Archief - WMS idle probleem

Het archief is een bevroren moment uit een vorige versie van dit forum, met andere regels en andere bazen. Deze posts weerspiegelen op geen enkele manier onze huidige ideeën, waarden of wereldbeelden en zijn op sommige plaatsen gecensureerd wegens ontoelaatbaar. Veel zijn in een andere tijdsgeest gemaakt, al dan niet ironisch - zoals in het ironische subforum Off-Topic - en zouden op dit moment niet meer gepost (mogen) worden. Toch bieden we dit archief nog graag aan als informatiedatabank en naslagwerk. Lees er hier meer over of start een gesprek met anderen.
d

dj Di-eS

Legacy Member
Elke keer bij het afsluiten van men computer krijg ik de melding dat het programma WMS idle niet reageert en moet dit elke keer eerst beeindigen voor alleer de pc afsluit..

Ook gaat het laden van filmpjes op youtube, stage6 zeer traag, ik weet niet of dit er iets mee te maken heeft..

Een systeem scan van norton gaf 1 tracking cookie weer.


Logfile of HijackThis v1.99.1
Scan saved at 18:58:27, on 22/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\hijack this\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [Ptipbmf] rundll32.exe ptipbmf.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1179513796700
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1179513855825
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h cltCommon (file missing)
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Planner voor Automatische LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
J

Jurgenv1

Legacy Member
* Download Dr.Web CureIt naar je bureaublad:
ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe
  • Dubbelklik drweb-cureit.exe en sta het toe om de express scan te starten.
  • Dit zal de bestanden scannen die momenteel in het geheugen geladen zijn en wanneer er iets gevonden wordt, klik de Yes to all knop bij de vraag 'cure it?'. Dit is enkel een korte scan.
  • Eenmaal de korte scan is beeïndigd, Klik Options > Change Settings
  • Kies de "Scan"-tab en verwijder het vinkje bij "Heuristic analyse"
  • Terug in het hoofdvenster kan je de drives selecteren die je wilt laten scannen.
  • Selecteer hier alle drives. Een rood bolletje zal dan tevoorschijn komen op de drives die je laat scannen.
  • Klik daarna de groene pijl rechts om de scan te starten.
  • Klik 'Yes to all' wanneer er gevraagd wordt om cure of move uit te voeren.
  • Wanneer de scan gedaan is, kijk of je volgende icoontje kan aanklikken dat staat naast hetgeen gevonden werd:
    check.gif
  • Indien wel, klik erop en daarna klik op het icoontje er net onder en kies: Move incurable zoals je zal zien in volgende afbeelding:
    move.gif

    Dit zal de bestanden verplaatsen naar volgende map %userprofile%\DoctorWeb\quarantaine-folder indien het niet gedesinfecteerd kan worden. (dit in het geval dat we samples nodig hebben)
  • Na bovenstaande te selecteren, in het menu bovenaan van Dr.Web CureIt, klik file en kies save report list. Bewaar de log op je bureaublad.
  • Sluit daarna Dr.Web Cureit.
  • Herstart je computer!! Belangrijke stap, want het kan zijn dat Dr.Web Cureit bestanden zal verplaatsen/verwijderen tijdens herstart.
  • Na het herstarten, Kopieer en plak de inhoud van die log die je eerder hebt bewaard in je volgende post met een nieuw hijackthis logje.
d

dj Di-eS

Legacy Member
Het probleem is nog niet opgelost.
Aller eerst had ik een scan gedaan met ad-aware, die nog 16 tracking cookies gevonden had, deze heb ik verwijderd.
Daarna heb ik de scan uitgevoerd met drweb en het programma heeft niets gevonden waardoor ik de icoontjes niet kon aanvinken of de logs opslaan.
Toen ik de computer opnieuw wou opstarten moest ik nog steeds WMS idle beeindigen vooralleer de pc afsloot.

Dit is de nieuwe hijack logfile na de scan en de heropstarting:

Logfile of HijackThis v1.99.1
Scan saved at 17:19:35, on 23/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\hijack this\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [Ptipbmf] "rundll32.exe" ptipbmf.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] "RUNDLL32.EXE" C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] "nwiz.exe" /install
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] "C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe"
O4 - HKLM\..\Run: [NvMediaCenter] "RUNDLL32.EXE" C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [SpySweeper] C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe /startintray
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1179513796700
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1179513855825
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h cltCommon (file missing)
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Planner voor Automatische LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe


alvast bedankt:)
d

dj Di-eS

Legacy Member
Dit werkt ook niet, WMS idle beëindigen kwam er nog steeds op..
Nog andere suggesties? Enig idee wat dit probleem zou kunnen zijn?

Bedankt voor de tijd die je hierin steekt :)
J

Jurgenv1

Legacy Member
Ga naar windows update en installeer alle beschikbare updates, daarna:

Download combofix.exe: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Plaats het op je bureaublad.
Dubbelklik er op om het programma te starten.
In het scherm dat verschijnt tik je een Y in om het cleaningsprocess te starten.
Volg de instructies op het scherm.
Als het tooltje klaar is, opent er een logfile (combofix.txt) Post de inhoud van dit bestandje samen met een nieuwe hijackthislog.
d

dj Di-eS

Legacy Member
"Dieter De Saedeleer" - 2007-05-23 18:59:40 Service Pack 2
ComboFix 07-05.21.6.V - Running from: "C:\Documents and Settings\Dieter De Saedeleer\Bureaublad\"


(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\WINDOWS\system32\winsys.exe


((((((((((((((((((((((((((((((( Files Created from 2007-04-05 to 2007-05-23 ))))))))))))))))))))))))))))))))))


