Archief - Superhoge Upload

Logfile of HijackThis v1.99.1
Scan saved at 13:42:24, on 5/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
E:\#Appz#\uGuru\uGuru.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
E:\#Appz#\MsPlus\MsgPlus.exe
C:\Program Files\ISP Monitor\isp.exe
C:\WINDOWS\system32\ctfmon.exe
E:\#APPZ#\FRAPS\FRAPS.EXE
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
E:\#Appz#\Logitech\SetPoint\SetPoint.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Rainlendar\Rainlendar.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
E:\#Appz#\uGuru\uGuru_Event_Receiver.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosBtProc.exe
E:\#Appz#\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
E:\#Appz#\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.be
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.skynet.be:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\#Appz#\Adobe Acrobat Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - E:\#Appz#\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - E:\#Appz#\FlashGet\jccatch.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - E:\#Appz#\FlashGet\fgiebar.dll
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [ABIT uGuru] E:\#Appz#\uGuru\uGuru.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [MessengerPlus3] "E:\#Appz#\MsPlus\MsgPlus.exe"
O4 - HKLM\..\Run: [defender] c:\\dfndrff_e45.exe
O4 - HKLM\..\Run: [keyboard] c:\\kybrdff_e45.exe
O4 - HKCU\..\Run: [ISPMonitor] C:\Program Files\ISP Monitor\isp.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Fraps] E:\#APPZ#\FRAPS\FRAPS.EXE
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Rainlendar.lnk = C:\Program Files\Rainlendar\Rainlendar.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = E:\#Appz#\Logitech\SetPoint\SetPoint.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: Download All by FlashGet - E:\#Appz#\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - E:\#Appz#\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - E:\#Appz#\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - E:\#Appz#\FlashGet\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-UNO1/GAME_UNO1.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C643E063-B07E-4714-8DC3-D93D707AFB94}: NameServer = 195.238.2.22,195.238.2.21
O17 - HKLM\System\CCS\Services\Tcpip\..\{F2BF9112-B15D-438B-AF8D-A779CDDAEAB2}: NameServer = 195.238.2.21,195.238.2.22
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

Klik om te vergroten...

Computer - 06-11-06 15:43:08.03 Service Pack 2
ComboFix 06.10.19 - Running from: "C:\Documents and Settings\Computer\Bureaublad"

(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\WINDOWS\drsmartload2.dat
C:\WINDOWS\teller2.chk


((((((((((((((((((((((((((((((( Files Created from 2006-10-05 to 2006-11-05 ))))))))))))))))))))))))))))))))))


2006-11-03 22:47 43,520 --a------ C:\WINDOWS\system32\CmdLineExt03.dll
2006-11-03 22:46 197,120 --a------ C:\WINDOWS\patchw32.dll
2006-10-10 19:02 16,384 --a------ C:\WINDOWS\system32\FileOps.exe
2006-10-07 19:29 139,264 --a------ C:\WINDOWS\system32\eax.dll
2006-10-07 19:03 319,488 -ra------ C:\WINDOWS\system32\MafiaSetup.exe
2006-10-06 16:12 14,848 --a------ C:\WINDOWS\system32\BASSMOD.dll


