Archief - Logje controleren

Na wat problemen met spyware/virussen op pc, gans het boeltje eens opgekuist. Alles blijkt nu in orde te zijn, toch voor het zekere eens het logje posten.

Probleem dat ik nog heb is dat bij het booten altijd de windows verkenner (explorer.exe) automatisch wordt gestart...

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 15:17:30, on 7/06/2007
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
Boot mode: Normal

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\nvsvc32.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\userinit.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINNT\system32\internat.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijack This\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.nl
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
F2 - REGystem.ini: UserInit=C:\WINNT\system32\userinit.exe,userinit.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O3 - Toolbar: @msdxmLC.dll,-1@1043,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKUS\.DEFAULT\..\Run: [internat.exe] internat.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user')
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.msn.nl
O14 - IERESET.INF: MS_START_PAGE_URL=http://www.msn.nl
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1175858738612
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINNT\System32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINNT\System32\browseui.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Logical Disk Manager Administrative-service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe

--
End of file - 3890 bytes

Download combofix.exe: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Plaats het op je bureaublad.
Dubbelklik er op om het programma te starten.
In het scherm dat verschijnt tik je een Y in om het cleaningsprocess te starten.
Volg de instructies op het scherm.
Als het tooltje klaar is, opent er een logfile (combofix.txt) Post de inhoud van dit bestandje samen met een nieuwe hijackthislog.

Combofix

"Administrator" - 09/06/2007 9:36:38 Service Pack 4 NTFS
ComboFix 07-06-3B - Running from: "C:\Documents and Settings\Administrator\Bureaublad\"


((((((((((((((((((((((((( Files Created from 2007-05-09 to 2007-06-09 )))))))))))))))))))))))))))))))


2007-06-09 09:30 16,384 --a----t- C:\WINNT\system32\Perflib_Perfdata_208.dat
2007-06-07 15:15 16,384 --a----t- C:\WINNT\system32\Perflib_Perfdata_228.dat
2007-06-07 15:03 <DIR> d-------- C:\Program Files\Hijack This
2007-06-07 14:45 16,384 --a----t- C:\WINNT\system32\Perflib_Perfdata_370.dat
2007-06-07 14:39 <DIR> d-------- C:\Program Files\Lavasoft
2007-06-07 14:39 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
2007-06-07 14:38 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-06-07 14:27 <DIR> d-------- C:\Program Files\CDBurnerXP Pro 3
2007-06-07 14:22 16,384 --a----t- C:\WINNT\system32\Perflib_Perfdata_1f0.dat
2007-06-04 15:18 9,344 --a------ C:\WINNT\system32\drivers\NSDriver.sys
2007-06-04 15:17 8,320 --a------ C:\WINNT\system32\drivers\AWRTRD.sys
2007-06-04 15:14 6,272 --a------ C:\WINNT\system32\drivers\AWRTPD.sys
2007-05-23 17:01 16,384 --a----t- C:\WINNT\system32\Perflib_Perfdata_1f4.dat
2007-05-21 19:20 16,384 --a----t- C:\WINNT\system32\Perflib_Perfdata_1f8.dat
2007-05-09 23:06 <DIR> d-------- C:\DOCUME~1\ADMINI~1\APPLIC~1\Hewlett-Packard
2007-05-09 23:05 82,380 --a------ C:\WINNT\system32\drivers\AFS2K.SYS
2007-05-09 23:05 12,592 --a------ C:\WINNT\system32\drivers\usbscan.sys
2007-05-09 23:05 <DIR> d-------- C:\DOCUME~1\ADMINI~1\APPLIC~1\Verzendmap van Share-to-Web
2007-05-09 23:04 <DIR> d-------- C:\Program Files\Common Files\MSSoap
2007-05-09 23:04 <DIR> d-------- C:\Program Files\Common Files\Hewlett-Packard


