Archief - Msn Virus, hiJackThis log

Het archief is een bevroren moment uit een vorige versie van dit forum, met andere regels en andere bazen. Deze posts weerspiegelen op geen enkele manier onze huidige ideeën, waarden of wereldbeelden en zijn op sommige plaatsen gecensureerd wegens ontoelaatbaar. Veel zijn in een andere tijdsgeest gemaakt, al dan niet ironisch - zoals in het ironische subforum Off-Topic - en zouden op dit moment niet meer gepost (mogen) worden. Toch bieden we dit archief nog graag aan als informatiedatabank en naslagwerk. Lees er hier meer over of start een gesprek met anderen.
F

Frey

Legacy Member
Probleempje door men zus,
Jullie weten waarschijnlijk wel welk virus het is, lijkt een trend de laatste dagen.
Die trojan die zich verspreid via msn dus..

thx :)



Logfile of HijackThis v1.99.1
Scan saved at 16:30:58, on 26/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Medion Info Display\MdionLCM.exe
C:\WINDOWS\mHotkey.exe
C:\WINDOWS\CNYHKey.exe
C:\WINDOWS\system32\CmUCReye.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Home Cinema\PowerDVD\PDVDServ.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\Home Cinema\PowerCinema\PCMService.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
C:\PROGRA~1\CA\ETRUST~1\realmon.exe
C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
C:\Program Files\CA\eTrust Antivirus\InoRT.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\CA\eTrust Antivirus\InoTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\PROGRA~1\WHATPU~1\WHATPU~1.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Documents and Settings\Thuis\Bureaublad\winstall.exe
C:\Program Files\Common Files\{404E7453-0BB7-2067-1007-050922050020}\Update.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\hjt\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: (no name) - {E3215F20-3212-11D6-9F8B-00D0B743919D} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [MedionVFD] "C:\Program Files\Medion Info Display\MdionLCM.exe"
O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
O4 - HKLM\..\Run: [ledpointer] CNYHKey.exe
O4 - HKLM\..\Run: [CmUCRRun] C:\WINDOWS\system32\CmUCReye.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\Home Cinema\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Home Cinema\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [AntivirusRegistration] C:\Program Files\CA\Etrust Antivirus\Register.exe
O4 - HKLM\..\Run: [Realtime Monitor] C:\PROGRA~1\CA\ETRUST~1\realmon.exe -s
O4 - HKLM\..\Run: [InstantOn] "C:\Program Files\CyberLink\PowerCinema Linux\ion_install.exe /c "
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [AdobeVersionCue] C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl05a\BrStDvPt.exe
O4 - HKLM\..\Run: [ControlCenter2.0] C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [STOPzilla] C:\Program Files\STOPzilla!\STOPzilla.exe /autostart
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [explorer] C:\Documents and Settings\Thuis\Bureaublad\winstall.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [WhatPulse] C:\PROGRA~1\WHATPU~1\WHATPU~1.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Statusvenster.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.aldi.com/
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1130364442791
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O20 - Winlogon Notify: winjvd32 - winjvd32.dll (file missing)
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AdobeVersionCue - Adobe Sytems - C:\Program Files\Adobe\Adobe Version Cue\service\VersionCue.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - D:\Antivirus\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Home Cinema\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: eTrust Antivirus RPC Server (InoRPC) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
O23 - Service: eTrust Antivirus Realtime Server (InoRT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRT.exe
O23 - Service: eTrust Antivirus Job Server (InoTask) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoTask.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
F

Frey

Legacy Member
---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 23:02:09 26/11/2006

+ Scan result:



C:\System Volume Information\_restore{9D95432E-2081-476D-BE74-228FB838901E}\RP244\A0081280.dll -> Adware.Minibug : Cleaned with backup (quarantined).
C:\Documents and Settings\Thuis\Bureaublad\winstall.exe -> Adware.PurityScan : Cleaned with backup (quarantined).
C:\Documents and Settings\Thuis\Local Settings\Temp\nsz3.tmp\remover.dll -> Adware.PurityScan : Cleaned with backup (quarantined).
C:\Documents and Settings\Thuis\Local Settings\Temporary Internet Files\Content.IE5\8ZFVUCT5\webinstall[1].exe -> Adware.PurityScan : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{9D95432E-2081-476D-BE74-228FB838901E}\RP244\A0081277.exe -> Adware.Softomate : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{9D95432E-2081-476D-BE74-228FB838901E}\RP244\A0081278.dll -> Adware.Softomate : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{9D95432E-2081-476D-BE74-228FB838901E}\RP244\A0081279.exe -> Adware.VB : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{9D95432E-2081-476D-BE74-228FB838901E}\RP244\A0081271.pif -> Backdoor.Agent.aim : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{9D95432E-2081-476D-BE74-228FB838901E}\RP244\A0081286.rbf -> Backdoor.Agent.aim : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{9D95432E-2081-476D-BE74-228FB838901E}\RP244\A0081275.exe -> Downloader.Zlob : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{9D95432E-2081-476D-BE74-228FB838901E}\RP244\A0081276.exe -> Downloader.Zlob.aew : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{9D95432E-2081-476D-BE74-228FB838901E}\RP244\A0081273.dll -> Downloader.Zlob.asv : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{9D95432E-2081-476D-BE74-228FB838901E}\RP244\A0081274.dll -> Downloader.Zlob.asv : Cleaned with backup (quarantined).
C:\Documents and Settings\Thuis\Local Settings\Temporary Internet Files\Content.IE5\A13C5O3I\speedtest2[1].dll -> Not-A-Virus.Downloader.Win32.InsTool.a : Cleaned with backup (quarantined).
:mozilla.200:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.201:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.202:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.203:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.204:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.205:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.206:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.207:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.208:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.209:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.210:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.211:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.212:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.215:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.216:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.217:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.441:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.532:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.800:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.159:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.160:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.161:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.162:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.163:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.262:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.882:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Adengage : Cleaned.
:mozilla.883:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Adengage : Cleaned.
:mozilla.884:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Adengage : Cleaned.
:mozilla.240:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.242:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.244:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.257:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.258:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.218:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.219:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.220:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.221:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.222:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.96:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.156:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Bfast : Cleaned.
:mozilla.61:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.243:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.246:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.247:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.312:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.313:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.314:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.315:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.316:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.317:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.263:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Clickhype : Cleaned.
:mozilla.264:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Clickhype : Cleaned.
:mozilla.451:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.62:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.483:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.484:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.563:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.564:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.565:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.68:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.69:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.70:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.71:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.72:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.73:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.74:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.75:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.889:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.890:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.891:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.892:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.893:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.170:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.171:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.172:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.173:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.174:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.175:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.176:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.465:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.496:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.497:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.498:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.502:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.503:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.906:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.907:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.967:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.905:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Hotlog : Cleaned.
:mozilla.425:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.177:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.178:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.179:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.180:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.181:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.182:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.183:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.184:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.185:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.186:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.187:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.188:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.189:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.190:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.191:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.192:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.116:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.753:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.754:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.755:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.756:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.339:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.340:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.341:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.679:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.682:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.683:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.684:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.685:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.266:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Revenue : Cleaned.
:mozilla.504:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.505:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.506:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.322:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.323:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.324:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.325:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.326:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.327:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.856:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.857:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.858:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.859:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.860:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.861:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.862:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.863:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.864:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.865:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.866:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.868:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.926:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Sexlist : Cleaned.
:mozilla.927:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Sexlist : Cleaned.
:mozilla.928:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Sexlist : Cleaned.
:mozilla.197:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.399:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.464:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.63:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.65:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.716:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.913:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.961:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.962:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.963:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.900:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Spylog : Cleaned.
:mozilla.774:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Starware : Cleaned.
:mozilla.775:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Starware : Cleaned.
F

