A
anja48
Gast
backdoor.trojan 9 stuks Ik geef 25 euro voor wie dit oplost, spoed!
Hallo,
Ik geef 25 euro voor wie dit kan oplossen met spoed!
Norton internet security liet mij weten dat ik een backdoor.trojan op mijn computer heb staan. Helaas geeft deze niet aan wat de namen zijn van de virussen het zijn er 9 in totaal. Ik heb een Hijack this log gemaakt en hoop echt dat iemand het kan oplossen want ik heb al veel scanners geprobeerd, maar geen een ziet de virussen alleen dus Norton maar gaan namen. Ik heb overigens nog niets vreemds aan mijn computer gemerkt, foutmeldingen enz.
[hjt]
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:28:55, on 13-10-2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal
Running processes:
c:\windows\system32\smss.exe
c:\windows\system32\csrss.exe
c:\windows\system32\csrss.exe
c:\windows\system32\wininit.exe
c:\windows\system32\services.exe
c:\windows\system32\winlogon.exe
c:\windows\system32\lsass.exe
c:\windows\system32\lsm.exe
c:\windows\system32\svchost.exe
c:\windows\system32\svchost.exe
c:\windows\system32\svchost.exe
c:\windows\system32\svchost.exe
c:\windows\system32\svchost.exe
c:\windows\system32\slsvc.exe
c:\windows\system32\svchost.exe
c:\windows\system32\svchost.exe
c:\program files\common files\symantec shared\ccsvchst.exe
c:\program files\common files\symantec shared\pif\{b8e1dd85-8582-4c61-b58f-2f227fca9a08}\pifsvc.exe
c:\program files\lavasoft\ad-aware\aawservice.exe
c:\windows\system32\spoolsv.exe
c:\windows\system32\svchost.exe
c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe
c:\program files\bonjour\mdnsresponder.exe
c:\program files\common files\intel\inteldh\nms\adpplugins\dqlwinservice.exe
c:\program files\intel\intel matrix storage manager\iaantmon.exe
c:\program files\common files\lightscribe\lssrvc.exe
c:\program files\logmein\x86\ramaint.exe
c:\program files\logmein\x86\logmein.exe
c:\program files\logmein\x86\lmiguardian.exe
c:\program files\common files\microsoft shared\vs7debug\mdm.exe
c:\program files\norton internet security\norton internet security\engine\16.0.0.125\ccsvchst.exe
c:\windows\system32\taskeng.exe
c:\program files\symantec\liveupdate\aluschedulersvc.exe
c:\windows\system32\svchost.exe
c:\program files\spyware doctor\pctsauxs.exe
c:\program files\spyware doctor\pctssvc.exe
c:\windows\system32\svchost.exe
c:\windows\system32\svchost.exe
c:\windows\system32\searchindexer.exe
c:\windows\system32\wudfhost.exe
c:\program files\norton internet security\norton internet security\engine\16.0.0.125\ccsvchst.exe
c:\windows\system32\taskeng.exe
c:\windows\system32\dwm.exe
c:\windows\explorer.exe
c:\hp\support\hpsysdrv.exe
c:\program files\hewlett-packard\on-screen osd indicator\osd.exe
c:\program files\intel\intel matrix storage manager\iaanotif.exe
c:\windows\rthdvcpl.exe
c:\program files\logitech\setpoint\kem.exe
c:\windows\system32\searchprotocolhost.exe
c:\program files\logmein\x86\logmeinsystray.exe
c:\windows\system32\searchprotocolhost.exe
c:\windows\system32\rundll32.exe
c:\program files\spyware doctor\pctstray.exe
c:\program files\itunes\ituneshelper.exe
c:\program files\common files\symantec shared\ccapp.exe
c:\program files\windows sidebar\sidebar.exe
c:\windows\ehome\ehtray.exe
c:\windows\ehome\ehmsas.exe
c:\program files\registry mechanic\rmtray.exe
c:\windows\system32\rundll32.exe
c:\windows\system32\wbem\wmiprvse.exe
c:\program files\logmein\x86\lmiguardian.exe
c:\program files\logitech\setpoint\khalmnpr.exe
c:\program files\ipod\bin\ipodservice.exe
c:\hp\kbd\kbd.exe
c:\program files\internet explorer\ieuser.exe
c:\program files\internet explorer\iexplore.exe
c:\windows\servicing\trustedinstaller.exe
c:\windows\system32\conime.exe
c:\windows\system32\searchfilterhost.exe
c:\program files\trend micro\hijackthis\hijackthis.exe
c:\windows\system32\wbem\wmiprvse.exe
r1 - hkcu\software\microsoft\internet explorer\main,search page = [noparse]http://go.microsoft.com/fwlink/?linkid=54896[/noparse]
