Ga naar inhoud

vannie1981

Lid
  • Items

    6
  • Registratiedatum

  • Laatst bezocht

Berichten die geplaatst zijn door vannie1981

  1. Zo, die scan duurde zeker lang.

    Hierbij het rapportje:

    Emsisoft Emergency Kit - Versie 1.0

    Laatste Update: 24-5-2012 15:04:21

    Scaninstellingen:

    Scantype: Diepe Scan

    Objecten: Geheugen, Sporen, Cookies, C:\

    Scan archieven: Aan

    Heuristieken: Uit

    ADS Scan: Aan

    Scan gestart: 24-5-2012 15:08:36

    c:\windows\system32\TVUAx\libcurl.dll Ontdekt: Trace.File.dl.tvunetworks.com!A2

    c:\windows\system32\TVUAx\libeay32.dll Ontdekt: Trace.File.dl.tvunetworks.com!A2

    c:\windows\system32\TVUAx\libexpatw.dll Ontdekt: Trace.File.dl.tvunetworks.com!A2

    c:\windows\system32\TVUAx\npTVUAx.dll Ontdekt: Trace.File.dl.tvunetworks.com!A2

    c:\windows\system32\TVUAx\ssleay32.dll Ontdekt: Trace.File.dl.tvunetworks.com!A2

    c:\windows\system32\TVUAx\zlib1.dll Ontdekt: Trace.File.dl.tvunetworks.com!A2

    Value: HKEY_CLASSES_ROOT\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113} --> HelpText Ontdekt: Trace.Registry.SEO Toolbar!A2

    Value: HKEY_CLASSES_ROOT\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113} --> MenuText Ontdekt: Trace.Registry.SEO Toolbar!A2

    Value: HKEY_CLASSES_ROOT\AppID\TVUAx.DLL --> AppID Ontdekt: Trace.Registry.dl.tvunetworks.com!A2

    Value: HKEY_CLASSES_ROOT\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} --> AppID Ontdekt: Trace.Registry.dl.tvunetworks.com!A2

    Value: HKEY_CLASSES_ROOT\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0}\InprocServer32 --> ThreadingModel Ontdekt: Trace.Registry.dl.tvunetworks.com!A2

    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\TVUAx.DLL --> AppID Ontdekt: Trace.Registry.dl.tvunetworks.com!A2

    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} --> AppID Ontdekt: Trace.Registry.dl.tvunetworks.com!A2

    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0}\InprocServer32 --> ThreadingModel Ontdekt: Trace.Registry.dl.tvunetworks.com!A2

    C:\Documents and Settings\Gebruiker\Bureaublad\loader\apps\tibia831\download.zip/Tibia.exe Ontdekt: Virus.Win32.Virut!IK

    C:\Documents and Settings\Gebruiker\Bureaublad\loader\apps\tibia831\Tibia.exe Ontdekt: Virus.Win32.Virut!IK

    C:\Documents and Settings\Gebruiker\Bureaublad\loader\ipchanger.rar/1.da_ Ontdekt: Trojan.Agent!IK

    C:\Documents and Settings\Gebruiker\Bureaublad\loader\ipchanger.zip/1.da_ Ontdekt: Trojan.Agent!IK

    C:\Documents and Settings\Gebruiker\Bureaublad\loader\Tibia Loader.rar/loader\updater.exe Ontdekt: Trojan-Dropper.Agent!IK

    C:\Documents and Settings\Gebruiker\Mijn documenten\Downloads\cnet2_RegpairSetup_exe.exe Ontdekt: Riskware.Win32.InstallCore.AMN!A2

    C:\Documents and Settings\Gebruiker\Mijn documenten\ipchanger\2.da_ Ontdekt: Trojan.Win32.Spy.45056.Y!A2

    C:\Documents and Settings\Gebruiker\Mijn documenten\Mijn ontvangen bestanden\loader(1).exe Ontdekt: Trojan-Dropper.Delf!IK

    C:\Muziek\bestanden 2 november 2007\Dries Heringa\DRIES HERINGA\Mijn afbeeldingen\Neverland.exe Ontdekt: Trojan.Win32.GameServer.AMN!A2

    C:\Muziek\My downloads\BSINSTALLNL.exe Ontdekt: Riskware.AdWare.Win32.SaveNow!IK

    C:\Muziek\White Stars Universe Twisters Full.wma Ontdekt: Trojan-Downloader.ASX.Wimad!IK

    C:\Program Files\TibiaBot NG\loader\apps\hook.dll Ontdekt: Trojan.ATRAPS!IK

    C:\Program Files\TibiaBot NG\loader\apps\tibia831\download.zip/Tibia.exe Ontdekt: Virus.Win32.Virut!IK

    C:\Program Files\TibiaBot NG\loader\apps\tibia831\Tibia.exe Ontdekt: Virus.Win32.Virut!IK

    C:\Program Files\TibiaBot NG\loader\ipchanger.rar/1.da_ Ontdekt: Trojan.Agent!IK

    C:\Program Files\TibiaBot NG\loader\ipchanger.zip/1.da_ Ontdekt: Trojan.Agent!IK

    C:\Program Files\TibiaBot NG\loader\loader.exe Ontdekt: Trojan-Dropper.Win32.VB!IK

    C:\Program Files\TibiaBot NG\loader\Tibia Loader.rar/loader\updater.exe Ontdekt: Trojan-Dropper.Agent!IK

    C:\Program Files\TibiaBot NG\loader\Tibia Loader.rar/loader.exe Ontdekt: Trojan-Dropper.Win32.VB!IK

    C:\Qoobox\Quarantine\C\Documents and Settings\Gebruiker\Application Data\59AA.A05.vir Ontdekt: Backdoor.Conf!IK

    C:\System Volume Information\_restore{090D9B8E-3167-4E9B-B6C4-7EE725F9A4D5}\RP1187\A0288320.exe Ontdekt: Riskware.Hacktool.Nokia!IK

    C:\TDSSKiller_Quarantine\23.05.2012_22.16.50\mbr0000\mbr0000\tsk0000.dta Ontdekt: Trojan.DOS.Sinowal!IK

    Gescand

    Bestanden: 158197

    Sporen: 431845

    Cookies: 64

    Processen: 41

    Gevonden

    Bestanden: 22

    Sporen: 14

    Cookies: 0

    Processen: 0

    Registersleutels: 0

    Scan Geëindigd: 24-5-2012 20:10:39

    Scantijd: 5:02:03

    C:\TDSSKiller_Quarantine\23.05.2012_22.16.50\mbr0000\mbr0000\tsk0000.dta Verwijderd Trojan.DOS.Sinowal!IK

    C:\System Volume Information\_restore{090D9B8E-3167-4E9B-B6C4-7EE725F9A4D5}\RP1187\A0288320.exe Verwijderd Riskware.Hacktool.Nokia!IK

    C:\Qoobox\Quarantine\C\Documents and Settings\Gebruiker\Application Data\59AA.A05.vir Verwijderd Backdoor.Conf!IK

    C:\Program Files\TibiaBot NG\loader\loader.exe Verwijderd Trojan-Dropper.Win32.VB!IK

    C:\Program Files\TibiaBot NG\loader\Tibia Loader.rar/loader.exe Verwijderd Trojan-Dropper.Win32.VB!IK

    C:\Program Files\TibiaBot NG\loader\apps\hook.dll Verwijderd Trojan.ATRAPS!IK

    C:\Muziek\White Stars Universe Twisters Full.wma Verwijderd Trojan-Downloader.ASX.Wimad!IK

    C:\Muziek\My downloads\BSINSTALLNL.exe Verwijderd Riskware.AdWare.Win32.SaveNow!IK

    C:\Muziek\bestanden 2 november 2007\Dries Heringa\DRIES HERINGA\Mijn afbeeldingen\Neverland.exe Verwijderd Trojan.Win32.GameServer.AMN!A2

    C:\Documents and Settings\Gebruiker\Mijn documenten\Mijn ontvangen bestanden\loader(1).exe Verwijderd Trojan-Dropper.Delf!IK

