[OPGELOST] Ik zoek hulp voor computer herstart virus!

lufraki · 12 januari 2009

Hallo, ik gebruik Visual Basic 2008 express edition en altijd als ik een nieuw

project wil openen wordt de computer afgesloten!

Ik heb de computer al heel vaak met Norman Virus Control gescand

maar daarnee lukt het niet. Weet hier iemand met welk virus ik te maken heb of hoe ik dit virus eraf kan krijgen? (Ik gebruik een windows xp)

Alvast bedankt

kape · 12 januari 2009

Begin eens met dit, misschien zet dit ons op een spoor :

Download HiJackThis

Dubbelklik op HJTInstall.exe

Hijackthis wordt nu op je PC geïnstalleerd, een snelkoppeling wordt op je bureaublad geplaatst. Klik op "Do a systemscan and save a logfile". en hang dit logje aan je volgende bericht.

NB. Ben je een gebruiker van Windows Vista dan moet je eerst rechtsklikken op HijackThis.exe en dan kiezen voor "Run as Administrator".

lufraki · 12 januari 2009

Hier is het logje.

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 16:15:05, on 12-1-2009

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\csrss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\Norman\Npm\bin\ELOGSVC.EXE

C:\Norman\Npm\Bin\Zanda.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\System32\SCardSvr.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\HPZipm12.exe

C:\WINDOWS\system32\PnkBstrA.exe

C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindService.exe

C:\WINDOWS\system32\svchost.exe

C:\Norman\Npm\bin\NJEEVES.EXE

C:\Norman\nse\bin\NSESVC.EXE

C:\WINDOWS\System32\alg.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe

C:\WINDOWS\System32\rs32net.exe

C:\WINDOWS\Config\svchost.exe

C:\Norman\Npm\bin\ZLH.EXE

C:\WINDOWS\System32\svchost.exe

C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

C:\WINDOWS\Dit.exe

C:\WINDOWS\system32\RunDll32.exe

C:\WINDOWS\Config\svchost.exe

C:\WINDOWS\system32\rundll32.exe

C:\WINDOWS\AGRSMMSG.exe

C:\WINDOWS\TEMP\vvu22.tmp

C:\Documents and Settings\Gaming Account\Application Data\Twain\Twain.exe

C:\WINDOWS\system32\svchost.exe

C:\Documents and Settings\Gaming Account\Application Data\SpeedRunner\SpeedRunner.exe

C:\Documents and Settings\Gaming Account\Application Data\Microsoft\Windows\iqgcm.exe

C:\Program Files\NCSoft\Launcher\NCLauncher.exe

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\System32\rs32net.exe

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe

C:\Program Files\OpenOffice.org 2.4\program\soffice.exe

C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\rundll32.exe

C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe

C:\Program Files\Enigma Browser\Enigma.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Het Net - Vandaag op Het Net

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)

O3 - Toolbar: Earn2Life Bar - {93344865-74BD-4873-BE65-56539D41A65C} - C:\WINDOWS\Downloaded Program Files\Earn2Life.dll

O4 - HKLM\..\Run: [tvdkoogmbgxp] C:\WINDOWS\System32\regsvr32.exe /s "C:\WINDOWS\system32\doousebqwdccpvio.dll"

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"

O4 - HKLM\..\Run: [rs32net] C:\WINDOWS\System32\rs32net.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [norman zanda] "C:\Norman\Npm\bin\ZLH.EXE" /LOAD /SPLASH

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [host process] C:\WINDOWS\Fonts\svchost.exe

O4 - HKLM\..\Run: [Hitman Pro Expiration Helper] "C:\Program Files\Hitman Pro\xphelper.exe"

O4 - HKLM\..\Run: [Dit] Dit.exe

O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd

O4 - HKLM\..\Run: [Asavofihu] rundll32.exe "C:\WINDOWS\Alunapevafiy.dll",e

O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe

O4 - HKCU\..\Run: [twain] C:\Documents and Settings\Gaming Account\Application Data\Twain\Twain.exe

O4 - HKCU\..\Run: [speedrunner] C:\Documents and Settings\Gaming Account\Application Data\SpeedRunner\SpeedRunner.exe

O4 - HKCU\..\Run: [sfkg6wip] C:\Documents and Settings\Gaming Account\Application Data\Microsoft\Windows\iqgcm.exe

