ComboFix 08-01-28.2 - PC 2008-01-28 19:24:43.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1043.18.284 [GMT 1:00]
Se ejecuta desde: C:\Documents and Settings\PC\Bureaublad\ComboFix.exe
* Creado un nuevo punto de restauración
ADVERTENCIA - ESTE EQUIPO NO TIENE INSTALADA LA CONSOLA DE RECUPERACION!
.
(((((((((((((((((((((((((((((((((((( Otras eliminaciones )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat
C:\Documents and Settings\PC\Favorieten\Error Cleaner.url
C:\Documents and Settings\PC\Favorieten\Privacy Protector.url
C:\Documents and Settings\PC\Favorieten\Spyware&Malware Protection.url
C:\WINDOWS\rs.txt
----- BITS: Possible infected sites -----
hxxp://softworldnetwork.com
.
(((((((((((((((((( Archivos creados desde 2007-12-28 - 2008-01-28 )))))))))))))))))))))))))))))))))
.
2008-01-28 19:24 . 2008-01-28 19:24 <DIR> d-------- C:\WINDOWS\LastGood
2008-01-28 18:49 . 2008-01-28 18:49 <DIR> d-------- C:\Program Files\Telemeter 3.0
2008-01-28 17:56 . 2008-01-28 17:56 <DIR> d-------- C:\Program Files\Valve
2008-01-28 16:32 . 2008-01-28 16:32 <DIR> d-------- C:\Program Files\Trend Micro
2008-01-28 16:00 . 2008-01-28 16:02 <DIR> d-------- C:\Temp
2008-01-28 14:37 . 2008-01-28 14:37 2,422 --a------ C:\WINDOWS\system32\wpa.bak
2008-01-28 13:45 . 2008-01-28 13:45 97 --a------ C:\WINDOWS\wininit.ini
2008-01-28 13:15 . 2008-01-28 13:15 <DIR> d-------- C:\Documents and Settings\PC\Application Data\Lavasoft
2008-01-28 13:10 . 2008-01-28 13:10 <DIR> d-------- C:\Program Files\Webroot
2008-01-28 13:10 . 2008-01-28 13:11 <DIR> d-------- C:\Program Files\Spyware Doctor
2008-01-28 13:10 . 2008-01-28 13:10 <DIR> d-------- C:\Documents and Settings\PC\Application Data\PC Tools
2008-01-28 13:10 . 2008-01-28 13:10 <DIR> d-------- C:\Documents and Settings\LocalService\Application Data\Webroot
2008-01-28 13:10 . 2008-01-28 13:10 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Webroot
2008-01-28 13:10 . 2008-01-28 13:15 <DIR> d-a------ C:\Documents and Settings\All Users\Application Data\TEMP
2008-01-28 13:09 . 2008-01-28 13:09 <DIR> d-------- C:\Documents and Settings\PC\Application Data\Webroot
2008-01-28 13:08 . 2008-01-28 13:14 <DIR> d-------- C:\Program Files\SpywareBlaster
2008-01-28 13:08 . 2008-01-28 13:08 <DIR> d-------- C:\Program Files\Lavasoft
2008-01-28 13:08 . 2008-01-28 19:23 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-01-28 13:08 . 2005-08-25 18:18 118,784 --a------ C:\WINDOWS\system32\MSSTDFMT.DLL
2008-01-28 13:08 . 2005-08-25 18:19 115,920 --a------ C:\WINDOWS\system32\MSINET.OCX
2008-01-28 13:06 . 2008-01-28 13:06 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Prevx
2008-01-28 12:44 . 2008-01-28 12:44 <DIR> d-------- C:\WINDOWS\system32\GroupPolicy
2008-01-28 12:44 . 2008-01-28 19:23 <DIR> d-------- C:\Program Files\Hitman Pro
2008-01-28 12:44 . 2006-02-28 13:43 1,077,344 --a------ C:\WINDOWS\system32\mscomctl.ocx
2008-01-28 03:23 . 2008-01-28 03:23 <DIR> d-------- C:\Documents and Settings\PC\Application Data\vlc
2008-01-28 03:16 . 2008-01-28 03:16 <DIR> d-------- C:\Documents and Settings\PC\Application Data\dvdcss
2008-01-28 03:15 . 2008-01-28 03:15 <DIR> d-------- C:\Program Files\VideoLAN
2008-01-28 02:50 . 2008-01-28 02:50 <DIR> d-------- C:\WINDOWS\system32\XPSViewer
2008-01-28 02:50 . 2008-01-28 02:50 <DIR> d-------- C:\Program Files\Reference Assemblies
2008-01-28 02:50 . 2008-01-28 02:50 <DIR> d-------- C:\Program Files\MSBuild
2008-01-28 02:50 . 2006-06-29 13:07 14,048 --------- C:\WINDOWS\system32\spmsg2.dll
2008-01-28 02:48 . 2008-01-28 02:48 <DIR> d-------- C:\Program Files\MSXML 6.0
2008-01-28 01:22 . 2008-01-28 01:22 <DIR> d-------- C:\Program Files\Yahoo!
