a.u.b. log controleren

Hierbij de twee log files.

Rikje.

ComboFix 08-12-18.03 - Frans en Erika 2008-12-20 1:34:22.1 - NTFSx86

Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1043.18.1023.465

Gestart vanuit: c:\documents and settings\Frans en Erika\Bureaublad\ComboFix.exe

* Nieuw herstelpunt werd aangemaakt

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

c:\documents and settings\Frans en Erika\Favorieten\Videos.url

(((((((((((((((((((( Bestanden Gemaakt van 2008-11-20 to 2008-12-20 ))))))))))))))))))))))))))))))

2008-12-19 17:29 . 2008-12-19 17:29 d——– c:\program files\Trend Micro

2008-12-19 14:00 . 2008-12-19 14:00 d——– c:\documents and settings\Administrator\Application Data\Malwarebytes

2008-12-19 11:05 . 2007-06-16 12:12 d–h—– c:\documents and settings\Administrator\Sjablonen

2008-12-19 11:05 . 2008-12-19 13:55 d–h—– c:\documents and settings\Administrator\Onlangs geopend

2008-12-19 11:05 . 2007-06-16 14:07 d–h—– c:\documents and settings\Administrator\Netwerkprinteromgeving

2008-12-19 11:05 . 2007-06-16 14:07 d——– c:\documents and settings\Administrator\Mijn documenten

2008-12-19 11:05 . 2007-06-16 14:07 dr——- c:\documents and settings\Administrator\Menu Start

2008-12-19 11:05 . 2007-06-16 14:07 d——– c:\documents and settings\Administrator\Favorieten

2008-12-19 11:05 . 2007-06-16 14:07 d——– c:\documents and settings\Administrator\Bureaublad

2008-12-19 11:05 . 2008-12-19 11:24 d——– c:\documents and settings\Administrator

2008-12-19 09:33 . 2008-12-19 09:33 d——– c:\program files\Lavasoft

2008-12-19 09:33 . 2008-12-19 09:33 d——– c:\program files\Common Files\Wise Installation Wizard

2008-12-19 08:44 . 2008-12-19 08:48 d——– c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy

2008-12-19 08:36 . 2008-12-20 00:10 d——– c:\program files\CleanUp!

2008-12-19 08:36 . 2008-12-03 19:52 38,496 –a—— c:\windows\system32\drivers\mbamswissarmy.sys

2008-12-19 08:36 . 2008-12-03 19:52 15,504 –a—— c:\windows\system32\drivers\mbam.sys

2008-12-19 08:35 . 2008-12-19 08:36 d——– c:\program files\Malwarebytes' Anti-Malware

2008-12-19 08:35 . 2008-12-19 08:35 d——– c:\documents and settings\All Users\Application Data\Malwarebytes

2008-12-19 00:42 . 2008-12-19 00:42 d——– c:\documents and settings\Frans en Erika\Application Data\s_5849_OTl8fHx8OTl8fHwxMjQyMjQ4MDE4fA_

2008-12-10 07:15 . 2008-12-10 07:15 410,984 –a—— c:\windows\system32\deploytk.dll

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

2008-12-19 22:18 ——— d—–w c:\program files\Spybot - Search & Destroy

2008-12-10 06:14 ——— d—–w c:\program files\Java

2008-12-04 18:50 ——— d—–w c:\program files\nipo.n

2008-11-30 20:07 ——— d—–w c:\program files\Soulseek

2008-11-14 17:32 ——— d—–w c:\documents and settings\All Users\Application Data\Lavasoft

2008-11-14 16:31 ——— d—–w c:\documents and settings\Frans en Erika\Application Data\AV Stumpfl

2008-11-04 17:47 ——— d—–w c:\program files\Datacolor

2008-11-04 17:17 0 —ha-w c:\windows\system32\drivers\Msft_Kernel_Spyder3_01001.Wdf

2008-11-02 15:08 ——— d—–w c:\program files\eMule

2008-10-24 11:21 455,296 —-a-w c:\windows\system32\drivers\mrxsmb.sys

2008-10-23 12:43 286,720 —-a-w c:\windows\system32\gdi32.dll

2008-10-20 18:19 ——— d—–w c:\documents and settings\All Users\Application Data\vsosdk

