Ga naar inhoud

SprMari0

Lid
 Bekijk profiel  Bekijk hun activiteit

  • Items

    4

  • Registratiedatum

  • Laatst bezocht

 Inhoudstype 

Berichten die geplaatst zijn door SprMari0

    XP Security Tool 2010 Virus/Malware?

    in Archief Windows Algemeen

    Geplaatst:

    Het is volgens mij gelukt :)! Hartstikke bedankt voor de hulp!

    ComboFix log:

    ComboFix 10-03-15.06 - Mario 16-03-2010 19:46:07.1.4 - x86

    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3327.2695 [GMT 1:00]

    Running from: c:\documents and settings\Mario\Desktop\ComboFix.exe

    AV: Kaspersky Internet Security *On-access scanning disabled* (Outdated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}

    FW: Kaspersky Internet Security *disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}

    * Created a new restore point

    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    c:\documents and settings\Mario\Application Data\Desktopicon

    c:\documents and settings\Mario\Application Data\Desktopicon\config.ini

    c:\documents and settings\Mario\Application Data\Desktopicon\eBayShortcuts.exe

    c:\documents and settings\Mario\Application Data\rhcg18j0ep0r

    C:\resycled

    c:\resycled\boot.com

    c:\windows\system32\Cache

    c:\windows\system32\d3d10core.dll

    c:\windows\system32\Data

    c:\windows\system32\kernel32new.dll

    c:\windows\system32\msvcrtnew.dll

    c:\windows\system32\phcl18j0ep0r.bmp

    c:\windows\system32\Thumbs.db

    .

    ((((((((((((((((((((((((( Files Created from 2010-02-16 to 2010-03-16 )))))))))))))))))))))))))))))))

    .

    2010-03-16 01:05 . 2010-03-16 01:05 -------- d-----w- c:\program files\Trend Micro

    2010-03-16 00:32 . 2010-03-16 00:38 15944 ----a-w- c:\windows\system32\drivers\hitmanpro35.sys

    2010-03-16 00:31 . 2010-03-16 00:36 -------- d-----w- c:\documents and settings\All Users\Application Data\Hitman Pro

    2010-03-16 00:31 . 2010-03-16 00:31 -------- d-----w- c:\program files\Hitman Pro 3.5

    2010-03-16 00:15 . 2010-03-16 00:49 202752 --sha-w- c:\documents and settings\Mario\Local Settings\Application Data\1732168344.dll

    2010-03-16 00:14 . 2010-03-16 00:14 202752 --sha-w- c:\documents and settings\Mario\Local Settings\Application Data\ave.exe

    2010-03-13 21:57 . 2010-03-13 22:13 -------- d-----w- c:\program files\Heroes of Newerth

    2010-03-12 03:42 . 2008-03-09 06:25 236 ----a-w- c:\program files\Common Files\dx.reg

    2010-03-12 03:42 . 2008-03-05 15:03 329224 ----a-w- c:\windows\system32\DXErr.exe

    2010-03-12 03:42 . 2008-03-05 15:03 209416 ----a-w- c:\windows\system32\dxcpl.exe

    2010-03-12 03:42 . 2006-11-02 11:46 39936 ----a-w- c:\windows\system32\dwmapi.dll

    2010-03-12 03:42 . 2006-11-02 11:46 167936 ----a-w- c:\windows\system32\dxgi.dll

    2010-03-12 03:42 . 2010-03-12 03:42 2914 ----a-w- c:\windows\system32\unins000.dat

    2010-03-12 03:42 . 2010-03-12 03:42 716153 ----a-w- c:\windows\system32\unins000.exe

    2010-03-12 03:42 . 2008-04-12 17:13 1029126 ----a-w- c:\windows\system32\d3d10.dll

    2010-03-12 03:42 . 2006-11-29 13:06 440080 ----a-w- c:\windows\system32\d3dx10.dll

    2010-03-12 03:42 . 2006-11-02 11:47 1162656 ----a-w- c:\windows\system32\ntdllnew.dll

    2010-03-12 00:33 . 2010-02-04 09:01 74072 ----a-w- c:\windows\system32\XAPOFX1_4.dll

    2010-03-12 00:33 . 2010-02-04 09:01 528216 ----a-w- c:\windows\system32\XAudio2_6.dll

    2010-03-12 00:33 . 2010-02-04 09:01 238936 ----a-w- c:\windows\system32\xactengine3_6.dll

    2010-03-12 00:33 . 2010-02-04 09:01 22360 ----a-w- c:\windows\system32\X3DAudio1_7.dll