r0 - hkcu\software\microsoft\internet explorer\main,start page = [noparse]http://www.learningtube.nl/[/noparse]
r1 - hklm\software\microsoft\internet explorer\main,default_page_url = [noparse]http://ie.redirect.hp.com/svs/rdr?type=3&tp=iehome&locale=nl_nl&c=73&bd=presario&pf=desktop[/noparse]
r1 - hklm\software\microsoft\internet explorer\main,default_search_url = [noparse]http://go.microsoft.com/fwlink/?linkid=54896[/noparse]
r1 - hklm\software\microsoft\internet explorer\main,search page = [noparse]http://go.microsoft.com/fwlink/?linkid=54896[/noparse]
r0 - hklm\software\microsoft\internet explorer\main,start page = [noparse]http://ie.redirect.hp.com/svs/rdr?type=3&tp=iehome&locale=nl_nl&c=73&bd=presario&pf=desktop[/noparse]
r0 - hklm\software\microsoft\internet explorer\search,searchassistant =
r0 - hklm\software\microsoft\internet explorer\search,customizesearch =
r1 - hkcu\software\microsoft\windows\currentversion\internet settings,proxyoverride = *.local
r0 - hkcu\software\microsoft\internet explorer\toolbar,linksfoldername =
o1 - hosts: ::1 localhost
o2 - bho: adobe pdf reader help bij koppelingen - {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\acroiehelper.dll
o2 - bho: (no name) - {243b17de-77c7-46bf-b94b-0b5f309a0e64} - c:\program files\microsoft money\system\mnyside.dll
o2 - bho: symantec nco bho - {602adb0e-4aff-4217-8aa1-95dac4dfa408} - c:\program files\norton internet security\norton internet security\engine\16.0.0.125\coieplg.dll
o2 - bho: symantec intrusion prevention - {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\program files\norton internet security\norton internet security\engine\16.0.0.125\ipsbho.dll
o2 - bho: ssvhelper class - {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_07\bin\ssv.dll
o2 - bho: google toolbar helper - {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\googletoolbar2.dll
o2 - bho: (no name) - {fdd3b846-8d59-4ffb-8758-209b6ad74acc} - (no file)
o3 - toolbar: &google - {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\googletoolbar2.dll
o3 - toolbar: norton toolbar - {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - c:\program files\norton internet security\norton internet security\engine\16.0.0.125\coieplg.dll
o4 - hklm\..\run: [windows defender] %programfiles%\windows defender\msascui.exe -hide
o4 - hklm\..\run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
o4 - hklm\..\run: [kbd] c:\hp\kbd\kbdstub.exe
o4 - hklm\..\run: [osdmaestro] c:\program files\hewlett-packard\on-screen osd indicator\osd.exe
o4 - hklm\..\run: [iaanotif] c:\program files\intel\intel matrix storage manager\iaanotif.exe
o4 - hklm\..\run: [rthdvcpl] rthdvcpl.exe
o4 - hklm\..\run: [setpoint] c:\program files\logitech\setpoint\kem.exe
o4 - hklm\..\run: [alualert] c:\program files\symantec\liveupdate\alunotify.exe
o4 - hklm\..\run: [logmein gui] c:\program files\logmein\x86\logmeinsystray.exe
o4 - hklm\..\run: [nvsvc] rundll32.exe c:\windows\system32\nvsvc.dll,nvsvcstart
o4 - hklm\..\run: [nvcpldaemon] rundll32.exe c:\windows\system32\nvcpl.dll,nvstartup
o4 - hklm\..\run: [nvmediacenter] rundll32.exe c:\windows\system32\nvmctray.dll,nvtaskbarinit
o4 - hklm\..\run: [istray] c:\program files\spyware doctor\pctstray.exe
o4 - hklm\..\run: [quicktime task] c:\program files\quicktime\qttask.exe -atboottime
o4 - hklm\..\run: [applesyncnotifier] c:\program files\common files\apple\mobile device support\bin\applesyncnotifier.exe
o4 - hklm\..\run: [ituneshelper] c:\program files\itunes\ituneshelper.exe
o4 - hklm\..\run: [symantec pif alerteng] c:\program files\common files\symantec shared\pif\{b8e1dd85-8582-4c61-b58f-2f227fca9a08}\pifsvc.exe /a /m c:\program files\common files\symantec shared\pif\{b8e1dd85-8582-4c61-b58f-2f227fca9a08}\alerteng.dll
o4 - hklm\..\run: [ccapp] c:\program files\common files\symantec shared\ccapp.exe
o4 - hklm\..\runonce: [launcher] %windir%\sminst\launcher.exe
o4 - hkcu\..\run: [sidebar] c:\program files\windows sidebar\sidebar.exe /autorun
