Hijack Logje

**El_Spanky** · 22 May 2009, 07:16

Goeiemorgen, eerst en vooral sorry voor mijn nederlands ben kei moe, heb deze nacht niet geslapen omdat ik probleem had met de pc en wou het in orde maken. Ik heb blijkbaar een malware binnengekregen zonder dat ik het weet van waar/wat want mijn taskmanager zit vol met netsh.exe, cmd.exe enzo, had gescanned met ad-aware, spybots en met avg in safe mode want avg sloot direct terug af maar geen van allemaal hadden iets gevonden. Toen heb ik malwarebyte geinstalleerd, het vond eerst 4 malwares en dan op het einde 12, heb het dan laten verwijderen en pc terug opgestart, maar toen kreeg ik weer paar vensters met service.exe werkt niet meer en svchost.exe werkt niet meer (dacht ik), had dan rond de 2444 processen openstaan voor die op tilt sloeg. Heb dan wat nog verder gezocht en proberen te fiksen en nu lijkt alles zowat in orde, heb geen floodjes van cmd.exe enzo alleen probleem met AVG als ik het wil openen sluit het terug af en als ik naar het mapje ga waar het geinstalleerd is, dan sluit het mapje ook en als ik bij "programma's en onderdelen" ga om het te verwijderen dan krijg ik ontelbare vensterkes van wil je het verwijderen ja/nee en tijdje later krijg ik dan dat avg niet meer werkt en of ik het wilt afsluiten en hetzelfde als ik op AVG installer klikt, dan krijg ik ook ontelbare vensterkes van.
Hier is mijn log, lijkt weinig dan bij de rest dat ik zie :s :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:13:26, on 22/05/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18226)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
E:\Lavasoft\Ad-Aware\AAWTray.exe
C:\Windows\vsnp2uvc.exe
C:\Windows\tsnp2uvc.exe
E:\RocketDock\RocketDock.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
E:\ISP Monitor 5.7.1\isp.exe
E:\DAEMON Tools Lite\daemon.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Common Files\WinNT 32\service.exe
C:\Program Files\Common Files\WinNT 32\service.exe
C:\Program Files\Common Files\WinNT 32\service.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
E:\Firefox\firefox.exe
E:\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - E:\AVG8.5\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - E:\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [AVG8_TRAY] E:\AVG8.5\avgtray.exe
O4 - HKLM\..\Run: [Ad-Watch] E:\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [snp2uvc] C:\Windows\vsnp2uvc.exe
O4 - HKLM\..\Run: [tsnp2uvc] C:\Windows\tsnp2uvc.exe
O4 - HKLM\..\Run: [WinNT 32] C:\Program Files\Common Files\WinNT 32\service.exe
O4 - HKCU\..\Run: [RocketDock] "E:\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ISPMonitor] E:\ISP Monitor 5.7.1\isp.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "E:\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [WinNT 32] C:\Program Files\Common Files\WinNT 32\service.exe
O4 - HKCU\..\Policies\Explorer\Run: [WinNT 32] C:\Program Files\Common Files\WinNT 32\service.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://E:\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\Spybot - Search & Destroy\SDHelper.dll
O13 - Gopher Prefix:
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - E:\AVG8.5\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: avgrsstx.dll
O22 - SharedTaskScheduler: Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll
O22 - SharedTaskScheduler: Deskscapes - {EC654325-1273-C2A9-2B7C-45D29BCE68FB} - E:\DESKSC~1\deskscapes.dll
O22 - SharedTaskScheduler: Stardock Vista ControlPanel Extension - {EC654325-1273-C2A9-2B7C-45D29BCE68FD} - E:\DESKSC~1\DesktopControlPanel.dll
O22 - SharedTaskScheduler: StardockDreamController - {EC654325-1273-C2A9-2B7C-45D29BCE68FF} - E:\DESKSC~1\DreamControl.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - E:\AVG8.5\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - E:\AVG8.5\avgwdsvc.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: ISP Monitor (ISPMonitorSrv) - How2 Studios - E:\ISP Monitor 5.7.1\ISPMonitorSrv.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - E:\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PunkBuster (PnkBstrA) - Unknown owner - E:\Medal Of Honor Airborne\UnrealEngine3\MOHAGame\pb\PnkBstrA.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - E:\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe
O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe

--
End of file - 6605 bytes

als ik AVg typ in google zowel bij firefox als bij IE dan worden ze allebei afgesloten

**Rosty** · 22 May 2009, 08:54

Download Combofix naar je Bureaublad en gebruik het volgens deze handleiding.

OPMERKING: indien je, tijdens of na het downloaden van Combofix of tijdens het gebruik van Combofix een melding krijgt van je Antivirus- of een andere realtime scanner, schakel dan deze scanner uit en download Combofix opnieuw.
Sommige scanners zien bepaalde componenten die Combofix gebruikt als verdacht en gaan deze blokkeren of verwijderen!

