Mijn hijackthislog

[sykke]

Na eens te kijken bij microsoft vermelden ze dat het kan gaan om een trojan horse of een hardware probleem.Heb een melding ook teruggevonden in het logboek (system error (102) 1003 n.v.t.)

[jurgenv]

Download combofix.exe: http://download.bleepingcomputer.com/sUBs/combofix.exe
Plaats het op je bureaublad.
Dubbelklik er op om het programma te starten.
In het scherm dat verschijnt tik je een Y in om het cleaningsprocess te starten.
Volg de instructies op het scherm.
Als het tooltje klaar is, opent er een logfile (combofix.txt) Post de inhoud van dit bestandje samen met een nieuwe hijackthislog.

[sykke]

gebruiker - 06-11-03 14:01:30,65 Service Pack 2
ComboFix 06.10.19 - Running from: "C:\Documents and Settings\gebruiker\Bureaublad"

((((((((((((((((((((((((((((((( Files Created from 2006-10-03 to 2006-11-03 ))))))))))))))))))))))))))))))))))


2006-10-30 02:59 372,736 -ra------ C:\WINDOWS\system32\LVUI2RC.dll
2006-10-30 02:59 22,016 -ra------ C:\WINDOWS\system32\drivers\LVUSBSta.sys
2006-10-30 02:59 211,712 -ra------ C:\WINDOWS\system32\drivers\LV561AV.SYS
2006-10-30 02:59 204,800 -ra------ C:\WINDOWS\system32\LVUI2.dll
2006-10-30 02:59 204,800 -ra------ C:\WINDOWS\system32\lvcodec2.dll
2006-10-30 02:59 2,180,096 -ra------ C:\WINDOWS\system32\drivers\lvsvf2.sys
2006-10-30 02:59 106,496 -ra------ C:\WINDOWS\system32\lvcoinst.dll
2006-10-30 02:05 53,248 -ra------ C:\WINDOWS\system32\InstMed.exe
2006-10-30 02:04 90,112 --a------ C:\WINDOWS\system32\LQCUI2.dll
2006-10-30 02:04 856,064 --a------ C:\WINDOWS\system32\Ltwvc12n.dll
2006-10-30 02:04 78,336 --a------ C:\WINDOWS\system32\lffax12n.dll
2006-10-30 02:04 65,536 --a------ C:\WINDOWS\system32\MFC71DEU.DLL
2006-10-30 02:04 61,440 --a------ C:\WINDOWS\system32\MFC71ITA.DLL
2006-10-30 02:04 61,440 --a------ C:\WINDOWS\system32\MFC71ESP.DLL
2006-10-30 02:04 57,344 --a------ C:\WINDOWS\system32\MFC71ENU.DLL
2006-10-30 02:04 49,152 --a------ C:\WINDOWS\system32\MFC71KOR.DLL
2006-10-30 02:04 49,152 --a------ C:\WINDOWS\system32\MFC71JPN.DLL
2006-10-30 02:04 466,944 --a------ C:\WINDOWS\system32\QCUI2.dll
2006-10-30 02:04 458,752 --a------ C:\WINDOWS\system32\LCamCpl.dll
2006-10-30 02:04 45,056 --a------ C:\WINDOWS\system32\MFC71CHT.DLL
2006-10-30 02:04 406,016 --a------ C:\WINDOWS\system32\ltkrn12n.dll
2006-10-30 02:04 40,960 --a------ C:\WINDOWS\system32\MFC71CHS.DLL
2006-10-30 02:04 328,704 --a------ C:\WINDOWS\system32\LFCMP12n.DLL
2006-10-30 02:04 30,720 --a------ C:\WINDOWS\system32\lfbmp12n.dll
2006-10-30 02:04 259,072 --a------ C:\WINDOWS\system32\LTDIS12n.dll
2006-10-30 02:04 215,552 --a------ C:\WINDOWS\system32\Lvkrn12n.dll
2006-10-30 02:04 207,872 --a------ C:\WINDOWS\system32\ltefx12n.dll
2006-10-30 02:04 164,864 --a------ C:\WINDOWS\system32\ltimg12n.dll