o4 - hkcu\..\run: [ehtray.exe] c:\windows\ehome\ehtray.exe
o4 - hkcu\..\run: [registrymechanic] c:\program files\registry mechanic\rmtray.exe /h
o4 - hkus\s-1-5-19\..\run: [sidebar] %programfiles%\windows sidebar\sidebar.exe /detectmem (user 'local service')
o4 - hkus\s-1-5-19\..\run: [windowswelcomecenter] rundll32.exe oobefldr.dll,showwelcomecenter (user 'local service')
o4 - hkus\s-1-5-20\..\run: [sidebar] %programfiles%\windows sidebar\sidebar.exe /detectmem (user 'network service')
o4 - global startup: adobe gamma loader.lnk = c:\program files\common files\adobe\calibration\adobe gamma loader.exe
o4 - global startup: e_spsu01.lnk = c:\windows\system32\spool\drivers\w32x86\3\e_spsu01.exe
o4 - global startup: logitech setpoint.lnk = c:\program files\logitech\setpoint\kem.exe
o8 - extra context menu item: e&xporteren naar microsoft excel - res://c:\progra~1\micros~3\office11\excel.exe/3000
o9 - extra button: (no name) - {08b0e5c0-4fcb-11cf-aaa5-00401c608501} - c:\progra~1\java\jre16~4.0_0\bin\ssv.dll
o9 - extra 'tools' menuitem: sun java console - {08b0e5c0-4fcb-11cf-aaa5-00401c608501} - c:\progra~1\java\jre16~4.0_0\bin\ssv.dll
o9 - extra button: (no name) - {2d663d1a-8670-49d9-a1a5-4c56b4e14e84} - (no file)
o9 - extra button: express cleanup - {5e638779-1818-4754-a595-ef1c63b87a56} - c:\program files\norton systemworks basic edition\norton cleanup\wcquick.lnk
o9 - extra 'tools' menuitem: express cleanup - {5e638779-1818-4754-a595-ef1c63b87a56} - c:\program files\norton systemworks basic edition\norton cleanup\wcquick.lnk
o9 - extra button: onderzoek - {92780b25-18cc-41c8-b9be-3c9c571a8263} - c:\progra~1\micros~3\office11\refiebar.dll
o9 - extra button: moneyside - {e023f504-0c5a-4750-a1e7-a9046dea8a21} - c:\program files\microsoft money\system\mnyside.dll
o13 - gopher prefix:
o16 - dpf: {02bf25d5-8c17-4b23-bc80-d3488abddc6b} (quicktime object) - [noparse]http://appldnld.apple.com.edgesuite.net/content.info.apple.com/quicktime/qtactivex/qtplugin.cab[/noparse]
o16 - dpf: {0eb0e74a-2a76-4ab3-a7fb-9bd8c29f7f75} (ckavwebscan object) - [noparse]http://www.kaspersky.nl/scanforvirus-en/kavwebscan_unicode.cab[/noparse]
o16 - dpf: {2bc66f54-93a8-11d3-beb6-00105aa9b6ae} (symantec antivirus scanner) - [noparse]http://security.symantec.com/sscv6/sharedcontent/vc/bin/avsniff.cab[/noparse]
o16 - dpf: {6414512b-b978-451d-a0d8-fcfdf33e833c} (wuwebcontrol class) - [noparse]http://update.microsoft.com/windowsupdate/v6/v5controls/en/x86/client/wuweb_site.cab?1223736117173[/noparse]
o16 - dpf: {644e432f-49d3-41a1-8dd5-e099162eeec5} (symantec rufsi utility class) - [noparse]http://security.symantec.com/sscv6/sharedcontent/common/bin/cabsa.cab[/noparse]
o16 - dpf: {6ce31b8d-8340-4dbd-b78e-bf59620924dc} (quest3dctlr2 class) - [noparse]http://www.quest3d.com/webplugin/download/quest3dactivex2.cab[/noparse]
o16 - dpf: {fd0b6769-6490-4a91-aa0a-b5ae0dc75ac9} (performance viewer activex control) - [noparse]https://secure.logmein.com/activex/ractrl.cab?lmi=100[/noparse]
o16 - dpf: {ffb3a759-98b1-446f-bda9-909c6eb18cc7} (pcpitstop exam) - [noparse]http://utilities.pcpitstop.com/optimize2/pcpitstop2.dll[/noparse]
o23 - service: lavasoft ad-aware service (aawservice) - lavasoft - c:\program files\lavasoft\ad-aware\aawservice.exe
o23 - service: intel(r) alert service (alertservice) - intel(r) corporation - c:\program files\intel\inteldh\ccu\alertservice.exe
o23 - service: mobiel apple apparaat (apple mobile device) - apple inc. - c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe
o23 - service: bonjour-service (bonjour service) - apple inc. - c:\program files\bonjour\mdnsresponder.exe
o23 - service: symantec event manager (ccevtmgr) - symantec corporation - c:\program files\common files\symantec shared\ccsvchst.exe
o23 - service: symantec settings manager (ccsetmgr) - symantec corporation - c:\program files\common files\symantec shared\ccsvchst.exe