    2010-03-12 00:32 . 2010-03-12 00:33 -------- d--h--w- c:\windows\msdownld.tmp

    2010-03-05 20:06 . 2010-03-05 20:06 -------- d-----w- c:\documents and settings\All Users\Application Data\NVIDIA Corporation

    2010-03-05 20:05 . 2010-01-12 04:03 61440 ----a-w- c:\windows\system32\OpenCL.dll

    2010-03-05 20:05 . 2010-01-12 04:03 4104192 ----a-w- c:\windows\system32\nvcuda.dll

    2010-03-05 20:05 . 2010-01-12 04:03 4077672 ----a-w- c:\windows\system32\nvcuvenc.dll

    2010-03-05 20:05 . 2010-01-12 04:03 2259560 ----a-w- c:\windows\system32\nvcuvid.dll

    2010-03-05 20:05 . 2010-01-12 04:03 14458880 ----a-w- c:\windows\system32\nvoglnt.dll

    2010-03-05 20:05 . 2010-01-12 04:03 2283526 ----a-w- c:\windows\system32\nvdata.bin

    2010-03-05 20:05 . 2010-01-12 04:03 182888 ----a-w- c:\windows\system32\nvcodins.dll

    2010-03-05 20:05 . 2010-01-12 04:03 182888 ----a-w- c:\windows\system32\nvcod.dll

    2010-03-05 20:05 . 2010-01-12 04:03 11632640 ----a-w- c:\windows\system32\nvcompiler.dll

    2010-03-05 20:05 . 2010-01-12 04:03 1081344 ----a-w- c:\windows\system32\nvapi.dll

    2010-03-05 10:52 . 2010-03-05 10:52 -------- d-----w- c:\program files\iPod

    2010-03-05 10:52 . 2010-03-05 10:53 -------- d-----w- c:\program files\iTunes

    2010-03-05 10:52 . 2010-03-05 10:53 -------- d-----w- c:\documents and settings\All Users\Application Data\{755AC846-7372-4AC8-8550-C52491DAA8BD}

    .

    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2010-03-16 18:52 . 2008-06-24 14:35 4155680 --sha-w- c:\windows\system32\drivers\fidbox2.dat

    2010-03-16 18:52 . 2008-06-24 14:35 392936 --sha-w- c:\windows\system32\drivers\fidbox2.idx

    2010-03-16 18:52 . 2008-06-24 14:35 1341260 --sha-w- c:\windows\system32\drivers\fidbox.idx

    2010-03-16 18:52 . 2008-06-24 14:35 100554528 --sha-w- c:\windows\system32\drivers\fidbox.dat

    2010-03-16 18:37 . 2008-06-24 16:15 -------- d-----w- c:\documents and settings\Mario\Application Data\uTorrent

    2010-03-16 00:53 . 2008-06-24 14:35 -------- d-----w- c:\documents and settings\All Users\Application Data\Kaspersky Lab

    2010-03-16 00:41 . 2008-04-14 12:00 96512 ----a-w- c:\windows\system32\drivers\atapi.sys

    2010-03-16 00:15 . 2008-12-17 21:33 256 ----a-w- c:\windows\system32\pool.bin

    2010-03-05 21:01 . 2002-01-01 12:00 -------- d-----w- c:\program files\NVIDIA Corporation

    2010-03-05 21:01 . 2008-07-18 19:42 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard

    2010-03-05 21:00 . 2008-11-12 18:54 -------- d-----w- c:\program files\AGEIA Technologies

    2010-03-05 20:51 . 2002-01-01 11:52 1324 ----a-w- c:\windows\system32\d3d9caps.dat

    2010-03-05 20:00 . 2008-07-13 15:08 -------- d-----w- c:\program files\SystemRequirementsLab

    2010-03-05 20:00 . 2010-03-05 20:00 290816 ----a-w- c:\documents and settings\Mario\Application Data\SystemRequirementsLab\SRLProxy_nvd_4.dll

    2010-03-05 20:00 . 2010-03-05 20:00 290816 ----a-w- c:\documents and settings\Mario\Application Data\SystemRequirementsLab\SRLProxy_nvd_3.dll

    2010-03-05 20:00 . 2010-03-05 20:00 290816 ----a-w- c:\documents and settings\Mario\Application Data\SystemRequirementsLab\SRLProxy_nvd_2.dll

    2010-03-05 20:00 . 2010-03-05 20:00 290816 ----a-w- c:\documents and settings\Mario\Application Data\SystemRequirementsLab\SRLProxy_nvd_1.dll

    2010-03-05 20:00 . 2008-07-13 15:08 -------- d-----w- c:\documents and settings\Mario\Application Data\SystemRequirementsLab