Frey

Legacy Member
Vervolg AVG

:mozilla.776:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Starware : Cleaned.
:mozilla.280:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.281:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.282:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.283:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.284:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.285:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.286:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.287:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.288:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.289:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.290:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.291:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.292:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.293:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.294:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.295:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.296:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.297:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.298:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.49:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.50:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.51:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.52:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.53:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.241:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.330:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.76:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.84:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.85:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.86:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.87:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.88:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.89:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.422:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.426:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.427:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.428:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.429:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.430:C:\Documents and Settings\Thuis\Application Data\Mozilla\Firefox\Profiles\63f0yj0s.Standaardgebruiker\cookies.txt -> TrackingCookie.Zedo : Cleaned.
C:\System Volume Information\_restore{9D95432E-2081-476D-BE74-228FB838901E}\RP244\A0081272.exe -> Trojan.Small : Cleaned with backup (quarantined).


::Report end



Hijack This

Logfile of HijackThis v1.99.1
Scan saved at 16:30:58, on 26/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Medion Info Display\MdionLCM.exe
C:\WINDOWS\mHotkey.exe
C:\WINDOWS\CNYHKey.exe
C:\WINDOWS\system32\CmUCReye.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Home Cinema\PowerDVD\PDVDServ.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\Home Cinema\PowerCinema\PCMService.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
C:\PROGRA~1\CA\ETRUST~1\realmon.exe
C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
C:\Program Files\CA\eTrust Antivirus\InoRT.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\CA\eTrust Antivirus\InoTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\PROGRA~1\WHATPU~1\WHATPU~1.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Documents and Settings\Thuis\Bureaublad\winstall.exe
C:\Program Files\Common Files\{404E7453-0BB7-2067-1007-050922050020}\Update.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\hjt\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: (no name) - {E3215F20-3212-11D6-9F8B-00D0B743919D} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [MedionVFD] "C:\Program Files\Medion Info Display\MdionLCM.exe"
O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
O4 - HKLM\..\Run: [ledpointer] CNYHKey.exe
O4 - HKLM\..\Run: [CmUCRRun] C:\WINDOWS\system32\CmUCReye.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\Home Cinema\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Home Cinema\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [AntivirusRegistration] C:\Program Files\CA\Etrust Antivirus\Register.exe
O4 - HKLM\..\Run: [Realtime Monitor] C:\PROGRA~1\CA\ETRUST~1\realmon.exe -s
O4 - HKLM\..\Run: [InstantOn] "C:\Program Files\CyberLink\PowerCinema Linux\ion_install.exe /c "
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [AdobeVersionCue] C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl05a\BrStDvPt.exe
O4 - HKLM\..\Run: [ControlCenter2.0] C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [STOPzilla] C:\Program Files\STOPzilla!\STOPzilla.exe /autostart
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [explorer] C:\Documents and Settings\Thuis\Bureaublad\winstall.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [WhatPulse] C:\PROGRA~1\WHATPU~1\WHATPU~1.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Statusvenster.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.aldi.com/
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1130364442791
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O20 - Winlogon Notify: winjvd32 - winjvd32.dll (file missing)
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AdobeVersionCue - Adobe Sytems - C:\Program Files\Adobe\Adobe Version Cue\service\VersionCue.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - D:\Antivirus\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Home Cinema\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: eTrust Antivirus RPC Server (InoRPC) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
O23 - Service: eTrust Antivirus Realtime Server (InoRT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRT.exe
O23 - Service: eTrust Antivirus Job Server (InoTask) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoTask.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
F

Frey

Legacy Member
En tenslotte nog de
ComboFix
Thuis - 06-11-26 23:11:23,00 Service Pack 2
ComboFix 06.11.26 - Running from: "C:\Documents and Settings\Thuis\Bureaublad"

