Controle logfile

• 

  LG

  03-11-2008 14:13

  Na een schoonmaakronde van deze pc, en na aan jullie voorwaarden te hebben voldaan plaat ik een logfile ter controle

  ogfile of Trend Micro HijackThis v2.0.2

  Scan saved at 14:07:50, on 3-11-2008

  Platform: Windows XP SP3 (WinNT 5.01.2600)

  MSIE: Internet Explorer v7.00 (7.00.6000.16735)

  Boot mode: Normal

  Running processes:

  C:\WINDOWS\System32\smss.exe

  C:\WINDOWS\system32\winlogon.exe

  C:\WINDOWS\system32\services.exe

  C:\WINDOWS\system32\lsass.exe

  C:\WINDOWS\system32\svchost.exe

  C:\WINDOWS\System32\svchost.exe

  C:\WINDOWS\system32\spoolsv.exe

  C:\WINDOWS\system32\crypserv.exe

  C:\Program Files\Common Files\LightScribe\LSSrvc.exe

  C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

  C:\Program Files\Eset\nod32krn.exe

  C:\Program Files\CyberLink\Shared Files\RichVideo.exe

  C:\WINDOWS\System32\svchost.exe

  C:\WINDOWS\system32\lxcycoms.exe

  C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

  C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe

  C:\WINDOWS\Explorer.EXE

  C:\Program Files\QuickTime\qttask.exe

  C:\Program Files\Trust\DS-3300X Wireless Optical Deskset\Keyboard\kbdap32a.EXE

  C:\Program Files\Trust\DS-3300X Wireless Optical Deskset\Mouse\mouse32a.exe

  C:\Program Files\Lexmark 3400 Series\lxcymon.exe

  C:\Program Files\Lexmark 3400 Series\ezprint.exe

  C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe

  C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe

  C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe

  C:\Program Files\Common Files\Real\Update_OB\realsched.exe

  C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE

  C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe

  C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe

  C:\Program Files\Eset\nod32kui.exe

  C:\WINDOWS\system32\ctfmon.exe

  C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe

  C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.startnederland.nl/

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

  F3 - REG:win.ini: run=

  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

  O3 - Toolbar: (no name) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - (no file)

  O4 - HKLM\..\Run: %systemroot%\system32\dumprep 0 -u

  O4 - HKLM\..\Run: “C:\Program Files\QuickTime\qttask.exe” -atboottime

  O4 - HKLM\..\Run: C:\Program Files\Trust\DS-3300X Wireless Optical Deskset\Keyboard\kbdap32a.EXE

  O4 - HKLM\..\Run: C:\Program Files\Trust\DS-3300X Wireless Optical Deskset\Mouse\mouse32a.exe

  O4 - HKLM\..\Run: “C:\Program Files\Lexmark 3400 Series\lxcymon.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Lexmark 3400 Series\ezprint.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Lexmark Fax Solutions\fm3032.exe” /s

  O4 - HKLM\..\Run: rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCYtime.dll,_RunDLLEntry@16

  O4 - HKLM\..\Run: “C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Common Files\Real\Update_OB\realsched.exe” -osboot

  O4 - HKLM\..\Run: C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray

  O4 - HKLM\..\Run: C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe /startup

  O4 - HKLM\..\Run: “C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe”

  O4 - HKLM\..\Run: “C:\Program Files\CyberLink\PowerDVD\Language\Language.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Eset\nod32kui.exe” /WAITSERVICE

  O4 - HKCU\..\Run: C:\WINDOWS\system32\ctfmon.exe

  O4 - HKCU\..\Run: C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden

  O4 - HKUS\S-1-5-19\..\Run: C:\WINDOWS\System32\CTFMON.EXE (User ‘Lokale service’)

  O4 - HKUS\S-1-5-20\..\Run: C:\WINDOWS\System32\CTFMON.EXE (User ‘Netwerkservice’)

  O4 - HKUS\S-1-5-18\..\Run: C:\WINDOWS\System32\CTFMON.EXE (User ‘SYSTEM’)

  O4 - HKUS\.DEFAULT\..\Run: C:\WINDOWS\System32\CTFMON.EXE (User ‘Default user’)

  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

  O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

  O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

  O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

  O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

  O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

  O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://cache.hyves.nl/statics/Aurigma/ImageUploader4.cab

  O16 - DPF: {AE2B937E-EA7D-4A8D-888C-B68D7F72A3C4} (IPSUploader4 Control) - http://as.photoprintit.de/ips-opdata/layout/default01/activex/IPSUploader4.cab