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


2006-11-03 22:48 -------- d-------- C:\Documents and Settings\Computer\Application Data\Atari
2006-11-03 22:46 -------- d-------- C:\Program Files\Common Files\PocketSoft
2006-11-03 22:46 -------- d-------- C:\Program Files\Common Files
2006-11-03 22:46 -------- d-------- C:\Documents and Settings\Computer\Application Data\Leadertech
2006-11-03 22:44 -------- d--h----- C:\Program Files\InstallShield Installation Information
2006-11-03 21:01 -------- d-------- C:\Program Files\Java
2006-11-02 16:41 -------- d-------- C:\Documents and Settings\Computer\Application Data\Adobe
2006-11-01 19:54 -------- d-------- C:\Program Files\Adobe
2006-11-01 19:53 -------- d-------- C:\Program Files\Common Files\Adobe
2006-10-25 15:21 -------- d-------- C:\Documents and Settings\Computer\Application Data\Mozilla
2006-10-22 18:47 -------- d-------- C:\Program Files\MessengerPlus! 3
2006-10-22 18:43 -------- d-------- C:\Program Files\MSN Messenger
2006-10-10 19:03 -------- d-------- C:\Program Files\Common Files\Adobe Systems Shared
2006-10-09 14:39 73 --a--c--- C:\WINDOWS\system32\ssprs.dll
2006-10-09 14:39 205 --a--c--- C:\WINDOWS\system32\lsprst7.dll
2006-10-01 11:03 -------- d-------- C:\Program Files\Online Services
2006-09-28 19:18 -------- d-------- C:\Documents and Settings\Computer\Application Data\LimeWire
2006-09-27 16:43 -------- d-------- C:\Program Files\SpeedFan
2006-09-22 19:20 -------- d-------- C:\Documents and Settings\Computer\Application Data\teamspeak2
2006-09-16 16:16 -------- d-------- C:\Program Files\Common Files\SystemRequirementsLab
2006-09-16 16:16 -------- d-------- C:\Documents and Settings\Computer\Application Data\System Requirements Lab
2006-09-15 09:22 -------- d-------- C:\Program Files\Google
2006-09-14 16:53 -------- d-------- C:\Program Files\Media Player Classic
2006-09-14 16:53 -------- d-------- C:\Documents and Settings\Computer\Application Data\Media Player Classic
2006-09-14 08:57 86016 --a------ C:\WINDOWS\system32\OpenAL32.dll
2006-09-14 08:57 262144 --a------ C:\WINDOWS\system32\wrap_oal.dll
2006-09-13 17:58 -------- d-------- C:\Program Files\AntiVir PersonalEdition Classic
2006-09-13 06:07 1084416 --a------ C:\WINDOWS\system32\msxml3.dll
2006-09-11 18:26 336 --a------ C:\WINDOWS\nt24.dll
2006-09-11 15:52 -------- d---s---- C:\Documents and Settings\Computer\Application Data\Microsoft
2006-08-25 16:51 617472 --a------ C:\WINDOWS\system32\comctl32.dll
2006-08-25 16:13 80 -r-hs---- C:\WINDOWS\system32\B03B867D1F.dll
2006-08-21 13:28 16896 --a------ C:\WINDOWS\system32\fltlib.dll
2006-08-21 10:14 23040 --a------ C:\WINDOWS\system32\fltmc.exe
2006-08-16 12:59 100352 --a------ C:\WINDOWS\system32\6to4svc.dll


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries are not shown

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"ISPMonitor"="C:\\Program Files\\ISP Monitor\\isp.exe"
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
"Fraps"="E:\\#APPZ#\\FRAPS\\FRAPS.EXE"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE"
"avgnt"="\"C:\\Program Files\\AntiVir PersonalEdition Classic\\avgnt.exe\" /min"
"ABIT uGuru"="E:\\#Appz#\\uGuru\\uGuru.exe"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_09\\bin\\jusched.exe\""
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"NvMediaCenter"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvMcTray.dll,NvTaskbarInit"
"MessengerPlus3"="\"E:\\#Appz#\\MsPlus\\MsgPlus.exe\""

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000005

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Mijn huidige introductiepagina"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,00,01,00,00,00,00,00,00,00,04,00,00,cb,03,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,cc,00,00,00,00,00,00,00,34,03,00,00,e2,02,\
00,00,04,00,00,40
"RestoredStateInfo"=hex:18,00,00,00,cc,00,00,00,00,00,00,00,34,03,00,00,e2,02,\
00,00,01,00,00,00

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EXE"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Preloader van browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Cache-daemon voor onderdeelcategorieën"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"NoDispAppearancePage"=dword:00000000
"NoDispBackgroundPage"=dword:00000000
"NoDispScrSavPage"=dword:00000000
"NoDispSettingsPage"=dword:00000000

