Laatste dagen wat problemen (uitspringen laptop en vinden van een infostealer)

• 

  Kevander

  21-02-2009 00:44

  Beste

  De laatste dagen, heb ik wat problemen met m'n computer.

  Ik krijg vaak meldingen dat mijn computer en risico loopt en ik krijg soms balonnetjes dat er een infostealer werd gedetecteerd en verwijdert, maar ik heb het al enkele keren opnieuw gekregen.

  En mijn computer slaat soms onverwachts uit, en dat moet ik m'n kabels en batterij loskoppelen, even wachten en terug herstarten.

  Iemand die iets ziet in m'n logje?

  Logfile of Trend Micro HijackThis v2.0.2

  Scan saved at 0:37:19, on 21/02/2009

  Platform: Windows XP SP3 (WinNT 5.01.2600)

  MSIE: Internet Explorer v7.00 (7.00.6000.16791)

  Boot mode: Normal

  Running processes:

  C:\WINDOWS\System32\smss.exe

  C:\WINDOWS\system32\winlogon.exe

  C:\WINDOWS\system32\services.exe

  C:\WINDOWS\system32\lsass.exe

  C:\WINDOWS\system32\svchost.exe

  C:\WINDOWS\System32\svchost.exe

  C:\WINDOWS\system32\svchost.exe

  C:\WINDOWS\Explorer.EXE

  C:\Program Files\Intel\Wireless\Bin\EvtEng.exe

  C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

  C:\WINDOWS\system32\spoolsv.exe

  C:\Program Files\Google\Update\GoogleUpdate.exe

  C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

  C:\Program Files\Bonjour\mDNSResponder.exe

  C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

  C:\Program Files\Java\jre6\bin\jqs.exe

  C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe

  C:\Program Files\Norton AntiVirus\Engine\16.2.0.7\ccSvcHst.exe

  C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe

  C:\Program Files\SMART Technologies\SMART Board Drivers\SMARTBoardService.exe

  C:\WINDOWS\system32\svchost.exe

  C:\Program Files\Sony\VAIO Event Service\VESMgr.exe

  C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe

  C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe

  C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe

  C:\Program Files\Norton AntiVirus\Engine\16.2.0.7\ccSvcHst.exe

  C:\Program Files\Apoint\Apoint.exe

  C:\WINDOWS\RTHDCPL.EXE

  C:\WINDOWS\system32\ICO.EXE

  C:\WINDOWS\system32\hkcmd.exe

  C:\WINDOWS\system32\igfxpers.exe

  C:\Program Files\Sony\VAIO Power Management\SPMgr.exe

  C:\Program Files\Sony\ISB Utility\ISBMgr.exe

  C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe

  C:\Program Files\Java\jre6\bin\jusched.exe

  C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

  C:\Program Files\iTunes\iTunesHelper.exe

  C:\WINDOWS\system32\ctfmon.exe

  C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe

  C:\Program Files\Nokia\Nokia PC Suite 7\PCSync2.exe

  C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe

  C:\Program Files\Apoint\Apntex.exe

  C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

  C:\Program Files\OpenOffice.org 3\program\soffice.exe

  C:\Program Files\OpenOffice.org 3\program\soffice.bin

  C:\Program Files\iPod\bin\iPodService.exe

  C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

  C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe

  C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe

  C:\Program Files\Common Files\Nokia\MPAPI\MPAPI3s.exe

  C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe

  C:\Program Files\Internet Explorer\iexplore.exe

  C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe

  C:\Documents and Settings\mijn map\Local Settings\Temporary Internet Files\Content.IE5\L9CWMV7L\HiJackThis.exe

  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

  R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://ui.skype.com/ui/0/2.0.0.73/nl/exitsurvey?

