
vannie1981
-
Items
6 -
Registratiedatum
-
Laatst bezocht
Inhoudstype
Profielen
Forums
Store
Berichten die geplaatst zijn door vannie1981
-
-
-
Zo, die scan duurde zeker lang.
Hierbij het rapportje:
Emsisoft Emergency Kit - Versie 1.0
Laatste Update: 24-5-2012 15:04:21
Scaninstellingen:
Scantype: Diepe Scan
Objecten: Geheugen, Sporen, Cookies, C:\
Scan archieven: Aan
Heuristieken: Uit
ADS Scan: Aan
Scan gestart: 24-5-2012 15:08:36
c:\windows\system32\TVUAx\libcurl.dll Ontdekt: Trace.File.dl.tvunetworks.com!A2
c:\windows\system32\TVUAx\libeay32.dll Ontdekt: Trace.File.dl.tvunetworks.com!A2
c:\windows\system32\TVUAx\libexpatw.dll Ontdekt: Trace.File.dl.tvunetworks.com!A2
c:\windows\system32\TVUAx\npTVUAx.dll Ontdekt: Trace.File.dl.tvunetworks.com!A2
c:\windows\system32\TVUAx\ssleay32.dll Ontdekt: Trace.File.dl.tvunetworks.com!A2
c:\windows\system32\TVUAx\zlib1.dll Ontdekt: Trace.File.dl.tvunetworks.com!A2
Value: HKEY_CLASSES_ROOT\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113} --> HelpText Ontdekt: Trace.Registry.SEO Toolbar!A2
Value: HKEY_CLASSES_ROOT\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113} --> MenuText Ontdekt: Trace.Registry.SEO Toolbar!A2
Value: HKEY_CLASSES_ROOT\AppID\TVUAx.DLL --> AppID Ontdekt: Trace.Registry.dl.tvunetworks.com!A2
Value: HKEY_CLASSES_ROOT\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} --> AppID Ontdekt: Trace.Registry.dl.tvunetworks.com!A2
Value: HKEY_CLASSES_ROOT\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0}\InprocServer32 --> ThreadingModel Ontdekt: Trace.Registry.dl.tvunetworks.com!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\TVUAx.DLL --> AppID Ontdekt: Trace.Registry.dl.tvunetworks.com!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} --> AppID Ontdekt: Trace.Registry.dl.tvunetworks.com!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0}\InprocServer32 --> ThreadingModel Ontdekt: Trace.Registry.dl.tvunetworks.com!A2
C:\Documents and Settings\Gebruiker\Bureaublad\loader\apps\tibia831\download.zip/Tibia.exe Ontdekt: Virus.Win32.Virut!IK
C:\Documents and Settings\Gebruiker\Bureaublad\loader\apps\tibia831\Tibia.exe Ontdekt: Virus.Win32.Virut!IK
C:\Documents and Settings\Gebruiker\Bureaublad\loader\ipchanger.rar/1.da_ Ontdekt: Trojan.Agent!IK
C:\Documents and Settings\Gebruiker\Bureaublad\loader\ipchanger.zip/1.da_ Ontdekt: Trojan.Agent!IK
C:\Documents and Settings\Gebruiker\Bureaublad\loader\Tibia Loader.rar/loader\updater.exe Ontdekt: Trojan-Dropper.Agent!IK
C:\Documents and Settings\Gebruiker\Mijn documenten\Downloads\cnet2_RegpairSetup_exe.exe Ontdekt: Riskware.Win32.InstallCore.AMN!A2
C:\Documents and Settings\Gebruiker\Mijn documenten\ipchanger\2.da_ Ontdekt: Trojan.Win32.Spy.45056.Y!A2
C:\Documents and Settings\Gebruiker\Mijn documenten\Mijn ontvangen bestanden\loader(1).exe Ontdekt: Trojan-Dropper.Delf!IK
C:\Muziek\bestanden 2 november 2007\Dries Heringa\DRIES HERINGA\Mijn afbeeldingen\Neverland.exe Ontdekt: Trojan.Win32.GameServer.AMN!A2
C:\Muziek\My downloads\BSINSTALLNL.exe Ontdekt: Riskware.AdWare.Win32.SaveNow!IK
C:\Muziek\White Stars Universe Twisters Full.wma Ontdekt: Trojan-Downloader.ASX.Wimad!IK
C:\Program Files\TibiaBot NG\loader\apps\hook.dll Ontdekt: Trojan.ATRAPS!IK
C:\Program Files\TibiaBot NG\loader\apps\tibia831\download.zip/Tibia.exe Ontdekt: Virus.Win32.Virut!IK
C:\Program Files\TibiaBot NG\loader\apps\tibia831\Tibia.exe Ontdekt: Virus.Win32.Virut!IK
C:\Program Files\TibiaBot NG\loader\ipchanger.rar/1.da_ Ontdekt: Trojan.Agent!IK
C:\Program Files\TibiaBot NG\loader\ipchanger.zip/1.da_ Ontdekt: Trojan.Agent!IK
C:\Program Files\TibiaBot NG\loader\loader.exe Ontdekt: Trojan-Dropper.Win32.VB!IK
C:\Program Files\TibiaBot NG\loader\Tibia Loader.rar/loader\updater.exe Ontdekt: Trojan-Dropper.Agent!IK
C:\Program Files\TibiaBot NG\loader\Tibia Loader.rar/loader.exe Ontdekt: Trojan-Dropper.Win32.VB!IK
C:\Qoobox\Quarantine\C\Documents and Settings\Gebruiker\Application Data\59AA.A05.vir Ontdekt: Backdoor.Conf!IK
C:\System Volume Information\_restore{090D9B8E-3167-4E9B-B6C4-7EE725F9A4D5}\RP1187\A0288320.exe Ontdekt: Riskware.Hacktool.Nokia!IK
C:\TDSSKiller_Quarantine\23.05.2012_22.16.50\mbr0000\mbr0000\tsk0000.dta Ontdekt: Trojan.DOS.Sinowal!IK
Gescand
Bestanden: 158197
Sporen: 431845
Cookies: 64
Processen: 41
Gevonden
Bestanden: 22
Sporen: 14
Cookies: 0
Processen: 0
Registersleutels: 0
Scan Geëindigd: 24-5-2012 20:10:39
Scantijd: 5:02:03
C:\TDSSKiller_Quarantine\23.05.2012_22.16.50\mbr0000\mbr0000\tsk0000.dta Verwijderd Trojan.DOS.Sinowal!IK
C:\System Volume Information\_restore{090D9B8E-3167-4E9B-B6C4-7EE725F9A4D5}\RP1187\A0288320.exe Verwijderd Riskware.Hacktool.Nokia!IK
C:\Qoobox\Quarantine\C\Documents and Settings\Gebruiker\Application Data\59AA.A05.vir Verwijderd Backdoor.Conf!IK
C:\Program Files\TibiaBot NG\loader\loader.exe Verwijderd Trojan-Dropper.Win32.VB!IK
C:\Program Files\TibiaBot NG\loader\Tibia Loader.rar/loader.exe Verwijderd Trojan-Dropper.Win32.VB!IK
C:\Program Files\TibiaBot NG\loader\apps\hook.dll Verwijderd Trojan.ATRAPS!IK
C:\Muziek\White Stars Universe Twisters Full.wma Verwijderd Trojan-Downloader.ASX.Wimad!IK
C:\Muziek\My downloads\BSINSTALLNL.exe Verwijderd Riskware.AdWare.Win32.SaveNow!IK
C:\Muziek\bestanden 2 november 2007\Dries Heringa\DRIES HERINGA\Mijn afbeeldingen\Neverland.exe Verwijderd Trojan.Win32.GameServer.AMN!A2
C:\Documents and Settings\Gebruiker\Mijn documenten\Mijn ontvangen bestanden\loader(1).exe Verwijderd Trojan-Dropper.Delf!IK
C:\Documents and Settings\Gebruiker\Mijn documenten\ipchanger\2.da_ Verwijderd Trojan.Win32.Spy.45056.Y!A2
C:\Documents and Settings\Gebruiker\Mijn documenten\Downloads\cnet2_RegpairSetup_exe.exe Verwijderd Riskware.Win32.InstallCore.AMN!A2
C:\Documents and Settings\Gebruiker\Bureaublad\loader\Tibia Loader.rar/loader\updater.exe Verwijderd Trojan-Dropper.Agent!IK
