Vundo

• 

  Bram Bergsma

  28-01-2009 22:49

  Hallo,

  volgens mij heb ik het vundo virus (trojan) op mijn pc.

  Nu heb ik alle stappen doorlopen en is dit mijn logfile HTJ.

  Is alles nu weer in orde?

  Logfile of Trend Micro HijackThis v2.0.2

  Scan saved at 22:46:30, on 28-1-2009

  Platform: Windows XP SP2 (WinNT 5.01.2600)

  MSIE: Internet Explorer v7.00 (7.00.5730.0013)

  Boot mode: Normal

  Running processes:

  C:\WINDOWS\System32\smss.exe

  C:\WINDOWS\system32\winlogon.exe

  C:\WINDOWS\system32\services.exe

  C:\WINDOWS\system32\lsass.exe

  C:\WINDOWS\system32\svchost.exe

  C:\WINDOWS\System32\svchost.exe

  C:\WINDOWS\system32\svchost.exe

  C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

  C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe

  C:\Program Files\Alwil Software\Avast4\ashServ.exe

  C:\WINDOWS\Explorer.EXE

  C:\Program Files\Java\jre6\bin\jusched.exe

  C:\Program Files\QuickTime\qttask.exe

  C:\WINDOWS\system32\LVCOMSX.EXE

  C:\Program Files\DAEMON Tools\daemon.exe

  E:\programma's\Quickcam\LogiTray.exe

  C:\Program Files\McAfee.com\Agent\mcagent.exe

  C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

  C:\WINDOWS\system32\RUNDLL32.EXE

  C:\WINDOWS\system32\Rundll32.exe

  C:\WINDOWS\system32\spoolsv.exe

  C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe

  C:\Program Files\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe

  C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

  C:\WINDOWS\system32\ctfmon.exe

  E:\programma's\TomTom HOME 2\HOMERunner.exe

  C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

  C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

  C:\Program Files\SEC\MagicTune3.6_Client_pivot\GammaTray.exe

  E:\programma's\Quickcam\FxSvr2.exe

  C:\WINDOWS\system32\CTsvcCDA.exe

  C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

  C:\Program Files\Logitech\SetPoint\SetPoint.exe

  C:\Program Files\Java\jre6\bin\jqs.exe

  C:\Program Files\NETGEAR\WPN111\wpn111.exe

  C:\Program Files\VIA\RAID\raid_tool.exe

  C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe

  C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe

  c:\program files\common files\mcafee\mna\mcnasvc.exe

  C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE

  C:\Program Files\McAfee\MPF\MPFSrv.exe

  C:\WINDOWS\system32\nvsvc32.exe

  C:\WINDOWS\system32\PSIService.exe

  C:\WINDOWS\System32\svchost.exe

  C:\WINDOWS\System32\MsPMSPSv.exe

  C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

  C:\WINDOWS\system32\wscntfy.exe

  C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

  C:\WINDOWS\system32\wuauclt.exe

  C:\WINDOWS\System32\svchost.exe

  C:\Program Files\Internet Explorer\iexplore.exe

  C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe

  C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe

  C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.nl/

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

  O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

  O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

  O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll

  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

  O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll

  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll

  O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll

  O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

  O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

  O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)

  O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll

  O4 - HKLM\..\Run: C:\WINDOWS\system32\\NeroCheck.exe

  O4 - HKLM\..\Run: “C:\Program Files\Java\jre6\bin\jusched.exe”

  O4 - HKLM\..\Run: “C:\Program Files\QuickTime\qttask.exe” -atboottime

  O4 - HKLM\..\Run: KHALMNPR.EXE

  O4 - HKLM\..\Run: C:\WINDOWS\system32\LVCOMSX.EXE

  O4 - HKLM\..\Run: “C:\Program Files\DAEMON Tools\daemon.exe” -lang 1033

  O4 - HKLM\..\Run: E:\programma's\Quickcam\ISStart.exe

  O4 - HKLM\..\Run: E:\programma's\Quickcam\LogiTray.exe

  O4 - HKLM\..\Run: C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey

  O4 - HKLM\..\Run: C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe /startup

  O4 - HKLM\..\Run: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

  O4 - HKLM\..\Run: RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

  O4 - HKLM\..\Run: nwiz.exe /install

  O4 - HKLM\..\Run: RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

  O4 - HKLM\..\Run: Rundll32 P17.dll,P17Helper

  O4 - HKLM\..\Run: C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe

  O4 - HKLM\..\Run: “C:\Program Files\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe” -startup