    C:\Documents and Settings\Gebruiker\Mijn documenten\ipchanger\2.da_ Verwijderd Trojan.Win32.Spy.45056.Y!A2

    C:\Documents and Settings\Gebruiker\Mijn documenten\Downloads\cnet2_RegpairSetup_exe.exe Verwijderd Riskware.Win32.InstallCore.AMN!A2

    C:\Documents and Settings\Gebruiker\Bureaublad\loader\Tibia Loader.rar/loader\updater.exe Verwijderd Trojan-Dropper.Agent!IK

    C:\Program Files\TibiaBot NG\loader\Tibia Loader.rar/loader\updater.exe Verwijderd Trojan-Dropper.Agent!IK

    C:\Documents and Settings\Gebruiker\Bureaublad\loader\ipchanger.rar/1.da_ Verwijderd Trojan.Agent!IK

    C:\Documents and Settings\Gebruiker\Bureaublad\loader\ipchanger.zip/1.da_ Verwijderd Trojan.Agent!IK

    C:\Program Files\TibiaBot NG\loader\ipchanger.rar/1.da_ Verwijderd Trojan.Agent!IK

    C:\Program Files\TibiaBot NG\loader\ipchanger.zip/1.da_ Verwijderd Trojan.Agent!IK

    C:\Documents and Settings\Gebruiker\Bureaublad\loader\apps\tibia831\download.zip/Tibia.exe Verwijderd Virus.Win32.Virut!IK

    C:\Documents and Settings\Gebruiker\Bureaublad\loader\apps\tibia831\Tibia.exe Verwijderd Virus.Win32.Virut!IK

    C:\Program Files\TibiaBot NG\loader\apps\tibia831\download.zip/Tibia.exe Verwijderd Virus.Win32.Virut!IK

    C:\Program Files\TibiaBot NG\loader\apps\tibia831\Tibia.exe Verwijderd Virus.Win32.Virut!IK

    Value: HKEY_CLASSES_ROOT\AppID\TVUAx.DLL --> AppID Verwijderd Trace.Registry.dl.tvunetworks.com!A2

    Value: HKEY_CLASSES_ROOT\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} --> AppID Verwijderd Trace.Registry.dl.tvunetworks.com!A2

    Value: HKEY_CLASSES_ROOT\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0}\InprocServer32 --> ThreadingModel Verwijderd Trace.Registry.dl.tvunetworks.com!A2

    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\TVUAx.DLL --> AppID Verwijderd Trace.Registry.dl.tvunetworks.com!A2

    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} --> AppID Verwijderd Trace.Registry.dl.tvunetworks.com!A2

    Value: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0}\InprocServer32 --> ThreadingModel Verwijderd Trace.Registry.dl.tvunetworks.com!A2

    Value: HKEY_CLASSES_ROOT\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113} --> HelpText Verwijderd Trace.Registry.SEO Toolbar!A2

    Value: HKEY_CLASSES_ROOT\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113} --> MenuText Verwijderd Trace.Registry.SEO Toolbar!A2

    c:\windows\system32\TVUAx\libcurl.dll Verwijderd Trace.File.dl.tvunetworks.com!A2

    c:\windows\system32\TVUAx\libeay32.dll Verwijderd Trace.File.dl.tvunetworks.com!A2

    c:\windows\system32\TVUAx\libexpatw.dll Verwijderd Trace.File.dl.tvunetworks.com!A2

    c:\windows\system32\TVUAx\npTVUAx.dll Verwijderd Trace.File.dl.tvunetworks.com!A2

    c:\windows\system32\TVUAx\ssleay32.dll Verwijderd Trace.File.dl.tvunetworks.com!A2

    c:\windows\system32\TVUAx\zlib1.dll Verwijderd Trace.File.dl.tvunetworks.com!A2

    Verwijderd

    Bestanden: 22

    Sporen: 14

    Cookies: 0

  2. Bij deze.....

    22:16:50.0265 0404 TDSS rootkit removing tool 2.7.37.0 May 23 2012 08:15:30

    22:16:50.0406 0404 ============================================================

    22:16:50.0406 0404 Current date / time: 2012/05/23 22:16:50.0406

    22:16:50.0406 0404 SystemInfo:

    22:16:50.0406 0404

    22:16:50.0406 0404 OS Version: 5.1.2600 ServicePack: 3.0

    22:16:50.0406 0404 Product type: Workstation

    22:16:50.0406 0404 ComputerName: DRIESHERMA

    22:16:50.0406 0404 UserName: Gebruiker

    22:16:50.0406 0404 Windows directory: C:\WINDOWS

    22:16:50.0406 0404 System windows directory: C:\WINDOWS

    22:16:50.0406 0404 Processor architecture: Intel x86

    22:16:50.0406 0404 Number of processors: 1

    22:16:50.0406 0404 Page size: 0x1000

    22:16:50.0406 0404 Boot type: Normal boot

    22:16:50.0406 0404 ============================================================

    22:16:53.0281 0404 Drive \Device\Harddisk0\DR0 - Size: 0x2E93E36000 (186.31 Gb), SectorSize: 0x200, Cylinders: 0x5F01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054

    22:16:53.0281 0404 ============================================================

    22:16:53.0281 0404 \Device\Harddisk0\DR0:

    22:16:53.0281 0404 MBR partitions:

    22:16:53.0281 0404 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x17499EC1

    22:16:53.0281 0404 ============================================================

    22:16:53.0328 0404 C: <-> \Device\Harddisk0\DR0\Partition0

    22:16:53.0328 0404 ============================================================

    22:16:53.0328 0404 Initialize success

    22:16:53.0328 0404 ============================================================

    22:17:11.0625 1236 ============================================================

    22:17:11.0625 1236 Scan started

    22:17:11.0625 1236 Mode: Manual;

    22:17:11.0625 1236 ============================================================

    22:17:12.0296 1236 Abiosdsk - ok

    22:17:12.0312 1236 abp480n5 - ok

    22:17:12.0375 1236 ACEDRV07 (4e5451dd0aec8504d7f8030dd2d4c416) C:\WINDOWS\system32\drivers\ACEDRV07.sys

    22:17:12.0453 1236 ACEDRV07 - ok

    22:17:12.0546 1236 ACPI (02273a448ba21a7d447daeb47810d40c) C:\WINDOWS\system32\DRIVERS\ACPI.sys

    22:17:12.0546 1236 ACPI - ok

    22:17:12.0593 1236 ACPIEC (63f517b1a87dabf3f5acb8a7952fc1d1) C:\WINDOWS\system32\drivers\ACPIEC.sys

    22:17:12.0593 1236 ACPIEC - ok

    22:17:12.0609 1236 adpu160m - ok

    22:17:12.0656 1236 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys

    22:17:12.0687 1236 aec - ok

    22:17:12.0750 1236 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys

    22:17:12.0765 1236 AFD - ok

    22:17:12.0828 1236 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys

    22:17:12.0828 1236 agp440 - ok

    22:17:12.0843 1236 Aha154x - ok

    22:17:12.0875 1236 aic78u2 - ok

    22:17:12.0890 1236 aic78xx - ok

    22:17:12.0937 1236 Alerter (8bed67d13dcb55b3e9ff6dac4c6d3b49) C:\WINDOWS\system32\alrsvc.dll

    22:17:12.0937 1236 Alerter - ok

    22:17:13.0000 1236 ALG (dab2a89fde5cf791161200d90c1bcb12) C:\WINDOWS\System32\alg.exe

    22:17:13.0000 1236 ALG - ok

    22:17:13.0015 1236 AliIde - ok

    22:17:13.0078 1236 AmdK7 (5e8eb512f516247e8c1b96a9dcab6c9c) C:\WINDOWS\system32\DRIVERS\amdk7.sys

    22:17:13.0093 1236 AmdK7 - ok

    22:17:13.0125 1236 amsint - ok

    22:17:13.0203 1236 AppMgmt (434a70fa278eb3c42140e3755c2fa4f8) C:\WINDOWS\System32\appmgmts.dll