o23 - service: symantec lic netconnect service (cltnetcnservice) - symantec corporation - c:\program files\common files\symantec shared\ccsvchst.exe
o23 - service: dqlwinservice - unknown owner - c:\program files\common files\intel\inteldh\nms\adpplugins\dqlwinservice.exe
o23 - service: google updater service (gusvc) - google - c:\program files\google\common\google updater\googleupdaterservice.exe
o23 - service: intel(r) matrix storage event monitor (iaantmon) - intel corporation - c:\program files\intel\intel matrix storage manager\iaantmon.exe
o23 - service: installdriver table manager (idrivert) - macrovision corporation - c:\program files\common files\installshield\driver\1150\intel 32\idrivert.exe
o23 - service: intel dh service (inteldhsvcconf) - intel(r) corporation - c:\program files\intel\inteldh\intel media server\tools\inteldhsvcconf.exe
o23 - service: ipod-service (ipod service) - apple inc. - c:\program files\ipod\bin\ipodservice.exe
o23 - service: intel(r) software services manager (issm) - intel(r) corporation - c:\program files\intel\inteldh\intel media server\media server\bin\issm.exe
o23 - service: lightscribeservice direct disc labeling service (lightscribeservice) - hewlett-packard company - c:\program files\common files\lightscribe\lssrvc.exe
o23 - service: liveupdate - symantec corporation - c:\progra~1\symantec\liveup~1\lucoms~1.exe
o23 - service: liveupdate notice service ex (liveupdate notice ex) - symantec corporation - c:\program files\common files\symantec shared\ccsvchst.exe
o23 - service: liveupdate notice service - symantec corporation - c:\program files\common files\symantec shared\pif\{b8e1dd85-8582-4c61-b58f-2f227fca9a08}\pifsvc.exe
o23 - service: logmein maintenance service (lmimaint) - logmein, inc. - c:\program files\logmein\x86\ramaint.exe
o23 - service: logmein - logmein, inc. - c:\program files\logmein\x86\logmein.exe
o23 - service: intel(r) viiv(tm) media server (m1 server) - unknown owner - c:\program files\intel\inteldh\intel media server\media server\bin\mediaserver.exe
o23 - service: intel(r) application tracker (mclserviceatl) - intel(r) corporation - c:\program files\intel\inteldh\intel media server\shells\mclserviceatl.exe
o23 - service: mscsptisrv - sony corporation - c:\program files\common files\sony shared\avlib\mscsptisrv.exe
o23 - service: norton internet security - symantec corporation - c:\program files\norton internet security\norton internet security\engine\16.0.0.125\ccsvchst.exe
o23 - service: pacsptisvr - unknown owner - c:\program files\common files\sony shared\avlib\pacsptisvr.exe
o23 - service: pclepci - pinnacle systems gmbh - c:\windows\system32\drivers\pclepci.sys
o23 - service: planner voor automatische liveupdate - symantec corporation - c:\program files\symantec\liveupdate\aluschedulersvc.exe
o23 - service: intel(r) remoting service (remote ui service) - intel(r) corporation - c:\program files\intel\inteldh\intel media server\shells\remote ui service.exe
o23 - service: roxmediadb9 - sonic solutions - c:\program files\common files\roxio shared\9.0\sharedcom\roxmediadb9.exe
o23 - service: pc tools auxiliary service (sdauxservice) - pc tools - c:\program files\spyware doctor\pctsauxs.exe
o23 - service: pc tools security service (sdcoreservice) - pc tools - c:\program files\spyware doctor\pctssvc.exe
o23 - service: sonicstage back-end service - sony corporation - c:\program files\common files\sony shared\avlib\ssbesvc.exe
o23 - service: sony spti service (sptisrv) - sony corporation - c:\program files\common files\sony shared\avlib\sptisrv.exe
o23 - service: sonicstage scsi service (ssscsisv) - sony corporation - c:\program files\common files\sony shared\avlib\ssscsisv.exe
o23 - service: stllssvr - microvision development, inc. - c:\program files\common files\surething shared\stllssvr.exe
o23 - service: symantec core lc - unknown owner - c:\progra~1\common~1\symant~1\ccpd-lc\symlcsvc.exe
--
end of file - 15307 bytes
[/hjt]
Alvast bedankt.
