
sofianmaster
Lid-
Items
157 -
Registratiedatum
-
Laatst bezocht
Inhoudstype
Profielen
Forums
Store
Alles dat geplaatst werd door sofianmaster
-
[OPGELOST] Java probleem
sofianmaster reageerde op sofianmaster's topic in Archief Internet & Netwerk
Combofix werkt niet bij mij. Dank komt er die BAD_POOL_HEADER. -
[OPGELOST] Java probleem
sofianmaster reageerde op sofianmaster's topic in Archief Internet & Netwerk
Hetzelfde probleem -
[OPGELOST] Java probleem
sofianmaster reageerde op sofianmaster's topic in Archief Internet & Netwerk
Ccleaner heeft niet geholpen. Hier het Hijackthis logje Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:06:31, on 16/09/2009 Platform: Windows Vista (WinNT 6.00.1904) MSIE: Internet Explorer v7.00 (7.00.6000.16386) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Program Files\DellTPad\Apoint.exe C:\Windows\OEM02Mon.exe C:\Program Files\Dell Support Center\bin\sprtcmd.exe C:\Program Files\Dell\MFP_DELL\deDvcStatus.exe C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exe C:\Program Files\Dell\MediaDirect\PCMService.exe C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe C:\Program Files\Alwil Software\Avast4\ashDisp.exe C:\Windows\System32\igfxtray.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Program Files\Folder Guard Pro\FGKey.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\Windows\system32\igfxsrvc.exe C:\Program Files\VoipBuster.com\VoipBuster\voipbuster.exe C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe C:\Program Files\Digital Line Detect\DLG.exe C:\Program Files\Dell\QuickSet\quickset.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe C:\Program Files\DellTPad\ApMsgFwd.exe C:\Program Files\DellTPad\Apntex.exe C:\Windows\system32\conime.exe C:\Program Files\DellTPad\HidFind.exe C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Windows\system32\SearchFilterHost.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.games-fusion.net/ O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - (no file) O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe O4 - HKLM\..\Run: [OEM02Mon.exe] C:\Windows\OEM02Mon.exe O4 - HKLM\..\Run: [DELL Webcam Manager] "C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe" /s O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter O4 - HKLM\..\Run: [DeStatusMon] "C:\Program Files\Dell\MFP_DELL\deDvcStatus.exe" dvcStatusMinimize O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe O4 - HKLM\..\Run: [iAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE" O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe" O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe" O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM\..\Run: [sigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe O4 - HKLM\..\Run: [FG_Monitor] C:\Program Files\Folder Guard Pro\FGKey.exe /Start O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start O4 - HKCU\..\Run: [VoipBuster] "C:\Program Files\VoipBuster.com\VoipBuster\voipbuster.exe" -nosplash -minimized O4 - Global Startup: BTTray.lnk = ? O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe O4 - Global Startup: QuickSet.lnk = C:\Program Files\Dell\QuickSet\quickset.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Formulieren opslaan - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O8 - Extra context menu item: Invul Formulieren - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O8 - Extra context menu item: Menu aanpassen - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html O8 - Extra context menu item: RoboForm Werkbalk - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: Formulier Invullen - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O9 - Extra 'Tools' menuitem: Invul Formulieren - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O9 - Extra button: Opslaan - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O9 - Extra 'Tools' menuitem: Formulieren opslaan - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O9 - Extra 'Tools' menuitem: RoboForm Werkbalk - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O13 - Gopher Prefix: O15 - Trusted IP range: http://192.168.0.1 O15 - ESC Trusted IP range: http://192.168.0.1 O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1209149147425 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\system32\aestsrv.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Dell AIO Center Service (deMntrService) - Dell - C:\Program Files\Dell\MFP_DELL\deMntrService.exe O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing) O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\Windows\system32\sfrem01.exe O23 - Service: SupportSoft Sprocket Service (belgacom) (sprtsvc_belgacom) - SupportSoft, Inc. - C:\Program Files\Belgacom\bin\sprtsvc.exe O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\STacSV.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe O23 - Service: SupportSoft RemoteAssist - SupportSoft, Inc. - C:\Program Files\Common Files\Supportsoft\bin\ssrc.exe O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe -- End of file - 11449 bytes -
[OPGELOST] Java probleem
sofianmaster reageerde op sofianmaster's topic in Archief Internet & Netwerk
ja, maar dat lukt ook niet -
Goeiendag, Ik wou java terug installeren, maar ik heb zo dom gehandeld dat ik de map in Program Files heb verwijder i.p.v verwijderen van het configuratiescherm te doen. Nou wou ik java terug downloaden en installeren maar de installer zegt dat er al een versie van java geinstalleerd is. Wat moet ik nu doen?