    22:17:13.0218 1236 AppMgmt - ok

    22:17:13.0281 1236 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys

    22:17:13.0281 1236 Arp1394 - ok

    22:17:13.0296 1236 asc - ok

    22:17:13.0312 1236 asc3350p - ok

    22:17:13.0328 1236 asc3550 - ok

    22:17:13.0562 1236 aspnet_state (0e5e4957549056e2bf2c49f4f6b601ad) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe

    22:17:13.0562 1236 aspnet_state - ok

    22:17:13.0625 1236 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys

    22:17:13.0625 1236 AsyncMac - ok

    22:17:13.0671 1236 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys

    22:17:13.0671 1236 atapi - ok

    22:17:13.0703 1236 Atdisk - ok

    22:17:13.0781 1236 ati2mtag (9d888490786f4c3b3e2a81492967a403) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys

    22:17:13.0843 1236 ati2mtag - ok

    22:17:14.0140 1236 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys

    22:17:14.0156 1236 Atmarpc - ok

    22:17:14.0187 1236 AudioSrv (f10745ed3195360e69aa4a6e7768c0e0) C:\WINDOWS\System32\audiosrv.dll

    22:17:14.0203 1236 AudioSrv - ok

    22:17:14.0281 1236 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys

    22:17:14.0281 1236 audstub - ok

    22:17:14.0953 1236 AVGIDSAgent (ba60fd7a64b9759a14c0fba4a9ed4c7b) C:\Program Files\AVG\AVG2012\avgidsagent.exe

    22:17:15.0218 1236 AVGIDSAgent - ok

    22:17:15.0453 1236 AVGIDSDriver (1074f787080068c71303b61fae7e7ca4) C:\WINDOWS\system32\DRIVERS\avgidsdriverx.sys

    22:17:15.0468 1236 AVGIDSDriver - ok

    22:17:15.0484 1236 AVGIDSFilter (61a7e0b02f82cff3db2445bbe50b3589) C:\WINDOWS\system32\DRIVERS\avgidsfilterx.sys

    22:17:15.0484 1236 AVGIDSFilter - ok

    22:17:15.0515 1236 AVGIDSHX (d63d83659eedf60b3a3e620281a888e5) C:\WINDOWS\system32\DRIVERS\avgidshx.sys

    22:17:15.0531 1236 AVGIDSHX - ok

    22:17:15.0562 1236 AVGIDSShim (baf975b72062f53d327788e99d64197e) C:\WINDOWS\system32\DRIVERS\avgidsshimx.sys

    22:17:15.0562 1236 AVGIDSShim - ok

    22:17:15.0718 1236 Avgldx86 (dda6a2a18841e4c9172bb85958b8d948) C:\WINDOWS\system32\DRIVERS\avgldx86.sys

    22:17:15.0734 1236 Avgldx86 - ok

    22:17:15.0781 1236 Avgmfx86 (ccdd61545aaea265977e4b1efdc74e8c) C:\WINDOWS\system32\DRIVERS\avgmfx86.sys

    22:17:15.0781 1236 Avgmfx86 - ok

    22:17:15.0812 1236 Avgrkx86 (1fd90b28d2c3100bf4500199c8ad6358) C:\WINDOWS\system32\DRIVERS\avgrkx86.sys

    22:17:15.0812 1236 Avgrkx86 - ok

    22:17:15.0875 1236 Avgtdix (1263f2554ace925c237a40b4c568d815) C:\WINDOWS\system32\DRIVERS\avgtdix.sys

    22:17:15.0875 1236 Avgtdix - ok

    22:17:16.0015 1236 avgwd (ea1145debcd508fd25bd1e95c4346929) C:\Program Files\AVG\AVG2012\avgwdsvc.exe

    22:17:16.0031 1236 avgwd - ok

    22:17:16.0078 1236 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys

    22:17:16.0078 1236 Beep - ok

    22:17:16.0156 1236 BITS (5c0073a51c4873430fa8b262e92183ff) C:\WINDOWS\system32\qmgr.dll

    22:17:16.0218 1236 BITS - ok

    22:17:16.0296 1236 Browser (69eaa7501f53a40e8c04c69f2391224f) C:\WINDOWS\System32\browser.dll

    22:17:16.0312 1236 Browser - ok

    22:17:16.0312 1236 catchme - ok

    22:17:16.0375 1236 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys

    22:17:16.0390 1236 cbidf2k - ok

    22:17:16.0406 1236 cd20xrnt - ok

    22:17:16.0468 1236 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys

    22:17:16.0468 1236 Cdaudio - ok

    22:17:16.0531 1236 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys

    22:17:16.0531 1236 Cdfs - ok

    22:17:16.0593 1236 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys

    22:17:16.0593 1236 Cdrom - ok

    22:17:16.0609 1236 Changer - ok

    22:17:16.0656 1236 CiSvc (bd85400700b80fbe3d4a3412bce74861) C:\WINDOWS\system32\cisvc.exe

    22:17:16.0656 1236 CiSvc - ok

    22:17:16.0796 1236 ClipSrv (4fb6108130829666c8fe96b442fead94) C:\WINDOWS\system32\clipsrv.exe

    22:17:16.0796 1236 ClipSrv - ok

    22:17:16.0937 1236 clr_optimization_v2.0.50727_32 (d87acaed61e417bba546ced5e7e36d9c) C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

    22:17:16.0968 1236 clr_optimization_v2.0.50727_32 - ok

    22:17:17.0015 1236 CmdIde - ok

    22:17:17.0218 1236 cmuda (53f4cc55f3c255439c5973e31f0adce7) C:\WINDOWS\system32\drivers\cmuda.sys

    22:17:17.0296 1236 cmuda - ok

    22:17:17.0328 1236 COMSysApp - ok

    22:17:17.0375 1236 Cpqarray - ok

    22:17:17.0437 1236 CryptSvc (0a9cf5d3cf63a8699f28c814ef821c7e) C:\WINDOWS\System32\cryptsvc.dll

    22:17:17.0453 1236 CryptSvc - ok

    22:17:17.0468 1236 dac2w2k - ok

    22:17:17.0500 1236 dac960nt - ok

    22:17:17.0625 1236 DcomLaunch (d9883335cc1c17afc3a09c8ac3e4dbe4) C:\WINDOWS\system32\rpcss.dll

    22:17:17.0656 1236 DcomLaunch - ok

    22:17:17.0718 1236 Dhcp (146ab038f5dbb366122d28444999ab2c) C:\WINDOWS\System32\dhcpcsvc.dll

    22:17:17.0734 1236 Dhcp - ok

    22:17:17.0765 1236 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys

    22:17:17.0765 1236 Disk - ok

    22:17:17.0781 1236 dmadmin - ok

    22:17:17.0921 1236 dmboot (dec123e0c75971d0cc7a6c6a75e28429) C:\WINDOWS\system32\drivers\dmboot.sys

    22:17:17.0968 1236 dmboot - ok

    22:17:18.0031 1236 dmio (7268e66259722f6228c730685b201092) C:\WINDOWS\system32\DRIVERS\dmio.sys

    22:17:18.0046 1236 dmio - ok

    22:17:18.0078 1236 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys

    22:17:18.0078 1236 dmload - ok

    22:17:18.0125 1236 dmserver (127db74184e2d3d31655da525a5efde1) C:\WINDOWS\System32\dmserver.dll

    22:17:18.0125 1236 dmserver - ok

    22:17:18.0203 1236 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys

    22:17:18.0218 1236 DMusic - ok

    22:17:18.0296 1236 Dnscache (de6cdb6cbc5c27b9085cfa6dfe8e5025) C:\WINDOWS\System32\dnsrslvr.dll

    22:17:18.0296 1236 Dnscache - ok

    22:17:18.0359 1236 Dot3svc (90ee765e1a598b578852901f74f914f1) C:\WINDOWS\System32\dot3svc.dll

    22:17:18.0375 1236 Dot3svc - ok

    22:17:18.0390 1236 dpti2o - ok

    22:17:18.0453 1236 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys

    22:17:18.0453 1236 drmkaud - ok

    22:17:18.0500 1236 EapHost (e6bbdebf7081899d161c773e8d84d015) C:\WINDOWS\System32\eapsvc.dll