2006-10-30 02:04 141,312 --a------ C:\WINDOWS\system32\lftif12n.dll
2006-10-30 02:04 131,072 --a------ C:\WINDOWS\system32\ltfil12n.DLL
2006-10-30 02:04 1,060,864 --a------ C:\WINDOWS\system32\MFC71.dll
2006-10-30 02:04 1,047,552 --a------ C:\WINDOWS\system32\MFC71u.dll
2006-10-30 02:03 81,920 -r------- C:\WINDOWS\bwUnin-6.1.4.68-8876480L.exe
2006-10-29 13:57 420,240 --a------ C:\WINDOWS\system32\mpg4c32.dll
2006-10-29 13:56 81,920 --a------ C:\WINDOWS\system32\DLLCPY32.dll
2006-10-29 13:56 65,536 --a------ C:\WINDOWS\system32\DLLPTL32.dll
2006-10-29 13:56 61,440 --a------ C:\WINDOWS\system32\DLLCDF32.dll
2006-10-29 13:56 57,344 --a------ C:\WINDOWS\system32\DLLTPO32.dll
2006-10-29 13:56 53,248 --a------ C:\WINDOWS\system32\DLLPRJ32.dll
2006-10-29 13:56 49,152 --a------ C:\WINDOWS\system32\DLLPRF32.dll
2006-10-29 13:56 49,152 --a------ C:\WINDOWS\system32\DLLIO32.dll
2006-10-29 13:56 45,056 --a------ C:\WINDOWS\system32\DLLIMG32.dll
2006-10-29 13:56 401,408 --a------ C:\WINDOWS\system32\DLLAV32.dll
2006-10-29 13:56 40,960 --a------ C:\WINDOWS\system32\DLLRD32.dll
2006-10-29 13:56 38,912 --a------ C:\WINDOWS\system32\mgxasio.dll
2006-10-29 13:56 36,864 --a------ C:\WINDOWS\system32\DLLPNT32.dll
2006-10-29 13:56 32,768 --a------ C:\WINDOWS\system32\STRING32.dll
2006-10-29 13:56 32,768 --a------ C:\WINDOWS\system32\DLLMSC32.dll
2006-10-29 13:56 32,768 --a------ C:\WINDOWS\system32\DLLISO32.dll
2006-10-29 13:56 32,768 --a------ C:\WINDOWS\system32\DLLDIR32.dll
2006-10-29 13:56 24,576 --a------ C:\WINDOWS\system32\TTIC32.dll
2006-10-29 13:56 24,576 --a------ C:\WINDOWS\system32\TTI32.dll
2006-10-29 13:56 24,576 --a------ C:\WINDOWS\system32\DLLIX.dll
2006-10-29 13:56 188,416 --a------ C:\WINDOWS\system32\DLLRES32.dll
2006-10-29 13:56 155,648 --a------ C:\WINDOWS\system32\DLLDEV32.dll
2006-10-29 13:56 143,360 --a------ C:\WINDOWS\system32\DLLDRV32.dll
2006-10-29 13:56 114,688 --a------ C:\WINDOWS\system32\DLLCDA32.dll
2006-10-29 13:51 85,504 --a------ C:\WINDOWS\system32\HtmlWH.dll
2006-10-29 13:51 1,089,536 --a------ C:\WINDOWS\system32\ROBOEX32.DLL
2006-10-29 13:50 475,136 --a------ C:\WINDOWS\system32\mgxoschk.dll
2006-10-29 13:07 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2006-10-23 16:08 73,216 --a------ C:\WINDOWS\system32\Odbctl32.dll
2006-10-23 16:08 415,504 --a------ C:\WINDOWS\system32\msrepl35.dll
2006-10-23 16:08 368,912 --a------ C:\WINDOWS\system32\vbar332.dll
2006-10-23 16:08 36,864 --a------ C:\WINDOWS\system32\ODBCSTF.DLL
2006-10-23 16:08 287,504 --a------ C:\WINDOWS\system32\msxbse35.dll
2006-10-23 16:08 252,176 --a------ C:\WINDOWS\system32\msrd2x35.dll
2006-10-23 16:08 250,128 --a------ C:\WINDOWS\system32\mspdox35.dll
2006-10-23 16:08 250,128 --a------ C:\WINDOWS\system32\msexcl35.dll
2006-10-23 16:08 24,848 --a------ C:\WINDOWS\system32\msjter35.dll