2008-01-28 01:15 . 2008-01-28 15:22 <DIR> d-------- C:\Documents and Settings\PC\Application Data\LimeWire
2008-01-28 01:00 . 2008-01-27 20:23 253,952 --a------ C:\WINDOWS\dntpkwokpr.dll
2008-01-28 01:00 . 2008-01-27 20:23 217,088 --a------ C:\WINDOWS\adsoowf.dll
2008-01-28 01:00 . 2008-01-27 20:23 81,920 --a------ C:\WINDOWS\ffvrdgt.exe
2008-01-28 00:49 . 2008-01-28 00:49 <DIR> d-------- C:\Program Files\Java
2008-01-28 00:49 . 2007-12-14 01:59 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-01-28 00:48 . 2008-01-28 00:50 <DIR> d-------- C:\Program Files\LimeWire
2008-01-28 00:48 . 2008-01-28 00:48 <DIR> d-------- C:\Program Files\Common Files\Java
2008-01-27 23:47 . 2008-01-27 23:47 <DIR> d-------- C:\Program Files\MSXML 4.0
2008-01-27 23:10 . 2008-01-28 14:18 <DIR> d-------- C:\Documents and Settings\PC\Application Data\BullGuard
2008-01-27 23:09 . 2008-01-27 23:09 <DIR> d-------- C:\Program Files\BullGuard Ltd
2008-01-27 23:09 . 2008-01-28 16:04 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\BullGuard
2008-01-27 23:09 . 2007-10-29 09:08 50,896 --a------ C:\WINDOWS\system32\drivers\BdFileSpy.sys
2008-01-27 22:48 . 2006-09-13 07:39 11,264 --a------ C:\WINDOWS\system32\drivers\xfilt.sys
2008-01-27 22:48 . 2006-09-13 07:39 9,728 --a------ C:\WINDOWS\system32\drivers\videX32.sys
2008-01-27 22:47 . 2008-01-27 22:47 1,158 --a------ C:\WINDOWS\mozver.dat
2008-01-27 22:45 . 2008-01-27 22:45 0 --a------ C:\WINDOWS\nsreg.dat
2008-01-27 22:34 . 2008-01-27 22:34 <DIR> d-------- C:\WINDOWS\system32\Lang
2008-01-27 22:34 . 2008-01-27 22:34 940,794 --a------ C:\WINDOWS\system32\LoopyMusic.wav
2008-01-27 22:34 . 2008-01-27 22:34 146,650 --a------ C:\WINDOWS\system32\BuzzingBee.wav
2008-01-27 22:25 . 2008-01-27 22:25 <DIR> d-------- C:\Program Files\DIFX
2008-01-27 22:21 . 2008-01-27 22:48 <DIR> d-------- C:\pnp
2008-01-27 22:19 . 2008-01-27 22:19 <DIR> d-------- C:\Program Files\Microsoft Games
2008-01-27 22:19 . 2007-07-09 14:11 584,192 -----c--- C:\WINDOWS\system32\dllcache\rpcrt4.dll
2008-01-27 22:11 . 2008-01-28 13:13 <DIR> d--h----- C:\WINDOWS\$hf_mig$
2008-01-27 22:08 . 2007-12-10 14:24 159,458 --a------ C:\WINDOWS\system32\nvapps.nvb
2008-01-27 22:07 . 2008-01-27 22:07 <DIR> d-------- C:\Documents and Settings\LocalService\Menu Start
2008-01-27 22:07 . 2008-01-27 22:07 316,640 --a------ C:\WINDOWS\WMSysPr9.prx
2008-01-27 02:35 . 2008-01-27 02:35 <DIR> d-------- C:\WINDOWS\provisioning
2008-01-27 02:35 . 2008-01-27 02:35 <DIR> d-------- C:\WINDOWS\peernet
2008-01-27 02:34 . 2008-01-27 02:34 <DIR> d-------- C:\WINDOWS\ServicePackFiles
2008-01-27 02:32 . 2006-10-16 16:10 23,856 --a------ C:\WINDOWS\system32\spupdsvc.exe
2008-01-27 02:31 . 2008-01-27 02:31 <DIR> d-------- C:\WINDOWS\EHome
2008-01-27 02:26 . 2008-01-27 02:26 <DIR> d-------- C:\Program Files\Intel Corporation