-
[OPGELOST] Computer traag
sofianmaster reageerde op sofianmaster's topic in Archief Bestrijding malware & virussen
Wanneer ik het laat scannen en wanneer er 60 % klaar is komen er 3 dezelfde errors. Hulpprogramma Find String(QGREP) werkt niet meer. Hij blijft scannen bij HKCU/Software/XYZ en wanneer hij verder scant na de errors sluit FindyKill zich ineens terwijl hij niet eens klaar is. Ik denk dat ik alle hoop ga opgeven en mijn computer ga weggooien:pcguru: -
[OPGELOST] Computer traag
sofianmaster reageerde op sofianmaster's topic in Archief Bestrijding malware & virussen
Nou ik heb hem 2 uur laten scannen. Maar zelfs 5 % heeft hij nog niet gescand. Is er niets anders? -
[OPGELOST] Computer traag
sofianmaster reageerde op sofianmaster's topic in Archief Bestrijding malware & virussen
Je uitleg is niet hetzelfde zoals het programma. Het is wel Dr. Web maar de naam is launch en ik wil niets verkeerds doen -
[OPGELOST] Computer traag
sofianmaster reageerde op sofianmaster's topic in Archief Bestrijding malware & virussen
Nou zelfs nadat ik de naam van Combofix heb veranderd komt er nog altijd die BSOD Is er geen ander progje zoals combofix dat ik zou kunnen gebruiken? -
[OPGELOST] Computer traag
sofianmaster reageerde op sofianmaster's topic in Archief Bestrijding malware & virussen
Goed, ik zal het gelijk is proberen. Over 10 minuten stuur ik je het antwoord -
[OPGELOST] Computer traag
sofianmaster reageerde op sofianmaster's topic in Archief Bestrijding malware & virussen
Ik krijg het alleen bij ComboFix. Ik zal nog is proberen hé. -
[OPGELOST] Computer traag
sofianmaster reageerde op sofianmaster's topic in Archief Bestrijding malware & virussen
Nee, het bestand Combofix.txt kon ik ook niet vinden. En denk je dat dit een gevaarlijke error is? -
[OPGELOST] Computer traag
sofianmaster reageerde op sofianmaster's topic in Archief Bestrijding malware & virussen
Nee, het werkt niet, zelfde probleem -
[OPGELOST] Computer traag
sofianmaster reageerde op sofianmaster's topic in Archief Bestrijding malware & virussen
Jammer maar ComboFix werkt niet. Na de scan dus wanneer er staat VOLTOOID_DEEL_50 komt er een groot blauw scherm waar staat dat de computer moet worden uitgeschakeld en dan staat er met grote blauwe letters op BAD_POOL_HEADER. ZO ik kan je dit keer geen logje bezorgen. Zo ziet die eruit. http://img349.imageshack.us/img349/2533/dsc00040nn1.jpg -
[OPGELOST] Computer traag
sofianmaster reageerde op sofianmaster's topic in Archief Bestrijding malware & virussen
Nee, het heeft niets geholpen. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 13:24:14, on 25/08/2009 Platform: Windows Vista (WinNT 6.00.1904) MSIE: Internet Explorer v7.00 (7.00.6000.16386) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\System32\igfxtray.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Program Files\DellTPad\Apoint.exe C:\Windows\OEM02Mon.exe C:\Program Files\Dell Support Center\bin\sprtcmd.exe C:\Program Files\Dell\MFP_DELL\deDvcStatus.exe C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Windows\system32\igfxsrvc.exe C:\Windows\system32\taskeng.exe C:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exe C:\Program Files\Dell\MediaDirect\PCMService.exe C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe C:\Program Files\Alwil Software\Avast4\ashDisp.exe C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Netlog Music Tool\NetlogMusicTool.exe C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\Program Files\VoipBuster.com\VoipBuster\voipbuster.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe C:\Program Files\Digital Line Detect\DLG.exe C:\Program Files\Dell\QuickSet\quickset.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Windows Sidebar\sidebar.exe c:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe C:\Program Files\DellTPad\ApMsgFwd.exe C:\Program Files\DellTPad\Apntex.exe C:\Windows\system32\conime.exe C:\Program Files\DellTPad\HidFind.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Games Fusion - PC Cheats, Saved Games, Trailers, Demos and Patches O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\hssie\HssIE.dll O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe O4 - HKLM\..\Run: [OEM02Mon.exe] C:\Windows\OEM02Mon.exe O4 - HKLM\..\Run: [DELL Webcam Manager] "C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe" /s O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter O4 - HKLM\..\Run: [DeStatusMon] "C:\Program Files\Dell\MFP_DELL\deDvcStatus.exe" dvcStatusMinimize O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe O4 - HKLM\..\Run: [iAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE" O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe" O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe" O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM\..\Run: [sigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [Netlog Music Tool] "C:\Program Files\Netlog Music Tool\NetlogMusicTool.exe" O4 - HKCU\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start O4 - HKCU\..\Run: [VoipBuster] "C:\Program Files\VoipBuster.com\VoipBuster\voipbuster.exe" -nosplash -minimized O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - Global Startup: BTTray.lnk = ? O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe O4 - Global Startup: QuickSet.lnk = C:\Program Files\Dell\QuickSet\quickset.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Formulieren opslaan - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O8 - Extra context menu item: Invul Formulieren - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O8 - Extra context menu item: Menu aanpassen - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html O8 - Extra context menu item: RoboForm Werkbalk - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O8 - Extra context menu item: Send image to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O8 - Extra context menu item: Send page to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: Formulier Invullen - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O9 - Extra 'Tools' menuitem: Invul Formulieren - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O9 - Extra button: Opslaan - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O9 - Extra 'Tools' menuitem: Formulieren opslaan - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O9 - Extra 'Tools' menuitem: RoboForm Werkbalk - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O13 - Gopher Prefix: O15 - Trusted IP range: http://192.168.0.1 O15 - ESC Trusted IP range: http://192.168.0.1 O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1209149147425 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\system32\aestsrv.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Dell AIO Center Service (deMntrService) - Dell - C:\Program Files\Dell\MFP_DELL\deMntrService.exe O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Hotspot Shield Service (HotspotShieldService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\openvpnas.exe O23 - Service: Hotspot Shield Routing Service (HssSrv) - AnchorFree Inc. - C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe O23 - Service: Hotspot Shield Tray Service (HssTrayService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing) O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\Windows\system32\sfrem01.exe O23 - Service: SupportSoft Sprocket Service (belgacom) (sprtsvc_belgacom) - SupportSoft, Inc. - C:\Program Files\Belgacom\bin\sprtsvc.exe O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\STacSV.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe O23 - Service: SupportSoft RemoteAssist - SupportSoft, Inc. - C:\Program Files\Common Files\Supportsoft\bin\ssrc.exe O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe -- End of file - 12307 bytes -
