Archief - Kan dit effe gecontroleerd worden ?

Het archief is een bevroren moment uit een vorige versie van dit forum, met andere regels en andere bazen. Deze posts weerspiegelen op geen enkele manier onze huidige ideeën, waarden of wereldbeelden en zijn op sommige plaatsen gecensureerd wegens ontoelaatbaar. Veel zijn in een andere tijdsgeest gemaakt, al dan niet ironisch - zoals in het ironische subforum Off-Topic - en zouden op dit moment niet meer gepost (mogen) worden. Toch bieden we dit archief nog graag aan als informatiedatabank en naslagwerk. Lees er hier meer over of start een gesprek met anderen.
S

Scout

Legacy Member
Start zomaar browers op en opent site met PC infected en al die brol...


Logfile of HijackThis v1.99.1
Scan saved at 1:22:23, on 3/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\WINDOWS\System32\CTSvcCDA.EXE
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\CTHELPER.EXE
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Razer\Copperhead\razerhid.exe
C:\Program Files\Creative\MediaSource\RemoteControl\RCMan.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Razer\Copperhead\razertra.exe
C:\Program Files\Razer\Copperhead\razerofa.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\msiexec.exe
C:\Documents and Settings\tones\Bureaublad\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 200.201.10.12:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [Ptipbmf] rundll32.exe ptipbmf.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [SBDrvDet] C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe /r
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [CTDVDDET] C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE
O4 - HKLM\..\Run: [PCLEPCI] C:\PROGRA~1\Pinnacle\PPE\ppe.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\VistaCodecPack\rm\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize
O4 - HKLM\..\Run: [NVRTCLK] C:\WINDOWS\system32\NVRTCLK\NVRTClk.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTXFIREG] CTxfiReg.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Copperhead] C:\Program Files\Razer\Copperhead\razerhid.exe
O4 - HKLM\..\Run: [EPSON Stylus DX6000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBIE.EXE /FU "C:\WINDOWS\TEMP\E_S93.tmp" /EF "HKLM"
O4 - HKLM\..\Run: [Genuine] rundll32.exe "C:\WINDOWS\system32\yhaqdcef.dll",realset
O4 - HKCU\..\Run: [RemoteCenter] C:\Program Files\Creative\MediaSource\RemoteControl\RCMan.EXE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: Dexia netbanking - http://netbanking.dexia.be/PC//Dynamic/Shared/Applet//DexiaIIA.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkID=39204
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_41.cab
O16 - DPF: {5D8844F9-1CB8-11D2-A0A0-00600859EB9F} (PatchCtl Class) - file://C:\Program Files\EA SPORTS\FIFA 2004\update.1.1\patchx2.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.4.2) - http://www.telenet.be/sites/epgweb/setup.cab
O16 - DPF: {E504EE6E-47C6-11D5-B8AB-00D0B78F3D48} (Yahoo! Webcam Viewer Wrapper) - http://chat.yahoo.com/cab/yvwrctl.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Autodesk Licensing Service - Unknown owner - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.EXE
O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\Diskeeper\DkService.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
J

Jurgenv1

Legacy Member
Download combofix.exe: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Plaats het op je bureaublad.
Dubbelklik er op om het programma te starten.
In het scherm dat verschijnt tik je een Y in om het cleaningsprocess te starten.
Volg de instructies op het scherm.
Als het tooltje klaar is, opent er een logfile (combofix.txt) Post de inhoud van dit bestandje samen met een nieuwe hijackthislog.
S

Scout

Legacy Member
"tones" - 2007-06-03 19:55:56 Service Pack 2
ComboFix 07-05.27.BV - Running from: "C:\Documents and Settings\tones\Bureaublad\"


(((((((((((((((((((((((((((((((((((((((((((((((((( V Log )))))))))))))))))))))))))))))))))))))))))))))))))))))))


C:\WINDOWS\system32\sstqo.dll
C:\WINDOWS\system32\jhcwcftk.dll
C:\WINDOWS\system32\mqfwxbuq.dll
C:\WINDOWS\system32\orqss.bak1
C:\WINDOWS\system32\orqss.bak2
C:\WINDOWS\system32\orqss.ini
C:\WINDOWS\system32\orqss.ini2
C:\WINDOWS\system32\orqss.tmp
C:\WINDOWS\system32\orqss.bak1
C:\WINDOWS\system32\orqss.bak2
C:\WINDOWS\system32\orqss.ini
C:\WINDOWS\system32\orqss.ini2
C:\WINDOWS\system32\orqss.tmp
C:\WINDOWS\system32\orqss.bak1
C:\WINDOWS\system32\orqss.bak2
C:\WINDOWS\system32\orqss.ini
C:\WINDOWS\system32\orqss.ini2
C:\WINDOWS\system32\orqss.tmp
C:\WINDOWS\system32\ssqro.dll
C:\WINDOWS\system32\xxywwvv.dll


* * * POST RUN FILES/FOLDERS * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *



(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


"C:\Program Files\install.log"
"C:\install.log"


((((((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))


-------\nm


((((((((((((((((((((((((((((((( Files Created from 2007-05-03 to 2007-06-03 ))))))))))))))))))))))))))))))))))