Dubbelklik op Combofix.exe om het te starten.
Indien je Combofix al eerder hebt gebruikt, kan je een waarschuwing krijgen dat een update beschikbaar is. Sta toe dat ComboFix wordt geupdate.
Klik op OK in het "NirCmd" venstertje.
Klik na afloop terug op Ja om het scannen op malware te starten.
Tijdens het runnen van de fix, NIET in het venster klikken, want dit zal je pc doen vasthangen.
Wanneer de fix voltooid is en na herstart, zal de log Combofix.txt openen.

Post dit logje in je volgende antwoord.[/quote]

**El_Spanky** · 22 May 2009, 09:28

hier is het logje:

ComboFix 09-05-21.01 - SpankZor 22/05/2009 9:21.1 - NTFSx86
Microsoft® Windows Vista™ Ultimate 6.0.6001.1.1252.32.1033.18.3325.2461 [GMT 2:00]
Gestart vanuit: c:\users\SpankZor\Desktop\ComboFix.exe
SP: Lavasoft Ad-Watch Live! *enabled* (Updated) {67844DAE-4F77-4D69-9457-98E8CFFDAA22}
SP: Spybot - Search and Destroy *disabled* (Updated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\Common Files\WinNT 32
c:\program files\Common Files\WinNT 32\service.exe
c:\windows\system32\TEACico2.dll

.
(((((((((((((((((((( Bestanden Gemaakt van 2009-04-22 to 2009-05-22 ))))))))))))))))))))))))))))))
.

