Archief - Logje

Logfile of HijackThis v1.99.1
Scan saved at 10:53:31, on 2/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE
C:\Documents and Settings\Chu\winstall.exe
C:\Program Files\Common Files\{58BF5473-0259-1033-0425-001013990020}\Update.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\Chu\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R3 - URLSearchHook: (no name) - {40C30543-CCA6-9157-8289-B06932DB8EC5} - C:\WINDOWS\system32\jvb.dll (file missing)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {40C30543-CCA6-9157-8289-B06932DB8EC5} - C:\WINDOWS\system32\jvb.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [EPSON Stylus Photo RX420 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE /P31 "EPSON Stylus Photo RX420 Series" /O6 "USB002" /M "Stylus Photo RX420"
O4 - HKLM\..\Run: [explorer] C:\Documents and Settings\Chu\winstall.exe
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v10/StagingUI.cab46479.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) - http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab32846.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10/ZPAChat.cab32846.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {A4110378-789B-455F-AE86-3A1BFC402853} (ZPA_SHVL Object) - http://zone.msn.com/bingame/zpagames/zpa_shvl.cab50560.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab53083.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/binframework/v10/StProxy.cab41227.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

thx

Logfile of HijackThis v1.99.1
Scan saved at 15:40:26, on 3/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE
C:\Program Files\Messenger\Msmsgs.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Documents and Settings\Chu\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R3 - URLSearchHook: (no name) - {40C30543-CCA6-9157-8289-B06932DB8EC5} - C:\WINDOWS\system32\jvb.dll (file missing)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {40C30543-CCA6-9157-8289-B06932DB8EC5} - C:\WINDOWS\system32\jvb.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [EPSON Stylus Photo RX420 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE /P31 "EPSON Stylus Photo RX420 Series" /O6 "USB002" /M "Stylus Photo RX420"
O4 - HKLM\..\Run: [explorer] C:\Documents and Settings\Chu\winstall.exe
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\Msmsgs.exe" /background
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v10/StagingUI.cab46479.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) - http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab32846.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10/ZPAChat.cab32846.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {A4110378-789B-455F-AE86-3A1BFC402853} (ZPA_SHVL Object) - http://zone.msn.com/bingame/zpagames/zpa_shvl.cab50560.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab53083.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/binframework/v10/StProxy.cab41227.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 15:21:01 3/12/2006

+ Scan result:



C:\System Volume Information\_restore{5997E20C-6BFF-4E34-90C1-B645D5ED3901}\RP27\A0002572.exe -> Adware.ClickSpring : Cleaned with backup (quarantined).
C:\Documents and Settings\Chu\Local Settings\Temp\b122.exe -> Adware.Maxifiles : Cleaned with backup (quarantined).
C:\Documents and Settings\Chu\Local Settings\Temporary Internet Files\Content.IE5\E9G3654V\122[1].net -> Adware.Maxifiles : Cleaned with backup (quarantined).
C:\Documents and Settings\Chu\Local Settings\Temporary Internet Files\Content.IE5\E9G3654V\webinstall[1].exe -> Adware.PurityScan : Cleaned with backup (quarantined).
C:\Documents and Settings\Chu\winstall.exe -> Adware.PurityScan : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{5997E20C-6BFF-4E34-90C1-B645D5ED3901}\RP28\A0002754.dll -> Adware.PurityScan : Cleaned with backup (quarantined).
C:\Program Files\DAEMON Tools\SetupDTSB.exe -> Adware.SaveNow : Cleaned with backup (quarantined).
C:\Documents and Settings\Chu\Local Settings\Temp\b116.exe -> Adware.Softomate : Cleaned with backup (quarantined).
C:\Program Files\Common Files\{58BF5473-0259-1033-0425-001013990020}\Update.exe -> Adware.Softomate : Cleaned with backup (quarantined).
C:\Program Files\Common Files\{58BF5473-0259-1033-0425-001013990020}\system.dll -> Adware.Softomate : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{5997E20C-6BFF-4E34-90C1-B645D5ED3901}\RP28\A0002718.dll -> Adware.Softomate : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{5997E20C-6BFF-4E34-90C1-B645D5ED3901}\RP28\A0002719.exe -> Adware.Softomate : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{5997E20C-6BFF-4E34-90C1-B645D5ED3901}\RP28\A0002720.dll -> Adware.Softomate : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{5997E20C-6BFF-4E34-90C1-B645D5ED3901}\RP28\A0002721.exe -> Adware.Softomate : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{5997E20C-6BFF-4E34-90C1-B645D5ED3901}\RP28\A0002722.dll -> Adware.Softomate : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{5997E20C-6BFF-4E34-90C1-B645D5ED3901}\RP28\A0002723.exe -> Adware.Softomate : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{5997E20C-6BFF-4E34-90C1-B645D5ED3901}\RP28\A0002724.dll -> Adware.Softomate : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{5997E20C-6BFF-4E34-90C1-B645D5ED3901}\RP28\A0002725.exe -> Adware.Softomate : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{5997E20C-6BFF-4E34-90C1-B645D5ED3901}\RP28\A0002726.dll -> Adware.Softomate : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{5997E20C-6BFF-4E34-90C1-B645D5ED3901}\RP28\A0002727.exe -> Adware.Softomate : Cleaned with backup (quarantined).
C:\Documents and Settings\Chu\Local Settings\Temporary Internet Files\Content.IE5\492JSPEB\pic2038[1].pif -> Backdoor.Agent.aim : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{5997E20C-6BFF-4E34-90C1-B645D5ED3901}\RP27\A0002588.rbf -> Backdoor.Agent.aim : Cleaned with backup (quarantined).
C:\Documents and Settings\Chu\Local Settings\Temporary Internet Files\Content.IE5\492JSPEB\mccbnew[1].exe -> Downloader.Agent.bca : Cleaned with backup (quarantined).
C:\Documents and Settings\Chu\mcnew.exe -> Downloader.Agent.bca : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{5997E20C-6BFF-4E34-90C1-B645D5ED3901}\RP27\A0002580.exe -> Downloader.Agent.bca : Cleaned with backup (quarantined).
C:\Documents and Settings\Chu\Local Settings\Temp\!update.exe -> Downloader.PurityScan.co : Cleaned with backup (quarantined).
C:\Documents and Settings\Chu\Local Settings\Temporary Internet Files\Content.IE5\AN07AZWH\!update-4295[1].0000 -> Downloader.PurityScan.co : Cleaned with backup (quarantined).
C:\Documents and Settings\Chu\Local Settings\Temp\installer.exe -> Dropper.PurityScan.q : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{5997E20C-6BFF-4E34-90C1-B645D5ED3901}\RP27\A0002571.exe -> Dropper.Small : Cleaned with backup (quarantined).
C:\Documents and Settings\Chu\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Chu\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.75:C:\Documents and Settings\Chu\Application Data\Mozilla\Firefox\Profiles\dz0hpw3v.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.76:C:\Documents and Settings\Chu\Application Data\Mozilla\Firefox\Profiles\dz0hpw3v.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
C:\Documents and Settings\Chu\Cookies\chu@adbrite[1].txt -> TrackingCookie.Adbrite : Cleaned.
C:\Documents and Settings\Chu\Cookies\[email protected][1].txt -> TrackingCookie.Addynamix : Cleaned.
C:\Documents and Settings\Chu\Cookies\chu@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
C:\Documents and Settings\Chu\Cookies\chu@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned.
C:\Documents and Settings\Chu\Cookies\[email protected][1].txt -> TrackingCookie.Bridgetrack : Cleaned.
C:\Documents and Settings\Chu\Cookies\chu@burstnet[1].txt -> TrackingCookie.Burstnet : Cleaned.
C:\Documents and Settings\Chu\Cookies\[email protected][2].txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.203:C:\Documents and Settings\Chu\Application Data\Mozilla\Firefox\Profiles\dz0hpw3v.default\cookies.txt -> TrackingCookie.Clickhype : Cleaned.
C:\Documents and Settings\Chu\Cookies\[email protected][1].txt -> TrackingCookie.Clickhype : Cleaned.
C:\Documents and Settings\Chu\Cookies\chu@com[1].txt -> TrackingCookie.Com : Cleaned.
:mozilla.11:C:\Documents and Settings\Chu\Application Data\Mozilla\Firefox\Profiles\dz0hpw3v.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Documents and Settings\Chu\Cookies\chu@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.23:C:\Documents and Settings\Chu\Application Data\Mozilla\Firefox\Profiles\dz0hpw3v.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.24:C:\Documents and Settings\Chu\Application Data\Mozilla\Firefox\Profiles\dz0hpw3v.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.25:C:\Documents and Settings\Chu\Application Data\Mozilla\Firefox\Profiles\dz0hpw3v.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.26:C:\Documents and Settings\Chu\Application Data\Mozilla\Firefox\Profiles\dz0hpw3v.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
C:\Documents and Settings\Chu\Cookies\[email protected][2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\Chu\Cookies\chu@hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\Chu\Cookies\chu@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned.
C:\Documents and Settings\Chu\Cookies\[email protected][1].txt -> TrackingCookie.Pointroll : Cleaned.
C:\Documents and Settings\Chu\Cookies\chu@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned.
C:\Documents and Settings\Chu\Cookies\chu@revenue[2].txt -> TrackingCookie.Revenue : Cleaned.
C:\Documents and Settings\Chu\Cookies\chu@serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned.
C:\Documents and Settings\Chu\Cookies\[email protected][2].txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.12:C:\Documents and Settings\Chu\Application Data\Mozilla\Firefox\Profiles\dz0hpw3v.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.54:C:\Documents and Settings\Chu\Application Data\Mozilla\Firefox\Profiles\dz0hpw3v.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.55:C:\Documents and Settings\Chu\Application Data\Mozilla\Firefox\Profiles\dz0hpw3v.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.66:C:\Documents and Settings\Chu\Application Data\Mozilla\Firefox\Profiles\dz0hpw3v.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.7:C:\Documents and Settings\Chu\Application Data\Mozilla\Firefox\Profiles\dz0hpw3v.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.175:C:\Documents and Settings\Chu\Application Data\Mozilla\Firefox\Profiles\dz0hpw3v.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.176:C:\Documents and Settings\Chu\Application Data\Mozilla\Firefox\Profiles\dz0hpw3v.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
C:\Documents and Settings\Chu\Cookies\chu@tacoda[2].txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.68:C:\Documents and Settings\Chu\Application Data\Mozilla\Firefox\Profiles\dz0hpw3v.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.69:C:\Documents and Settings\Chu\Application Data\Mozilla\Firefox\Profiles\dz0hpw3v.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.70:C:\Documents and Settings\Chu\Application Data\Mozilla\Firefox\Profiles\dz0hpw3v.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
C:\Documents and Settings\Chu\Cookies\chu@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Cleaned.
C:\Documents and Settings\Chu\Local Settings\Temporary Internet Files\Content.IE5\AN07AZWH\spot[1].exe -> Trojan.Small : Cleaned with backup (quarantined).
C:\Documents and Settings\Chu\isetup.exe -> Trojan.Small : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{5997E20C-6BFF-4E34-90C1-B645D5ED3901}\RP27\A0002573.exe -> Trojan.Small : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{5997E20C-6BFF-4E34-90C1-B645D5ED3901}\RP27\A0002579.exe -> Trojan.Small : Cleaned with backup (quarantined).