2007-05-23 18:30 <DIR> d-------- C:\WINDOWS\system32\CatRoot2
2007-05-23 14:55 <DIR> d-------- C:\DOCUME~1\DIETER~1\DoctorWeb
2007-05-22 21:27 22,080 --a------ C:\WINDOWS\system32\drivers\sshrmd.sys
2007-05-22 21:27 21,056 --a------ C:\WINDOWS\system32\drivers\sskbfd.sys
2007-05-22 21:27 20,544 --a------ C:\WINDOWS\system32\drivers\SSFS0509.sys
2007-05-22 21:27 144,960 --a------ C:\WINDOWS\system32\drivers\ssidrv.sys
2007-05-22 21:27 <DIR> d-------- C:\Program Files\Webroot
2007-05-22 21:27 <DIR> d-------- C:\DOCUME~1\LOCALS~1\APPLIC~1\Webroot
2007-05-22 21:27 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Webroot
2007-05-22 21:00 164 --a------ C:\install.dat
2007-05-22 20:59 <DIR> d-------- C:\DOCUME~1\DIETER~1\APPLIC~1\Webroot
2007-05-22 20:19 <DIR> d-------- C:\DOCUME~1\DIETER~1\APPLIC~1\Lavasoft
2007-05-22 20:18 <DIR> d-------- C:\Program Files\Lavasoft
2007-05-22 20:18 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-05-22 18:46 <DIR> d-------- C:\hijack this
2007-05-21 20:16 <DIR> d-------- C:\Program Files\DivX
2007-05-19 18:54 <DIR> d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2007-05-19 10:48 1,290 --a------ C:\WINDOWS\mozver.dat
2007-05-19 09:12 249,610 --a------ C:\WINDOWS\A Tale in the Desert Uninstaller.exe
2007-05-19 09:12 <DIR> d-------- C:\Program Files\A Tale in the Desert
2007-05-19 08:27 0 --a------ C:\WINDOWS\nsreg.dat
2007-05-19 03:13 <DIR> d-------- C:\WINDOWS\.jagex_cache_32
2007-05-19 03:06 <DIR> d-------- C:\Program Files\LimeWire
2007-05-19 03:06 <DIR> d-------- C:\DOCUME~1\DIETER~1\Shared
2007-05-19 03:06 <DIR> d-------- C:\DOCUME~1\DIETER~1\Incomplete
2007-05-19 03:06 <DIR> d-------- C:\DOCUME~1\DIETER~1\APPLIC~1\LimeWire
2007-05-19 01:05 89,360 --a------ C:\WINDOWS\system32\VB5DB.DLL
2007-05-19 01:05 69,632 --a------ C:\WINDOWS\system32\xmltok.dll
2007-05-19 01:05 36,864 --a------ C:\WINDOWS\system32\xmlparse.dll
2007-05-19 01:05 26,088 --a------ C:\WINDOWS\system32\xmlinst.exe
2007-05-19 01:03 <DIR> d-------- C:\Program Files\Ubi Soft
2007-05-19 00:23 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
2007-05-18 23:42 327,168 --a------ C:\WINDOWS\IsUn0413.exe
2007-05-18 23:41 147,512 --a------ C:\WINDOWS\system32\hpzlnt05.dll
2007-05-18 23:41 <DIR> d-------- C:\Program Files\hp deskjet 5550 series
2007-05-18 23:38 <DIR> d-------- C:\Program Files\Hewlett-Packard
2007-05-18 23:06 22,112 -ra------ C:\WINDOWS\system32\drivers\COH_Mon.sys
2007-05-18 22:47 <DIR> d-------- C:\Program Files\Norton Internet Security
2007-05-18 22:46 48,776 --a------ C:\WINDOWS\system32\S32EVNT1.DLL
2007-05-18 22:46 115,000 --a------ C:\WINDOWS\system32\drivers\SYMEVENT.SYS
2007-05-18 22:46 <DIR> d-------- C:\Program Files\Symantec
2007-05-18 22:46 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
2007-05-18 22:44 <DIR> d-------- C:\Program Files\Common Files\Symantec Shared
2007-05-18 22:40 208,896 --a------ C:\WINDOWS\system32\NVUNINST.EXE
2007-05-18 22:40 <DIR> d-------- C:\NVIDIA
2007-05-18 22:38 <DIR> d-------- C:\WINDOWS\system32\Lang
2007-05-18 22:30 <DIR> d-------- C:\DOCUME~1\DIETER~1\APPLIC~1\Ahead
2007-05-18 22:29 <DIR> d-------- C:\Program Files\Nero
2007-05-18 22:29 <DIR> d-------- C:\Program Files\Common Files\Ahead
2007-05-18 22:29 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
2007-05-18 22:27 <DIR> d-------- C:\DOCUME~1\DIETER~1\APPLIC~1\CyberLink
2007-05-18 22:27 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
2007-05-18 22:24 499,712 --------- C:\WINDOWS\system32\msvcp71.dll
2007-05-18 22:24 348,160 --------- C:\WINDOWS\system32\msvcr71.dll
2007-05-18 22:24 24,576 --a------ C:\WINDOWS\system32\msxml3a.dll
2007-05-18 22:24 <DIR> d-------- C:\Program Files\CyberLink
2007-05-18 22:24 <DIR> d-------- C:\MyWorks
2007-05-18 22:22 <DIR> d-------- C:\Program Files\Messenger Plus! Live
2007-05-18 22:21 <DIR> d--hs---- C:\RECYCLER
2007-05-18 22:19 <DIR> d-------- C:\DOCUME~1\DIETER~1\Contacts
2007-05-18 22:18 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE
2007-05-18 22:18 <DIR> d-------- C:\Program Files\MSN Messenger
2007-05-18 22:10 <DIR> d-------- C:\Program Files\MSXML 6.0
2007-05-18 22:02 <DIR> d-------- C:\Program Files\MSBuild
2007-05-18 21:59 14,048 --------- C:\WINDOWS\system32\spmsg2.dll
2007-05-18 21:59 <DIR> d-------- C:\WINDOWS\system32\XPSViewer
2007-05-18 21:59 <DIR> d-------- C:\Program Files\Reference Assemblies
2007-05-18 21:59 <DIR> d-------- C:\0ab2f3352f1fe99ccd0e0c
2007-05-18 21:57 <DIR> d-------- C:\Program Files\Windows Media Connect 2
2007-05-18 21:56 <DIR> d-------- C:\WINDOWS\system32\LogFiles
2007-05-18 21:56 <DIR> d-------- C:\WINDOWS\system32\drivers\UMDF
2007-05-18 21:56 <DIR> d-------- C:\WINDOWS\RegisteredPackages
2007-05-18 21:37 <DIR> d-------- C:\WINDOWS\system32\nl-nl
2007-05-18 21:36 <DIR> d-------- C:\WINDOWS\network diagnostic
2007-05-18 21:19 <DIR> d--h----- C:\WINDOWS\$hf_mig$
2007-05-18 21:19 <DIR> d-------- C:\WINDOWS\system32\PreInstall
2007-05-18 21:15 <DIR> d-------- C:\DOCUME~1\LOCALS~1\Menu Start
2007-05-18 21:14 <DIR> d-------- C:\WINDOWS\Prefetch
2007-05-18 21:10 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2007-05-18 21:10 <DIR> d-------- C:\WINDOWS\provisioning
2007-05-18 21:10 <DIR> d-------- C:\WINDOWS\peernet
