kristofke_1
Legacy Member
Deze computer is van het hele gezin en aangezien ik niet alles in het oog kan houden en omdat spywarescans soms te laat komen wou ik graag deze log laten checken. De laatste tijd start er samen met de computer nog een ander progamma op om Incredimail (email) te upgraden. ik heb al bij de opstartlijst gaan kijken maar niet direct iets gevonden. Alvast bedankt voor jullie hulp en tijd!
Logfile of HijackThis v1.99.1
Scan saved at 12:52:29, on 14/09/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2
(6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Executive
Software\Diskeeper\DkService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\SLEE401.exe
C:\Program Files\Analog
Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alcatel\SpeedTouch
USB\Dragdiag.exe
C:\Program Files\Analog
Devices\SoundMAX\SMax4.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpz
tsb05.exe
C:\Program Files\Analog
Devices\SoundMAX\SMax4PNP.exe
F:\Program Files\Google\Gmail
Notifier\G001-1.0.25.0\gnotify.exe
C:\Program
Files\Java\jre1.5.0_06\bin\jusched.exe
F:\Program Files\Winamp\winampa.exe
C:\PROGRA~1\MICROS~3\GAMECO~1\common\swtrayv4.
exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\WhatPulse\WhatPulse.exe
F:\Program Files\Globe
Software\StatBar\StatBar.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\LogitechDesktopMesse
nger.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Hijackthis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet
Explorer\Main,Start Page =
http://www.google.be/webhp?hl=nl
R0 - HKLM\Software\Microsoft\Internet
Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet
Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: HelperObject Class -
{00C6482D-C502-44C8-8409-FCE54AD9C208} -
F:\Program Files\TechSmith\SnagIt
7\SnagItBHO.dll
O2 - BHO: Adobe PDF Reader Link Helper -
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
F:\Program Files\Adobe\Acrobat
7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) -
{53707962-6F74-2D53-2644-206D7942484F} -
C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class -
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -
C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper -
{AA58ED58-01DD-4d91-8333-CF10577473F7} -
c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google -
{2318C2B1-4965-11d4-9B18-009027A5CD4F} -
c:\program files\google\googletoolbar1.dll
O3 - Toolbar: SnagIt -
{8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} -
F:\Program Files\TechSmith\SnagIt
7\SnagItIEAddin.dll
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics]
"C:\Program Files\Alcatel\SpeedTouch
USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [SoundMAX] "C:\Program
Files\Analog Devices\SoundMAX\SMax4.exe" /tray
O4 - HKLM\..\Run: [HPDJ Taskbar Utility]
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpz
tsb05.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program
Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run:
[{0228e555-4f9c-4e35-a3ec-b109a192b4c2}]
F:\Program Files\Google\Gmail
Notifier\G001-1.0.25.0\gnotify.exe
O4 - HKLM\..\Run: [DiskeeperSystray]
"C:\Program Files\Executive
Software\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [NeroCheck]
C:\WINDOWS\System32\\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched]
C:\Program
Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program
Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [WinampAgent] F:\Program
Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [SideWinderTrayV4]
C:\PROGRA~1\MICROS~3\GAMECO~1\common\swtrayv4.
exe
O4 - HKLM\..\Run: [Windows Defender]
"C:\Program Files\Windows
Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [AVG7_CC]
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
/STARTUP
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE
C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE
C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ImInstaller_] C:\Documents
and Settings\Dufraing - Van Loo\Local
Settings\Temporary Internet
Files\Content.IE5\S1Y3CTYV\incredimail_install
[1].exe -startup -product
O4 - HKLM\..\Run: [MSConfig]
C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.