  O4 - HKCU\..\Run: C:\PROGRA~1\McAfee\SPAMKI~1\MSKAgent.exe

  O4 - HKCU\..\Run: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

  O4 - HKCU\..\Run: “C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe” AcRdB7_0_8 -reboot 1

  O4 - HKCU\..\Run: E:\programma's\Quickcam\ManifestEngine.exe boot

  O4 - HKCU\..\Run: C:\WINDOWS\system32\ctfmon.exe

  O4 - HKCU\..\Run: “E:\programma's\TomTom HOME 2\HOMERunner.exe”

  O4 - HKCU\..\Run: C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

  O4 - HKCU\..\Run: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

  O4 - HKUS\S-1-5-19\..\Run: C:\WINDOWS\System32\CTFMON.EXE (User ‘Lokale service’)

  O4 - HKUS\S-1-5-20\..\Run: C:\WINDOWS\System32\CTFMON.EXE (User ‘Netwerkservice’)

  O4 - HKUS\S-1-5-18\..\Run: C:\WINDOWS\System32\CTFMON.EXE (User ‘SYSTEM’)

  O4 - HKUS\.DEFAULT\..\Run: C:\WINDOWS\System32\CTFMON.EXE (User ‘Default user’)

  O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

  O4 - Global Startup: Color Calibration.lnk = ?

  O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe

  O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe

  O4 - Global Startup: MagicTune3.6.lnk = ?

  O4 - Global Startup: NETGEAR WPN111 Smart Wizard.lnk = ?

  O4 - Global Startup: VIA RAID TOOL.lnk = C:\Program Files\VIA\RAID\raid_tool.exe

  O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

  O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

  O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - E:\programma's\PartyPoker\RunApp.exe (file missing)

  O9 - Extra ‘Tools’ menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - E:\programma's\PartyPoker\RunApp.exe (file missing)

  O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

  O9 - Extra ‘Tools’ menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

  O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

  O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/3.0.0.0/srl_bin/sysreqlab3.cab

  O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab

  O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab

  O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1229342166781

  O16 - DPF: {6C269571-C6D7-4818-BCA4-32A035E8C884} (Creative Software AutoUpdate) - http://www.creative.com/softwareupdate/su/ocx/15101/CTSUEng.cab

  O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1229342138203

  O16 - DPF: {D83C1BD1-DCBB-11D4-9425-0050BF33FA6E} (CycloScopeLite Control) - http://www.cyclomedia.nl/download/components/CycloScopeLite.cab

  O16 - DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} (Image Uploader Control) - http://cache.hyves-static.net/statics/Aurigma/ImageUploader4.cab

  O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/softwareupdate/su/ocx/15106/CTPID.cab

  O18 - Protocol: bw+0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw+0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw-0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw-0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw00 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw00s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw10 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw10s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw20 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw20s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw30 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw30s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw40 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw40s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw50 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw50s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw60 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw60s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw70 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw70s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw80 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw80s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw90 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bw90s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwa0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwa0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwb0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwb0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwc0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwc0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwd0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwd0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwe0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwe0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwf0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwf0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll

  O18 - Protocol: bwg0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwg0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwh0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwh0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwi0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwi0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwj0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwj0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwk0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwk0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwl0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwl0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwm0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwm0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwn0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwn0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwo0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwo0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwp0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwp0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwq0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwq0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwr0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwr0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bws0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bws0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwt0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwt0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwu0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwu0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwv0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwv0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bww0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bww0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwx0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwx0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwy0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwy0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwz0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: bwz0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O18 - Protocol: offline-8876480 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

  O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

  O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

  O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

  O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

  O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe

  O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

  O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

  O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe

  O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe

  O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe

  O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe

  O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe

  O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

  O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\Pacsptisvr.exe

  O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe

  O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

  O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\Sptisrv.exe

  –

  End of file - 24326 bytes

  Rapporteren
• 

  Piet

  28-01-2009 23:18

  verwijder even C:\Program Files\Logitech\Desktop Messenger

  Deze heeft de hik gekregen.

  Plaats dan nog even een nieuw logje

  Ook een logje van Mbam

  Rapporteren
• 

  Bram Bergsma

  29-01-2009 17:35

  Hoi Piet,

  alvast bedankt voor je reactie. Super!

  Heb de map die jij noemt verwijdert. maar heb nog steeds problemen.

  Dit is de nieuwe log.

  Het probleem is, ik heb een schijf verdeeld over 4 schijven.