2007-05-18 21:09 <DIR> d-------- C:\WINDOWS\ServicePackFiles
2007-05-18 21:08 23,856 --a------ C:\WINDOWS\system32\spupdsvc.exe
2007-05-18 21:07 <DIR> d-------- C:\WINDOWS\EHome
2007-05-18 21:05 4,569 --------- C:\WINDOWS\system32\secupd.dat
2007-05-18 21:05 11,776 --------- C:\WINDOWS\system32\spnpinst.exe
2007-05-18 20:52 956,416 --a------ C:\WINDOWS\system32\msdtctm.dll
2007-05-18 20:52 91,136 --a------ C:\WINDOWS\system32\mtxoci.dll
2007-05-18 20:52 77,312 --a------ C:\WINDOWS\system32\browser.dll
2007-05-18 20:52 66,560 --a------ C:\WINDOWS\system32\mtxclu.dll
2007-05-18 20:52 625,152 --a------ C:\WINDOWS\system32\catsrvut.dll
2007-05-18 20:52 614,912 --a------ C:\WINDOWS\system32\h323msp.dll
2007-05-18 20:52 60,416 --a------ C:\WINDOWS\system32\colbact.dll
2007-05-18 20:52 581,120 --a------ C:\WINDOWS\system32\rpcrt4.dll
2007-05-18 20:52 540,160 --a------ C:\WINDOWS\system32\comuid.dll
2007-05-18 20:52 426,496 --a------ C:\WINDOWS\system32\msdtcprx.dll
2007-05-18 20:52 40,960 --a------ C:\WINDOWS\system32\mf3216.dll
2007-05-18 20:52 397,824 --a------ C:\WINDOWS\system32\rpcss.dll
2007-05-18 20:52 332,288 --a------ C:\WINDOWS\system32\ipnathlp.dll
2007-05-18 20:52 243,200 --a------ C:\WINDOWS\system32\es.dll
2007-05-18 20:52 225,792 --a------ C:\WINDOWS\system32\catsrv.dll
2007-05-18 20:52 161,280 --a------ C:\WINDOWS\system32\msdtcuiu.dll
2007-05-18 20:52 110,080 --a------ C:\WINDOWS\system32\clbcatex.dll
2007-05-18 20:52 101,376 --a------ C:\WINDOWS\system32\txflog.dll
2007-05-18 20:52 1,284,608 --a------ C:\WINDOWS\system32\ole32.dll
2007-05-18 20:52 1,267,200 --a------ C:\WINDOWS\system32\comsvcs.dll
2007-05-18 20:51 241,152 --a------ C:\WINDOWS\system32\srrstr.dll
2007-05-18 20:50 26,112 --a------ C:\WINDOWS\system32\xpsp1hfm.exe
2007-05-18 20:50 <DIR> d--h-c--- C:\WINDOWS\$xpsp1hfm$
2007-05-18 20:49 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
2007-05-18 20:46 8,192 --------- C:\WINDOWS\system32\bitsprx2.dll
2007-05-18 20:46 7,168 --------- C:\WINDOWS\system32\bitsprx3.dll
2007-05-18 20:46 351,232 --a------ C:\WINDOWS\system32\winhttp.dll
2007-05-18 20:46 18,944 --a------ C:\WINDOWS\system32\qmgrprxy.dll
2007-05-18 20:46 <DIR> d-------- C:\WINDOWS\system32\bits
2007-05-18 20:44 128,232 --a------ C:\WINDOWS\system32\mucltui.dll
2007-05-18 20:43 466,200 --a------ C:\WINDOWS\system32\wuapi.dll
2007-05-18 20:43 41,240 --a------ C:\WINDOWS\system32\wups.dll
2007-05-18 20:43 194,840 --a------ C:\WINDOWS\system32\wuaueng1.dll
2007-05-18 20:43 18,200 --a------ C:\WINDOWS\system32\wups2.dll
2007-05-18 20:43 174,360 --a------ C:\WINDOWS\system32\wuauclt1.exe
2007-05-18 20:43 128,280 --a------ C:\WINDOWS\system32\wucltui.dll
2007-05-18 20:43 <DIR> d--hs---- C:\DOCUME~1\DIETER~1\UserData
2007-05-18 20:43 <DIR> d-------- C:\WINDOWS\SoftwareDistribution
2007-05-18 20:27 <DIR> d-------- C:\WINDOWS\ShellNew
2007-05-18 20:19 77,312 -ra------ C:\WINDOWS\system32\drivers\viasraid.sys
2007-05-18 20:17 1,835,008 --ah----- C:\DOCUME~1\DIETER~1\NTUSER.DAT
2007-05-18 20:17 <DIR> dr-h----- C:\DOCUME~1\DIETER~1\Onlangs geopend
2007-05-18 20:17 <DIR> dr------- C:\DOCUME~1\DIETER~1\Mijn documenten
2007-05-18 20:17 <DIR> dr------- C:\DOCUME~1\DIETER~1\Menu Start
2007-05-18 20:17 <DIR> dr------- C:\DOCUME~1\DIETER~1\Favorieten
2007-05-18 20:17 <DIR> d--hs---- C:\WINDOWS\Installer
2007-05-18 20:17 <DIR> d--h----- C:\DOCUME~1\DIETER~1\Sjablonen
2007-05-18 20:17 <DIR> d--h----- C:\DOCUME~1\DIETER~1\Netwerkprinteromgeving
2007-05-18 20:17 <DIR> d-------- C:\DOCUME~1\DIETER~1\Bureaublad
2007-05-18 20:14 262,144 --ah----- C:\DOCUME~1\NETWOR~1\NTUSER.DAT
2007-05-18 20:14 262,144 --ah----- C:\DOCUME~1\LOCALS~1\NTUSER.DAT
2007-05-18 20:14 <DIR> d--hs---- C:\System Volume Information
2007-05-18 20:14 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
2007-05-18 20:11 81,920 -ra------ C:\WINDOWS\system32\nvclock.dll
2007-05-18 20:11 45,056 -ra------ C:\WINDOWS\system32\memtest.dll
2007-05-18 20:11 40,960 -ra------ C:\WINDOWS\system32\Nvgpio.dll
2007-05-18 20:11 39,044 -ra------ C:\WINDOWS\system32\drivers\vgauti.sys
2007-05-18 20:11 39,044 -ra------ C:\WINDOWS\system32\drivers\msicpl.sys
2007-05-18 20:11 36,864 -ra------ C:\WINDOWS\system32\Nvapi9x.dll
2007-05-18 20:11 36,864 -ra------ C:\WINDOWS\system32\msiuins.exe
2007-05-18 20:11 294,912 -ra------ C:\WINDOWS\system32\msicpl.dll
2007-05-18 20:11 233,472 ---h----- C:\DOCUME~1\DEFAUL~1\NTUSER.DAT
2007-05-18 20:11 208,896 --a------ C:\WINDOWS\system32\nvudisp.exe
2007-05-18 20:11 112,128 --a------ C:\WINDOWS\system32\mapi32.dll
2007-05-18 20:11 0 -rahs---- C:\MSDOS.SYS
2007-05-18 20:11 0 -rahs---- C:\IO.SYS
2007-05-18 20:11 0 --a------ C:\CONFIG.SYS
2007-05-18 20:11 0 --a------ C:\AUTOEXEC.BAT
2007-05-18 20:11 <DIR> d--hs---- C:\DOCUME~1\ALLUSE~1\DRM
2007-05-18 20:11 <DIR> d-------- C:\WINDOWS\system32\xircom
2007-05-18 20:11 <DIR> d-------- C:\WINDOWS\nview
2007-05-18 20:11 <DIR> d-------- C:\Program Files\microsoft frontpage
2007-05-18 20:10 382,464 --a------ C:\WINDOWS\system32\qmgr.dll
2007-05-18 20:10 <DIR> dr------- C:\WINDOWS\Offline Web Pages
2007-05-18 20:10 <DIR> d---s---- C:\WINDOWS\Downloaded Program Files
2007-05-18 20:10 <DIR> d-------- C:\WINDOWS\system32\Macromed