O4 - HKCU\..\Run: [PlayNC Launcher] C:\Program Files\NCSoft\Launcher\NCLauncher.exe /Minimized

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [rs32net] C:\WINDOWS\System32\rs32net.exe

O4 - HKLM\..\Policies\Explorer\Run: [CnfgWLAN] C:\WINDOWS\Config\svchost.exe

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')

O4 - Startup: OpenOffice.org 2.4 .lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\RT2500 USB Wireless LAN Card\Installer\WINXP\RaConfig2500.exe

O4 - Global Startup: Snelstart HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe

O9 - Extra button: Earn2Life Bar - {07328B93-AFD8-4c6a-99E9-D0B3B5D6DAD9} - C:\WINDOWS\Downloaded Program Files\Earn2Life.dll

O9 - Extra 'Tools' menuitem: Earn2Life Bar - {07328B93-AFD8-4c6a-99E9-D0B3B5D6DAD9} - C:\WINDOWS\Downloaded Program Files\Earn2Life.dll

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)

O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL

O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Eigenaar\Menu Start\Programma's\IMVU\Run IMVU.lnk (file missing)

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O15 - Trusted Zone: *.moove.com

O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Plugin Control) - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab

O16 - DPF: {2DA3C4AB-E6B6-47A6-B0F3-1BD81524B51B} (ActiveWorldsDownload Control) - http://www.activeworlds.com/products/ActiveWorldsDownload.cab

O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.7.109.cab

O16 - DPF: {93344865-74BD-4873-BE65-56539D41A65C} (Earn2Life Bar) - http://www.earn2life.com/plugin/Earn2Life.cab

O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe

O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\Norman\Npm\bin\ELOGSVC.EXE

O23 - Service: FCI - Unknown owner - C:\WINDOWS\system32\svchost.exe:ext.exe

O23 - Service: ICF - Unknown owner - C:\WINDOWS\system32\svchost.exe:ext.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe

O23 - Service: Norman NJeeves - Norman ASA - C:\Norman\Npm\bin\NJEEVES.EXE

O23 - Service: Norman ZANDA - Norman ASA - C:\Norman\Npm\Bin\Zanda.exe

O23 - Service: Norman Scanner Engine Service (nsesvc) - Norman ASA - C:\Norman\nse\bin\NSESVC.EXE

O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Norman\Nvc\bin\nvcoas.exe

O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman ASA - C:\Norman\Nvc\BIN\NVCSCHED.EXE

O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\WINDOWS\system32\nvsvc32.exe (file missing)

O23 - Service: PC Tools AntiVirus Engine (PCTAVSvc) - Unknown owner - C:\Program Files\PC Tools AntiVirus\PCTAVSvc.exe (file missing)

O23 - Service: Pml Driver HPZ12 (pml driver hpz12) - HP - C:\WINDOWS\system32\HPZipm12.exe

O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindService.exe

O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Unknown owner - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe (file missing)

--

End of file - 9034 bytes

kape · 12 januari 2009

Oeps, dat kan tellen.

Ga naar Start - Uitvoeren en tik in: sc delete Boonty Games

Druk op Enter.

Ga naar Start - Uitvoeren en tik in: sc delete FCI

Druk op Enter.

Ga naar Start - Uitvoeren en tik in: sc delete ICF

Druk op Enter.

Start Hijackthis op. Ben je gebruiker van Vista kies dan voor “Run as administrator" of "Uitvoeren als administrator". Selecteer “Do a system scan only”. Selecteer alleen de items die hieronder zijn genoemd:

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)

O4 - HKLM\..\Run: [tvdkoogmbgxp] C:\WINDOWS\System32\regsvr32.exe /s "C:\WINDOWS\system32\doousebqwdccpvio.dll"

O4 - HKLM\..\Run: [rs32net] C:\WINDOWS\System32\rs32net.exe

O4 - HKLM\..\Run: [host process] C:\WINDOWS\Fonts\svchost.exe

O4 - HKLM\..\Run: [Asavofihu] rundll32.exe "C:\WINDOWS\Alunapevafiy.dll",e

O4 - HKCU\..\Run: [twain] C:\Documents and Settings\Gaming Account\Application Data\Twain\Twain.exe

O4 - HKCU\..\Run: [speedrunner] C:\Documents and Settings\Gaming Account\Application Data\SpeedRunner\SpeedRunner.exe