C:\Program Files\TibiaBot NG\loader\Tibia Loader.rar/loader\updater.exe Verwijderd Trojan-Dropper.Agent!IK
C:\Documents and Settings\Gebruiker\Bureaublad\loader\ipchanger.rar/1.da_ Verwijderd Trojan.Agent!IK
C:\Documents and Settings\Gebruiker\Bureaublad\loader\ipchanger.zip/1.da_ Verwijderd Trojan.Agent!IK
C:\Program Files\TibiaBot NG\loader\ipchanger.rar/1.da_ Verwijderd Trojan.Agent!IK
C:\Program Files\TibiaBot NG\loader\ipchanger.zip/1.da_ Verwijderd Trojan.Agent!IK
C:\Documents and Settings\Gebruiker\Bureaublad\loader\apps\tibia831\download.zip/Tibia.exe Verwijderd Virus.Win32.Virut!IK
C:\Documents and Settings\Gebruiker\Bureaublad\loader\apps\tibia831\Tibia.exe Verwijderd Virus.Win32.Virut!IK
C:\Program Files\TibiaBot NG\loader\apps\tibia831\download.zip/Tibia.exe Verwijderd Virus.Win32.Virut!IK
C:\Program Files\TibiaBot NG\loader\apps\tibia831\Tibia.exe Verwijderd Virus.Win32.Virut!IK
Value: HKEY_CLASSES_ROOT\AppID\TVUAx.DLL --> AppID Verwijderd Trace.Registry.dl.tvunetworks.com!A2
Value: HKEY_CLASSES_ROOT\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} --> AppID Verwijderd Trace.Registry.dl.tvunetworks.com!A2
Value: HKEY_CLASSES_ROOT\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0}\InprocServer32 --> ThreadingModel Verwijderd Trace.Registry.dl.tvunetworks.com!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\TVUAx.DLL --> AppID Verwijderd Trace.Registry.dl.tvunetworks.com!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} --> AppID Verwijderd Trace.Registry.dl.tvunetworks.com!A2
Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0}\InprocServer32 --> ThreadingModel Verwijderd Trace.Registry.dl.tvunetworks.com!A2
Value: HKEY_CLASSES_ROOT\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113} --> HelpText Verwijderd Trace.Registry.SEO Toolbar!A2
Value: HKEY_CLASSES_ROOT\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113} --> MenuText Verwijderd Trace.Registry.SEO Toolbar!A2
c:\windows\system32\TVUAx\libcurl.dll Verwijderd Trace.File.dl.tvunetworks.com!A2
c:\windows\system32\TVUAx\libeay32.dll Verwijderd Trace.File.dl.tvunetworks.com!A2
c:\windows\system32\TVUAx\libexpatw.dll Verwijderd Trace.File.dl.tvunetworks.com!A2
c:\windows\system32\TVUAx\npTVUAx.dll Verwijderd Trace.File.dl.tvunetworks.com!A2
c:\windows\system32\TVUAx\ssleay32.dll Verwijderd Trace.File.dl.tvunetworks.com!A2
c:\windows\system32\TVUAx\zlib1.dll Verwijderd Trace.File.dl.tvunetworks.com!A2
Verwijderd
Bestanden: 22
Sporen: 14
Cookies: 0
-
-
Bij deze.....
22:16:50.0265 0404 TDSS rootkit removing tool 2.7.37.0 May 23 2012 08:15:30
22:16:50.0406 0404 ============================================================
22:16:50.0406 0404 Current date / time: 2012/05/23 22:16:50.0406
22:16:50.0406 0404 SystemInfo:
22:16:50.0406 0404
22:16:50.0406 0404 OS Version: 5.1.2600 ServicePack: 3.0
22:16:50.0406 0404 Product type: Workstation
22:16:50.0406 0404 ComputerName: DRIESHERMA
22:16:50.0406 0404 UserName: Gebruiker
22:16:50.0406 0404 Windows directory: C:\WINDOWS
22:16:50.0406 0404 System windows directory: C:\WINDOWS
22:16:50.0406 0404 Processor architecture: Intel x86
22:16:50.0406 0404 Number of processors: 1
22:16:50.0406 0404 Page size: 0x1000
22:16:50.0406 0404 Boot type: Normal boot
22:16:50.0406 0404 ============================================================
22:16:53.0281 0404 Drive \Device\Harddisk0\DR0 - Size: 0x2E93E36000 (186.31 Gb), SectorSize: 0x200, Cylinders: 0x5F01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
22:16:53.0281 0404 ============================================================
22:16:53.0281 0404 \Device\Harddisk0\DR0:
22:16:53.0281 0404 MBR partitions:
22:16:53.0281 0404 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x17499EC1
22:16:53.0281 0404 ============================================================
22:16:53.0328 0404 C: <-> \Device\Harddisk0\DR0\Partition0
22:16:53.0328 0404 ============================================================
22:16:53.0328 0404 Initialize success
22:16:53.0328 0404 ============================================================
22:17:11.0625 1236 ============================================================
22:17:11.0625 1236 Scan started
22:17:11.0625 1236 Mode: Manual;
22:17:11.0625 1236 ============================================================
22:17:12.0296 1236 Abiosdsk - ok
22:17:12.0312 1236 abp480n5 - ok
22:17:12.0375 1236 ACEDRV07 (4e5451dd0aec8504d7f8030dd2d4c416) C:\WINDOWS\system32\drivers\ACEDRV07.sys
22:17:12.0453 1236 ACEDRV07 - ok
22:17:12.0546 1236 ACPI (02273a448ba21a7d447daeb47810d40c) C:\WINDOWS\system32\DRIVERS\ACPI.sys
22:17:12.0546 1236 ACPI - ok
22:17:12.0593 1236 ACPIEC (63f517b1a87dabf3f5acb8a7952fc1d1) C:\WINDOWS\system32\drivers\ACPIEC.sys
22:17:12.0593 1236 ACPIEC - ok
22:17:12.0609 1236 adpu160m - ok
22:17:12.0656 1236 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
22:17:12.0687 1236 aec - ok
22:17:12.0750 1236 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
22:17:12.0765 1236 AFD - ok
22:17:12.0828 1236 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys
22:17:12.0828 1236 agp440 - ok
22:17:12.0843 1236 Aha154x - ok
22:17:12.0875 1236 aic78u2 - ok
22:17:12.0890 1236 aic78xx - ok
22:17:12.0937 1236 Alerter (8bed67d13dcb55b3e9ff6dac4c6d3b49) C:\WINDOWS\system32\alrsvc.dll
22:17:12.0937 1236 Alerter - ok
22:17:13.0000 1236 ALG (dab2a89fde5cf791161200d90c1bcb12) C:\WINDOWS\System32\alg.exe
22:17:13.0000 1236 ALG - ok
22:17:13.0015 1236 AliIde - ok
22:17:13.0078 1236 AmdK7 (5e8eb512f516247e8c1b96a9dcab6c9c) C:\WINDOWS\system32\DRIVERS\amdk7.sys
22:17:13.0093 1236 AmdK7 - ok
22:17:13.0125 1236 amsint - ok
22:17:13.0203 1236 AppMgmt (434a70fa278eb3c42140e3755c2fa4f8) C:\WINDOWS\System32\appmgmts.dll
22:17:13.0218 1236 AppMgmt - ok
22:17:13.0281 1236 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
22:17:13.0281 1236 Arp1394 - ok
22:17:13.0296 1236 asc - ok
22:17:13.0312 1236 asc3350p - ok