::Report end

Combofix log ontbreekt nog.

Chu - 06-12-03 17:08:20,51 Service Pack 2
ComboFix 06.11.27W - Running from: "C:\Documents and Settings\Chu\Desktop"

(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\Program Files\Common Files\{38BF5473-0259-1033-0425-001013990020}
C:\Program Files\Common Files\{58BF5473-0259-1033-0425-001013990020}

~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ Purity ~ ~ ~ ~ ~ ~ ~ ~~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~

Folders Quarantined:

C:\QooBox\Purity\Program Files\FNTS~1
C:\QooBox\Purity\Program Files\FNTS~1\w?crtupd.exe
C:\QooBox\Purity\WINDOWS\system32\MCROSO~1
C:\QooBox\Purity\WINDOWS\system32\MCROSO~1\M?crosoft


((((((((((((((((((((((((((((((( Files Created from 2006-11-03 to 2006-12-03 ))))))))))))))))))))))))))))))))))


2006-12-03 13:29 <DIR> d-------- C:\WINDOWS\SxsCaPendDel
2006-12-03 13:28 <DIR> d--hs---- C:\Config.Msi
2006-12-02 19:56 <DIR> d-------- C:\Program Files\Messenger
2006-12-02 19:29 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2006-12-02 16:55 <DIR> d-------- C:\Documents and Settings\Chu\Application Data\Lavasoft
2006-12-02 16:52 <DIR> d-------- C:\Program Files\Lavasoft
2006-12-02 16:43 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2006-12-02 16:42 <DIR> d-------- C:\Program Files\Grisoft
2006-12-02 16:36 <DIR> d---s---- C:\Documents and Settings\Chu\UserData
2006-11-30 00:16 <DIR> d-------- C:\Program Files\GPLGS
2006-11-30 00:06 81,920 --a------ C:\WINDOWS\system32\cpwmon2k.dll
2006-11-30 00:06 49,152 --a------ C:\WINDOWS\system32\uninscpw.exe
2006-11-30 00:06 225,280 --a------ C:\WINDOWS\system32\cpwsave.exe
2006-11-30 00:06 <DIR> d-------- C:\Program Files\Acro Software
2006-11-29 18:18 <DIR> d-------- C:\Documents and Settings\Chu\Application Data\AdobeUM
2006-11-29 18:17 <DIR> d-------- C:\Documents and Settings\Chu\Application Data\Adobe
2006-11-29 18:15 <DIR> d-------- C:\Program Files\Common Files\Adobe
2006-11-29 18:15 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Adobe
2006-11-29 18:09 <DIR> d-------- C:\Program Files\Adobe
2006-11-26 23:27 502,368 --a------ C:\WINDOWS\system32\drivers\amon.sys
2006-11-26 23:27 274,432 --a------ C:\WINDOWS\system32\imon.dll
2006-11-26 23:26 <DIR> d-------- C:\Program Files\ESET
2006-11-26 23:25 83,592 --a------ C:\WINDOWS\system32\SSSensor.dll
2006-11-26 23:25 61,008 --a------ C:\WINDOWS\system32\drivers\Teefer.sys
2006-11-26 23:25 21,075 --a------ C:\WINDOWS\system32\drivers\wpsdrvnt.sys
2006-11-26 23:25 14,944 --a------ C:\WINDOWS\system32\drivers\wg6n.sys
2006-11-26 23:25 14,944 --a------ C:\WINDOWS\system32\drivers\wg5n.sys
2006-11-26 23:25 14,944 --a------ C:\WINDOWS\system32\drivers\wg4n.sys
2006-11-26 23:25 14,944 --a------ C:\WINDOWS\system32\drivers\wg3n.sys
2006-11-26 23:25 <DIR> d-------- C:\Program Files\Sygate
2006-11-26 23:24 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2006-11-26 23:18 <DIR> d-------- C:\Program Files\Spybot - Search & Destroy
2006-11-26 23:18 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2006-11-26 13:35 <DIR> d-------- C:\Documents and Settings\Chu\Application Data\Smart Panel
2006-11-26 13:10 <DIR> d-------- C:\WINDOWS\EPSON CardMonitor Essential
2006-11-26 13:08 <DIR> d-------- C:\WINDOWS\EPSON PhotoStarter Essential
2006-11-26 13:07 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\UDL
2006-11-26 13:05 131,072 --a------ C:\WINDOWS\system32\Epcmlib.dll
2006-11-26 12:59 212,480 --a------ C:\WINDOWS\PCDLIB32.DLL
2006-11-26 12:59 1,706,800 --a------ C:\WINDOWS\system32\gdiplus.dll
2006-11-26 12:59 <DIR> d-------- C:\Program Files\ArcSoft
2006-11-26 12:49 5,632 --a------ C:\WINDOWS\system32\ptpusb.dll
2006-11-26 12:49 159,232 --a------ C:\WINDOWS\system32\ptpusd.dll
2006-11-26 12:49 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
2006-11-26 12:40 96,768 --a------ C:\WINDOWS\SlantAdj.dll
2006-11-26 12:40 73,216 --a------ C:\WINDOWS\ADE.DLL
2006-11-26 12:39 <DIR> d--h----- C:\Program Files\InstallShield Installation Information
2006-11-26 12:39 <DIR> d-------- C:\Program Files\Smart Panel
2006-11-26 12:36 65,536 --a------ C:\WINDOWS\system32\EPPicMgr.dll
2006-11-26 12:36 413,696 --a------ C:\WINDOWS\system32\PICSDK.dll
2006-11-26 12:36 114,688 --a------ C:\WINDOWS\system32\EpPicPrt.dll
2006-11-26 12:36 <DIR> d-------- C:\Program Files\Common Files\InstallShield
2006-11-26 12:28 79,654 --a------ C:\WINDOWS\system32\E_FLM9CE.DLL
2006-11-26 12:28 64,000 --a------ C:\WINDOWS\system32\E_FBCB9CE.DLL
2006-11-26 12:28 34,304 --a------ C:\WINDOWS\system32\E_FBCH9CE.DLL
2006-11-26 12:28 31,744 --a------ C:\WINDOWS\system32\E_DCINST.DLL
2006-11-26 12:17 46,080 --a------ C:\WINDOWS\system32\escimgd.dll
2006-11-26 12:17 29,184 --a------ C:\WINDOWS\system32\escwiadn.dll
2006-11-26 12:17 22,528 --a------ C:\WINDOWS\system32\esccmd.dll
2006-11-26 12:17 <DIR> d-------- C:\Program Files\epson
2006-11-26 12:11 31,616 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys
2006-11-26 00:03 <DIR> d-------- C:\WINDOWS\Sun
2006-11-26 00:03 <DIR> d-------- C:\Documents and Settings\Chu\Application Data\Sun
2006-11-24 19:50 51,072 --a------ C:\WINDOWS\system32\drivers\ikhlayer.sys
2006-11-24 19:50 30,592 --a------ C:\WINDOWS\system32\drivers\ikhfile.sys
2006-11-24 19:50 <DIR> d-------- C:\Program Files\Spyware Doctor
2006-11-24 19:50 <DIR> d-------- C:\Documents and Settings\Chu\Application Data\PC Tools
2006-11-24 19:48 499,712 --a------ C:\WINDOWS\system32\msvcp71.dll
2006-11-24 19:48 348,160 --a------ C:\WINDOWS\system32\msvcr71.dll
2006-11-23 23:35 <DIR> d-------- C:\WINDOWS\pss
2006-11-23 20:33 16,973 --a------ C:\WINDOWS\system32\ZWebAuth.dll
2006-11-22 22:06 26,496 --a------ C:\WINDOWS\system32\drivers\USBSTOR.SYS
2006-11-22 21:33 79,360 --a------ C:\WINDOWS\system32\CNBJMON2.DLL
2006-11-22 21:32 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2006-11-12 19:27 <DIR> d-------- C:\WINDOWS\RegisteredPackages