exe /auto
O4 - HKCU\..\Run: [IncrediMail] C:\Program
Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [CTFMON.EXE]
C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WhatPulse] C:\Program
Files\WhatPulse\WhatPulse.exe
O4 - HKCU\..\Run: [StatBar] F:\Program
Files\Globe Software\StatBar\StatBar.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program
Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [LDM] F:\Program
Files\Logitech\Desktop
Messenger\8876480\Program\LogitechDesktopMesse
nger.exe
O4 - Global Startup: Adobe Gamma Loader.lnk =
C:\Program Files\Common
Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed
Launch.lnk = F:\Program Files\Adobe\Acrobat
7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop
Messenger.lnk = F:\Program
Files\Logitech\Desktop
Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk =
F:\Program Files\Logitech\SetPoint\KEM.exe
O4 - Global Startup: Microsoft Office OneNote
2003 Snel Starten.lnk = C:\Program
Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
O8 - Extra context menu item: &Google Zoeken -
res://c:\program
files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Woord vertalen
in het Nederlands - res://c:\program
files\google\GoogleToolbar1.dll/cmwordtrans.ht
ml
O8 - Extra context menu item: E&xporteren naar
Microsoft Excel -
res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/
3000
O8 - Extra context menu item: Gelijkwaardige
pagina's - res://c:\program
files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item:
Koppelingspagina's - res://c:\program
files\google\GoogleToolbar1.dll/cmbacklinks.ht
ml
O8 - Extra context menu item: Opgeslagen
momentopname van de pagina - res://c:\program
files\google\GoogleToolbar1.dll/cmcache.html
O9 - Extra button: (no name) -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console
- {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Spyware Doctor -
{2D663D1A-8670-49D9-A1A5-4C56B4E14E84} -
F:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
O9 - Extra button: Onderzoek -
{92780B25-18CC-41C8-B9BE-3C9C571A8263} -
C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: ConferenceRoom Java Client -
http://www.kateryan.be:8000/java/cr.cab
O16 - DPF:
{00B71CFB-6864-4346-A978-C0A14556272C}
(Checkers Class) -
http://messenger.zone.msn.com/binary/msgrchkr.
cab31267.cab
O16 - DPF:
{03F998B2-0E00-11D3-A498-00104B6EB52E} -
https://components.viewpoint.com/adobe/MTSInst
allers/MetaStream3.cab?url=http://www.irobotmo
vie.com/english/atmosphere/index.html
O16 - DPF:
{0D41B8C5-2599-4893-8183-00195EC8D5F9}
(asusTek_sysctrl Class) -
http://support.asus.com/common/asusTek_sys_ctr
l.cab
O16 - DPF:
{14B87622-7E19-4EA8-93B3-97215F77A6BC}
(MessengerStatsClient Class) -
http://messenger.zone.msn.com/binary/Messenger
StatsPAClient.cab31267.cab
O16 - DPF:
{17492023-C23A-453E-A040-C7C580BBF700}
(Windows Genuine Advantage Validation Tool) -
http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF:
{2917297F-F02B-4B9D-81DF-494B6333150B}
(Minesweeper Flags Class) -
http://messenger.zone.msn.com/binary/MineSweep
er.cab30149.cab
O16 - DPF:
{39B0684F-D7BF-4743-B050-FDC3F48F7E3B}
(FilePlanet Download Control Class) -
http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.
1.2.76.cab
O16 - DPF:
{4D7F48C0-CB49-4EA6-97D4-04F4EACC2F3B} -
http://sib1.od2.com/common/Member/ClientInstal
l/10.20.0002/OCI/setup.exe
O16 - DPF:
{4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN
Photo Upload Tool) -
http://kristofked.spaces.msn.com//PhotoUpload/
MsnPUpld.cab
O16 - DPF:
{54B52E52-8000-4413-BD67-FC7FE24B59F2}
(EARTPatchX Class) -
http://www.ea.com/downloads/rtpatch/EARTPX.cab
O16 - DPF:
{56393399-041A-4650-94C7-13DFCB1F4665}
(PSFormX Control) -
http://pestpatrol.com/pestscan/pestscan.cab
O16 - DPF:
{5D9E4B6D-CD17-4D85-99D4-6A52B394EC3B} -
http://www.webshots.com/samplers/WSDownloader.