  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

  O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)

  O2 - BHO: SMART Notebook Download Plugin - {67BCF957-85FC-4036-8DC4-D4D80E00A77B} - C:\Program Files\SMART Technologies\Notebook Software\NotebookPlugin.dll

  O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton AntiVirus\Engine\16.2.0.7\IPSBHO.DLL

  O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

  O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll

  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll

  O2 - BHO: GoogleAFE - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\PROGRA~1\GOOGLE~1\GoogleAFE.dll

  O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

  O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

  O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)

  O4 - HKLM\..\Run: C:\Program Files\Apoint\Apoint.exe

  O4 - HKLM\..\Run: RTHDCPL.EXE

  O4 - HKLM\..\Run: ALCMTR.EXE

  O4 - HKLM\..\Run: C:\Program Files\Realtek\InstallShield\AzMixerSel.exe

  O4 - HKLM\..\Run: ICO.EXE

  O4 - HKLM\..\Run: C:\WINDOWS\system32\igfxtray.exe

  O4 - HKLM\..\Run: C:\WINDOWS\system32\hkcmd.exe

  O4 - HKLM\..\Run: C:\WINDOWS\system32\igfxpers.exe

  O4 - HKLM\..\Run: C:\Program Files\Sony\VAIO Power Management\SPMgr.exe

  O4 - HKLM\..\Run: C:\Program Files\Sony\ISB Utility\ISBMgr.exe

  O4 - HKLM\..\Run: C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exe

  O4 - HKLM\..\Run: “C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe” /Stationary

  O4 - HKLM\..\Run: “C:\Program Files\Java\jre6\bin\jusched.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe”

  O4 - HKLM\..\Run: “C:\Program Files\QuickTime\qttask.exe” -atboottime

  O4 - HKLM\..\Run: “C:\Program Files\iTunes\iTunesHelper.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe” -launchedbylogin

  O4 - HKCU\..\Run: C:\WINDOWS\system32\ctfmon.exe

  O4 - HKCU\..\Run: “C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe” /background

  O4 - HKCU\..\Run: “C:\Program Files\Nokia\Nokia PC Suite 7\PCSync2.exe” /NoDialog

  O4 - HKCU\..\Run: “C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe” -onlytray

  O4 - HKUS\S-1-5-19\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘Lokale service’)

  O4 - HKUS\S-1-5-20\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘Netwerkservice’)

  O4 - HKUS\S-1-5-18\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘SYSTEM’)

  O4 - HKUS\.DEFAULT\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘Default user’)

  O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

  O4 - Startup: OpenOffice.org 3.0 .lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe

  O4 - Global Startup: SMART Board Tools.lnk = C:\Program Files\SMART Technologies\SMART Board Drivers\SMARTBoardTools.exe

  O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000

  O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll

  O9 - Extra ‘Tools’ menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll

  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL

  O9 - Extra button: Unibet Poker - {C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - C:\Microgaming\Poker\UnibetpokerMPP\MPPoker.exe

  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

  O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

  O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

  O14 - IERESET.INF: START_PAGE_URL=http://www.club-vaio.com/en/

  O15 - Trusted Zone: *.sony-europe.com

  O15 - Trusted Zone: *.sonystyle-europe.com

  O15 - Trusted Zone: *.vaio-link.com

  O16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} (UploadListView Class) - http://picasaweb.google.com/s/v/42.20/uploader2.cab

  O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab

  O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab

  O16 - DPF: {6989C944-3529-4DA8-8C60-187E95F580E2} (SecureSession Class) - http://leeum.samsungfoundation.org/book/include/SecuiJoinsIE.cab

  O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://virusscanner.telenet.be/fscax.cab

  O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

  O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/mcfscan/2,2,0,5438/mcfscan.cab

  O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

  O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe

  O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

  O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

  O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe

  O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

  O23 - Service: Google Update Service (gupdate1c98df4e8fa6852) (gupdate1c98df4e8fa6852) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

  O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

  O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\Image Converter 2\IcVzMon.exe