2008-10-20 17:54 ——— d—–w c:\documents and settings\Frans en Erika\Application Data\Vso

2008-10-20 05:06 ——— d—–w c:\documents and settings\Frans en Erika\Application Data\Logitech

2008-10-20 05:06 ——— d—–w c:\documents and settings\All Users\Application Data\Logitech

2008-10-20 05:06 ——— d—–w c:\documents and settings\All Users\Application Data\LogiShrd

2008-10-20 05:00 0 -c-ha-w c:\windows\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf

2008-10-20 05:00 0 -c-ha-w c:\windows\system32\drivers\Msft_Kernel_LMouFilt_01005.Wdf

2008-10-20 04:59 ——— d–h–w c:\program files\InstallShield Installation Information

2008-10-20 04:59 ——— d—–w c:\program files\Common Files\Logishrd

2008-10-20 04:59 ——— d—–w c:\documents and settings\Frans en Erika\Application Data\InstallShield

2008-10-16 20:33 826,368 —-a-w c:\windows\system32\wininet.dll

2008-10-16 13:13 202,776 —-a-w c:\windows\system32\wuweb.dll

2008-10-16 13:13 1,809,944 —-a-w c:\windows\system32\wuaueng.dll

2008-10-16 13:12 561,688 —-a-w c:\windows\system32\wuapi.dll

2008-10-16 13:12 323,608 —-a-w c:\windows\system32\wucltui.dll

2008-10-16 13:09 92,696 —-a-w c:\windows\system32\cdm.dll

2008-10-16 13:09 51,224 —-a-w c:\windows\system32\wuauclt.exe

2008-10-16 13:09 43,544 —-a-w c:\windows\system32\wups2.dll

2008-10-16 13:08 34,328 —-a-w c:\windows\system32\wups.dll

2008-10-16 13:06 268,648 —-a-w c:\windows\system32\mucltui.dll

2008-10-16 13:06 208,744 —-a-w c:\windows\system32\muweb.dll

2008-10-03 10:05 247,326 —-a-w c:\windows\system32\strmdll.dll

2008-09-30 15:43 1,286,152 —-a-w c:\windows\system32\msxml4.dll

2008-08-17 10:15 32,768 –sha-w c:\windows\system32\config\systemprofile\Local Settings\Geschiedenis\History.IE5\MSHist012008081720080818\index.dat

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

“ctfmon.exe”=“c:\windows\system32\ctfmon.exe”

“UpdReg”=“c:\windows\UpdReg.EXE”

“mnu”=“c:\program files\Wanadoo\NL\Mnu\igomnu.exe”

“SunJavaUpdateSched”=“c:\program files\Java\jre6\bin\jusched.exe”

“PinnacleDriverCheck”=“c:\windows\system32\PSDrvCheck.exe”

“AVG8_TRAY”=“c:\progra~1\AVG\AVG8\avgtray.exe”

“Adobe Reader Speed Launcher”=“c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe”

“Kernel and Hardware Abstraction Layer”=“KHALMNPR.EXE”

“CTFMON.EXE”=“c:\windows\System32\CTFMON.EXE”

c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\

Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe

Spyder3Utility.lnk - c:\program files\Datacolor\Spyder3Elite\Utility\Spyder3Utility.exe

2008-05-02 01:42 72208 c:\program files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll

“AppInit_DLLs”=avgrsstx.dll

“msacm.ctmp3”= c:\windows\system32\ctmp3.acm

@=“”

path=c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\Adobe Acrobat Snelle start.lnk

backup=c:\windows\pss\Adobe Acrobat Snelle start.lnkCommon Startup

path=c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\Adobe Gamma.lnk

backup=c:\windows\pss\Adobe Gamma.lnkCommon Startup

–a—— 2002-04-03 00:01 135264 c:\program files\Creative\SBLive\Diagnostics\diagent.exe

–a—— 2005-05-11 22:12 49152 c:\program files\HP\HP Software Update\hpwuSchd2.exe

–a—— 2008-04-14 18:03 1695232 c:\program files\Messenger\msmsgs.exe

–a—— 2003-07-15 11:36 319488 c:\program files\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe

–a—— 2003-05-01 17:44 65536 c:\program files\Common Files\Roxio Shared\System\EngUtil.exe