ocx
O16 - DPF:
{70BA88C8-DAE8-4CE9-92BB-979C4A75F53B}
(GSDACtl Class) -
http://launch.gamespyarcade.com/software/launc
h/alaunch.cab
O16 - DPF:
{8E0D4DE5-3180-4024-A327-4DFAD1796A8D}
(MessengerStatsClient Class) -
http://messenger.zone.msn.com/binary/Messenger
StatsClient.cab30149.cab
O16 - DPF:
{8EDAD21C-3584-4E66-A8AB-EB0E5584767D}
(Toolbar Reg Sniff Activate) -
http://toolbar.google.com/data/GoogleActivate.
cab
O16 - DPF:
{9A9307A0-7DA4-4DAF-B042-5009F29E09E1}
(ActiveScan Installer Class) -
http://acs.pandasoftware.com/activescan/as5fre
e/asinst.cab
O16 - DPF:
{9FC5238F-12C4-454F-B1B5-74599A21DE47}
(Webshots Photo Uploader) -
http://community.webshots.com/html/WSPhotoUplo
ader.CAB
O16 - DPF:
{B38870E4-7ECB-40DA-8C6A-595F0A5519FF}
(MsnMessengerSetupDownloadControl Class) -
http://messenger.msn.com/download/MsnMessenger
SetupDownloader.cab
O16 - DPF:
{B8BE5E93-A60C-4D26-A2DC-220313175592}
(ZoneIntro Class) -
http://messenger.zone.msn.com/binary/ZIntro.ca
b32846.cab
O16 - DPF:
{BD393C14-72AD-4790-A095-76522973D6B8}
(CBreakshotControl Class) -
http://messenger.zone.msn.com/binary/Bankshot.
cab31267.cab
O16 - DPF:
{BE833F39-1E0C-468C-BA70-25AAEE55775E} (System
Requirements Lab) -
http://www.systemrequirementslab.com/sysreqlab
.cab
O16 - DPF:
{C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE}
(Symantec RuFSI Registry Information Class) -
http://security.symantec.com/sscv6/SharedConte
nt/common/bin/cabsa.cab
O16 - DPF:
{C36661D7-3590-45B1-80B5-520839E94DAD}
(MaxisSimCity4PatcherX Control) -
http://simcity.ea.com/update/MaxisSimCity4Patc
herX.cab
O16 - DPF:
{C45B1500-7B63-47C2-AB25-C28CB46AFDEE} (OD2
Music Manager) -
http://sib1.od2.com/common/musicmanager/instal
lation/MusicManagerPlugin.CAB
O16 - DPF:
{D1E7CBDA-E60E-4970-A01C-37301EF7BF98}
(Measurement Services Client v.3.7) -
http://gameadvisor.futuremark.com/global/msc37
.cab
O16 - DPF:
{E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver
Agent ActiveX Control) -
http://driveragent.com/files/driveragent.cab
O16 - DPF:
{EB387D2F-E27B-4D36-979E-847D1036C65D}
(QDiagHUpdateObj Class) -
http://h30043.www3.hp.com/hpdj/en/check/qdiagh
.cab?326
O16 - DPF:
{F5D98C43-DB16-11CF-8ECA-0000C0FD59C7} -
http://www.sites.bipt.be/ant2/acgm/acgm.cab
O16 - DPF:
{FCEAE646-DCF9-4D59-B994-6BD30A315139} -
http://www.mtv.com/overdrive/bin/setup.exe
O16 - DPF:
{FE5D6722-826F-11D5-A24E-0060B0F1A5AE} (Tukati
Launcher) -
http://www.tukati.com/software/4/1.7.20.20/tuk
ati.cab
O18 - Protocol: bw+0 -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw+0s -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw-0 -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw-0s -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw00 -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw00s -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw10 -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw10s -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw20 -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw20s -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw30 -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw30s -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw40 -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw40s -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw50 -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw50s -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw60 -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw60s -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw70 -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw70s -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw80 -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw80s -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw90 -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
Logfile of HijackThis v1.99.1
Scan saved at 12:52:29, on 14/09/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2
(6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Executive
Software\Diskeeper\DkService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\SLEE401.exe
C:\Program Files\Analog
Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alcatel\SpeedTouch
USB\Dragdiag.exe
C:\Program Files\Analog
Devices\SoundMAX\SMax4.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpz
tsb05.exe
C:\Program Files\Analog
Devices\SoundMAX\SMax4PNP.exe
F:\Program Files\Google\Gmail
Notifier\G001-1.0.25.0\gnotify.exe
C:\Program
Files\Java\jre1.5.0_06\bin\jusched.exe
F:\Program Files\Winamp\winampa.exe
C:\PROGRA~1\MICROS~3\GAMECO~1\common\swtrayv4.
exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\WhatPulse\WhatPulse.exe
F:\Program Files\Globe
Software\StatBar\StatBar.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\LogitechDesktopMesse
nger.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Hijackthis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet
Explorer\Main,Start Page =
http://www.google.be/webhp?hl=nl
R0 - HKLM\Software\Microsoft\Internet
Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet
Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: HelperObject Class -
{00C6482D-C502-44C8-8409-FCE54AD9C208} -
F:\Program Files\TechSmith\SnagIt
7\SnagItBHO.dll
O2 - BHO: Adobe PDF Reader Link Helper -
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
F:\Program Files\Adobe\Acrobat
7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) -
{53707962-6F74-2D53-2644-206D7942484F} -
C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class -
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -
C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper -
{AA58ED58-01DD-4d91-8333-CF10577473F7} -
c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google -
{2318C2B1-4965-11d4-9B18-009027A5CD4F} -
c:\program files\google\googletoolbar1.dll
O3 - Toolbar: SnagIt -
{8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} -
F:\Program Files\TechSmith\SnagIt
7\SnagItIEAddin.dll
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics]
"C:\Program Files\Alcatel\SpeedTouch
USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [SoundMAX] "C:\Program
Files\Analog Devices\SoundMAX\SMax4.exe" /tray
O4 - HKLM\..\Run: [HPDJ Taskbar Utility]
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpz
tsb05.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program
Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run:
[{0228e555-4f9c-4e35-a3ec-b109a192b4c2}]
F:\Program Files\Google\Gmail
Notifier\G001-1.0.25.0\gnotify.exe
O4 - HKLM\..\Run: [DiskeeperSystray]
"C:\Program Files\Executive
Software\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [NeroCheck]
C:\WINDOWS\System32\\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched]
C:\Program
Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program
Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [WinampAgent] F:\Program
Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [SideWinderTrayV4]
C:\PROGRA~1\MICROS~3\GAMECO~1\common\swtrayv4.
exe
O4 - HKLM\..\Run: [Windows Defender]
"C:\Program Files\Windows
Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [AVG7_CC]
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
/STARTUP
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE
C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE
C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ImInstaller_] C:\Documents
and Settings\Dufraing - Van Loo\Local
Settings\Temporary Internet
Files\Content.IE5\S1Y3CTYV\incredimail_install
[1].exe -startup -product
O4 - HKLM\..\Run: [MSConfig]
C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.