  O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

  O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

  O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe

  O23 - Service: Norton AntiVirus - Symantec Corporation - C:\Program Files\Norton AntiVirus\Engine\16.2.0.7\ccSvcHst.exe

  O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe

  O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe

  O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

  O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

  O23 - Service: SMART Board-service (SMART Board Service) - SMART Technologies - C:\Program Files\SMART Technologies\SMART Board Drivers\SMARTBoardService.exe

  O23 - Service: SMART SNMP Agent Service - SMART Technologies ULC - C:\Program Files\SMART Technologies\SMART Board Drivers\SMARTSNMPAgent.exe

  O23 - Service: SMART-webserver (SMART Web Server) - Unknown owner - C:\Program Files\SMART Technologies\SMART Board Drivers\WebServer.exe

  O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe

  O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe

  O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe

  O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe

  O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe

  O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe

  O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe

  O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe

  O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe

  O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe

  O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe

  –

  End of file - 14392 bytes

  Rapporteren
• 

  Huib

  21-02-2009 01:11

  Hoi Kevander,

  Start Hijackthis op en kies voor ‘Do a system scan only’. en vink de volgende regels aan:

  O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)

  O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)

  Sluit alle vensters, behalve HijackThis en klik op fix checked

  Download Combofix naar je Bureaublad.

  http://download.bleepingcomputer.com/sUBs/ComboFix.exe

  Dubbelklik Combofix.exe

  Volg de instructies, accepteer de disclaimer door 1 (continue) te typen gevolgd door een ENTER.

  Tijdens het runnen van de fix, NIET in het venster klikken, want dan zal je pc gaan “hangen”.

  NB Indien tijdens tijdens het gebruik van Combofix een melding komt van je Antivirus- of een andere realtime scanner.

  Schakel deze scanner dan uit en download Combofix opnieuw.

  Sommige scanners zien onderdelen die Combofix gebruikt als verdacht en kunnen deze blokkeren of verwijderen!

  Hierdoor kan combofix niet naar behoren functioneren.

  Wanneer de fix voltooid is en na herstart, zal de log combofix.txt openen.

  Plaats deze log in je volgende post, samen met een nieuw HijackThis logje.

  Succes,

  Huib:)

  Rapporteren
• 

  Kevander

  23-02-2009 01:12

  Hierbij mijn logs

  Ik zou nu graag terug Combofix verwijderen van m'n pc. Kan dit kwaad? Hoe doe ik dat op de beste manier?

  —

  ComboFix 09-02-21.01 - Naam 2009-02-23 0:58:25.1 - NTFSx86

  Microsoft Windows XP Home Edition 5.1.2600.3.1252.31.1043.18.1014.447

  Gestart vanuit: c:\documents and settings\Naam\Bureaublad\ComboFix.exe

  AV: Norton AntiVirus *On-access scanning enabled* (Updated)

  * Nieuw herstelpunt werd aangemaakt

  .

  (((((((((((((((((((( Bestanden Gemaakt van 2009-01-22 to 2009-02-22 ))))))))))))))))))))))))))))))

  .

  2009-02-23 00:42 . 2009-02-23 00:42 d——– c:\program files\Trend Micro

  2009-02-20 17:13 . 2009-02-20 17:13 d——– C:\fsaua.data

  2009-02-16 19:50 . 2009-02-16 19:47 410,984 –a—— c:\windows\system32\deploytk.dll