——— 2008-09-16 12:16 1833296 c:\program files\Spybot - Search & Destroy\TeaTimer.exe

“AntiVirusDisableNotify”=dword:00000001

“UpdatesDisableNotify”=dword:00000001

“%windir%\\system32\\sessmgr.exe”=

“%windir%\\Network Diagnostic\\xpnetdiag.exe”=

“c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe”=

“c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe”=

“c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe”=

“c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe”=

“c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe”=

“c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe”=

“c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe”=

“c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe”=

“c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe”=

“c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe”=

“c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe”=

“c:\\Program Files\\Soulseek\\slsk.exe”=

“c:\\Program Files\\LimeWire\\LimeWire.exe”=

“c:\\Program Files\\AVG\\AVG8\\avgupd.exe”=

“c:\\Program Files\\AVG\\AVG8\\avgemc.exe”=

“c:\\Program Files\\Bonjour\\mDNSResponder.exe”=

“c:\\Program Files\\Malwarebytes' Anti-Malware\\mbam.exe”=

“4662:TCP”= 4662:TCP:e mule TCP incoming

“4672:UDP”= 4672:UDP:e mule UDP inkomend

R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\Drivers\avgldx86.sys

R2 avg8emc;AVG8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe

R2 avg8wd;AVG8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe

R2 AvgTdiX;AVG8 Network Redirector;c:\windows\system32\Drivers\avgtdix.sys

S3 Spyder3;Datacolor Spyder3;c:\windows\system32\DRIVERS\Spyder3.sys

*Newly Created Service* - PROCEXP90

- - - - ORPHANS VERWIJDERD - - - -

HKCU-Run-gStart - c:\garmin\gStart.exe

MSConfigStartUp-Acrobat Assistant 7 - c:\program files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe

MSConfigStartUp-Adobe Photo Downloader - c:\program files\Adobe\Photoshop Elements 4.0\apdproxy.exe

MSConfigStartUp-Adobe Reader Speed Launcher - c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe

MSConfigStartUp-Adobe Version Cue CS2 - c:\program files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe

MSConfigStartUp-gStart - c:\garmin\gStart.exe

——- Bijkomende Scan ——-

uStart Page = hxxp://google.mini20.com

mStart Page = hxxp://www.google.com

uInternet Settings,ProxyOverride = *.local

IE: Converteren naar bestaand PDF-bestand - c:\program files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

IE: Geselecteerde koppelingen converteren naar bestaand PDF-bestand - c:\program files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

IE: Koppelingdoel converteren naar Adobe PDF - c:\program files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

IE: Koppelingdoel converteren naar bestaand PDF-bestand - c:\program files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

IE: Selectie converteren naar bestaand PDF-bestand - c:\program files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O16 -: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab

c:\windows\Downloaded Program Files\DirectAnimation Java Classes.osd

O16 -: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab

c:\windows\Downloaded Program Files\Microsoft XML Parser for Java.osd

FF - ProfilePath - c:\documents and settings\Frans en Erika\Application Data\Mozilla\Firefox\Profiles\1gpyhnzl.default\

FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=

FF - prefs.js: browser.search.selectedEngine - Google

FF - prefs.js: browser.startup.homepage - hxxp://www.startkabel.nl/

FF - component: c:\program files\AVG\AVG8\Firefox\components\avgssff.dll

FF - plugin: c:\documents and settings\All Users\Application Data\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll

FF - plugin: c:\program files\Mozilla Firefox\plugins\npzylomgamesplayer.dll

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

Rootkit scan 2008-12-20 01:35:45

Windows 5.1.2600 Service Pack 3 NTFS

scannen van verborgen processen …

scannen van verborgen autostart items …

scannen van verborgen bestanden …

Scan succesvol afgerond

verborgen bestanden: 0

**************************************************************************

——————— DLLs Geladen Onder Lopende Processen ———————

- - - - - - - > ‘winlogon.exe’(640)

c:\windows\system32\avgrsstx.dll

c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll

c:\program files\common files\logishrd\bluetooth\LBTServ.dll

- - - - - - - > ‘lsass.exe’(748)

c:\windows\system32\avgrsstx.dll

Voltooingstijd: 2008-12-20 1:36:55

ComboFix-quarantined-files.txt 2008-12-20 00:36:36

Pre-Run: 69.508.624.384 bytes beschikbaar

Post-Run: 69,497,114,624 bytes beschikbaar

WindowsXP-KB310994-SP2-Home-BootDisk-NLD.exe

timeout=2

default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS

c:\cmdcons\BOOTSECT.DAT=“Microsoft Windows Recovery Console” /cmdcons

multi(0)disk(0)rdisk(0)partition(2)\WINDOWS=“Microsoft Windows XP Home Edition” /fastdetect /NoExecute=OptIn