    22:17:18.0500 1236 EapHost - ok

    22:17:18.0562 1236 EL90XBC (6e883bf518296a40959131c2304af714) C:\WINDOWS\system32\DRIVERS\el90xbc5.sys

    22:17:18.0562 1236 EL90XBC - ok

    22:17:18.0640 1236 ERSvc (2f5c7f650b7af178988946ee4b0d9c01) C:\WINDOWS\System32\ersvc.dll

    22:17:18.0640 1236 ERSvc - ok

    22:17:18.0687 1236 es1371 (24e564f710d887ecc75cfe59882ecc5d) C:\WINDOWS\system32\drivers\es1371mp.sys

    22:17:18.0687 1236 es1371 - ok

    22:17:18.0750 1236 Eventlog (657b69389b893f440b07590c9e963f23) C:\WINDOWS\system32\services.exe

    22:17:18.0765 1236 Eventlog - ok

    22:17:18.0828 1236 EventSystem (97912dc0679d2da60cce589bbc196d72) C:\WINDOWS\system32\es.dll

    22:17:18.0843 1236 EventSystem - ok

    22:17:19.0000 1236 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys

    22:17:19.0000 1236 Fastfat - ok

    22:17:19.0062 1236 FastUserSwitchingCompatibility (2d5d4156292150fe571872c1b88e9299) C:\WINDOWS\System32\shsvcs.dll

    22:17:19.0078 1236 FastUserSwitchingCompatibility - ok

    22:17:19.0140 1236 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys

    22:17:19.0140 1236 Fdc - ok

    22:17:19.0187 1236 Fips (8bfffb5ac954e19dfdb96d56512aa518) C:\WINDOWS\system32\drivers\Fips.sys

    22:17:19.0187 1236 Fips - ok

    22:17:19.0218 1236 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys

    22:17:19.0218 1236 Flpydisk - ok

    22:17:19.0281 1236 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys

    22:17:19.0281 1236 FltMgr - ok

    22:17:19.0421 1236 FontCache3.0.0.0 (8ba7c024070f2b7fdd98ed8a4ba41789) c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe

    22:17:19.0421 1236 FontCache3.0.0.0 - ok

    22:17:19.0484 1236 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys

    22:17:19.0484 1236 Fs_Rec - ok

    22:17:19.0515 1236 Ftdisk (fa8ca22e70245c81ff29c36af56292fc) C:\WINDOWS\system32\DRIVERS\ftdisk.sys

    22:17:19.0531 1236 Ftdisk - ok

    22:17:19.0593 1236 gameenum (065639773d8b03f33577f6cdaea21063) C:\WINDOWS\system32\DRIVERS\gameenum.sys

    22:17:19.0593 1236 gameenum - ok

    22:17:19.0609 1236 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys

    22:17:19.0609 1236 Gpc - ok

    22:17:19.0765 1236 gupdate1c9b07f434ddce2 (626a24ed1228580b9518c01930936df9) C:\Program Files\Google\Update\GoogleUpdate.exe

    22:17:19.0781 1236 gupdate1c9b07f434ddce2 - ok

    22:17:19.0812 1236 gupdatem (626a24ed1228580b9518c01930936df9) C:\Program Files\Google\Update\GoogleUpdate.exe

    22:17:19.0812 1236 gupdatem - ok

    22:17:19.0890 1236 helpsvc (5327bad9b35c33d2a64b64e4cf282ecd) C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll

    22:17:19.0906 1236 helpsvc - ok

    22:17:19.0921 1236 HidServ - ok

    22:17:20.0000 1236 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys

    22:17:20.0000 1236 HidUsb - ok

    22:17:20.0093 1236 hkmsvc (1ff903ffa2da1704e5a5443d37d8e49e) C:\WINDOWS\System32\kmsvc.dll

    22:17:20.0109 1236 hkmsvc - ok

    22:17:20.0125 1236 hpn - ok

    22:17:20.0234 1236 HPZid412 (d03d10f7ded688fecf50f8fbf1ea9b8a) C:\WINDOWS\system32\DRIVERS\HPZid412.sys

    22:17:20.0234 1236 HPZid412 - ok

    22:17:20.0250 1236 HPZipr12 (89f41658929393487b6b7d13c8528ce3) C:\WINDOWS\system32\DRIVERS\HPZipr12.sys

    22:17:20.0250 1236 HPZipr12 - ok

    22:17:20.0281 1236 HPZius12 (abcb05ccdbf03000354b9553820e39f8) C:\WINDOWS\system32\DRIVERS\HPZius12.sys

    22:17:20.0281 1236 HPZius12 - ok

    22:17:20.0359 1236 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys

    22:17:20.0375 1236 HTTP - ok

    22:17:20.0437 1236 HTTPFilter (2529c7ba05242beed0027f554d0513bb) C:\WINDOWS\System32\w3ssl.dll

    22:17:20.0453 1236 HTTPFilter - ok

    22:17:20.0468 1236 i2omgmt - ok

    22:17:20.0484 1236 i2omp - ok

    22:17:20.0515 1236 i8042prt (c43372d0682f8e32e4ec21117e089ec0) C:\WINDOWS\system32\DRIVERS\i8042prt.sys

    22:17:20.0531 1236 i8042prt - ok

    22:17:20.0625 1236 idsvc (c01ac32dc5c03076cfb852cb5da5229c) c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe

    22:17:20.0671 1236 idsvc - ok

    22:17:20.0718 1236 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys

    22:17:20.0734 1236 Imapi - ok

    22:17:20.0765 1236 ImapiService (a117772f94c854de5d1bbc1f1962b192) C:\WINDOWS\system32\imapi.exe

    22:17:20.0781 1236 ImapiService - ok

    22:17:20.0812 1236 ini910u - ok

    22:17:20.0875 1236 IntelIde (72c63ad984d427d34bd5b9db838d88eb) C:\WINDOWS\system32\DRIVERS\intelide.sys

    22:17:20.0875 1236 IntelIde - ok

    22:17:20.0953 1236 intelppm (2d2254fac267e6b1c7865e8ebef60c6d) C:\WINDOWS\system32\DRIVERS\intelppm.sys

    22:17:20.0953 1236 intelppm - ok

    22:17:21.0000 1236 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys

    22:17:21.0000 1236 Ip6Fw - ok

    22:17:21.0031 1236 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys

    22:17:21.0046 1236 IpFilterDriver - ok

    22:17:21.0062 1236 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys

    22:17:21.0078 1236 IpInIp - ok

    22:17:21.0187 1236 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys

    22:17:21.0203 1236 IpNat - ok

    22:17:21.0265 1236 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys

    22:17:21.0281 1236 IPSec - ok

    22:17:21.0328 1236 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys

    22:17:21.0328 1236 IRENUM - ok

    22:17:21.0406 1236 isapnp (0b78e1a31340e1fb1e389d5633f7c3a0) C:\WINDOWS\system32\DRIVERS\isapnp.sys

    22:17:21.0406 1236 isapnp - ok

    22:17:21.0609 1236 JavaQuickStarterService (9aa67569d5257462e230767510b0c815) C:\Program Files\Java\jre6\bin\jqs.exe

    22:17:21.0625 1236 JavaQuickStarterService - ok

    22:17:21.0687 1236 Kbdclass (380397621e94b32c744e7b2cc1330390) C:\WINDOWS\system32\DRIVERS\kbdclass.sys

    22:17:21.0687 1236 Kbdclass - ok

    22:17:21.0750 1236 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys

    22:17:21.0765 1236 kmixer - ok

    22:17:21.0828 1236 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys

    22:17:21.0828 1236 KSecDD - ok

    22:17:21.0875 1236 lanmanserver (c7955e7edaea462d04f1c4be1d340372) C:\WINDOWS\System32\srvsvc.dll