2009-05-22 05:33 . 2009-05-22 05:33 102664 ----a-w c:\windows\system32\drivers\tmcomm.sys
2009-05-22 05:33 . 2009-05-22 05:33 -------- d-----w c:\users\SpankZor\.housecall6.6
2009-05-22 00:27 . 2009-05-22 00:27 -------- d-----w c:\users\SpankZor\AppData\Roaming\Malwarebytes
2009-05-22 00:27 . 2009-04-06 13:32 15504 ----a-w c:\windows\system32\drivers\mbam.sys
2009-05-22 00:27 . 2009-04-06 13:32 38496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys
2009-05-22 00:27 . 2009-05-22 00:27 -------- d-----w c:\program files\Malwarebytes' Anti-Malware
2009-05-22 00:27 . 2009-05-22 00:27 -------- d-----w c:\programdata\Malwarebytes
2009-05-22 00:01 . 2009-05-15 23:33 15688 ----a-w c:\windows\system32\lsdelete.exe
2009-05-22 00:01 . 2009-05-22 00:01 232420 ----a-w c:\programdata\Lavasoft\Ad-Aware\ThreatWork\Submit\BIESTART.EXE
2009-05-21 19:55 . 2009-05-21 19:55 -------- d-----w c:\program files\AGEIA Technologies
2009-05-21 19:55 . 2009-05-21 19:55 -------- d-----w c:\windows\system32\AGEIA
2009-05-21 14:57 . 2009-05-06 18:06 4784464 ----a-w c:\programdata\Microsoft\Windows Defender\Definition Updates\{F0AF07EA-3606-4BEF-984A-A41C8B3EB620}\mpengine.dll
2009-05-21 09:59 . 2009-05-15 16:58 2051864 ----a-w c:\programdata\avg8\update\backup\avgcorex.dll
2009-05-21 09:59 . 2009-05-15 16:58 312088 ----a-w c:\programdata\avg8\update\backup\avglngx.dll
2009-05-21 09:59 . 2009-05-15 16:58 1437464 ----a-w c:\programdata\avg8\update\backup\avgupd.dll
2009-05-20 14:44 . 2007-08-10 16:41 180224 ----a-w c:\windows\system32\rsnp2uvc.dll
2009-05-20 14:44 . 2007-08-09 09:39 303104 ----a-w c:\windows\system32\vsnp2uvc.dll
2009-05-20 14:44 . 2007-07-11 16:18 237568 ----a-w c:\windows\tsnp2uvc.exe
2009-05-20 14:44 . 2007-07-11 13:31 569344 ----a-w c:\windows\vsnp2uvc.exe
2009-05-20 14:44 . 2009-05-20 14:44 -------- d-----w c:\program files\Common Files\SNP2UVC
2009-05-20 14:44 . 2007-08-22 17:51 9611520 ----a-w c:\windows\system32\drivers\snp2uvc.sys
2009-05-20 14:44 . 2007-07-04 15:28 176128 ----a-w c:\windows\system32\csnp2uvc.dll
2009-05-20 14:44 . 2007-05-09 13:16 28160 ----a-w c:\windows\system32\drivers\sncduvc.sys
2009-05-20 14:40 . 2006-07-03 08:31 94208 ----a-w c:\windows\amcap.exe
2009-05-20 13:43 . 2009-05-20 13:43 -------- d-----w c:\users\SpankZor\AppData\Roaming\vlc
2009-05-20 12:44 . 2009-05-20 12:28 331776 ----a-w c:\users\SpankZor\AppData\Roaming\InstallShield Installation Information\{BFA90209-7AFF-4DB6-8E4B-E57305751AD7}\SetupUT3.exe
2009-05-20 12:44 . 2007-10-24 10:47 4147031 ----a-w c:\users\SpankZor\AppData\Roaming\InstallShield Installation Information\{BFA90209-7AFF-4DB6-8E4B-E57305751AD7}\ISSetup.dll
2009-05-20 12:29 . 2009-05-20 12:29 -------- d-----w c:\windows\45235788142C44BE8A4DDDE9A84492E5.TMP
2009-05-19 19:37 . 2009-05-19 19:37 -------- d-----w c:\users\SpankZor\AppData\Local\Fallout3
2009-05-19 18:55 . 2009-05-19 18:49 147456 ----a-w c:\users\SpankZor\AppData\Roaming\InstallShield Installation Information\{974C4B12-4D02-4879-85E0-61C95CC63E9E}\_setup.dll
2009-05-19 18:50 . 2009-05-20 12:44 -------- d-----w c:\users\SpankZor\AppData\Roaming\InstallShield Installation Information
2009-05-19 18:50 . 2008-08-15 18:31 121064 ----a-r c:\users\SpankZor\AppData\Roaming\InstallShield Installation Information\{974C4B12-4D02-4879-85E0-61C95CC63E9E}\setup.exe
2009-05-19 18:40 . 2009-05-19 18:40 -------- d-----w c:\windows\74224F8D4A1748169EDB7BB854DE532C.TMP
2009-05-18 20:04 . 2009-05-18 20:04 -------- d-----w c:\program files\Intel
2009-05-18 20:04 . 2009-05-18 20:04 -------- d-----w C:\Intel
2009-05-18 15:42 . 2009-05-18 16:51 -------- d-----w c:\users\SpankZor\AppData\Local\The Witcher
2009-05-18 15:14 . 2009-05-18 15:14 -------- d-----w c:\users\SpankZor\AppData\Roaming\Microsoft Games
2009-05-18 14:51 . 2009-05-18 14:51 -------- d-----w c:\program files\Common Files\Microsoft Games
2009-05-18 14:02 . 2009-05-18 14:02 279712 ----a-w c:\windows\system32\drivers\atksgt.sys
2009-05-18 14:02 . 2009-05-18 14:02 25888 ----a-w c:\windows\system32\drivers\lirsgt.sys
2009-05-18 13:29 . 2009-05-18 13:44 -------- d-----w c:\programdata\Media Center Programs
2009-05-18 13:15 . 2009-05-19 16:21 -------- d-----w c:\program files\Common Files\Steam
2009-05-18 13:14 . 2009-05-18 13:14 -------- d-----w c:\program files\Microsoft Games for Windows - LIVE
2009-05-18 13:14 . 2009-05-18 13:14 -------- d-----w c:\windows\system32\xlive
2009-05-18 13:01 . 2009-05-21 19:54 -------- d-----w c:\program files\Common Files\Wise Installation Wizard
2009-05-18 12:51 . 2009-05-18 12:51 -------- d-----w c:\users\SpankZor\AppData\Roaming\DAEMON Tools
2009-05-18 12:50 . 2009-05-18 12:50 -------- d-----w c:\programdata\DAEMON Tools Lite
2009-05-18 12:49 . 2009-05-19 13:26 -------- d-----w c:\users\SpankZor\AppData\Roaming\DAEMON Tools Lite
2009-05-18 11:12 . 2009-05-18 11:12 -------- d-----w c:\programdata\DAEMON Tools Pro
2009-05-17 21:01 . 2008-11-13 16:46 2373416 ----a-w c:\programdata\Nero\Nero\DrWeb\DrWeb32.dll
2009-05-17 21:01 . 2008-11-13 16:33 2373416 ----a-w c:\programdata\Nero\Nero 9\DrWeb\DrWeb32.dll
2009-05-17 20:45 . 2008-06-24 10:45 1414440 ----a-w c:\windows\system32\ShellManager310E2D762.dll
2009-05-17 20:41 . 2009-05-17 20:41 -------- d-----w c:\users\SpankZor\AppData\Local\Nero
2009-05-17 19:43 . 2009-05-17 19:43 603904 ----a-w c:\windows\system32\TUProgSt.exe
2009-05-17 19:43 . 2008-12-11 11:31 17152 ----a-w c:\windows\system32\authuitu.dll
2009-05-17 19:43 . 2008-12-11 11:31 27904 ----a-w c:\windows\system32\uxtuneup.dll
2009-05-17 19:43 . 2009-05-17 19:43 360192 ----a-w c:\windows\system32\TuneUpDefragService.exe
2009-05-17 19:43 . 2009-05-17 19:43 -------- d-----w c:\users\SpankZor\AppData\Roaming\TuneUp Software
2009-05-17 19:43 . 2009-05-17 19:43 -------- d-----w c:\programdata\TuneUp Software
2009-05-17 19:42 . 2009-05-17 19:42 -------- d-sh--w c:\programdata\{55A29068-F2CE-456C-9148-C869879E2357}
2009-05-17 19:19 . 2009-05-17 19:19 -------- d-----w c:\programdata\Stardock