    2010-03-05 18:15 . 2008-06-24 16:15 -------- d-----w- c:\program files\uTorrent

    2010-03-05 10:55 . 2008-10-13 19:55 -------- d-----w- c:\program files\Safari

    2010-03-05 10:53 . 2010-03-05 10:53 79144 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\Safari 5.31.21.10\SetupAdmin.exe

    2010-03-05 10:52 . 2008-07-21 17:15 -------- d-----w- c:\program files\Common Files\Apple

    2010-03-05 10:50 . 2008-07-10 17:14 -------- d-----w- c:\program files\QuickTime

    2010-03-05 10:47 . 2010-03-05 10:47 72488 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 9.0.3.15\SetupAdmin.exe

    2010-03-05 10:46 . 2008-07-21 17:15 -------- d-----w- c:\program files\Bonjour

    2010-03-02 20:37 . 2008-06-24 18:07 -------- d-----w- c:\documents and settings\All Users\Application Data\Messenger Plus!

    2010-02-24 14:36 . 2008-06-24 16:35 -------- d-----w- c:\program files\Messenger Plus! Live

    2010-02-08 21:10 . 2009-06-11 23:40 -------- d-----w- c:\program files\Activision

    2010-02-08 20:54 . 2002-01-01 00:35 -------- d--h--w- c:\program files\InstallShield Installation Information

    2010-02-08 20:52 . 2009-06-18 19:12 -------- d-----w- c:\program files\Electronic Arts

    2010-02-08 20:51 . 2008-07-21 17:25 -------- d-----w- c:\program files\Red Chair Software

    2010-02-08 20:25 . 2002-01-01 12:16 -------- d-----w- c:\documents and settings\Mario\Application Data\mIRC

    2010-02-08 20:04 . 2008-06-24 20:04 -------- d-----w- c:\program files\mIRC

    2010-02-08 19:56 . 2009-02-01 16:19 -------- d-----w- c:\program files\Common Files\Adobe AIR

    2010-02-08 19:56 . 2010-02-08 19:56 38784 ----a-w- c:\documents and settings\Default User\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe

    2010-02-08 19:56 . 2009-02-01 16:19 38784 ----a-w- c:\documents and settings\Mario\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe

    2010-02-01 22:21 . 2008-07-10 17:36 -------- d-----w- c:\program files\Java

    2010-02-01 22:20 . 2010-02-01 22:20 152576 ----a-w- c:\documents and settings\Mario\Application Data\Sun\Java\jre1.6.0_17\lzma.dll

    2010-02-01 22:20 . 2010-02-01 22:18 79488 ----a-w- c:\documents and settings\Mario\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll

    2010-02-01 22:11 . 2009-03-23 16:42 -------- d-----w- c:\program files\Microsoft Silverlight

    2010-01-31 21:02 . 2010-01-31 21:02 -------- d-----w- c:\program files\Microsoft

    2010-01-31 21:01 . 2008-06-24 16:21 -------- d-----w- c:\program files\Windows Live

    2010-01-12 04:03 . 2008-02-28 05:34 6359168 ----a-w- c:\windows\system32\nv4_disp.dll

    2010-01-12 04:03 . 2008-02-28 05:34 10276768 ----a-w- c:\windows\system32\drivers\nv4_mini.sys

    2010-01-12 04:03 . 2002-01-01 00:44 592488 ----a-w- c:\windows\system32\nvudisp.exe

    2010-01-11 21:17 . 2010-01-11 21:17 278120 ----a-w- c:\windows\system32\nvmccs.dll

    2010-01-11 21:17 . 2010-01-11 21:17 154216 ----a-w- c:\windows\system32\nvsvc32.exe

    2010-01-11 21:17 . 2010-01-11 21:17 145000 ----a-w- c:\windows\system32\nvcolor.exe

    2010-01-11 21:17 . 2010-01-11 21:17 13666408 ----a-w- c:\windows\system32\nvcpl.dll

    2010-01-11 21:17 . 2010-01-11 21:17 110696 ----a-w- c:\windows\system32\nvmctray.dll

    2010-01-11 21:17 . 2010-01-11 21:17 81920 ----a-w- c:\windows\system32\nvwddi.dll

    .

    ------- Sigcheck -------

    [-] 2008-04-14 . F2CB4636341557827379012344064445 . 1033216 . . [6.00.2900.5512] . . c:\windows\explorer.exe

    .