209 — E O F — 2008-12-18 19:54:05

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 1:39:05, on 20-12-2008

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16762)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe

C:\WINDOWS\system32\spoolsv.exe

C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\WINDOWS\system32\CTsvcCDA.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Wanadoo\NL\Mnu\igomnu.exe

C:\WINDOWS\system32\HPZipm12.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Java\jre6\bin\jusched.exe

C:\WINDOWS\system32\MsPMSPSv.exe

C:\PROGRA~1\AVG\AVG8\avgtray.exe

C:\PROGRA~1\AVG\AVG8\avgrsx.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Logitech\SetPoint\SetPoint.exe

C:\Program Files\Datacolor\Spyder3Elite\Utility\Spyder3Utility.exe

C:\PROGRA~1\AVG\AVG8\avgemc.exe

C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE

C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

C:\WINDOWS\explorer.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.mini20.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll

O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O4 - HKLM\..\Run: C:\WINDOWS\UpdReg.EXE

O4 - HKLM\..\Run: C:\Program Files\Wanadoo\NL\Mnu\igomnu.exe /S:T

O4 - HKLM\..\Run: “C:\Program Files\Java\jre6\bin\jusched.exe”

O4 - HKLM\..\Run: C:\WINDOWS\system32\PSDrvCheck.exe

O4 - HKLM\..\Run: C:\PROGRA~1\AVG\AVG8\avgtray.exe

O4 - HKLM\..\Run: “C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe”

O4 - HKLM\..\Run: KHALMNPR.EXE

O4 - HKCU\..\Run: C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-18\..\Run: C:\WINDOWS\System32\CTFMON.EXE (User ‘SYSTEM’)

O4 - HKUS\.DEFAULT\..\Run: C:\WINDOWS\System32\CTFMON.EXE (User ‘Default user’)

O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe

O4 - Global Startup: Spyder3Utility.lnk = C:\Program Files\Datacolor\Spyder3Elite\Utility\Spyder3Utility.exe

O8 - Extra context menu item: Converteren naar bestaand PDF-bestand - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Geselecteerde koppelingen converteren naar bestaand PDF-bestand - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

O8 - Extra context menu item: Koppelingdoel converteren naar Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Koppelingdoel converteren naar bestaand PDF-bestand - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Selectie converteren naar bestaand PDF-bestand - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O9 - Extra ‘Tools’ menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase8300.cab

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1181995042723

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1181997677062

O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll

O20 - AppInit_DLLs: avgrsstx.dll

O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe

O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe

O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe

O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe

O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe

O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

–

End of file - 7175 bytes

Allemaal gedaan.

Hierbij de nieuwe log

Rikje

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 1:58:51, on 20-12-2008

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16762)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe

C:\WINDOWS\system32\spoolsv.exe

C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\WINDOWS\system32\CTsvcCDA.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Wanadoo\NL\Mnu\igomnu.exe

C:\WINDOWS\system32\HPZipm12.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Java\jre6\bin\jusched.exe

C:\WINDOWS\system32\MsPMSPSv.exe

C:\PROGRA~1\AVG\AVG8\avgtray.exe

C:\PROGRA~1\AVG\AVG8\avgrsx.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Logitech\SetPoint\SetPoint.exe

C:\Program Files\Datacolor\Spyder3Elite\Utility\Spyder3Utility.exe

C:\PROGRA~1\AVG\AVG8\avgemc.exe

C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE

C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

C:\WINDOWS\explorer.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\WINDOWS\system32\spider.exe

C:\WINDOWS\system32\CF12153.exe

C:\WINDOWS\system32\cscript.exe