O4 - HKCU\..\Run: [sfkg6wip] C:\Documents and Settings\Gaming Account\Application Data\Microsoft\Windows\iqgcm.exe

O4 - HKCU\..\Run: [rs32net] C:\WINDOWS\System32\rs32net.exe

O4 - HKLM\..\Policies\Explorer\Run: [CnfgWLAN] C:\WINDOWS\Config\svchost.exe

O9 - Extra button: Earn2Life Bar - {07328B93-AFD8-4c6a-99E9-D0B3B5D6DAD9} - C:\WINDOWS\Downloaded Program Files\Earn2Life.dll

O9 - Extra 'Tools' menuitem: Earn2Life Bar - {07328B93-AFD8-4c6a-99E9-D0B3B5D6DAD9} - C:\WINDOWS\Downloaded Program Files\Earn2Life.dll

O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)

O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Eigenaar\Menu Start\Programma's\IMVU\Run IMVU.lnk (file missing)

O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe

O23 - Service: FCI - Unknown owner - C:\WINDOWS\system32\svchost.exe:ext.exe

O23 - Service: ICF - Unknown owner - C:\WINDOWS\system32\svchost.exe:ext.exe

Klik op 'Fix checked' om de items te verwijderen.

Download MBAM (Malwarebytes' Anti-Malware).

Dubbelklik op mbam-setup.exe om het programma te installeren.

Zorg ervoor dat er een vinkje geplaatst is voor Update Malwarebytes' Anti-Malware en Start Malwarebytes' Anti-Malware, Klik daarna op "Voltooien".

Indien een update gevonden werd, zal die gedownload en geïnstalleerd worden.

Wanneer het programma volledig up to date is, selecteer dan in het tabblad Scanner : "Snelle Scan", daarna klik op Scan.

Het scannen kan een tijdje duren, dus wees geduldig.

Wanneer de scan voltooid is, klik op OK, daarna "Bekijk Resultaten" om de resultaten te zien.

Zorg ervoor dat daar alles aangevinkt is, daarna klik op: Verwijder geselecteerde.

Na het verwijderen zal een log openen en zal er gevraagd worden om de computer opnieuw op te starten. (Zie verder)

De log wordt automatisch bewaard door MBAM en kan je terugvinden door op de "Logs" tab te klikken in MBAM.

Indien MBAM moeilijkheden heeft met het verwijderen van bepaalde bestanden zal het enkele meldingen geven waar je OK moet klikken.

Daarna zal het vragen om de computeropnieuw op te starten... dus sta toe dat MBAM de computer opnieuw opstart.

Plak de inhoud van het logje in je volgende bericht, samen met een nieuw HijackThis log.

lufraki · 12 januari 2009

Ik heb de stappen uitgevoerd, ik kon die ICF en FCI dingen in dat

Hijackthis logje niet vinden dus heb ik ze niet aangevinkt.

Met die scanner had hij 54 virussen ofzo gevonden en na herstart

gaf Norman Virus Control aan dat er allemaal trojans binnenkwamen

een stuk of 7. Maarr goed... Hier zijn de logjes:

Hijackthis log:

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 17:22:10, on 12-1-2009

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\csrss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\Norman\Npm\bin\ELOGSVC.EXE

C:\Norman\Npm\Bin\Zanda.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\System32\SCardSvr.exe

C:\Program Files\PC Tools AntiVirus\PCTAVSvc.exe

C:\WINDOWS\system32\HPZipm12.exe

C:\WINDOWS\system32\PnkBstrA.exe

C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindService.exe

C:\WINDOWS\system32\svchost.exe

C:\Norman\Npm\bin\NJEEVES.EXE

C:\WINDOWS\System32\alg.exe

C:\Norman\nse\bin\NSESVC.EXE

C:\WINDOWS\system32\svchost.exe

C:\Norman\Nvc\BIN\NVCSCHED.EXE

C:\WINDOWS\Explorer.EXE

C:\Norman\Nvc\bin\nvcoas.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\TEMP\BN3.tmp

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe

C:\Norman\Npm\bin\ZLH.EXE

C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

C:\WINDOWS\Dit.exe

C:\WINDOWS\system32\RunDll32.exe

C:\WINDOWS\AGRSMMSG.exe

C:\Program Files\PC Tools AntiVirus\PCTAV.exe

C:\Program Files\NCSoft\Launcher\NCLauncher.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Norman\Nvc\BIN\NIP.EXE

