /H O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - S-1-5-18 Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'SYSTEM') O4 - .DEFAULT Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'Default user') O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\digital imaging\bin\hpqtra08.exe O4 - Global Startup: Sitecom USB Wireless LAN Utility.lnk = C:\Program Files\Sitecom Europe BV\Sitecom WL-113 Utility\SiteComUSB.exe O4 - Global Startup: Snelstart HP Image Zone.lnk = C:\Program Files\HP\digital imaging\bin\hpqthb08.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: G DATA AntiVirus Proxy (AVKProxy) - G DATA Software AG - C:\Program Files\Common Files\G DATA\AVKProxy\AVKProxy.exe O23 - Service: G DATA Schedule (AVKService) - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVK\AVKService.exe O23 - Service: AntiVirus-bewaker (AVKWCtl) - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVK\AVKWCtl.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe O23 - Service: G DATA Backup Service - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVKBackup\AVKBackupService.exe O23 - Service: G DATA Tuner Service - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVKTuner\AVKTunerService.exe O23 - Service: G DATA Persoonlijke Firewall (GDFwSvc) - G DATA Software AG - C:\Program Files\G DATA\TotalCare\Firewall\GDFwSvc.exe O23 - Service: Google Updateservice (gupdate1c9b621f59694c0) (gupdate1c9b621f59694c0) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe -- End of file - 10684 bytes

Hallo, deze week had Kape mij geholpen via HiJackthis wat rommel op te ruimen, ik heb toen daarna Gdata total Care gekocht en gedraaid. 1 dag ging alles goed, nu weer vreselijk trage lap top. Kan bijna internet niet opstarten en als ik opstart krijg ik http search.conduit.com nooit eerder gezien. Raar ook die ene smilie in de log. Die heb ik er niet ingezet. Anyway ik post maar weer een nieuwe hjt, willen jullie nog eens meekijken en adviseren. Hartelijk dank. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 8:29:13, on 2-7-2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16850) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Defender\MsMpEng.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Common Files\G DATA\AVKProxy\AVKProxy.exe C:\Program Files\G DATA\TotalCare\AVK\AVKService.exe C:\Program Files\G DATA\TotalCare\AVK\AVKWCtl.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Microsoft IntelliPoint\point32.exe C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\HP\hpcoretech\hpcmpmgr.exe C:\WINDOWS\system32\hphmon06.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe C:\WINDOWS\system32\slserv.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\G DATA\TotalCare\Firewall\GDFirewallTray.exe C:\Program Files\G DATA\TotalCare\AVKTray\AVKTray.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Registry Mechanic\RegMech.exe C:\Program Files\Sitecom Europe BV\Sitecom WL-113 Utility\SiteComUSB.exe C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\G DATA\TotalCare\Firewall\GDFwSvc.exe C:\Program Files\Netropa\Multimedia Keyboard\TrayMon.exe C:\Program Files\Netropa\Onscreen Display\OSD.exe C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\G DATA\TotalCare\GUI\AVKIS.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = SafeSearch | Protect your Internet searches against spyware, viruses, phishing scams, and identity theft R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Downloads - Programmadownloads zijn gecheckt tegen virus en spyware R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Search R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Yahoo! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Downloads - Programmadownloads zijn gecheckt tegen virus en spyware R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Downloads - Programmadownloads zijn gecheckt tegen virus en spyware R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = Activeer uw internetverbinding R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen R3 - URLSearchHook: MyIdentityDefender - {A26503FE-B3B8-4910-A9DC-9CBD25C6B8D6} - C:\Documents and Settings\\Local Settings\Application Data\CyberDefender\cdmyidd.dll F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,c:\program files\g data\totalcare\avkkid\avkcks.exe O2 - BHO: G DATA WebFilter Class - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files\G DATA\TotalCare\Webfilter\AvkWebIE.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\AddOn\AcrobatReader\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: MyIdentityDefender - {A26503FE-B3B8-4910-A9DC-9CBD25C6B8D6} - C:\Documents and Settings\\Local Settings\Application Data\CyberDefender\cdmyidd.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O3 - Toolbar: MyIdentityDefender - {A26503FE-B3B8-4910-A9DC-9CBD25C6B8D6} - C:\Documents and Settings\elly\Local Settings\Application Data\CyberDefender\cdmyidd.dll O3 - Toolbar: G DATA WebFilter - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files\G DATA\TotalCare\Webfilter\AvkWebIE.dll O4 - HKLM\..\Run: [intelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe" O4 - HKLM\..\Run: [MULTIMEDIA KEYBOARD] C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe O4 - HKLM\..\Run: [HPHUPD06] C:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe" O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKLM\..\Run: [GDFirewallTray] C:\Program Files\G DATA\TotalCare\Firewall\GDFirewallTray.exe O4 - HKLM\..\Run: [G DATA AntiVirus Trayapplication] C:\Program Files\G DATA\TotalCare\AVKTray\AVKTray.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [RegistryMechanic] C:\Program Files\Registry Mechanic\RegMech.exe /H O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - S-1-5-18 Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'SYSTEM') O4 - .DEFAULT Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (User 'Default user') O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\digital imaging\bin\hpqtra08.exe O4 - Global Startup: Sitecom USB Wireless LAN Utility.lnk = C:\Program Files\Sitecom Europe BV\Sitecom WL-113 Utility\SiteComUSB.exe O4 - Global Startup: Snelstart HP Image Zone.lnk = C:\Program Files\HP\digital imaging\bin\hpqthb08.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file) O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: G DATA AntiVirus Proxy (AVKProxy) - G DATA Software AG - C:\Program Files\Common Files\G DATA\AVKProxy\AVKProxy.exe O23 - Service: G DATA Schedule (AVKService) - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVK\AVKService.exe O23 - Service: AntiVirus-bewaker (AVKWCtl) - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVK\AVKWCtl.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe O23 - Service: G DATA Backup Service - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVKBackup\AVKBackupService.exe O23 - Service: G DATA Tuner Service - G DATA Software AG - C:\Program Files\G DATA\TotalCare\AVKTuner\AVKTunerService.exe O23 - Service: G DATA Persoonlijke Firewall (GDFwSvc) - G DATA Software AG - C:\Program Files\G DATA\TotalCare\Firewall\GDFwSvc.exe O23 - Service: Google Updateservice (gupdate1c9b621f59694c0) (gupdate1c9b621f59694c0) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe -- End of file - 11422 bytes