22:17:13.0328 1236 asc3550 - ok
22:17:13.0562 1236 aspnet_state (0e5e4957549056e2bf2c49f4f6b601ad) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
22:17:13.0562 1236 aspnet_state - ok
22:17:13.0625 1236 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
22:17:13.0625 1236 AsyncMac - ok
22:17:13.0671 1236 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
22:17:13.0671 1236 atapi - ok
22:17:13.0703 1236 Atdisk - ok
22:17:13.0781 1236 ati2mtag (9d888490786f4c3b3e2a81492967a403) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
22:17:13.0843 1236 ati2mtag - ok
22:17:14.0140 1236 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
22:17:14.0156 1236 Atmarpc - ok
22:17:14.0187 1236 AudioSrv (f10745ed3195360e69aa4a6e7768c0e0) C:\WINDOWS\System32\audiosrv.dll
22:17:14.0203 1236 AudioSrv - ok
22:17:14.0281 1236 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
22:17:14.0281 1236 audstub - ok
22:17:14.0953 1236 AVGIDSAgent (ba60fd7a64b9759a14c0fba4a9ed4c7b) C:\Program Files\AVG\AVG2012\avgidsagent.exe
22:17:15.0218 1236 AVGIDSAgent - ok
22:17:15.0453 1236 AVGIDSDriver (1074f787080068c71303b61fae7e7ca4) C:\WINDOWS\system32\DRIVERS\avgidsdriverx.sys
22:17:15.0468 1236 AVGIDSDriver - ok
22:17:15.0484 1236 AVGIDSFilter (61a7e0b02f82cff3db2445bbe50b3589) C:\WINDOWS\system32\DRIVERS\avgidsfilterx.sys
22:17:15.0484 1236 AVGIDSFilter - ok
22:17:15.0515 1236 AVGIDSHX (d63d83659eedf60b3a3e620281a888e5) C:\WINDOWS\system32\DRIVERS\avgidshx.sys
22:17:15.0531 1236 AVGIDSHX - ok
22:17:15.0562 1236 AVGIDSShim (baf975b72062f53d327788e99d64197e) C:\WINDOWS\system32\DRIVERS\avgidsshimx.sys
22:17:15.0562 1236 AVGIDSShim - ok
22:17:15.0718 1236 Avgldx86 (dda6a2a18841e4c9172bb85958b8d948) C:\WINDOWS\system32\DRIVERS\avgldx86.sys
22:17:15.0734 1236 Avgldx86 - ok
22:17:15.0781 1236 Avgmfx86 (ccdd61545aaea265977e4b1efdc74e8c) C:\WINDOWS\system32\DRIVERS\avgmfx86.sys
22:17:15.0781 1236 Avgmfx86 - ok
22:17:15.0812 1236 Avgrkx86 (1fd90b28d2c3100bf4500199c8ad6358) C:\WINDOWS\system32\DRIVERS\avgrkx86.sys
22:17:15.0812 1236 Avgrkx86 - ok
22:17:15.0875 1236 Avgtdix (1263f2554ace925c237a40b4c568d815) C:\WINDOWS\system32\DRIVERS\avgtdix.sys
22:17:15.0875 1236 Avgtdix - ok
22:17:16.0015 1236 avgwd (ea1145debcd508fd25bd1e95c4346929) C:\Program Files\AVG\AVG2012\avgwdsvc.exe
22:17:16.0031 1236 avgwd - ok
22:17:16.0078 1236 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
22:17:16.0078 1236 Beep - ok
22:17:16.0156 1236 BITS (5c0073a51c4873430fa8b262e92183ff) C:\WINDOWS\system32\qmgr.dll
22:17:16.0218 1236 BITS - ok
22:17:16.0296 1236 Browser (69eaa7501f53a40e8c04c69f2391224f) C:\WINDOWS\System32\browser.dll
22:17:16.0312 1236 Browser - ok
22:17:16.0312 1236 catchme - ok
22:17:16.0375 1236 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
22:17:16.0390 1236 cbidf2k - ok
22:17:16.0406 1236 cd20xrnt - ok
22:17:16.0468 1236 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
22:17:16.0468 1236 Cdaudio - ok
22:17:16.0531 1236 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
22:17:16.0531 1236 Cdfs - ok
22:17:16.0593 1236 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
22:17:16.0593 1236 Cdrom - ok
22:17:16.0609 1236 Changer - ok
22:17:16.0656 1236 CiSvc (bd85400700b80fbe3d4a3412bce74861) C:\WINDOWS\system32\cisvc.exe
22:17:16.0656 1236 CiSvc - ok
22:17:16.0796 1236 ClipSrv (4fb6108130829666c8fe96b442fead94) C:\WINDOWS\system32\clipsrv.exe
22:17:16.0796 1236 ClipSrv - ok
22:17:16.0937 1236 clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
22:17:16.0968 1236 clr_optimization_v2.0.50727_32 - ok
22:17:17.0015 1236 CmdIde - ok
22:17:17.0218 1236 cmuda (53f4cc55f3c255439c5973e31f0adce7) C:\WINDOWS\system32\drivers\cmuda.sys
22:17:17.0296 1236 cmuda - ok
22:17:17.0328 1236 COMSysApp - ok
22:17:17.0375 1236 Cpqarray - ok
22:17:17.0437 1236 CryptSvc (0a9cf5d3cf63a8699f28c814ef821c7e) C:\WINDOWS\System32\cryptsvc.dll
22:17:17.0453 1236 CryptSvc - ok
22:17:17.0468 1236 dac2w2k - ok
22:17:17.0500 1236 dac960nt - ok
22:17:17.0625 1236 DcomLaunch (d9883335cc1c17afc3a09c8ac3e4dbe4) C:\WINDOWS\system32\rpcss.dll
22:17:17.0656 1236 DcomLaunch - ok
22:17:17.0718 1236 Dhcp (146ab038f5dbb366122d28444999ab2c) C:\WINDOWS\System32\dhcpcsvc.dll
22:17:17.0734 1236 Dhcp - ok
22:17:17.0765 1236 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
22:17:17.0765 1236 Disk - ok
22:17:17.0781 1236 dmadmin - ok
22:17:17.0921 1236 dmboot (dec123e0c75971d0cc7a6c6a75e28429) C:\WINDOWS\system32\drivers\dmboot.sys
22:17:17.0968 1236 dmboot - ok
22:17:18.0031 1236 dmio (7268e66259722f6228c730685b201092) C:\WINDOWS\system32\DRIVERS\dmio.sys
22:17:18.0046 1236 dmio - ok
22:17:18.0078 1236 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
22:17:18.0078 1236 dmload - ok
22:17:18.0125 1236 dmserver (127db74184e2d3d31655da525a5efde1) C:\WINDOWS\System32\dmserver.dll
22:17:18.0125 1236 dmserver - ok
22:17:18.0203 1236 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
22:17:18.0218 1236 DMusic - ok
22:17:18.0296 1236 Dnscache (de6cdb6cbc5c27b9085cfa6dfe8e5025) C:\WINDOWS\System32\dnsrslvr.dll
22:17:18.0296 1236 Dnscache - ok
22:17:18.0359 1236 Dot3svc (90ee765e1a598b578852901f74f914f1) C:\WINDOWS\System32\dot3svc.dll
22:17:18.0375 1236 Dot3svc - ok
22:17:18.0390 1236 dpti2o - ok
22:17:18.0453 1236 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
22:17:18.0453 1236 drmkaud - ok
22:17:18.0500 1236 EapHost (e6bbdebf7081899d161c773e8d84d015) C:\WINDOWS\System32\eapsvc.dll
22:17:18.0500 1236 EapHost - ok
22:17:18.0562 1236 EL90XBC (6e883bf518296a40959131c2304af714) C:\WINDOWS\system32\DRIVERS\el90xbc5.sys
22:17:18.0562 1236 EL90XBC - ok
22:17:18.0640 1236 ERSvc (2f5c7f650b7af178988946ee4b0d9c01) C:\WINDOWS\System32\ersvc.dll
22:17:18.0640 1236 ERSvc - ok
22:17:18.0687 1236 es1371 (24e564f710d887ecc75cfe59882ecc5d) C:\WINDOWS\system32\drivers\es1371mp.sys
22:17:18.0687 1236 es1371 - ok