  Maar via deze computer kan ik er niet in. Zegt dat hij resycled.nltdr.com niet kan vinden bijv. Op google zie ik dat dit een worm is. Nu zag ik deze site maar volgens mij is dat niet helemaal pluis. Zijn er gratis programma's om dit te verhelpen?

  http://www.spywaredoctorhelp.com/remove-cresycledntldrcom-is-not-a-valid-win32-application/

  vwLogfile of Trend Micro HijackThis v2.0.2

  Scan saved at 17:30:42, on 29-1-2009

  Platform: Windows XP SP2 (WinNT 5.01.2600)

  MSIE: Internet Explorer v7.00 (7.00.5730.0013)

  Boot mode: Normal

  Running processes:

  C:\WINDOWS\System32\smss.exe

  C:\WINDOWS\system32\csrss.exe

  C:\WINDOWS\system32\winlogon.exe

  C:\WINDOWS\system32\services.exe

  C:\WINDOWS\system32\lsass.exe

  C:\WINDOWS\system32\svchost.exe

  C:\WINDOWS\system32\svchost.exe

  C:\WINDOWS\System32\svchost.exe

  C:\WINDOWS\system32\svchost.exe

  C:\WINDOWS\System32\svchost.exe

  C:\WINDOWS\System32\svchost.exe

  C:\WINDOWS\Explorer.EXE

  C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

  C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe

  C:\Program Files\Alwil Software\Avast4\ashServ.exe

  C:\Program Files\Java\jre6\bin\jusched.exe

  C:\Program Files\QuickTime\qttask.exe

  C:\WINDOWS\system32\LVCOMSX.EXE

  C:\Program Files\DAEMON Tools\daemon.exe

  E:\programma's\Quickcam\LogiTray.exe

  C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

  C:\WINDOWS\system32\RUNDLL32.EXE

  C:\WINDOWS\system32\spoolsv.exe

  C:\WINDOWS\system32\Rundll32.exe

  C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe

  C:\Program Files\Spyware Doctor\pctsTray.exe

  C:\Program Files\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe

  C:\WINDOWS\system32\CTsvcCDA.exe

  C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

  C:\WINDOWS\system32\ctfmon.exe

  E:\programma's\TomTom HOME 2\HOMERunner.exe

  C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

  C:\Program Files\Java\jre6\bin\jqs.exe

  C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

  C:\Program Files\SEC\MagicTune3.6_Client_pivot\GammaTray.exe

  C:\WINDOWS\system32\nvsvc32.exe

  C:\WINDOWS\system32\PSIService.exe

  C:\Program Files\NETGEAR\WPN111\wpn111.exe

  C:\Program Files\VIA\RAID\raid_tool.exe

  C:\Program Files\Spyware Doctor\pctsAuxs.exe

  C:\Program Files\Spyware Doctor\pctsSvc.exe

  E:\programma's\Quickcam\FxSvr2.exe

  C:\WINDOWS\System32\svchost.exe

  C:\WINDOWS\System32\MsPMSPSv.exe

  C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

  C:\WINDOWS\System32\wbem\unsecapp.exe

  C:\WINDOWS\system32\wscntfy.exe

  C:\WINDOWS\System32\wbem\wmiprvse.exe

  C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

  C:\WINDOWS\System32\alg.exe

  C:\WINDOWS\System32\svchost.exe

  C:\Program Files\Winamp\winamp.exe

  C:\Program Files\Internet Explorer\iexplore.exe

  C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe

  C:\Program Files\BitLord\BitLord.exe

  C:\Program Files\Internet Explorer\iexplore.exe

  C:\DOCUME~1\Bram\LOCALS~1\Temp\bwgo0217db13.exe

  C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

  C:\WINDOWS\System32\wbem\wmiprvse.exe

  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.nl/

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

  O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

  O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

  O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll

  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

  O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll

  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll

  O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll

  O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

  O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

  O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)

  O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll

  O4 - HKLM\..\Run: C:\WINDOWS\system32\\NeroCheck.exe

  O4 - HKLM\..\Run: “C:\Program Files\Java\jre6\bin\jusched.exe”

  O4 - HKLM\..\Run: “C:\Program Files\QuickTime\qttask.exe” -atboottime

  O4 - HKLM\..\Run: KHALMNPR.EXE

  O4 - HKLM\..\Run: C:\WINDOWS\system32\LVCOMSX.EXE

  O4 - HKLM\..\Run: “C:\Program Files\DAEMON Tools\daemon.exe” -lang 1033

  O4 - HKLM\..\Run: E:\programma's\Quickcam\ISStart.exe

  O4 - HKLM\..\Run: E:\programma's\Quickcam\LogiTray.exe

  O4 - HKLM\..\Run: C:\Program Files\Nokia\Nokia Software Launcher\NSLauncher.exe /startup