2006-11-12 19:27 <DIR> d-------- C:\Program Files\MSN Messenger
2006-11-12 17:55 <DIR> d-------- C:\Program Files\Microsoft.NET
2006-11-12 17:55 <DIR> d-------- C:\Program Files\Microsoft ActiveSync
2006-11-12 17:53 <DIR> d-------- C:\Program Files\Common Files\DESIGNER
2006-11-12 17:52 <DIR> d-------- C:\WINDOWS\SHELLNEW
2006-11-12 17:51 <DIR> d-------- C:\Program Files\Microsoft Office
2006-11-12 17:46 <DIR> dr-h----- C:\MSOCache
2006-11-08 23:47 29,384 --a------ C:\WINDOWS\system32\mdimon.dll
2006-11-08 23:24 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2006-11-08 23:10 223,128 --a------ C:\WINDOWS\system32\drivers\dtscsi.sys
2006-11-08 23:10 <DIR> d-------- C:\Program Files\DAEMON Tools
2006-11-08 23:06 <DIR> d-------- C:\WINDOWS\system32\appmgmt
2006-11-08 22:56 96,256 --a------ C:\WINDOWS\system32\drivers\sptd3501.sys
2006-11-08 22:56 643,072 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2006-11-08 22:20 <DIR> d-------- C:\Documents and Settings\Chu\Incomplete
2006-11-08 22:02 <DIR> d-------- C:\Documents and Settings\Chu\Application Data\LimeWire
2006-11-04 15:13 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2006-11-04 13:12 11,264 --a------ C:\WINDOWS\system32\SpOrder.dll
2006-11-04 13:04 <DIR> d-------- C:\WINDOWS\Internet Logs
2006-11-04 13:03 22,752 --a------ C:\WINDOWS\system32\spupdsvc.exe
2006-11-04 13:03 <DIR> d--h----- C:\WINDOWS\$hf_mig$
2006-11-04 13:03 <DIR> d-------- C:\WINDOWS\system32\PreInstall
2006-11-04 00:22 24,072 --a------ C:\WINDOWS\system32\uxtuneup.dll
2006-11-04 00:05 <DIR> d-------- C:\Documents and Settings\Chu\Application Data\TuneUp Software
2006-11-04 00:01 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\TuneUp Software
2006-11-03 23:48 <DIR> d-------- C:\Program Files\WinRAR
2006-11-03 23:43 <DIR> d-------- C:\Program Files\Java
2006-11-03 23:41 <DIR> d-------- C:\Program Files\Common Files\Java
2006-11-03 23:40 <DIR> d-------- C:\Program Files\LimeWire
2006-11-03 23:31 <DIR> d-------- C:\Documents and Settings\Chu\Application Data\Macromedia
2006-11-03 23:29 <DIR> d-------- C:\Program Files\BitComet
2006-11-03 22:35 <DIR> d--hs---- C:\RECYCLER
2006-11-03 22:34 <DIR> d-------- C:\Documents and Settings\Chu\Application Data\Mozilla
2006-11-03 22:33 <DIR> d-------- C:\Program Files\Mozilla Firefox
2006-11-03 21:58 <DIR> d-------- C:\Documents and Settings\Chu\Contacts
2006-11-03 21:57 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE
2006-11-03 21:51 <DIR> dr-h----- C:\Documents and Settings\Chu\SendTo
2006-11-03 21:51 <DIR> dr-h----- C:\Documents and Settings\Chu\Recent
2006-11-03 21:51 <DIR> dr-h----- C:\Documents and Settings\Chu\Application Data\.
2006-11-03 21:51 <DIR> dr-h----- C:\Documents and Settings\Chu\Application Data
2006-11-03 21:51 <DIR> dr------- C:\Documents and Settings\Chu\Start Menu
2006-11-03 21:51 <DIR> dr------- C:\Documents and Settings\Chu\Favorites
2006-11-03 21:51 <DIR> d--h----- C:\Program Files\Uninstall Information
2006-11-03 21:51 <DIR> d--h----- C:\Documents and Settings\Chu\Templates
2006-11-03 21:51 <DIR> d--h----- C:\Documents and Settings\Chu\PrintHood
2006-11-03 21:51 <DIR> d--h----- C:\Documents and Settings\Chu\NetHood
2006-11-03 21:51 <DIR> d--h----- C:\Documents and Settings\Chu\Local Settings
2006-11-03 21:51 <DIR> d---s---- C:\Documents and Settings\Chu\Cookies
2006-11-03 21:51 <DIR> d---s---- C:\Documents and Settings\Chu\Application Data\Microsoft
2006-11-03 21:51 <DIR> d-------- C:\WINDOWS\system32\SoftwareDistribution
2006-11-03 21:51 <DIR> d-------- C:\Documents and Settings\Chu\My Documents
2006-11-03 21:51 <DIR> d-------- C:\Documents and Settings\Chu\Desktop
2006-11-03 21:51 <DIR> d-------- C:\Documents and Settings\Chu\Application Data\Identities
2006-11-03 21:51 <DIR> d-------- C:\Documents and Settings\Chu\Application Data\..
2006-11-03 21:51 <DIR> d-------- C:\Documents and Settings\Chu\..
2006-11-03 21:51 <DIR> d-------- C:\Documents and Settings\Chu\.
2006-11-03 14:48 6,400 --a------ C:\WINDOWS\system32\drivers\splitter.sys
2006-11-03 14:48 2,944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys
2006-11-03 14:48 142,464 --a------ C:\WINDOWS\system32\drivers\aec.sys
2006-11-03 14:47 82,944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys
2006-11-03 14:47 7,552 --a------ C:\WINDOWS\system32\drivers\MSKSSRV.sys
2006-11-03 14:47 60,800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys
2006-11-03 14:47 54,272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys
2006-11-03 14:47 52,864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys
2006-11-03 14:47 5,376 --a------ C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2006-11-03 14:47 4,992 --a------ C:\WINDOWS\system32\drivers\MSPQM.sys
2006-11-03 14:47 3,072 --a------ C:\WINDOWS\system32\drivers\audstub.sys
2006-11-03 14:47 172,416 --a------ C:\WINDOWS\system32\drivers\kmixer.sys
2006-11-03 14:46 57,472 --a------ C:\WINDOWS\system32\drivers\redbook.sys
2006-11-03 14:46 10,624 --a------ C:\WINDOWS\system32\drivers\gameenum.sys
2006-11-03 14:45 84,480 --a------ C:\WINDOWS\system32\drivers\ac97via.sys
2006-11-03 14:45 60,288 --a------ C:\WINDOWS\system32\drivers\drmk.sys
2006-11-03 14:45 42,240 --a------ C:\WINDOWS\system32\drivers\VIAAGP.SYS
2006-11-03 14:45 4,274,816 --a------ C:\WINDOWS\system32\nv4_disp.dll
2006-11-03 14:45 4,096 --a------ C:\WINDOWS\system32\ksuser.dll
2006-11-03 14:45 145,792 --a------ C:\WINDOWS\system32\drivers\portcls.sys
2006-11-03 14:45 1,897,408 --a------ C:\WINDOWS\system32\drivers\nv4_mini.sys
2006-11-03 14:44 74,240 --a------ C:\WINDOWS\system32\usbui.dll
2006-11-03 14:44 20,992 --a------ C:\WINDOWS\system32\drivers\RTL8139.sys
2006-11-03 14:40 9,936 --a------ C:\WINDOWS\system\LZEXPAND.DLL
2006-11-03 14:40 9,008 --a------ C:\WINDOWS\system\VER.DLL
2006-11-03 14:40 85,020 --a------ C:\WINDOWS\system32\dgsetup.dll
2006-11-03 14:40 82,944 --a------ C:\WINDOWS\system\OLECLI.DLL
2006-11-03 14:40 8,704 --a------ C:\WINDOWS\system32\batt.dll