22:17:18.0750 1236 Eventlog (657b69389b893f440b07590c9e963f23) C:\WINDOWS\system32\services.exe
22:17:18.0765 1236 Eventlog - ok
22:17:18.0828 1236 EventSystem (97912dc0679d2da60cce589bbc196d72) C:\WINDOWS\system32\es.dll
22:17:18.0843 1236 EventSystem - ok
22:17:19.0000 1236 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
22:17:19.0000 1236 Fastfat - ok
22:17:19.0062 1236 FastUserSwitchingCompatibility (2d5d4156292150fe571872c1b88e9299) C:\WINDOWS\System32\shsvcs.dll
22:17:19.0078 1236 FastUserSwitchingCompatibility - ok
22:17:19.0140 1236 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys
22:17:19.0140 1236 Fdc - ok
22:17:19.0187 1236 Fips (8bfffb5ac954e19dfdb96d56512aa518) C:\WINDOWS\system32\drivers\Fips.sys
22:17:19.0187 1236 Fips - ok
22:17:19.0218 1236 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
22:17:19.0218 1236 Flpydisk - ok
22:17:19.0281 1236 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
22:17:19.0281 1236 FltMgr - ok
22:17:19.0421 1236 FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
22:17:19.0421 1236 FontCache3.0.0.0 - ok
22:17:19.0484 1236 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
22:17:19.0484 1236 Fs_Rec - ok
22:17:19.0515 1236 Ftdisk (fa8ca22e70245c81ff29c36af56292fc) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
22:17:19.0531 1236 Ftdisk - ok
22:17:19.0593 1236 gameenum (065639773d8b03f33577f6cdaea21063) C:\WINDOWS\system32\DRIVERS\gameenum.sys
22:17:19.0593 1236 gameenum - ok
22:17:19.0609 1236 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
22:17:19.0609 1236 Gpc - ok
22:17:19.0765 1236 gupdate1c9b07f434ddce2 (626a24ed1228580b9518c01930936df9) C:\Program Files\Google\Update\GoogleUpdate.exe
22:17:19.0781 1236 gupdate1c9b07f434ddce2 - ok
22:17:19.0812 1236 gupdatem (626a24ed1228580b9518c01930936df9) C:\Program Files\Google\Update\GoogleUpdate.exe
22:17:19.0812 1236 gupdatem - ok
22:17:19.0890 1236 helpsvc (5327bad9b35c33d2a64b64e4cf282ecd) C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
22:17:19.0906 1236 helpsvc - ok
22:17:19.0921 1236 HidServ - ok
22:17:20.0000 1236 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
22:17:20.0000 1236 HidUsb - ok
22:17:20.0093 1236 hkmsvc (1ff903ffa2da1704e5a5443d37d8e49e) C:\WINDOWS\System32\kmsvc.dll
22:17:20.0109 1236 hkmsvc - ok
22:17:20.0125 1236 hpn - ok
22:17:20.0234 1236 HPZid412 (d03d10f7ded688fecf50f8fbf1ea9b8a) C:\WINDOWS\system32\DRIVERS\HPZid412.sys
22:17:20.0234 1236 HPZid412 - ok
22:17:20.0250 1236 HPZipr12 (89f41658929393487b6b7d13c8528ce3) C:\WINDOWS\system32\DRIVERS\HPZipr12.sys
22:17:20.0250 1236 HPZipr12 - ok
22:17:20.0281 1236 HPZius12 (abcb05ccdbf03000354b9553820e39f8) C:\WINDOWS\system32\DRIVERS\HPZius12.sys
22:17:20.0281 1236 HPZius12 - ok
22:17:20.0359 1236 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
22:17:20.0375 1236 HTTP - ok
22:17:20.0437 1236 HTTPFilter (2529c7ba05242beed0027f554d0513bb) C:\WINDOWS\System32\w3ssl.dll
22:17:20.0453 1236 HTTPFilter - ok
22:17:20.0468 1236 i2omgmt - ok
22:17:20.0484 1236 i2omp - ok
22:17:20.0515 1236 i8042prt (c43372d0682f8e32e4ec21117e089ec0) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
22:17:20.0531 1236 i8042prt - ok
22:17:20.0625 1236 idsvc (c01ac32dc5c03076cfb852cb5da5229c) c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
22:17:20.0671 1236 idsvc - ok
22:17:20.0718 1236 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
22:17:20.0734 1236 Imapi - ok
22:17:20.0765 1236 ImapiService (a117772f94c854de5d1bbc1f1962b192) C:\WINDOWS\system32\imapi.exe
22:17:20.0781 1236 ImapiService - ok
22:17:20.0812 1236 ini910u - ok
22:17:20.0875 1236 IntelIde (72c63ad984d427d34bd5b9db838d88eb) C:\WINDOWS\system32\DRIVERS\intelide.sys
22:17:20.0875 1236 IntelIde - ok
22:17:20.0953 1236 intelppm (2d2254fac267e6b1c7865e8ebef60c6d) C:\WINDOWS\system32\DRIVERS\intelppm.sys
22:17:20.0953 1236 intelppm - ok
22:17:21.0000 1236 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
22:17:21.0000 1236 Ip6Fw - ok
22:17:21.0031 1236 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
22:17:21.0046 1236 IpFilterDriver - ok
22:17:21.0062 1236 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
22:17:21.0078 1236 IpInIp - ok
22:17:21.0187 1236 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
22:17:21.0203 1236 IpNat - ok
22:17:21.0265 1236 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
22:17:21.0281 1236 IPSec - ok
22:17:21.0328 1236 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
22:17:21.0328 1236 IRENUM - ok
22:17:21.0406 1236 isapnp (0b78e1a31340e1fb1e389d5633f7c3a0) C:\WINDOWS\system32\DRIVERS\isapnp.sys
22:17:21.0406 1236 isapnp - ok
22:17:21.0609 1236 JavaQuickStarterService (9aa67569d5257462e230767510b0c815) C:\Program Files\Java\jre6\bin\jqs.exe
22:17:21.0625 1236 JavaQuickStarterService - ok
22:17:21.0687 1236 Kbdclass (380397621e94b32c744e7b2cc1330390) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
22:17:21.0687 1236 Kbdclass - ok
22:17:21.0750 1236 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
22:17:21.0765 1236 kmixer - ok
22:17:21.0828 1236 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
22:17:21.0828 1236 KSecDD - ok
22:17:21.0875 1236 lanmanserver (c7955e7edaea462d04f1c4be1d340372) C:\WINDOWS\System32\srvsvc.dll
22:17:21.0890 1236 lanmanserver - ok
22:17:21.0968 1236 lanmanworkstation (a936a575eaf6dce8dc08bc0c53972add) C:\WINDOWS\System32\wkssvc.dll
22:17:21.0968 1236 lanmanworkstation - ok
22:17:22.0000 1236 lbrtfdc - ok
22:17:22.0078 1236 LmHosts (91ae20c5c2776c511994aa1308c05283) C:\WINDOWS\System32\lmhsvc.dll
22:17:22.0093 1236 LmHosts - ok
22:17:22.0140 1236 Messenger (c56a45a03dca11712de9fdf98224230b) C:\WINDOWS\System32\msgsvc.dll
22:17:22.0140 1236 Messenger - ok
22:17:22.0296 1236 Microsoft Office Groove Audit Service (123271bd5237ab991dc5c21fdf8835eb) C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe
22:17:22.0296 1236 Microsoft Office Groove Audit Service - ok
22:17:22.0343 1236 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
22:17:22.0343 1236 mnmdd - ok
22:17:22.0406 1236 mnmsrvc (5b1d994dcf1895afa27600e46a2f0fea) C:\WINDOWS\system32\mnmsrvc.exe
22:17:22.0406 1236 mnmsrvc - ok
22:17:22.0453 1236 Modem (8114eeac353f549331ab73e9af4219ed) C:\WINDOWS\system32\drivers\Modem.sys
22:17:22.0453 1236 Modem - ok
22:17:22.0484 1236 Mouclass (1a4e2214dd63e4a876463d3427ee8261) C:\WINDOWS\system32\DRIVERS\mouclass.sys
22:17:22.0484 1236 Mouclass - ok
22:17:22.0546 1236 mouhid (18017899254e01371e1a39754d6bf98c) C:\WINDOWS\system32\DRIVERS\mouhid.sys
22:17:22.0546 1236 mouhid - ok
22:17:22.0609 1236 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
22:17:22.0609 1236 MountMgr - ok
22:17:22.0656 1236 MozillaMaintenance (96aa8ba23142cc8e2b30f3cae0c80254) C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
22:17:22.0671 1236 MozillaMaintenance - ok
22:17:22.0687 1236 mraid35x - ok
22:17:22.0734 1236 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
22:17:22.0750 1236 MRxDAV - ok
22:17:22.0843 1236 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
22:17:22.0890 1236 MRxSmb - ok
22:17:23.0546 1236 MSDTC (21ea21984d7d1ad50db2e627020ab14c) C:\WINDOWS\system32\msdtc.exe
22:17:23.0546 1236 MSDTC - ok
22:17:23.0609 1236 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
22:17:23.0625 1236 Msfs - ok
22:17:23.0640 1236 MSIServer - ok
22:17:23.0687 1236 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
22:17:23.0687 1236 MSKSSRV - ok
22:17:23.0718 1236 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
22:17:23.0718 1236 MSPCLOCK - ok
22:17:23.0734 1236 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
22:17:23.0734 1236 MSPQM - ok
22:17:23.0781 1236 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
22:17:23.0781 1236 mssmbios - ok
22:17:23.0843 1236 ms_mpu401 (ca3e22598f411199adc2dfee76cd0ae0) C:\WINDOWS\system32\drivers\msmpu401.sys
22:17:23.0843 1236 ms_mpu401 - ok
22:17:23.0890 1236 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
22:17:23.0906 1236 Mup - ok
22:17:23.0984 1236 napagent (87e394c810794d3c70cf22e8316cb23e) C:\WINDOWS\System32\qagentrt.dll
22:17:24.0015 1236 napagent - ok
22:17:24.0062 1236 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
22:17:24.0062 1236 NDIS - ok
22:17:24.0109 1236 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
22:17:24.0109 1236 NdisTapi - ok
22:17:24.0171 1236 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
22:17:24.0171 1236 Ndisuio - ok
22:17:24.0218 1236 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
22:17:24.0218 1236 NdisWan - ok
22:17:24.0265 1236 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
22:17:24.0265 1236 NDProxy - ok
22:17:24.0328 1236 Net Driver HPZ12 (2969d26eee289be7422aa46fc55f4e38) C:\WINDOWS\system32\HPZinw12.dll
22:17:24.0328 1236 Net Driver HPZ12 - ok
22:17:24.0390 1236 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
22:17:24.0406 1236 NetBIOS - ok
22:17:24.0437 1236 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
22:17:24.0437 1236 NetBT - ok
22:17:24.0546 1236 NetDDE (dc6bae085e9b3c2f3a963ed46791feab) C:\WINDOWS\system32\netdde.exe
22:17:24.0546 1236 NetDDE - ok
22:17:24.0578 1236 NetDDEdsdm (dc6bae085e9b3c2f3a963ed46791feab) C:\WINDOWS\system32\netdde.exe
22:17:24.0578 1236 NetDDEdsdm - ok
22:17:24.0625 1236 Netlogon (8754210a3399d19610ce2d71e0c3e5d9) C:\WINDOWS\system32\lsass.exe
22:17:24.0640 1236 Netlogon - ok
22:17:24.0703 1236 Netman (5431fb616ecae0d587c5b97d0b86cbd8) C:\WINDOWS\System32\netman.dll
22:17:24.0718 1236 Netman - ok
22:17:24.0828 1236 NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
22:17:24.0843 1236 NetTcpPortSharing - ok
22:17:24.0890 1236 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys
22:17:24.0890 1236 NIC1394 - ok
22:17:24.0968 1236 Nla (4522cbe00a9e9eee36aa82ed4b319148) C:\WINDOWS\System32\mswsock.dll
22:17:24.0984 1236 Nla - ok
22:17:25.0000 1236 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
22:17:25.0000 1236 Npfs - ok
22:17:25.0093 1236 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
22:17:25.0109 1236 Ntfs - ok
22:17:25.0125 1236 NtLmSsp (8754210a3399d19610ce2d71e0c3e5d9) C:\WINDOWS\system32\lsass.exe
22:17:25.0140 1236 NtLmSsp - ok
22:17:25.0218 1236 NtmsSvc (ac1a78237b53044735693633f8235468) C:\WINDOWS\system32\ntmssvc.dll
22:17:25.0234 1236 NtmsSvc - ok
22:17:25.0281 1236 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
22:17:25.0281 1236 Null - ok
22:17:25.0437 1236 nv (2b298519edbfcf451d43e0f1e8f1006d) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
22:17:25.0515 1236 nv - ok
22:17:25.0859 1236 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
22:17:25.0890 1236 NwlnkFlt - ok
22:17:25.0921 1236 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
22:17:25.0921 1236 NwlnkFwd - ok
22:17:26.0031 1236 odserv (785f487a64950f3cb8e9f16253ba3b7b) C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
22:17:26.0046 1236 odserv - ok
22:17:26.0109 1236 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
22:17:26.0109 1236 ohci1394 - ok
22:17:26.0171 1236 ose (5a432a042dae460abe7199b758e8606c) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
22:17:26.0187 1236 ose - ok
22:17:26.0250 1236 P3 (c6547b4d2394c254030299761ec97259) C:\WINDOWS\system32\DRIVERS\p3.sys
22:17:26.0250 1236 P3 - ok
22:17:26.0265 1236 Parport (e3934ccc20a4d24f1924e13d36d2a5bd) C:\WINDOWS\system32\DRIVERS\parport.sys
22:17:26.0281 1236 Parport - ok
22:17:26.0296 1236 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
22:17:26.0312 1236 PartMgr - ok
22:17:26.0359 1236 ParVdm (1eade28746a64c21e0a808bb12a63326) C:\WINDOWS\system32\drivers\ParVdm.sys
22:17:26.0359 1236 ParVdm - ok
22:17:26.0421 1236 PCI (3b166f9f753c21aedaa9a6bd76b49655) C:\WINDOWS\system32\DRIVERS\pci.sys
22:17:26.0421 1236 PCI - ok