  O4 - HKLM\..\Run: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

  O4 - HKLM\..\Run: RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

  O4 - HKLM\..\Run: nwiz.exe /install

  O4 - HKLM\..\Run: RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

  O4 - HKLM\..\Run: Rundll32 P17.dll,P17Helper

  O4 - HKLM\..\Run: C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe

  O4 - HKLM\..\Run: C:\Program Files\SpyNoMore\SNM.exe /startup

  O4 - HKLM\..\Run: “C:\Program Files\Spyware Doctor\pctsTray.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe” -startup

  O4 - HKCU\..\Run: C:\PROGRA~1\McAfee\SPAMKI~1\MSKAgent.exe

  O4 - HKCU\..\Run: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

  O4 - HKCU\..\Run: “C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe” AcRdB7_0_8 -reboot 1

  O4 - HKCU\..\Run: E:\programma's\Quickcam\ManifestEngine.exe boot

  O4 - HKCU\..\Run: C:\WINDOWS\system32\ctfmon.exe

  O4 - HKCU\..\Run: “E:\programma's\TomTom HOME 2\HOMERunner.exe”

  O4 - HKCU\..\Run: C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

  O4 - HKCU\..\Run: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

  O4 - HKUS\S-1-5-19\..\Run: C:\WINDOWS\System32\CTFMON.EXE (User ‘Lokale service’)

  O4 - HKUS\S-1-5-20\..\Run: C:\WINDOWS\System32\CTFMON.EXE (User ‘Netwerkservice’)

  O4 - HKUS\S-1-5-18\..\Run: C:\WINDOWS\System32\CTFMON.EXE (User ‘SYSTEM’)

  O4 - HKUS\.DEFAULT\..\Run: C:\WINDOWS\System32\CTFMON.EXE (User ‘Default user’)

  O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

  O4 - Global Startup: Color Calibration.lnk = ?

  O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe

  O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe

  O4 - Global Startup: MagicTune3.6.lnk = ?

  O4 - Global Startup: NETGEAR WPN111 Smart Wizard.lnk = ?

  O4 - Global Startup: VIA RAID TOOL.lnk = C:\Program Files\VIA\RAID\raid_tool.exe

  O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

  O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

  O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - E:\programma's\PartyPoker\RunApp.exe (file missing)

  O9 - Extra ‘Tools’ menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - E:\programma's\PartyPoker\RunApp.exe (file missing)

  O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

  O9 - Extra ‘Tools’ menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

  O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

  O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/3.0.0.0/srl_bin/sysreqlab3.cab

  O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab

  O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab

  O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1229342166781

  O16 - DPF: {6C269571-C6D7-4818-BCA4-32A035E8C884} (Creative Software AutoUpdate) - http://www.creative.com/softwareupdate/su/ocx/15101/CTSUEng.cab

  O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1229342138203

  O16 - DPF: {D83C1BD1-DCBB-11D4-9425-0050BF33FA6E} (CycloScopeLite Control) - http://www.cyclomedia.nl/download/components/CycloScopeLite.cab

  O16 - DPF: {EDFCB7CB-942C-4822-AF14-F0B687409848} (Image Uploader Control) - http://cache.hyves-static.net/statics/Aurigma/ImageUploader4.cab

  O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/softwareupdate/su/ocx/15106/CTPID.cab

  O18 - Protocol: bw+0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bw+0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bw-0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bw-0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bw00 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bw00s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bw10 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bw10s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bw20 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bw20s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bw30 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bw30s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bw40 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bw40s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bw50 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bw50s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bw60 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bw60s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bw70 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bw70s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bw80 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bw80s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bw90 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bw90s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwa0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwa0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwb0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwb0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwc0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwc0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwd0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwd0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwe0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwe0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwf0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwf0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwg0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwg0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwh0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwh0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwi0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwi0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwj0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwj0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwk0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwk0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwl0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwl0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwm0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwm0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwn0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwn0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwo0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwo0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwp0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwp0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwq0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwq0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwr0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwr0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bws0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bws0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwt0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwt0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwu0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwu0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwv0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwv0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bww0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bww0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwx0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwx0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwy0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwy0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwz0 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: bwz0s - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O18 - Protocol: offline-8876480 - {A7260040-C404-49AB-84B7-45F01492F88B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

  O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

  O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

  O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

  O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

  O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe

  O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

  O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

  O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe

  O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

  O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\Pacsptisvr.exe

  O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe

  O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe

  O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe

  O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

  O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\Sptisrv.exe

  –

  End of file - 25359 bytes

  Rapporteren