2006-10-23 16:08 166,160 --a------ C:\WINDOWS\system32\msltus35.dll
2006-10-23 16:08 165,648 --a------ C:\WINDOWS\system32\mstext35.dll
2006-10-23 16:08 123,664 --a------ C:\WINDOWS\system32\Msjint35.dll
2006-10-23 16:08 1,234,704 --a------ C:\WINDOWS\system32\MSJT4JLT.DLL
2006-10-23 16:08 1,046,288 --a------ C:\WINDOWS\system32\msjet35.dll
2006-10-23 15:45 81,408 --a------ C:\WINDOWS\system32\lffax11n.dll
2006-10-23 15:45 73,728 --a------ C:\WINDOWS\system32\ImageServerMI.dll
2006-10-23 15:45 59,392 --a------ C:\WINDOWS\system32\lfwmf11n.dll
2006-10-23 15:45 56,320 --a------ C:\WINDOWS\system32\lfpsd11n.dll
2006-10-23 15:45 5,632 --a------ C:\WINDOWS\system32\MFCUIA32.DLL
2006-10-23 15:45 423,936 --a------ C:\WINDOWS\system32\ltkrn80n.dll
2006-10-23 15:45 41,472 --a------ C:\WINDOWS\system32\lfgif11n.dll
2006-10-23 15:45 392,192 --a------ C:\WINDOWS\system32\ltkrn11n.dll
2006-10-23 15:45 36,864 --a------ C:\WINDOWS\system32\lfbmp11n.dll
2006-10-23 15:45 33,280 --a------ C:\WINDOWS\system32\lfpcx11n.dll
2006-10-23 15:45 31,232 --a------ C:\WINDOWS\system32\lfeps11n.dll
2006-10-23 15:45 285,184 --a------ C:\WINDOWS\system32\LFCMP11n.DLL
2006-10-23 15:45 27,648 --a------ C:\WINDOWS\system32\lfwpg11n.dll
2006-10-23 15:45 262,656 --a------ C:\WINDOWS\system32\LTDIS11n.dll
2006-10-23 15:45 26,112 --a------ C:\WINDOWS\system32\lfpcd11n.dll
2006-10-23 15:45 172,032 --a------ C:\WINDOWS\system32\Lfpng11n.dll
2006-10-23 15:45 152,064 --a------ C:\WINDOWS\system32\lftif11n.dll
2006-10-23 15:45 133,904 --a------ C:\WINDOWS\system32\MFCANS32.DLL
2006-10-23 15:45 127,488 --a------ C:\WINDOWS\system32\ltimg11n.dll
2006-10-23 15:45 118,784 --a------ C:\WINDOWS\system32\ltfil11n.DLL
2006-10-23 15:42 284,160 --a------ C:\WINDOWS\unin0413.exe
2006-10-17 17:31 49,152 --a------ C:\WINDOWS\system32\TVicHW32.dll
2006-10-17 17:31 24,656 --a------ C:\WINDOWS\system32\drivers\TVicHW32.sys
2006-10-15 19:12 82,380 --a------ C:\WINDOWS\system32\drivers\AFS2K.SYS
2006-10-15 17:52 7,506,432 --a------ C:\WINDOWS\system32\RTLCPL.EXE
2006-10-15 17:52 67,584 --a------ C:\WINDOWS\SOUNDMAN.EXE
2006-10-15 17:52 65,536 --a------ C:\WINDOWS\system32\Audio3D.dll
2006-10-15 17:52 65,536 --a------ C:\WINDOWS\system32\a3d.dll
2006-10-15 17:52 626,204 --a------ C:\WINDOWS\system32\drivers\ALCXWDM.SYS
2006-10-15 17:52 400,384 --a------ C:\WINDOWS\system32\drivers\ALCXSENS.SYS
2006-10-15 17:52 208,896 --------- C:\WINDOWS\alcupd.exe
2006-10-15 17:52 155,648 --a------ C:\WINDOWS\system32\RTLCPAPI.dll
2006-10-15 17:52 139,264 --------- C:\WINDOWS\alcrmv.exe
2006-10-15 16:30 107,132 --a------ C:\WINDOWS\UninstallFirefox.exe
2006-10-11 15:42 327,168 --a------ C:\WINDOWS\IsUninst.exe
2006-10-10 22:31 51,072 --a------ C:\WINDOWS\system32\drivers\ikhlayer.sys
2006-10-10 22:31 30,592 --a------ C:\WINDOWS\system32\drivers\ikhfile.sys