22:17:26.0453 1236 PCIDump - ok
22:17:26.0484 1236 PCIIde (b31edeba4da28283f6b8dc4756fb9585) C:\WINDOWS\system32\DRIVERS\pciide.sys
22:17:26.0484 1236 PCIIde - ok
22:17:26.0531 1236 Pcmcia (2137ffd65f8e609a3a5acd487c56cce0) C:\WINDOWS\system32\drivers\Pcmcia.sys
22:17:26.0546 1236 Pcmcia - ok
22:17:26.0562 1236 PDCOMP - ok
22:17:26.0593 1236 PDFRAME - ok
22:17:26.0609 1236 PDRELI - ok
22:17:26.0625 1236 PDRFRAME - ok
22:17:26.0656 1236 perc2 - ok
22:17:26.0671 1236 perc2hib - ok
22:17:26.0812 1236 PlugPlay (657b69389b893f440b07590c9e963f23) C:\WINDOWS\system32\services.exe
22:17:26.0828 1236 PlugPlay - ok
22:17:26.0890 1236 Pml Driver HPZ12 (bafc9706bdf425a02b66468ab2605c59) C:\WINDOWS\system32\HPZipm12.dll
22:17:26.0890 1236 Pml Driver HPZ12 - ok
22:17:26.0937 1236 PolicyAgent (8754210a3399d19610ce2d71e0c3e5d9) C:\WINDOWS\system32\lsass.exe
22:17:26.0937 1236 PolicyAgent - ok
22:17:26.0968 1236 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
22:17:26.0968 1236 PptpMiniport - ok
22:17:26.0984 1236 ProtectedStorage (8754210a3399d19610ce2d71e0c3e5d9) C:\WINDOWS\system32\lsass.exe
22:17:27.0000 1236 ProtectedStorage - ok
22:17:27.0015 1236 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
22:17:27.0015 1236 PSched - ok
22:17:27.0062 1236 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
22:17:27.0062 1236 Ptilink - ok
22:17:27.0078 1236 ql1080 - ok
22:17:27.0093 1236 Ql10wnt - ok
22:17:27.0125 1236 ql12160 - ok
22:17:27.0140 1236 ql1240 - ok
22:17:27.0171 1236 ql1280 - ok
22:17:27.0203 1236 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
22:17:27.0203 1236 RasAcd - ok
22:17:27.0265 1236 RasAuto (0575d034b1292ca3a9bb9f67a8ee289c) C:\WINDOWS\System32\rasauto.dll
22:17:27.0281 1236 RasAuto - ok
22:17:27.0343 1236 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
22:17:27.0343 1236 Rasl2tp - ok
22:17:27.0406 1236 RasMan (9e7e2df6971a5f00102be3f901cc3bdc) C:\WINDOWS\System32\rasmans.dll
22:17:27.0421 1236 RasMan - ok
22:17:27.0468 1236 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
22:17:27.0468 1236 RasPppoe - ok
22:17:27.0484 1236 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
22:17:27.0500 1236 Raspti - ok
22:17:27.0562 1236 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
22:17:27.0578 1236 Rdbss - ok
22:17:27.0625 1236 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
22:17:27.0625 1236 RDPCDD - ok
22:17:27.0687 1236 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
22:17:27.0703 1236 rdpdr - ok
22:17:27.0765 1236 RDPWD (5b3055daa788bd688594d2f5981f2a83) C:\WINDOWS\system32\drivers\RDPWD.sys
22:17:27.0828 1236 RDPWD - ok
22:17:27.0921 1236 RDSessMgr (ea9fdf71d696b532bdc44c8bff03a737) C:\WINDOWS\system32\sessmgr.exe
22:17:27.0953 1236 RDSessMgr - ok
22:17:27.0984 1236 redbook (4173bc66e485fd77a03c4819f60bd0da) C:\WINDOWS\system32\DRIVERS\redbook.sys
22:17:28.0000 1236 redbook - ok
22:17:28.0046 1236 RemoteAccess (4007abf5d9bf0e55451d775443d1f985) C:\WINDOWS\System32\mprdim.dll
22:17:28.0046 1236 RemoteAccess - ok
22:17:28.0093 1236 RemoteRegistry (2fd5b89bf9289c774c5c730dea96cd91) C:\WINDOWS\system32\regsvc.dll
22:17:28.0093 1236 RemoteRegistry - ok
22:17:28.0140 1236 RpcLocator (be078f8f7ec2491efdd79a53353a060f) C:\WINDOWS\system32\locator.exe
22:17:28.0140 1236 RpcLocator - ok
22:17:28.0218 1236 RpcSs (d9883335cc1c17afc3a09c8ac3e4dbe4) C:\WINDOWS\System32\rpcss.dll
22:17:28.0234 1236 RpcSs - ok
22:17:28.0281 1236 RSVP (ad1b5f1b99fff08c99f443d784711a81) C:\WINDOWS\system32\rsvp.exe
22:17:28.0296 1236 RSVP - ok
22:17:28.0343 1236 rtl8139 (d507c1400284176573224903819ffda3) C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
22:17:28.0343 1236 rtl8139 - ok
22:17:28.0390 1236 SamSs (8754210a3399d19610ce2d71e0c3e5d9) C:\WINDOWS\system32\lsass.exe
22:17:28.0390 1236 SamSs - ok
22:17:28.0453 1236 SCardSvr (1b4cd62174e907c7ef8ec5d4d0a2a616) C:\WINDOWS\System32\SCardSvr.exe
22:17:28.0468 1236 SCardSvr - ok
22:17:28.0546 1236 Schedule (7c288ae0f75cb18cff1df6179a67ad8f) C:\WINDOWS\system32\schedsvc.dll
22:17:28.0562 1236 Schedule - ok
22:17:28.0640 1236 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
22:17:28.0640 1236 Secdrv - ok
22:17:28.0687 1236 seclogon (6983665bea867125b1da5757cd8b2f9d) C:\WINDOWS\System32\seclogon.dll
22:17:28.0687 1236 seclogon - ok
22:17:28.0718 1236 SENS (f6ec8f1e50e40237bddee1cb7fe20b42) C:\WINDOWS\system32\sens.dll
22:17:28.0718 1236 SENS - ok
22:17:28.0765 1236 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
22:17:28.0765 1236 serenum - ok
22:17:28.0796 1236 Serial (92c21762653bb2ce51147eb8a9aa654f) C:\WINDOWS\system32\DRIVERS\serial.sys
22:17:28.0796 1236 Serial - ok
22:17:28.0875 1236 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
22:17:28.0890 1236 Sfloppy - ok
22:17:29.0015 1236 SharedAccess (7579c4be909d47f10f3d8d801cb13ed9) C:\WINDOWS\System32\ipnathlp.dll
22:17:29.0031 1236 SharedAccess - ok
22:17:29.0078 1236 ShellHWDetection (2d5d4156292150fe571872c1b88e9299) C:\WINDOWS\System32\shsvcs.dll
22:17:29.0078 1236 ShellHWDetection - ok
22:17:29.0109 1236 Simbad - ok
22:17:29.0140 1236 Sparrow - ok
22:17:29.0203 1236 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
22:17:29.0203 1236 splitter - ok
22:17:29.0265 1236 Spooler (60784f891563fb1b767f70117fc2428f) C:\WINDOWS\system32\spoolsv.exe
22:17:29.0265 1236 Spooler - ok
22:17:29.0296 1236 sr (64d2a7640e0767ecd3bcb38d3200e7ce) C:\WINDOWS\system32\DRIVERS\sr.sys
22:17:29.0312 1236 sr - ok
22:17:29.0359 1236 srservice (81cbf363c414620caa61bd6843d8fdb9) C:\WINDOWS\system32\srsvc.dll
22:17:29.0375 1236 srservice - ok
22:17:29.0453 1236 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
22:17:29.0500 1236 Srv - ok
22:17:29.0546 1236 SSDPSRV (5b9d0de64be96a806819516440fd211c) C:\WINDOWS\System32\ssdpsrv.dll
22:17:29.0562 1236 SSDPSRV - ok
22:17:29.0609 1236 stisvc (5ae996186d2dc694fef88f14a3fc9242) C:\WINDOWS\system32\wiaservc.dll