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program Files\Enigma Browser\Enigma.exe

C:\Program Files\RALINK\RT2500 USB Wireless LAN Card\Installer\WINXP\RaConfig2500.exe

C:\Program Files\OpenOffice.org 2.4\program\soffice.exe

C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN

C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

C:\WINDOWS\system32\wbem\wmiprvse.exe

C:\WINDOWS\system32\svchost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Het Net - Vandaag op Het Net

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

O2 - BHO: (no name) - {00CBD2E9-4B32-468C-97F4-D04C26454074} - (no file)

O2 - BHO: (no name) - {02ABF62E-D5EC-4069-BA98-75CE5306742F} - (no file)

O2 - BHO: (no name) - {02d1d660-366c-4816-8bd9-841aa0cc567e} - (no file)

O2 - BHO: (no name) - {04578D8D-6130-411B-BEE5-DFF22903F732} - C:\WINDOWS\system32\yayyWnkh.dll (file missing)

O2 - BHO: (no name) - {04B9DD96-B706-4896-9C4D-F472AEA1D970} - (no file)

O2 - BHO: (no name) - {0d258113-c2f0-42c2-9f25-751812a35cee} - (no file)

O2 - BHO: (no name) - {12AFD10D-E5B1-4FEB-9FCC-DE0BF395C859} - (no file)

O2 - BHO: (no name) - {14E61F94-2410-4FF6-A4FB-6C946FFF0910} - (no file)

O2 - BHO: (no name) - {15B0DF91-3E7C-469F-919D-FD7CB54DD7EF} - (no file)

O2 - BHO: (no name) - {185fa643-4361-46e9-b0c0-98b31d6046cf} - (no file)

O2 - BHO: (no name) - {18E65993-B815-45D8-87B0-910E46CD6596} - (no file)

O2 - BHO: (no name) - {293368ac-b485-4139-ad1a-798c0e89d659} - (no file)

O2 - BHO: (no name) - {29f9f1b5-2c64-48cb-b436-38f5d8475ba5} - (no file)

O2 - BHO: (no name) - {2a36d16d-188e-46e7-9a00-fc7f8fab95fa} - C:\WINDOWS\system32\ddcCSIYR.dll (file missing)

O2 - BHO: (no name) - {2F334FCA-CFCD-4516-A345-7532A84A6383} - (no file)

O2 - BHO: (no name) - {339ae631-8a4e-4ffb-bd81-289a8a1721ca} - (no file)

O2 - BHO: (no name) - {3675aecc-6572-4d27-bb2b-476fd11b6548} - (no file)

O2 - BHO: (no name) - {36d6b878-b640-4996-bb3e-e010ad0eb895} - (no file)

O2 - BHO: (no name) - {3ede4402-3a9e-4008-9030-931dc480f6b9} - (no file)

O2 - BHO: (no name) - {40D02709-172D-4D29-AE10-A74815C75B4B} - (no file)

O2 - BHO: (no name) - {41b59e29-a31f-4ee3-bc56-03589f11a6d1} - (no file)

O2 - BHO: (no name) - {4879D1B4-8AF6-489B-BD97-D88B404AC661} - (no file)

O2 - BHO: (no name) - {4d54c90e-3f12-4fe5-bd72-947aa330b39a} - (no file)

O2 - BHO: (no name) - {551ccd00-2f5d-40ee-bb05-588c66f7439b} - (no file)

O2 - BHO: (no name) - {595492AB-7553-4BC5-A01A-1D3DB12F2FB6} - (no file)

O2 - BHO: (no name) - {660BCD40-7750-484A-BE64-8DD6D62AA471} - (no file)

O2 - BHO: (no name) - {66D73A2A-1BD9-44C9-BCDC-E0A035D210B4} - (no file)

O2 - BHO: (no name) - {67259ADE-BDF9-44EA-9D9D-3D8BC6686EAA} - (no file)

O2 - BHO: (no name) - {68CB75EE-F5AB-4FA2-955B-7F907283EA62} - (no file)

O2 - BHO: (no name) - {6F9EBC00-46F0-4562-A3B1-1BDEA5B27432} - (no file)

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

O2 - BHO: (no name) - {763FF21B-0D09-4AB8-8032-E9996BC76C97} - (no file)