  O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

  O18 - Protocol: bw+0 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw+0s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw-0 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw-0s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw00 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw00s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw10 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw10s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw20 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw20s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw30 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw30s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw40 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw40s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw50 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw50s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw60 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw60s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw70 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw70s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw80 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw80s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw90 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw90s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwa0 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwa0s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwb0 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwb0s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwc0 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwc0s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwd0 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwd0s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwe0 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwe0s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwf0 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwf0s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll

  O18 - Protocol: bwg0 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwg0s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwh0 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwh0s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwi0 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwi0s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwj0 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwj0s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwk0 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwk0s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwl0 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwl0s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwm0 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwm0s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwn0 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwn0s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwo0 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwo0s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwp0 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwp0s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwq0 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwq0s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwr0 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwr0s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bws0 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bws0s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwt0 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwt0s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwu0 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwu0s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwv0 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwv0s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bww0 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bww0s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwx0 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwx0s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwy0 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwy0s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwz0 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwz0s - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: offline-8876480 - {62F9F2E3-557A-4D07-A6A1-02A8115BDECB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe

  O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe

  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

  O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

  O23 - Service: lxcy_device - - C:\WINDOWS\system32\lxcycoms.exe

  O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)

  O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe

  O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

  O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

  O23 - Service: SymWMI Service (SymWSC) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe (file missing)

  –

  End of file - 19365 bytes

  Malwarebytes' Anti-Malware 1.30

  Database versie: 1358

  Windows 5.1.2600 Service Pack 3

  3-11-2008 14:00:54

  mbam-log-2008-11-03 (14-00-54).txt

  Scan type: Snelle Scan

  Objecten gescand: 49672

  Verstreken tijd: 6 minute(s), 25 second(s)

  Geheugenprocessen geïnfecteerd: 0

  Geheugenmodulen geïnfecteerd: 0

  Registersleutels geïnfecteerd: 0

  Registerwaarden geïnfecteerd: 0

  Registerdata bestanden geïnfecteerd: 0

  Mappen geïnfecteerd: 0

  Bestanden geïnfecteerd: 0

  Geheugenprocessen geïnfecteerd:

  (Geen kwaadaardige items gevonden)

  Geheugenmodulen geïnfecteerd:

  (Geen kwaadaardige items gevonden)

  Registersleutels geïnfecteerd:

  (Geen kwaadaardige items gevonden)

  Registerwaarden geïnfecteerd:

  (Geen kwaadaardige items gevonden)

  Registerdata bestanden geïnfecteerd:

  (Geen kwaadaardige items gevonden)

  Mappen geïnfecteerd:

  (Geen kwaadaardige items gevonden)

  Bestanden geïnfecteerd:

  (Geen kwaadaardige items gevonden)

  Rapporteren
• 

  Teaser

  03-11-2008 16:35

  Verwijder even via config. scherm software

  Logitech desktop messenger

  Deze heeft de hik n.m.

  Sluit even alle vensters.

  Open alleen HJT en klik op “do a system scan only”

  Vink nu de volgende regels aan en klik op “fix checked”

  F3 - REG:win.ini: run=

  O3 - Toolbar: (no name) - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - (no file)

  O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

  Plaats nogmaals een HJT log

  Rapporteren
• 

  LG

  03-11-2008 17:34

  Zoals gevraagd maar kan de onderstaande ook weg, want symantec staat niet meer op deze pc

  O23 - Service: SymWMI Service (SymWSC) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe (file missing)

  Logfile of Trend Micro HijackThis v2.0.2

  Scan saved at 17:27:38, on 3-11-2008

  Platform: Windows XP SP3 (WinNT 5.01.2600)

  MSIE: Internet Explorer v7.00 (7.00.6000.16735)

  Boot mode: Normal

  Running processes:

  C:\WINDOWS\System32\smss.exe

  C:\WINDOWS\system32\winlogon.exe

  C:\WINDOWS\system32\services.exe

  C:\WINDOWS\system32\lsass.exe

  C:\WINDOWS\system32\svchost.exe

  C:\WINDOWS\System32\svchost.exe

  C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe

  C:\WINDOWS\system32\spoolsv.exe

  C:\WINDOWS\system32\crypserv.exe

  C:\WINDOWS\Explorer.EXE

  C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

  C:\Program Files\Eset\nod32krn.exe

  C:\Program Files\CyberLink\Shared Files\RichVideo.exe

  C:\WINDOWS\System32\svchost.exe

  C:\Program Files\QuickTime\qttask.exe

  C:\Program Files\Trust\DS-3300X Wireless Optical Deskset\Keyboard\kbdap32a.EXE

  C:\Program Files\Trust\DS-3300X Wireless Optical Deskset\Mouse\mouse32a.exe

  C:\Program Files\Lexmark 3400 Series\lxcymon.exe

  C:\Program Files\Lexmark 3400 Series\ezprint.exe

  C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe

  C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe

  C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE

  C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe

  C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe

  C:\Program Files\Eset\nod32kui.exe

  C:\WINDOWS\system32\ctfmon.exe

  C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

  C:\WINDOWS\system32\lxcycoms.exe

  C:\WINDOWS\system32\msiexec.exe

  C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.startnederland.nl/

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

  O4 - HKLM\..\Run: %systemroot%\system32\dumprep 0 -u

  O4 - HKLM\..\Run: “C:\Program Files\QuickTime\qttask.exe” -atboottime

  O4 - HKLM\..\Run: C:\Program Files\Trust\DS-3300X Wireless Optical Deskset\Keyboard\kbdap32a.EXE

  O4 - HKLM\..\Run: C:\Program Files\Trust\DS-3300X Wireless Optical Deskset\Mouse\mouse32a.exe

  O4 - HKLM\..\Run: “C:\Program Files\Lexmark 3400 Series\lxcymon.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Lexmark 3400 Series\ezprint.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Lexmark Fax Solutions\fm3032.exe” /s

  O4 - HKLM\..\Run: rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCYtime.dll,_RunDLLEntry@16

  O4 - HKLM\..\Run: “C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe”

  O4 - HKLM\..\Run: C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray

  O4 - HKLM\..\Run: C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe /startup

  O4 - HKLM\..\Run: “C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe”

  O4 - HKLM\..\Run: “C:\Program Files\CyberLink\PowerDVD\Language\Language.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Eset\nod32kui.exe” /WAITSERVICE

  O4 - HKCU\..\Run: C:\WINDOWS\system32\ctfmon.exe

  O4 - HKUS\S-1-5-19\..\Run: C:\WINDOWS\System32\CTFMON.EXE (User ‘Lokale service’)

  O4 - HKUS\S-1-5-20\..\Run: C:\WINDOWS\System32\CTFMON.EXE (User ‘Netwerkservice’)

  O4 - HKUS\S-1-5-18\..\Run: C:\WINDOWS\System32\CTFMON.EXE (User ‘SYSTEM’)

  O4 - HKUS\.DEFAULT\..\Run: C:\WINDOWS\System32\CTFMON.EXE (User ‘Default user’)

  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

  O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

  O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

  O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

  O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

  O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://cache.hyves.nl/statics/Aurigma/ImageUploader4.cab

  O16 - DPF: {AE2B937E-EA7D-4A8D-888C-B68D7F72A3C4} (IPSUploader4 Control) - http://as.photoprintit.de/ips-opdata/layout/default01/activex/IPSUploader4.cab

  O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

  O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe

  O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe

  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

  O23 - Service: lxcy_device - - C:\WINDOWS\system32\lxcycoms.exe

  O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)

  O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe

  O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

  O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

  O23 - Service: SymWMI Service (SymWSC) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe (file missing)

  –

  End of file - 6664 bytes

  Rapporteren
• 

  Teaser

  03-11-2008 19:21

  Ja zeker dan mag die ook weg

  O23 - Service: SymWMI Service (SymWSC) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe (file missing)

  verder ziet het log er weer netjes uit hoor

  Rapporteren
• 

  LG

  03-11-2008 19:45

  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

  Is dit ook een kandidaat?

  023 wil zich niet Laten verwijderen

  Logfile of Trend Micro HijackThis v2.0.2

  Scan saved at 19:41:50, on 3-11-2008

  Platform: Windows XP SP3 (WinNT 5.01.2600)

  MSIE: Internet Explorer v7.00 (7.00.6000.16735)

  Boot mode: Normal

  Running processes:

  C:\WINDOWS\System32\smss.exe

  C:\WINDOWS\system32\winlogon.exe

  C:\WINDOWS\system32\services.exe

  C:\WINDOWS\system32\lsass.exe

  C:\WINDOWS\system32\svchost.exe

  C:\WINDOWS\System32\svchost.exe

  C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe

  C:\WINDOWS\system32\spoolsv.exe

  C:\WINDOWS\system32\crypserv.exe

  C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE

  C:\Program Files\Eset\nod32krn.exe

  C:\Program Files\CyberLink\Shared Files\RichVideo.exe

  C:\WINDOWS\Explorer.EXE

  C:\WINDOWS\System32\svchost.exe

  C:\Program Files\QuickTime\qttask.exe

  C:\Program Files\Trust\DS-3300X Wireless Optical Deskset\Keyboard\kbdap32a.EXE

  C:\Program Files\Trust\DS-3300X Wireless Optical Deskset\Mouse\mouse32a.exe

  C:\Program Files\Lexmark 3400 Series\lxcymon.exe

  C:\Program Files\Lexmark 3400 Series\ezprint.exe

  C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe

  C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe

  C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE

  C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe

  C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe

  C:\Program Files\Eset\nod32kui.exe

  C:\WINDOWS\system32\ctfmon.exe

  C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

  C:\WINDOWS\system32\lxcycoms.exe

  C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.startnederland.nl/

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

  O4 - HKLM\..\Run: %systemroot%\system32\dumprep 0 -u

  O4 - HKLM\..\Run: “C:\Program Files\QuickTime\qttask.exe” -atboottime

  O4 - HKLM\..\Run: C:\Program Files\Trust\DS-3300X Wireless Optical Deskset\Keyboard\kbdap32a.EXE

  O4 - HKLM\..\Run: C:\Program Files\Trust\DS-3300X Wireless Optical Deskset\Mouse\mouse32a.exe

  O4 - HKLM\..\Run: “C:\Program Files\Lexmark 3400 Series\lxcymon.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Lexmark 3400 Series\ezprint.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Lexmark Fax Solutions\fm3032.exe” /s

  O4 - HKLM\..\Run: rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCYtime.dll,_RunDLLEntry@16

  O4 - HKLM\..\Run: “C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe”

  O4 - HKLM\..\Run: C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray

  O4 - HKLM\..\Run: C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe /startup

  O4 - HKLM\..\Run: “C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe”

  O4 - HKLM\..\Run: “C:\Program Files\CyberLink\PowerDVD\Language\Language.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Eset\nod32kui.exe” /WAITSERVICE

  O4 - HKCU\..\Run: C:\WINDOWS\system32\ctfmon.exe

  O4 - HKUS\S-1-5-19\..\Run: C:\WINDOWS\System32\CTFMON.EXE (User ‘Lokale service’)

  O4 - HKUS\S-1-5-20\..\Run: C:\WINDOWS\System32\CTFMON.EXE (User ‘Netwerkservice’)

  O4 - HKUS\S-1-5-18\..\Run: C:\WINDOWS\System32\CTFMON.EXE (User ‘SYSTEM’)

  O4 - HKUS\.DEFAULT\..\Run: C:\WINDOWS\System32\CTFMON.EXE (User ‘Default user’)

  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

  O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

  O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

  O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

  O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

  O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://cache.hyves.nl/statics/Aurigma/ImageUploader4.cab

  O16 - DPF: {AE2B937E-EA7D-4A8D-888C-B68D7F72A3C4} (IPSUploader4 Control) - http://as.photoprintit.de/ips-opdata/layout/default01/activex/IPSUploader4.cab

  O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

  O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe

  O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe

  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

  O23 - Service: lxcy_device - - C:\WINDOWS\system32\lxcycoms.exe

  O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)

  O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe

  O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

  O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

  O23 - Service: SymWMI Service (SymWSC) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe (file missing)

  –

  End of file - 6631 bytes

  Rapporteren
• 

  Argus

  03-11-2008 19:50

  Start–>Uitvoeren>> kopieer hier in:

  sc delete SymWSC

  Klik OK

  PC opnieuw opstarten

  Rapporteren
• 

  Teaser

  03-11-2008 19:52

  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

  Nee die moet blijven staan is van windows live messenger

  Ga naar start uitvoeren type daar services.msc

  Scroll in de lijst naar SymWSC dubbelklik erop, stop de service en zet als opstarttype Uitgeschakeld

  Open hijackthis en ga naar Config>misc Tools> delete an NT service.

  Type daar SymWSC

  Check nu in HJT of hij weg is

  Rapporteren
• 

  Teaser

  03-11-2008 19:52

  Zo jij bent er snel bij

  Rapporteren
• 

  LG

  03-11-2008 20:03

  Hij is verdewenen heb een noton remove tool gebruikt.

  O23 - Service: Crypkey License - Kenonic Controls Ltd. - C:\WINDOWS\SYSTEM32\crypserv.exe is dit ook iets van een virus programma?

  Rapporteren
• 

  Teaser

  03-11-2008 20:06

  http://www.neuber.com/taskmanager/process/crypserv.exe.html

  Rapporteren