exe /auto
O4 - HKCU\..\Run: [IncrediMail] C:\Program
Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [CTFMON.EXE]
C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WhatPulse] C:\Program
Files\WhatPulse\WhatPulse.exe
O4 - HKCU\..\Run: [StatBar] F:\Program
Files\Globe Software\StatBar\StatBar.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program
Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [LDM] F:\Program
Files\Logitech\Desktop
Messenger\8876480\Program\LogitechDesktopMesse
nger.exe
O4 - Global Startup: Adobe Gamma Loader.lnk =
C:\Program Files\Common
Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed
Launch.lnk = F:\Program Files\Adobe\Acrobat
7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop
Messenger.lnk = F:\Program
Files\Logitech\Desktop
Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk =
F:\Program Files\Logitech\SetPoint\KEM.exe
O4 - Global Startup: Microsoft Office OneNote
2003 Snel Starten.lnk = C:\Program
Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
O8 - Extra context menu item: &Google Zoeken -
res://c:\program
files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Woord vertalen
in het Nederlands - res://c:\program
files\google\GoogleToolbar1.dll/cmwordtrans.ht
ml
O8 - Extra context menu item: E&xporteren naar
Microsoft Excel -
res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/
3000
O8 - Extra context menu item: Gelijkwaardige
pagina's - res://c:\program
files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item:
Koppelingspagina's - res://c:\program
files\google\GoogleToolbar1.dll/cmbacklinks.ht
ml
O8 - Extra context menu item: Opgeslagen
momentopname van de pagina - res://c:\program
files\google\GoogleToolbar1.dll/cmcache.html
O9 - Extra button: (no name) -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console
- {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Spyware Doctor -
{2D663D1A-8670-49D9-A1A5-4C56B4E14E84} -
F:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
O9 - Extra button: Onderzoek -
{92780B25-18CC-41C8-B9BE-3C9C571A8263} -
C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: ConferenceRoom Java Client -
http://www.kateryan.be:8000/java/cr.cab
O16 - DPF:
{00B71CFB-6864-4346-A978-C0A14556272C}
(Checkers Class) -
http://messenger.zone.msn.com/binary/msgrchkr.
cab31267.cab
O16 - DPF:
{03F998B2-0E00-11D3-A498-00104B6EB52E} -
https://components.viewpoint.com/adobe/MTSInst
allers/MetaStream3.cab?url=http://www.irobotmo
vie.com/english/atmosphere/index.html
O16 - DPF:
{0D41B8C5-2599-4893-8183-00195EC8D5F9}
(asusTek_sysctrl Class) -
http://support.asus.com/common/asusTek_sys_ctr
l.cab
O16 - DPF:
{14B87622-7E19-4EA8-93B3-97215F77A6BC}
(MessengerStatsClient Class) -
http://messenger.zone.msn.com/binary/Messenger
StatsPAClient.cab31267.cab
O16 - DPF:
{17492023-C23A-453E-A040-C7C580BBF700}
(Windows Genuine Advantage Validation Tool) -
http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF:
{2917297F-F02B-4B9D-81DF-494B6333150B}
(Minesweeper Flags Class) -
http://messenger.zone.msn.com/binary/MineSweep
er.cab30149.cab
O16 - DPF:
{39B0684F-D7BF-4743-B050-FDC3F48F7E3B}
(FilePlanet Download Control Class) -
http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.
1.2.76.cab
O16 - DPF:
{4D7F48C0-CB49-4EA6-97D4-04F4EACC2F3B} -
http://sib1.od2.com/common/Member/ClientInstal
l/10.20.0002/OCI/setup.exe
O16 - DPF:
{4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN
Photo Upload Tool) -
http://kristofked.spaces.msn.com//PhotoUpload/
MsnPUpld.cab
O16 - DPF:
{54B52E52-8000-4413-BD67-FC7FE24B59F2}
(EARTPatchX Class) -
http://www.ea.com/downloads/rtpatch/EARTPX.cab
O16 - DPF:
{56393399-041A-4650-94C7-13DFCB1F4665}
(PSFormX Control) -
http://pestpatrol.com/pestscan/pestscan.cab
O16 - DPF:
{5D9E4B6D-CD17-4D85-99D4-6A52B394EC3B} -
http://www.webshots.com/samplers/WSDownloader.