O2 - BHO: (no name) - {803F9654-6153-4ED3-8081-DDCEA1F3F779} - (no file)

O2 - BHO: (no name) - {80D3B21C-13D5-46B5-B47A-8D0B12145451} - (no file)

O2 - BHO: (no name) - {80E86B5B-DDA3-4A01-96B6-5EAA5F204314} - (no file)

O2 - BHO: (no name) - {816DA4D1-2019-4942-9A2A-17F84E3AC032} - (no file)

O2 - BHO: (no name) - {81D16261-4171-46DB-9E76-0EC579D335EE} - (no file)

O2 - BHO: (no name) - {875f1284-2a15-4c30-ae6d-c0026e5d9a4d} - (no file)

O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: (no name) - {94F97081-8839-4873-9B22-8AA9DCC00192} - (no file)

O2 - BHO: (no name) - {95C62D67-246A-4DD6-A20F-AA734B122536} - (no file)

O2 - BHO: (no name) - {9653FC67-D83B-4ADB-8AEF-89456E14AAA3} - (no file)

O2 - BHO: (no name) - {96B9E713-43EA-422E-95A0-3007BA3700B8} - (no file)

O2 - BHO: (no name) - {9828CE7D-CD4C-4FCD-A8F8-A3AFFF9699B4} - (no file)

O2 - BHO: (no name) - {997034F6-5ECB-4C44-89A3-03B773EF22AE} - (no file)

O2 - BHO: (no name) - {9b37f930-b8eb-41a4-a3dd-ebb406e1deb9} - (no file)

O2 - BHO: (no name) - {9E0BD41B-4CA9-4D9A-9275-5A40E2771AC4} - (no file)

O2 - BHO: (no name) - {a578256b-c61e-4919-b1b3-42bd44c625f4} - (no file)

O2 - BHO: (no name) - {A5F1E95D-201F-4DEB-B24C-E1F70E2A3B96} - (no file)

O2 - BHO: (no name) - {A6B1D865-D339-4D29-B1FF-B8536B768862} - (no file)

O2 - BHO: (no name) - {A793575F-4587-4855-89CB-2CEDD34C4B35} - (no file)

O2 - BHO: (no name) - {A95ED814-43CD-4833-9C01-E6ED78988117} - (no file)

O2 - BHO: (no name) - {AFE1AA34-4635-4D26-8A67-4DB000407EE7} - (no file)

O2 - BHO: (no name) - {B3E936AB-2006-4F02-B155-37FA28F4A77A} - (no file)

O2 - BHO: (no name) - {C0172BB7-04A8-4392-BDF3-EA33C41271BB} - (no file)

O2 - BHO: (no name) - {C29B735F-13AB-4532-AC5F-28EA0752F8BE} - (no file)

O2 - BHO: (no name) - {c2dcad99-a5f5-4c6e-9b08-f4268b65f690} - (no file)

O2 - BHO: (no name) - {c32282ce-901c-4393-8300-44dca55f9a71} - (no file)

O2 - BHO: (no name) - {C5F1FA5C-5744-4623-A8E2-B115EBC27816} - (no file)

O2 - BHO: (no name) - {D14B29E2-F610-40DC-B701-A594B2872BDB} - (no file)

O2 - BHO: (no name) - {D264881A-6653-4568-93D0-B5F821A251F2} - (no file)

O2 - BHO: (no name) - {E73CF733-9351-4F0A-9A2B-255B69CC5B58} - (no file)

O2 - BHO: (no name) - {FD1C7923-0D25-4FB6-9E3E-9F9DA354E941} - (no file)

O3 - Toolbar: Earn2Life Bar - {93344865-74BD-4873-BE65-56539D41A65C} - C:\WINDOWS\Downloaded Program Files\Earn2Life.dll

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [norman zanda] "C:\Norman\Npm\bin\ZLH.EXE" /LOAD /SPLASH

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [Hitman Pro Expiration Helper] "C:\Program Files\Hitman Pro\xphelper.exe"

O4 - HKLM\..\Run: [Dit] Dit.exe

O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd

O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe

O4 - HKLM\..\Run: [PCTAVApp] "C:\Program Files\PC Tools AntiVirus\PCTAV.exe" /MONITORSCAN

O4 - HKCU\..\Run: [PlayNC Launcher] C:\Program Files\NCSoft\Launcher\NCLauncher.exe /Minimized

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')