pc doet vreemd

[urbain]

Beste helpers..............
Ik denk dat ik een probleem heb.
Mijn icoontjes in het system tray zijn verdwenen of toch bijna allemaal.
Mijn bureaublad vertoont ook al kuren want mijn icoontjes veranderen telkens ik opstart ook al zet ik die op de voor mij juiste plaats.
hieronder een logje misschien is er wel iets dat niet in orde is.
Logfile of HijackThis v1.99.1
Scan saved at 2:14:48, on 20/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\BullGuard Software\BullGuard\BullGuardUpdate.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\msco rsvw.exe
C:\Program Files\ISP Monitor\ISPMonitorSrv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ASUS\Probe\AsusProb.exe
C:\Program Files\VERITAS Software\Update Manager\sgtray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\BullGuard Software\BullGuard\BullGuard.exe
C:\Program Files\AOL\Active Security Monitor\ASMonitor.exe
C:\Program Files\FeedReader30\feedreader.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\ISP Monitor\isp.exe
C:\Program Files\BigFix\BigFix.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Documents and Settings\urbain van landeghem\Mijn documenten\Mijn ontvangen bestanden\Nieuwe map\hijackthis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [ASUS Probe] C:\Program Files\ASUS\Probe\AsusProb.exe
O4 - HKLM\..\Run: [BullGuard] "C:\Program Files\BullGuard Software\BullGuard\bullguard.exe" -boot
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BullGuard] "C:\Program Files\BullGuard Software\BullGuard\BullGuard.exe"
O4 - HKCU\..\Run: [ASM] "C:\Program Files\AOL\Active Security Monitor\ASMonitor.exe" HIDEMAIN
O4 - HKCU\..\Run: [feedreader.exe] "C:\Program Files\FeedReader30\feedreader.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ISPMonitor] C:\Program Files\ISP Monitor\isp.exe
O4 - Startup: OpenOffice.org 2.2 .lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Global Startup: BigFix.lnk = C:\Program Files\BigFix\BigFix.exe
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1174938277625
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.5.0) - http://javadl-esd.sun.com/update/1.5...ws-i586-jc.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live Mail desktop\mailcomm.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: BullGuard LiveUpdate (BGLiveSvc) - BullGuard Software - C:\Program Files\BullGuard Software\BullGuard\BullGuardUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ISP Monitor (ISPMonitorSrv) - How2 Studios - C:\Program Files\ISP Monitor\ISPMonitorSrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

[jurgenv]

* Download Dial-a-fix via
http://wiki.djlizard.net/Dial-a-fix#Standard_version

Start Dial-A-Fix en in het hoofd-venster vink je alles aan en klik onderaan op 'Go'
Laat het tooltje zijn werk doen en herstart je pc, kijk of het dan gebeterd is.

[urbain]

jugenv,bedankt voor de hulp.
Heb gedaan wat je had aangeraden en kom tot het volgende resultaat..........
Tijdens de scan kreeg ik verschillende meldingen en eentje daarvan ga ik hier neerschrijven.
Error - 2147024891 was encountered while trying unregister c:/ windows system32/ qmgrprxy.dll
the error text is.....toegang geweigerd
dial-a-fix currently has no suggestions for this error code.
Please e-mail .......... whit a copy.
daanra kreeg ik nog tweemaal zo een error 1/ met wups.dll en 2/ wups2.dll
Ik heb het logje opgeslagen en wacht nu op uw antwoord op dit probleem.
Moet wel zeggen dat er al enkele icoontje in de system tray bij gekmen zijn maar toch nog niet alle.

[jurgenv]

Download combofix.exe: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Plaats het op je bureaublad.
Dubbelklik er op om het programma te starten.
In het scherm dat verschijnt tik je een Y in om het cleaningsprocess te starten.
Volg de instructies op het scherm.
Als het tooltje klaar is, opent er een logfile (combofix.txt) Post de inhoud van dit bestandje samen met een nieuwe hijackthislog.