2007-05-18 20:10 <DIR> d-------- C:\WINDOWS\system32\DirectX
2007-05-18 20:10 <DIR> d-------- C:\WINDOWS\srchasst
2007-05-18 20:10 <DIR> d-------- C:\Program Files\Movie Maker
2007-05-18 20:09 86,016 --a------ C:\WINDOWS\system32\isign32.dll
2007-05-18 20:09 81,920 --a------ C:\WINDOWS\system32\ils.dll
2007-05-18 20:09 73,728 --a------ C:\WINDOWS\system32\icwdial.dll
2007-05-18 20:09 73,472 --a------ C:\WINDOWS\system32\drivers\sr.sys
2007-05-18 20:09 69,632 --a------ C:\WINDOWS\system32\msconf.dll
2007-05-18 20:09 679,424 --a------ C:\WINDOWS\system32\inetcomm.dll
2007-05-18 20:09 67,584 --a------ C:\WINDOWS\system32\srclient.dll
2007-05-18 20:09 67,584 --a------ C:\WINDOWS\system32\acctres.dll
2007-05-18 20:09 65,536 --a------ C:\WINDOWS\system32\icwphbk.dll
2007-05-18 20:09 50,176 --a------ C:\WINDOWS\system32\inetres.dll
2007-05-18 20:09 45,568 --a------ C:\WINDOWS\system32\safrslv.dll
2007-05-18 20:09 43,520 --a------ C:\WINDOWS\system32\safrcdlg.dll
2007-05-18 20:09 43,520 --a------ C:\WINDOWS\system32\racpldlg.dll
2007-05-18 20:09 34,560 --a------ C:\WINDOWS\system32\mnmdd.dll
2007-05-18 20:09 32,768 --a------ C:\WINDOWS\system32\mnmsrvc.exe
2007-05-18 20:09 32,768 --a------ C:\WINDOWS\system32\isrdbg32.dll
2007-05-18 20:09 29,696 --a------ C:\WINDOWS\system32\safrdm.dll
2007-05-18 20:09 28,672 --a------ C:\WINDOWS\system32\nmmkcert.dll
2007-05-18 20:09 278,528 --a------ C:\WINDOWS\system32\mstask.dll
2007-05-18 20:09 278,528 --a------ C:\WINDOWS\system32\inetcfg.dll
2007-05-18 20:09 252,928 --a------ C:\WINDOWS\system32\msoeacct.dll
2007-05-18 20:09 192,000 --a------ C:\WINDOWS\system32\schedsvc.dll
2007-05-18 20:09 170,496 --a------ C:\WINDOWS\system32\srsvc.dll
2007-05-18 20:09 16,384 --a------ C:\WINDOWS\system32\icfgnt5.dll
2007-05-18 20:09 12,288 --a------ C:\WINDOWS\system32\nmevtmsg.dll
2007-05-18 20:09 12,288 --a------ C:\WINDOWS\system32\mstinit.exe
2007-05-18 20:09 11,264 --a------ C:\WINDOWS\system32\atrace.dll
2007-05-18 20:09 105,984 --a------ C:\WINDOWS\system32\msoert2.dll
2007-05-18 20:09 <DIR> d---s---- C:\WINDOWS\Tasks
2007-05-18 20:09 <DIR> d-------- C:\WINDOWS\system32\Restore
2007-05-18 20:09 <DIR> d-------- C:\WINDOWS\PCHEALTH
2007-05-18 20:09 <DIR> d-------- C:\Program Files\Common Files\MSSoap
2007-05-18 20:08 94,208 --a------ C:\WINDOWS\system32\tscfgwmi.dll
2007-05-18 20:08 9,728 --a------ C:\WINDOWS\system32\reset.exe
2007-05-18 20:08 80,896 --a------ C:\WINDOWS\system32\charmap.exe
2007-05-18 20:08 73,216 --a------ C:\WINDOWS\system32\avwav.dll
2007-05-18 20:08 67,072 --a------ C:\WINDOWS\system32\rdshost.exe
2007-05-18 20:08 662,528 --a------ C:\WINDOWS\system32\getuname.dll
2007-05-18 20:08 655,360 --a------ C:\WINDOWS\system32\mstscax.dll
2007-05-18 20:08 61,440 --a------ C:\WINDOWS\system32\remotepg.dll
2007-05-18 20:08 6,656 --a------ C:\WINDOWS\system32\wuauserv.dll
2007-05-18 20:08 57,344 --a------ C:\WINDOWS\system32\sol.exe
2007-05-18 20:08 55,808 --a------ C:\WINDOWS\system32\freecell.exe
2007-05-18 20:08 539,136 --a------ C:\WINDOWS\system32\spider.exe
2007-05-18 20:08 5,632 --a------ C:\WINDOWS\system32\write.exe
2007-05-18 20:08 44,544 --a------ C:\WINDOWS\system32\tscupgrd.exe
2007-05-18 20:08 44,544 --a------ C:\WINDOWS\system32\hticons.dll
2007-05-18 20:08 412,160 --a------ C:\WINDOWS\system32\mstsc.exe
2007-05-18 20:08 352,768 --a------ C:\WINDOWS\system32\hypertrm.dll
2007-05-18 20:08 35,840 --a------ C:\WINDOWS\system32\winchat.exe
2007-05-18 20:08 345,600 --a------ C:\WINDOWS\system32\mspaint.exe
2007-05-18 20:08 233,472 --a------ C:\WINDOWS\system32\avtapi.dll
2007-05-18 20:08 21,896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys
2007-05-18 20:08 21,748 --a------ C:\WINDOWS\system32\emptyregdb.dat
2007-05-18 20:08 189,568 -ra------ C:\WINDOWS\system32\drivers\yk51x86.sys
2007-05-18 20:08 187,392 --a------ C:\WINDOWS\system32\accwiz.exe
2007-05-18 20:08 16,384 --a------ C:\WINDOWS\system32\avmeter.dll
2007-05-18 20:08 147,968 --a------ C:\WINDOWS\system32\rdchost.dll
2007-05-18 20:08 142,336 --a------ C:\WINDOWS\system32\sessmgr.exe
2007-05-18 20:08 139,528 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys
2007-05-18 20:08 139,264 --a------ C:\WINDOWS\system32\sndvol32.exe
2007-05-18 20:08 132,608 --a------ C:\WINDOWS\system32\sndrec32.exe
2007-05-18 20:08 13,824 --a------ C:\WINDOWS\system32\rdsaddin.exe
2007-05-18 20:08 128,000 --a------ C:\WINDOWS\system32\mshearts.exe
2007-05-18 20:08 125,208 --a------ C:\WINDOWS\system32\wuauclt.exe
2007-05-18 20:08 124,416 --a------ C:\WINDOWS\system32\mplay32.exe
2007-05-18 20:08 12,040 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys
2007-05-18 20:08 119,808 --a------ C:\WINDOWS\system32\winmine.exe
2007-05-18 20:08 114,688 --a------ C:\WINDOWS\system32\calc.exe
2007-05-18 20:08 104,448 --a------ C:\WINDOWS\system32\clipbrd.exe
2007-05-18 20:08 1,343,768 --a------ C:\WINDOWS\system32\wuaueng.dll
2007-05-18 20:08 <DIR> d--h----- C:\Program Files\WindowsUpdate
2007-05-18 20:08 <DIR> d-------- C:\WINDOWS\Registration
2007-05-18 20:08 <DIR> d-------- C:\Program Files\Windows NT
2007-05-18 20:08 <DIR> d-------- C:\Program Files\Online Services
2007-05-18 20:08 <DIR> d-------- C:\Program Files\MSN Gaming Zone