  2009-02-13 16:07 . 2009-02-13 16:10 d——– c:\program files\Ceebot4

  2009-02-08 01:54 . 2009-02-17 16:26 268 –ah—– C:\sqmdata19.sqm

  2009-02-08 01:54 . 2009-02-17 16:26 244 –ah—– C:\sqmnoopt19.sqm

  2009-02-07 13:04 . 2009-02-17 15:58 268 –ah—– C:\sqmdata18.sqm

  2009-02-07 13:04 . 2009-02-17 15:58 244 –ah—– C:\sqmnoopt18.sqm

  2009-02-07 01:22 . 2009-02-17 10:28 268 –ah—– C:\sqmdata17.sqm

  2009-02-07 01:22 . 2009-02-17 10:28 244 –ah—– C:\sqmnoopt17.sqm

  2009-02-06 17:50 . 2009-02-16 22:58 268 –ah—– C:\sqmdata16.sqm

  2009-02-06 17:50 . 2009-02-16 22:58 244 –ah—– C:\sqmnoopt16.sqm

  2009-02-05 22:07 . 2009-02-15 23:08 268 –ah—– C:\sqmdata15.sqm

  2009-02-05 22:07 . 2009-02-15 23:08 244 –ah—– C:\sqmnoopt15.sqm

  2009-02-05 00:25 . 2009-02-15 00:52 268 –ah—– C:\sqmdata14.sqm

  2009-02-05 00:25 . 2009-02-15 00:52 244 –ah—– C:\sqmnoopt14.sqm

  2009-02-01 19:11 . 2009-02-01 19:11 d——– c:\program files\MindJET

  .

  ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

  .

  2009-02-22 11:39 ——— d—–w c:\documents and settings\Naam\Application Data\FileZilla

  2009-02-21 23:48 ——— d—–w c:\documents and settings\All Users\Application Data\Google Updater

  2009-02-20 10:29 ——— d—–w c:\documents and settings\Naam\Application Data\U3

  2009-02-16 18:47 ——— d—–w c:\program files\Java

  2009-02-13 16:05 ——— d—–w c:\program files\Google

  2009-02-11 23:31 ——— d—–w c:\documents and settings\All Users\Application Data\Microsoft Help

  2009-02-10 14:00 ——— d—–w c:\documents and settings\Naam\Application Data\Microgaming

  2009-01-06 20:35 ——— d—–w c:\program files\StruktoGraaf

  2008-12-22 13:28 ——— d—–w c:\documents and settings\Naam\Application Data\LimeWire

  2008-12-20 23:03 826,368 —-a-w c:\windows\system32\wininet.dll

  2008-12-06 14:09 60,808 —-a-w c:\windows\system32\S32EVNT1.DLL

  2008-10-21 20:30 32,768 –sha-w c:\windows\system32\config\systemprofile\Local Settings\Geschiedenis\History.IE5\MSHist012008102120081022\index.dat

  .

  ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

  .

  .

  *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

  REGEDIT4

  “CTFMON.EXE”=“c:\windows\system32\ctfmon.exe”

  “MsnMsgr”=“c:\program files\Windows Live\Messenger\MsnMsgr.Exe”

  “Nokia.PCSync”=“c:\program files\Nokia\Nokia PC Suite 7\PCSync2.exe”

  “PC Suite Tray”=“c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe”

  “Apoint”=“c:\program files\Apoint\Apoint.exe”

  “AzMixerSel”=“c:\program files\Realtek\InstallShield\AzMixerSel.exe”

  “igfxtray”=“c:\windows\system32\igfxtray.exe”

  “igfxhkcmd”=“c:\windows\system32\hkcmd.exe”

  “igfxpers”=“c:\windows\system32\igfxpers.exe”

  “SonyPowerCfg”=“c:\program files\Sony\VAIO Power Management\SPMgr.exe”

  “ISBMgr.exe”=“c:\program files\Sony\ISB Utility\ISBMgr.exe”

  “PDService.exe”=“c:\program files\Utimaco\SafeGuard PrivateDisk\pdservice.exe”

  “VAIO Update 3”=“c:\program files\Sony\VAIO Update 3\VAIOUpdt.exe”

  “SunJavaUpdateSched”=“c:\program files\Java\jre6\bin\jusched.exe”

  “GrooveMonitor”=“c:\program files\Microsoft Office\Office12\GrooveMonitor.exe”