2007-06-03 19:59 50,745 --a------ C:\WINDOWS\system32\bexpwikm.dll
2007-06-03 19:51 2,580 --a------ C:\WINDOWS\system32\cngvfkom.exe
2007-06-03 01:14 2,580 --a------ C:\WINDOWS\system32\muqmlnbl.exe
2007-06-02 12:47 2,580 --a------ C:\WINDOWS\system32\hjqqekfk.exe
2007-06-02 12:41 131,124 --a------ C:\WINDOWS\system32\yhaqdcef.dll
2007-05-24 01:49 <DIR> d-------- C:\Nieuwe map
2007-05-24 01:34 <DIR> d-------- C:\Program Files\SurfOffline
2007-05-23 21:19 725,044 --ahs---- C:\WINDOWS\system32\jkhhg.dll
2007-05-22 21:43 <DIR> d--hs---- C:\Documents and Settings\tones\Phone Browser
2007-05-22 21:43 <DIR> d--hs---- C:\DOCUME~1\tones\Phone Browser
2007-05-22 21:40 <DIR> d-------- C:\Program Files\DIFX
2007-05-22 21:40 <DIR> d-------- C:\DOCUME~1\tones\APPLIC~1\PC Suite
2007-05-22 21:40 <DIR> d-------- C:\DOCUME~1\tones\APPLIC~1\Nokia
2007-05-22 21:40 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\PC Suite
2007-05-22 21:39 50,688 --a------ C:\WINDOWS\system32\nmwcdcls.dll
2007-05-22 21:39 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE
2007-05-22 21:39 <DIR> d-------- C:\Program Files\PC Connectivity Solution
2007-05-22 20:00 43,264 -ra------ C:\WINDOWS\system32\drivers\ser2pl.sys
2007-05-11 01:15 <DIR> d-------- C:\Program Files\NCH Swift Sound
2007-05-11 01:15 <DIR> d-------- C:\DOCUME~1\tones\APPLIC~1\RecordPad
2007-05-11 01:15 <DIR> d-------- C:\DOCUME~1\tones\APPLIC~1\NCH Swift Sound
2007-05-11 01:15 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\NCH Swift Sound


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-05-27 19:58:02 -------- d-----w C:\Program Files\DScaler
2007-05-23 23:48:05 -------- d-----w C:\Program Files\WinHTTrack
2007-05-22 02:01:55 69,380 ----a-w C:\WINDOWS\system32\perfc013.dat
2007-05-22 02:01:55 442,004 ----a-w C:\WINDOWS\system32\perfh013.dat
2007-04-18 22:00:38 -------- d-----w C:\DOCUME~1\tones\APPLIC~1\DivX
2007-04-18 16:15:26 2,854,400 ----a-w C:\WINDOWS\system32\msi.dll
2007-04-17 23:00:38 -------- d-----w C:\Program Files\K-Lite Codec Pack
2007-04-17 22:53:48 -------- d-----w C:\Program Files\DivX
2007-04-16 20:47:36 33,624 ----a-w C:\WINDOWS\system32\wups.dll
2007-04-16 20:45:54 1,710,936 ----a-w C:\WINDOWS\system32\wuaueng.dll
2007-04-16 20:45:48 549,720 ----a-w C:\WINDOWS\system32\wuapi.dll
2007-04-16 20:45:42 325,976 ----a-w C:\WINDOWS\system32\wucltui.dll
2007-04-16 20:45:36 203,096 ----a-w C:\WINDOWS\system32\wuweb.dll
2007-04-16 20:45:28 92,504 ----a-w C:\WINDOWS\system32\cdm.dll
2007-04-16 20:45:20 53,080 ----a-w C:\WINDOWS\system32\wuauclt.exe
2007-04-16 20:45:20 43,352 ----a-w C:\WINDOWS\system32\wups2.dll
2007-04-15 03:09:51 -------- d-----w C:\Program Files\Windows Media Connect 2
2007-04-11 21:08:48 -------- d-----w C:\Program Files\MP3 Player Utilities 3.68
2007-03-27 07:55:57 524,288 ----a-w C:\WINDOWS\system32\DivXsm.exe
2007-03-27 07:55:48 3,596,288 ----a-w C:\WINDOWS\system32\qt-dx331.dll
2007-03-27 07:55:31 129,784 ------w C:\WINDOWS\system32\pxafs.dll
2007-03-27 07:55:31 118,520 ------w C:\WINDOWS\system32\pxinsi64.exe
2007-03-27 07:55:31 116,472 ------w C:\WINDOWS\system32\pxcpyi64.exe
2007-03-27 07:55:23 200,704 ----a-w C:\WINDOWS\system32\ssldivx.dll
2007-03-27 07:55:23 1,044,480 ----a-w C:\WINDOWS\system32\libdivx.dll
2007-03-27 07:49:07 73,728 ----a-w C:\WINDOWS\system32\dpl100.dll
2007-03-27 07:49:07 196,608 ----a-w C:\WINDOWS\system32\dtu100.dll
2007-03-27 07:49:05 53,248 ----a-w C:\WINDOWS\system32\dpuGUI10.dll
2007-03-27 07:49:03 593,920 ----a-w C:\WINDOWS\system32\dpuGUI11.dll
2007-03-27 07:49:02 57,344 ----a-w C:\WINDOWS\system32\dpv11.dll
2007-03-27 07:49:02 344,064 ----a-w C:\WINDOWS\system32\dpus11.dll
2007-03-27 07:49:02 294,912 ----a-w C:\WINDOWS\system32\dpu11.dll
2007-03-27 07:49:02 294,912 ----a-w C:\WINDOWS\system32\dpu10.dll
2007-03-27 07:48:59 823,296 ----a-w C:\WINDOWS\system32\divx_xx07.dll
2007-03-27 07:48:58 823,296 ----a-w C:\WINDOWS\system32\divx_xx0c.dll
2007-03-27 07:48:58 802,816 ----a-w C:\WINDOWS\system32\divx_xx11.dll
2007-03-27 07:48:58 639,066 ----a-w C:\WINDOWS\system32\DivX.dll
2007-03-17 13:45:54 293,376 ----a-w C:\WINDOWS\system32\winsrv.dll
2007-03-08 15:39:10 579,072 ----a-w C:\WINDOWS\system32\user32.dll
2007-03-08 15:39:10 40,960 ----a-w C:\WINDOWS\system32\mf3216.dll
2007-03-08 15:39:10 281,600 ----a-w C:\WINDOWS\system32\gdi32.dll
2007-03-08 15:37:59 1,843,712 ----a-w C:\WINDOWS\system32\win32k.sys
2005-10-30 02:52:19 56 --sh--r C:\WINDOWS\system32\5CF36BF160.sys