(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\WINDOWS\system32\components
C:\Program Files\Common Files\{304E7453-0BB7-2067-1007-050922050020}
C:\Program Files\Common Files\{404E7453-0BB7-2067-1007-050922050020}


((((((((((((((((((((((((((((((( Files Created from 2006-10-26 to 2006-11-26 ))))))))))))))))))))))))))))))))))


2006-11-26 19:47 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2006-11-26 16:30 <DIR> d-------- C:\hjt
2006-11-25 15:02 <DIR> d--hs---- C:\Config.Msi
2006-11-25 14:58 <DIR> d-------- C:\Documents and Settings\Thuis\Application Data\InstallShield
2006-11-24 21:12 <DIR> d-------- C:\Program Files\PopCap Games
2006-11-24 15:59 <DIR> d-------- C:\Program Files\Microsoft Games
2006-11-22 21:17 <DIR> d-------- C:\Program Files\Trymedia
2006-11-19 03:01 <DIR> d-------- C:\Program Files\MSXML 4.0
2006-11-04 14:14 1,245,696 --a------ C:\WINDOWS\system32\msxml4.dll
2006-10-28 13:34 <DIR> d-------- C:\Program Files\ProxyFinder


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


2006-11-26 23:16 -------- d-------- C:\Program Files\Common Files
2006-11-26 15:27 -------- d--h----- C:\Program Files\InstallShield Installation Information
2006-11-26 15:27 -------- d-------- C:\Program Files\Home Cinema
2006-11-26 15:26 -------- d-------- C:\Program Files\MSN Messenger
2006-11-25 15:04 -------- d---s---- C:\Documents and Settings\Thuis\Application Data\Microsoft
2006-11-25 15:03 -------- d-------- C:\Program Files\Common Files\Microsoft Shared
2006-11-24 13:15 30364 --a------ C:\Documents and Settings\Thuis\Application Data\wklnhst.dat
2006-11-21 20:45 -------- d-------- C:\Documents and Settings\Thuis\Application Data\OpenOffice.org2
2006-11-19 03:00 -------- d-------- C:\Program Files\Internet Explorer
2006-11-18 17:55 -------- d-------- C:\Documents and Settings\Thuis\Application Data\Adobe
2006-11-08 14:51 -------- d-------- C:\Documents and Settings\Thuis\Application Data\Ahead
2006-11-07 19:37 85520 --a------ C:\Documents and Settings\Thuis\Application Data\GDIPFONTCACHEV1.DAT
2006-10-19 19:59 532480 --a------ C:\WINDOWS\system32\Top Gear.scr
2006-10-19 09:52 -------- d-------- C:\Program Files\3Planesoft Screensaver Manager
2006-10-18 18:35 -------- d-------- C:\Program Files\MindJET
2006-10-13 13:41 144384 --a------ C:\WINDOWS\system32\nwprovau.dll
2006-10-06 11:11 380928 --a------ C:\WINDOWS\system32\3Planesoft_Screensaver_Manager.scr
2006-09-23 12:37 2560 --a------ C:\WINDOWS\_MSRSTRT.EXE
2006-09-13 06:07 1084416 --a------ C:\WINDOWS\system32\msxml3.dll


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries are not shown

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
"SpybotSD TeaTimer"="C:\\Program Files\\Spybot - Search & Destroy\\TeaTimer.exe"
"WhatPulse"="C:\\PROGRA~1\\WHATPU~1\\WHATPU~1.EXE"
"Steam"=""