2007-05-18 20:08 <DIR> d-------- C:\Program Files\Messenger
2007-05-18 20:07 97,792 --a------ C:\WINDOWS\system32\comrepl.dll
2007-05-18 20:07 87,176 --a------ C:\WINDOWS\system32\rdpwsx.dll
2007-05-18 20:07 85,504 --a------ C:\WINDOWS\system32\catsrvps.dll
2007-05-18 20:07 62,464 --a------ C:\WINDOWS\system32\rdpclip.exe
2007-05-18 20:07 6,144 --a------ C:\WINDOWS\system32\msdtc.exe
2007-05-18 20:07 58,880 --a------ C:\WINDOWS\system32\msdtclog.dll
2007-05-18 20:07 58,880 --a------ C:\WINDOWS\system32\licwmi.dll
2007-05-18 20:07 56,320 --a------ C:\WINDOWS\system32\servdeps.dll
2007-05-18 20:07 54,272 --a------ C:\WINDOWS\system32\stclient.dll
2007-05-18 20:07 5,120 --a------ C:\WINDOWS\system32\dcomcnfg.exe
2007-05-18 20:07 40,840 --a------ C:\WINDOWS\system32\drivers\termdd.sys
2007-05-18 20:07 4,608 --a------ C:\WINDOWS\system32\rdpcfgex.dll
2007-05-18 20:07 4,096 --a------ C:\WINDOWS\system32\mtxex.dll
2007-05-18 20:07 39,424 --a------ C:\WINDOWS\system32\cfgbkend.dll
2007-05-18 20:07 33,792 --a------ C:\WINDOWS\system32\regini.exe
2007-05-18 20:07 297,472 --a------ C:\WINDOWS\system32\termsrv.dll
2007-05-18 20:07 25,600 --a------ C:\WINDOWS\system32\comaddin.dll
2007-05-18 20:07 25,088 --a------ C:\WINDOWS\system32\mtxlegih.dll
2007-05-18 20:07 23,040 --a------ C:\WINDOWS\system32\qwinsta.exe
2007-05-18 20:07 22,016 --a------ C:\WINDOWS\system32\msg.exe
2007-05-18 20:07 20,480 --a------ C:\WINDOWS\system32\qprocess.exe
2007-05-18 20:07 20,480 --a------ C:\WINDOWS\system32\mtxdm.dll
2007-05-18 20:07 196,864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys
2007-05-18 20:07 19,968 --a------ C:\WINDOWS\system32\rdpsnd.dll
2007-05-18 20:07 188,928 --a------ C:\WINDOWS\system32\cmprops.dll
2007-05-18 20:07 17,920 --a------ C:\WINDOWS\system32\tsshutdn.exe
2007-05-18 20:07 17,920 --a------ C:\WINDOWS\system32\mmfutil.dll
2007-05-18 20:07 17,408 --a------ C:\WINDOWS\system32\qappsrv.exe
2007-05-18 20:07 16,384 --a------ C:\WINDOWS\system32\tskill.exe
2007-05-18 20:07 16,384 --a------ C:\WINDOWS\system32\rwinsta.exe
2007-05-18 20:07 15,872 --a------ C:\WINDOWS\system32\cdmodem.dll
2007-05-18 20:07 15,360 --a------ C:\WINDOWS\system32\tsdiscon.exe
2007-05-18 20:07 15,360 --a------ C:\WINDOWS\system32\tscon.exe
2007-05-18 20:07 15,360 --a------ C:\WINDOWS\system32\shadow.exe
2007-05-18 20:07 15,360 --a------ C:\WINDOWS\system32\logoff.exe
2007-05-18 20:07 147,456 --a------ C:\WINDOWS\system32\comsnap.dll
2007-05-18 20:07 11,776 --a------ C:\WINDOWS\system32\xolehlp.dll
2007-05-18 20:07 11,264 --a------ C:\WINDOWS\system32\icaapi.dll
2007-05-18 20:07 1,161 --a------ C:\WINDOWS\system32\usrlogon.cmd
2007-05-18 20:07 <DIR> d-------- C:\WINDOWS\system32\MsDtc
2007-05-18 20:07 <DIR> d-------- C:\WINDOWS\system32\Com
2007-05-18 20:02 82,944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys
2007-05-18 20:02 765,952 --a------ C:\WINDOWS\system\crlds3d.dll
2007-05-18 20:02 7,552 --a------ C:\WINDOWS\system32\drivers\mskssrv.sys
2007-05-18 20:02 65,536 --a------ C:\WINDOWS\system32\Audio3D.dll
2007-05-18 20:02 65,536 --a------ C:\WINDOWS\system32\a3d.dll
2007-05-18 20:02 65,024 --a------ C:\WINDOWS\SOUNDMAN.EXE
2007-05-18 20:02 613,244 --a------ C:\WINDOWS\system32\drivers\ALCXWDM.SYS
2007-05-18 20:02 60,800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys
2007-05-18 20:02 60,288 --a------ C:\WINDOWS\system32\drivers\drmk.sys
2007-05-18 20:02 6,964,736 --a------ C:\WINDOWS\system32\RTLCPL.EXE
2007-05-18 20:02 6,400 --a------ C:\WINDOWS\system32\drivers\splitter.sys
2007-05-18 20:02 54,272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys
2007-05-18 20:02 52,864 --a------ C:\WINDOWS\system32\drivers\dmusic.sys
2007-05-18 20:02 5,376 --a------ C:\WINDOWS\system32\drivers\mspclock.sys
2007-05-18 20:02 48,640 --a------ C:\WINDOWS\system32\drivers\stream.sys
2007-05-18 20:02 400,384 --a------ C:\WINDOWS\system32\drivers\ALCXSENS.SYS
2007-05-18 20:02 4,992 --a------ C:\WINDOWS\system32\drivers\mspqm.sys
2007-05-18 20:02 4,096 --a------ C:\WINDOWS\system32\ksuser.dll
2007-05-18 20:02 2,944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys
2007-05-18 20:02 172,416 --a------ C:\WINDOWS\system32\drivers\kmixer.sys
2007-05-18 20:02 155,648 --a------ C:\WINDOWS\system32\RTLCPAPI.dll
2007-05-18 20:02 145,792 --a------ C:\WINDOWS\system32\drivers\portcls.sys
2007-05-18 20:02 142,464 --a------ C:\WINDOWS\system32\drivers\aec.sys
2007-05-18 20:02 140,928 --a------ C:\WINDOWS\system32\drivers\ks.sys
2007-05-18 20:02 <DIR> d-------- C:\Program Files\Realtek Sound Manager
2007-05-18 20:02 <DIR> d-------- C:\Program Files\AvRack
2007-05-18 20:01 208,896 --------- C:\WINDOWS\alcupd.exe
2007-05-18 20:01 139,264 --------- C:\WINDOWS\alcrmv.exe
2007-05-18 20:01 <DIR> d--h----- C:\Program Files\InstallShield Installation Information
2007-05-18 20:01 <DIR> d-------- C:\Program Files\Common Files\InstallShield
2007-05-18 19:58 36,352 --a------ C:\WINDOWS\system32\drivers\isapnp.sys
2007-05-18 19:58 306,688 --a------ C:\WINDOWS\IsUninst.exe
2007-05-18 19:58 <DIR> d-------- C:\WINDOWS\system32\ReinstallBackups
2007-05-18 19:58 <DIR> d-------- C:\DOCUME~1\DIETER~1\WINDOWS
2007-05-18 19:57 5,824 --a------ C:\WINDOWS\system32\drivers\ASUSHWIO.SYS