[urbain]

het logje van combofix

"urbain van landeghem" - 2007-05-20 14:00:13 Service Pack 2
ComboFix 07-05.20.9.V - Running from: "C:\Documents and Settings\urbain van landeghem\Bureaublad\"

(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

C:\DOCUME~1\URBAIN~1\BUREAU~1\internet.lnk

((((((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

-------\LEGACY_IPRIP
-------\Iprip

((((((((((((((((((((((((((((((( Files Created from 2007-04-05 to 2007-05-20 ))))))))))))))))))))))))))))))))))

2007-05-20 13:35 <DIR> d-------- C:\WINDOWS\system32\CatRoot2
2007-05-19 21:38 737,280 --a------ C:\WINDOWS\iun6002.exe
2007-05-19 21:38 <DIR> d-------- C:\Program Files\ISP Monitor
2007-05-19 19:47 86,016 --a------ C:\WINDOWS\system32\fx.dll
2007-05-19 19:47 372,736 --a------ C:\WINDOWS\system32\ijl15.dll
2007-05-19 19:47 <DIR> d-------- C:\Program Files\AvancePaint
2007-05-18 01:52 <DIR> dr-h----- C:\DOCUME~1\URBAIN~1\Onlangs geopend
2007-05-17 19:56 <DIR> d-------- C:\DOCUME~1\URBAIN~1\APPLIC~1\Google
2007-05-17 18:16 <DIR> d-------- C:\Program Files\7-Zip
2007-05-16 20:23 <DIR> d-------- C:\Program Files\DiskTrix
2007-05-16 12:43 73,216 --a------ C:\WINDOWS\system32\avwav.dll
2007-05-16 12:43 5,632 --a------ C:\WINDOWS\system32\write.exe
2007-05-16 12:43 44,544 --a------ C:\WINDOWS\system32\hticons.dll
2007-05-16 12:43 35,840 --a------ C:\WINDOWS\system32\winchat.exe
2007-05-16 12:43 233,472 --a------ C:\WINDOWS\system32\avtapi.dll
2007-05-16 12:43 16,384 --a------ C:\WINDOWS\system32\avmeter.dll
2007-05-16 12:43 139,264 --a------ C:\WINDOWS\system32\sndvol32.exe
2007-05-16 12:42 80,896 --a------ C:\WINDOWS\system32\charmap.exe
2007-05-16 12:42 662,528 --a------ C:\WINDOWS\system32\getuname.dll
2007-05-16 12:42 57,344 --a------ C:\WINDOWS\system32\sol.exe
2007-05-16 12:42 55,808 --a------ C:\WINDOWS\system32\freecell.exe
2007-05-16 12:42 18,944 --a------ C:\WINDOWS\system32\simptcp.dll
2007-05-16 12:42 128,000 --a------ C:\WINDOWS\system32\mshearts.exe
2007-05-16 12:42 119,808 --a------ C:\WINDOWS\system32\winmine.exe
2007-05-16 12:42 114,688 --a------ C:\WINDOWS\system32\calc.exe
2007-05-16 00:56 <DIR> d-------- C:\Program Files\Microsoft.NET
2007-05-15 10:54 5,632 --a------ C:\WINDOWS\system32\ptpusb.dll
2007-05-15 10:54 159,232 --a------ C:\WINDOWS\system32\ptpusd.dll
2007-05-13 22:38 <DIR> d-------- C:\Program Files\Recode Media
2007-05-13 22:38 <DIR> d-------- C:\DOCUME~1\URBAIN~1\APPLIC~1\Media Player Classic
2007-05-13 21:33 25,992 --a------ C:\WINDOWS\system32\pgdfgsvc.exe
2007-05-13 21:16 <DIR> d-------- C:\Program Files\FDRLab
2007-05-12 20:14 <DIR> d-------- C:\Program Files\FeedReader30
2007-05-12 20:14 <DIR> d-------- C:\DOCUME~1\URBAIN~1\APPLIC~1\Feedreader
2007-05-12 15:17 <DIR> d-------- C:\Program Files\FreshDevices
2007-05-12 15:02 <DIR> d-------- C:\Program Files\Microsoft Silverlight
2007-05-11 15:28 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\ashampoo
2007-05-11 12:31 <DIR> d-------- C:\DOCUME~1\URBAIN~1\APPLIC~1\IrfanView
2007-05-11 00:34 2,560 --------- C:\WINDOWS\system32\drivers\cdralw2k.sys
2007-05-11 00:34 2,432 --------- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2007-05-10 23:55 <DIR> d-------- C:\DOCUME~1\URBAIN~1\APPLIC~1\NotesHolder
2007-05-10 22:57 <DIR> d-------- C:\Program Files\Picasa2
2007-05-10 22:50 <DIR> d---s---- C:\WINDOWS\system32\%SystemDrive%
2007-05-10 22:31 <DIR> d-------- C:\Program Files\Google
2007-05-10 22:13 622,592 --a------ C:\WINDOWS\system32\mgxoschk.dll
2007-05-10 22:13 <DIR> d-------- C:\WINDOWS\system32\MAGIX
2007-05-10 22:08 <DIR> d-------- C:\DOCUME~1\URBAIN~1\APPLIC~1\Ashampoo
2007-05-10 20:58 <DIR> d-------- C:\Program Files\Ashampoo
2007-05-10 20:06 <DIR> d-------- C:\Program Files\MSECache
2007-05-10 19:39 <DIR> d-------- C:\DOCUME~1\URBAIN~1\APPLIC~1\ZipGenius
2007-05-10 11:31 <DIR> d-------- C:\Program Files\MSXML 6.0
2007-05-10 03:07 <DIR> d-------- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2007-05-10 01:27 <DIR> d-------- C:\Program Files\Easy Computing
2007-05-09 21:54 6,291,456 --a------ C:\DOCUME~1\URBAIN~1\ntuser.dat
2007-05-09 21:54 <DIR> d-------- C:\Program Files\CDBurnerXP Pro 3
2007-05-09 20:39 <DIR> d-------- C:\Downloaded Driver
2007-05-09 16:20 <DIR> d-------- C:\Program Files\IncrediMail
2007-05-09 16:02 <DIR> d-------- C:\DOCUME~1\URBAIN~1\APPLIC~1\OpenOffice.org2
2007-05-09 15:45 <DIR> d-------- C:\Program Files\readmes
2007-05-09 15:45 <DIR> d-------- C:\Program Files\licenses
2007-05-09 14:31 <DIR> d-------- C:\Program Files\IrfanView
2007-05-09 00:46 <DIR> d--hs---- C:\WINDOWS\ftpcache
2007-05-09 00:30 <DIR> d-------- C:\Program Files\Common Files\SWF Studio
2007-05-09 00:20 <DIR> d-------- C:\Program Files\Audacity
2007-05-08 01:49 <DIR> d-------- C:\Program Files\FastStone Player
2007-05-08 01:42 <DIR> d-------- C:\Program Files\Quintessential Player
2007-05-07 15:50 <DIR> d-------- C:\Program Files\Audacity 1.3 Beta
2007-05-06 21:37 <DIR> d-------- C:\DOCUME~1\URBAIN~1\APPLIC~1\SideSlide
2007-05-06 21:25 <DIR> d-------- C:\Program Files\Quick StartUp
2007-05-06 11:59 <DIR> d-------- C:\Program Files\EZ Wipe
2007-05-05 22:30 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Office Genuine Advantage
2007-04-26 16:54 <DIR> d-------- C:\Program Files\ShredderChess
2007-04-26 16:54 <DIR> d-------- C:\DOCUME~1\URBAIN~1\APPLIC~1\ShredderChess
2007-04-23 18:08 <DIR> d-------- C:\DOCUME~1\URBAIN~1\APPLIC~1\dvdcss
2007-04-23 18:04 <DIR> d-------- C:\Program Files\BigFix
2007-04-22 19:58 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\TomTom
2007-04-22 19:55 <DIR> d-------- C:\Program Files\TomTom HOME
2007-04-22 19:55 <DIR> d-------- C:\DOCUME~1\URBAIN~1\APPLIC~1\InstallShield
2007-04-22 19:49 <DIR> d-------- C:\Program Files\TomTom DesktopSuite
2007-04-20 21:10 <DIR> d-------- C:\Program Files\Photo To Sketch