2008-01-27 02:25 . 2004-08-04 01:03 11,776 --------- C:\WINDOWS\system32\spnpinst.exe
2008-01-27 02:25 . 2004-08-02 14:20 7,208 --------- C:\WINDOWS\system32\secupd.sig
2008-01-27 02:25 . 2004-08-02 14:20 4,569 --------- C:\WINDOWS\system32\secupd.dat
2008-01-27 02:14 . 2008-01-27 22:14 <DIR> d-------- C:\WINDOWS\nview
2008-01-27 02:14 . 2007-12-05 01:41 356,352 --a------ C:\WINDOWS\system32\nvudisp.exe
2008-01-27 02:14 . 2008-01-27 22:14 164,081 --a------ C:\WINDOWS\system32\nvapps.xml
2008-01-27 02:14 . 2007-12-05 01:41 17,737 --a------ C:\WINDOWS\system32\nvdisp.nvu
2008-01-27 02:13 . 2008-01-27 02:13 <DIR> d-------- C:\NVIDIA
2008-01-27 02:13 . 2007-12-05 02:53 356,352 --a------ C:\WINDOWS\system32\NVUNINST.EXE
2008-01-27 02:07 . 2008-01-27 02:16 <DIR> d-------- C:\Documents and Settings\PC\Contacts
2008-01-27 02:05 . 2008-01-27 22:48 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE
2008-01-27 02:04 . 2008-01-27 22:08 <DIR> d-------- C:\Program Files\MSN Messenger
2008-01-27 01:57 . 2004-08-04 09:03 241,152 --a------ C:\WINDOWS\system32\srrstr.dll
2008-01-27 01:56 . 2008-01-27 01:59 <DIR> d--h-c--- C:\WINDOWS\$xpsp1hfm$
2008-01-27 01:56 . 2004-01-10 06:11 26,112 --a------ C:\WINDOWS\system32\xpsp1hfm.exe
2008-01-27 01:53 . 2008-01-27 01:53 <DIR> d-------- C:\WINDOWS\system32\bits
2008-01-27 01:53 . 2004-08-04 09:03 351,232 --a------ C:\WINDOWS\system32\winhttp.dll
2008-01-27 01:53 . 2004-08-04 09:03 18,944 --a------ C:\WINDOWS\system32\qmgrprxy.dll
2008-01-27 01:53 . 2004-08-04 09:03 8,192 --------- C:\WINDOWS\system32\bitsprx2.dll
2008-01-27 01:53 . 2004-08-04 09:03 7,168 --------- C:\WINDOWS\system32\bitsprx3.dll
2008-01-27 01:51 . 2007-07-30 19:19 549,720 --a------ C:\WINDOWS\system32\wuapi.dll
2008-01-27 01:51 . 2007-07-30 19:19 325,976 --a------ C:\WINDOWS\system32\wucltui.dll
2008-01-27 01:51 . 2007-07-30 19:19 216,408 --a------ C:\WINDOWS\system32\wuaucpl.cpl
2008-01-27 01:51 . 2007-07-30 19:19 43,352 --a------ C:\WINDOWS\system32\wups2.dll
2008-01-27 01:51 . 2007-07-30 19:19 38,232 --a------ C:\WINDOWS\system32\wucltui.dll.mui
2008-01-27 01:51 . 2007-07-30 19:18 33,624 --a------ C:\WINDOWS\system32\wups.dll
2008-01-27 01:51 . 2007-07-30 19:20 30,040 --a------ C:\WINDOWS\system32\wuaucpl.cpl.mui
2008-01-27 01:51 . 2007-07-30 19:20 30,040 --a------ C:\WINDOWS\system32\wuapi.dll.mui
2008-01-27 01:51 . 2007-07-30 19:18 20,824 --a------ C:\WINDOWS\system32\wuaueng.dll.mui
2008-01-27 01:49 . 2008-01-27 01:49 <DIR> d---s---- C:\Documents and Settings\PC\UserData
2008-01-27 01:41 . 2008-01-27 01:41 <DIR> d---s---- C:\WINDOWS\system32\Microsoft
2008-01-27 01:40 . 2008-01-27 23:57 <DIR> d--h----- C:\Program Files\InstallShield Installation Information
2008-01-27 01:40 . 2008-01-27 01:40 <DIR> d-------- C:\Program Files\Compact Wireless-G USB Adapter Wireless Network Monitor
.