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-06-08 18:16:47 -------- d-----w C:\Program Files\Mozilla Thunderbird
2007-06-07 14:56:24 -------- d-----w C:\DOCUME~1\ADMINI~1\APPLIC~1\OpenOffice.org2
2007-06-03 07:43:10 -------- d-----w C:\DOCUME~1\ADMINI~1\APPLIC~1\AdobeUM
2007-05-09 21:05:49 -------- d-----w C:\Program Files\Hewlett-Packard
2007-05-02 17:03:59 16,384 ----atw C:\WINNT\system32\Perflib_Perfdata_20c.dat
2007-05-01 18:27:31 1,744 ----a-w C:\WINNT\system32\d3d9caps.dat
2007-05-01 18:25:03 -------- d-----w C:\Program Files\ffdshow
2007-05-01 18:19:36 -------- d-----w C:\DOCUME~1\ADMINI~1\APPLIC~1\vlc
2007-05-01 18:07:42 -------- d-----w C:\Program Files\VideoLAN
2007-05-01 18:01:24 -------- d-----w C:\Program Files\Micro DVD Player
2007-05-01 07:09:35 16,384 ----atw C:\WINNT\system32\Perflib_Perfdata_1fc.dat
2007-04-30 18:50:24 -------- d-----w C:\DOCUME~1\ADMINI~1\APPLIC~1\LockTime
2007-04-30 17:19:02 -------- d-----w C:\Program Files\npp
2007-04-25 17:05:55 3,972 ----a-w C:\WINNT\mozver.dat
2007-04-21 11:08:41 -------- d-----w C:\Program Files\aMSN
2007-04-14 14:52:54 57,344 ----a-w C:\WINNT\uneng.exe
2007-04-14 14:52:53 -------- d-----w C:\Program Files\Common Files\Adaptec Shared
2007-04-14 14:52:51 58,000 ----a-w C:\WINNT\system32\drivers\cdr4_2K.sys
2007-04-14 14:52:51 49,152 ----a-w C:\WINNT\system32\cdrtc.dll
2007-04-14 14:52:51 45,056 ----a-w C:\WINNT\system32\cdral.dll
2007-04-14 14:52:51 23,420 ----a-w C:\WINNT\system32\drivers\cdralw2k.sys
2007-04-13 14:12:38 16,384 ----atw C:\WINNT\system32\Perflib_Perfdata_1ec.dat
2007-04-13 13:19:52 7,680 ----a-w C:\WINNT\system32\lsdelete.exe
2007-04-09 09:54:14 -------- d-----w C:\DOCUME~1\ADMINI~1\APPLIC~1\WinRAR
2007-04-06 12:41:00 16,384 ----atw C:\WINNT\system32\Perflib_Perfdata_200.dat
2007-04-06 11:18:42 0 ----a-w C:\WINNT\nsreg.dat
2007-04-06 10:30:01 0 --sha-r C:\MSDOS.SYS
2007-04-06 10:30:01 0 --sha-r C:\IO.SYS
2007-04-06 10:30:00 0 ---h--w C:\CONFIG.SYS
2007-04-06 10:30:00 0 ---h--w C:\AUTOEXEC.BAT
2007-04-06 10:28:51 50,990 ----a-w C:\WINNT\system32\perfc013.dat
2007-04-06 10:28:51 350,156 ----a-w C:\WINNT\system32\perfh013.dat
2007-04-06 10:27:17 15,140 ----a-w C:\WINNT\system32\emptyregdb.dat
2007-04-06 08:25:34 94,208 ----a-w C:\WINNT\system32\nvwrsja.dll
2007-04-06 08:25:34 90,112 ----a-w C:\WINNT\system32\nvwrsko.dll
2007-04-06 08:25:34 73,728 ----a-w C:\WINNT\system32\nvwrszht.dll
2007-04-06 08:25:34 73,728 ----a-w C:\WINNT\system32\nvwrszhc.dll
2007-04-06 08:25:34 446,464 ----a-w C:\WINNT\system32\nwiz.exe
2007-04-06 08:25:34 155,648 ----a-w C:\WINNT\system32\nvwrsru.dll
2007-04-06 08:25:34 151,552 ----a-w C:\WINNT\system32\nvwrsptb.dll
2007-04-06 08:25:34 151,552 ----a-w C:\WINNT\system32\nvwrspt.dll
2007-04-06 08:25:34 151,552 ----a-w C:\WINNT\system32\nvwrsit.dll
2007-04-06 08:25:34 151,552 ----a-w C:\WINNT\system32\nvwrsfr.dll
2007-04-06 08:25:34 147,456 ----a-w C:\WINNT\system32\nvwrssk.dll
2007-04-06 08:25:34 147,456 ----a-w C:\WINNT\system32\nvwrsnl.dll
2007-04-06 08:25:34 147,456 ----a-w C:\WINNT\system32\nvwrshu.dll
2007-04-06 08:25:34 143,360 ----a-w C:\WINNT\system32\nvwrstr.dll
2007-04-06 08:25:34 143,360 ----a-w C:\WINNT\system32\nvwrspl.dll