Hallo,
Ik geef 25 euro voor wie dit kan oplossen met spoed!
Norton internet security liet mij weten dat ik een backdoor.trojan op mijn computer heb staan. Helaas geeft deze niet aan wat de namen zijn van de virussen het zijn er 9 in totaal. Ik heb een Hijack this log gemaakt en hoop echt dat iemand het kan oplossen want ik heb al veel scanners geprobeerd, maar geen een ziet de virussen alleen dus Norton maar gaan namen. Ik heb overigens nog niets vreemds aan mijn computer gemerkt, foutmeldingen enz.
[hjt]
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:28:55, on 13-10-2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal
Running processes:
c:\windows\system32\smss.exe
c:\windows\system32\csrss.exe
c:\windows\system32\csrss.exe
c:\windows\system32\wininit.exe
c:\windows\system32\services.exe
c:\windows\system32\winlogon.exe
c:\windows\system32\lsass.exe
c:\windows\system32\lsm.exe
c:\windows\system32\svchost.exe
c:\windows\system32\svchost.exe
c:\windows\system32\svchost.exe
c:\windows\system32\svchost.exe
c:\windows\system32\svchost.exe
c:\windows\system32\slsvc.exe
c:\windows\system32\svchost.exe
c:\windows\system32\svchost.exe
c:\program files\common files\symantec shared\ccsvchst.exe
c:\program files\common files\symantec shared\pif\{b8e1dd85-8582-4c61-b58f-2f227fca9a08}\pifsvc.exe
c:\program files\lavasoft\ad-aware\aawservice.exe
c:\windows\system32\spoolsv.exe
c:\windows\system32\svchost.exe
c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe
c:\program files\bonjour\mdnsresponder.exe
c:\program files\common files\intel\inteldh\nms\adpplugins\dqlwinservice.exe
c:\program files\intel\intel matrix storage manager\iaantmon.exe
c:\program files\common files\lightscribe\lssrvc.exe
c:\program files\logmein\x86\ramaint.exe
c:\program files\logmein\x86\logmein.exe
c:\program files\logmein\x86\lmiguardian.exe
c:\program files\common files\microsoft shared\vs7debug\mdm.exe
c:\program files\norton internet security\norton internet security\engine\16.0.0.125\ccsvchst.exe
c:\windows\system32\taskeng.exe
c:\program files\symantec\liveupdate\aluschedulersvc.exe
c:\windows\system32\svchost.exe
c:\program files\spyware doctor\pctsauxs.exe
c:\program files\spyware doctor\pctssvc.exe
c:\windows\system32\svchost.exe
c:\windows\system32\svchost.exe
c:\windows\system32\searchindexer.exe
c:\windows\system32\wudfhost.exe
c:\program files\norton internet security\norton internet security\engine\16.0.0.125\ccsvchst.exe
c:\windows\system32\taskeng.exe
c:\windows\system32\dwm.exe
c:\windows\explorer.exe
c:\hp\support\hpsysdrv.exe
c:\program files\hewlett-packard\on-screen osd indicator\osd.exe
c:\program files\intel\intel matrix storage manager\iaanotif.exe
c:\windows\rthdvcpl.exe
c:\program files\logitech\setpoint\kem.exe
c:\windows\system32\searchprotocolhost.exe
c:\program files\logmein\x86\logmeinsystray.exe
c:\windows\system32\searchprotocolhost.exe
c:\windows\system32\rundll32.exe
c:\program files\spyware doctor\pctstray.exe
c:\program files\itunes\ituneshelper.exe
c:\program files\common files\symantec shared\ccapp.exe
c:\program files\windows sidebar\sidebar.exe
c:\windows\ehome\ehtray.exe
c:\windows\ehome\ehmsas.exe
c:\program files\registry mechanic\rmtray.exe
c:\windows\system32\rundll32.exe
c:\windows\system32\wbem\wmiprvse.exe
c:\program files\logmein\x86\lmiguardian.exe
c:\program files\logitech\setpoint\khalmnpr.exe
c:\program files\ipod\bin\ipodservice.exe
c:\hp\kbd\kbd.exe
c:\program files\internet explorer\ieuser.exe
c:\program files\internet explorer\iexplore.exe
c:\windows\servicing\trustedinstaller.exe
c:\windows\system32\conime.exe
c:\windows\system32\searchfilterhost.exe
c:\program files\trend micro\hijackthis\hijackthis.exe
c:\windows\system32\wbem\wmiprvse.exe
r1 - hkcu\software\microsoft\internet explorer\main,search page = [noparse]http://go.microsoft.com/fwlink/?linkid=54896[/noparse]