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"nwiz"="nwiz.exe /install"
"RTHDCPL"="RTHDCPL.EXE"
"Alcmtr"="ALCMTR.EXE"
"MedionVFD"="\"C:\\Program Files\\Medion Info Display\\MdionLCM.exe\""
"CHotkey"="mHotkey.exe"
"ledpointer"="CNYHKey.exe"
"CmUCRRun"="C:\\WINDOWS\\system32\\CmUCReye.exe"
"NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"IMJPMIG8.1"="\"C:\\WINDOWS\\IME\\imjp8_1\\IMJPMIG.EXE\" /Spoil /RemAdvDef /Migration32"
"MSPY2002"="C:\\WINDOWS\\system32\\IME\\PINTLGNT\\ImScInst.exe /SYNC"
"TkBellExe"="\"C:\\Program Files\\Common Files\\Real\\Update_OB\\realsched.exe\" -osboot"
"RemoteControl"="\"C:\\Program Files\\Home Cinema\\PowerDVD\\PDVDServ.exe\""
"PCMService"="\"C:\\Program Files\\Home Cinema\\PowerCinema\\PCMService.exe\""
"AntivirusRegistration"="C:\\Program Files\\CA\\Etrust Antivirus\\Register.exe"
"Realtime Monitor"="C:\\PROGRA~1\\CA\\ETRUST~1\\realmon.exe -s"
@=""
"InstantOn"="\"C:\\Program Files\\CyberLink\\PowerCinema Linux\\ion_install.exe /c \""
"MessengerPlus3"="\"C:\\Program Files\\MessengerPlus! 3\\MsgPlus.exe\""
"AdobeVersionCue"="C:\\Program Files\\Adobe\\Adobe Version Cue\\ControlPanel\\VersionCueTray.exe"
"KernelFaultCheck"=hex(2):25,73,79,73,74,65,6d,72,6f,6f,74,25,5c,73,79,73,74,\
65,6d,33,32,5c,64,75,6d,70,72,65,70,20,30,20,2d,6b,00
"SetDefPrt"="C:\\Program Files\\Brother\\Brmfl05a\\BrStDvPt.exe"
"ControlCenter2.0"="C:\\Program Files\\Brother\\ControlCenter2\\brctrcen.exe /autorun"
"NvMediaCenter"="RunDLL32.exe NvMCTray.dll,NvTaskbarInit"
"STOPzilla"="C:\\Program Files\\STOPzilla!\\STOPzilla.exe /autostart"
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000001

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Mijn huidige introductiepagina"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,00,01,00,00,00,00,00,00,00,04,00,00,a2,03,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,4e,00,00,00,00,00,00,00,b2,03,00,00,e2,02,\
00,00,04,00,00,40
"RestoredStateInfo"=hex:18,00,00,00,4e,00,00,00,00,00,00,00,b2,03,00,00,e2,02,\
00,00,01,00,00,00

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Preloader van browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Cache-daemon voor onderdeelcategorieën"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
"NoActiveDesktop"=dword:00000000
"ClassicShell"=dword:00000000
"ForceActiveDesktopOn"=dword:00000000

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001
"DisableTaskMgr"=dword:00000000

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoCDBurning"=dword:00000000
"NoActiveDesktopChanges"=dword:00000000

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer\run]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winjvd32

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

Completion time: 06-11-26 23:16:45.96
C:\ComboFix.txt ... 06-11-26 23:16



Tot nu toe lijk ik er geen last meer van te hebben, thx, :niceone:
J

Jurgenv1

Legacy Member
Heb je het hijackthis logjer na het scannen met combofix gemaakt? Want zo lijkt het er niet op hoor. :)
F

Frey

Legacy Member
Euhm kan wel klein foutje zijn, denk dak de verkeerde log heb gekopieerd, kzal straks wel de nieuwe log posten

(btw, een kennis van me heeft ook hetzelfde probleem, mind dat ik straks ook de logjes post?)

thx
F

Frey

Legacy Member
die van gisteravond
( er staat een recentere iets lager dus moet je deze niet nakijken denk?)