  “QuickTime Task”=“c:\program files\QuickTime\qttask.exe”

  “iTunesHelper”=“c:\program files\iTunes\iTunesHelper.exe”

  “AdobeCS4ServiceManager”=“c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe”

  “RTHDCPL”=“RTHDCPL.EXE”

  “Mouse Suite 98 Daemon”=“ICO.EXE”

  “CTFMON.EXE”=“c:\windows\system32\CTFMON.EXE”

  c:\documents and settings\Naam\Menu Start\Programma's\Opstarten\

  OneNote 2007 Schermopname en Snel starten.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE

  OpenOffice.org 3.0 .lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe

  c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\

  SMART Board Tools.lnk - c:\program files\SMART Technologies\SMART Board Drivers\SMARTBoardTools.exe

  2005-05-20 17:42 73728 c:\windows\system32\VESWinlogon.dll

  “VIDC.dvsd”= c:\progra~1\COMMON~1\SONYSH~1\VideoLib\sonydv.dll

  “DisableMonitoring”=dword:00000001

  “DisableMonitoring”=dword:00000001

  “DisableMonitoring”=dword:00000001

  “%windir%\\system32\\sessmgr.exe”=

  “%windir%\\Network Diagnostic\\xpnetdiag.exe”=

  “c:\\Program Files\\LimeWire\\LimeWire.exe”=

  “c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE”=

  “c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE”=

  “c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE”=

  “c:\\Program Files\\Bonjour\\mDNSResponder.exe”=

  “c:\\Program Files\\iTunes\\iTunes.exe”=

  “c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe”=

  “c:\\Program Files\\Windows Live\\Messenger\\livecall.exe”=

  “c:\\Program Files\\SMART Technologies\\SMART Board Drivers\\SMARTSNMPAgent.exe”=

  “c:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe”=

  “5353:TCP”= 5353:TCP:Adobe CSI CS4

  R0 SymEFA;Symantec Extended File Attributes;\SystemRoot\\SystemRoot\System32\Drivers\NAV\1002000.007\SYMEFA.SYS –> \SystemRoot\\SystemRoot\System32\Drivers\NAV\1002000.007\SYMEFA.SYS

  R1 BHDrvx86;Symantec Heuristics Driver;c:\windows\system32\drivers\NAV\1002000.007\BHDrvx86.sys

  R1 ccHP;Symantec Hash Provider;c:\windows\system32\drivers\NAV\1002000.007\cchpx86.sys

  R1 IDSxpx86;IDSxpx86;c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090212.003\IDSxpx86.sys

  R1 PrivateDisk;PrivateDisk;c:\windows\system32\drivers\privatediskm.sys

  R2 MSSQL$VAIO_VEDB;MSSQL$VAIO_VEDB;c:\program files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe -sVAIO_VEDB –> c:\program files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe -sVAIO_VEDB

  R2 Norton AntiVirus;Norton AntiVirus;c:\program files\Norton AntiVirus\Engine\16.2.0.7\ccSvcHst.exe

  R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys

  S2 gupdate1c98df4e8fa6852;Google Update Service (gupdate1c98df4e8fa6852);c:\program files\Google\Update\GoogleUpdate.exe

  S3 F-Secure Standalone Minifilter;F-Secure Standalone Minifilter;\??\c:\docume~1\KEVINV~1\LOCALS~1\Temp\OnlineScanner\Anti-Virus\fsgk.sys –> c:\docume~1\KEVINV~1\LOCALS~1\Temp\OnlineScanner\Anti-Virus\fsgk.sys

  S3 SMART SNMP Agent Service;SMART SNMP Agent Service;c:\program files\SMART Technologies\SMART Board Drivers\SMARTSNMPAgent.exe

  S3 SMART Web Server;SMART-webserver;c:\program files\SMART Technologies\SMART Board Drivers\WebServer.exe