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-05-18 20:09:40 84,362 ----a-w C:\WINDOWS\system32\perfc013.dat
2007-05-18 20:09:40 493,236 ----a-w C:\WINDOWS\system32\perfh013.dat
2007-04-18 16:15:26 2,854,400 ----a-w C:\WINDOWS\system32\msi.dll
2007-03-23 04:07:56 1,683,280 ------w C:\WINDOWS\system32\XpsSvcs.dll
2007-03-23 04:07:54 583,504 ------w C:\WINDOWS\system32\XPSSHHDR.dll
2007-03-22 18:25:02 124,928 ------w C:\WINDOWS\system32\prntvpt.dll
2007-03-17 13:45:54 293,376 ----a-w C:\WINDOWS\system32\winsrv.dll
2007-03-08 15:39:10 579,072 ----a-w C:\WINDOWS\system32\user32.dll
2007-03-08 15:39:10 281,600 ----a-w C:\WINDOWS\system32\gdi32.dll
2007-03-08 15:37:59 1,843,712 ----a-w C:\WINDOWS\system32\win32k.sys
2007-02-05 20:20:07 185,344 ----a-w C:\WINDOWS\system32\upnphost.dll


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{1E8A6170-7264-4D0F-BEAE-D42A53123C75}=C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll [2007-01-12 01:04]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}=C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll [2007-03-14 03:43]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Ptipbmf"="rundll32.exe" [2004-08-04 10:03 C:\WINDOWS\system32\rundll32.exe]
"SoundMan"="SOUNDMAN.EXE" []
"NvCplDaemon"="RUNDLL32.exe" [2004-08-04 10:03 C:\WINDOWS\system32\rundll32.exe]
"nwiz"="nwiz.exe" [2006-10-22 12:22 C:\WINDOWS\system32\nwiz.exe]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 03:43]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2006-11-23 15:10]
"LanguageShortcut"="C:\Program Files\CyberLink\PowerDVD\Language\Language.exe" [2006-12-05 22:55]
"NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 15:40]
"NvMediaCenter"="RUNDLL32.exe" [2004-08-04 10:03 C:\WINDOWS\system32\rundll32.exe]
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2007-01-09 23:59]
"osCheck"="C:\Program Files\Norton Internet Security\osCheck.exe" [2007-01-14 01:11]
"Symantec PIF AlertEng"="C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2007-03-12 10:22]
"SpySweeper"="C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" [2007-03-01 20:01]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 10:03]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2006-12-23 18:05]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages scecli