r0 - hkcu\software\microsoft\internet explorer\main,start page = [noparse]http://www.learningtube.nl/[/noparse]
r1 - hklm\software\microsoft\internet explorer\main,default_page_url = [noparse]http://ie.redirect.hp.com/svs/rdr?type=3&tp=iehome&locale=nl_nl&c=73&bd=presario&pf=desktop[/noparse]
r1 - hklm\software\microsoft\internet explorer\main,default_search_url = [noparse]http://go.microsoft.com/fwlink/?linkid=54896[/noparse]
r1 - hklm\software\microsoft\internet explorer\main,search page = [noparse]http://go.microsoft.com/fwlink/?linkid=54896[/noparse]
r0 - hklm\software\microsoft\internet explorer\main,start page = [noparse]http://ie.redirect.hp.com/svs/rdr?type=3&tp=iehome&locale=nl_nl&c=73&bd=presario&pf=desktop[/noparse]
r0 - hklm\software\microsoft\internet explorer\search,searchassistant =
r0 - hklm\software\microsoft\internet explorer\search,customizesearch =
r1 - hkcu\software\microsoft\windows\currentversion\internet settings,proxyoverride = *.local
r0 - hkcu\software\microsoft\internet explorer\toolbar,linksfoldername =
o1 - hosts: ::1 localhost
o2 - bho: adobe pdf reader help bij koppelingen - {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\acroiehelper.dll
o2 - bho: (no name) - {243b17de-77c7-46bf-b94b-0b5f309a0e64} - c:\program files\microsoft money\system\mnyside.dll
o2 - bho: symantec nco bho - {602adb0e-4aff-4217-8aa1-95dac4dfa408} - c:\program files\norton internet security\norton internet security\engine\16.0.0.125\coieplg.dll
o2 - bho: symantec intrusion prevention - {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\program files\norton internet security\norton internet security\engine\16.0.0.125\ipsbho.dll
o2 - bho: ssvhelper class - {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.6.0_07\bin\ssv.dll
o2 - bho: google toolbar helper - {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\googletoolbar2.dll
o2 - bho: (no name) - {fdd3b846-8d59-4ffb-8758-209b6ad74acc} - (no file)
o3 - toolbar: &google - {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\googletoolbar2.dll
o3 - toolbar: norton toolbar - {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - c:\program files\norton internet security\norton internet security\engine\16.0.0.125\coieplg.dll
o4 - hklm\..\run: [windows defender] %programfiles%\windows defender\msascui.exe -hide
o4 - hklm\..\run: [hpsysdrv] c:\hp\support\hpsysdrv.exe
o4 - hklm\..\run: [kbd] c:\hp\kbd\kbdstub.exe
o4 - hklm\..\run: [osdmaestro] c:\program files\hewlett-packard\on-screen osd indicator\osd.exe
o4 - hklm\..\run: [iaanotif] c:\program files\intel\intel matrix storage manager\iaanotif.exe
o4 - hklm\..\run: [rthdvcpl] rthdvcpl.exe
o4 - hklm\..\run: [setpoint] c:\program files\logitech\setpoint\kem.exe
o4 - hklm\..\run: [alualert] c:\program files\symantec\liveupdate\alunotify.exe
o4 - hklm\..\run: [logmein gui] c:\program files\logmein\x86\logmeinsystray.exe
o4 - hklm\..\run: [nvsvc] rundll32.exe c:\windows\system32\nvsvc.dll,nvsvcstart
o4 - hklm\..\run: [nvcpldaemon] rundll32.exe c:\windows\system32\nvcpl.dll,nvstartup
o4 - hklm\..\run: [nvmediacenter] rundll32.exe c:\windows\system32\nvmctray.dll,nvtaskbarinit
o4 - hklm\..\run: [istray] c:\program files\spyware doctor\pctstray.exe
o4 - hklm\..\run: [quicktime task] c:\program files\quicktime\qttask.exe -atboottime
o4 - hklm\..\run: [applesyncnotifier] c:\program files\common files\apple\mobile device support\bin\applesyncnotifier.exe
o4 - hklm\..\run: [ituneshelper] c:\program files\itunes\ituneshelper.exe
o4 - hklm\..\run: [symantec pif alerteng] c:\program files\common files\symantec shared\pif\{b8e1dd85-8582-4c61-b58f-2f227fca9a08}\pifsvc.exe /a /m c:\program files\common files\symantec shared\pif\{b8e1dd85-8582-4c61-b58f-2f227fca9a08}\alerteng.dll
o4 - hklm\..\run: [ccapp] c:\program files\common files\symantec shared\ccapp.exe
o4 - hklm\..\runonce: [launcher] %windir%\sminst\launcher.exe
o4 - hkcu\..\run: [sidebar] c:\program files\windows sidebar\sidebar.exe /autorun