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
"NoControlPanel"=dword:00000000
"NoThemesTab"=dword:00000000
"NoChangeStartMenu"=dword:00000000
"ClearRecentDocsOnExit"=dword:00000001
"NoRecentDocsHistory"=dword:00000001
"MaxRecentDocs"=dword:0000000b
"NoStartMenuMFUprogramsList"=dword:00000000
"NoLowDiskSpaceChecks"=dword:00000000
"NoDesktop"=dword:00000000
"NoActiveDesktop"=dword:00000000
"NoViewContextMenu"=dword:00000000
"NoSaveSettings"=dword:00000000
"NoToolbarCustomize"=dword:00000000
"NoFileMenu"=dword:00000000

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\DisallowRun]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^Adobe Gamma Loader.lnk]
"backup"="C:\\WINDOWS\\pss\\Adobe Gamma Loader.lnkCommon Startup"
"location"="Common Startup"
"command"="C:\\PROGRA~1\\COMMON~1\\Adobe\\CALIBR~1\\ADOBEG~1.EXE "
"item"="Adobe Gamma Loader"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^Adobe Reader Speed Launch.lnk]
"backup"="C:\\WINDOWS\\pss\\Adobe Reader Speed Launch.lnkCommon Startup"
"location"="Common Startup"
"command"="E:\\#Appz#\\ADOBEA~1\\Reader\\READER~1.EXE "
"item"="Adobe Reader Speed Launch"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^Logitech SetPoint.lnk]
"backup"="C:\\WINDOWS\\pss\\Logitech SetPoint.lnkCommon Startup"
"location"="Common Startup"
"command"="C:\\PROGRA~1\\Logitech\\SetPoint\\SetPoint.exe "
"item"="Logitech SetPoint"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Computer^Menu Start^Programma's^Opstarten^BOINC Manager.lnk]
"backup"="C:\\WINDOWS\\pss\\BOINC Manager.lnkStartup"
"location"="Startup"
"command"="E:\\#Appz#\\BOINC\\boincmgr.exe /s"
"item"="BOINC Manager"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"=""
"hkey"="HKLM"
"command"=""
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AnyDVD]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="AnyDVD"
"hkey"="HKLM"
"command"="\"E:\\#Appz#\\AnyDVD\\AnyDVD.exe\""
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BluetoothAuthenticationAgent]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="rundll32"
"hkey"="HKLM"
"command"="rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CloneCDTray]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="CloneCDTray"
"hkey"="HKLM"
"command"="\"E:\\#Appz#\\CloneCD\\CloneCDTray.exe\" /s"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CMS_RSChecker]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="RSFAN"
"hkey"="HKCU"
"command"="\"C:\\Documents and Settings\\Computer\\Bureaublad\\RSFAN.exe\" -m"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Creative Detector]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="CTDetect"
"hkey"="HKCU"
"command"="E:\\#Appz#\\Zen\\MediaSource\\Detector\\CTDetect.exe /R"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="ctfmon"
"hkey"="HKCU"
"command"="C:\\WINDOWS\\System32\\ctfmon.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="daemon"
"hkey"="HKLM"
"command"="\"E:\\#Appz#\\Deamon Tools\\daemon.exe\" -lang 1033"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools-1033]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="daemon"
"hkey"="HKLM"
"command"="\"E:\\#Appz#\\Deamon Tools\\daemon.exe\" -lang 1033"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\gcasServ]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="gcasServ"
"hkey"="HKLM"
"command"="\"E:\\#Appz#\\MS AntiSpyWare\\gcasServ.exe\""
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="iTunesHelper"
"hkey"="HKLM"
"inimapping"="0"
"command"="\"E:\\#Appz#\\iTunes\\iTunesHelper.exe\""