Logfile of HijackThis v1.99.1
Scan saved at 23:38:30, on 26/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
D:\Antivirus\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
C:\Program Files\CA\eTrust Antivirus\InoRT.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Medion Info Display\MdionLCM.exe
C:\WINDOWS\mHotkey.exe
C:\WINDOWS\CNYHKey.exe
C:\WINDOWS\system32\CmUCReye.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Home Cinema\PowerDVD\PDVDServ.exe
C:\Program Files\Home Cinema\PowerCinema\PCMService.exe
C:\PROGRA~1\CA\ETRUST~1\realmon.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\WHATPU~1\WHATPU~1.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\hjt\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: (no name) - {E3215F20-3212-11D6-9F8B-00D0B743919D} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [MedionVFD] "C:\Program Files\Medion Info Display\MdionLCM.exe"
O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
O4 - HKLM\..\Run: [ledpointer] CNYHKey.exe
O4 - HKLM\..\Run: [CmUCRRun] C:\WINDOWS\system32\CmUCReye.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\Home Cinema\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Home Cinema\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [AntivirusRegistration] C:\Program Files\CA\Etrust Antivirus\Register.exe
O4 - HKLM\..\Run: [Realtime Monitor] C:\PROGRA~1\CA\ETRUST~1\realmon.exe -s
O4 - HKLM\..\Run: [InstantOn] "C:\Program Files\CyberLink\PowerCinema Linux\ion_install.exe /c "
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [AdobeVersionCue] C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl05a\BrStDvPt.exe
O4 - HKLM\..\Run: [ControlCenter2.0] C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [STOPzilla] C:\Program Files\STOPzilla!\STOPzilla.exe /autostart
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [WhatPulse] C:\PROGRA~1\WHATPU~1\WHATPU~1.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Statusvenster.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.aldi.com/
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1130364442791
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O20 - Winlogon Notify: winjvd32 - winjvd32.dll (file missing)
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AdobeVersionCue - Adobe Sytems - C:\Program Files\Adobe\Adobe Version Cue\service\VersionCue.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - D:\Antivirus\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Home Cinema\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: eTrust Antivirus RPC Server (InoRPC) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
O23 - Service: eTrust Antivirus Realtime Server (InoRT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRT.exe
O23 - Service: eTrust Antivirus Job Server (InoTask) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoTask.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

Net gemaakt

Logfile of HijackThis v1.99.1
Scan saved at 19:00:17, on 27/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Medion Info Display\MdionLCM.exe
C:\WINDOWS\mHotkey.exe
C:\WINDOWS\CNYHKey.exe
C:\WINDOWS\system32\CmUCReye.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Home Cinema\PowerDVD\PDVDServ.exe
C:\Program Files\Home Cinema\PowerCinema\PCMService.exe
C:\PROGRA~1\CA\ETRUST~1\realmon.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\WHATPU~1\WHATPU~1.EXE
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
D:\Antivirus\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
C:\Program Files\CA\eTrust Antivirus\InoRT.exe
C:\Program Files\CA\eTrust Antivirus\InoTask.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\hjt\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: (no name) - {E3215F20-3212-11D6-9F8B-00D0B743919D} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [MedionVFD] "C:\Program Files\Medion Info Display\MdionLCM.exe"
O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
O4 - HKLM\..\Run: [ledpointer] CNYHKey.exe
O4 - HKLM\..\Run: [CmUCRRun] C:\WINDOWS\system32\CmUCReye.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\Home Cinema\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Home Cinema\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [AntivirusRegistration] C:\Program Files\CA\Etrust Antivirus\Register.exe
O4 - HKLM\..\Run: [Realtime Monitor] C:\PROGRA~1\CA\ETRUST~1\realmon.exe -s
O4 - HKLM\..\Run: [InstantOn] "C:\Program Files\CyberLink\PowerCinema Linux\ion_install.exe /c "
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [AdobeVersionCue] C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl05a\BrStDvPt.exe
O4 - HKLM\..\Run: [ControlCenter2.0] C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [STOPzilla] C:\Program Files\STOPzilla!\STOPzilla.exe /autostart
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [WhatPulse] C:\PROGRA~1\WHATPU~1\WHATPU~1.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Statusvenster.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.aldi.com/
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1130364442791
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O20 - Winlogon Notify: winjvd32 - winjvd32.dll (file missing)
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AdobeVersionCue - Adobe Sytems - C:\Program Files\Adobe\Adobe Version Cue\service\VersionCue.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - D:\Antivirus\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Home Cinema\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: eTrust Antivirus RPC Server (InoRPC) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
O23 - Service: eTrust Antivirus Realtime Server (InoRT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRT.exe
O23 - Service: eTrust Antivirus Job Server (InoTask) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoTask.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
J