ocx
O16 - DPF:
{70BA88C8-DAE8-4CE9-92BB-979C4A75F53B}
(GSDACtl Class) -
http://launch.gamespyarcade.com/software/launc
h/alaunch.cab
O16 - DPF:
{8E0D4DE5-3180-4024-A327-4DFAD1796A8D}
(MessengerStatsClient Class) -
http://messenger.zone.msn.com/binary/Messenger
StatsClient.cab30149.cab
O16 - DPF:
{8EDAD21C-3584-4E66-A8AB-EB0E5584767D}
(Toolbar Reg Sniff Activate) -
http://toolbar.google.com/data/GoogleActivate.
cab
O16 - DPF:
{9A9307A0-7DA4-4DAF-B042-5009F29E09E1}
(ActiveScan Installer Class) -
http://acs.pandasoftware.com/activescan/as5fre
e/asinst.cab
O16 - DPF:
{9FC5238F-12C4-454F-B1B5-74599A21DE47}
(Webshots Photo Uploader) -
http://community.webshots.com/html/WSPhotoUplo
ader.CAB
O16 - DPF:
{B38870E4-7ECB-40DA-8C6A-595F0A5519FF}
(MsnMessengerSetupDownloadControl Class) -
http://messenger.msn.com/download/MsnMessenger
SetupDownloader.cab
O16 - DPF:
{B8BE5E93-A60C-4D26-A2DC-220313175592}
(ZoneIntro Class) -
http://messenger.zone.msn.com/binary/ZIntro.ca
b32846.cab
O16 - DPF:
{BD393C14-72AD-4790-A095-76522973D6B8}
(CBreakshotControl Class) -
http://messenger.zone.msn.com/binary/Bankshot.
cab31267.cab
O16 - DPF:
{BE833F39-1E0C-468C-BA70-25AAEE55775E} (System
Requirements Lab) -
http://www.systemrequirementslab.com/sysreqlab
.cab
O16 - DPF:
{C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE}
(Symantec RuFSI Registry Information Class) -
http://security.symantec.com/sscv6/SharedConte
nt/common/bin/cabsa.cab
O16 - DPF:
{C36661D7-3590-45B1-80B5-520839E94DAD}
(MaxisSimCity4PatcherX Control) -
http://simcity.ea.com/update/MaxisSimCity4Patc
herX.cab
O16 - DPF:
{C45B1500-7B63-47C2-AB25-C28CB46AFDEE} (OD2
Music Manager) -
http://sib1.od2.com/common/musicmanager/instal
lation/MusicManagerPlugin.CAB
O16 - DPF:
{D1E7CBDA-E60E-4970-A01C-37301EF7BF98}
(Measurement Services Client v.3.7) -
http://gameadvisor.futuremark.com/global/msc37
.cab
O16 - DPF:
{E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver
Agent ActiveX Control) -
http://driveragent.com/files/driveragent.cab
O16 - DPF:
{EB387D2F-E27B-4D36-979E-847D1036C65D}
(QDiagHUpdateObj Class) -
http://h30043.www3.hp.com/hpdj/en/check/qdiagh
.cab?326
O16 - DPF:
{F5D98C43-DB16-11CF-8ECA-0000C0FD59C7} -
http://www.sites.bipt.be/ant2/acgm/acgm.cab
O16 - DPF:
{FCEAE646-DCF9-4D59-B994-6BD30A315139} -
http://www.mtv.com/overdrive/bin/setup.exe
O16 - DPF:
{FE5D6722-826F-11D5-A24E-0060B0F1A5AE} (Tukati
Launcher) -
http://www.tukati.com/software/4/1.7.20.20/tuk
ati.cab
O18 - Protocol: bw+0 -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw+0s -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw-0 -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw-0s -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw00 -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw00s -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw10 -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw10s -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw20 -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw20s -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw30 -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw30s -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw40 -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw40s -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw50 -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw50s -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw60 -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw60s -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw70 -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw70s -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw80 -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw80s -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
O18 - Protocol: bw90 -
{24B48269-3B11-43EA-B1A4-A10E19276258} -
F:\Program Files\Logitech\Desktop
Messenger\8876480\Program\BWPlugProtocol-88764
80.dll
daarom dat ik het in 2 delen heb gedaan