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Hardware Abstraction Layer]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="KHALMNPR"
"hkey"="HKLM"
"command"="KHALMNPR.EXE"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MessengerPlus3]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="MsgPlus"
"hkey"="HKLM"
"command"="\"C:\\Program Files\\MessengerPlus! 3\\MsgPlus.exe\""
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="MSMSGS"
"hkey"="HKCU"
"command"="\"C:\\Program Files\\Messenger\\MSMSGS.EXE\" /background"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="NeroCheck"
"hkey"="HKLM"
"command"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\New.net Startup]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="NEWDOT~2"
"hkey"="HKLM"
"command"="rundll32 C:\\PROGRA~1\\NEWDOT~1\\NEWDOT~2.DLL,ClientStartup -s"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="nwiz"
"hkey"="HKLM"
"command"="nwiz.exe /install"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pando]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Pando"
"hkey"="HKLM"
"command"="E:\\#Appz#\\Pando\\Pando.exe /Automation"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="qttask"
"hkey"="HKLM"
"command"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="SOUNDMAN"
"hkey"="HKLM"
"command"="SOUNDMAN.EXE"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="jusched"
"hkey"="HKLM"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Transparent]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Transparent"
"hkey"="HKLM"
"command"="E:\\#Appz#\\TweakNow PowerPack 2006\\Transparent.exe 251"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\tunebite.exe]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="tunebite"
"hkey"="HKCU"
"command"="E:\\#Appz#\\tunebite\\tunebite.exe -hidden"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WhatPulse]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="WHATPU~1"
"hkey"="HKCU"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="winampa"
"hkey"="HKLM"
"command"="E:\\#Appz#\\Winamp\\winampa.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Winwall]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Loader"
"hkey"="HKLM"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\zBrowser Launcher]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="iTouch"
"hkey"="HKLM"
"command"="C:\\Program Files\\Logitech\\iTouch\\iTouch.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\{0228e555-4f9c-4e35-a3ec-b109a192b4c2}]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="gnotify"
"hkey"="HKLM"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

Completion time: 06-11-06 15:44:08.25
C:\ComboFix.txt ... 06-11-06 15:44
C:\ComboFix2.txt ... 06-11-05 19:50

Klik om te vergroten...

• 
  Na de installatie, open AVG Anti-Spyware:
  * onder "Status", klik op Change state naast "Resident shield". (wijzig van active naar inactive!)
  * onder "Update", klik op de Start update knop.
  * onder "Scanner", tab "Settings":
  • - onder "How to act?", klik op "Recommended actions" en selecteer Quarantine. (ZEER BELANGRIJK!)
    * onder "Reports", selecteer Automatically generate report after every scan en verwijder het vinkje bij Only if threats were found
  Sluit AVG Anti-Spyware. Laat het nog niet scannen.

• * Klik op Scan en kies Complete System Scan.
  Na de scan; volg onderstaande instructies :
  BELANGRIJK : Klik niet op de "Save Scan Report" knop vooraleer je de "Apply all Actions" knop hebt aangeklikt !
  * Draag er zorg voor dat Set all elements to: op Quarantine staat (1),
  zoniet klik op de link en kies Quarantine in de popup menu. (2)
  (Dit geldt niet voor cookies, deze worden onveranderlijk gedelete !)
  * Onderaan het venster klik op de Apply all Actions knop. (3)
  
  
  
  * Wanneer je de melding krijgt 'All actions have been applied', klik je onderaan op de knop Save Report.