(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) )))
2007-05-19 19:53:27 90,206 ----a-w C:\WINDOWS\system32\perfc013.dat
2007-05-19 19:53:27 506,504 ----a-w C:\WINDOWS\system32\perfh013.dat
2007-05-18 09:32:35 77,912 ----a-w C:\WINDOWS\system32\GDIPFONTCACHEV1.DAT
2007-05-17 15:51:37 -------- d-----w C:\Program Files\Add Remove Pro
2007-05-16 10:43:09 -------- d-----w C:\Program Files\Windows NT
2007-05-16 10:14:50 44 ----a-w C:\WINDOWS\system32\msssc.dll
2007-05-10 20:11:33 -------- d-----w C:\DOCUME~1\URBAIN~1\APPLIC~1\ArcSoft
2007-05-09 23:27:56 -------- d--h--w C:\Program Files\InstallShield Installation Information
2007-05-09 10:43:22 -------- d-----w C:\Program Files\Nufsoft
2007-05-09 10:11:13 -------- d-----w C:\Program Files\MSBuild
2007-04-18 22:32:13 -------- d-----w C:\DOCUME~1\URBAIN~1\APPLIC~1\Autodesk
2007-04-15 08:07:04 -------- d-----w C:\Program Files\Common Files\MySoftware
2007-04-15 08:00:16 -------- d-----w C:\Program Files\PDFCreator
2007-04-15 01:23:18 -------- d-----w C:\DOCUME~1\URBAIN~1\APPLIC~1\Cabos
2007-04-14 16:14:50 -------- d-----w C:\Program Files\Samsung
2007-04-14 16:14:29 -------- d-----w C:\Program Files\Common Files\InstallShield
2007-04-14 15:21:11 -------- d-----w C:\DOCUME~1\URBAIN~1\APPLIC~1\Leadertech
2007-04-14 10:18:02 -------- d-----w C:\Program Files\Opera
2007-04-14 07:56:43 -------- d-----w C:\Program Files\Cartoonist
2007-04-12 19:41:59 -------- d-----w C:\DOCUME~1\URBAIN~1\APPLIC~1\RapidGet
2007-04-12 17:12:08 -------- d-----w C:\DOCUME~1\URBAIN~1\APPLIC~1\AdobeUM
2007-04-07 21:06:30 -------- d-----w C:\Program Files\Clickster
2007-04-06 08:59:23 -------- d-----w C:\Program Files\MSN Messenger
2007-04-05 23:20:53 0 ----a-w C:\WINDOWS\nsreg.dat
2007-04-03 23:19:40 -------- d-----w C:\DOCUME~1\URBAIN~1\APPLIC~1\BullGuard
2007-04-03 18:13:43 -------- d-----w C:\DOCUME~1\URBAIN~1\APPLIC~1\VERITAS
2007-04-03 17:57:17 -------- d-----w C:\Program Files\VERITAS Software
2007-04-03 17:56:54 -------- d-----w C:\Program Files\USSA
2007-04-02 21:29:10 -------- d-----w C:\Program Files\Windows Media Connect 2
2007-03-31 20:20:02 -------- d-----w C:\Program Files\Reference Assemblies
2007-03-31 20:14:53 -------- d-----w C:\Program Files\Messenger
2007-03-31 19:43:56 -------- d-----w C:\Program Files\MSXML 4.0
2007-03-27 19:28:30 43,672 ----a-w C:\WINDOWS\system32\drivers\AFS2K.SYS
2007-03-27 19:25:59 -------- d-----w C:\DOCUME~1\URBAIN~1\APPLIC~1\Image Zone Express
2007-03-27 19:24:18 -------- d-----w C:\Program Files\Common Files\HP
2007-03-27 19:24:16 -------- d-----w C:\Program Files\HP
2007-03-27 18:24:27 -------- d-----w C:\Program Files\Wise Registry Cleaner
2007-03-27 18:17:17 -------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2007-03-27 18:15:26 -------- d-----w C:\DOCUME~1\URBAIN~1\APPLIC~1\Sereniti
2007-03-26 22:57:13 -------- d-----w C:\Program Files\IObit