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}=C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx [2001-04-16 16:39]
{53707962-6F74-2D53-2644-206D7942484F}=C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2005-05-31 01:04]
{CD3447D4-CA39-4377-8084-30E86331D74C}=C:\WINDOWS\system32\alfilmng.dll []
{E99421FB-68DD-40F0-B4AC-B7027CAE2F1A}=C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll [2005-02-21 22:50]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Ptipbmf"="ptipbmf.dll" [2003-06-20 09:06 C:\WINDOWS\system32\ptipbmf.dll]
"SBDrvDet"="C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe" [2002-12-03 18:06]
"CTSysVol"="C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe" [2003-07-02 10:03]
"CTDVDDET"="C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE" [2003-06-18 01:00]
"PCLEPCI"="C:\PROGRA~1\Pinnacle\PPE\ppe.exe" [2002-11-04 10:40]
"TkBellExe"="C:\Program Files\VistaCodecPack\rm\Update_OB\realsched.exe" []
"CTHelper"="CTHELPER.EXE" []
"CTXFIREG"="CTxfiReg.exe" []
"nwiz"="nwiz.exe" [2006-08-11 22:43 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="NvMCTray.dll" [2006-08-11 22:43 C:\WINDOWS\system32\nvmctray.dll]
"Copperhead"="C:\Program Files\Razer\Copperhead\razerhid.exe" [2005-11-25 11:53]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-08-11 22:43]
S

Scout

Legacy Member
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RemoteCenter"="C:\Program Files\Creative\MediaSource\RemoteControl\RCMan.EXE" [2003-06-12 09:47]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 10:03]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{54D9498B-CF93-414F-8984-8CE7FDE0D391}"="C:\Program Files\ewido anti-malware\shellhook.dll" [2004-09-30 14:21]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
"C:\Program Files\QuickTime\qttask.exe" -atboottime

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost *netsvcs*


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{41f4ac9e-4eea-11da-93d4-000ea654fc99}]
AutoRun\command- G:\MLLaunch.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{cb769ad4-305c-11d9-ab59-000ea654fc99}]
AutoRun\command- E:\Autorun.exe


********************************************************************

catchme 0.3.692 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-06-03 20:01:45
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