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\WebrootSpySweeperService]

*Newly Created Service* -PROCEXP90

Contents of the 'Scheduled Tasks' folder
2007-05-21 18:06:55 C:\WINDOWS\tasks\Norton Internet Security - Volledige systeemscan - Dieter De Saedeleer.job
2007-05-22 19:27:34 C:\WINDOWS\tasks\wrSpySweeperTrialSweep.job

********************************************************************

catchme 0.3.660 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-05-23 19:01:08
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0


********************************************************************

Completion time: 2007-05-23 19:01:41
C:\ComboFix-quarantined-files.txt ... 2007-05-23 19:01

--- E O F ---
d

dj Di-eS

Legacy Member
Logfile of HijackThis v1.99.1
Scan saved at 19:03:40, on 23/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\explorer.exe
C:\hijack this\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [Ptipbmf] "rundll32.exe" ptipbmf.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] "RUNDLL32.EXE" C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] "nwiz.exe" /install
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] "C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe"
O4 - HKLM\..\Run: [NvMediaCenter] "RUNDLL32.EXE" C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [SpySweeper] C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe /startintray
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O11 - Options group: [TABS] Tabbed Browsing
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1179513796700
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1179513855825
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h cltCommon (file missing)
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Planner voor Automatische LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
d

dj Di-eS

Legacy Member
File "COH_Mon.sys" received on 05.23.2007 at 21:34:15 (CET) is being scanned by VirusTotal in this moment. Results will be shown as they're generated.