    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    *Note* empty entries & legit default entries are not shown

    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "Steam"="c:\program files\valve\steam\steam.exe" [2010-02-24 1217872]

    "MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2009-07-26 3883856]

    "NVIDIA nTune"="c:\program files\NVIDIA Corporation\nTune\nTuneCmd.exe" [2007-09-04 81920]

    "WhatPulse"="c:\program files\WhatPulse\WhatPulse.exe" [2006-08-21 665600]

    "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "Ai Nap"="c:\program files\ASUS\Ai Suite\AiNap\AiNap.exe" [2007-09-06 1426432]

    "CPU Power Monitor"="c:\program files\ASUS\Ai Suite\AiGear3\CpuPowerMonitor.exe" [2007-10-16 626176]

    "Cpu Level Up help"="c:\program files\ASUS\Ai Suite\CpuLevelUpHelp.exe" [2007-09-11 880640]

    "IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2008-04-14 208952]

    "MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2008-04-14 59392]

    "PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-14 455168]

    "PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-14 455168]

    "CTSysVol"="c:\program files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe" [2003-09-17 57344]

    "UpdReg"="c:\windows\UpdReg.EXE" [2000-05-10 90112]

    "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]

    "TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2008-07-10 185896]

    "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]

    "LogonStudio"="c:\program files\WinCustomize\LogonStudio\logonstudio.exe" [2002-09-03 987187]

    "Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [2008-10-14 623992]

    "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]

    "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-11-10 417792]

    "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-01-11 110696]

    "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-01-11 13666408]

    "HitmanPro35"="c:\program files\Hitman Pro 3.5\HitmanPro35.exe" [2010-03-16 5650240]

    "AVP"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe" [2008-02-08 227856]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

    "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

    c:\documents and settings\Mario\Start Menu\Programs\Startup\

    Stardock ObjectDock.lnk - c:\program files\Stardock\ObjectDock\ObjectDock.exe [2008-10-30 3450608]

    Styler.lnk - c:\documents and settings\Mario\Application Data\Microsoft\Installer\{E9ECF354-2422-4FDB-9ABF-D8ADAC0EF941}\_585b207a.exe [2008-10-30 15086]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]

    "UIHost"="c:\windows\system32\logonuiX.exe"

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]

    2008-10-30 03:38 229376 ----a-w- c:\program files\Stardock\Object Desktop\WindowBlinds\WbSrv.dll

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

    Authentication Packages REG_MULTI_SZ msv1_0 nwprovau

    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^PlexTools Professional LE.lnk]

    path=c:\documents and settings\All Users\Start Menu\Programs\Startup\PlexTools Professional LE.lnk

    backup=c:\windows\pss\PlexTools Professional LE.lnkCommon Startup

    [HKLM\~\startupfolder\C:^Documents and Settings^Mario^Start Menu^Programs^Startup^BWMeter.lnk]

    path=c:\documents and settings\Mario\Start Menu\Programs\Startup\BWMeter.lnk

    backup=c:\windows\pss\BWMeter.lnkStartup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AppleSyncNotifier]

    2009-08-13 14:51 177440 ----a-w- c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BlackBerryAutoUpdate]

    2008-09-19 14:06 615696 ----a-w- c:\program files\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Comrade.exe]

    2007-06-29 14:03 36864 ----a-w- c:\program files\GameSpy\Comrade\Comrade.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FlashMute]

    2005-12-18 21:16 143360 ----a-w- c:\program files\FlashMute\flashmute.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]

    2010-02-15 17:07 141608 ----a-w- c:\program files\iTunes\iTunesHelper.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxWatchTray]

    2008-08-26 11:23 236016 ----a-w- c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UnlockerAssistant]

    2008-05-02 04:15 15872 ----a-w- c:\program files\Unlocker\UnlockerAssistant.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\security center]

    "AntiVirusOverride"=dword:00000001

    "FirewallOverride"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]

    "DisableMonitoring"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]

    "EnableFirewall"= 0 (0x0)

    "DisableNotifications"= 1 (0x1)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=

    "%windir%\\system32\\sessmgr.exe"=

    "c:\\Program Files\\mIRC\\mirc.exe"=

    "c:\\KAV\\Kaspersky Internet Security 7.0.1.325\\english\\setup.exe"=

    "c:\\Program Files\\Cerberus\\Cerberus.exe"=

    "c:\\WINDOWS\\system32\\PnkBstrA.exe"=

    "c:\\WINDOWS\\system32\\PnkBstrB.exe"=

    "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

    "c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=

    "c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=

    "c:\\Program Files\\Spotify\\spotify.exe"=

    "c:\\Program Files\\Common Files\\Adobe\\Adobe Version Cue CS3\\Server\\bin\\VersionCueCS3.exe"=

    "c:\\Program Files\\Messenger\\msmsgs.exe"=

    "c:\\Documents and Settings\\Mario\\Application Data\\2K Games\\Firaxis Games\\Sid Meier's Civilization 4 Complete\\Civilization4.exe"=