o4 - hkcu\..\run: [ehtray.exe] c:\windows\ehome\ehtray.exe
o4 - hkcu\..\run: [registrymechanic] c:\program files\registry mechanic\rmtray.exe /h
o4 - hkus\s-1-5-19\..\run: [sidebar] %programfiles%\windows sidebar\sidebar.exe /detectmem (user 'local service')
o4 - hkus\s-1-5-19\..\run: [windowswelcomecenter] rundll32.exe oobefldr.dll,showwelcomecenter (user 'local service')
o4 - hkus\s-1-5-20\..\run: [sidebar] %programfiles%\windows sidebar\sidebar.exe /detectmem (user 'network service')
o4 - global startup: adobe gamma loader.lnk = c:\program files\common files\adobe\calibration\adobe gamma loader.exe
o4 - global startup: e_spsu01.lnk = c:\windows\system32\spool\drivers\w32x86\3\e_spsu01.exe
o4 - global startup: logitech setpoint.lnk = c:\program files\logitech\setpoint\kem.exe
o8 - extra context menu item: e&xporteren naar microsoft excel - res://c:\progra~1\micros~3\office11\excel.exe/3000
o9 - extra button: (no name) - {08b0e5c0-4fcb-11cf-aaa5-00401c608501} - c:\progra~1\java\jre16~4.0_0\bin\ssv.dll
o9 - extra 'tools' menuitem: sun java console - {08b0e5c0-4fcb-11cf-aaa5-00401c608501} - c:\progra~1\java\jre16~4.0_0\bin\ssv.dll
o9 - extra button: (no name) - {2d663d1a-8670-49d9-a1a5-4c56b4e14e84} - (no file)
o9 - extra button: express cleanup - {5e638779-1818-4754-a595-ef1c63b87a56} - c:\program files\norton systemworks basic edition\norton cleanup\wcquick.lnk
o9 - extra 'tools' menuitem: express cleanup - {5e638779-1818-4754-a595-ef1c63b87a56} - c:\program files\norton systemworks basic edition\norton cleanup\wcquick.lnk
o9 - extra button: onderzoek - {92780b25-18cc-41c8-b9be-3c9c571a8263} - c:\progra~1\micros~3\office11\refiebar.dll
o9 - extra button: moneyside - {e023f504-0c5a-4750-a1e7-a9046dea8a21} - c:\program files\microsoft money\system\mnyside.dll
o13 - gopher prefix:
o16 - dpf: {02bf25d5-8c17-4b23-bc80-d3488abddc6b} (quicktime object) - [noparse]http://appldnld.apple.com.edgesuite.net/content.info.apple.com/quicktime/qtactivex/qtplugin.cab[/noparse]
o16 - dpf: {0eb0e74a-2a76-4ab3-a7fb-9bd8c29f7f75} (ckavwebscan object) - [noparse]http://www.kaspersky.nl/scanforvirus-en/kavwebscan_unicode.cab[/noparse]
o16 - dpf: {2bc66f54-93a8-11d3-beb6-00105aa9b6ae} (symantec antivirus scanner) - [noparse]http://security.symantec.com/sscv6/sharedcontent/vc/bin/avsniff.cab[/noparse]
o16 - dpf: {6414512b-b978-451d-a0d8-fcfdf33e833c} (wuwebcontrol class) - [noparse]http://update.microsoft.com/windowsupdate/v6/v5controls/en/x86/client/wuweb_site.cab?1223736117173[/noparse]
o16 - dpf: {644e432f-49d3-41a1-8dd5-e099162eeec5} (symantec rufsi utility class) - [noparse]http://security.symantec.com/sscv6/sharedcontent/common/bin/cabsa.cab[/noparse]
o16 - dpf: {6ce31b8d-8340-4dbd-b78e-bf59620924dc} (quest3dctlr2 class) - [noparse]http://www.quest3d.com/webplugin/download/quest3dactivex2.cab[/noparse]
o16 - dpf: {fd0b6769-6490-4a91-aa0a-b5ae0dc75ac9} (performance viewer activex control) - [noparse]https://secure.logmein.com/activex/ractrl.cab?lmi=100[/noparse]
o16 - dpf: {ffb3a759-98b1-446f-bda9-909c6eb18cc7} (pcpitstop exam) - [noparse]http://utilities.pcpitstop.com/optimize2/pcpitstop2.dll[/noparse]
o23 - service: lavasoft ad-aware service (aawservice) - lavasoft - c:\program files\lavasoft\ad-aware\aawservice.exe
o23 - service: intel(r) alert service (alertservice) - intel(r) corporation - c:\program files\intel\inteldh\ccu\alertservice.exe
o23 - service: mobiel apple apparaat (apple mobile device) - apple inc. - c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe
o23 - service: bonjour-service (bonjour service) - apple inc. - c:\program files\bonjour\mdnsresponder.exe
o23 - service: symantec event manager (ccevtmgr) - symantec corporation - c:\program files\common files\symantec shared\ccsvchst.exe
o23 - service: symantec settings manager (ccsetmgr) - symantec corporation - c:\program files\common files\symantec shared\ccsvchst.exe