Antivirus Version Update Result
AhnLab-V3 2007.5.24.0 05.23.2007 no virus found
AntiVir 7.4.0.27 05.23.2007 no virus found
Authentium 4.93.8 05.23.2007 no virus found
Avast 4.7.997.0 05.22.2007 no virus found
AVG 7.5.0.467 05.23.2007 no virus found
BitDefender 7.2 05.23.2007 no virus found
CAT-QuickHeal 9.00 05.23.2007 no virus found
ClamAV devel-20070416 05.23.2007 no virus found

Aditional Information
File size: 22112 bytes
MD5: edfd33f9b4d6ef5d2cb8e6b44f58a0c6
SHA1: 9030e4bcfc1ec52cc82803e6002aa2aaf07e29a1








Logfile of HijackThis v1.99.1
Scan saved at 21:38:57, on 23/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\explorer.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\hijack this\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [Ptipbmf] "rundll32.exe" ptipbmf.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] "RUNDLL32.EXE" C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] "nwiz.exe" /install
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] "C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe"
O4 - HKLM\..\Run: [NvMediaCenter] "RUNDLL32.EXE" C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [SpySweeper] C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe /startintray
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O11 - Options group: [TABS] Tabbed Browsing
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1179513796700
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1179513855825
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h cltCommon (file missing)
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Planner voor Automatische LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
d

dj Di-eS

Legacy Member
Complete scanning result of "COH_Mon.sys", received in VirusTotal at 05.23.2007, 21:34:15 (CET).

Antivirus Version Update Result
AhnLab-V3 2007.5.24.0 05.23.2007 no virus found
AntiVir 7.4.0.27 05.23.2007 no virus found
Authentium 4.93.8 05.23.2007 no virus found
Avast 4.7.997.0 05.22.2007 no virus found
AVG 7.5.0.467 05.23.2007 no virus found
BitDefender 7.2 05.23.2007 no virus found
CAT-QuickHeal 9.00 05.23.2007 no virus found
ClamAV devel-20070416 05.23.2007 no virus found
DrWeb 4.33 05.23.2007 no virus found
eSafe 7.0.15.0 05.21.2007 no virus found
eTrust-Vet 30.7.3655 05.23.2007 no virus found
Ewido 4.0 05.23.2007 no virus found
FileAdvisor 1 05.23.2007 no virus found
Fortinet 2.85.0.0 05.23.2007 no virus found
F-Prot 4.3.2.48 05.23.2007 no virus found
F-Secure 6.70.13030.0 05.23.2007 no virus found
Ikarus T3.1.1.8 05.23.2007 no virus found
Kaspersky 4.0.2.24 05.23.2007 no virus found
McAfee 5037 05.23.2007 no virus found
Microsoft 1.2503 05.22.2007 no virus found
NOD32v2 2287 05.23.2007 no virus found
Norman 5.80.02 05.23.2007 no virus found
Panda 9.0.0.4 05.23.2007 no virus found
Prevx1 V2 05.23.2007 no virus found
Sophos 4.17.0 05.23.2007 no virus found
Sunbelt 2.2.907.0 05.17.2007 no virus found
Symantec 10 05.23.2007 no virus found
TheHacker 6.1.6.121 05.23.2007 no virus found
VBA32 3.12.0 05.22.2007 no virus found
VirusBuster 4.3.23:9 05.23.2007 no virus found
Webwasher-Gateway 6.0.1 05.23.2007 no virus found

Aditional Information
File size: 22112 bytes
MD5: edfd33f9b4d6ef5d2cb8e6b44f58a0c6
SHA1: 9030e4bcfc1ec52cc82803e6002aa2aaf07e29a1
d

dj Di-eS

Legacy Member
en de nieuwe hijack log van na de volledige scan:

Logfile of HijackThis v1.99.1
Scan saved at 21:45:08, on 23/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Webroot\Spy Sweeper\SSU.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\explorer.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\hijack this\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [Ptipbmf] "rundll32.exe" ptipbmf.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] "RUNDLL32.EXE" C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] "nwiz.exe" /install
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] "C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe"
O4 - HKLM\..\Run: [NvMediaCenter] "RUNDLL32.EXE" C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [SpySweeper] C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe /startintray
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O11 - Options group: [TABS] Tabbed Browsing
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1179513796700
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1179513855825
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h cltCommon (file missing)
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Planner voor Automatische LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
J

Jurgenv1

Legacy Member
ziet er geod uit hoor, ik stel voor dat je een topic opent in het software forum.
Het archief is een bevroren moment uit een vorige versie van dit forum, met andere regels en andere bazen. Deze posts weerspiegelen op geen enkele manier onze huidige ideeën, waarden of wereldbeelden en zijn op sommige plaatsen gecensureerd wegens ontoelaatbaar. Veel zijn in een andere tijdsgeest gemaakt, al dan niet ironisch - zoals in het ironische subforum Off-Topic - en zouden op dit moment niet meer gepost (mogen) worden. Toch bieden we dit archief nog graag aan als informatiedatabank en naslagwerk. Lees er hier meer over of start een gesprek met anderen.
Terug
Bovenaan