    "c:\\Documents and Settings\\Mario\\Application Data\\2K Games\\Firaxis Games\\Sid Meier's Civilization 4 Complete\\Warlords\\Civ4Warlords.exe"=

    "c:\\Documents and Settings\\Mario\\Application Data\\2K Games\\Firaxis Games\\Sid Meier's Civilization 4 Complete\\Beyond the Sword\\Civ4BeyondSword.exe"=

    "c:\\Program Files\\uTorrent\\uTorrent.exe"=

    "c:\\Program Files\\EA Games\\Battlefield 2\\BF2.exe"=

    "c:\\Program Files\\UltraVNC\\vncviewer.exe"=

    "c:\\Program Files\\FlashFXP\\FlashFXP.exe"=

    "c:\\Program Files\\Skype\\Phone\\Skype.exe"=

    "c:\\Program Files\\Valve\\Steam\\SteamApps\\7ds\\counter-strike source\\hl2.exe"=

    "c:\\Program Files\\Aspyr\\Dark Sector\\DS.exe"=

    "c:\\Program Files\\Activision\\Prototype\\prototypef.exe"=

    "c:\\Program Files\\Electronic Arts\\Burnout Paradise The Ultimate Box\\BurnoutLauncher.exe"=

    "c:\\Program Files\\Electronic Arts\\Burnout Paradise The Ultimate Box\\BurnoutConfigTool.exe"=

    "c:\\Program Files\\Electronic Arts\\Burnout Paradise The Ultimate Box\\BurnoutParadise.exe"=

    "c:\\Program Files\\Left 4 Dead\\left4dead.exe"=

    "c:\\Program Files\\CAPCOM\\STREETFIGHTERIV\\StreetFighterIV.exe"=

    "c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=

    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

    "c:\\Program Files\\Bonjour\\mDNSResponder.exe"=

    "c:\\Program Files\\iTunes\\iTunes.exe"=

    "c:\\Program Files\\Heroes of Newerth\\hon.exe"=

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

    "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

    "3703:TCP"= 3703:TCP:Adobe Version Cue CS3 Server

    "3704:TCP"= 3704:TCP:Adobe Version Cue CS3 Server

    "50900:TCP"= 50900:TCP:Adobe Version Cue CS3 Server

    "50901:TCP"= 50901:TCP:Adobe Version Cue CS3 Server

    "5900:TCP"= 5900:TCP:vnc5900

    "5800:TCP"= 5800:TCP:vnc5800

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]

    "AllowInboundEchoRequest"= 1 (0x1)

    R3 dsnpfd;DeskSoft Service;c:\windows\system32\drivers\dsnpfd.sys [3-3-2009 4:39 26920]

    R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [13-12-2007 12:28 24592]

    S3 PciCon;PciCon;\??\d:\pcicon.sys --> d:\PciCon.sys [?]

    .

    Contents of the 'Scheduled Tasks' folder

    2010-03-05 c:\windows\Tasks\AppleSoftwareUpdate.job

    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

    .

    .

    ------- Supplementary Scan -------

    .

    uStart Page = hxxp://www.pucuy.com/

    mStart Page = hxxp://www.pucuy.com/

    uInternet Settings,ProxyOverride = *.local

    IE: Append to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

    IE: Convert link target to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

    IE: Convert link target to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

    IE: Convert selected links to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

    IE: Convert selected links to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

    IE: Convert selection to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

    IE: Convert selection to existing PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

    IE: Convert to Adobe PDF - c:\program files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

    IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

    FF - ProfilePath - c:\documents and settings\Mario\Application Data\Mozilla\Firefox\Profiles\centqy3t.default\

    FF - prefs.js: browser.startup.homepage - hxxp://mail.google.com/mail/#inbox

    FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll

    FF - plugin: c:\program files\Mozilla Firefox\plugins\npOGAPlugin.dll

    ---- FIREFOX POLICIES ----

    c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);

    c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);

    c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);

    c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);

    c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);

    c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);

    c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);

    c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);

    c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);

    c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);

    c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);

    c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);

    c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);

    c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);

    c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);

    c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);

    c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);

    c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);

    c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");

    c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");

    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");

    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");

    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");

    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");

    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);

    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);

    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);

    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);

    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);

    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);

    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);

    c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);

    .