Mijn computer is de laatste tijd traag. En mijn spellen zijn laggy geworden. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 17:17:51, on 24/08/2009 Platform: Windows Vista (WinNT 6.00.1904) MSIE: Internet Explorer v7.00 (7.00.6000.16386) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\System32\igfxtray.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Program Files\DellTPad\Apoint.exe C:\Windows\OEM02Mon.exe C:\Program Files\Dell Support Center\bin\sprtcmd.exe C:\Program Files\Dell\MFP_DELL\deDvcStatus.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\igfxsrvc.exe C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exe C:\Program Files\Dell\MediaDirect\PCMService.exe C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe C:\Program Files\Alwil Software\Avast4\ashDisp.exe C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Netlog Music Tool\NetlogMusicTool.exe C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\Program Files\VoipBuster.com\VoipBuster\voipbuster.exe C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe C:\Program Files\Digital Line Detect\DLG.exe C:\Program Files\Dell\QuickSet\quickset.exe C:\Windows\ehome\ehmsas.exe c:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\DellTPad\ApMsgFwd.exe C:\Program Files\DellTPad\Apntex.exe C:\Windows\system32\conime.exe C:\Program Files\DellTPad\HidFind.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Hamachi\hamachi.exe C:\Program Files\NBA 08\nbalive08.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Games Fusion - PC Cheats, Saved Games, Trailers, Demos and Patches O1 - Hosts: 5.10.237.199 pes09pcgate-e.winning-eleven.net O1 - Hosts: 5.10.237.199 pes2009web.winning-eleven.net O1 - Hosts: localhost pes7stun-e.winning-eleven.net O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\hssie\HssIE.dll O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe O4 - HKLM\..\Run: [OEM02Mon.exe] C:\Windows\OEM02Mon.exe O4 - HKLM\..\Run: [DELL Webcam Manager] "C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe" /s O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter O4 - HKLM\..\Run: [DeStatusMon] "C:\Program Files\Dell\MFP_DELL\deDvcStatus.exe" dvcStatusMinimize O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe O4 - HKLM\..\Run: [iAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE" O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe" O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe" O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM\..\Run: [sigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [Netlog Music Tool] "C:\Program Files\Netlog Music Tool\NetlogMusicTool.exe" O4 - HKCU\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start O4 - HKCU\..\Run: [VoipBuster] "C:\Program Files\VoipBuster.com\VoipBuster\voipbuster.exe" -nosplash -minimized O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - Global Startup: BTTray.lnk = ? O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe O4 - Global Startup: QuickSet.lnk = C:\Program Files\Dell\QuickSet\quickset.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Formulieren opslaan - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O8 - Extra context menu item: Invul Formulieren - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O8 - Extra context menu item: Menu aanpassen - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html O8 - Extra context menu item: RoboForm Werkbalk - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O8 - Extra context menu item: Send image to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O8 - Extra context menu item: Send page to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: Formulier Invullen - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O9 - Extra 'Tools' menuitem: Invul Formulieren - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O9 - Extra button: Opslaan - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O9 - Extra 'Tools' menuitem: Formulieren opslaan - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O9 - Extra 'Tools' menuitem: RoboForm Werkbalk - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O13 - Gopher Prefix: O15 - Trusted IP range: http://192.168.0.1 O15 - ESC Trusted IP range: http://192.168.0.1 O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1209149147425 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\system32\aestsrv.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Dell AIO Center Service (deMntrService) - Dell - C:\Program Files\Dell\MFP_DELL\deMntrService.exe O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Hotspot Shield Service (HotspotShieldService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\openvpnas.exe O23 - Service: Hotspot Shield Routing Service (HssSrv) - AnchorFree Inc. - C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe O23 - Service: Hotspot Shield Tray Service (HssTrayService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing) O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\Windows\system32\sfrem01.exe O23 - Service: SupportSoft Sprocket Service (belgacom) (sprtsvc_belgacom) - SupportSoft, Inc. - C:\Program Files\Belgacom\bin\sprtsvc.exe O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\STacSV.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe O23 - Service: SupportSoft RemoteAssist - SupportSoft, Inc. - C:\Program Files\Common Files\Supportsoft\bin\ssrc.exe O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe -- End of file - 12552 bytes
-
[OPGELOST] Hijackthis Logje
sofianmaster reageerde op sofianmaster's topic in Archief Bestrijding malware & virussen
Nee, er kwam alleen een error bij combofix. Dus die bad_head_header komt niet meer en ook de systras.app Dus dank je en dit is opgelost? -
[OPGELOST] Hijackthis Logje
sofianmaster reageerde op sofianmaster's topic in Archief Bestrijding malware & virussen
De computer is wel sneller. Bedankt nog. 1 vraagje nog, hoe zie je eigelijk in de logjes wat de bedreigingen zijn? -
[OPGELOST] Hijackthis Logje
sofianmaster reageerde op sofianmaster's topic in Archief Bestrijding malware & virussen
----------------- FindyKill V4.005 ------------------ * User : Sofian - OUAHCHI * Emplacement : C:\Program Files\FindyKill * Outils Mis a jours le 17/10/08 par Chiquitine29 * Suppression effectuée à 13:35:46 le ma 06/07/2009 * Windows Vista - Internet Explorer 7.0.6000.16386 ((((((((((((((( *** Suppression *** )))))))))))))))))) --------------- [ Processus actifs ] ---------------- C:\Windows\System32\smss.exe C:\Windows\system32\csrss.exe C:\Windows\system32\wininit.exe C:\Windows\system32\csrss.exe C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe C:\Windows\system32\winlogon.exe C:\Windows\system32\svchost.exe C:\Windows\system32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\system32\svchost.exe C:\Windows\system32\SLsvc.exe C:\Windows\system32\svchost.exe C:\Windows\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe C:\Windows\system32\Dwm.exe C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe C:\Windows\system32\taskeng.exe C:\Program Files\Alwil Software\Avast4\setup\avast.setup C:\Windows\system32\taskeng.exe C:\Windows\system32\aestsrv.exe C:\Windows\system32\svchost.exe C:\Windows\system32\CISVC.EXE C:\Program Files\Dell\MFP_DELL\deMntrService.exe C:\Program Files\Intel\Wireless\Bin\EvtEng.exe C:\Windows\system32\FsUsbExService.Exe C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe C:\Windows\System32\svchost.exe C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe C:\Windows\system32\PnkBstrA.exe C:\Windows\system32\svchost.exe C:\Windows\system32\PSIService.exe C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe C:\Windows\System32\tcpsvcs.exe C:\Windows\System32\snmp.exe C:\Program Files\Belgacom\bin\sprtsvc.exe C:\Program Files\Dell Support Center\bin\sprtsvc.exe C:\Windows\system32\STacSV.exe C:\Windows\system32\svchost.exe C:\Windows\system32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\system32\SearchIndexer.exe C:\Windows\system32\DRIVERS\xaudio.exe C:\Windows\system32\WUDFHost.exe C:\Windows\system32\wermgr.exe C:\Windows\system32\wermgr.