C:\WINDOWS\Rhododendron.bmp:KAVICHS 36 bytes hidden from API
C:\WINDOWS\Rivier Sumida.bmp:KAVICHS 36 bytes hidden from API
C:\WINDOWS\RVS_1.31_1.4_ENG_UK.RTP:KAVICHS 36 bytes hidden from API
C:\WINDOWS\RVS_1.3_1.31_ENG_UK.RTP:KAVICHS 36 bytes hidden from API
C:\WINDOWS\RVS_1.41_1.50_UK.RTP:KAVICHS 36 bytes hidden from API
C:\WINDOWS\RVS_1.4_1.41_ENG_UK.RTP:KAVICHS 36 bytes hidden from API
C:\WINDOWS\RVS_1.50_1.51_UK.RTP:KAVICHS 36 bytes hidden from API
C:\WINDOWS\RVS_1.51_1.52_UK.RTP:KAVICHS 36 bytes hidden from API
C:\WINDOWS\RVS_1.52_1.53_UK.RTP:KAVICHS 36 bytes hidden from API
C:\WINDOWS\RVS_1.53_1.54_UK.RTP:KAVICHS 36 bytes hidden from API
C:\WINDOWS\impborl.dll:KAVICHS 36 bytes hidden from API
C:\WINDOWS\imsins.BAK:KAVICHS 36 bytes hidden from API
C:\WINDOWS\imsins.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\Iniexpander.exe:KAVICHS 36 bytes hidden from API
C:\WINDOWS\INRESDUT.DLL:KAVICHS 36 bytes hidden from API
C:\WINDOWS\ipconfig.dat:KAVICHS 36 bytes hidden from API
C:\WINDOWS\IsUn0413.exe:KAVICHS 228 bytes hidden from API
C:\WINDOWS\IsUninst.exe:KAVICHS 228 bytes hidden from API
C:\WINDOWS\iun6002.exe:KAVICHS 36 bytes hidden from API
C:\WINDOWS\jautoexp.dat:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB823182.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB824105.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB824141.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB825119.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB826939.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB828035.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB828741.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB833987.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB834707.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\tsoc.log:KAVICHS 100 bytes hidden from API
C:\WINDOWS\twain.dll:KAVICHS 36 bytes hidden from API
C:\WINDOWS\TWAINCAP.INI:KAVICHS 36 bytes hidden from API
C:\WINDOWS\TWAINCAP.SRC:KAVICHS 36 bytes hidden from API
C:\WINDOWS\twain_32.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\twunk_16.exe:KAVICHS 36 bytes hidden from API
C:\WINDOWS\twunk_32.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\uninst.exe:KAVICHS 228 bytes hidden from API
C:\WINDOWS\UninstallFirefox.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\unvise32.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\UNWISE.EXE:KAVICHS 36 bytes hidden from API
C:\WINDOWS\Updreg.EXE:KAVICHS 68 bytes hidden from API
C:\WINDOWS\updspapi.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\vb.ini:KAVICHS 36 bytes hidden from API
C:\WINDOWS\vbaddin.ini:KAVICHS 36 bytes hidden from API
C:\WINDOWS\videoimp.ini:KAVICHS 36 bytes hidden from API
C:\WINDOWS\VI_setup.ini:KAVICHS 36 bytes hidden from API
C:\WINDOWS\vminst.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\vmmreg32.dll:KAVICHS 36 bytes hidden from API
C:\WINDOWS\vpd.properties:KAVICHS 36 bytes hidden from API
C:\WINDOWS\WGA.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\WgaNotify.log:KAVICHS 100 bytes hidden from API
C:\WINDOWS\wiadebug.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\wiaservc.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\win.ini:KAVICHS 228 bytes hidden from API
C:\WINDOWS\winamp.ini:KAVICHS 228 bytes hidden from API
C:\WINDOWS\Windows Update.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\WindowsUpdate.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\CTDCRES.DLL:KAVICHS 36 bytes hidden from API
C:\WINDOWS\CTDV10K1.CDF:KAVICHS 36 bytes hidden from API
C:\WINDOWS\CTDV10K2.CDF:KAVICHS 36 bytes hidden from API
C:\WINDOWS\CTDVAUDY.CDF:KAVICHS 36 bytes hidden from API
C:\WINDOWS\CTHELPER.EXE:KAVICHS 36 bytes hidden from API
C:\WINDOWS\Ctregrun.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\CTRES.DLL:KAVICHS 68 bytes hidden from API
C:\WINDOWS\daemon.dll:KAVICHS 228 bytes hidden from API
C:\WINDOWS\dahotfix.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\dasetup.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\DatcomKey.INI:KAVICHS 100 bytes hidden from API
C:\WINDOWS\DEBUGSM.INI:KAVICHS 36 bytes hidden from API
C:\WINDOWS\DfrgUIEx.INI:KAVICHS 36 bytes hidden from API
C:\WINDOWS\dgnsetup.ini:KAVICHS 68 bytes hidden from API
C:\WINDOWS\DgnSetup.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\DirectX.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\doom3.ini:KAVICHS 36 bytes hidden from API
C:\WINDOWS\doom_ss800x6005.scr:KAVICHS 100 bytes hidden from API
C:\WINDOWS\ocmsn.log:KAVICHS 100 bytes hidden from API
C:\WINDOWS\ODBC.INI:KAVICHS 68 bytes hidden from API
C:\WINDOWS\ODBCINST.INI:KAVICHS 68 bytes hidden from API
C:\WINDOWS\oeuninst.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\OEWABLog.txt:KAVICHS 36 bytes hidden from API
C:\WINDOWS\Opname....info:KAVICHS 36 bytes hidden from API
C:\WINDOWS\patchw32.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\Patroon.bmp:KAVICHS 36 bytes hidden from API
C:\WINDOWS\pcdlib32.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\PI4_setup.ini:KAVICHS 36 bytes hidden from API
C:\WINDOWS\popfollow.dll:KAVICHS 36 bytes hidden from API
C:\WINDOWS\AC3API.INI:KAVICHS 68 bytes hidden from API
C:\WINDOWS\CTDCRDUT.DLL:KAVICHS 36 bytes hidden from API
C:\WINDOWS\iis6.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\KB835732.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB887472.log:KAVICHS 100 bytes hidden from API
C:\WINDOWS\KB896422.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\KB905414.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB916281.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB922582.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB926255.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\ocgen.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\Prairie.bmp:KAVICHS 36 bytes hidden from API
C:\WINDOWS\RVS_1.54_1.55_UK.RTP:KAVICHS 36 bytes hidden from API
C:\WINDOWS\winhelp.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\winhlp32.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\WININIT.INI:KAVICHS 228 bytes hidden from API
C:\WINDOWS\winnt.bmp:KAVICHS 68 bytes hidden from API
C:\WINDOWS\winnt256.bmp:KAVICHS 68 bytes hidden from API
C:\WINDOWS\WMFDist11.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\wmp11.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\wmprfNLD.prx:KAVICHS 100 bytes hidden from API
C:\WINDOWS\wmsetup.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\wmsetup10.log:KAVICHS 100 bytes hidden from API
C:\WINDOWS\WMSysPr9.prx:KAVICHS 68 bytes hidden from API
C:\WINDOWS\WMSysPrx.prx:KAVICHS 36 bytes hidden from API
C:\WINDOWS\WRQ.INI:KAVICHS 36 bytes hidden from API
C:\WINDOWS\WRServices.dll:KAVICHS 36 bytes hidden from API
C:\WINDOWS\wsftperr.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\Wudf01000Inst.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\xpsp1hfm.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\Zapotec.bmp:KAVICHS 36 bytes hidden from API
C:\WINDOWS\Zeepbellen.bmp:KAVICHS 36 bytes hidden from API
C:\WINDOWS\_default.pif:KAVICHS 68 bytes hidden from API
C:\WINDOWS\{00000003-00000000-0000000C-00001102-00000004-20021102}.BAK:KAVICHS 36 bytes hidden from API