2007-03-26 22:56:20 -------- d-----w C:\DOCUME~1\URBAIN~1\APPLIC~1\SiteAdvisor
2007-03-26 22:48:02 -------- d-----w C:\DOCUME~1\URBAIN~1\APPLIC~1\vlc
2007-03-26 22:42:42 -------- d-----w C:\Program Files\VideoLAN
2007-03-26 22:38:45 -------- d-----w C:\DOCUME~1\URBAIN~1\APPLIC~1\Help
2007-03-26 22:36:51 -------- d-----w C:\Program Files\ArcSoft
2007-03-26 22:17:27 848 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
2007-03-26 22:16:47 -------- d-----w C:\DOCUME~1\URBAIN~1\APPLIC~1\Corel
2007-03-26 20:50:31 14,416 ----a-w C:\WINDOWS\system32\lccl.dll
2007-03-26 20:50:31 14,416 ----a-w C:\WINDOWS\system32\client_cc.dll
2007-03-26 20:50:28 20,048 ----a-w C:\WINDOWS\system32\BgOutlookHook.dll
2007-03-26 20:50:25 50,904 ----a-w C:\WINDOWS\system32\drivers\BdFileSpy.sys
2007-03-26 20:43:38 -------- d-----w C:\Program Files\BullGuard Software
2007-03-26 20:27:07 -------- d-----w C:\Program Files\Movie Maker
2007-03-26 20:24:23 -------- d-----w C:\Program Files\Common Files\ODBC
2007-03-26 20:24:20 -------- d-----w C:\Program Files\Common Files\SpeechEngines
2007-03-26 19:45:12 -------- d--h--w C:\Program Files\WindowsUpdate
2007-03-26 19:08:02 -------- d-----w C:\DOCUME~1\URBAIN~1\APPLIC~1\Hewlett-Packard
2007-03-26 19:07:44 20,458 ----a-w C:\WINDOWS\hpoins01.dat
2007-03-26 19:07:37 -------- d-----w C:\Program Files\Hewlett-Packard
2007-03-26 19:03:45 -------- d-----w C:\Program Files\Common Files\Hewlett-Packard
2007-03-26 18:56:39 -------- d-----w C:\Program Files\AOpen
2007-03-26 18:51:52 -------- d-----w C:\Program Files\ASUS
2007-03-26 18:49:19 -------- d-----w C:\Program Files\Analog Devices
2007-03-26 18:48:57 -------- d-----w C:\Program Files\Intel
2007-03-26 18:37:30 -------- d-----w C:\Program Files\microsoft frontpage
2007-03-26 18:37:21 0 --sha-r C:\MSDOS.SYS
2007-03-26 18:37:21 0 --sha-r C:\IO.SYS
2007-03-26 18:37:21 0 ----a-w C:\CONFIG.SYS
2007-03-26 18:37:21 0 ----a-w C:\AUTOEXEC.BAT
2007-03-26 18:36:15 -------- d-----w C:\Program Files\Online Services
2007-03-26 18:35:15 -------- d-----w C:\Program Files\Common Files\MSSoap
2007-03-26 18:34:49 21,748 ----a-w C:\WINDOWS\system32\emptyregdb.dat
2007-03-26 18:33:51 -------- d-----w C:\Program Files\MSN Gaming Zone
2007-03-23 04:07:56 1,683,280 ------w C:\WINDOWS\system32\XpsSvcs.dll
2007-03-23 04:07:54 583,504 ------w C:\WINDOWS\system32\XPSSHHDR.dll
2007-03-22 18:25:02 124,928 ------w C:\WINDOWS\system32\prntvpt.dll
2007-03-17 13:45:54 293,376 ----a-w C:\WINDOWS\system32\winsrv.dll
2007-03-08 15:39:10 579,072 ----a-w C:\WINDOWS\system32\user32.dll
2007-03-08 15:39:10 40,960 ----a-w C:\WINDOWS\system32\mf3216.dll
2007-03-08 15:39:10 281,600 ----a-w C:\WINDOWS\system32\gdi32.dll
2007-03-08 15:37:59 1,843,712 ----a-w C:\WINDOWS\system32\win32k.sys
2007-03-05 11:34:28 676,224 ----a-w C:\WINDOWS\system32\OGACheckControl.DLL
2007-02-05 20:20:07 185,344 ----a-w C:\WINDOWS\system32\upnphost.dll