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\system32\DllHost.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Windows\system32\runonce.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\conime.exe C:\Program Files\Windows Calendar\wincal.exe C:\Windows\system32\PresentationSettings.exe --------------- [ Fichiers/Dossiers infectieux ] ---------------- »»»» Suppression des fichiers dans C: »»»» Suppression des fichiers dans C:\Windows »»»» Suppression des fichiers dans C:\Windows\Prefetch Supprimé ! - C:\Windows\Prefetch\DAMNNF~1.EXE-0B9D8FE4.pf Supprimé ! - C:\Windows\Prefetch\HL2.EXE-75190979.pf Supprimé ! - C:\Windows\Prefetch\REGSVR32.EXE-B31EC963.pf Supprimé ! - C:\Windows\Prefetch\RUNDLL32.EXE-270D3B92.pf Supprimé ! - C:\Windows\Prefetch\RUNDLL32.EXE-48ABD534.pf Supprimé ! - C:\Windows\Prefetch\RUNDLL32.EXE-4EA250AC.pf Supprimé ! - C:\Windows\Prefetch\RUNDLL32.EXE-5D6ADDC2.pf Supprimé ! - C:\Windows\Prefetch\RUNDLL32.EXE-5F25AB93.pf Supprimé ! - C:\Windows\Prefetch\RUNDLL32.EXE-7332CC4B.pf Supprimé ! - C:\Windows\Prefetch\RUNDLL32.EXE-9019BC0D.pf Supprimé ! - C:\Windows\Prefetch\RUNDLL32.EXE-C5021BE8.pf Supprimé ! - C:\Windows\Prefetch\RUNDLL32.EXE-D0403FB4.pf Supprimé ! - C:\Windows\Prefetch\RUNDLL32.EXE-D96EA92A.pf Supprimé ! - C:\Windows\Prefetch\RUNDLL32.EXE-E4204FAF.pf Supprimé ! - C:\Windows\Prefetch\RUNDLL32.EXE-FA5505C4.pf Supprimé ! - C:\Windows\Prefetch\FIFA08.EXE-B7A75A30.pf Supprimé ! - C:\Windows\Prefetch\CCSETUP219.EXE-911560C3.pf Supprimé ! - C:\Windows\Prefetch\PES2009.EXE-E9C4C881.pf Supprimé ! - C:\Windows\Prefetch\UNINS000.EXE-E2E7A445.pf »»»» Suppression des fichiers dans C:\Windows\system32 »»»» Suppression des fichiers dans C:\Windows\system32\drivers »»»» Suppression des fichiers dans C:\Users\Sofian\AppData\Roaming »»»» Suppression des fichiers dans C:\Users\Sofian\AppData\Local\Temp Supprimé ! - C:\Users\Sofian\AppData\Local\Temp\Rar$DR00.817\Crack Lavasoft Supprimé ! - C:\Users\Sofian\AppData\Local\Temp\Rar$DR02.201\Crack adware 2009 Supprimé ! - C:\Users\Sofian\AppData\Local\Temp\Rar$DR02.201\Crack adware 2009\lavalicense.dll Supprimé ! - C:\Users\Sofian\AppData\Local\Temp\Rar$DR05.961\Crack adware 2009 Supprimé ! - C:\Users\Sofian\AppData\Local\Temp\Rar$DR05.961\Crack adware 2009\lavalicense.dll Supprimé ! - C:\Users\Sofian\AppData\Local\Temp\Rar$DR07.929\Crack adware 2009 Supprimé ! - C:\Users\Sofian\AppData\Local\Temp\Rar$DR08.980\Crack adware 2009 Supprimé ! - C:\Users\Sofian\AppData\Local\Temp\Rar$DR08.980\Crack adware 2009\lavalicense.dll Supprimé ! - C:\Users\Sofian\AppData\Local\Temp\Rar$EX00.831\Ad aware Pro Anniversary Edition 2009\Crack+adware+2009.rar --------------- [ Registre / Clés infectieuses ] ---------------- Supprimé ! - HKEY_CURRENT_CONFIG\System\CurrentControlSet\Enum\ROOT\LEGACY_SROSA -> Certaines clés ont été supprimées au premier reboot ... --------------- [ Etat / Redémarage des services ] ---------------- +- Mode sans echec restauré ! +- Services : [ Auto=2 Demande=3 Désactivé=4 ] Ndisuio - Type de démarrage = 2 EapHost - Type de démarrage = 2 Wlansvc - Type de démarrage = 2 SharedAccess - Type de démarrage = 3 wuauserv - Type de démarrage = 2 wscsvc - Type de démarrage = 2 --------------- [ Nettoyage des supports amovibles ] ---------------- +- Informations : C: - vast station D: - vast station E: - cd-rom-station G: - verwisselbaar station +- Suppression des fichiers : Echec de la supression !! - E:\autorun.inf --------------- [ Registre / Moutpoint2 ] ---------------- -> Recherche négative. --------------- [ Recherche Cracks / Keygen ] ---------------- C:\Users\Sofian\AppData\Local\VirtualStore\Program Files\Counter-Strike 1.6\cstrike\sound\misc\cracker1.wav C:\Users\Sofian\AppData\Roaming\uTorrent\Ad aware Pro Anniversary Edition 2009 + Crack.torrent C:\Users\Sofian\AppData\Roaming\uTorrent\Avast AntiVirus PRO Edition v4.8.1290 + Keygen[h33t]MasterUploader.torrent C:\Users\Sofian\AppData\Roaming\uTorrent\crack.torrent C:\Users\Sofian\AppData\Roaming\uTorrent\Google Earth Pro v.4.2[Crack] Incl Google.Logo.Remover and 4.3 Beta.rar.torrent C:\Users\Sofian\AppData\Roaming\uTorrent\Hide My IP Platinum v3.5 Most Stable Version With New KeyGen.rar.torrent C:\Users\Sofian\AppData\Roaming\uTorrent\MagicISO Maker v5.5 (Build 265) [bRAiGHTLiNG Crack][h33t][matt14].torrent C:\Users\Sofian\AppData\Roaming\uTorrent\pc.tools.registry.mechanic.7.0.0.1010.+keygen-reseed.torrent C:\Users\Sofian\AppData\Roaming\uTorrent\PowerISO v4.0 [AGAiN keygen][h33t][matt14].torrent C:\Users\Sofian\AppData\Roaming\uTorrent\Quick-PDF PDF To Word Converter v2.0 Cracked-KiMERA.torrent C:\Users\Sofian\AppData\Roaming\uTorrent\RegCure-1.5-PRECRACKED-ENJOY.torrent C:\Users\Sofian\AppData\Roaming\uTorrent\RegTool.v2.8.3331.588.Cracked-ARN.rar.torrent C:\Users\Sofian\AppData\Roaming\uTorrent\River Past Audio Converter Pro 7.7.16 & Booster Packs + keygen - anony014.torrent C:\Users\Sofian\AppData\Roaming\uTorrent\The Privacy Guard v1.5 & Four (4) Different Cracks.torrent C:\Users\Sofian\AppData\Roaming\uTorrent\ZoneAlarm Security Suite v7.0.470.000 XP x86+ Keygen - HeartBug.torrent C:\Users\Sofian\AppData\Roaming\uTorrent\ZoneAlarm Security Suite v7.1.248.000 Vista x86 + keygen - HeartBug.torrent C:\Users\Sofian\AppData\Roaming\uTorrent\ZoneAlarm® Internet Security Suite 2009+Keygen[h33t]MasterUploader.torrent C:\Users\Sofian\Desktop\Ongebruikte Pictogrammen\NFS\No Cd Crack-NFS.rar C:\Users\Sofian\Documents\Downloads\Ad aware Pro Anniversary Edition 2009 + Crack C:\Users\Sofian\Documents\Downloads\Ad aware Pro Anniversary Edition 2009 + Crack\Ad aware Pro Anniversary Edition 2009.rar C:\Users\Sofian\Documents\Downloads\Ad aware Pro Anniversary Edition 2009 + Crack\Crack Lavasoft.rar C:\Users\Sofian\Documents\Downloads\Software\MagicISO Maker v5.5 (Build 265) [bRAiGHTLiNG Crack][h33t][matt14] C:\Users\Sofian\Documents\Downloads\Software\PowerISO v4.0 [AGAiN keygen][h33t][matt14] C:\Users\Sofian\Documents\Downloads\Software\RegCure-1.5-PRECRACKED-ENJOY C:\Users\Sofian\Documents\Downloads\Software\River Past Audio Converter Pro 7.7.16 & Booster Packs + keygen - anony014 C:\Users\Sofian\Documents\Downloads\Software\ZoneAlarm® Internet Security Suite 2009+Keygen[h33t]MasterUploader C:\Users\Sofian\Documents\Downloads\Software\Ad-Aware.2008.7.1.0.8 Final-MKDEV.TEAM\CRACK.MKDEV.TEAM C:\Users\Sofian\Documents\Downloads\Software\Ad-Aware.2008.7.1.0.8 Final-MKDEV.TEAM\3Gp Video Converter\keygen.exe C:\Users\Sofian\Documents\Downloads\Software\Ad-Aware.2008.7.1.0.8 Final-MKDEV.TEAM\CRACK.MKDEV.TEAM\lavalicense.dll C:\Users\Sofian\Documents\Downloads\Software\Ad-Aware.2008.7.1.0.8 Final-MKDEV.TEAM\CRACK.MKDEV.TEAM\MKDEV TEAM.nfo C:\Users\Sofian\Documents\Downloads\Software\AI Roboform Pro 6.9.91 {DEMONOID}{JOHNCANADUDE}\Crack C:\Users\Sofian\Documents\Downloads\Software\AI Roboform Pro 6.9.91 {DEMONOID}{JOHNCANADUDE}\Crack\roboform.dll C:\Users\Sofian\Documents\Downloads\Software\Avast 4.8.1296 Professional [h33t] - XPLOSiON\Keygen.exe C:\Users\Sofian\Documents\Downloads\Software\Camtasia Studio 6.0.0 Build 689 [ iron Doom ]\keygen.exe C:\Users\Sofian\Documents\Downloads\Software\MagicISO Maker v5.5 (Build 265) [bRAiGHTLiNG Crack][h33t][matt14]\braightling.nfo C:\Users\Sofian\Documents\Downloads\Software\MagicISO Maker v5.5 (Build 265) [bRAiGHTLiNG Crack][h33t][matt14]\h33t - matt14.URL C:\Users\Sofian\Documents\Downloads\Software\MagicISO Maker v5.5 (Build 265) [bRAiGHTLiNG Crack][h33t][matt14]\MagicISO.exe C:\Users\Sofian\Documents\Downloads\Software\MagicISO Maker v5.5 (Build 265) [bRAiGHTLiNG Crack][h33t][matt14]\magiciso.JPG C:\Users\Sofian\Documents\Downloads\Software\MagicISO Maker v5.5 (Build 265) [bRAiGHTLiNG Crack][h33t][matt14]\magiciso.reg C:\Users\Sofian\Documents\Downloads\Software\MagicISO Maker v5.5 (Build 265) [bRAiGHTLiNG Crack][h33t][matt14]\matt14.nfo C:\Users\Sofian\Documents\Downloads\Software\MagicISO Maker v5.5 (Build 265) [bRAiGHTLiNG Crack][h33t][matt14]\Read Me !!!.txt C:\Users\Sofian\Documents\Downloads\Software\MagicISO Maker v5.5 (Build 265) [bRAiGHTLiNG Crack][h33t][matt14]\Setup_MagicISO.exe C:\Users\Sofian\Documents\Downloads\Software\MagicISO Maker v5.5 (Build 265) [bRAiGHTLiNG Crack][h33t][matt14]\tracked_by_h33t_com.txt C:\Users\Sofian\Documents\Downloads\Software\PowerISO v4.0 [AGAiN keygen][h33t][matt14]\again.nfo C:\Users\Sofian\Documents\Downloads\Software\PowerISO v4.0 [AGAiN keygen][h33t][matt14]\h33t - matt14.URL C:\Users\Sofian\Documents\Downloads\Software\PowerISO v4.0 [AGAiN keygen][h33t][matt14]\Keygen.exe C:\Users\Sofian\Documents\Downloads\Software\PowerISO v4.0 [AGAiN keygen][h33t][matt14]\matt14.nfo C:\Users\Sofian\Documents\Downloads\Software\PowerISO v4.0 [AGAiN keygen][h33t][matt14]\poweriso.jpg C:\Users\Sofian\Documents\Downloads\Software\PowerISO v4.0 [AGAiN keygen][h33t][matt14]\PowerISO40.exe C:\Users\Sofian\Documents\Downloads\Software\PowerISO v4.0 [AGAiN keygen][h33t][matt14]\Read Me !!!.txt C:\Users\Sofian\Documents\Downloads\Software\PowerISO v4.0 [AGAiN keygen][h33t][matt14]\tracked_by_h33t_com.txt C:\Users\Sofian\Documents\Downloads\Software\RegCure-1.5-PRECRACKED-ENJOY\RegCure.exe C:\Users\Sofian\Documents\Downloads\Software\River Past Audio Converter Pro 7.7.16 & Booster Packs + keygen - anony014\keygen C:\Users\Sofian\Documents\Downloads\Software\River Past Audio Converter Pro 7.7.16 & Booster Packs + keygen - anony014\keygen\file_id.diz C:\Users\Sofian\Documents\Downloads\Software\River Past Audio Converter Pro 7.7.16 & Booster Packs + keygen - anony014\keygen\HAZE.nfo C:\Users\Sofian\Documents\Downloads\Software\River Past Audio Converter Pro 7.7.16 & Booster Packs + keygen - anony014\keygen\Keygen.exe C:\Users\Sofian\Documents\Downloads\Software\Smartftp 3\crack C:\Users\Sofian\Documents\Downloads\Software\Smartftp 3\crack\smartftp.exe C:\Users\Sofian\Documents\Downloads\Software\TMPGEnc 4.0 XPress 4.4.1.237 - Retail\keygen-patch.exe C:\Users\Sofian\Documents\Downloads\Software\TMPGEnc Plus 2.524.63.181\keygen.exe C:\Users\Sofian\Documents\Downloads\Software\TMPGEnc_DVD_Author_3_with_DivX_Authoring_v3.1.1.174_Retail tabsman[H33T]\TMPGEnc DVD Author 3 with DivX Authoring v3.1.1.174 Retail\keygen.exe C:\Users\Sofian\Documents\Downloads\Software\ZoneAlarm® Internet Security Suite 2009+Keygen[h33t]MasterUploader\Hotfix Package C:\Users\Sofian\Documents\Downloads\Software\ZoneAlarm® Internet Security Suite 2009+Keygen[h33t]MasterUploader\Keygen C:\Users\Sofian\Documents\Downloads\Software\ZoneAlarm® Internet Security Suite 2009+Keygen[h33t]MasterUploader\MasterUploader.nfo C:\Users\Sofian\Documents\Downloads\Software\ZoneAlarm® Internet Security Suite 2009+Keygen[h33t]MasterUploader\Setup C:\Users\Sofian\Documents\Downloads\Software\ZoneAlarm® Internet Security Suite 2009+Keygen[h33t]MasterUploader\tracked_by_h33t_com.txt C:\Users\Sofian\Documents\Downloads\Software\ZoneAlarm® Internet Security Suite 2009+Keygen[h33t]MasterUploader\Hotfix Package\WindowsXP-KB943232-x86-ENU.exe C:\Users\Sofian\Documents\Downloads\Software\ZoneAlarm® Internet Security Suite 2009+Keygen[h33t]MasterUploader\Keygen\Keygen.exe C:\Users\Sofian\Documents\Downloads\Software\ZoneAlarm® Internet Security Suite 2009+Keygen[h33t]MasterUploader\Setup\zaSUITE_Setup_en.exe C:\Users\Sofian\Documents\Incomplete\GTA San Andreas\data\Decision\Craig\crack1.ped ---------------- ! Fin du rapport ! ------------------ -
[OPGELOST] Hijackthis Logje
sofianmaster reageerde op sofianmaster's topic in Archief Bestrijding malware & virussen
----------------- FindyKill V4.005 ------------------ * User : Sofian - OUAHCHI * Emplacement : C:\Program Files\FindyKill * Outils Mis a jours le 17/10/08 par Chiquitine29 * Recherche effectuée à 13:07:51 le ma 06/07/2009 * Windows Vista - Internet Explorer 7.0.6000.16386 ((((((((((((((((( *** Recherche *** )))))))))))))))))) --------------- [ Processus actifs ] ---------------- C:\Windows\System32\smss.exe C:\Windows\system32\csrss.exe C:\Windows\system32\wininit.exe C:\Windows\system32\csrss.exe C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe C:\Windows\system32\winlogon.exe C:\Windows\system32\svchost.exe C:\Windows\system32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\system32\svchost.exe C:\Windows\system32\SLsvc.exe C:\Windows\system32\svchost.exe C:\Windows\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe C:\Windows\system32\taskeng.exe C:\Windows\System32\igfxtray.exe C:\Windows\System32\igfxpers.exe C:\Program Files\DellTPad\Apoint.exe C:\Windows\OEM02Mon.exe C:\Program Files\Dell\MFP_DELL\deDvcStatus.exe C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Windows\system32\igfxsrvc.exe C:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exe C:\Program Files\Dell\MediaDirect\PCMService.exe C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe C:\Program Files\Alwil Software\Avast4\ashDisp.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Netlog Music Tool\NetlogMusicTool.exe C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\Program Files\VoipBuster.com\VoipBuster\voipbuster.exe C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe C:\Program Files\Digital Line Detect\DLG.exe C:\Program Files\Dell\QuickSet\quickset.exe C:\Windows\ehome\ehmsas.exe C:\Windows\system32\aestsrv.exe C:\Windows\system32\svchost.exe C:\Windows\system32\CISVC.EXE C:\Program Files\Dell\MFP_DELL\deMntrService.exe C:\Program Files\Intel\Wireless\Bin\EvtEng.exe c:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe C:\Windows\system32\FsUsbExService.Exe C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe C:\Windows\System32\svchost.exe C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe C:\Windows\system32\PnkBstrA.exe C:\Windows\system32\svchost.exe C:\Windows\system32\PSIService.exe C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe C:\Windows\System32\tcpsvcs.exe C:\Windows\System32\snmp.exe C:\Program Files\Belgacom\bin\sprtsvc.exe C:\Program Files\Dell Support Center\bin\sprtsvc.exe C:\Windows\system32\STacSV.exe C:\Windows\system32\svchost.exe C:\Windows\system32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\system32\SearchIndexer.exe C:\Windows\system32\DRIVERS\xaudio.exe C:\Windows\system32\WUDFHost.exe C:\Windows\System32\mobsync.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\system32\taskeng.exe C:\Program Files\DellTPad\ApMsgFwd.exe C:\Program Files\DellTPad\Apntex.exe C:\Windows\system32\conime.exe C:\Program Files\DellTPad\HidFind.exe C:\Program Files\WinRAR\WinRAR.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Windows\system32\SearchProtocolHost.exe C:\Program Files\Pando Networks\Media Booster\PMB.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\SearchFilterHost.