2007-04-06 08:25:34 143,360 ----a-w C:\WINNT\system32\nvwrsfi.dll
2007-04-06 08:25:34 139,264 ----a-w C:\WINNT\system32\nvwrssv.dll
2007-04-06 08:25:34 139,264 ----a-w C:\WINNT\system32\nvwrsno.dll
2007-04-06 08:25:34 135,168 ----a-w C:\WINNT\system32\nvwrssl.dll
2007-04-06 08:25:34 122,880 ----a-w C:\WINNT\system32\nvwrshe.dll
2007-04-06 08:25:32 65,536 ----a-w C:\WINNT\system32\nvsvc32.exe
2007-04-06 08:25:32 516,167 ----a-w C:\WINNT\system32\nvshell.dll
2007-04-06 08:25:32 249,856 ----a-w C:\WINNT\system32\nvrsptb.dll
2007-04-06 08:25:32 245,760 ----a-w C:\WINNT\system32\nvrstr.dll
2007-04-06 08:25:32 245,760 ----a-w C:\WINNT\system32\nvrsru.dll
2007-04-06 08:25:32 241,664 ----a-w C:\WINNT\system32\nvrssv.dll
2007-04-06 08:25:32 237,568 ----a-w C:\WINNT\system32\nvrssl.dll
2007-04-06 08:25:32 233,472 ----a-w C:\WINNT\system32\nvrspt.dll
2007-04-06 08:25:32 229,376 ----a-w C:\WINNT\system32\nvrssk.dll
2007-04-06 08:25:32 229,376 ----a-w C:\WINNT\system32\nvrspl.dll
2007-04-06 08:25:32 212,992 ----a-w C:\WINNT\system32\nvrszht.dll
2007-04-06 08:25:32 208,896 ----a-w C:\WINNT\system32\nvrszhc.dll
2007-04-06 08:25:32 159,744 ----a-w C:\WINNT\system32\nvwrsel.dll
2007-04-06 08:25:32 151,552 ----a-w C:\WINNT\system32\nvwrses.dll
2007-04-06 08:25:32 151,552 ----a-w C:\WINNT\system32\nvwrsde.dll
2007-04-06 08:25:32 139,264 ----a-w C:\WINNT\system32\nvwrsda.dll
2007-04-06 08:25:32 135,168 ----a-w C:\WINNT\system32\nvwrscs.dll
2007-04-06 08:25:32 126,976 ----a-w C:\WINNT\system32\nvwrseng.dll
2007-04-06 08:25:32 126,976 ----a-w C:\WINNT\system32\nvwrsar.dll
2007-04-06 08:25:30 3,461,120 ----a-w C:\WINNT\system32\nvoglnt.dll
2007-04-06 08:25:30 294,912 ----a-w C:\WINNT\system32\nvrsar.dll
2007-04-06 08:25:30 282,624 ----a-w C:\WINNT\system32\nvrshe.dll
2007-04-06 08:25:30 253,952 ----a-w C:\WINNT\system32\nvrsit.dll
2007-04-06 08:25:30 253,952 ----a-w C:\WINNT\system32\nvrsde.dll
2007-04-06 08:25:30 249,856 ----a-w C:\WINNT\system32\nvrsnl.dll
2007-04-06 08:25:30 249,856 ----a-w C:\WINNT\system32\nvrsfr.dll
2007-04-06 08:25:30 245,760 ----a-w C:\WINNT\system32\nvrsda.dll
2007-04-06 08:25:30 241,664 ----a-w C:\WINNT\system32\nvrsno.dll
2007-04-06 08:25:30 241,664 ----a-w C:\WINNT\system32\nvrses.dll
2007-04-06 08:25:30 237,568 ----a-w C:\WINNT\system32\nvrsfi.dll
2007-04-06 08:25:30 237,568 ----a-w C:\WINNT\system32\nvrsel.dll
2007-04-06 08:25:30 237,568 ----a-w C:\WINNT\system32\nvrscs.dll
2007-04-06 08:25:30 229,376 ----a-w C:\WINNT\system32\nvrshu.dll
2007-04-06 08:25:30 221,184 ----a-w C:\WINNT\system32\nvrsja.dll
2007-04-06 08:25:30 217,088 ----a-w C:\WINNT\system32\nvrsko.dll
2007-04-06 08:25:30 114,688 ----a-w C:\WINNT\system32\nvrseng.dll
2007-04-06 08:25:28 856,133 ----a-w C:\WINNT\system32\nview.dll
2007-04-06 08:25:28 49,152 ----a-w C:\WINNT\system32\nvmctray.dll
2007-04-06 08:25:28 4,214,784 ----a-w C:\WINNT\system32\nvcpl.dll
2007-04-06 08:25:28 352,256 ----a-w C:\WINNT\system32\nviewimg.dll
2007-04-06 08:25:28 118,784 ----a-w C:\WINNT\system32\nvinstnt.dll
2007-04-06 08:25:26 262,229 ----a-w C:\WINNT\system32\keystone.exe
2007-04-06 08:25:26 2,596,938 ----a-w C:\WINNT\system32\nv4_disp.dll
2007-04-06 08:25:24 1,306,624 ----a-w C:\WINNT\system32\dmcpl.exe