    - - - - ORPHANS REMOVED - - - -

    HKCU-Run-Uniblue RegistryBooster 2 - c:\program files\Uniblue\RegistryBooster 2\RegistryBooster.exe

    HKCU-Run-WindowBlinds - c:\documents and settings\All Users\Documents\Stardock\WindowBlinds\WBInstall32.exe

    HKCU-Run-AdobeBridge - (no file)

    HKLM-Run-nwiz - nwiz.exe

    MSConfigStartUp-lphcl18j0ep0r - c:\windows\system32\lphcl18j0ep0r.exe

    MSConfigStartUp-SMrhcg18j0ep0r - c:\program files\rhcg18j0ep0r\rhcg18j0ep0r.exe

    AddRemove-NVIDIA Display Control Panel - c:\program files\NVIDIA Corporation\Uninstall\nvuninst.exe

    **************************************************************************

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

    Rootkit scan 2010-03-16 19:55

    Windows 5.1.2600 Service Pack 3 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully

    hidden files: 0

    **************************************************************************

    .

    --------------------- LOCKED REGISTRY KEYS ---------------------

    [HKEY_USERS\S-1-5-21-1960408961-926492609-1801674531-1003\Software\SecuROM\License information*]

    "datasecu"=hex:45,be,7d,2a,67,0c,13,b4,55,9a,d8,90,c1,e2,9a,79,28,5c,c0,9e,58,

    cb,9e,2a,a9,33,a5,dc,7f,87,54,be,93,57,7d,ea,e7,75,39,45,81,c2,5b,32,66,a4,\

    "rkeysecu"=hex:6c,93,d2,eb,52,77,a8,28,9c,d7,0b,b0,31,d1,39,18

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BEB3C0C7-B648-4257-96D9-B5D024816E27}\Version*Version]

    "Version"=hex:18,61,1c,c8,18,fa,57,d3,3b,88,f5,99,30,30,e1,9d,f2,68,c8,4e,98,

    40,e6,c6,e5,58,89,d8,c2,bf,2d,65,3c,34,e6,9d,ac,69,59,b9,fd,26,bd,dc,4a,38,\

    [HKEY_LOCAL_MACHINE\software\Minnetonka Audio Software\SurCode Dolby Digital Premiere\Version*Version]

    "Version"=hex:a2,33,19,c0,24,e5,cf,10,0d,a6,64,07,81,a7,88,43,af,96,3f,99,45,

    ba,fe,08,3b,0b,01,8b,ad,e6,69,2f,25,b5,e7,14,00,93,0a,7d,6c,40,93,90,81,c5,\

    .

    --------------------- DLLs Loaded Under Running Processes ---------------------

    - - - - - - - > 'winlogon.exe'(1676)

    c:\windows\system32\klogon.dll

    c:\program files\Stardock\Object Desktop\WindowBlinds\wbsrv.dll

    - - - - - - - > 'explorer.exe'(3932)

    c:\program files\Stardock\ObjectDock\DockShellHook.dll

    c:\program files\Stardock\Object Desktop\WindowBlinds\tray.dll

    c:\windows\system32\WPDShServiceObj.dll

    c:\windows\system32\PortableDeviceTypes.dll

    c:\windows\system32\PortableDeviceApi.dll

    - - - - - - - > 'explorer.exe'(372)

    c:\program files\Stardock\ObjectDock\DockShellHook.dll

    c:\program files\Styler\TB\StylerTB.dll

    c:\windows\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\MSVCR80.dll

    c:\program files\Microsoft Office\Office12\1043\GrooveIntlResource.dll

    c:\program files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll

    c:\windows\system32\nvcpl.dll

    c:\program files\NVIDIA Corporation\nView\nvshell.dll

    .

    ------------------------ Other Running Processes ------------------------

    .

    c:\windows\system32\nvsvc32.exe

    c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

    c:\program files\Bonjour\mDNSResponder.exe

    c:\windows\system32\CTsvcCDA.EXE

    c:\windows\system32\inetsrv\inetinfo.exe

    c:\program files\Java\jre6\bin\jqs.exe

    c:\program files\NVIDIA Corporation\nTune\nTuneService.exe

    c:\windows\system32\PnkBstrA.exe

    c:\windows\system32\RUNDLL32.EXE

    c:\program files\Styler\Styler.exe

    c:\windows\system32\MsPMSPSv.exe

    c:\windows\system32\wscntfy.exe

    c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

    c:\windows\system32\NOTEPAD.EXE

    .

    **************************************************************************

    .