2009-05-17 19:05 . 2009-05-17 19:05 -------- d-----w c:\users\SpankZor\AppData\Local\Ahead
2009-05-17 19:04 . 2009-05-17 21:30 -------- d-----w c:\users\SpankZor\AppData\Roaming\Nero
2009-05-17 18:53 . 2009-05-17 18:53 -------- d-----w c:\program files\MSXML 4.0
2009-05-16 10:29 . 2009-05-17 21:01 -------- d-----w c:\programdata\Nero
2009-05-16 10:29 . 2009-05-17 21:01 -------- d-----w c:\program files\Common Files\Nero
2009-05-16 10:10 . 2009-05-16 10:10 -------- d-----w c:\windows\Sun
2009-05-16 09:46 . 2009-05-16 09:46 971584 ----a-w c:\windows\system32\drivers\tdrpm147.sys
2009-05-16 09:46 . 2009-05-16 09:46 540000 ----a-w c:\windows\system32\drivers\timntr.sys
2009-05-16 09:46 . 2009-05-16 09:46 44704 ----a-w c:\windows\system32\drivers\tifsfilt.sys
2009-05-16 00:45 . 2009-05-16 00:46 -------- d-----w c:\program files\Microsoft Works
2009-05-16 00:45 . 2009-05-16 00:45 -------- d-----w c:\program files\Microsoft.NET
2009-05-16 00:44 . 2009-05-16 00:44 -------- d-----w c:\users\SpankZor\AppData\Local\Microsoft Help
2009-05-16 00:44 . 2009-05-16 01:08 -------- d-----w c:\programdata\Microsoft Help
2009-05-15 23:56 . 2009-05-16 00:29 721904 ----a-w c:\windows\system32\drivers\sptd.sys
2009-05-15 23:56 . 2009-05-18 17:52 -------- d-----w c:\users\SpankZor\AppData\Roaming\DAEMON Tools Pro
2009-05-15 23:55 . 2009-05-15 23:55 -------- d-----w c:\users\SpankZor\AppData\Roaming\FileZilla
2009-05-15 23:52 . 2009-05-15 23:52 -------- d-----w c:\programdata\FLEXnet
2009-05-15 23:49 . 2009-05-15 23:49 -------- d-----w c:\program files\Common Files\Macrovision Shared
2009-05-15 23:27 . 2009-05-15 23:27 -------- dc-h--w c:\programdata\{83C91755-2546-441D-AC40-9A6B4B860800}
2009-05-15 23:27 . 2009-01-18 21:43 2892112 -c--a-w c:\programdata\{83C91755-2546-441D-AC40-9A6B4B860800}\Ad-AwareAE.exe
2009-05-15 23:26 . 2009-05-15 23:33 -------- d-----w c:\programdata\Lavasoft
2009-05-15 23:18 . 2009-05-15 13:23 -------- d-----w c:\windows\Panther
2009-05-15 23:18 . 2009-05-17 20:11 -------- d-sh--w C:\Boot
2009-05-15 22:35 . 2009-05-15 22:35 -------- d-----w c:\programdata\Adobe Systems
2009-05-15 22:34 . 2009-05-15 22:36 -------- d-----w c:\users\SpankZor\AppData\Local\Adobe
2009-05-15 22:30 . 2009-05-15 22:30 -------- d-----w c:\program files\Common Files\Adobe Systems Shared
2009-05-15 22:29 . 2009-05-15 23:50 -------- d-----w c:\program files\Common Files\Adobe
2009-05-15 20:11 . 2009-05-16 01:25 -------- d-----w c:\users\SpankZor\AppData\Roaming\ISP Monitor
2009-05-15 20:11 . 2009-05-15 20:11 737280 ----a-w c:\windows\iun6002.exe
2009-05-15 19:42 . 2009-05-15 19:42 -------- d-----w c:\programdata\Messenger Plus!
2009-05-15 19:39 . 2009-05-15 19:39 -------- d-----w c:\program files\Microsoft Silverlight
2009-05-15 19:21 . 2009-05-21 22:47 -------- d--h--w C:\$AVG8.VAULT$
2009-05-15 19:16 . 2009-05-18 22:35 -------- d-----w c:\users\SpankZor\AppData\Roaming\LimeWire
2009-05-15 19:12 . 2009-05-22 07:15 -------- d-----w c:\users\SpankZor\Tracing
2009-05-15 19:12 . 2009-05-16 01:08 -------- d-----w c:\program files\Microsoft
2009-05-15 19:12 . 2009-05-15 19:12 -------- d-----w c:\program files\Windows Live SkyDrive
2009-05-15 19:12 . 2009-05-15 19:12 -------- d-----w c:\program files\Windows Live
2009-05-15 19:11 . 2009-05-15 19:11 -------- d-----w c:\windows\PCHEALTH
2009-05-15 19:11 . 2009-05-15 19:11 -------- d-----w c:\program files\Common Files\Windows Live
2009-05-15 18:54 . 2009-05-15 18:54 780104 ----a-w c:\programdata\Microsoft\eHome\Packages\MCESpotlig ht\MCESpotlight\SpotlightResources.dll
2009-05-15 18:51 . 2009-05-15 18:51 -------- d-----w c:\windows\system32\Adobe
2009-05-15 18:51 . 2009-05-15 18:51 410984 ----a-w c:\windows\system32\deploytk.dll
2009-05-15 18:51 . 2009-05-15 18:51 -------- d-----w c:\program files\Java
2009-05-15 18:50 . 2009-05-15 18:50 -------- d-----w c:\windows\system32\Macromed
2009-05-15 18:48 . 2009-05-15 18:48 -------- d-----w c:\programdata\NOS
2009-05-15 18:48 . 2009-05-15 18:48 -------- d-----w c:\program files\NOS
2009-05-15 18:48 . 2009-03-03 12:53 17464 ----a-w c:\users\SpankZor\AppData\Roaming\Mozilla\Firefox\ Profiles\1kpnt7in.default\extensions\{CF40ACC5-E1BB-4aff-AC72-04C2F616BCA7}\chrome\content\getPlus_Adobe_reg.exe
2009-05-15 18:48 . 2009-03-03 12:53 12792 ----a-w c:\users\SpankZor\AppData\Roaming\Mozilla\Firefox\ Profiles\1kpnt7in.default\extensions\{CF40ACC5-E1BB-4aff-AC72-04C2F616BCA7}\chrome\content\getPlus_Adobe_reg_boo tstrap.exe
2009-05-15 18:48 . 2009-03-03 12:53 109420 ----a-w c:\users\SpankZor\AppData\Roaming\Mozilla\Firefox\ Profiles\1kpnt7in.default\extensions\{CF40ACC5-E1BB-4aff-AC72-04C2F616BCA7}\plugins\np_gp.dll
2009-05-15 18:42 . 2009-05-21 22:50 -------- d-----w c:\users\SpankZor\AppData\Local\QuickPar
2009-05-15 18:37 . 2009-05-18 12:46 -------- d-----w c:\users\SpankZor\AppData\Roaming\mIRC
2009-05-15 18:21 . 2009-05-21 22:49 -------- d-----w c:\users\SpankZor\AppData\Roaming\GrabIt
2009-05-15 17:15 . 2009-05-15 19:43 -------- d-----w c:\users\SpankZor\AppData\Roaming\Skype
2009-05-15 17:15 . 2009-05-15 17:15 -------- d-----w c:\program files\Common Files\Skype
2009-05-15 17:15 . 2009-05-15 17:15 -------- d-----r c:\program files\Skype
2009-05-15 17:15 . 2009-05-15 17:15 -------- d-----w c:\programdata\Skype
2009-05-15 17:12 . 2009-05-22 05:16 -------- d-----w c:\programdata\Spybot - Search & Destroy
2009-05-15 16:58 . 2009-05-15 16:58 11952 ----a-w c:\windows\system32\avgrsstx.dll
2009-05-15 16:58 . 2009-05-15 16:58 108552 ----a-w c:\windows\system32\drivers\avgtdix.sys
2009-05-15 16:58 . 2009-05-15 16:58 325896 ----a-w c:\windows\system32\drivers\avgldx86.sys
2009-05-15 16:58 . 2009-05-22 00:15 -------- d-----w c:\windows\system32\drivers\Avg
2009-05-15 16:58 . 2009-05-15 16:58 27784 ----a-w c:\windows\system32\drivers\avgmfx86.sys
2009-05-15 16:58 . 2009-05-22 04:50 -------- d-----w c:\programdata\avg8
2009-05-15 16:42 . 2009-05-15 16:42 -------- d-----w c:\users\SpankZor\AppData\Local\Mozilla

