quote:
Bij mij doet hij het niet.
![]()
Mijn log (na wat dingen die er echt duidelijk niet thuis hoorde weggegooid te hebben):
Logfile of HijackThis v1.99.1
Scan saved at 20:00:28, on 22-3-2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\system32\spoolsv.exe
G:\Program Files\Sitecom\Bluetooth Software\bin\btwdins.exe
F:\WINDOWS\System32\nvsvc32.exe
F:\WINDOWS\System32\svchost.exe
G:\Program Files\Medion\PowerCinema\My_TV\Agent.exe
G:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
F:\Program Files\Common Files\Real\Update_OB\realsched.exe
F:\WINDOWS\System32\ntddetect.exe
F:\WINDOWS\Kgq.exe
G:\Program Files\Java\jre1.5.0_01\bin\jucheck.exe
F:\WINDOWS\System32\ctfmon.exe
F:\WINDOWS\System32\w?auboot.exe
F:\Program Files\Common Files\Real\Update_OB\RealOneMessageCenter.exe
F:\WINDOWS\explorer.exe
G:\Program Files\Mozilla Firefox\firefox.exe
F:\WINDOWS\System32\wuauclt.exe
F:\WINDOWS\system32\NOTEPAD.EXE
G:\Program Files\WinRAR\WinRAR.exe
F:\DOCUME~1\Vincent\LOCALS~1\Temp\Rar$EX00.531\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {200F8712-38F9-4128-B7FC-339715CBB088} - F:\WINDOWS\System32\aaem.dll
O2 - BHO: Explorer Class - {962F12AE-2773-4BEB-99EA-B5C3AB9A6606} - F:\WINDOWS\System32\DSMANA~1.DLL
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - G:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: (no name) - {B438AB01-11C1-3144-9AD2-308192C25FE8} - F:\WINDOWS\System32\wyob.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - G:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - G:\Program Files\DAP\DAPIEBar.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - F:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: (no name) - {44BE0690-5429-47f0-85BB-3FFD8020233E} - (no file)
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [QuickTime Task] "G:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Agent] G:\Program Files\Medion\PowerCinema\My_TV\Agent.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] G:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
O4 - HKLM\..\Run: [TkBellExe] "F:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ntddetect] F:\WINDOWS\System32\ntddetect.exe
O4 - HKLM\..\Run: [MSConfig] F:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE F:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Akp] F:\WINDOWS\Slh.exe
O4 - HKLM\..\Run: [Mbm] F:\WINDOWS\Kgq.exe
O4 - HKLM\..\Run: [Tlh] F:\WINDOWS\Dok.exe
O4 - HKLM\..\Run: [Ook] F:\WINDOWS\System32\Nve.exe
O4 - HKLM\..\Run: [Ocr] F:\WINDOWS\System32\Nnk.exe
O4 - HKLM\..\Run: [Eoo] F:\WINDOWS\Vnb.exe
O4 - HKLM\..\Run: [Kjn] F:\WINDOWS\Nem.exe
O4 - HKLM\..\Run: [Ugp] F:\WINDOWS\Hbu.exe
O4 - HKLM\..\Run: [Bqt] F:\WINDOWS\Ogd.exe
O4 - HKLM\..\Run: [Imu] F:\WINDOWS\System32\Fpv.exe
O4 - HKLM\..\Run: [Fon] F:\WINDOWS\Gaa.exe
O4 - HKLM\..\Run: [Riu] F:\WINDOWS\System32\Bhd.exe
O4 - HKLM\..\Run: [Ijt] F:\WINDOWS\Fte.exe
O4 - HKLM\..\Run: [Igh] F:\WINDOWS\System32\Fku.exe
O4 - HKLM\..\Run: [Qnf] F:\WINDOWS\System32\Krd.exe
O4 - HKLM\..\Run: [Jss] F:\WINDOWS\System32\Mrr.exe
O4 - HKLM\..\Run: [Gsg] F:\WINDOWS\System32\Tbe.exe
O4 - HKLM\..\Run: [Vgj] F:\WINDOWS\Tmc.exe
O4 - HKLM\..\Run: [Cnn] F:\WINDOWS\System32\Umq.exe
O4 - HKLM\..\Run: [sp] rundll32 F:\DOCUME~1\Vincent\LOCALS~1\Temp\se.dll,DllInstall
O4 - HKLM\..\Run: [Jud] F:\WINDOWS\System32\Qfg.exe
O4 - HKLM\..\Run: [Upj] F:\WINDOWS\System32\Iof.exe
O4 - HKLM\..\Run: [Rnq] F:\WINDOWS\Hhc.exe
O4 - HKLM\..\Run: [Rfg] F:\WINDOWS\System32\Mnp.exe