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) )))


2006-11-03 13:51 -------- d-------- C:\Program Files\Mozilla Firefox
2006-11-03 13:38 -------- d-------- C:\Program Files\RegistrySmart
2006-11-02 14:08 -------- d-------- C:\Program Files\Google
2006-10-30 02:55 -------- d--h----- C:\Program Files\InstallShield Installation Information
2006-10-30 02:55 -------- d-------- C:\Program Files\Logitech
2006-10-30 02:04 -------- d-------- C:\Program Files\Common Files\Logitech
2006-10-29 22:44 -------- d-------- C:\Program Files\Java
2006-10-29 22:43 -------- d-------- C:\Program Files\Common Files\Java
2006-10-29 22:43 -------- d-------- C:\Program Files\Common Files
2006-10-29 16:04 -------- d-------- C:\Documents and Settings\gebruiker\Application Data\MAGIX
2006-10-29 14:06 -------- d-------- C:\Program Files\MSXML 4.0
2006-10-29 13:56 -------- d-------- C:\Program Files\Common Files\MAGIX Shared
2006-10-29 13:20 47104 --a------ C:\Program Files\ATF-Cleaner.exe
2006-10-29 13:07 -------- d-------- C:\Program Files\Grisoft
2006-10-29 00:56 -------- d-------- C:\Program Files\LimeWire
2006-10-26 13:55 -------- d---s---- C:\Documents and Settings\gebruiker\Application Data\Microsoft
2006-10-26 13:54 -------- d-------- C:\Program Files\Microsoft
2006-10-24 11:03 -------- d-------- C:\Documents and Settings\gebruiker\Application Data\Help
2006-10-23 16:07 -------- d-------- C:\Program Files\DATA BECKER
2006-10-23 15:50 -------- d-------- C:\Program Files\Serif
2006-10-23 15:49 -------- d-------- C:\Program Files\TLC Domus
2006-10-20 14:44 -------- d-------- C:\Program Files\MSN Messenger
2006-10-17 17:43 5120 --a------ C:\WINDOWS\system32\drivers\Stdsys.SYS
2006-10-15 19:27 -------- d-------- C:\Documents and Settings\gebruiker\Application Data\Skype
2006-10-15 19:12 -------- d-------- C:\Program Files\Hewlett-Packard
2006-10-15 19:04 -------- d-------- C:\Program Files\HP
2006-10-15 18:52 -------- d-------- C:\Program Files\GrabIt
2006-10-15 17:43 -------- d-------- C:\Program Files\CyberLink
2006-10-15 17:38 -------- d-------- C:\Program Files\Windows Media Player
2006-10-15 16:37 -------- d-------- C:\Program Files\TweakNow RegCleaner Std
2006-10-15 16:31 -------- d-------- C:\Documents and Settings\gebruiker\Application Data\Mozilla
2006-10-15 16:28 -------- d-------- C:\Program Files\RegSweep
2006-10-15 16:28 -------- d-------- C:\Program Files\MSI
2006-10-15 15:31 -------- d-------- C:\Program Files\Windows Media Connect 2
2006-10-15 14:49 -------- d-------- C:\Program Files\Microsoft ActiveSync
2006-10-13 13:09 -------- d-------- C:\Program Files\OfficeUpdate11
2006-10-11 17:26 58880 --a------ C:\WINDOWS\system32\pnrpnsp.dll
2006-10-11 17:26 553984 --a------ C:\WINDOWS\system32\p2psvc.dll
2006-10-11 17:26 313344 --a------ C:\WINDOWS\system32\p2pgraph.dll
2006-10-11 17:26 153088 --a------ C:\WINDOWS\system32\p2p.dll
2006-10-11 17:26 116224 --a------ C:\WINDOWS\system32\p2pnetsh.dll
2006-10-11 17:26 104960 --a------ C:\WINDOWS\system32\p2pgasvc.dll
2006-10-10 22:31 -------- d-------- C:\Documents and Settings\gebruiker\Application Data\PC Tools
2006-10-10 20:56 -------- d-------- C:\Program Files\Lavalys
2006-09-30 18:50 -------- d-------- C:\Program Files\Common Files\Adobe
2006-09-30 18:48 -------- d-------- C:\Documents and Settings\gebruiker\Application Data\AdobeUM
2006-09-27 19:45 778656 --a------ C:\WINDOWS\system32\drivers\avg7core.sys
2006-09-21 22:16 -------- d-------- C:\Documents and Settings\gebruiker\Application Data\Adobe
2006-09-21 18:16 -------- d-------- C:\Program Files\WinRAR
2006-09-21 11:47 -------- d-------- C:\Documents and Settings\gebruiker\Application Data\Google
2006-09-16 11:22 -------- d-------- C:\Program Files\DID
2006-09-13 06:07 1084416 --a------ C:\WINDOWS\system32\msxml3.dll
2006-09-12 17:51 1245184 --a------ C:\WINDOWS\system32\msxml4.dll
2006-09-01 11:08 1334032 --a------ C:\WINDOWS\system32\msxml6.dll
2006-08-25 16:51 617472 --a------ C:\WINDOWS\system32\comctl32.dll
2006-08-21 13:28 16896 --a------ C:\WINDOWS\system32\fltlib.dll
2006-08-21 10:14 23040 --a------ C:\WINDOWS\system32\fltmc.exe
2006-08-16 12:59 100352 --a------ C:\WINDOWS\system32\6to4svc.dll
2006-08-06 14:57 5292 --a------ C:\Documents and Settings\gebruiker\Application Data\GdiplusUpgrade_MSIApproach_Wrapper.log