(((((((((((((((((((((((((((((((((((((( Reporte Find3M )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-27 00:40 20,747 ----a-w C:\WINDOWS\system32\drivers\AegisP.sys
2008-01-26 17:30 --------- d--h--w C:\Program Files\Uninstall Information
2008-01-26 17:26 --------- d-----w C:\Program Files\microsoft frontpage
2007-12-20 09:48 14,152 ----a-w C:\WINDOWS\system32\client_cc.dll
2007-12-10 13:53 81,288 ----a-w C:\WINDOWS\system32\drivers\iksyssec.sys
2007-12-10 13:53 66,952 ----a-w C:\WINDOWS\system32\drivers\iksysflt.sys
2007-12-10 13:53 41,864 ----a-w C:\WINDOWS\system32\drivers\ikfilesec.sys
2007-12-10 13:53 29,576 ----a-w C:\WINDOWS\system32\drivers\kcom.sys
2007-12-06 12:51 19,784 ----a-w C:\WINDOWS\system32\BgOutlookHook.dll
2007-12-06 12:48 14,152 ----a-w C:\WINDOWS\system32\lccl.dll
2007-12-05 00:41 81,920 ----a-w C:\WINDOWS\system32\nvwddi.dll
2007-12-05 00:41 81,920 ----a-w C:\WINDOWS\system32\nvmctray.dll
2007-12-05 00:41 8,523,776 ----a-w C:\WINDOWS\system32\nvcpl.dll
2007-12-05 00:41 753,664 ----a-w C:\WINDOWS\system32\nvcplui.exe
2007-12-05 00:41 7,435,392 ----a-w C:\WINDOWS\system32\drivers\nv4_mini.sys
2007-12-05 00:41 6,901,760 ----a-w C:\WINDOWS\system32\nvoglnt.dll
2007-12-05 00:41 6,549,504 ----a-w C:\WINDOWS\system32\nvdisps.dll
2007-12-05 00:41 5,773,568 ----a-w C:\WINDOWS\system32\nv4_disp.dll
2007-12-05 00:41 466,944 ----a-w C:\WINDOWS\system32\nvshell.dll
2007-12-05 00:41 45,056 ----a-w C:\WINDOWS\system32\nvmccsrs.dll
2007-12-05 00:41 442,368 ----a-w C:\WINDOWS\system32\nvappbar.exe
2007-12-05 00:41 425,984 ----a-w C:\WINDOWS\system32\keystone.exe
2007-12-05 00:41 385,024 ----a-w C:\WINDOWS\system32\nvapi.dll
2007-12-05 00:41 35,328 ----a-w C:\WINDOWS\system32\nvcodins.dll
2007-12-05 00:41 35,328 ----a-w C:\WINDOWS\system32\nvcod.dll
2007-12-05 00:41 307,200 ----a-w C:\WINDOWS\system32\nvexpbar.dll
2007-12-05 00:41 3,710,976 ----a-w C:\WINDOWS\system32\nvvitvs.dll
2007-12-05 00:41 3,420,160 ----a-w C:\WINDOWS\system32\nvgames.dll
2007-12-05 00:41 286,720 ----a-w C:\WINDOWS\system32\nvnt4cpl.dll
2007-12-05 00:41 229,376 ----a-w C:\WINDOWS\system32\nvmccs.dll
2007-12-05 00:41 2,498,560 ----a-w C:\WINDOWS\system32\nvwss.dll
2007-12-05 00:41 188,416 ----a-w C:\WINDOWS\system32\nvmccss.dll
2007-12-05 00:41 155,716 ----a-w C:\WINDOWS\system32\nvsvc32.exe
2007-12-05 00:41 147,456 ----a-w C:\WINDOWS\system32\nvcolor.exe
2007-12-05 00:41 1,703,936 ----a-w C:\WINDOWS\system32\nvwdmcpl.dll
2007-12-05 00:41 1,626,112 ----a-w C:\WINDOWS\system32\nwiz.exe
2007-12-05 00:41 1,474,560 ----a-w C:\WINDOWS\system32\nview.dll
2007-12-05 00:41 1,339,392 ----a-w C:\WINDOWS\system32\nvdspsch.exe
2007-12-05 00:41 1,228,800 ----a-w C:\WINDOWS\system32\nvmobls.dll
2007-12-05 00:41 1,089,536 ----a-w C:\WINDOWS\system32\nvcuda.dll
2007-12-05 00:41 1,019,904 ----a-w C:\WINDOWS\system32\nvwimg.dll