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\DllHost.exe --------------- [ Fichiers/Dossiers infectieux ] ---------------- »»»» Presence des fichiers dans C: »»»» Presence des fichiers dans C:\Windows »»»» Presence des fichiers dans C:\Windows\Prefetch »»»» Presence des fichiers dans C:\Windows\system32 »»»» Presence des fichiers dans C:\Windows\system32\drivers »»»» Presence des fichiers dans C:\Users\Sofian\AppData\Roaming »»»» Presence des fichiers dans C:\Users\Sofian\AppData\Local\Temp C:\Users\Sofian\AppData\Local\Temp\Rar$DR00.817\Crack Lavasoft C:\Users\Sofian\AppData\Local\Temp\Rar$DR02.201\Crack adware 2009 C:\Users\Sofian\AppData\Local\Temp\Rar$DR02.201\Crack adware 2009\lavalicense.dll C:\Users\Sofian\AppData\Local\Temp\Rar$DR05.961\Crack adware 2009 C:\Users\Sofian\AppData\Local\Temp\Rar$DR05.961\Crack adware 2009\lavalicense.dll C:\Users\Sofian\AppData\Local\Temp\Rar$DR07.929\Crack adware 2009 C:\Users\Sofian\AppData\Local\Temp\Rar$DR08.980\Crack adware 2009 C:\Users\Sofian\AppData\Local\Temp\Rar$DR08.980\Crack adware 2009\lavalicense.dll C:\Users\Sofian\AppData\Local\Temp\Rar$EX00.831\Ad aware Pro Anniversary Edition 2009\Crack+adware+2009.rar --------------- [ Registre / Startup ] ---------------- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run IgfxTray REG_SZ C:\Windows\system32\igfxtray.exe HotKeysCmds REG_SZ C:\Windows\system32\hkcmd.exe Persistence REG_SZ C:\Windows\system32\igfxpers.exe Apoint REG_SZ C:\Program Files\DellTPad\Apoint.exe OEM02Mon.exe REG_SZ C:\Windows\OEM02Mon.exe DELL Webcam Manager REG_SZ "C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe" /s DellSupportCenter REG_SZ "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter DeStatusMon REG_SZ "C:\Program Files\Dell\MFP_DELL\deDvcStatus.exe" dvcStatusMinimize dscactivate REG_SZ "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" ECenter REG_SZ C:\Dell\E-Center\EULALauncher.exe IAAnotif REG_SZ "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" Logitech Hardware Abstraction Layer REG_SZ "C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE" OpwareSE4 REG_SZ "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe" PCMService REG_SZ "C:\Program Files\Dell\MediaDirect\PCMService.exe" Kernel and Hardware Abstraction Layer REG_SZ KHALMNPR.EXE SigmatelSysTrayApp REG_EXPAND_SZ %ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe avast! REG_SZ C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" NPSStartup REG_SZ Start WingMan Profiler REG_SZ C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui Ad-Watch REG_SZ C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Sidebar REG_SZ C:\Program Files\Windows Sidebar\sidebar.exe /autoRun ehTray.exe REG_SZ C:\Windows\ehome\ehTray.exe Netlog Music Tool REG_SZ "C:\Program Files\Netlog Music Tool\NetlogMusicTool.exe" ISUSScheduler REG_SZ "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start VoipBuster REG_SZ "C:\Program Files\VoipBuster.com\VoipBuster\voipbuster.exe" -nosplash -minimized --------------- [ Registre / Clés infectieuses ] ---------------- --------------- [ Etat / Services ] ---------------- +- Services : [ Auto=2 Demande=3 Désactivé=4 ] Ndisuio - Type de démarrage = 3 EapHost - Type de démarrage = 3 Wlansvc - Type de démarrage = 2 SharedAccess - Type de démarrage = 3 wuauserv - Type de démarrage = 2 wscsvc - Type de démarrage = 2 --------------- [ Recherche dans supports amovibles] ---------------- +- Informations : C: - vast station D: - vast station E: - cd-rom-station G: - verwisselbaar station +- Contenu de l'autorun : E:\autorun.inf [autorun] open=start.exe icon=start.exe +- presence des fichiers : Présent ! - E:\autorun.inf --------------- [ Registre / Moutpoint2 ] ---------------- -> Recherche négative. ------------------- ! Fin du rapport ! -------------------- -
[OPGELOST] Hijackthis Logje
sofianmaster reageerde op sofianmaster's topic in Archief Bestrijding malware & virussen
ja in een blauw scherm. -
[OPGELOST] Hijackthis Logje
sofianmaster reageerde op sofianmaster's topic in Archief Bestrijding malware & virussen
Nee, jammer genoeg niet nee, Het logje werd niet voorbereid -
[OPGELOST] Hijackthis Logje
sofianmaster reageerde op sofianmaster's topic in Archief Bestrijding malware & virussen
Nu krijg ik wanneer de scan compleet is en het wil verwijderen een blauw scherm met BAD_HEAD_HEADER -
[OPGELOST] Hijackthis Logje
sofianmaster reageerde op sofianmaster's topic in Archief Bestrijding malware & virussen
Wel, ik probeer dat te doen met combofix, maar er komt ineens een blauw scherm waar staat systrat.sys of .app ofzoiets -
[OPGELOST] Hijackthis Logje
sofianmaster reageerde op sofianmaster's topic in Archief Bestrijding malware & virussen
Het MBAM logje Malwarebytes' Anti-Malware 1.38 Database versie: 2375 Windows 6.0.6000 5/07/2009 14:37:49 mbam-log-2009-07-05 (14-37-48).txt Scan type: Snelle Scan Objecten gescand: 81227 Verstreken tijd: 5 minute(s), 30 second(s) Geheugenprocessen geïnfecteerd: 0 Geheugenmodulen geïnfecteerd: 0 Registersleutels geïnfecteerd: 2 Registerwaarden geïnfecteerd: 0 Registerdata bestanden geïnfecteerd: 0 Mappen geïnfecteerd: 8 Bestanden geïnfecteerd: 175 Geheugenprocessen geïnfecteerd: (Geen kwaadaardige items gevonden) Geheugenmodulen geïnfecteerd: (Geen kwaadaardige items gevonden) Registersleutels geïnfecteerd: HKEY_LOCAL_MACHINE\SOFTWARE\RegTool (Rogue.RegTool) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\RegTool (Rogue.RegTool) -> Quarantined and deleted successfully. Registerwaarden geïnfecteerd: (Geen kwaadaardige items gevonden) Registerdata bestanden geïnfecteerd: (Geen kwaadaardige items gevonden) Mappen geïnfecteerd: c:\Users\Sofian\AppData\Roaming\RegTool (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\Backups (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\Backups\2009-01-11 13-53-400 (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\Backups\2009-04-07 11-15-300 (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\Logs (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\QuarantineW (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450 (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030 (Rogue.RegTool) -> Quarantined and deleted successfully. Bestanden geïnfecteerd: c:\Users\Sofian\AppData\Roaming\RegTool\resultsw.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\Backups\2009-01-11 13-53-400\CURRENT_USER (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\Backups\2009-01-11 13-53-400\DEFAULT (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\Backups\2009-01-11 13-53-400\SAM (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\Backups\2009-01-11 13-53-400\SECURITY (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\Backups\2009-01-11 13-53-400\SOFTWARE (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\Backups\2009-01-11 13-53-400\SYSTEM (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\Backups\2009-04-07 11-15-300\CURRENT_USER (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\Backups\2009-04-07 11-15-300\DEFAULT (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\Backups\2009-04-07 11-15-300\SAM (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\Backups\2009-04-07 11-15-300\SECURITY (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\Backups\2009-04-07 11-15-300\SOFTWARE (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\Backups\2009-04-07 11-15-300\SYSTEM (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\Logs\2009-01-11 13-47-410.log (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\Logs\2009-01-11 21-50-230.log (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\Logs\2009-01-12 18-07-270.log (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\Logs\2009-04-07 11-09-340.log (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\Logs\2009-04-07 11-12-240.log (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\Logs\2009-04-07 12-00-010.log (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\Logs\2009-04-07 12-00-020.log (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\Logs\2009-04-08 10-59-030.log (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\Logs\2009-04-08 12-00-010.log (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\Logs\2009-04-08 12-00-020.log (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\filelist.