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}=C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll [03/11/03 14:17 ]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}=C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll [14/03/07 03:43 ]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Synchronization Manager"="mobsync.exe" [19/06/03 12:05 C:\WINNT\system32\mobsync.exe]
"nwiz"="nwiz.exe" [06/04/07 10:25 C:\WINNT\system32\nwiz.exe]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [15/01/07 18:28 ]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"internat.exe"="internat.exe" [11/01/00 02:00 C:\WINNT\system32\internat.exe]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce]
"^SetupICWDesktop"=C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"internat.exe"=internat.exe

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\aawservice]

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost *netsvcs*


**************************************************************************

catchme 0.3.692 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-06-09 09:38:05
Windows 5.0.2195 Service Pack 4 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

Completion time: 09/06/2007 9:38:53

--- E O F ---



HijackThis
Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 9:43:27, on 9/06/2007
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
Boot mode: Normal

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\nvsvc32.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINNT\system32\internat.exe
C:\WINNT\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijack This\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.nl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O3 - Toolbar: @msdxmLC.dll,-1@1043,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKUS\.DEFAULT\..\Run: [internat.exe] internat.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user')
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.msn.nl
O14 - IERESET.INF: MS_START_PAGE_URL=http://www.msn.nl
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1175858738612
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINNT\System32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINNT\System32\browseui.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Logical Disk Manager Administrative-service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\system32\nvsvc32.exe

--
End of file - 3776 bytes

Ziet er goed uit.