  S3 SQLAgent$VAIO_VEDB;SQLAgent$VAIO_VEDB;c:\program files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlagent.EXE -i VAIO_VEDB –> c:\program files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlagent.EXE -i VAIO_VEDB

  \Shell\AutoRun\command - G:\LaunchU3.exe -a

  \Shell\AutoRun\command - EXPLORER.EXE

  \Shell\explore\Command - EXPLORER.EXE

  \Shell\open\Command - EXPLORER.EXE

  \Shell\AutoRun\command - EXPLORER.EXE

  \Shell\explore\Command - EXPLORER.EXE

  \Shell\open\Command - EXPLORER.EXE

  \Shell\AutoRun\command - G:\LaunchU3.exe -a

  .

  Inhoud van de ‘Gedeelde Taken’ map

  2009-02-17 c:\windows\Tasks\AppleSoftwareUpdate.job

  - c:\program files\Apple Software Update\SoftwareUpdate.exe

  2009-02-20 c:\windows\Tasks\GoogleUpdateTaskMachine.job

  - c:\program files\Google\Update\GoogleUpdate.exe

  .

  - - - - ORPHANS VERWIJDERD - - - -

  HKCU-Run-AdobeBridge - (no file)

  .

  ——- Bijkomende Scan ——-

  .

  uStart Page = hxxp://www.google.be/

  uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8

  uInternet Connection Wizard,ShellNext = hxxp://ui.skype.com/ui/0/2.0.0.73/nl/exitsurvey?

  uInternet Settings,ProxyOverride = *.local

  IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000

  IE: {{C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - c:\microgaming\Poker\UnibetpokerMPP\MPPoker.exe

  Trusted Zone: sony-europe.com

  Trusted Zone: sonystyle-europe.com

  Trusted Zone: vaio-link.com

  DPF: {6989C944-3529-4DA8-8C60-187E95F580E2} - hxxp://leeum.samsungfoundation.org/book/include/SecuiJoinsIE.cab

  .

  **************************************************************************

  catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

  Rootkit scan 2009-02-23 01:02:13

  Windows 5.1.2600 Service Pack 3 NTFS

  scannen van verborgen processen …

  scannen van verborgen autostart items …

  scannen van verborgen bestanden …

  Scan succesvol afgerond

  verborgen bestanden: 0

  **************************************************************************

  “ImagePath”=“\”c:\program files\Norton AntiVirus\Engine\16.2.0.7\ccSvcHst.exe\“ /s \”Norton AntiVirus\“ /m \”c:\program files\Norton AntiVirus\Engine\16.2.0.7\diMaster.dll\“ /prefetch:1”

  .

  ——————— DLLs Geladen Onder Lopende Processen ———————

  - - - - - - - > ‘winlogon.exe’(1276)

  c:\windows\system32\VESWinlogon.dll

  c:\program files\Common Files\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll

  .

  Voltooingstijd: 2009-02-23 1:04:53

  ComboFix-quarantined-files.txt 2009-02-23 00:04:18

  Pre-Run: 12.264.955.904 bytes beschikbaar

  Post-Run: 14,965,346,304 bytes beschikbaar

  WindowsXP-KB310994-SP2-Home-BootDisk-NLD.exe

  timeout=2

  default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS

  c:\cmdcons\BOOTSECT.DAT=“Microsoft Windows Recovery Console” /cmdcons

  multi(0)disk(0)rdisk(0)partition(2)\WINDOWS=“Microsoft Windows XP Home Edition” /noexecute=optin /fastdetect

  177 — E O F — 2009-02-11 23:37:04

  —

  Logfile of Trend Micro HijackThis v2.0.2

  Scan saved at 1:11:01, on 23/02/2009

  Platform: Windows XP SP3 (WinNT 5.01.2600)

  MSIE: Internet Explorer v7.00 (7.00.6000.16791)

  Boot mode: Normal

  Running processes:

  C:\WINDOWS\System32\smss.exe

  C:\WINDOWS\system32\winlogon.exe

  C:\WINDOWS\system32\services.exe

  C:\WINDOWS\system32\lsass.exe

  C:\WINDOWS\system32\svchost.exe

  C:\WINDOWS\System32\svchost.exe

  C:\WINDOWS\system32\svchost.exe

  C:\Program Files\Intel\Wireless\Bin\EvtEng.exe

  C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

  C:\WINDOWS\system32\spoolsv.exe

  C:\Program Files\Google\Update\GoogleUpdate.exe

  C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

  C:\Program Files\Bonjour\mDNSResponder.exe

  C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

  C:\Program Files\Java\jre6\bin\jqs.exe

  C:\Program Files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe

  C:\Program Files\Norton AntiVirus\Engine\16.2.0.7\ccSvcHst.exe

  C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe

  C:\Program Files\SMART Technologies\SMART Board Drivers\SMARTBoardService.exe

  C:\WINDOWS\system32\svchost.exe

  C:\Program Files\Sony\VAIO Event Service\VESMgr.exe

  C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe

  C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe

  C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe

  C:\Program Files\Norton AntiVirus\Engine\16.2.0.7\ccSvcHst.exe

  C:\Program Files\Apoint\Apoint.exe

  C:\WINDOWS\RTHDCPL.EXE

  C:\WINDOWS\system32\ICO.EXE

  C:\WINDOWS\system32\hkcmd.exe

  C:\WINDOWS\system32\igfxpers.exe

  C:\Program Files\Sony\VAIO Power Management\SPMgr.exe

  C:\Program Files\Sony\ISB Utility\ISBMgr.exe

  C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe

  C:\Program Files\Java\jre6\bin\jusched.exe

  C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

  C:\Program Files\iTunes\iTunesHelper.exe

  C:\WINDOWS\system32\ctfmon.exe

  C:\Program Files\Nokia\Nokia PC Suite 7\PCSync2.exe

  C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe

  C:\Program Files\Apoint\Apntex.exe

  C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

  C:\Program Files\OpenOffice.org 3\program\soffice.exe

  C:\Program Files\OpenOffice.org 3\program\soffice.bin

  C:\Program Files\iPod\bin\iPodService.exe

  C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

  C:\Program Files\Common Files\Nokia\MPAPI\MPAPI3s.exe

  C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe

  C:\WINDOWS\system32\igfxsrvc.exe

  C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe

  C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe

  C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe

  C:\WINDOWS\explorer.exe

  C:\WINDOWS\system32\notepad.exe

  C:\Program Files\Internet Explorer\iexplore.exe

  C:\Program Files\Microsoft Office\Office12\WINWORD.EXE

  C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

  R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://ui.skype.com/ui/0/2.0.0.73/nl/exitsurvey?

  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

  O2 - BHO: SMART Notebook Download Plugin - {67BCF957-85FC-4036-8DC4-D4D80E00A77B} - C:\Program Files\SMART Technologies\Notebook Software\NotebookPlugin.dll

  O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton AntiVirus\Engine\16.2.0.7\IPSBHO.DLL

  O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

  O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll

  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll

  O2 - BHO: GoogleAFE - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\PROGRA~1\GOOGLE~1\GoogleAFE.dll

  O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

  O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

  O4 - HKLM\..\Run: C:\Program Files\Apoint\Apoint.exe

  O4 - HKLM\..\Run: RTHDCPL.EXE

  O4 - HKLM\..\Run: C:\Program Files\Realtek\InstallShield\AzMixerSel.exe

  O4 - HKLM\..\Run: ICO.EXE

  O4 - HKLM\..\Run: C:\WINDOWS\system32\igfxtray.exe

  O4 - HKLM\..\Run: C:\WINDOWS\system32\hkcmd.exe

  O4 - HKLM\..\Run: C:\WINDOWS\system32\igfxpers.exe

  O4 - HKLM\..\Run: C:\Program Files\Sony\VAIO Power Management\SPMgr.exe

  O4 - HKLM\..\Run: C:\Program Files\Sony\ISB Utility\ISBMgr.exe

  O4 - HKLM\..\Run: C:\Program Files\Utimaco\SafeGuard PrivateDisk\pdservice.exe

  O4 - HKLM\..\Run: “C:\Program Files\Sony\VAIO Update 3\VAIOUpdt.exe” /Stationary

  O4 - HKLM\..\Run: “C:\Program Files\Java\jre6\bin\jusched.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe”