.
((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))) ))
.
2009-05-22 07:15 . 2009-05-18 13:03 32156 ----a-w c:\programdata\nvModes.dat
2009-05-15 19:17 . 2009-05-15 19:17 98304 ----a-w c:\users\SpankZor\AppData\Roaming\LimeWire\browser \xulrunner\smime3.dll
2009-05-15 16:21 . 2009-05-15 16:21 319456 ----a-w c:\windows\DIFxAPI.dll
2009-05-15 16:21 . 2009-05-15 16:21 315392 ----a-w c:\windows\HideWin.exe
2009-05-15 16:21 . 2009-05-15 16:21 -------- d-----w c:\program files\Common Files\InstallShield
2009-05-15 16:09 . 2006-11-02 12:35 -------- d-----w c:\program files\Windows Calendar
2009-05-15 16:09 . 2006-11-02 12:35 -------- d-----w c:\program files\Windows Sidebar
2009-05-15 16:09 . 2006-11-02 12:35 -------- d-----w c:\program files\Windows Photo Gallery
2009-05-15 16:09 . 2006-11-02 12:35 -------- d-----w c:\program files\Windows Defender
2009-05-15 16:09 . 2006-11-02 11:18 -------- d-----w c:\program files\Windows Mail
2009-05-15 16:09 . 2009-05-15 16:09 41976 ----a-w c:\windows\inf\PERFLIB\0413\perfd.dat
2009-05-15 16:09 . 2009-05-15 16:09 41976 ----a-w c:\windows\inf\PERFLIB\0413\perfc.dat
2009-05-15 16:09 . 2009-05-15 16:09 336440 ----a-w c:\windows\inf\PERFLIB\0413\perfi.dat
2009-05-15 16:09 . 2009-05-15 16:09 336440 ----a-w c:\windows\inf\PERFLIB\0413\perfh.dat
2009-05-15 15:31 . 2009-05-15 15:28 680 ----a-w c:\users\SpankZor\AppData\Local\d3d9caps.dat
2009-05-15 13:22 . 2009-05-15 13:22 0 ---ha-w c:\windows\system32\drivers\Msft_User_WpdFs_01_00_ 00.Wdf
2009-04-30 20:02 . 2009-04-30 20:02 4224 ----a-w c:\windows\system32\drivers\nvBridge.kmd
2009-04-30 20:02 . 2008-08-22 22:35 983552 ----a-w c:\windows\system32\nvapi.dll
2009-04-30 20:02 . 2008-08-22 22:35 7593472 ----a-w c:\windows\system32\nvd3dum.dll
2009-04-21 22:20 . 2009-04-21 22:20 14311680 ----a-w c:\windows\system32\xlive.dll
2009-04-21 22:20 . 2009-04-21 22:20 13642496 ----a-w c:\windows\system32\xlivefnt.dll
2009-03-17 03:38 . 2009-05-15 15:42 13824 ----a-w c:\windows\system32\apilogen.dll
2009-03-17 03:38 . 2009-05-15 15:42 24064 ----a-w c:\windows\system32\amxread.dll
2009-03-06 07:06 . 2009-03-06 07:06 140800 ----a-w c:\windows\system32\drivers\Rtlh86.sys
2009-03-05 04:54 . 2009-03-05 04:54 73728 ----a-w c:\windows\system32\RtNicProp32.dll
2009-03-03 04:46 . 2009-05-15 15:42 3599328 ----a-w c:\windows\system32\ntkrnlpa.exe
2009-03-03 04:46 . 2009-05-15 15:42 3547632 ----a-w c:\windows\system32\ntoskrnl.exe
2009-03-03 04:40 . 2009-05-15 15:41 827392 ----a-w c:\windows\system32\wininet.dll
2009-03-03 04:39 . 2009-05-15 15:42 183296 ----a-w c:\windows\system32\sdohlp.dll
2009-03-03 04:39 . 2009-05-15 15:42 551424 ----a-w c:\windows\system32\rpcss.dll
2009-03-03 04:39 . 2009-05-15 15:42 26112 ----a-w c:\windows\system32\printfilterpipelineprxy.dll
2009-03-03 04:37 . 2009-05-15 15:41 78336 ----a-w c:\windows\system32\ieencode.dll
2009-03-03 04:37 . 2009-05-15 15:42 98304 ----a-w c:\windows\system32\iasrecst.dll
2009-03-03 04:37 . 2009-05-15 15:42 54784 ----a-w c:\windows\system32\iasads.dll
2009-03-03 04:37 . 2009-05-15 15:42 44032 ----a-w c:\windows\system32\iasdatastore.dll
2009-03-03 03:04 . 2009-05-15 15:42 666624 ----a-w c:\windows\system32\printfilterpipelinesvc.exe
2009-03-03 02:38 . 2009-05-15 15:42 17408 ----a-w c:\windows\system32\iashost.exe
2009-03-03 02:28 . 2009-05-15 15:41 26624 ----a-w c:\windows\system32\ieUnatt.exe
2008-04-09 23:35 . 2008-04-09 23:35 8192 --sha-w c:\windows\Users\Default\NTUSER.DAT
.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))) )
.
.
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"RocketDock"="e:\rocketdock\RocketDock.exe" [2007-09-02 495616]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408]
"ISPMonitor"="e:\isp monitor 5.7.1\isp.exe" [2009-05-09 422496]
"DAEMON Tools Lite"="e:\daemon tools lite\daemon.exe" [2008-12-29 687560]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"AVG8_TRAY"="e:\avg8.5\avgtray.exe" [2009-05-15 1947928]
"Ad-Watch"="e:\lavasoft\Ad-Aware\AAWTray.exe" [2009-05-15 516440]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-04-30 13781536]
"snp2uvc"="c:\windows\vsnp2uvc.exe" [2007-07-11 569344]
"tsnp2uvc"="c:\windows\tsnp2uvc.exe" [2007-07-11 237568]
"RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2007-11-12 4706304]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\avgrsstx.dl l