(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}=C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll [2006-12-15 03:23]
{9030D464-4C02-4ABF-8ECC-5164760863C6}=C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2006-08-31 20:33]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"Smapp"="C:\Program Files\Analog Devices\SoundMAX\SMTray.exe" [2003-05-05 08:57]
"ASUS Probe"="C:\Program Files\ASUS\Probe\AsusProb.exe" [2002-12-06 16:07]
"BullGuard"="C:\Program Files\BullGuard Software\BullGuard\bullguard.exe" [2007-05-14 14:12]
"StorageGuard"="C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" [2002-06-18 01:01]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2005-06-15 17:20]
"nwiz"="nwiz.exe" [2005-06-15 17:20 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray. dll" [2005-06-15 17:20]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 10:03]
"BullGuard"="C:\Program Files\BullGuard Software\BullGuard\BullGuard.exe" [2007-05-14 14:12]
"ASM"="C:\Program Files\AOL\Active Security Monitor\ASMonitor.exe" [2006-11-07 15:11]
"feedreader.exe"="C:\Program Files\FeedReader30\feedreader.exe" [2007-03-16 13:55]
"msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [2007-01-19 12:54]
"ISPMonitor"="C:\Program Files\ISP Monitor\isp.exe" [2007-04-09 00:49]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\policies\explorer]
"LinkResolveIgnoreLinkInfo"=0 (0x0)
"NoResolveSearch"=1 (0x1)
"NoCDBurning"=0 (0x0)
[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\policies\explorer]
"LinkResolveIgnoreLinkInfo"=0 (0x0)
[HKEY_LOCAL_MACHINE\system\currentcontrolset\contro l\lsa]
Notification Packages scecli
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
BullGuard BgMainSvc BsFileScan BsMailProxy
BullGuardFw BsFwall
p2psvc p2psvc p2pimsvc p2pgasvc PNRPSvc
HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost *netsvcs*