  O4 - HKLM\..\Run: “C:\Program Files\QuickTime\qttask.exe” -atboottime

  O4 - HKLM\..\Run: “C:\Program Files\iTunes\iTunesHelper.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe” -launchedbylogin

  O4 - HKCU\..\Run: C:\WINDOWS\system32\ctfmon.exe

  O4 - HKCU\..\Run: “C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe” /background

  O4 - HKCU\..\Run: “C:\Program Files\Nokia\Nokia PC Suite 7\PCSync2.exe” /NoDialog

  O4 - HKCU\..\Run: “C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe” -onlytray

  O4 - HKUS\S-1-5-18\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘SYSTEM’)

  O4 - HKUS\.DEFAULT\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User ‘Default user’)

  O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

  O4 - Startup: OpenOffice.org 3.0 .lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe

  O4 - Global Startup: SMART Board Tools.lnk = C:\Program Files\SMART Technologies\SMART Board Drivers\SMARTBoardTools.exe

  O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000

  O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll

  O9 - Extra ‘Tools’ menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll

  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL

  O9 - Extra button: Unibet Poker - {C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - C:\Microgaming\Poker\UnibetpokerMPP\MPPoker.exe

  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

  O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

  O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

  O14 - IERESET.INF: START_PAGE_URL=http://www.club-vaio.com/en/

  O15 - Trusted Zone: *.sony-europe.com

  O15 - Trusted Zone: *.sonystyle-europe.com

  O15 - Trusted Zone: *.vaio-link.com

  O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab

  O16 - DPF: {474F00F5-3853-492C-AC3A-476512BBC336} (UploadListView Class) - http://picasaweb.google.com/s/v/42.20/uploader2.cab

  O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab

  O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab

  O16 - DPF: {6989C944-3529-4DA8-8C60-187E95F580E2} (SecureSession Class) - http://leeum.samsungfoundation.org/book/include/SecuiJoinsIE.cab

  O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://virusscanner.telenet.be/fscax.cab

  O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

  O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/mcfscan/2,2,0,5438/mcfscan.cab

  O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

  O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe

  O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

  O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

  O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe

  O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

  O23 - Service: Google Update Service (gupdate1c98df4e8fa6852) (gupdate1c98df4e8fa6852) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

  O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

  O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\Image Converter 2\IcVzMon.exe

  O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

  O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

  O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe

  O23 - Service: Norton AntiVirus - Symantec Corporation - C:\Program Files\Norton AntiVirus\Engine\16.2.0.7\ccSvcHst.exe

  O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe

  O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe

  O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

  O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

  O23 - Service: SMART Board-service (SMART Board Service) - SMART Technologies - C:\Program Files\SMART Technologies\SMART Board Drivers\SMARTBoardService.exe

  O23 - Service: SMART SNMP Agent Service - SMART Technologies ULC - C:\Program Files\SMART Technologies\SMART Board Drivers\SMARTSNMPAgent.exe

  O23 - Service: SMART-webserver (SMART Web Server) - Unknown owner - C:\Program Files\SMART Technologies\SMART Board Drivers\WebServer.exe

  O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe

  O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe

  O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe

  O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe

  O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe

  O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe

  O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe

  O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe

  O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe

  O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe

  O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe

  –

  End of file - 14177 bytes

  Rapporteren