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\run-]
"AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.ex e" -launchedbylogin
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-1918980683-2979662169-4280399446-1000]
"EnableNotificationsRef"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\FirewallRules]
"{87E5D00B-F8D1-4C04-B9BB-D013215154DA}"= e:\avg8.5\avgemc.exe:avgemc.exe
"{8B237C6C-3994-4EB5-8035-C2430DCE36F5}"= e:\avg8.5\avgupd.exe:avgupd.exe
"{C6E72E79-0D72-4472-BBAE-A716DA1A2659}"= e:\avg8.5\avgnsx.exe:avgnsx.exe
"{8F68E3B8-1C1E-4C1E-976D-C81BCE884EDA}"= c:\program files\Skype\Phone\Skype.exe:Skype
"TCP Query User{3BF1CE2E-1260-4FEB-8DE6-D239176C432B}e:\\mirc\\mirc.exe"= UDP:e:\mirc\mirc.exe:mIRC
"UDP Query User{DDC1423F-D856-4762-A6D4-1C71C7CF2327}e:\\mirc\\mirc.exe"= TCP:e:\mirc\mirc.exe:mIRC
"TCP Query User{155809BA-DBE2-4671-B863-1147894DD7B6}e:\\limewire\\limewire.exe"= UDP:e:\limewire\limewire.exe:LimeWire
"UDP Query User{B51A34F3-1B6C-4C85-A85D-E03652977D0D}e:\\limewire\\limewire.exe"= TCP:e:\limewire\limewire.exe:LimeWire
"{E1A6461D-AFC0-44AB-8170-FB6ED3AE9CCE}"= UDP:5353:Adobe CSI CS4
"{26FD7E16-348F-4B96-A125-721696013DB9}"= UDP:c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.ex e:Adobe CSI CS4
"{9E72525D-D6AB-44FA-9194-4FDD6CA175BD}"= TCP:c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.ex e:Adobe CSI CS4
"TCP Query User{95842A80-A33D-4E11-9DD3-FA2BD206DA33}e:\\mirc\\mirc.exe"= UDP:e:\mirc\mirc.exe:mIRC
"UDP Query User{0502F0E6-4076-4D05-A46A-177BAFCED8FA}e:\\mirc\\mirc.exe"= TCP:e:\mirc\mirc.exe:mIRC
"TCP Query User{81F35BBE-36CE-463B-A083-6D1A0DA56916}e:\\steam\\steamapps\\common\\dawn of war 2\\dow2.exe"= UDP:e:\steam\steamapps\common\dawn of war 2\dow2.exe