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-0.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-1.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-10.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-11.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-12.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-13.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-14.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-15.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-16.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-17.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-18.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-19.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-2.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-20.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-21.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-22.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-23.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-24.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-25.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-26.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-27.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-28.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-29.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-3.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-30.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-31.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-32.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-33.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-34.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-35.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-36.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-37.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-38.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-39.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-4.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-40.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-41.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-42.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-43.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-44.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-45.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-46.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-47.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-48.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-49.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-5.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-50.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-51.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-52.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-53.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-54.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-55.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-56.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-57.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-58.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-59.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-6.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-60.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-61.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-62.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-63.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-64.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-65.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-66.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-67.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-68.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-69.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-7.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-70.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-71.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-72.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-73.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-74.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-8.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-01-11 13-54-450\regb-9.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\filelist.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-0.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-1.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-10.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-11.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-12.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-13.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-14.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-15.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-16.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-17.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-18.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-19.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-2.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-20.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-21.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-22.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-23.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-24.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-25.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-26.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-27.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-28.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-29.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-3.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-30.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-31.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-32.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-33.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-34.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-35.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-36.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-37.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-38.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-39.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-4.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-40.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-41.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-42.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-43.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-44.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-45.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-46.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-47.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-48.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-49.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-5.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-50.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-51.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-52.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-53.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-54.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-55.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-56.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-57.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-58.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-59.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-6.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-60.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-61.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-62.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-63.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-64.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-65.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-66.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-67.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-68.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-69.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-7.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-70.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-71.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-72.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-73.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-8.db (Rogue.RegTool) -> Quarantined and deleted successfully. c:\Users\Sofian\AppData\Roaming\RegTool\quarantinew\2009-04-07 11-14-030\regb-9.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Windows\Tasks\RegTool Scan.job (Rogue.RegTool) -> Quarantined and deleted successfully. Het HJT-Logje Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 14:39:21, on 5/07/2009 Platform: Windows Vista (WinNT 6.00.1904) MSIE: Internet Explorer v7.00 (7.00.6000.16386) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\System32\igfxtray.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Program Files\DellTPad\Apoint.exe C:\Windows\OEM02Mon.exe C:\Program Files\Dell Support Center\bin\sprtcmd.exe C:\Program Files\Dell\MFP_DELL\deDvcStatus.exe C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe C:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exe C:\Program Files\Dell\MediaDirect\PCMService.exe C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe C:\Program Files\Alwil Software\Avast4\ashDisp.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe C:\Program Files\Netlog Music Tool\NetlogMusicTool.exe C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\Program Files\VoipBuster.com\VoipBuster\voipbuster.exe C:\Windows\system32\taskeng.exe C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe C:\Program Files\Digital Line Detect\DLG.exe C:\Program Files\Dell\QuickSet\quickset.exe C:\Windows\system32\igfxsrvc.exe C:\Windows\ehome\ehmsas.exe c:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe C:\Program Files\DellTPad\ApMsgFwd.exe C:\Program Files\DellTPad\HidFind.exe C:\Program Files\DellTPad\Apntex.exe C:\Windows\system32\conime.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Windows\system32\taskeng.exe C:\Windows\System32\RAServer.exe C:\Windows\System32\msra.exe C:\Program Files\Skype\Phone\Skype.exe C:\Windows\system32\SearchFilterHost.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Games Fusion - PC Cheats, Saved Games, Trailers, Demos and Patches O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: RoboForm - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe O4 - HKLM\..\Run: [OEM02Mon.exe] C:\Windows\OEM02Mon.exe O4 - HKLM\..\Run: [DELL Webcam Manager] "C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe" /s O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter O4 - HKLM\..\Run: [DeStatusMon] "C:\Program Files\Dell\MFP_DELL\deDvcStatus.exe" dvcStatusMinimize O4 - HKLM\..\Run: [dscactivate] "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe O4 - HKLM\..\Run: [iAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE" O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe" O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe" O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE O4 - HKLM\..\Run: [sigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" O4 - HKCU\..\Run: [Netlog Music Tool] "C:\Program Files\Netlog Music Tool\NetlogMusicTool.exe" O4 - HKCU\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start O4 - HKCU\..\Run: [VoipBuster] "C:\Program Files\VoipBuster.com\VoipBuster\voipbuster.exe" -nosplash -minimized O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe" O4 - Global Startup: BTTray.lnk = ? O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe O4 - Global Startup: QuickSet.lnk = C:\Program Files\Dell\QuickSet\quickset.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Formulieren opslaan - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O8 - Extra context menu item: Invul Formulieren - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O8 - Extra context menu item: Menu aanpassen - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html O8 - Extra context menu item: RoboForm Werkbalk - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O8 - Extra context menu item: Send image to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O8 - Extra context menu item: Send page to &Bluetooth Device... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: Formulier Invullen - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O9 - Extra 'Tools' menuitem: Invul Formulieren - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O9 - Extra button: Opslaan - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O9 - Extra 'Tools' menuitem: Formulieren opslaan - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O9 - Extra 'Tools' menuitem: RoboForm Werkbalk - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O13 - Gopher Prefix: O15 - Trusted IP range: http://192.168.0.1 O15 - ESC Trusted IP range: http://192.168.0.1 O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.srtest.com/srl_bin/sysreqlab_srl.cab O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {4A85DBE0-BFB2-4119-8401-186A7C6EB653} - http://messenger.zone.msn.com/binary/MJSS.cab69309.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/NL-BE/a-UNO1/GAME_UNO1.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1209149147425 O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1209149996026 O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} (Futuremark SystemInfo) - http://gameadvisor.futuremark.com/global/msc3121.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\system32\aestsrv.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe O23 - Service: Dell AIO Center Service (deMntrService) - Dell - C:\Program Files\Dell\MFP_DELL\deMntrService.exe O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\Windows\system32\sfrem01.exe O23 - Service: SupportSoft Sprocket Service (belgacom) (sprtsvc_belgacom) - SupportSoft, Inc. - C:\Program Files\Belgacom\bin\sprtsvc.exe O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\STacSV.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe O23 - Service: SupportSoft RemoteAssist - SupportSoft, Inc. - C:\Program Files\Common Files\Supportsoft\bin\ssrc.exe O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe -- End of file - 13414 bytes

OVER ONS
PC Helpforum helpt GRATIS computergebruikers sinds juli 2006. Ons team geeft via het forum professioneel antwoord op uw vragen en probeert uw pc problemen zo snel mogelijk op te lossen. Word lid vandaag, plaats je vraag online en het PC Helpforum-team helpt u graag verder!