    22:17:21.0890 1236 lanmanserver - ok

    22:17:21.0968 1236 lanmanworkstation (a936a575eaf6dce8dc08bc0c53972add) C:\WINDOWS\System32\wkssvc.dll

    22:17:21.0968 1236 lanmanworkstation - ok

    22:17:22.0000 1236 lbrtfdc - ok

    22:17:22.0078 1236 LmHosts (91ae20c5c2776c511994aa1308c05283) C:\WINDOWS\System32\lmhsvc.dll

    22:17:22.0093 1236 LmHosts - ok

    22:17:22.0140 1236 Messenger (c56a45a03dca11712de9fdf98224230b) C:\WINDOWS\System32\msgsvc.dll

    22:17:22.0140 1236 Messenger - ok

    22:17:22.0296 1236 Microsoft Office Groove Audit Service (123271bd5237ab991dc5c21fdf8835eb) C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe

    22:17:22.0296 1236 Microsoft Office Groove Audit Service - ok

    22:17:22.0343 1236 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys

    22:17:22.0343 1236 mnmdd - ok

    22:17:22.0406 1236 mnmsrvc (5b1d994dcf1895afa27600e46a2f0fea) C:\WINDOWS\system32\mnmsrvc.exe

    22:17:22.0406 1236 mnmsrvc - ok

    22:17:22.0453 1236 Modem (8114eeac353f549331ab73e9af4219ed) C:\WINDOWS\system32\drivers\Modem.sys

    22:17:22.0453 1236 Modem - ok

    22:17:22.0484 1236 Mouclass (1a4e2214dd63e4a876463d3427ee8261) C:\WINDOWS\system32\DRIVERS\mouclass.sys

    22:17:22.0484 1236 Mouclass - ok

    22:17:22.0546 1236 mouhid (18017899254e01371e1a39754d6bf98c) C:\WINDOWS\system32\DRIVERS\mouhid.sys

    22:17:22.0546 1236 mouhid - ok

    22:17:22.0609 1236 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys

    22:17:22.0609 1236 MountMgr - ok

    22:17:22.0656 1236 MozillaMaintenance (96aa8ba23142cc8e2b30f3cae0c80254) C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

    22:17:22.0671 1236 MozillaMaintenance - ok

    22:17:22.0687 1236 mraid35x - ok

    22:17:22.0734 1236 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys

    22:17:22.0750 1236 MRxDAV - ok

    22:17:22.0843 1236 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys

    22:17:22.0890 1236 MRxSmb - ok

    22:17:23.0546 1236 MSDTC (21ea21984d7d1ad50db2e627020ab14c) C:\WINDOWS\system32\msdtc.exe

    22:17:23.0546 1236 MSDTC - ok

    22:17:23.0609 1236 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys

    22:17:23.0625 1236 Msfs - ok

    22:17:23.0640 1236 MSIServer - ok

    22:17:23.0687 1236 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys

    22:17:23.0687 1236 MSKSSRV - ok

    22:17:23.0718 1236 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys

    22:17:23.0718 1236 MSPCLOCK - ok

    22:17:23.0734 1236 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys

    22:17:23.0734 1236 MSPQM - ok

    22:17:23.0781 1236 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys

    22:17:23.0781 1236 mssmbios - ok

    22:17:23.0843 1236 ms_mpu401 (ca3e22598f411199adc2dfee76cd0ae0) C:\WINDOWS\system32\drivers\msmpu401.sys

    22:17:23.0843 1236 ms_mpu401 - ok

    22:17:23.0890 1236 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys

    22:17:23.0906 1236 Mup - ok

    22:17:23.0984 1236 napagent (87e394c810794d3c70cf22e8316cb23e) C:\WINDOWS\System32\qagentrt.dll

    22:17:24.0015 1236 napagent - ok

    22:17:24.0062 1236 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys

    22:17:24.0062 1236 NDIS - ok

    22:17:24.0109 1236 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys

    22:17:24.0109 1236 NdisTapi - ok

    22:17:24.0171 1236 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys

    22:17:24.0171 1236 Ndisuio - ok

    22:17:24.0218 1236 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys

    22:17:24.0218 1236 NdisWan - ok

    22:17:24.0265 1236 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys

    22:17:24.0265 1236 NDProxy - ok

    22:17:24.0328 1236 Net Driver HPZ12 (2969d26eee289be7422aa46fc55f4e38) C:\WINDOWS\system32\HPZinw12.dll

    22:17:24.0328 1236 Net Driver HPZ12 - ok

    22:17:24.0390 1236 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys

    22:17:24.0406 1236 NetBIOS - ok

    22:17:24.0437 1236 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys

    22:17:24.0437 1236 NetBT - ok

    22:17:24.0546 1236 NetDDE (dc6bae085e9b3c2f3a963ed46791feab) C:\WINDOWS\system32\netdde.exe

    22:17:24.0546 1236 NetDDE - ok

    22:17:24.0578 1236 NetDDEdsdm (dc6bae085e9b3c2f3a963ed46791feab) C:\WINDOWS\system32\netdde.exe

    22:17:24.0578 1236 NetDDEdsdm - ok

    22:17:24.0625 1236 Netlogon (8754210a3399d19610ce2d71e0c3e5d9) C:\WINDOWS\system32\lsass.exe

    22:17:24.0640 1236 Netlogon - ok

    22:17:24.0703 1236 Netman (5431fb616ecae0d587c5b97d0b86cbd8) C:\WINDOWS\System32\netman.dll

    22:17:24.0718 1236 Netman - ok

    22:17:24.0828 1236 NetTcpPortSharing (d34612c5d02d026535b3095d620626ae) c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe

    22:17:24.0843 1236 NetTcpPortSharing - ok

    22:17:24.0890 1236 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys

    22:17:24.0890 1236 NIC1394 - ok

    22:17:24.0968 1236 Nla (4522cbe00a9e9eee36aa82ed4b319148) C:\WINDOWS\System32\mswsock.dll

    22:17:24.0984 1236 Nla - ok

    22:17:25.0000 1236 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys

    22:17:25.0000 1236 Npfs - ok

    22:17:25.0093 1236 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys

    22:17:25.0109 1236 Ntfs - ok

    22:17:25.0125 1236 NtLmSsp (8754210a3399d19610ce2d71e0c3e5d9) C:\WINDOWS\system32\lsass.exe

    22:17:25.0140 1236 NtLmSsp - ok

    22:17:25.0218 1236 NtmsSvc (ac1a78237b53044735693633f8235468) C:\WINDOWS\system32\ntmssvc.dll

    22:17:25.0234 1236 NtmsSvc - ok

    22:17:25.0281 1236 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys

    22:17:25.0281 1236 Null - ok

    22:17:25.0437 1236 nv (2b298519edbfcf451d43e0f1e8f1006d) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys

    22:17:25.0515 1236 nv - ok

    22:17:25.0859 1236 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys

    22:17:25.0890 1236 NwlnkFlt - ok

    22:17:25.0921 1236 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys

    22:17:25.0921 1236 NwlnkFwd - ok

    22:17:26.0031 1236 odserv (785f487a64950f3cb8e9f16253ba3b7b) C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE

    22:17:26.0046 1236 odserv - ok

    22:17:26.0109 1236 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys

    22:17:26.0109 1236 ohci1394 - ok

    22:17:26.0171 1236 ose (5a432a042dae460abe7199b758e8606c) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

    22:17:26.0187 1236 ose - ok

    22:17:26.0250 1236 P3 (c6547b4d2394c254030299761ec97259) C:\WINDOWS\system32\DRIVERS\p3.sys

    22:17:26.0250 1236 P3 - ok

    22:17:26.0265 1236 Parport (e3934ccc20a4d24f1924e13d36d2a5bd) C:\WINDOWS\system32\DRIVERS\parport.sys

    22:17:26.0281 1236 Parport - ok

    22:17:26.0296 1236 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys

    22:17:26.0312 1236 PartMgr - ok

    22:17:26.0359 1236 ParVdm (1eade28746a64c21e0a808bb12a63326) C:\WINDOWS\system32\drivers\ParVdm.sys