    Completion time: 2010-03-16 20:01:33 - machine was rebooted

    ComboFix-quarantined-files.txt 2010-03-16 19:01

    Pre-Run: 3.561.660.416 bytes free

    Post-Run: 9.148.522.496 bytes free

    WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe

    [boot loader]

    timeout=2

    default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS

    [operating systems]

    c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

    multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

    - - End Of File - - 63F99069D22F02C4542CFCED883A4024

    HiJackThis log:

    Logfile of Trend Micro HijackThis v2.0.2

    Scan saved at 20:32:29, on 16-3-2010

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v7.00 (7.00.6000.16735)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\nvsvc32.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\ASUS\Ai Suite\AiNap\AiNap.exe

    C:\Program Files\ASUS\Ai Suite\AiGear3\CpuPowerMonitor.exe

    C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe

    C:\Program Files\Common Files\Real\Update_OB\realsched.exe

    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

    C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe

    C:\Program Files\Java\jre6\bin\jusched.exe

    C:\WINDOWS\system32\RUNDLL32.EXE

    C:\program files\valve\steam\steam.exe

    C:\Program Files\WhatPulse\WhatPulse.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\Stardock\ObjectDock\ObjectDock.exe

    C:\Program Files\Styler\Styler.exe

    C:\Program Files\Bonjour\mDNSResponder.exe

    C:\WINDOWS\system32\CTsvcCDA.EXE

    C:\WINDOWS\system32\inetsrv\inetinfo.exe

    C:\Program Files\Java\jre6\bin\jqs.exe

    C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe

    C:\WINDOWS\system32\PnkBstrA.exe

    C:\Program Files\Mozilla Firefox\firefox.exe

    C:\WINDOWS\system32\MsPMSPSv.exe

    C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

    C:\WINDOWS\system32\wscntfy.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\msiexec.exe

    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Pucuy.com

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Pucuy.com

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

    O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files\Adobe\/Adobe Contribute CS3/contributeieplugin.dll

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

    O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

    O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll

    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

    O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - C:\Program Files\Styler\TB\StylerTB.dll

    O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

    O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files\Adobe\/Adobe Contribute CS3/contributeieplugin.dll

    O4 - HKLM\..\Run: [Ai Nap] "C:\Program Files\ASUS\Ai Suite\AiNap\AiNap.exe"

    O4 - HKLM\..\Run: [CPU Power Monitor] "C:\Program Files\ASUS\Ai Suite\AiGear3\CpuPowerMonitor.exe"

    O4 - HKLM\..\Run: [Cpu Level Up help] C:\Program Files\ASUS\Ai Suite\CpuLevelUpHelp.exe

    O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32

    O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC

    O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC

    O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName

    O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe /r

    O4 - HKLM\..\Run: [updReg] C:\WINDOWS\UpdReg.EXE

    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

    O4 - HKLM\..\Run: [LogonStudio] "C:\Program Files\WinCustomize\LogonStudio\logonstudio.exe" /RANDOM

    O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"

    O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

    O4 - HKLM\..\Run: [HitmanPro35] "C:\Program Files\Hitman Pro 3.5\HitmanPro35.exe" /scan:boot

    O4 - HKCU\..\Run: [steam] "c:\program files\valve\steam\steam.exe" -silent

    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background

    O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear

    O4 - HKCU\..\Run: [WhatPulse] C:\Program Files\WhatPulse\WhatPulse.exe

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

    O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe

    O4 - Startup: Styler.lnk = ?

    O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

    O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

    O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

    O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

    O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

    O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

    O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

    O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

    O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll

    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/resources/MSNPUpld.cab

    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

    O16 - DPF: {D6E0B119-DCF2-4CD6-8DFB-7CFF1B70F7FF} (TeamOn Import Object) - https://bis.eu.blackberry.com/html/web/client_tools/TOImport.cab

    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

    O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe

    O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE

    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

    O23 - Service: Hitman Pro 3.5 Crusader (Boot) (HitmanPro35CrusaderBoot) - SurfRight B.V. - C:\Program Files\Hitman Pro 3.5\HitmanPro35.exe

    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

    O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

    O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe

    O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

    O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

    O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe

    O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exe

    O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe

    O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe

    O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe

    --

    End of file - 11463 bytes

    XP Security Tool 2010 Virus/Malware?

    in Archief Windows Algemeen

    Geplaatst:

    Hallo mensen!

    Ik denk dat ik een virus heb dat XP Security Tool 2010 heet.

    Ik krijg steeds van die rare berichten dat mijn systeem onder zware aanval is en dat ik een worm op mijn computer heb zitten etc etc.

    Een paar screens:

    ovs67.png

    1DZ0z.png

    nWHDR.png

    Voordat ik hier na toe ben gekomen heb ik Hitmanpro 3.5 gedraaid (wat meestal wel genoeg is om malware/spyware te verwijderen) maar het hielp niet echt.

    Daarna heb ik dit gevolgd http://www.pc-helpforum.be/f167/security-tool-20693/

    Maar MalwareByter wilt niet starten.

    Heeft iemand nog een idee van wat ik het best zou kunnen doen?

    Alvast bedankt voor de moeite! :D

    P.S.