22:17:29.0640 1236 stisvc - ok
22:17:29.0687 1236 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
22:17:29.0687 1236 swenum - ok
22:17:29.0750 1236 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
22:17:29.0750 1236 swmidi - ok
22:17:29.0781 1236 SwPrv - ok
22:17:29.0812 1236 symc810 - ok
22:17:29.0843 1236 symc8xx - ok
22:17:29.0859 1236 sym_hi - ok
22:17:29.0875 1236 sym_u3 - ok
22:17:30.0046 1236 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
22:17:30.0078 1236 sysaudio - ok
22:17:30.0140 1236 SysmonLog (251eae7c56c6ab9490311a3c9757e18d) C:\WINDOWS\system32\smlogsvc.exe
22:17:30.0156 1236 SysmonLog - ok
22:17:30.0187 1236 TapiSrv (2bc9fb448f0c2394ff53c83a7bb04731) C:\WINDOWS\System32\tapisrv.dll
22:17:30.0203 1236 TapiSrv - ok
22:17:30.0265 1236 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
22:17:30.0281 1236 Tcpip - ok
22:17:30.0328 1236 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
22:17:30.0359 1236 TDPIPE - ok
22:17:30.0390 1236 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
22:17:30.0390 1236 TDTCP - ok
22:17:30.0421 1236 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
22:17:30.0421 1236 TermDD - ok
22:17:30.0515 1236 TermService (e0aef86a594c9990d6321c5ca239c5b7) C:\WINDOWS\System32\termsrv.dll
22:17:30.0531 1236 TermService - ok
22:17:30.0593 1236 Themes (2d5d4156292150fe571872c1b88e9299) C:\WINDOWS\System32\shsvcs.dll
22:17:30.0593 1236 Themes - ok
22:17:30.0656 1236 TlntSvr (78a2fe13662a119875f10e9ffcb49a8f) C:\WINDOWS\system32\tlntsvr.exe
22:17:30.0656 1236 TlntSvr - ok
22:17:30.0671 1236 TosIde - ok
22:17:30.0718 1236 TrkWks (20655e8ca1c78bc7088b18e93806d21b) C:\WINDOWS\system32\trkwks.dll
22:17:30.0718 1236 TrkWks - ok
22:17:30.0765 1236 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
22:17:30.0765 1236 Udfs - ok
22:17:30.0796 1236 ultra - ok
22:17:30.0859 1236 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
22:17:30.0875 1236 Update - ok
22:17:30.0937 1236 upnphost (01653d6c9604f1fb31a76ec94e08954f) C:\WINDOWS\System32\upnphost.dll
22:17:30.0953 1236 upnphost - ok
22:17:30.0984 1236 UPS (a89796dd0de24cf03b3a39407e1f46a3) C:\WINDOWS\System32\ups.exe
22:17:31.0000 1236 UPS - ok
22:17:31.0125 1236 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
22:17:31.0140 1236 usbccgp - ok
22:17:31.0203 1236 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
22:17:31.0218 1236 usbehci - ok
22:17:31.0250 1236 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
22:17:31.0250 1236 usbhub - ok
22:17:31.0281 1236 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys
22:17:31.0281 1236 usbohci - ok
22:17:31.0312 1236 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
22:17:31.0312 1236 usbprint - ok
22:17:31.0359 1236 usbstor (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
22:17:31.0359 1236 usbstor - ok
22:17:31.0390 1236 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
22:17:31.0390 1236 usbuhci - ok
22:17:31.0437 1236 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
22:17:31.0437 1236 VgaSave - ok
22:17:31.0500 1236 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys
22:17:31.0515 1236 viaagp - ok
22:17:31.0562 1236 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys
22:17:31.0562 1236 ViaIde - ok
22:17:31.0609 1236 VIAudio (819bf44085104be6527b86a88acf856b) C:\WINDOWS\system32\drivers\ac97via.sys
22:17:31.0609 1236 VIAudio - ok
22:17:31.0671 1236 VolSnap (8ab662b3c4691e6ddf61c96bb5b7d103) C:\WINDOWS\system32\drivers\VolSnap.sys
22:17:31.0671 1236 VolSnap - ok
22:17:31.0734 1236 VSS (a585edd6965b301de8a45c6768c7c215) C:\WINDOWS\System32\vssvc.exe
22:17:31.0750 1236 VSS - ok
22:17:31.0968 1236 vToolbarUpdater10.2.0 (3080f1f093869a19fb3d1f0226c73809) C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\10.2.0\ToolbarUpdater.exe
22:17:32.0000 1236 vToolbarUpdater10.2.0 - ok
22:17:32.0062 1236 W32Time (390d8e65f362327ad510b08971478301) C:\WINDOWS\system32\w32time.dll
22:17:32.0078 1236 W32Time - ok
22:17:32.0187 1236 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
22:17:32.0187 1236 Wanarp - ok
22:17:32.0296 1236 Wdf01000 (fd47474bd21794508af449d9d91af6e6) C:\WINDOWS\system32\DRIVERS\Wdf01000.sys
22:17:32.0312 1236 Wdf01000 - ok
22:17:32.0343 1236 WDICA - ok
22:17:32.0406 1236 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
22:17:32.0421 1236 wdmaud - ok
22:17:32.0453 1236 WebClient (33d8e2812054d97a0aec9b8f04277927) C:\WINDOWS\System32\webclnt.dll
22:17:32.0468 1236 WebClient - ok
22:17:32.0578 1236 WinDefend (f45dd1e1365d857dd08bc23563370d0e) C:\Program Files\Windows Defender\MsMpEng.exe
22:17:32.0578 1236 WinDefend - ok
22:17:32.0671 1236 winmgmt (f9e105f369c18e4001e0c05aaf600d73) C:\WINDOWS\system32\wbem\WMIsvc.dll
22:17:32.0671 1236 winmgmt - ok
22:17:32.0734 1236 WmdmPmSN (c51b4a5c05a5475708e3c81c7765b71d) C:\WINDOWS\system32\MsPMSNSv.dll
22:17:32.0750 1236 WmdmPmSN - ok
22:17:32.0828 1236 Wmi (93f8eb8c7cd4e325ec92edbfc545103d) C:\WINDOWS\System32\advapi32.dll
22:17:32.0859 1236 Wmi - ok
22:17:32.0921 1236 WmiApSrv (87f11d161207c7063edabac0aadc33c3) C:\WINDOWS\system32\wbem\wmiapsrv.exe
22:17:32.0937 1236 WmiApSrv - ok
22:17:33.0281 1236 WMPNetworkSvc (79a01acd485687ee602411a06b63a9a5) C:\Program Files\Windows Media Player\WMPNetwk.exe
22:17:33.0343 1236 WMPNetworkSvc - ok
22:17:33.0500 1236 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys
22:17:33.0500 1236 WpdUsb - ok
22:17:33.0546 1236 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
22:17:33.0562 1236 WS2IFSL - ok
22:17:33.0609 1236 wscsvc (843f7fa8ea38e6a4262976dcc994c81a) C:\WINDOWS\system32\wscsvc.dll
22:17:33.0609 1236 wscsvc - ok
22:17:33.0656 1236 wuauserv (1e8fdddef3fe260badab06dae10d753a) C:\WINDOWS\system32\wuauserv.dll
22:17:33.0671 1236 wuauserv - ok
22:17:33.0734 1236 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
22:17:33.0734 1236 WudfPf - ok