2006-11-03 14:40 8,192 -ra------ C:\WINDOWS\system32\kbdhept.dll
2006-11-03 14:40 7,168 -ra------ C:\WINDOWS\system32\kbdcz.dll
2006-11-03 14:40 69,584 --a------ C:\WINDOWS\system\AVICAP.DLL
2006-11-03 14:40 69,120 --a------ C:\WINDOWS\NOTEPAD.EXE
2006-11-03 14:40 68,768 --a------ C:\WINDOWS\system\MMSYSTEM.DLL
2006-11-03 14:40 6,656 -ra------ C:\WINDOWS\system32\kbdycl.dll
2006-11-03 14:40 6,656 -ra------ C:\WINDOWS\system32\kbdsl1.dll
2006-11-03 14:40 6,656 -ra------ C:\WINDOWS\system32\kbdsl.dll
2006-11-03 14:40 6,656 -ra------ C:\WINDOWS\system32\kbdpl.dll
2006-11-03 14:40 6,656 -ra------ C:\WINDOWS\system32\kbdhu.dll
2006-11-03 14:40 6,656 -ra------ C:\WINDOWS\system32\kbdhela3.dll
2006-11-03 14:40 6,656 -ra------ C:\WINDOWS\system32\kbdcz2.dll
2006-11-03 14:40 6,656 -ra------ C:\WINDOWS\system32\kbdcz1.dll
2006-11-03 14:40 6,656 -ra------ C:\WINDOWS\system32\kbdcr.dll
2006-11-03 14:40 6,656 -ra------ C:\WINDOWS\system32\KBDAL.DLL
2006-11-03 14:40 6,144 -ra------ C:\WINDOWS\system32\kbdtuq.dll
2006-11-03 14:40 6,144 -ra------ C:\WINDOWS\system32\kbdtuf.dll
2006-11-03 14:40 6,144 -ra------ C:\WINDOWS\system32\kbdlv1.dll
2006-11-03 14:40 6,144 -ra------ C:\WINDOWS\system32\kbdlv.dll
2006-11-03 14:40 6,144 -ra------ C:\WINDOWS\system32\kbdhela2.dll
2006-11-03 14:40 6,144 -ra------ C:\WINDOWS\system32\kbdgkl.dll
2006-11-03 14:40 6,144 -ra------ C:\WINDOWS\system32\kbdest.dll
2006-11-03 14:40 5,632 -ra------ C:\WINDOWS\system32\kbdycc.dll
2006-11-03 14:40 5,632 -ra------ C:\WINDOWS\system32\kbduzb.dll
2006-11-03 14:40 5,632 -ra------ C:\WINDOWS\system32\kbdur.dll
2006-11-03 14:40 5,632 -ra------ C:\WINDOWS\system32\kbdtat.dll
2006-11-03 14:40 5,632 -ra------ C:\WINDOWS\system32\kbdru1.dll
2006-11-03 14:40 5,632 -ra------ C:\WINDOWS\system32\kbdru.dll
2006-11-03 14:40 5,632 -ra------ C:\WINDOWS\system32\kbdro.dll
2006-11-03 14:40 5,632 -ra------ C:\WINDOWS\system32\kbdpl1.dll
2006-11-03 14:40 5,632 -ra------ C:\WINDOWS\system32\kbdmon.dll
2006-11-03 14:40 5,632 -ra------ C:\WINDOWS\system32\kbdlt1.dll
2006-11-03 14:40 5,632 -ra------ C:\WINDOWS\system32\kbdlt.dll
2006-11-03 14:40 5,632 -ra------ C:\WINDOWS\system32\kbdkyr.dll
2006-11-03 14:40 5,632 -ra------ C:\WINDOWS\system32\kbdkaz.dll
2006-11-03 14:40 5,632 -ra------ C:\WINDOWS\system32\kbdhu1.dll
2006-11-03 14:40 5,632 -ra------ C:\WINDOWS\system32\kbdhe319.dll
2006-11-03 14:40 5,632 -ra------ C:\WINDOWS\system32\kbdhe220.dll
2006-11-03 14:40 5,632 -ra------ C:\WINDOWS\system32\kbdhe.dll
2006-11-03 14:40 5,632 -ra------ C:\WINDOWS\system32\kbdbu.dll
2006-11-03 14:40 5,632 -ra------ C:\WINDOWS\system32\kbdblr.dll
2006-11-03 14:40 5,632 -ra------ C:\WINDOWS\system32\kbdazel.dll
2006-11-03 14:40 5,632 -ra------ C:\WINDOWS\system32\kbdaze.dll
2006-11-03 14:40 5,120 --a------ C:\WINDOWS\system\SHELL.DLL
2006-11-03 14:40 32,816 --a------ C:\WINDOWS\system\COMMDLG.DLL
2006-11-03 14:40 24,661 --a------ C:\WINDOWS\system32\spxcoins.dll
2006-11-03 14:40 24,064 --a------ C:\WINDOWS\system\OLESVR.DLL
2006-11-03 14:40 19,200 --a------ C:\WINDOWS\system\TAPI.DLL
2006-11-03 14:40 176,157 --a------ C:\WINDOWS\system32\dgrpsetu.dll
2006-11-03 14:40 15,360 --a------ C:\WINDOWS\TASKMAN.EXE
2006-11-03 14:40 13,312 --a------ C:\WINDOWS\system32\irclass.dll
2006-11-03 14:40 126,912 --a------ C:\WINDOWS\system\MSVIDEO.DLL
2006-11-03 14:40 11,264 --a------ C:\WINDOWS\system32\drivers\irenum.sys
2006-11-03 14:40 109,456 --a------ C:\WINDOWS\system\AVIFILE.DLL
2006-11-03 14:40 103,424 --a------ C:\WINDOWS\system32\EqnClass.Dll
2006-11-03 14:40 <DIR> dr------- C:\Program Files\Common Files\..
2006-11-03 14:40 <DIR> dr------- C:\Program Files\.
2006-11-03 14:40 <DIR> dr------- C:\Program Files
2006-11-03 14:40 <DIR> d--hs---- C:\WINDOWS\Installer
2006-11-03 14:40 <DIR> d--hs---- C:\Program Files\..
2006-11-03 14:40 <DIR> d-------- C:\Program Files\Common Files\SpeechEngines
2006-11-03 14:40 <DIR> d-------- C:\Program Files\Common Files\ODBC
2006-11-03 14:40 <DIR> d-------- C:\Program Files\Common Files\Microsoft Shared
2006-11-03 14:40 <DIR> d-------- C:\Program Files\Common Files\.
2006-11-03 14:40 <DIR> d-------- C:\Program Files\Common Files
2006-11-03 14:39 74,752 --a------ C:\WINDOWS\system32\storprop.dll
2006-11-03 14:39 <DIR> dr------- C:\Documents and Settings\All Users\Start Menu
2006-11-03 14:39 <DIR> dr------- C:\Documents and Settings\All Users\Documents
2006-11-03 14:39 <DIR> d--h----- C:\Documents and Settings\All Users\Templates
2006-11-03 14:39 <DIR> d-------- C:\WINDOWS\system32\CatRoot2
2006-11-03 14:39 <DIR> d-------- C:\WINDOWS\system32\CatRoot
2006-11-03 14:39 <DIR> d-------- C:\Documents and Settings\All Users\Favorites
2006-11-03 14:39 <DIR> d-------- C:\Documents and Settings\All Users\Desktop
2006-11-03 14:38 <DIR> dr-h----- C:\Documents and Settings\All Users\Application Data\.
2006-11-03 14:38 <DIR> dr-h----- C:\Documents and Settings\All Users\Application Data
2006-11-03 14:38 <DIR> d---s---- C:\Documents and Settings\All Users\Application Data\Microsoft
2006-11-03 14:38 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\..
2006-11-03 14:38 <DIR> d-------- C:\Documents and Settings\All Users\..
2006-11-03 14:38 <DIR> d-------- C:\Documents and Settings\All Users\.
2006-11-03 14:38 <DIR> d-------- C:\Documents and Settings
2006-11-03 14:31 <DIR> d---s---- C:\WINDOWS\system32\Microsoft
2006-11-03 14:31 <DIR> d-------- C:\WINDOWS\SoftwareDistribution
2006-11-03 14:31 <DIR> d-------- C:\WINDOWS\Prefetch
2006-11-03 14:22 <DIR> d--hs---- C:\System Volume Information
2006-11-03 14:19 <DIR> dr-hsc--- C:\WINDOWS\system32\dllcache
2006-11-03 14:19 <DIR> dr--s---- C:\WINDOWS\Fonts
2006-11-03 14:19 <DIR> dr------- C:\WINDOWS\Web
2006-11-03 14:19 <DIR> d--hs---- C:\WINDOWS\..
2006-11-03 14:19 <DIR> d--h----- C:\WINDOWS\inf
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\WinSxS
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\twain_32