    22:17:26.0359 1236 ParVdm - ok

    22:17:26.0421 1236 PCI (3b166f9f753c21aedaa9a6bd76b49655) C:\WINDOWS\system32\DRIVERS\pci.sys

    22:17:26.0421 1236 PCI - ok

    22:17:26.0453 1236 PCIDump - ok

    22:17:26.0484 1236 PCIIde (b31edeba4da28283f6b8dc4756fb9585) C:\WINDOWS\system32\DRIVERS\pciide.sys

    22:17:26.0484 1236 PCIIde - ok

    22:17:26.0531 1236 Pcmcia (2137ffd65f8e609a3a5acd487c56cce0) C:\WINDOWS\system32\drivers\Pcmcia.sys

    22:17:26.0546 1236 Pcmcia - ok

    22:17:26.0562 1236 PDCOMP - ok

    22:17:26.0593 1236 PDFRAME - ok

    22:17:26.0609 1236 PDRELI - ok

    22:17:26.0625 1236 PDRFRAME - ok

    22:17:26.0656 1236 perc2 - ok

    22:17:26.0671 1236 perc2hib - ok

    22:17:26.0812 1236 PlugPlay (657b69389b893f440b07590c9e963f23) C:\WINDOWS\system32\services.exe

    22:17:26.0828 1236 PlugPlay - ok

    22:17:26.0890 1236 Pml Driver HPZ12 (bafc9706bdf425a02b66468ab2605c59) C:\WINDOWS\system32\HPZipm12.dll

    22:17:26.0890 1236 Pml Driver HPZ12 - ok

    22:17:26.0937 1236 PolicyAgent (8754210a3399d19610ce2d71e0c3e5d9) C:\WINDOWS\system32\lsass.exe

    22:17:26.0937 1236 PolicyAgent - ok

    22:17:26.0968 1236 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys

    22:17:26.0968 1236 PptpMiniport - ok

    22:17:26.0984 1236 ProtectedStorage (8754210a3399d19610ce2d71e0c3e5d9) C:\WINDOWS\system32\lsass.exe

    22:17:27.0000 1236 ProtectedStorage - ok

    22:17:27.0015 1236 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys

    22:17:27.0015 1236 PSched - ok

    22:17:27.0062 1236 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys

    22:17:27.0062 1236 Ptilink - ok

    22:17:27.0078 1236 ql1080 - ok

    22:17:27.0093 1236 Ql10wnt - ok

    22:17:27.0125 1236 ql12160 - ok

    22:17:27.0140 1236 ql1240 - ok

    22:17:27.0171 1236 ql1280 - ok

    22:17:27.0203 1236 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys

    22:17:27.0203 1236 RasAcd - ok

    22:17:27.0265 1236 RasAuto (0575d034b1292ca3a9bb9f67a8ee289c) C:\WINDOWS\System32\rasauto.dll

    22:17:27.0281 1236 RasAuto - ok

    22:17:27.0343 1236 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys

    22:17:27.0343 1236 Rasl2tp - ok

    22:17:27.0406 1236 RasMan (9e7e2df6971a5f00102be3f901cc3bdc) C:\WINDOWS\System32\rasmans.dll

    22:17:27.0421 1236 RasMan - ok

    22:17:27.0468 1236 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys

    22:17:27.0468 1236 RasPppoe - ok

    22:17:27.0484 1236 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys

    22:17:27.0500 1236 Raspti - ok

    22:17:27.0562 1236 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys

    22:17:27.0578 1236 Rdbss - ok

    22:17:27.0625 1236 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys

    22:17:27.0625 1236 RDPCDD - ok

    22:17:27.0687 1236 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys

    22:17:27.0703 1236 rdpdr - ok

    22:17:27.0765 1236 RDPWD (5b3055daa788bd688594d2f5981f2a83) C:\WINDOWS\system32\drivers\RDPWD.sys

    22:17:27.0828 1236 RDPWD - ok

    22:17:27.0921 1236 RDSessMgr (ea9fdf71d696b532bdc44c8bff03a737) C:\WINDOWS\system32\sessmgr.exe

    22:17:27.0953 1236 RDSessMgr - ok

    22:17:27.0984 1236 redbook (4173bc66e485fd77a03c4819f60bd0da) C:\WINDOWS\system32\DRIVERS\redbook.sys

    22:17:28.0000 1236 redbook - ok

    22:17:28.0046 1236 RemoteAccess (4007abf5d9bf0e55451d775443d1f985) C:\WINDOWS\System32\mprdim.dll

    22:17:28.0046 1236 RemoteAccess - ok

    22:17:28.0093 1236 RemoteRegistry (2fd5b89bf9289c774c5c730dea96cd91) C:\WINDOWS\system32\regsvc.dll

    22:17:28.0093 1236 RemoteRegistry - ok

    22:17:28.0140 1236 RpcLocator (be078f8f7ec2491efdd79a53353a060f) C:\WINDOWS\system32\locator.exe

    22:17:28.0140 1236 RpcLocator - ok

    22:17:28.0218 1236 RpcSs (d9883335cc1c17afc3a09c8ac3e4dbe4) C:\WINDOWS\System32\rpcss.dll

    22:17:28.0234 1236 RpcSs - ok

    22:17:28.0281 1236 RSVP (ad1b5f1b99fff08c99f443d784711a81) C:\WINDOWS\system32\rsvp.exe

    22:17:28.0296 1236 RSVP - ok

    22:17:28.0343 1236 rtl8139 (d507c1400284176573224903819ffda3) C:\WINDOWS\system32\DRIVERS\RTL8139.SYS

    22:17:28.0343 1236 rtl8139 - ok

    22:17:28.0390 1236 SamSs (8754210a3399d19610ce2d71e0c3e5d9) C:\WINDOWS\system32\lsass.exe

    22:17:28.0390 1236 SamSs - ok

    22:17:28.0453 1236 SCardSvr (1b4cd62174e907c7ef8ec5d4d0a2a616) C:\WINDOWS\System32\SCardSvr.exe

    22:17:28.0468 1236 SCardSvr - ok

    22:17:28.0546 1236 Schedule (7c288ae0f75cb18cff1df6179a67ad8f) C:\WINDOWS\system32\schedsvc.dll

    22:17:28.0562 1236 Schedule - ok

    22:17:28.0640 1236 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys

    22:17:28.0640 1236 Secdrv - ok

    22:17:28.0687 1236 seclogon (6983665bea867125b1da5757cd8b2f9d) C:\WINDOWS\System32\seclogon.dll

    22:17:28.0687 1236 seclogon - ok

    22:17:28.0718 1236 SENS (f6ec8f1e50e40237bddee1cb7fe20b42) C:\WINDOWS\system32\sens.dll

    22:17:28.0718 1236 SENS - ok

    22:17:28.0765 1236 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys

    22:17:28.0765 1236 serenum - ok

    22:17:28.0796 1236 Serial (92c21762653bb2ce51147eb8a9aa654f) C:\WINDOWS\system32\DRIVERS\serial.sys

    22:17:28.0796 1236 Serial - ok

    22:17:28.0875 1236 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys

    22:17:28.0890 1236 Sfloppy - ok

    22:17:29.0015 1236 SharedAccess (7579c4be909d47f10f3d8d801cb13ed9) C:\WINDOWS\System32\ipnathlp.dll

    22:17:29.0031 1236 SharedAccess - ok

    22:17:29.0078 1236 ShellHWDetection (2d5d4156292150fe571872c1b88e9299) C:\WINDOWS\System32\shsvcs.dll

    22:17:29.0078 1236 ShellHWDetection - ok

    22:17:29.0109 1236 Simbad - ok

    22:17:29.0140 1236 Sparrow - ok

    22:17:29.0203 1236 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys

    22:17:29.0203 1236 splitter - ok

    22:17:29.0265 1236 Spooler (60784f891563fb1b767f70117fc2428f) C:\WINDOWS\system32\spoolsv.exe