Logfile of HijackThis v1.99.1
Scan saved at 19:31:54, on 6/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
E:\#Appz#\uGuru\uGuru.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
E:\#Appz#\MsPlus\MsgPlus.exe
E:\#Appz#\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\ISP Monitor\isp.exe
C:\WINDOWS\system32\ctfmon.exe
E:\#APPZ#\FRAPS\FRAPS.EXE
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
E:\#Appz#\Logitech\SetPoint\SetPoint.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Rainlendar\Rainlendar.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
E:\#Appz#\AVG Anti-Spyware 7.5\guard.exe
E:\#Appz#\uGuru\uGuru_Event_Receiver.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosBtProc.exe
E:\#Appz#\Mozilla Firefox\firefox.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
E:\#Appz#\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.be
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.skynet.be:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\#Appz#\Adobe Acrobat Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - E:\#Appz#\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - E:\#Appz#\FlashGet\jccatch.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - E:\#Appz#\FlashGet\fgiebar.dll
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [ABIT uGuru] E:\#Appz#\uGuru\uGuru.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [MessengerPlus3] "E:\#Appz#\MsPlus\MsgPlus.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "E:\#Appz#\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ISPMonitor] C:\Program Files\ISP Monitor\isp.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Fraps] E:\#APPZ#\FRAPS\FRAPS.EXE
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Rainlendar.lnk = C:\Program Files\Rainlendar\Rainlendar.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = E:\#Appz#\Logitech\SetPoint\SetPoint.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: Download All by FlashGet - E:\#Appz#\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - E:\#Appz#\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - E:\#Appz#\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - E:\#Appz#\FlashGet\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-US/a-UNO1/GAME_UNO1.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C643E063-B07E-4714-8DC3-D93D707AFB94}: NameServer = 195.238.2.22,195.238.2.21
O17 - HKLM\System\CCS\Services\Tcpip\..\{F2BF9112-B15D-438B-AF8D-A779CDDAEAB2}: NameServer = 195.238.2.21,195.238.2.22
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - E:\#Appz#\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

Klik om te vergroten...

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 19:27:04 6/11/2006

+ Scan result:



C:\Documents and Settings\Computer\DoctorWeb\Quarantine\A0109579.exe -> Adware.NewDotNet : Cleaned with backup (quarantined).
C:\Documents and Settings\Computer\DoctorWeb\Quarantine\A0109611.dll -> Adware.NewDotNet : Cleaned with backup (quarantined).
C:\Documents and Settings\Computer\DoctorWeb\Quarantine\A0114012.exe -> Adware.NewDotNet : Cleaned with backup (quarantined).
C:\Documents and Settings\Computer\DoctorWeb\Quarantine\EFA351F7d01 -> Adware.NewDotNet : Cleaned with backup (quarantined).
C:\Documents and Settings\Computer\DoctorWeb\Quarantine\NDNuninstall7_22.exe -> Adware.NewDotNet : Cleaned with backup (quarantined).
C:\Documents and Settings\Computer\DoctorWeb\Quarantine\Ezthemes_WhenUSaveNow_InstallerInst.exe -> Adware.SaveNow : Cleaned with backup (quarantined).
C:\Documents and Settings\Computer\DoctorWeb\Quarantine\SetupDTSB.exe -> Adware.SaveNow : Cleaned with backup (quarantined).
C:\Documents and Settings\Computer\Menu Start\Programma's\WhenU -> Adware.SaveNow : Cleaned with backup (quarantined).
C:\Documents and Settings\Computer\Menu Start\Programma's\WhenU\Learn More About WhenU Save.url -> Adware.SaveNow : Cleaned with backup (quarantined).
C:\Documents and Settings\Computer\Menu Start\Programma's\WhenU\Learn More About WhenU SaveNow.url -> Adware.SaveNow : Cleaned with backup (quarantined).
C:\Documents and Settings\Computer\Menu Start\Programma's\WhenU\WhenU.com Website.url -> Adware.SaveNow : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{E70F41E7-1C20-4B08-B29A-9FC6F3530C57}\RP347\A0141624.exe -> Downloader.Adload.fu : Cleaned with backup (quarantined).
C:\Documents and Settings\Computer\Local Settings\Temporary Internet Files\Content.IE5\0TW34N0J\windows[1].exe -> Downloader.Adload.hw : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{E70F41E7-1C20-4B08-B29A-9FC6F3530C57}\RP347\A0141630.exe -> Downloader.Adload.hw : Cleaned with backup (quarantined).
C:\Documents and Settings\Computer\Local Settings\Temporary Internet Files\Content.IE5\0TW34N0J\dfndrff_e_uit[1].exe -> Downloader.Adload.hx : Cleaned with backup (quarantined).
C:\Documents and Settings\Computer\Local Settings\Temporary Internet Files\Content.IE5\6VAZY9YN\kybrdff_e[1].exe -> Downloader.Adload.hx : Cleaned with backup (quarantined).
C:\Documents and Settings\Computer\Local Settings\Temporary Internet Files\Content.IE5\YR8V2TCH\nwnmff_e[1].exe -> Downloader.Adload.hx : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{E70F41E7-1C20-4B08-B29A-9FC6F3530C57}\RP347\A0141626.exe -> Downloader.Adload.hx : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{E70F41E7-1C20-4B08-B29A-9FC6F3530C57}\RP347\A0141628.exe -> Downloader.Adload.hx : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{E70F41E7-1C20-4B08-B29A-9FC6F3530C57}\RP347\A0141629.exe -> Downloader.Adload.hx : Cleaned with backup (quarantined).
C:\Documents and Settings\Computer\Local Settings\Temporary Internet Files\Content.IE5\6VAZY9YN\loader[1].exe -> Downloader.Adload.nad : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{E70F41E7-1C20-4B08-B29A-9FC6F3530C57}\RP347\A0141625.exe -> Downloader.Adload.nad : Cleaned with backup (quarantined).
C:\WINDOWS\system32\svhost.006 -> Not-A-Virus.Monitor.Win32.Ardamax.24 : Cleaned with backup (quarantined).
C:\WINDOWS\system32\svhost.exe -> Not-A-Virus.Monitor.Win32.Ardamax.24 : Cleaned with backup (quarantined).
C:\WINDOWS\system32\svhost.007 -> Not-A-Virus.Monitor.Win32.Ardamax.k : Cleaned with backup (quarantined).
:mozilla.281:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.218:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.219:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.220:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.221:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.222:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.223:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.224:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Computer\Cookies\computer@adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.303:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.307:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.150:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.151:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.191:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.192:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.193:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.301:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.235:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.272:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.273:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.536:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Comclick : Cleaned.
:mozilla.537:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Comclick : Cleaned.
:mozilla.538:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Comclick : Cleaned.
:mozilla.519:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Cqcounter : Cleaned.
:mozilla.520:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Cqcounter : Cleaned.
:mozilla.59:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.102:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Estat : Cleaned.
C:\Documents and Settings\Computer\Cookies\[email protected][2].txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.237:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.238:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.239:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.241:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.74:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.76:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.77:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.78:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.79:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.80:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.302:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.306:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.181:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.182:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.183:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.343:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.438:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Hotlog : Cleaned.
:mozilla.440:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.I12 : Cleaned.
:mozilla.441:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.I12 : Cleaned.
:mozilla.442:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.I12 : Cleaned.
:mozilla.443:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.I12 : Cleaned.
:mozilla.557:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.I12 : Cleaned.
:mozilla.550:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Itrack : Cleaned.
:mozilla.551:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Itrack : Cleaned.
:mozilla.288:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Ivwbox : Cleaned.
:mozilla.269:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Masterstats : Cleaned.
:mozilla.167:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.168:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.169:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.170:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.171:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.172:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.173:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.174:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.175:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.176:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.177:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.178:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.526:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Quarterserver : Cleaned.
:mozilla.488:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.489:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.490:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.491:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.492:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.124:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.125:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.208:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.210:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.531:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.532:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.563:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.564:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.565:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.566:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.494:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Spylog : Cleaned.
:mozilla.19:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.20:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.21:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.22:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.23:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.24:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.25:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.26:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.27:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.28:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.29:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.30:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.31:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.32:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.33:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.34:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.35:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.36:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.37:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.38:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.39:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.497:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.498:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.44:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.137:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.328:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.329:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.330:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.510:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned.
:mozilla.287:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.331:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.332:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.300:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.304:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.305:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\Documents and Settings\Computer\Cookies\[email protected][2].txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.213:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.214:C:\Documents and Settings\Computer\Application Data\Mozilla\Firefox\Profiles\f2cikgwx.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.


::Report end

Klik om te vergroten...