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\Temp
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\xircom
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\wins
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\wbem
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\usmt
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\spool
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\ShellExt
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\Setup
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\ras
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\oobe
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\npp
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\mui
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\inetsrv
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\IME
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\icsxml
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\ias
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\export
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\drivers\etc
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\drivers\disdn
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\drivers\..
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\drivers\.
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\drivers
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\dhcp
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\config
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\3com_dmi
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\3076
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\2052
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\1054
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\1042
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\1041
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\1037
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\1033
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\1031
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\1028
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\1025
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\..
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32\.
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system32
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system\..
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system\.
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\system
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\security
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\Resources
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\repair
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\Provisioning
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\PeerNet
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\pchealth
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\mui
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\msapps
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\msagent
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\Media
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\java
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\ime
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\Help
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\ehome
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\Driver Cache
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\Debug
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\Cursors
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\Connection Wizard
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\Config
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\AppPatch
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\addins
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS\.
2006-11-03 14:19 <DIR> d-------- C:\WINDOWS
2006-11-03 14:19 <DIR> d-------- C:\Program Files\xerox
2006-11-03 14:19 <DIR> d-------- C:\Program Files\microsoft frontpage
2006-11-03 14:17 0 -rahs---- C:\MSDOS.SYS
2006-11-03 14:17 0 -rahs---- C:\IO.SYS
2006-11-03 14:17 0 --a------ C:\CONFIG.SYS
2006-11-03 14:17 0 --a------ C:\AUTOEXEC.BAT
2006-11-03 14:16 112,128 --a------ C:\WINDOWS\system32\mapi32.dll
2006-11-03 14:13 <DIR> d--hs---- C:\Documents and Settings\All Users\DRM
2006-11-03 14:12 <DIR> dr------- C:\WINDOWS\Offline Web Pages
2006-11-03 14:12 <DIR> d---s---- C:\WINDOWS\Downloaded Program Files
2006-11-03 14:11 <DIR> d--h----- C:\Program Files\WindowsUpdate
2006-11-03 14:10 64,512 --a------ C:\WINDOWS\system32\acctres.dll
2006-11-03 14:10 12,288 --a------ C:\WINDOWS\system32\nmevtmsg.dll
2006-11-03 14:10 11,264 --a------ C:\WINDOWS\system32\atrace.dll
2006-11-03 14:10 <DIR> d-------- C:\WINDOWS\system32\DirectX
2006-11-03 14:09 81,920 --a------ C:\WINDOWS\system32\isign32.dll
2006-11-03 14:09 81,920 --a------ C:\WINDOWS\system32\ils.dll
2006-11-03 14:09 8,192 --a------ C:\WINDOWS\system32\bitsprx2.dll
2006-11-03 14:09 73,728 --a------ C:\WINDOWS\system32\icwdial.dll
2006-11-03 14:09 73,472 --a------ C:\WINDOWS\system32\drivers\sr.sys
2006-11-03 14:09 7,168 --a------ C:\WINDOWS\system32\bitsprx3.dll
2006-11-03 14:09 69,632 --a------ C:\WINDOWS\system32\msconf.dll
2006-11-03 14:09 679,424 --a------ C:\WINDOWS\system32\inetcomm.dll
2006-11-03 14:09 67,584 --a------ C:\WINDOWS\system32\srclient.dll
2006-11-03 14:09 65,536 --a------ C:\WINDOWS\system32\icwphbk.dll
2006-11-03 14:09 6,656 --a------ C:\WINDOWS\system32\wuauserv.dll
2006-11-03 14:09 48,128 --a------ C:\WINDOWS\system32\inetres.dll
2006-11-03 14:09 465,176 --a------ C:\WINDOWS\system32\wuapi.dll
2006-11-03 14:09 45,568 --a------ C:\WINDOWS\system32\safrslv.dll
2006-11-03 14:09 43,520 --a------ C:\WINDOWS\system32\safrcdlg.dll
2006-11-03 14:09 43,520 --a------ C:\WINDOWS\system32\racpldlg.dll
2006-11-03 14:09 41,240 --a------ C:\WINDOWS\system32\wups.dll
2006-11-03 14:09 382,464 --a------ C:\WINDOWS\system32\qmgr.dll