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries are not shown

[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.ex e"
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="\"C:\\Program Files\\Common Files\\Ahead\\lib\\NMBgMonitor.exe\""
"WMPNSCFG"="C:\\Program Files\\Windows Media Player\\WMPNSCFG.exe"
"LDM"="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\BackWeb-8876480.exe"
"LogitechSoftwareUpdate"="\"C:\\Program Files\\Logitech\\Video\\ManifestEngine.exe\" boot"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\run]
"ATIPTA"="C:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe"
"AVG7_CC"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgcc. exe /STARTUP"
"Telemeter 3.0"="\"C:\\Program Files\\Telemeter 3.0\\telemeter3.exe\""
"NWEReboot"=""
"NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroChec k.exe"
"SoundMan"="SOUNDMAN.EXE"
"HPDJ Taskbar Utility"="C:\\WINDOWS\\system32\\spool\\drivers\\w 32x86\\3\\hpztsb10.exe"
"HP Component Manager"="\"C:\\Program Files\\HP\\hpcoretech\\hpcmpmgr.exe\""
"HP Software Update"="C:\\Program Files\\Hewlett-Packard\\HP Software Update\\HPWuSchd2.exe"
"Share-to-Web Namespace Daemon"="C:\\Program Files\\Hewlett-Packard\\HP Share-to-Web\\hpgs2wnd.exe"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_09\\bin\\jusched.exe\""
"LVCOMSX"="C:\\WINDOWS\\system32\\LVCOMSX.EXE"
"LogitechVideoRepair"="C:\\Program Files\\Logitech\\Video\\ISStart.exe "
"LogitechVideoTray"="C:\\Program Files\\Logitech\\Video\\LogiTray.exe"
"KernelFaultCheck"=hex(2):25,73,79,73,74,65,6d,72, 6f,6f,74,25,5c,73,79,73,74,\
65,6d,33,32,5c,64,75,6d,70,72,65,70,20,30,20,2d,6b ,00
"RegistrySmart"="\"C:\\Program Files\\RegistrySmart\\RegistrySmart.exe\" -boot"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000001

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Mijn huidige introductiepagina"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,cc,00,00,00,00,00,00,00 ,34,03,00,00,e2,02,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00 ,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff ,ff,00,00,ff,ff,ff,ff,ff,ff,\
ff,ff,04,00,00,00
"RestoredStateInfo"=hex:18,00,00,00,6a,02,00,00,23 ,00,00,00,a4,00,00,00,9a,00,\
00,00,01,00,00,00