Jurgenv1

Legacy Member
* Open hijackthis en vink volgende regels aan:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = about:blank
O2 - BHO: (no name) - {E3215F20-3212-11D6-9F8B-00D0B743919D} - (no file)
O20 - Winlogon Notify: winjvd32 - winjvd32.dll (file missing)

* Sluit dan alle vensters behalve hijackthis en klik op 'fix checked'

* Post dan een nieuw hijackthis logje hier en vertel hoe alles verder werkt.
F

Frey

Legacy Member
Nog niet getest of alles werkt, heb vandaag niet veel tijd, kzal straks ook nog een ander threadje aanmaken voor een kennis die met hetzelfde msn virus zit,

Als ik het juist heb mogen regels die 'blank' zijn of geen file hebben verwijdert worden?

Nogmaals bedankt :niceone:

Logfile of HijackThis v1.99.1
Scan saved at 19:31:34, on 27/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Medion Info Display\MdionLCM.exe
C:\WINDOWS\mHotkey.exe
C:\WINDOWS\CNYHKey.exe
C:\WINDOWS\system32\CmUCReye.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Home Cinema\PowerDVD\PDVDServ.exe
C:\Program Files\Home Cinema\PowerCinema\PCMService.exe
C:\PROGRA~1\CA\ETRUST~1\realmon.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\WHATPU~1\WHATPU~1.EXE
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
D:\Antivirus\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
C:\Program Files\CA\eTrust Antivirus\InoRT.exe
C:\Program Files\CA\eTrust Antivirus\InoTask.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\hjt\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [MedionVFD] "C:\Program Files\Medion Info Display\MdionLCM.exe"
O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
O4 - HKLM\..\Run: [ledpointer] CNYHKey.exe
O4 - HKLM\..\Run: [CmUCRRun] C:\WINDOWS\system32\CmUCReye.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\Home Cinema\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Home Cinema\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [AntivirusRegistration] C:\Program Files\CA\Etrust Antivirus\Register.exe
O4 - HKLM\..\Run: [Realtime Monitor] C:\PROGRA~1\CA\ETRUST~1\realmon.exe -s
O4 - HKLM\..\Run: [InstantOn] "C:\Program Files\CyberLink\PowerCinema Linux\ion_install.exe /c "
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [AdobeVersionCue] C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl05a\BrStDvPt.exe
O4 - HKLM\..\Run: [ControlCenter2.0] C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [STOPzilla] C:\Program Files\STOPzilla!\STOPzilla.exe /autostart
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [WhatPulse] C:\PROGRA~1\WHATPU~1\WHATPU~1.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Statusvenster.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.aldi.com/
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1130364442791
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AdobeVersionCue - Adobe Sytems - C:\Program Files\Adobe\Adobe Version Cue\service\VersionCue.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - D:\Antivirus\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Home Cinema\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: eTrust Antivirus RPC Server (InoRPC) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
O23 - Service: eTrust Antivirus Realtime Server (InoRT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRT.exe
O23 - Service: eTrust Antivirus Job Server (InoTask) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoTask.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
J

Jurgenv1

Legacy Member
* Deze moet ook nog gefixt worden:

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

* Voor de rest ziet het er goed uit.