2006-11-03 14:09 34,560 --a------ C:\WINDOWS\system32\mnmdd.dll
2006-11-03 14:09 32,768 --a------ C:\WINDOWS\system32\mnmsrvc.exe
2006-11-03 14:09 32,768 --a------ C:\WINDOWS\system32\isrdbg32.dll
2006-11-03 14:09 29,696 --a------ C:\WINDOWS\system32\safrdm.dll
2006-11-03 14:09 28,672 --a------ C:\WINDOWS\system32\nmmkcert.dll
2006-11-03 14:09 274,944 --a------ C:\WINDOWS\system32\mstask.dll
2006-11-03 14:09 274,432 --a------ C:\WINDOWS\system32\inetcfg.dll
2006-11-03 14:09 252,928 --a------ C:\WINDOWS\system32\msoeacct.dll
2006-11-03 14:09 239,104 --a------ C:\WINDOWS\system32\srrstr.dll
2006-11-03 14:09 23,040 --a------ C:\WINDOWS\system32\fltmc.exe
2006-11-03 14:09 194,328 --a------ C:\WINDOWS\system32\wuaueng1.dll
2006-11-03 14:09 190,976 --a------ C:\WINDOWS\system32\schedsvc.dll
2006-11-03 14:09 18,944 --a------ C:\WINDOWS\system32\qmgrprxy.dll
2006-11-03 14:09 173,536 --a------ C:\WINDOWS\system32\wuweb.dll
2006-11-03 14:09 172,312 --a------ C:\WINDOWS\system32\wuauclt1.exe
2006-11-03 14:09 170,496 --a------ C:\WINDOWS\system32\srsvc.dll
2006-11-03 14:09 16,896 --a------ C:\WINDOWS\system32\fltlib.dll
2006-11-03 14:09 16,384 --a------ C:\WINDOWS\system32\icfgnt5.dll
2006-11-03 14:09 128,896 --a------ C:\WINDOWS\system32\drivers\fltmgr.sys
2006-11-03 14:09 127,256 --a------ C:\WINDOWS\system32\wucltui.dll
2006-11-03 14:09 124,184 --a------ C:\WINDOWS\system32\wuauclt.exe
2006-11-03 14:09 12,288 --a------ C:\WINDOWS\system32\mstinit.exe
2006-11-03 14:09 105,984 --a------ C:\WINDOWS\system32\msoert2.dll
2006-11-03 14:09 1,343,768 --a------ C:\WINDOWS\system32\wuaueng.dll
2006-11-03 14:09 <DIR> d---s---- C:\WINDOWS\Tasks
2006-11-03 14:09 <DIR> d-------- C:\WINDOWS\system32\Restore
2006-11-03 14:09 <DIR> d-------- C:\WINDOWS\system32\Macromed
2006-11-03 14:09 <DIR> d-------- C:\WINDOWS\srchasst
2006-11-03 14:09 <DIR> d-------- C:\Program Files\Outlook Express
2006-11-03 14:09 <DIR> d-------- C:\Program Files\NetMeeting
2006-11-03 14:09 <DIR> d-------- C:\Program Files\Movie Maker
2006-11-03 14:09 <DIR> d-------- C:\Program Files\Common Files\Services
2006-11-03 14:09 <DIR> d-------- C:\Program Files\Common Files\MSSoap
2006-11-03 14:08 <DIR> d-------- C:\Program Files\Internet Explorer
2006-11-03 14:08 <DIR> d-------- C:\Program Files\Common Files\System
2006-11-03 14:06 <DIR> d-------- C:\Program Files\ComPlus Applications
2006-11-03 14:05 5,632 --a------ C:\WINDOWS\system32\write.exe
2006-11-03 14:05 <DIR> d-------- C:\WINDOWS\Registration
2006-11-03 14:05 <DIR> d-------- C:\Program Files\Windows Media Player
2006-11-03 14:05 <DIR> d-------- C:\Program Files\Online Services
2006-11-03 14:05 <DIR> d-------- C:\Program Files\MSN Gaming Zone
2006-11-03 14:04 97,792 --a------ C:\WINDOWS\system32\comrepl.dll
2006-11-03 14:04 93,696 --a------ C:\WINDOWS\system32\tscfgwmi.dll
2006-11-03 14:04 9,728 --a------ C:\WINDOWS\system32\reset.exe
2006-11-03 14:04 80,384 --a------ C:\WINDOWS\system32\charmap.exe
2006-11-03 14:04 73,216 --a------ C:\WINDOWS\system32\avwav.dll
2006-11-03 14:04 605,696 --a------ C:\WINDOWS\system32\getuname.dll
2006-11-03 14:04 56,832 --a------ C:\WINDOWS\system32\sol.exe
2006-11-03 14:04 55,296 --a------ C:\WINDOWS\system32\freecell.exe
2006-11-03 14:04 54,272 --a------ C:\WINDOWS\system32\stclient.dll
2006-11-03 14:04 538,624 --a------ C:\WINDOWS\system32\spider.exe
2006-11-03 14:04 5,120 --a------ C:\WINDOWS\system32\dcomcnfg.exe
2006-11-03 14:04 44,544 --a------ C:\WINDOWS\system32\hticons.dll
2006-11-03 14:04 4,096 --a------ C:\WINDOWS\system32\rdpcfgex.dll
2006-11-03 14:04 4,096 --a------ C:\WINDOWS\system32\mtxex.dll
2006-11-03 14:04 35,328 --a------ C:\WINDOWS\system32\winchat.exe
2006-11-03 14:04 347,136 --a------ C:\WINDOWS\system32\hypertrm.dll
2006-11-03 14:04 343,040 --a------ C:\WINDOWS\system32\mspaint.exe
2006-11-03 14:04 33,792 --a------ C:\WINDOWS\system32\regini.exe
2006-11-03 14:04 25,600 --a------ C:\WINDOWS\system32\comaddin.dll
2006-11-03 14:04 25,088 --a------ C:\WINDOWS\system32\mtxlegih.dll
2006-11-03 14:04 227,840 --a------ C:\WINDOWS\system32\avtapi.dll
2006-11-03 14:04 22,016 --a------ C:\WINDOWS\system32\qwinsta.exe
2006-11-03 14:04 21,896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys
2006-11-03 14:04 20,992 --a------ C:\WINDOWS\system32\msg.exe
2006-11-03 14:04 20,480 --a------ C:\WINDOWS\system32\mtxdm.dll
2006-11-03 14:04 183,808 --a------ C:\WINDOWS\system32\accwiz.exe
2006-11-03 14:04 16,896 --a------ C:\WINDOWS\system32\tsshutdn.exe
2006-11-03 14:04 16,896 --a------ C:\WINDOWS\system32\qappsrv.exe
2006-11-03 14:04 16,384 --a------ C:\WINDOWS\system32\tskill.exe
2006-11-03 14:04 16,384 --a------ C:\WINDOWS\system32\avmeter.dll
2006-11-03 14:04 15,872 --a------ C:\WINDOWS\system32\rwinsta.exe
2006-11-03 14:04 15,872 --a------ C:\WINDOWS\system32\cdmodem.dll
2006-11-03 14:04 15,360 --a------ C:\WINDOWS\system32\logoff.exe
2006-11-03 14:04 147,456 --a------ C:\WINDOWS\system32\comsnap.dll
2006-11-03 14:04 14,848 --a------ C:\WINDOWS\system32\tsdiscon.exe
2006-11-03 14:04 14,848 --a------ C:\WINDOWS\system32\tscon.exe
2006-11-03 14:04 14,848 --a------ C:\WINDOWS\system32\shadow.exe
2006-11-03 14:04 139,528 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys
2006-11-03 14:04 138,752 --a------ C:\WINDOWS\system32\sndvol32.exe
2006-11-03 14:04 131,584 --a------ C:\WINDOWS\system32\sndrec32.exe
2006-11-03 14:04 126,976 --a------ C:\WINDOWS\system32\mshearts.exe
2006-11-03 14:04 123,392 --a------ C:\WINDOWS\system32\mplay32.exe
2006-11-03 14:04 12,040 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys
2006-11-03 14:04 119,808 --a------ C:\WINDOWS\system32\winmine.exe
2006-11-03 14:04 114,688 --a------ C:\WINDOWS\system32\calc.exe
2006-11-03 14:04 102,912 --a------ C:\WINDOWS\system32\clipbrd.exe
2006-11-03 14:04 1,161 --a------ C:\WINDOWS\system32\usrlogon.cmd
2006-11-03 14:04 <DIR> d-------- C:\Program Files\Windows NT
2006-11-03 14:04 <DIR> d-------- C:\Program Files\MSN