OW2
"UDP Query User{FDC3FD73-81D2-4C5E-9F34-AEBB6005DD82}e:\\steam\\steamapps\\common\\dawn of war 2\\dow2.exe"= TCP:e:\steam\steamapps\common\dawn of war 2\dow2.exe

OW2
"{348873E1-5337-4311-A59F-AF47829CBB0E}"= UDP:e:\gears of war\Binaries\WarGame-G4WLive.exe:Gears of War
"{B8C02C6E-198B-46CA-B2CA-E275C522F6FF}"= TCP:e:\gears of war\Binaries\WarGame-G4WLive.exe:Gears of War
"{5C43B103-9015-452D-B76B-B1442FACB90D}"= UDP:e:\unreal tournament 3\Binaries\UT3.exe:Unreal Tournament 3
"{B9C6C077-437C-4643-A159-54D697F67B46}"= TCP:e:\unreal tournament 3\Binaries\UT3.exe:Unreal Tournament 3
"{EEBC5C61-21A0-41BE-9618-12A5F6A35DE4}"= UDP:e:\medal of honor airborne\UnrealEngine3\Binaries\MOHA.exe:Medal of Honor Airborne
"{55A0A1A3-0263-404D-91A5-B9E18B6F06AB}"= TCP:e:\medal of honor airborne\UnrealEngine3\Binaries\MOHA.exe:Medal of Honor Airborne

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\PublicProfile]
"EnableFirewall"= 0 (0x0)
"DoNotAllowExceptions"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\StandardProfile]
"EnableFirewall"= 0 (0x0)
"DoNotAllowExceptions"= 0 (0x0)