22:17:33.0781 1236 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
22:17:33.0781 1236 WudfRd - ok
22:17:33.0828 1236 WudfSvc (05231c04253c5bc30b26cbaae680ed89) C:\WINDOWS\System32\WUDFSvc.dll
22:17:33.0843 1236 WudfSvc - ok
22:17:33.0921 1236 WZCSVC (e99782dbb8ffa2aee72b31dac8d8d887) C:\WINDOWS\System32\wzcsvc.dll
22:17:33.0968 1236 WZCSVC - ok
22:17:34.0046 1236 xmlprov (fd3c38635808920f8235bf2fed642f54) C:\WINDOWS\System32\xmlprov.dll
22:17:34.0062 1236 xmlprov - ok
22:17:34.0093 1236 xpsec - ok
22:17:34.0140 1236 MBR (0x1B8) (25fdd3b61791a226676b12dc5bddef71) \Device\Harddisk0\DR0
22:17:34.0140 1236 \Device\Harddisk0\DR0 ( Rootkit.Boot.Sinowal.b ) - infected
22:17:34.0140 1236 \Device\Harddisk0\DR0 - detected Rootkit.Boot.Sinowal.b (0)
22:17:34.0156 1236 Boot (0x1200) (27660904e3d4dff787d08d4974204375) \Device\Harddisk0\DR0\Partition0
22:17:34.0156 1236 \Device\Harddisk0\DR0\Partition0 - ok
22:17:34.0171 1236 ============================================================
22:17:34.0171 1236 Scan finished
22:17:34.0171 1236 ============================================================
22:17:34.0218 3764 Detected object count: 1
22:17:34.0218 3764 Actual detected object count: 1
22:17:51.0359 3764 \Device\Harddisk0\DR0\# - copied to quarantine
22:17:51.0359 3764 \Device\Harddisk0\DR0 - copied to quarantine
22:17:51.0406 3764 \Device\Harddisk0\DR0 ( Rootkit.Boot.Sinowal.b ) - will be cured on reboot
22:17:51.0437 3764 \Device\Harddisk0\DR0 - ok
22:17:51.0437 3764 \Device\Harddisk0\DR0 ( Rootkit.Boot.Sinowal.b ) - User select action: Cure
22:17:57.0312 1064 Deinitialize success
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:34:08, on 23-5-2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17109)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVG\AVG2012\avgtray.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AVG\AVG2012\avgwdsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\10.2.0\ToolbarUpdater.exe
C:\Program Files\AVG\AVG2012\avgidsagent.exe
C:\Program Files\AVG\AVG2012\avgnsx.exe
C:\Program Files\AVG\AVG2012\avgemcx.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\AVG\AVG2012\avgrsx.exe
C:\Program Files\AVG\AVG2012\avgcsrvx.exe
C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Gebruiker\Bureaublad\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=NL&userid=54eeabec-52b7-4f1e-ab57-71327ff6edb9&affid=110774&searchtype=ds&babsrc=lnkry&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=NL&userid=54eeabec-52b7-4f1e-ab57-71327ff6edb9&affid=110774&searchtype=ds&babsrc=lnkry&q={searchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files\AVG\AVG2012\avgdtiex.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files\AVG\AVG2012\avgtray.exe"
O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe /boot
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files\AVG\AVG2012\avgdtiex.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1221638488613
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1221642580684
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\10.2.0\ViProtocol.dll
O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgwdsvc.exe
O23 - Service: Google Updateservice (gupdate1c9b07f434ddce2) (gupdate1c9b07f434ddce2) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: vToolbarUpdater10.2.0 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\10.2.0\ToolbarUpdater.exe
--
End of file - 8944 bytes
-
Hallo,
ik ben met de computer van mijn oom bezig die helemaal niets meer deed en ben redelijk ver gekomen om alles weer te fixen.
Alleen nu heb ik wanneer ik scan (AVG FREE 2012) nog steeds last van trojaanse paarden die uiteraard niet verwijdert kunnen worden door AVG.
Heb al van alles geprobeerd maar kom niet verder. Blijf nu elke keer steken op zo'n 50 bedreigingen waarvan dan ongeveer de helft niet verwijdert wordt.
Wie kan mij helpen?
Hieronder mijn hijackthis logfile.
Alvast bedankt!
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:40:10, on 23-5-2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17109)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVG\AVG2012\avgtray.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\AVG\AVG2012\avgwdsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\10.2.0\ToolbarUpdater.exe
C:\Program Files\AVG\AVG2012\avgidsagent.exe
C:\Program Files\AVG\AVG2012\avgnsx.exe
C:\Program Files\AVG\AVG2012\avgemcx.exe
C:\Program Files\AVG\AVG2012\avgrsx.exe
C:\Program Files\AVG\AVG2012\avgcsrvx.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Gebruiker\Bureaublad\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=NL&userid=54eeabec-52b7-4f1e-ab57-71327ff6edb9&affid=110774&searchtype=ds&babsrc=lnkry&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=NL&userid=54eeabec-52b7-4f1e-ab57-71327ff6edb9&affid=110774&searchtype=ds&babsrc=lnkry&q={searchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files\AVG\AVG2012\avgdtiex.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - (no file)
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files\AVG\AVG2012\avgtray.exe"
O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe /boot
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files\AVG\AVG2012\avgdtiex.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1221638488613
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1221642580684
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\10.2.0\ViProtocol.dll
O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgwdsvc.exe
O23 - Service: Google Updateservice (gupdate1c9b07f434ddce2) (gupdate1c9b07f434ddce2) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: vToolbarUpdater10.2.0 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\10.2.0\ToolbarUpdater.exe
--
End of file - 9013 bytes
Diverse Trojaans paard bedreigingen
in Archief Bestrijding malware & virussen
Geplaatst:
ok, helaas. dan is het niet anders. In ieder geval bedankt!