2006-11-03 14:03 956,416 --a------ C:\WINDOWS\system32\msdtctm.dll
2006-11-03 14:03 91,136 --a------ C:\WINDOWS\system32\mtxoci.dll
2006-11-03 14:03 87,176 --a------ C:\WINDOWS\system32\rdpwsx.dll
2006-11-03 14:03 85,504 --a------ C:\WINDOWS\system32\catsrvps.dll
2006-11-03 14:03 67,072 --a------ C:\WINDOWS\system32\rdshost.exe
2006-11-03 14:03 655,360 --a------ C:\WINDOWS\system32\mstscax.dll
2006-11-03 14:03 625,152 --a------ C:\WINDOWS\system32\catsrvut.dll
2006-11-03 14:03 62,464 --a------ C:\WINDOWS\system32\rdpclip.exe
2006-11-03 14:03 60,416 --a------ C:\WINDOWS\system32\remotepg.dll
2006-11-03 14:03 60,416 --a------ C:\WINDOWS\system32\colbact.dll
2006-11-03 14:03 6,144 --a------ C:\WINDOWS\system32\msdtc.exe
2006-11-03 14:03 58,880 --a------ C:\WINDOWS\system32\msdtclog.dll
2006-11-03 14:03 58,880 --a------ C:\WINDOWS\system32\licwmi.dll
2006-11-03 14:03 56,320 --a------ C:\WINDOWS\system32\servdeps.dll
2006-11-03 14:03 540,160 --a------ C:\WINDOWS\system32\comuid.dll
2006-11-03 14:03 498,688 --a------ C:\WINDOWS\system32\clbcatq.dll
2006-11-03 14:03 44,544 --a------ C:\WINDOWS\system32\tscupgrd.exe
2006-11-03 14:03 426,496 --a------ C:\WINDOWS\system32\msdtcprx.dll
2006-11-03 14:03 407,552 --a------ C:\WINDOWS\system32\mstsc.exe
2006-11-03 14:03 40,840 --a------ C:\WINDOWS\system32\drivers\termdd.sys
2006-11-03 14:03 38,912 --a------ C:\WINDOWS\system32\cfgbkend.dll
2006-11-03 14:03 295,424 --a------ C:\WINDOWS\system32\termsrv.dll
2006-11-03 14:03 225,792 --a------ C:\WINDOWS\system32\catsrv.dll
2006-11-03 14:03 20,480 --a------ C:\WINDOWS\system32\qprocess.exe
2006-11-03 14:03 196,864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys
2006-11-03 14:03 19,968 --a------ C:\WINDOWS\system32\rdpsnd.dll
2006-11-03 14:03 185,344 --a------ C:\WINDOWS\system32\cmprops.dll
2006-11-03 14:03 17,408 --a------ C:\WINDOWS\system32\mmfutil.dll
2006-11-03 14:03 161,280 --a------ C:\WINDOWS\system32\msdtcuiu.dll
2006-11-03 14:03 147,968 --a------ C:\WINDOWS\system32\rdchost.dll
2006-11-03 14:03 140,800 --a------ C:\WINDOWS\system32\sessmgr.exe
2006-11-03 14:03 13,824 --a------ C:\WINDOWS\system32\rdsaddin.exe
2006-11-03 14:03 110,080 --a------ C:\WINDOWS\system32\clbcatex.dll
2006-11-03 14:03 11,776 --a------ C:\WINDOWS\system32\xolehlp.dll
2006-11-03 14:03 11,264 --a------ C:\WINDOWS\system32\icaapi.dll
2006-11-03 14:03 1,267,200 --a------ C:\WINDOWS\system32\comsvcs.dll
2006-11-03 14:03 <DIR> d-------- C:\WINDOWS\system32\MsDtc
2006-11-03 14:03 <DIR> d-------- C:\WINDOWS\system32\Com