C:\WINDOWS\{00000003-00000000-0000000C-00001102-00000004-20021102}.CDF:KAVICHS 228 bytes hidden from API
C:\WINDOWS\È:KAVICHS 36 bytes hidden from API
C:\WINDOWS\ADFUUD.SYS:KAVICHS 36 bytes hidden from API
C:\WINDOWS\AFUDOS.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\AMS2INST.LOG:KAVICHS 36 bytes hidden from API
C:\WINDOWS\Ascd_tmp.ini:KAVICHS 36 bytes hidden from API
C:\WINDOWS\ATIWDM.LOG:KAVICHS 68 bytes hidden from API
C:\WINDOWS\AxType.ini:KAVICHS 36 bytes hidden from API
C:\WINDOWS\Blauw 16.bmp:KAVICHS 36 bytes hidden from API
C:\WINDOWS\bootstat.dat:KAVICHS 228 bytes hidden from API
C:\WINDOWS\BricoPack Wallpaper.bmp:KAVICHS 68 bytes hidden from API
C:\WINDOWS\BricoPackFoldersDelete.cmd:KAVICHS 228 bytes hidden from API
C:\WINDOWS\BricoPackUninst.cmd:KAVICHS 36 bytes hidden from API
C:\WINDOWS\BricoPackUninst.txt:KAVICHS 36 bytes hidden from API
C:\WINDOWS\setdebug.exe:KAVICHS 36 bytes hidden from API
C:\WINDOWS\setup.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\setupact.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\setupapi.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\setupapi.log.0.old:KAVICHS 36 bytes hidden from API
C:\WINDOWS\setupapi.log.1.old:KAVICHS 228 bytes hidden from API
C:\WINDOWS\setupapi.log.2.old:KAVICHS 228 bytes hidden from API
C:\WINDOWS\setupapi.log.3.old:KAVICHS 228 bytes hidden from API
C:\WINDOWS\setuplog.txt:KAVICHS 100 bytes hidden from API
C:\WINDOWS\slrundll.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\Sof2.INI:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB837001.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB839643-DirectX9.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB839645.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB840315.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB840374.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB841873.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB842773.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB867282.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB873333.log:KAVICHS 100 bytes hidden from API
C:\WINDOWS\KB873339.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\KB883357.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB883939.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\KB885250.log:KAVICHS 100 bytes hidden from API
C:\WINDOWS\KB885835.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB885836.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\KB885884.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB886185.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\PSCONV.EXE:KAVICHS 36 bytes hidden from API
C:\WINDOWS\PUNKBUSTER.RTP:KAVICHS 36 bytes hidden from API
C:\WINDOWS\Q3version.ini:KAVICHS 68 bytes hidden from API
C:\WINDOWS\Q828026.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\Qiii.INI:KAVICHS 68 bytes hidden from API
C:\WINDOWS\Qstrings.INI:KAVICHS 36 bytes hidden from API
C:\WINDOWS\QUAKEME.INI:KAVICHS 36 bytes hidden from API
C:\WINDOWS\READREG.EXE:KAVICHS 36 bytes hidden from API
C:\WINDOWS\reflect.001:KAVICHS 36 bytes hidden from API
C:\WINDOWS\reflect.ini:KAVICHS 36 bytes hidden from API
C:\WINDOWS\regedit.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\REGLOCS.OLD:KAVICHS 68 bytes hidden from API
C:\WINDOWS\regopt.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\RVS_1.55_1.56_UK.RTP:KAVICHS 36 bytes hidden from API
C:\WINDOWS\Santa Fe Stucco.bmp:KAVICHS 36 bytes hidden from API
C:\WINDOWS\SBWIN.INI:KAVICHS 228 bytes hidden from API
C:\WINDOWS\SchedLgU.Txt:KAVICHS 228 bytes hidden from API
C:\WINDOWS\sessmgr.setup.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\Microsoft.MIF:KAVICHS 68 bytes hidden from API
C:\WINDOWS\MIDIDEF.EXE:KAVICHS 36 bytes hidden from API
C:\WINDOWS\MixBUda.INI:KAVICHS 68 bytes hidden from API
C:\WINDOWS\mozregistry.dat:KAVICHS 36 bytes hidden from API
C:\WINDOWS\mozver.dat:KAVICHS 228 bytes hidden from API
C:\WINDOWS\MSCompPackV1.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\msdfmap.ini:KAVICHS 36 bytes hidden from API
C:\WINDOWS\msgsocm.log:KAVICHS 100 bytes hidden from API
C:\WINDOWS\muninst.exe:KAVICHS 36 bytes hidden from API
C:\WINDOWS\ncrdtm2path.conf:KAVICHS 36 bytes hidden from API
C:\WINDOWS\ncrgtrpath.conf:KAVICHS 36 bytes hidden from API
C:\WINDOWS\nero.INI:KAVICHS 228 bytes hidden from API
C:\WINDOWS\NetwkCfg.txt:KAVICHS 36 bytes hidden from API
C:\WINDOWS\notepad.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\nsw.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\ntbtlog.txt:KAVICHS 228 bytes hidden from API
C:\WINDOWS\ntdtcsetup.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\KB887742.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB888113.log:KAVICHS 132 bytes hidden from API
C:\WINDOWS\KB888302.log:KAVICHS 132 bytes hidden from API
C:\WINDOWS\KB890046.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\KB890047.log:KAVICHS 100 bytes hidden from API
C:\WINDOWS\KB890175.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB890859.log:KAVICHS 132 bytes hidden from API
C:\WINDOWS\KB890923.log:KAVICHS 132 bytes hidden from API
C:\WINDOWS\KB891781.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\KB893066.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\KB893086.log:KAVICHS 132 bytes hidden from API
C:\WINDOWS\KB893756.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\KB893803.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\KB893803v2.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\KB894391.log:KAVICHS 132 bytes hidden from API
C:\WINDOWS\KB896358.log:KAVICHS 196 bytes hidden from API
C:\WINDOWS\DPINST.LOG:KAVICHS 36 bytes hidden from API
C:\WINDOWS\DtcInstall.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\edih.dll:KAVICHS 36 bytes hidden from API
C:\WINDOWS\EPSMTL32.TXT:KAVICHS 36 bytes hidden from API
C:\WINDOWS\epsswt_log.txt:KAVICHS 36 bytes hidden from API
C:\WINDOWS\EPSTPLOG.TXT:KAVICHS 100 bytes hidden from API
C:\WINDOWS\explorer.exe:KAVICHS 132 bytes hidden from API
C:\WINDOWS\explorer.scf:KAVICHS 36 bytes hidden from API
C:\WINDOWS\FaxSetup.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\Firefox Wallpaper.bmp:KAVICHS 68 bytes hidden from API
C:\WINDOWS\flash.txt:KAVICHS 68 bytes hidden from API
C:\WINDOWS\flashax.exe:KAVICHS 36 bytes hidden from API
C:\WINDOWS\Groensteen.bmp:KAVICHS 36 bytes hidden from API
C:\WINDOWS\hh.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\ie7_main.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\ieuninst.exe:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB896423.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\KB896424.log:KAVICHS 100 bytes hidden from API
C:\WINDOWS\KB896428.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\KB896688.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB896727.log:KAVICHS 132 bytes hidden from API
C:\WINDOWS\KB898461.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB899587.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\KB899588.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\KB899591.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\KB900485.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB900725.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB901017.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB901190.log:KAVICHS 196 bytes hidden from API