[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\{7540a99d-f0e8-11db-8744-000ea60cb5a7}]

Contents of the 'Scheduled Tasks' folder
2007-03-26 19:08:04 C:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp psc 1100 series#1174936064.job
2007-03-28 13:38:36 C:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp psc 1100 series#1175089073.job
2007-04-04 11:32:29 C:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp psc 1100 series#1175686317.job
2007-05-12 17:28:21 C:\WINDOWS\tasks\User_Feed_Synchronization-{E73336F0-6715-4544-9BFA-7C766856B2D0}.job
************************************************** ******************
catchme 0.3.660 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-05-20 14:02:59
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0

************************************************** ******************
Completion time: 2007-05-20 14:05:57 - machine was rebooted
C:\ComboFix-quarantined-files.txt ... 2007-05-20 14:05

--- E O F ---

en het logje van hijackthis

Logfile of HijackThis v1.99.1
Scan saved at 14:08:43, on 20/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\BullGuard Software\BullGuard\BullGuardUpdate.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\Program Files\ASUS\Probe\AsusProb.exe
C:\Program Files\VERITAS Software\Update Manager\sgtray.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\BullGuard Software\BullGuard\BullGuard.exe
C:\Program Files\AOL\Active Security Monitor\ASMonitor.exe
C:\Program Files\FeedReader30\feedreader.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\ISP Monitor\isp.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\BigFix\BigFix.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Windows Live Mail desktop\wlmail.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Documents and Settings\urbain van landeghem\Mijn documenten\Mijn ontvangen bestanden\Nieuwe map\hijackthis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [ASUS Probe] C:\Program Files\ASUS\Probe\AsusProb.exe
O4 - HKLM\..\Run: [BullGuard] "C:\Program Files\BullGuard Software\BullGuard\bullguard.exe" -boot
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BullGuard] "C:\Program Files\BullGuard Software\BullGuard\BullGuard.exe"
O4 - HKCU\..\Run: [ASM] "C:\Program Files\AOL\Active Security Monitor\ASMonitor.exe" HIDEMAIN
O4 - HKCU\..\Run: [feedreader.exe] "C:\Program Files\FeedReader30\feedreader.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ISPMonitor] C:\Program Files\ISP Monitor\isp.exe
O4 - Startup: OpenOffice.org 2.2 .lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Global Startup: BigFix.lnk = C:\Program Files\BigFix\BigFix.exe
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O11 - Options group: [INTERNATIONAL] International*
O11 - Options group: [TABS] Tabbed Browsing
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1174938277625
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.5.0) - http://javadl-esd.sun.com/update/1.5...ws-i586-jc.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live Mail desktop\mailcomm.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: BullGuard LiveUpdate (BGLiveSvc) - BullGuard Software - C:\Program Files\BullGuard Software\BullGuard\BullGuardUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ISP Monitor (ISPMonitorSrv) - How2 Studios - C:\Program Files\ISP Monitor\ISPMonitorSrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

[jurgenv]

Probeer dial-a-fix nog eens opnieuw?

[urbain]

Beste jurgenv ik heb dus opnieuw dial-a-fix laten draaien en de errors blijven juist hetzelfde als ik voorheen had vermeld.

[jurgenv]

Ga naar http://www.virustotal.com/en/indexf.html en upload het volgend bestandje:

C:/windows/system32/qmgrprxy.dll

Post het resultaat er van hier.

[urbain]

Ik kan niet vinden wat je daar hebt vermeld,alleen zie ik dat het een soort scan is.

[jurgenv]

Download dit bestandje eens en plaats het in de system32 map:
http://www.dlldump.com/download-dll-.../download.html

Probeer dan nogmaals dial-a-fix te runnen.