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))




(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries are not shown

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"msnmsgr"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background"
"MSMSGS"="\"C:\\Program Files\\Messenger\\Msmsgs.exe\" /background"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"EPSON Stylus Photo RX420 Series"="C:\\WINDOWS\\System32\\spool\\DRIVERS\\W32X86\\3\\E_FATI9CE.EXE /P31 \"EPSON Stylus Photo RX420 Series\" /O6 \"USB002\" /M \"Stylus Photo RX420\""
"SmcService"="C:\\PROGRA~1\\Sygate\\SPF\\smc.exe -startgui"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000001

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,d4,01,00,00,00,00,00,00,2c,02,00,00,cb,02,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\
ff,ff,04,00,00,00
"RestoredStateInfo"=hex:18,00,00,00,6a,02,00,00,23,00,00,00,a4,00,00,00,9a,00,\
00,00,01,00,00,00

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"Spyware Doctor"=""

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"Spyware Doctor"=""

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Snelle start.lnk]
"path"="C:\\Documents and Settings\\All Users\\Start Menu\\Programs\\Startup\\Adobe Reader Snelle start.lnk"
"backup"="C:\\WINDOWS\\pss\\Adobe Reader Snelle start.lnkCommon Startup"
"location"="Common Startup"
"command"="C:\\PROGRA~1\\Adobe\\ACROBA~1.0\\Reader\\READER~1.EXE "
"item"="Adobe Reader Snelle start"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\!AVG Anti-Spyware]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="avgas"
"hkey"="HKLM"
"command"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="daemon"
"hkey"="HKLM"
"command"="\"C:\\Program Files\\DAEMON Tools\\daemon.exe\" -lang 1033"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="msmsgs"
"hkey"="HKCU"
"command"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="msnmsgr"
"hkey"="HKCU"
"command"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nod32kui]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="nod32kui"
"hkey"="HKLM"
"command"="\"C:\\Program Files\\Eset\\nod32kui.exe\" /WAITSERVICE"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Retm]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="winword"
"hkey"="HKCU"
"command"="\"C:\\WINDOWS\\system32\\MCROSO~1\\winword.exe\" -vt tzt"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="jusched"
"hkey"="HKLM"
"command"="C:\\Program Files\\Java\\jre1.5.0_03\\bin\\jusched.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, zwebauth.dll"


Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\1-Click Maintenance.job

Completion time: 06-12-03 17:14:10.47
C:\ComboFix.txt ... 06-12-03 17:14

* Verwijder volgende map:

C:\QooBox

* Je Java software is verouderd. oudere versies hebben lekken die malware de kans geeft om zich te installeren op je systeem. Doe eerst deze stappen om Java te de-installeren en de nieuwere versie te installeren:

• Download de nieuwste versie hier: Java Runtime Environment (JRE) 5.0 Update 10.
• Vink het volgende aan waar er staat: "Accept License Agreement".
• De pagina zal herladen.
• Klik op de link om Windows Offline Installation te downloaden met Meerdere-talen En bewaar het naar je bureaublad.
• Sluit alle programma's die eventueel open zijn - Zeker je web browser!
• Ga dan naar Start > Configuratiescherm en dubbelklik op software en verwijder alle oudere versies van Java.
• Vink alles aan met Java Runtime Environment (JRE of J2SE) in de naam.
• Klik dan op Verwijderen of Wijzig/Verwijder knop.
• Herhaal dit tot alle oudere versies verdwenen zijn.
• Na het verwijderen van alle oudere versies, herstart dan je pc.
• Dubbelkik dan op jre-1_5_0_10-windows-i586-p.exe op je bureaublad om de nieuwste versie van Java te installeren.

* Post dan een nieuw hijackthis logje hier.

Logfile of HijackThis v1.99.1
Scan saved at 19:26:21, on 3/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE
C:\Program Files\Messenger\Msmsgs.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Documents and Settings\Chu\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R3 - URLSearchHook: (no name) - {40C30543-CCA6-9157-8289-B06932DB8EC5} - C:\WINDOWS\system32\jvb.dll (file missing)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {40C30543-CCA6-9157-8289-B06932DB8EC5} - C:\WINDOWS\system32\jvb.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [EPSON Stylus Photo RX420 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE /P31 "EPSON Stylus Photo RX420 Series" /O6 "USB002" /M "Stylus Photo RX420"
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\Msmsgs.exe" /background
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\npjpi150_10.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\npjpi150_10.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v10/StagingUI.cab46479.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) - http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab32846.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10/ZPAChat.cab32846.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {A4110378-789B-455F-AE86-3A1BFC402853} (ZPA_SHVL Object) - http://zone.msn.com/bingame/zpagames/zpa_shvl.cab50560.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab53083.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/binframework/v10/StProxy.cab41227.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

* Open hijackthis en vink volgende regels aan:

R3 - URLSearchHook: (no name) - {40C30543-CCA6-9157-8289-B06932DB8EC5} - C:\WINDOWS\system32\jvb.dll (file missing)
O2 - BHO: (no name) - {40C30543-CCA6-9157-8289-B06932DB8EC5} - C:\WINDOWS\system32\jvb.dll (file missing)

* Sluit dan alle vensters behalve hijackthis en klik op 'fix checked'

* Post dan een nieuw hijackthis logje hier en vertel hoe alles verder werkt.

Logfile of HijackThis v1.99.1
Scan saved at 20:46:34, on 3/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE
C:\Program Files\Messenger\Msmsgs.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Documents and Settings\Chu\Desktop\HijackThis.exe
C:\WINDOWS\system32\NOTEPAD.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [EPSON Stylus Photo RX420 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE /P31 "EPSON Stylus Photo RX420 Series" /O6 "USB002" /M "Stylus Photo RX420"
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\Msmsgs.exe" /background
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\npjpi150_10.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\npjpi150_10.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {05D44720-58E3-49E6-BDF6-D00330E511D3} (StagingUI Object) - http://zone.msn.com/binFrameWork/v10/StagingUI.cab46479.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {3BB54395-5982-4788-8AF4-B5388FFDD0D8} (ZoneBuddy Class) - http://zone.msn.com/BinFrameWork/v10/ZBuddy.cab32846.cab
O16 - DPF: {5736C456-EA94-4AAC-BB08-917ABDD035B3} (ZonePAChat Object) - http://zone.msn.com/binframework/v10/ZPAChat.cab32846.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {A4110378-789B-455F-AE86-3A1BFC402853} (ZPA_SHVL Object) - http://zone.msn.com/bingame/zpagames/zpa_shvl.cab50560.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab53083.cab
O16 - DPF: {DA2AA6CF-5C7A-4B71-BC3B-C771BB369937} (StadiumProxy Class) - http://zone.msn.com/binframework/v10/StProxy.cab41227.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: Sygate Personal Firewall Pro (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe


tis in orde. kannek dan windows live messenger trug installere?

Jup, vertel dan ook even hoe alles verder werkt.

twerkt allemal pico bello

merci voor je hulp

Graag gedaan, opletten in het vervolg dus met wat je accepteert.