2007-11-28 10:42 199,440 ----a-w C:\WINDOWS\system32\drivers\afw.sys
2007-11-07 09:30 727,040 ----a-w C:\WINDOWS\system32\lsasrv.dll
2007-10-29 22:45 1,291,776 ----a-w C:\WINDOWS\system32\quartz.dll
.
((((((((((((((((((((((((((((((((( Cargando Puntos Reg ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Nota* entradas vacías & entradas legítimas predeterminadas no son mostradas
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AF7FCB20-E32A-41D8-B2ED-BC1EA8C11E90}]
2008-01-27 20:23 253952 --a------ C:\WINDOWS\dntpkwokpr.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{C87444C3-8B83-4A48-91DE-95F9A3D61070}
[HKEY_CLASSES_ROOT\clsid\{c87444c3-8b83-4a48-91de-95f9a3d61070}]
[HKEY_CLASSES_ROOT\ekxdvft.1]
[HKEY_CLASSES_ROOT\TypeLib\{789D7229-B05F-4627-A9A7-32B1690C5158}]
[HKEY_CLASSES_ROOT\ekxdvft]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 09:03 15360]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:54 5674352]
"BullGuard"="C:\Program Files\BullGuard Ltd\BullGuard\bullguard.exe" [2008-01-27 23:21 304456]
"Steam"="C:\Program Files\Valve\Steam\Steam.exe" [2008-01-28 18:03 1266936]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="RUNDLL32.exe" [2004-08-04 09:03 33792 C:\WINDOWS\system32\rundll32.exe]
"nwiz"="nwiz.exe" [2007-12-05 01:41 1626112 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="RUNDLL32.exe" [2004-08-04 09:03 33792 C:\WINDOWS\system32\rundll32.exe]
"BullGuard"="C:\Program Files\BullGuard Ltd\BullGuard\bullguard.exe" [2008-01-27 23:21 304456]
"RTHDCPL"="RTHDCPL.EXE" [2007-03-21 14:49 16126464 C:\WINDOWS\RTHDCPL.EXE]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe" [2007-12-14 03:42 144784]
"Telemeter 3.0"="C:\Program Files\Telemeter 3.0\telemeter3.exe" [2007-04-15 23:38 1441792]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-04 09:03 15360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
"bgrlsmn"= {3ECDC6A2-09B1-4350-9570-5533AB049785} - C:\WINDOWS\bgrlsmn.dll [ ]
"adsoowf"= {BCC69A6E-318E-4751-9AFF-0E902C73CCD0} - C:\WINDOWS\adsoowf.dll [2008-01-27 20:23 217088]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BgMainSvc]
@="Service"
R0 videX32;videX32;C:\WINDOWS\system32\DRIVERS\videX32.sys [2006-09-13 07:39]
R0 xfilt;VIA SATA IDE Hot-plug Driver;C:\WINDOWS\system32\DRIVERS\xfilt.sys [2006-09-13 07:39]
R2 BdFileSpy;BullGuard File Monitor Driver;C:\WINDOWS\system32\drivers\BdFileSpy.sys [2007-10-29 09:08]
R2 BsFileScan;BullGuard File Scan Service;C:\WINDOWS\System32\svchost.exe [2004-08-04 09:03]
R2 BsFire;BullGuard Firewall Service;C:\WINDOWS\System32\svchost.exe [2004-08-04 09:03]
R3 afw;Agnitum firewall driver;C:\WINDOWS\system32\DRIVERS\afw.sys [2007-11-28 11:42]
R3 Reconn;BullGuard Email Monitor;C:\Program Files\BullGuard Ltd\BullGuard\Reconn.sys [2007-10-29 09:08]