R0 Lbd;Lbd;c:\windows\System32\drivers\Lbd.sys [16/05/2009 1:33 64160]
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\System32\drivers\avgldx86.sys [15/05/2009 18:58 325896]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\System32\drivers\avgtdix.sys [15/05/2009 18:58 108552]
R2 avg8emc;AVG Free8 E-mail Scanner;e:\avg8.5\avgemc.exe [15/05/2009 18:58 908568]
R2 avg8wd;AVG Free8 WatchDog;e:\avg8.5\avgwdsvc.exe [15/05/2009 18:58 298776]
R2 ISPMonitorSrv;ISP Monitor;e:\isp monitor 5.7.1\ISPMonitorSrv.exe [23/08/2007 0:55 36864]
R2 SBSDWSCService;SBSD Security Center Service;e:\spybot - search & destroy\SDWinSec.exe [15/05/2009 19:12 1153368]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\System32\TUProgSt.exe [17/05/2009 21:43 603904]
R3 athrusb;Atheros Wireless LAN USB device driver;c:\windows\System32\drivers\athrusb.sys [29/07/2008 4:45 904192]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;e:\lavasoft\Ad-Aware\AAWService.exe [18/01/2009 23:34 953168]
S3 getPlus(R) Helper;getPlus(R) Helper;c:\program files\NOS\bin\getPlus_HelperSvc.exe [15/05/2009 20:48 33176]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{7070D8E0-650A-46b3-B03C-9497582E6A74}]
%SystemRoot%\system32\soundschemes.exe /AddRegistration
.
Inhoud van de 'Gedeelde Taken' map

2009-05-22 c:\windows\Tasks\1-Click Maintenance.job
- e:\tune up\OneClickStarter.exe [2008-12-11 19:36]

2009-05-15 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- e:\lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-01-18 23:33]
.
- - - - ORPHANS VERWIJDERD - - - -

HKCU-Explorer_Run-WinNT 32 - c:\program files\Common Files\WinNT 32\service.exe

.
------- Bijkomende Scan -------
.
IE: E&xporteren naar Microsoft Excel - e:\micros~1\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\SpankZor\AppData\Roaming\Mozilla\Firefox\ Profiles\1kpnt7in.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: e:\firefox\plugins\np-mswmp.dll

---- FIREFOX POLICIES ----
FF - user.js: network.http.max-connections-per-server - 8
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.

************************************************** ************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-22 09:24
Windows 6.0.6001 Service Pack 1 NTFS

scannen van verborgen processen ...

scannen van verborgen autostart items ...

scannen van verborgen bestanden ...

Scan succesvol afgerond
verborgen bestanden: 0

************************************************** ************************
.
Voltooingstijd: 2009-05-22 9:24
ComboFix-quarantined-files.txt 2009-05-22 07:24

Pre-Run: 22.339.325.952 bytes beschikbaar
Post-Run: 22.317.424.640 bytes beschikbaar

294 --- E O F --- 2009-05-21 14:57

AVG kan ik nu terug normaal opstarten

**Rosty** · 22 May 2009, 09:42

Hoi,

post nog even een nieuw HijackThis logje aub? Goed dat AVG het weer doet!

**El_Spanky** · 22 May 2009, 09:46

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:46:00, on 22/05/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18226)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\RtHDVCpl.exe
E:\AVG8.5\avgtray.exe
C:\Windows\tsnp2uvc.exe
E:\ISP Monitor 5.7.1\isp.exe
E:\DAEMON Tools Lite\daemon.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\conime.exe
C:\Windows\Explorer.exe
E:\RocketDock\RocketDock.exe
E:\Firefox\firefox.exe
E:\HijackThis\HijackThis.exe
C:\Windows\system32\DllHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - E:\AVG8.5\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - E:\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [AVG8_TRAY] E:\AVG8.5\avgtray.exe
O4 - HKLM\..\Run: [Ad-Watch] E:\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [snp2uvc] C:\Windows\vsnp2uvc.exe
O4 - HKLM\..\Run: [tsnp2uvc] C:\Windows\tsnp2uvc.exe
O4 - HKCU\..\Run: [RocketDock] "E:\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ISPMonitor] E:\ISP Monitor 5.7.1\isp.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "E:\DAEMON Tools Lite\daemon.exe" -autorun
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://E:\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\Spybot - Search & Destroy\SDHelper.dll
O13 - Gopher Prefix:
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - E:\AVG8.5\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\Windows\System32\avgrsstx.dll
O22 - SharedTaskScheduler: Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll
O22 - SharedTaskScheduler: Deskscapes - {EC654325-1273-C2A9-2B7C-45D29BCE68FB} - E:\DESKSC~1\deskscapes.dll
O22 - SharedTaskScheduler: Stardock Vista ControlPanel Extension - {EC654325-1273-C2A9-2B7C-45D29BCE68FD} - E:\DESKSC~1\DesktopControlPanel.dll
O22 - SharedTaskScheduler: StardockDreamController - {EC654325-1273-C2A9-2B7C-45D29BCE68FF} - E:\DESKSC~1\DreamControl.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - E:\AVG8.5\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - E:\AVG8.5\avgwdsvc.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: ISP Monitor (ISPMonitorSrv) - How2 Studios - E:\ISP Monitor 5.7.1\ISPMonitorSrv.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - E:\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PunkBuster (PnkBstrA) - Unknown owner - E:\Medal Of Honor Airborne\UnrealEngine3\MOHAGame\pb\PnkBstrA.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - E:\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Windows\System32\TuneUpDefragService.exe
O23 - Service: @%SystemRoot%\System32\TUProgSt.exe,-1 (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\Windows\System32\TUProgSt.exe

--
End of file - 5439 bytes