    Ik ben bezig met een Kaspersky Online scan, ik zal hier het logje van posten zodra dat klaar is.

    HiJackThis log:

    Logfile of Trend Micro HijackThis v2.0.2

    Scan saved at 02:05:49, on 16-3-2010

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v7.00 (7.00.6000.16735)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\nvsvc32.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\ASUS\Ai Suite\AiNap\AiNap.exe

    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

    C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe

    C:\Program Files\Java\jre6\bin\jusched.exe

    C:\WINDOWS\system32\RUNDLL32.EXE

    C:\Program Files\ASUS\Ai Suite\AiGear3\CpuPowerMonitor.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\Stardock\ObjectDock\ObjectDock.exe

    C:\Program Files\Styler\Styler.exe

    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

    C:\Program Files\Bonjour\mDNSResponder.exe

    C:\WINDOWS\system32\CTsvcCDA.EXE

    C:\WINDOWS\system32\inetsrv\inetinfo.exe

    C:\Program Files\Java\jre6\bin\jqs.exe

    C:\WINDOWS\system32\PnkBstrA.exe

    C:\WINDOWS\system32\MsPMSPSv.exe

    C:\Documents and Settings\Mario\Local Settings\Application Data\ave.exe

    C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

    C:\Program Files\Mozilla Firefox\firefox.exe

    C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe

    C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe

    C:\Program Files\Java\jre6\bin\java.exe

    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Pucuy.com

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Pucuy.com

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

    O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files\Adobe\/Adobe Contribute CS3/contributeieplugin.dll

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

    O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

    O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll

    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

    O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - C:\Program Files\Styler\TB\StylerTB.dll

    O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll

    O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files\Adobe\/Adobe Contribute CS3/contributeieplugin.dll

    O4 - HKLM\..\Run: [Ai Nap] "C:\Program Files\ASUS\Ai Suite\AiNap\AiNap.exe"

    O4 - HKLM\..\Run: [CPU Power Monitor] "C:\Program Files\ASUS\Ai Suite\AiGear3\CpuPowerMonitor.exe"

    O4 - HKLM\..\Run: [Cpu Level Up help] C:\Program Files\ASUS\Ai Suite\CpuLevelUpHelp.exe

    O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"

    O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32

    O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC

    O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC

    O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName

    O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SB Live! 24-bit\Surround Mixer\CTSysVol.exe /r

    O4 - HKLM\..\Run: [updReg] C:\WINDOWS\UpdReg.EXE

    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

    O4 - HKLM\..\Run: [LogonStudio] "C:\Program Files\WinCustomize\LogonStudio\logonstudio.exe" /RANDOM

    O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"

    O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

    O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet

    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

    O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\pchealth\helpctr\Binaries\MSCONFIG.EXE /auto

    O4 - HKLM\..\Run: [HitmanPro35] "C:\Program Files\Hitman Pro 3.5\HitmanPro35.exe" /scan:boot

    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKCU\..\Run: [steam] "c:\program files\valve\steam\steam.exe" -silent

    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background

    O4 - HKCU\..\Run: [uniblue RegistryBooster 2] C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe /S

    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

    O4 - HKCU\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear

    O4 - HKCU\..\Run: [WhatPulse] C:\Program Files\WhatPulse\WhatPulse.exe

    O4 - HKCU\..\Run: [WindowBlinds] C:\Documents and Settings\All Users\Documents\Stardock\WindowBlinds\WBInstall32.exe

    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')

    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

    O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe

    O4 - Startup: Styler.lnk = ?

    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present

    O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm

    O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

    O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

    O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

    O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

    O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

    O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

    O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

    O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

    O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll

    O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file)

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll

    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/resources/MSNPUpld.cab

    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

    O16 - DPF: {D6E0B119-DCF2-4CD6-8DFB-7CFF1B70F7FF} (TeamOn Import Object) - https://bis.eu.blackberry.com/html/web/client_tools/TOImport.cab

    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

    O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll,wbsys.dll

    O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe

    O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

    O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe

    O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE

    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

    O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

    O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe

    O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

    O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

    O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe

    O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exe

    O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxLiveShare9.exe

    O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe

    O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe

    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

    O24 - Desktop Component 0: Privacy Protection - file:///C:\WINDOWS\privacy_danger\index.htm

    --

    End of file - 13220 bytes

Logo

OVER ONS

PC Helpforum helpt GRATIS computergebruikers sinds juli 2006. Ons team geeft via het forum professioneel antwoord op uw vragen en probeert uw pc problemen zo snel mogelijk op te lossen. Word lid vandaag, plaats je vraag online en het PC Helpforum-team helpt u graag verder!

SITEMAP

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.