S3 BGRaSvc;BGRaSvc;"C:\Program Files\BullGuard Ltd\BullGuard\support\bgrasvc.exe" [2007-12-20 10:48]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
BullGuard REG_MULTI_SZ BgMainSvc BsFileScan BsMailProxy BsFire
*Newly Created Service* - PROCEXP90
.
Por favor, el scanno del combofix
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:28, on 2008-01-28
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\BullGuard Ltd\BullGuard\BullGuardUpdate.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Compact Wireless-G USB Adapter Wireless Network Monitor\WLService.exe
C:\Program Files\Compact Wireless-G USB Adapter Wireless Network Monitor\WUSB54GC.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\BullGuard Ltd\BullGuard\bullguard.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\PROGRA~1\Valve\Steam\Steam.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Telemeter 3.0\telemeter3.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Hitman Pro\hitmanpro2.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Webroot\Spy Sweeper\SafeSweeper.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: SXG Advisor - {AF7FCB20-E32A-41D8-B2ED-BC1EA8C11E90} - C:\WINDOWS\dntpkwokpr.dll
O3 - Toolbar: ekxdvft - {C87444C3-8B83-4A48-91DE-95F9A3D61070} - C:\WINDOWS\ekxdvft.dll (file missing)
O4 - HKLM\..\Run: [NvCplDaemon] "RUNDLL32.EXE" C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] "nwiz.exe" /install
O4 - HKLM\..\Run: [NvMediaCenter] "RUNDLL32.EXE" C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [BullGuard] "C:\Program Files\BullGuard Ltd\BullGuard\bullguard.exe" -boot
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_04\bin\jusched.exe"
O4 - HKLM\..\Run: [Telemeter 3.0] "C:\Program Files\Telemeter 3.0\telemeter3.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BullGuard] "C:\Program Files\BullGuard Ltd\BullGuard\bullguard.exe"
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Valve\Steam\Steam.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Lokale service')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O21 - SSODL: bgrlsmn - {3ECDC6A2-09B1-4350-9570-5533AB049785} - C:\WINDOWS\bgrlsmn.dll (file missing)
O21 - SSODL: adsoowf - {BCC69A6E-318E-4751-9AFF-0E902C73CCD0} - C:\WINDOWS\adsoowf.dll
O23 - Service: BullGuard LiveUpdate (BgLiveSvc) - BullGuard Ltd. - C:\Program Files\BullGuard Ltd\BullGuard\BullGuardUpdate.exe
O23 - Service: BGRaSvc - BullGuard - C:\Program Files\BullGuard Ltd\BullGuard\support\bgrasvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: Print Spooler (Spooler) - Unknown owner - C:\WINDOWS\system32\spoolsv.exe (file missing)
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
O23 - Service: WUSB54GCSVC - GEMTEKS - C:\Program Files\Compact Wireless-G USB Adapter Wireless Network Monitor\WLService.exe
O24 - Desktop Component 0: Privacy Protection - about:home
--
End of file - 4733 bytes
en de Hijack this scan