Hallo, heb gedaan wat je mailde, daarna wel weer meer toegang tot pc, niet alleen maar tot googlepage, maar kon nog steeds toetsenbord niet gebruiken. In de tussentijd had ik ook al GDATA total care gekocht op schijf, wanhopgi als ik was, en heb die de hele nacht laten runnen, nu doet alles het weer. In ieder geval heel hartelijk dank voor je snelle antwoord en hulp.

Een paar dagen geleden kwam er kabaal uit de pc, daarna problemen met intikken in de balken (bijv googlebalk). Ik kan alleen nog muis gebruiken. Op advies van posts hier over hetzelfde onderwerp CCleaner gedraait en MABM gedraait. Maar het probleem is niet opgelost. HiJackthis gedownload en een log gemaakt. Nu weet ik niet wat ik hier mee aan moet, wil een deskundig iemand svp helpen wat ik moet doen. Alvast heel erg bedankt! Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 7:27:43, on 30-6-2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16850) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Defender\MsMpEng.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Microsoft IntelliPoint\point32.exe C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe C:\Program Files\Google\Update\GoogleUpdate.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\HP\hpcoretech\hpcmpmgr.exe C:\WINDOWS\system32\hphmon06.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Registry Mechanic\RegMech.exe C:\Program Files\Sitecom Europe BV\Sitecom WL-113 Utility\SiteComUSB.exe C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Netropa\Multimedia Keyboard\TrayMon.exe C:\Program Files\Netropa\Onscreen Display\OSD.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Eset\nod32krn.exe C:\WINDOWS\system32\slserv.exe C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = SafeSearch | Protect your Internet searches against spyware, viruses, phishing scams, and identity theft R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Downloads - Programmadownloads zijn gecheckt tegen virus en spyware R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Search R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Yahoo! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Downloads - Programmadownloads zijn gecheckt tegen virus en spyware R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Downloads - Programmadownloads zijn gecheckt tegen virus en spyware R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = Activeer uw internetverbinding R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen R3 - URLSearchHook: (no name) - ~CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file) R3 - URLSearchHook: MyIdentityDefender - {A26503FE-B3B8-4910-A9DC-9CBD25C6B8D6} - C:\Documents and Settings\\Local Settings\Application Data\CyberDefender\cdmyidd.dll R3 - URLSearchHook: ToggleDU Toolbar - {3ad798d0-4642-4c55-bc14-cfe7dd19e0d1} - C:\Program Files\ToggleDU\tbTog1.dll O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\AddOn\AcrobatReader\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: ToggleDU Toolbar - {3ad798d0-4642-4c55-bc14-cfe7dd19e0d1} - C:\Program Files\ToggleDU\tbTog1.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: MyIdentityDefender - {A26503FE-B3B8-4910-A9DC-9CBD25C6B8D6} - C:\Documents and Settings\\Local Settings\Application Data\CyberDefender\cdmyidd.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file) O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll O3 - Toolbar: MyIdentityDefender - {A26503FE-B3B8-4910-A9DC-9CBD25C6B8D6} - C:\Documents and Settings\\Local Settings\Application Data\CyberDefender\cdmyidd.dll O3 - Toolbar: ToggleDU Toolbar - {3ad798d0-4642-4c55-bc14-cfe7dd19e0d1} - C:\Program Files\ToggleDU\tbTog1.dll O4 - HKLM\..\Run: [intelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe" O4 - HKLM\..\Run: [MULTIMEDIA KEYBOARD] C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe O4 - HKLM\..\Run: [HPHUPD06] C:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe" O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [RegistryMechanic] C:\Program Files\Registry Mechanic\RegMech.exe /H O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O4 - Startup: OneNote-inhoudsopgave.onetoc2 O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\digital imaging\bin\hpqtra08.exe O4 - Global Startup: Sitecom USB Wireless LAN Utility.lnk = C:\Program Files\Sitecom Europe BV\Sitecom WL-113 Utility\SiteComUSB.exe O4 - Global Startup: Snelstart HP Image Zone.lnk = C:\Program Files\HP\digital imaging\bin\hpqthb08.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file) O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe O23 - Service: Google Updateservice (gupdate1c9b621f59694c0) (gupdate1c9b621f59694c0) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe -- End of file - 10247 bytes