    22:17:29.0265 1236 Spooler - ok

    22:17:29.0296 1236 sr (64d2a7640e0767ecd3bcb38d3200e7ce) C:\WINDOWS\system32\DRIVERS\sr.sys

    22:17:29.0312 1236 sr - ok

    22:17:29.0359 1236 srservice (81cbf363c414620caa61bd6843d8fdb9) C:\WINDOWS\system32\srsvc.dll

    22:17:29.0375 1236 srservice - ok

    22:17:29.0453 1236 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys

    22:17:29.0500 1236 Srv - ok

    22:17:29.0546 1236 SSDPSRV (5b9d0de64be96a806819516440fd211c) C:\WINDOWS\System32\ssdpsrv.dll

    22:17:29.0562 1236 SSDPSRV - ok

    22:17:29.0609 1236 stisvc (5ae996186d2dc694fef88f14a3fc9242) C:\WINDOWS\system32\wiaservc.dll

    22:17:29.0640 1236 stisvc - ok

    22:17:29.0687 1236 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys

    22:17:29.0687 1236 swenum - ok

    22:17:29.0750 1236 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys

    22:17:29.0750 1236 swmidi - ok

    22:17:29.0781 1236 SwPrv - ok

    22:17:29.0812 1236 symc810 - ok

    22:17:29.0843 1236 symc8xx - ok

    22:17:29.0859 1236 sym_hi - ok

    22:17:29.0875 1236 sym_u3 - ok

    22:17:30.0046 1236 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys

    22:17:30.0078 1236 sysaudio - ok

    22:17:30.0140 1236 SysmonLog (251eae7c56c6ab9490311a3c9757e18d) C:\WINDOWS\system32\smlogsvc.exe

    22:17:30.0156 1236 SysmonLog - ok

    22:17:30.0187 1236 TapiSrv (2bc9fb448f0c2394ff53c83a7bb04731) C:\WINDOWS\System32\tapisrv.dll

    22:17:30.0203 1236 TapiSrv - ok

    22:17:30.0265 1236 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys

    22:17:30.0281 1236 Tcpip - ok

    22:17:30.0328 1236 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys

    22:17:30.0359 1236 TDPIPE - ok

    22:17:30.0390 1236 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys

    22:17:30.0390 1236 TDTCP - ok

    22:17:30.0421 1236 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys

    22:17:30.0421 1236 TermDD - ok

    22:17:30.0515 1236 TermService (e0aef86a594c9990d6321c5ca239c5b7) C:\WINDOWS\System32\termsrv.dll

    22:17:30.0531 1236 TermService - ok

    22:17:30.0593 1236 Themes (2d5d4156292150fe571872c1b88e9299) C:\WINDOWS\System32\shsvcs.dll

    22:17:30.0593 1236 Themes - ok

    22:17:30.0656 1236 TlntSvr (78a2fe13662a119875f10e9ffcb49a8f) C:\WINDOWS\system32\tlntsvr.exe

    22:17:30.0656 1236 TlntSvr - ok

    22:17:30.0671 1236 TosIde - ok

    22:17:30.0718 1236 TrkWks (20655e8ca1c78bc7088b18e93806d21b) C:\WINDOWS\system32\trkwks.dll

    22:17:30.0718 1236 TrkWks - ok

    22:17:30.0765 1236 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys

    22:17:30.0765 1236 Udfs - ok

    22:17:30.0796 1236 ultra - ok

    22:17:30.0859 1236 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys

    22:17:30.0875 1236 Update - ok

    22:17:30.0937 1236 upnphost (01653d6c9604f1fb31a76ec94e08954f) C:\WINDOWS\System32\upnphost.dll

    22:17:30.0953 1236 upnphost - ok

    22:17:30.0984 1236 UPS (a89796dd0de24cf03b3a39407e1f46a3) C:\WINDOWS\System32\ups.exe

    22:17:31.0000 1236 UPS - ok

    22:17:31.0125 1236 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys

    22:17:31.0140 1236 usbccgp - ok

    22:17:31.0203 1236 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys

    22:17:31.0218 1236 usbehci - ok

    22:17:31.0250 1236 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys

    22:17:31.0250 1236 usbhub - ok

    22:17:31.0281 1236 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys

    22:17:31.0281 1236 usbohci - ok

    22:17:31.0312 1236 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys

    22:17:31.0312 1236 usbprint - ok

    22:17:31.0359 1236 usbstor (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS

    22:17:31.0359 1236 usbstor - ok

    22:17:31.0390 1236 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys

    22:17:31.0390 1236 usbuhci - ok

    22:17:31.0437 1236 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys

    22:17:31.0437 1236 VgaSave - ok

    22:17:31.0500 1236 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys

    22:17:31.0515 1236 viaagp - ok

    22:17:31.0562 1236 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys

    22:17:31.0562 1236 ViaIde - ok

    22:17:31.0609 1236 VIAudio (819bf44085104be6527b86a88acf856b) C:\WINDOWS\system32\drivers\ac97via.sys

    22:17:31.0609 1236 VIAudio - ok

    22:17:31.0671 1236 VolSnap (8ab662b3c4691e6ddf61c96bb5b7d103) C:\WINDOWS\system32\drivers\VolSnap.sys

    22:17:31.0671 1236 VolSnap - ok

    22:17:31.0734 1236 VSS (a585edd6965b301de8a45c6768c7c215) C:\WINDOWS\System32\vssvc.exe

    22:17:31.0750 1236 VSS - ok

    22:17:31.0968 1236 vToolbarUpdater10.2.0 (3080f1f093869a19fb3d1f0226c73809) C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\10.2.0\ToolbarUpdater.exe

    22:17:32.0000 1236 vToolbarUpdater10.2.0 - ok

    22:17:32.0062 1236 W32Time (390d8e65f362327ad510b08971478301) C:\WINDOWS\system32\w32time.dll

    22:17:32.0078 1236 W32Time - ok

    22:17:32.0187 1236 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys

    22:17:32.0187 1236 Wanarp - ok

    22:17:32.0296 1236 Wdf01000 (fd47474bd21794508af449d9d91af6e6) C:\WINDOWS\system32\DRIVERS\Wdf01000.sys

    22:17:32.0312 1236 Wdf01000 - ok

    22:17:32.0343 1236 WDICA - ok

    22:17:32.0406 1236 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys

    22:17:32.0421 1236 wdmaud - ok

    22:17:32.0453 1236 WebClient (33d8e2812054d97a0aec9b8f04277927) C:\WINDOWS\System32\webclnt.dll

    22:17:32.0468 1236 WebClient - ok

    22:17:32.0578 1236 WinDefend (f45dd1e1365d857dd08bc23563370d0e) C:\Program Files\Windows Defender\MsMpEng.exe

    22:17:32.0578 1236 WinDefend - ok

    22:17:32.0671 1236 winmgmt (f9e105f369c18e4001e0c05aaf600d73) C:\WINDOWS\system32\wbem\WMIsvc.dll

    22:17:32.0671 1236 winmgmt - ok

    22:17:32.0734 1236 WmdmPmSN (c51b4a5c05a5475708e3c81c7765b71d) C:\WINDOWS\system32\MsPMSNSv.dll

    22:17:32.0750 1236 WmdmPmSN - ok

    22:17:32.0828 1236 Wmi (93f8eb8c7cd4e325ec92edbfc545103d) C:\WINDOWS\System32\advapi32.dll

    22:17:32.0859 1236 Wmi - ok

    22:17:32.0921 1236 WmiApSrv (87f11d161207c7063edabac0aadc33c3) C:\WINDOWS\system32\wbem\wmiapsrv.exe

    22:17:32.0937 1236 WmiApSrv - ok

    22:17:33.0281 1236 WMPNetworkSvc (79a01acd485687ee602411a06b63a9a5) C:\Program Files\Windows Media Player\WMPNetwk.exe

    22:17:33.0343 1236 WMPNetworkSvc - ok

    22:17:33.0500 1236 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys

    22:17:33.0500 1236 WpdUsb - ok

    22:17:33.0546 1236 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys

    22:17:33.0562 1236 WS2IFSL - ok

    22:17:33.0609 1236 wscsvc (843f7fa8ea38e6a4262976dcc994c81a) C:\WINDOWS\system32\wscsvc.dll