C:\WINDOWS\KB901214.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\KB902400.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB903235.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\KB904706.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\CDE DX6000EFDG.ini:KAVICHS 36 bytes hidden from API
C:\WINDOWS\cdplayer.ini:KAVICHS 228 bytes hidden from API
C:\WINDOWS\checkip.dat:KAVICHS 36 bytes hidden from API
C:\WINDOWS\chipset.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\clock.avi:KAVICHS 36 bytes hidden from API
C:\WINDOWS\clony2.ini:KAVICHS 36 bytes hidden from API
C:\WINDOWS\cmsetacl.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\COM+.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\comsetup.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\control.ini:KAVICHS 68 bytes hidden from API
C:\WINDOWS\CTCCW.DLL:KAVICHS 68 bytes hidden from API
C:\WINDOWS\KB905749.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB905915.log:KAVICHS 196 bytes hidden from API
C:\WINDOWS\KB908519.log:KAVICHS 196 bytes hidden from API
C:\WINDOWS\KB908531.log:KAVICHS 100 bytes hidden from API
C:\WINDOWS\KB910437.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\KB911280.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB911562.log:KAVICHS 132 bytes hidden from API
C:\WINDOWS\KB911564.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\KB911565.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\KB911567.log:KAVICHS 132 bytes hidden from API
C:\WINDOWS\KB911927.log:KAVICHS 196 bytes hidden from API
C:\WINDOWS\KB912812.log:KAVICHS 132 bytes hidden from API
C:\WINDOWS\KB912919.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\KB913446.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\KB913580.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB914388.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB914389.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\spupdsvc.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\srlink.ini:KAVICHS 36 bytes hidden from API
C:\WINDOWS\ST4UNST.EXE:KAVICHS 36 bytes hidden from API
C:\WINDOWS\Stekkie.bmp:KAVICHS 36 bytes hidden from API
C:\WINDOWS\svcpack.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\system.ini:KAVICHS 228 bytes hidden from API
C:\WINDOWS\TASKMAN.EXE:KAVICHS 36 bytes hidden from API
C:\WINDOWS\Tcsofla.INI:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB916595.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB917159.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB917344.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB917422.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB917734.log:KAVICHS 228 bytes hidden from API
C:\WINDOWS\KB917953.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB918118.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB918439.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB918899.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB919007.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB920213.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB920214.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB920670.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB920683.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB920685.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB920872.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB921398.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB921883.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB922616.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB922760.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\KB922819.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB923191.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB923414.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB923689.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\KB923694.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB923980.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\KB924191.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB924270.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB924496.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB924667.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB925398.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\KB925454.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB925486.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB925902.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB926239.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\002333_.tmp:KAVICHS 36 bytes hidden from API
C:\WINDOWS\1.31.add:KAVICHS 36 bytes hidden from API
C:\WINDOWS\1.50.add:KAVICHS 36 bytes hidden from API
C:\WINDOWS\1016ed.rom:KAVICHS 36 bytes hidden from API
C:\WINDOWS\1016ed.zip:KAVICHS 36 bytes hidden from API
C:\WINDOWS\1021ed.rom:KAVICHS 68 bytes hidden from API
C:\WINDOWS\1021ed.zip:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB926436.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB927779.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB927802.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB927891.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB928090.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB928255.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB928843.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB929338.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB929399.log:KAVICHS 68 bytes hidden from API
C:\WINDOWS\KB929969.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB930178.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB930916.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB931261.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB931768.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB931784.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB931836.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\KB932168.log:KAVICHS 36 bytes hidden from API
C:\WINDOWS\Kopje koffie.bmp:KAVICHS 36 bytes hidden from API
C:\WINDOWS\lsb_un20.exe:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\$winnt$.inf:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\12520437.cpx:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\12520850.cpx:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\iasacct.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\iasads.dll:KAVICHS 36 bytes hidden from API
C:\WINDOWS\system32\iashlpr.dll:KAVICHS 36 bytes hidden from API
C:\WINDOWS\system32\iasnap.dll:KAVICHS 36 bytes hidden from API
C:\WINDOWS\system32\iaspolcy.dll:KAVICHS 36 bytes hidden from API
C:\WINDOWS\system32\iasrad.dll:KAVICHS 36 bytes hidden from API
C:\WINDOWS\system32\iasrecst.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\iassam.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\iassdo.dll:KAVICHS 36 bytes hidden from API
C:\WINDOWS\system32\iassvcs.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\icaapi.dll:KAVICHS 100 bytes hidden from API
C:\WINDOWS\system32\iccvid.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\icfgnt5.dll:KAVICHS 68 bytes hidden from API
C:\WINDOWS\system32\icm32.dll:KAVICHS 68 bytes hidden from API