o23 - service: symantec lic netconnect service (cltnetcnservice) - symantec corporation - c:\program files\common files\symantec shared\ccsvchst.exe
o23 - service: dqlwinservice - unknown owner - c:\program files\common files\intel\inteldh\nms\adpplugins\dqlwinservice.exe
o23 - service: google updater service (gusvc) - google - c:\program files\google\common\google updater\googleupdaterservice.exe
o23 - service: intel(r) matrix storage event monitor (iaantmon) - intel corporation - c:\program files\intel\intel matrix storage manager\iaantmon.exe
o23 - service: installdriver table manager (idrivert) - macrovision corporation - c:\program files\common files\installshield\driver\1150\intel 32\idrivert.exe
o23 - service: intel dh service (inteldhsvcconf) - intel(r) corporation - c:\program files\intel\inteldh\intel media server\tools\inteldhsvcconf.exe
o23 - service: ipod-service (ipod service) - apple inc. - c:\program files\ipod\bin\ipodservice.exe
o23 - service: intel(r) software services manager (issm) - intel(r) corporation - c:\program files\intel\inteldh\intel media server\media server\bin\issm.exe
o23 - service: lightscribeservice direct disc labeling service (lightscribeservice) - hewlett-packard company - c:\program files\common files\lightscribe\lssrvc.exe
o23 - service: liveupdate - symantec corporation - c:\progra~1\symantec\liveup~1\lucoms~1.exe
o23 - service: liveupdate notice service ex (liveupdate notice ex) - symantec corporation - c:\program files\common files\symantec shared\ccsvchst.exe
o23 - service: liveupdate notice service - symantec corporation - c:\program files\common files\symantec shared\pif\{b8e1dd85-8582-4c61-b58f-2f227fca9a08}\pifsvc.exe
o23 - service: logmein maintenance service (lmimaint) - logmein, inc. - c:\program files\logmein\x86\ramaint.exe
o23 - service: logmein - logmein, inc. - c:\program files\logmein\x86\logmein.exe
o23 - service: intel(r) viiv(tm) media server (m1 server) - unknown owner - c:\program files\intel\inteldh\intel media server\media server\bin\mediaserver.exe
o23 - service: intel(r) application tracker (mclserviceatl) - intel(r) corporation - c:\program files\intel\inteldh\intel media server\shells\mclserviceatl.exe
o23 - service: mscsptisrv - sony corporation - c:\program files\common files\sony shared\avlib\mscsptisrv.exe
o23 - service: norton internet security - symantec corporation - c:\program files\norton internet security\norton internet security\engine\16.0.0.125\ccsvchst.exe
o23 - service: pacsptisvr - unknown owner - c:\program files\common files\sony shared\avlib\pacsptisvr.exe
o23 - service: pclepci - pinnacle systems gmbh - c:\windows\system32\drivers\pclepci.sys
o23 - service: planner voor automatische liveupdate - symantec corporation - c:\program files\symantec\liveupdate\aluschedulersvc.exe
o23 - service: intel(r) remoting service (remote ui service) - intel(r) corporation - c:\program files\intel\inteldh\intel media server\shells\remote ui service.exe
o23 - service: roxmediadb9 - sonic solutions - c:\program files\common files\roxio shared\9.0\sharedcom\roxmediadb9.exe
o23 - service: pc tools auxiliary service (sdauxservice) - pc tools - c:\program files\spyware doctor\pctsauxs.exe
o23 - service: pc tools security service (sdcoreservice) - pc tools - c:\program files\spyware doctor\pctssvc.exe
o23 - service: sonicstage back-end service - sony corporation - c:\program files\common files\sony shared\avlib\ssbesvc.exe
o23 - service: sony spti service (sptisrv) - sony corporation - c:\program files\common files\sony shared\avlib\sptisrv.exe
o23 - service: sonicstage scsi service (ssscsisv) - sony corporation - c:\program files\common files\sony shared\avlib\ssscsisv.exe
o23 - service: stllssvr - microvision development, inc. - c:\program files\common files\surething shared\stllssvr.exe
o23 - service: symantec core lc - unknown owner - c:\progra~1\common~1\symant~1\ccpd-lc\symlcsvc.exe
--
end of file - 15307 bytes
[/hjt]
Alvast bedankt.