    22:17:33.0609 1236 wscsvc - ok

    22:17:33.0656 1236 wuauserv (1e8fdddef3fe260badab06dae10d753a) C:\WINDOWS\system32\wuauserv.dll

    22:17:33.0671 1236 wuauserv - ok

    22:17:33.0734 1236 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys

    22:17:33.0734 1236 WudfPf - ok

    22:17:33.0781 1236 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys

    22:17:33.0781 1236 WudfRd - ok

    22:17:33.0828 1236 WudfSvc (05231c04253c5bc30b26cbaae680ed89) C:\WINDOWS\System32\WUDFSvc.dll

    22:17:33.0843 1236 WudfSvc - ok

    22:17:33.0921 1236 WZCSVC (e99782dbb8ffa2aee72b31dac8d8d887) C:\WINDOWS\System32\wzcsvc.dll

    22:17:33.0968 1236 WZCSVC - ok

    22:17:34.0046 1236 xmlprov (fd3c38635808920f8235bf2fed642f54) C:\WINDOWS\System32\xmlprov.dll

    22:17:34.0062 1236 xmlprov - ok

    22:17:34.0093 1236 xpsec - ok

    22:17:34.0140 1236 MBR (0x1B8) (25fdd3b61791a226676b12dc5bddef71) \Device\Harddisk0\DR0

    22:17:34.0140 1236 \Device\Harddisk0\DR0 ( Rootkit.Boot.Sinowal.b ) - infected

    22:17:34.0140 1236 \Device\Harddisk0\DR0 - detected Rootkit.Boot.Sinowal.b (0)

    22:17:34.0156 1236 Boot (0x1200) (27660904e3d4dff787d08d4974204375) \Device\Harddisk0\DR0\Partition0

    22:17:34.0156 1236 \Device\Harddisk0\DR0\Partition0 - ok

    22:17:34.0171 1236 ============================================================

    22:17:34.0171 1236 Scan finished

    22:17:34.0171 1236 ============================================================

    22:17:34.0218 3764 Detected object count: 1

    22:17:34.0218 3764 Actual detected object count: 1

    22:17:51.0359 3764 \Device\Harddisk0\DR0\# - copied to quarantine

    22:17:51.0359 3764 \Device\Harddisk0\DR0 - copied to quarantine

    22:17:51.0406 3764 \Device\Harddisk0\DR0 ( Rootkit.Boot.Sinowal.b ) - will be cured on reboot

    22:17:51.0437 3764 \Device\Harddisk0\DR0 - ok

    22:17:51.0437 3764 \Device\Harddisk0\DR0 ( Rootkit.Boot.Sinowal.b ) - User select action: Cure

    22:17:57.0312 1064 Deinitialize success

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 22:34:08, on 23-5-2012

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v7.00 (7.00.6000.17109)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\WgaTray.exe

    C:\WINDOWS\Explorer.EXE

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\Google\Update\GoogleUpdate.exe

    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

    C:\Program Files\Common Files\Java\Java Update\jusched.exe

    C:\Program Files\AVG\AVG2012\avgtray.exe

    C:\Program Files\Windows Media Player\WMPNSCFG.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\AVG\AVG2012\avgwdsvc.exe

    C:\WINDOWS\System32\svchost.exe

    C:\Program Files\Java\jre6\bin\jqs.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\10.2.0\ToolbarUpdater.exe

    C:\Program Files\AVG\AVG2012\avgidsagent.exe

    C:\Program Files\AVG\AVG2012\avgnsx.exe

    C:\Program Files\AVG\AVG2012\avgemcx.exe

    C:\WINDOWS\system32\wuauclt.exe

    C:\Program Files\AVG\AVG2012\avgrsx.exe

    C:\Program Files\AVG\AVG2012\avgcsrvx.exe

    C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

    C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

    C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

    C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

    C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

    C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

    C:\Documents and Settings\Gebruiker\Bureaublad\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL

    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=NL&userid=54eeabec-52b7-4f1e-ab57-71327ff6edb9&affid=110774&searchtype=ds&babsrc=lnkry&q={searchTerms}

    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=NL&userid=54eeabec-52b7-4f1e-ab57-71327ff6edb9&affid=110774&searchtype=ds&babsrc=lnkry&q={searchTerms}

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files\AVG\AVG2012\avgdtiex.dll

    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll

    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

    O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll

    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

    O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files\AVG\AVG2012\avgtray.exe"

    O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe /boot

    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

    O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files\AVG\AVG2012\avgdtiex.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1221638488613

    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab

    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1221642580684

    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab

    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

    O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll

    O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\10.2.0\ViProtocol.dll

    O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

    O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

    O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgidsagent.exe

    O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgwdsvc.exe

    O23 - Service: Google Updateservice (gupdate1c9b07f434ddce2) (gupdate1c9b07f434ddce2) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

    O23 - Service: vToolbarUpdater10.2.0 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\10.2.0\ToolbarUpdater.exe

    --

    End of file - 8944 bytes

  3. Hallo,

    ik ben met de computer van mijn oom bezig die helemaal niets meer deed en ben redelijk ver gekomen om alles weer te fixen.

    Alleen nu heb ik wanneer ik scan (AVG FREE 2012) nog steeds last van trojaanse paarden die uiteraard niet verwijdert kunnen worden door AVG.

    Heb al van alles geprobeerd maar kom niet verder. Blijf nu elke keer steken op zo'n 50 bedreigingen waarvan dan ongeveer de helft niet verwijdert wordt.

    Wie kan mij helpen?

    Hieronder mijn hijackthis logfile.

    Alvast bedankt!

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 19:40:10, on 23-5-2012

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v7.00 (7.00.6000.17109)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

    C:\Program Files\Common Files\Java\Java Update\jusched.exe

    C:\Program Files\AVG\AVG2012\avgtray.exe

    C:\Program Files\Windows Media Player\WMPNSCFG.exe

    C:\Program Files\AVG\AVG2012\avgwdsvc.exe

    C:\WINDOWS\System32\svchost.exe

    C:\Program Files\Java\jre6\bin\jqs.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\10.2.0\ToolbarUpdater.exe

    C:\Program Files\AVG\AVG2012\avgidsagent.exe

    C:\Program Files\AVG\AVG2012\avgnsx.exe

    C:\Program Files\AVG\AVG2012\avgemcx.exe

    C:\Program Files\AVG\AVG2012\avgrsx.exe

    C:\Program Files\AVG\AVG2012\avgcsrvx.exe

    C:\WINDOWS\explorer.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

    C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

    C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

    C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

    C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

    C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

    C:\Documents and Settings\Gebruiker\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

    C:\Documents and Settings\Gebruiker\Bureaublad\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl/

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=NL&userid=54eeabec-52b7-4f1e-ab57-71327ff6edb9&affid=110774&searchtype=ds&babsrc=lnkry&q={searchTerms}

    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.helperbar.com/?publisher=OPENCANDY&dpid=OPENCANDYAPRIL&co=NL&userid=54eeabec-52b7-4f1e-ab57-71327ff6edb9&affid=110774&searchtype=ds&babsrc=lnkry&q={searchTerms}

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files\AVG\AVG2012\avgdtiex.dll

    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll

    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

    O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll

    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

    O3 - Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - (no file)

    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

    O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files\AVG\AVG2012\avgtray.exe"

    O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe /boot

    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

    O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files\AVG\AVG2012\avgdtiex.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1221638488613

    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab

    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1221642580684

    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab

    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

    O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll

    O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\10.2.0\ViProtocol.dll

    O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

    O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

    O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgidsagent.exe

    O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgwdsvc.exe

    O23 - Service: Google Updateservice (gupdate1c9b07f434ddce2) (gupdate1c9b07f434ddce2) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

    O23 - Service: vToolbarUpdater10.2.0 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\10.2.0\ToolbarUpdater.exe

    --

    End of file - 9013 bytes

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.