Completion time: 2007-06-03 20:04:12 - machine was rebooted
C:\ComboFix-quarantined-files.txt ... 2007-06-03 20:03

--- E O F ---

Alvast bedankt !
S

Scout

Legacy Member
Logfile of HijackThis v1.99.1
Scan saved at 20:23:56, on 3/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\WINDOWS\System32\CTSvcCDA.EXE
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE
C:\WINDOWS\CTHELPER.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Razer\Copperhead\razerhid.exe
C:\Program Files\Creative\MediaSource\RemoteControl\RCMan.EXE
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Razer\Copperhead\razertra.exe
C:\Program Files\Razer\Copperhead\razerofa.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\tones\Bureaublad\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 200.201.10.12:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {CD3447D4-CA39-4377-8084-30E86331D74C} - C:\WINDOWS\system32\alfilmng.dll (file missing)
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [Ptipbmf] rundll32.exe ptipbmf.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [SBDrvDet] C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe /r
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [CTDVDDET] C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE
O4 - HKLM\..\Run: [PCLEPCI] C:\PROGRA~1\Pinnacle\PPE\ppe.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\VistaCodecPack\rm\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTXFIREG] CTxfiReg.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Copperhead] C:\Program Files\Razer\Copperhead\razerhid.exe
O4 - HKCU\..\Run: [RemoteCenter] C:\Program Files\Creative\MediaSource\RemoteControl\RCMan.EXE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: Dexia netbanking - http://netbanking.dexia.be/PC//Dynamic/Shared/Applet//DexiaIIA.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkID=39204
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_41.cab
O16 - DPF: {5D8844F9-1CB8-11D2-A0A0-00600859EB9F} (PatchCtl Class) - file://C:\Program Files\EA SPORTS\FIFA 2004\update.1.1\patchx2.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.4.2) - http://www.telenet.be/sites/epgweb/setup.cab
O16 - DPF: {E504EE6E-47C6-11D5-B8AB-00D0B78F3D48} (Yahoo! Webcam Viewer Wrapper) - http://chat.yahoo.com/cab/yvwrctl.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Autodesk Licensing Service - Unknown owner - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.EXE
O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\Diskeeper\DkService.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
J