Als ik het juist heb mogen regels die 'blank' zijn of geen file hebben verwijdert worden?
Klik om te vergroten...
Nee! Niet altijd, ga liever niet op eigen houtje fixen, dat brengt teveel risico's mee zoals in de sticky's beschreven. Als je een logje wilt checken mag je die gerust hier posten hoor. ;)
F

Frey

Legacy Member
okej :)
mja zou ook handig zijn dat ik het zelf ergens kan aanleren ook,
Alsk het goed heb zijn het allemaal corrupte (of slechte - alcmtr) register keys die ik verwijder (kan deze laatste nog niet onderscheiden van gewone, maar bestaat er een 'lijst' fzo voor?), en de rest gewoon 'standaard' antivirus/malware scans?
Mja zo'n dingen leer je natuurlijk gewoon met vallen en opstaan he (-> crashen en formateren ;))

Logfile of HijackThis v1.99.1
Scan saved at 20:20:14, on 27/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Medion Info Display\MdionLCM.exe
C:\WINDOWS\mHotkey.exe
C:\WINDOWS\CNYHKey.exe
C:\WINDOWS\system32\CmUCReye.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Home Cinema\PowerDVD\PDVDServ.exe
C:\Program Files\Home Cinema\PowerCinema\PCMService.exe
C:\PROGRA~1\CA\ETRUST~1\realmon.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\PROGRA~1\WHATPU~1\WHATPU~1.EXE
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
D:\Antivirus\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Brother\Brmfcmon\BrMfcmon.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
C:\Program Files\CA\eTrust Antivirus\InoRT.exe
C:\Program Files\CA\eTrust Antivirus\InoTask.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\hjt\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [MedionVFD] "C:\Program Files\Medion Info Display\MdionLCM.exe"
O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
O4 - HKLM\..\Run: [ledpointer] CNYHKey.exe
O4 - HKLM\..\Run: [CmUCRRun] C:\WINDOWS\system32\CmUCReye.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\Home Cinema\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Home Cinema\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [AntivirusRegistration] C:\Program Files\CA\Etrust Antivirus\Register.exe
O4 - HKLM\..\Run: [Realtime Monitor] C:\PROGRA~1\CA\ETRUST~1\realmon.exe -s
O4 - HKLM\..\Run: [InstantOn] "C:\Program Files\CyberLink\PowerCinema Linux\ion_install.exe /c "
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [AdobeVersionCue] C:\Program Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl05a\BrStDvPt.exe
O4 - HKLM\..\Run: [ControlCenter2.0] C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [STOPzilla] C:\Program Files\STOPzilla!\STOPzilla.exe /autostart
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [WhatPulse] C:\PROGRA~1\WHATPU~1\WHATPU~1.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Statusvenster.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.aldi.com/
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1130364442791
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AdobeVersionCue - Adobe Sytems - C:\Program Files\Adobe\Adobe Version Cue\service\VersionCue.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - D:\Antivirus\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\Home Cinema\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: eTrust Antivirus RPC Server (InoRPC) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
O23 - Service: eTrust Antivirus Realtime Server (InoRT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRT.exe
O23 - Service: eTrust Antivirus Job Server (InoTask) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoTask.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
J

Jurgenv1

Legacy Member
Als je het wil aanleren zal het niet voor persoonlijk gebruik zijn, want het is wle gratis maar wel tijdrovend en niet echt simpel.
Het archief is een bevroren moment uit een vorige versie van dit forum, met andere regels en andere bazen. Deze posts weerspiegelen op geen enkele manier onze huidige ideeën, waarden of wereldbeelden en zijn op sommige plaatsen gecensureerd wegens ontoelaatbaar. Veel zijn in een andere tijdsgeest gemaakt, al dan niet ironisch - zoals in het ironische subforum Off-Topic - en zouden op dit moment niet meer gepost (mogen) worden. Toch bieden we dit archief nog graag aan als informatiedatabank en naslagwerk. Lees er hier meer over of start een gesprek met anderen.
Terug
Bovenaan