[HKEY_USERS\.default\software\microsoft\windows\cur rentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EX E"
"AVG7_Run"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgw. exe /RUNONCE"
"Spyware Doctor"=""

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\System32\\CTFMON.EX E"
"AVG7_Run"="C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgw. exe /RUNONCE"
"Spyware Doctor"=""

[HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\explorer\sharedtaskscheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Preloader van browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Cache-daemon voor onderdeelcategorieën"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\policies\system]
"NoDispAppearancePage"=dword:00000000
"NoColorChoice"=dword:00000000
"NoSizeChoice"=dword:00000000
"NoDispBackgroundPage"=dword:00000000
"NoDispScrSavPage"=dword:00000000
"NoDispCPL"=dword:00000000
"NoVisualStyleChoice"=dword:00000000
"NoDispSettingsPage"=dword:00000000

[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
"NoActiveDesktop"=dword:00000000
"NoSaveSettings"=dword:00000000
"ClassicShell"=dword:00000000
"NoThemesTab"=dword:00000000
"ForceActiveDesktopOn"=dword:00000000

[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\policies\explorer\Run]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001
"DisableTaskMgr"=dword:00000000

[HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\policies\explorer]
"NoActiveDesktopChanges"=dword:00000000

[HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\policies\explorer\Run]

[HKEY_USERS\.default\software\microsoft\windows\cur rentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\polic ies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\shellserviceobjectdelayload]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"
"WPDShServiceObj"="{AAA288BA-9A4C-45B0-95D7-94D524869DB5}"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\contro l\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"


Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\Check Updates for Windows Live Toolbar.job

Completion time: 06-11-03 14:02:03.50
C:\ComboFix.txt ... 06-11-03 14:02
C:\ComboFix2.txt ... 06-11-03 13:49

[sykke]

Logfile of HijackThis v1.99.1
Scan saved at 14:04:21, on 3/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Telemeter 3.0\telemeter3.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb1 0.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\Go ogleToolbarNotifier.exe
C:\Program Files\RegistrySmart\RegistrySmart.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\gebruiker\Bureaublad\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Telemeter 3.0] "C:\Program Files\Telemeter 3.0\telemeter3.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb1 0.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [RegistrySmart] "C:\Program Files\RegistrySmart\RegistrySmart.exe" -boot
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - Global Startup: Event Reminder.lnk = C:\Program Files\TLC Domus\PrintMaster\Pmremind.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Openen in een nieuwe achtergrondtab - res://C:\Program Files\Windows Live Toolbar\Components\nl-be\msntabres.dll.mui/229?2d9c0caca5d94e9195c9acc36abec053
O8 - Extra context menu item: Openen in een nieuwe voorgrondtab - res://C:\Program Files\Windows Live Toolbar\Components\nl-be\msntabres.dll.mui/230?2d9c0caca5d94e9195c9acc36abec053
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1149951124934
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary...o.cab47946.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary...n.cab31267.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - Unknown owner - C:\Program Files\Spyware Doctor\sdhelp.exe (file missing)

[jurgenv]

* Als je logitech desktop messenger niet echt gebruikt, dan raad ik je aan die te de-installeren omdat dit onnodig je systeem vertraagd, het zoekt namelijk naar updates voor je logitech producten terwijl dit prefect handmatig kan zonder zo te vertragen.

[sykke]

logitec desktop messenger is verwijderd

[jurgenv]

En beterschap?

[sykke]

Mometeel heeft ie vandaag nog niet heropgestart maar gisteren was het al prijs na 2 minuten .Kreeg geen foutmelding en geen blauw scherm gewoon heropstart zoals je de eerste keer van de dag gewoon de powertoets indrukt.Ik heb ook eens een scan gedaan met registery smart(enkel gescand) en die zegt met alles aangevinkt dat er 323 problemen zijn?

[jurgenv]

Ik zou die registry smart niet vetrouwen, dat is puur om miserie vragen.
Heb je de cd-rom van XP bij de hand?

[sykke]

Heb deze al verwijderd.Ik heb de xp cd