Jurgenv1

Legacy Member
* Download OTMoveIt.exe en plaats het op je bureaublad:

Start OTMoveIt door dubbel te klikken op OTMoveIt.exe
In het linkerpaneel, waar het zegt: Paste List of Files/Folders to be Moved ,kopieer en plak je onderstaand gedeelte:

C:\WINDOWS\system32\bexpwikm.dll
C:\WINDOWS\system32\cngvfkom.exe
C:\WINDOWS\system32\muqmlnbl.exe
C:\WINDOWS\system32\hjqqekfk.exe
C:\WINDOWS\system32\yhaqdcef.dll
C:\WINDOWS\system32\jkhhg.dll


Klik daarna op de knop MoveIt onderaan.
Wanneer voltooid zal het een log aanmaken (********_******.log -- de * staat voor datum en tijd) in de volgende map: C:\_OTMoveIt\MovedFiles.
Post de inhoud daarvan in je volgende bericht met een nieuw hijackthis logje.
S

Scout

Legacy Member
File/Folder not found.
DllUnregisterServer procedure not found in C:\WINDOWS\system32\bexpwikm.dll
C:\WINDOWS\system32\bexpwikm.dll NOT unregistered.
C:\WINDOWS\system32\bexpwikm.dll moved successfully.
File move failed. C:\WINDOWS\system32\cngvfkom.exe scheduled to be moved on reboot.
File move failed. C:\WINDOWS\system32\muqmlnbl.exe scheduled to be moved on reboot.
File move failed. C:\WINDOWS\system32\hjqqekfk.exe scheduled to be moved on reboot.
DllUnregisterServer procedure not found in C:\WINDOWS\system32\yhaqdcef.dll
C:\WINDOWS\system32\yhaqdcef.dll NOT unregistered.
C:\WINDOWS\system32\yhaqdcef.dll moved successfully.
LoadLibrary failed for C:\WINDOWS\system32\jkhhg.dll
C:\WINDOWS\system32\jkhhg.dll NOT unregistered.
C:\WINDOWS\system32\jkhhg.dll moved successfully.

Created on 06/04/2007 01:11:02

****************************************

Logfile of HijackThis v1.99.1
Scan saved at 1:14:56, on 4/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE
C:\WINDOWS\CTHELPER.EXE
C:\Program Files\Razer\Copperhead\razerhid.exe
C:\Program Files\Creative\MediaSource\RemoteControl\RCMan.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\WINDOWS\System32\CTSvcCDA.EXE
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Razer\Copperhead\razertra.exe
C:\Program Files\Razer\Copperhead\razerofa.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\tones\Bureaublad\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 200.201.10.12:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {CD3447D4-CA39-4377-8084-30E86331D74C} - C:\WINDOWS\system32\alfilmng.dll (file missing)
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [Ptipbmf] rundll32.exe ptipbmf.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [SBDrvDet] C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe /r
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [CTDVDDET] C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE
O4 - HKLM\..\Run: [PCLEPCI] C:\PROGRA~1\Pinnacle\PPE\ppe.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\VistaCodecPack\rm\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTXFIREG] CTxfiReg.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Copperhead] C:\Program Files\Razer\Copperhead\razerhid.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [RemoteCenter] C:\Program Files\Creative\MediaSource\RemoteControl\RCMan.EXE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: Dexia netbanking - http://netbanking.dexia.be/PC//Dynamic/Shared/Applet//DexiaIIA.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkID=39204
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_1_0_0_41.cab
O16 - DPF: {5D8844F9-1CB8-11D2-A0A0-00600859EB9F} (PatchCtl Class) - file://C:\Program Files\EA SPORTS\FIFA 2004\update.1.1\patchx2.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.4.2) - http://www.telenet.be/sites/epgweb/setup.cab
O16 - DPF: {E504EE6E-47C6-11D5-B8AB-00D0B78F3D48} (Yahoo! Webcam Viewer Wrapper) - http://chat.yahoo.com/cab/yvwrctl.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Autodesk Licensing Service - Unknown owner - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.EXE
O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\Diskeeper\DkService.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
J

Jurgenv1

Legacy Member
Fix de volgende regel in hijackthis:

O2 - BHO: (no name) - {CD3447D4-CA39-4377-8084-30E86331D74C} - C:\WINDOWS\system32\alfilmng.dll (file missing)

Voor de rest ziet het er goed uit, hoe werkt alles verder?
S

Scout

Legacy Member
PC werkt weer zoals behoren ,nog steeds de windowsxp install van 2002 :)
Niets meer op aan te merken
Nogmaals bedankt Jurgenv1 !!
Het archief is een bevroren moment uit een vorige versie van dit forum, met andere regels en andere bazen. Deze posts weerspiegelen op geen enkele manier onze huidige ideeën, waarden of wereldbeelden en zijn op sommige plaatsen gecensureerd wegens ontoelaatbaar. Veel zijn in een andere tijdsgeest gemaakt, al dan niet ironisch - zoals in het ironische subforum Off-Topic - en zouden op dit moment niet meer gepost (mogen) worden. Toch bieden we dit archief nog graag aan als informatiedatabank en naslagwerk. Lees er hier meer over of start een gesprek met anderen.
Terug
Bovenaan