O4 - HKLM\..\Run: [Uvi] F:\WINDOWS\System32\Jik.exe
O4 - HKLM\..\Run: [Hhv] F:\WINDOWS\System32\Qtc.exe
O4 - HKLM\..\Run: [Ajh] F:\WINDOWS\System32\Lun.exe
O4 - HKLM\..\Run: [Gue] F:\WINDOWS\System32\Tvn.exe
O4 - HKLM\..\Run: [Vvc] F:\WINDOWS\System32\Bal.exe
O4 - HKLM\..\Run: [Jhe] F:\WINDOWS\Ahq.exe
O4 - HKLM\..\Run: [Vgq] F:\WINDOWS\Not.exe
O4 - HKLM\..\Run: [Bvu] F:\WINDOWS\System32\Cur.exe
O4 - HKLM\..\Run: [Cjp] F:\WINDOWS\System32\Fbf.exe
O4 - HKLM\..\Run: [Pop] F:\WINDOWS\Tpl.exe
O4 - HKLM\..\Run: [Lsr] F:\WINDOWS\Ael.exe
O4 - HKLM\..\Run: [Lfb] F:\WINDOWS\Bme.exe
O4 - HKLM\..\Run: [Ehv] F:\WINDOWS\System32\Pik.exe
O4 - HKLM\..\Run: [Mlm] F:\WINDOWS\System32\Pok.exe
O4 - HKLM\..\Run: [Krs] F:\WINDOWS\System32\Psk.exe
O4 - HKLM\..\Run: [Jng] F:\WINDOWS\Lao.exe
O4 - HKLM\..\Run: [Slu] F:\WINDOWS\System32\Dge.exe
O4 - HKLM\..\Run: [Bsp] F:\WINDOWS\Ngk.exe
O4 - HKLM\..\Run: [Poi] F:\WINDOWS\Ctt.exe
O4 - HKLM\..\Run: [Loj] F:\WINDOWS\System32\Ira.exe
O4 - HKLM\..\Run: [Vma] F:\WINDOWS\Ekq.exe
O4 - HKLM\..\Run: [Cll] F:\WINDOWS\Asb.exe
O4 - HKLM\..\Run: [Cis] F:\WINDOWS\Chc.exe
O4 - HKLM\..\RunServices: [ntddetect] F:\WINDOWS\System32\ntddetect.exe
O4 - HKCU\..\Run: [CTFMON.EXE] F:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [ClockSync] G:\Program Files\ClockSync\Sync.exe
O4 - HKCU\..\Run: [Trdc] F:\Documents and Settings\Vincent\Application Data\tdso.exe
O4 - HKCU\..\Run: [Bkpedl] F:\WINDOWS\System32\w?auboot.exe
O4 - HKCU\..\Run: [PayTime] F:\WINDOWS\System32\paytime.exe
O4 - HKCU\..\Run: [Hqi] F:\WINDOWS\System32\Ccj.exe
O4 - HKCU\..\Run: [ntddetect] F:\WINDOWS\System32\ntddetect.exe
O4 - HKCU\..\Run: [x3yy] F:\WINDOWS\System32\x3yy\donpogjq.exe
O4 - HKCU\..\Run: [Bdu] F:\WINDOWS\System32\Tgp.exe
O4 - HKCU\..\Run: [Hss] F:\WINDOWS\System32\Gbc.exe
O4 - HKCU\..\Run: [Kil] F:\WINDOWS\Knk.exe
O4 - HKCU\..\Run: [Ers] F:\WINDOWS\System32\Kro.exe
O4 - HKCU\..\Run: [Bod] F:\WINDOWS\System32\Eng.exe
O4 - HKCU\..\Run: [Qlb] F:\WINDOWS\System32\Ddm.exe
O4 - HKCU\..\Run: [Ltn] F:\WINDOWS\Crn.exe
O4 - HKCU\..\Run: [Ulr] F:\WINDOWS\Bic.exe
O4 - HKCU\..\Run: [Ibo] F:\WINDOWS\Dcr.exe
O4 - HKCU\..\Run: [Pdq] F:\WINDOWS\Rle.exe
O4 - HKCU\..\Run: [Gor] F:\WINDOWS\System32\Vtu.exe
O4 - HKCU\..\Run: [Jec] F:\WINDOWS\System32\Fal.exe
O4 - HKCU\..\Run: [Utj] F:\WINDOWS\System32\Ivo.exe
O4 - HKCU\..\Run: [Euv] F:\WINDOWS\System32\Vhh.exe
O4 - HKCU\..\Run: [Vpv] F:\WINDOWS\Dsa.exe
O4 - HKCU\..\Run: [Bqt] F:\WINDOWS\Ogd.exe
O4 - HKCU\..\Run: [Igh] F:\WINDOWS\System32\Fku.exe
O4 - HKCU\..\Run: [Gsg] F:\WINDOWS\System32\Tbe.exe
O4 - HKCU\..\Run: [Cnn] F:\WINDOWS\System32\Umq.exe
O4 - HKCU\..\Run: [Jud] F:\WINDOWS\System32\Qfg.exe
O4 - HKCU\..\Run: [Upj] F:\WINDOWS\System32\Iof.exe
O4 - HKCU\..\Run: [Rnq] F:\WINDOWS\Hhc.exe
O4 - HKCU\..\Run: [Rfg] F:\WINDOWS\System32\Mnp.exe
O4 - HKCU\..\Run: [Uvi] F:\WINDOWS\System32\Jik.exe
O4 - HKCU\..\Run: [Hhv] F:\WINDOWS\System32\Qtc.exe
O4 - HKCU\..\Run: [Ehv] F:\WINDOWS\System32\Pik.exe
O4 - HKCU\..\Run: [Mlm] F:\WINDOWS\System32\Pok.exe
O4 - HKCU\..\Run: [Krs] F:\WINDOWS\System32\Psk.exe
O4 - HKCU\..\Run: [Jng] F:\WINDOWS\Lao.exe
O4 - HKCU\..\Run: [Slu] F:\WINDOWS\System32\Dge.exe
O4 - HKCU\..\Run: [Bsp] F:\WINDOWS\Ngk.exe
O4 - HKCU\..\Run: [Poi] F:\WINDOWS\Ctt.exe
O4 - HKCU\..\Run: [Loj] F:\WINDOWS\System32\Ira.exe
O4 - HKCU\..\Run: [Vma] F:\WINDOWS\Ekq.exe
O4 - HKCU\..\Run: [Cll] F:\WINDOWS\Asb.exe
O4 - HKCU\..\Run: [Cis] F:\WINDOWS\Chc.exe
O4 - Global Startup: Acrobat Assistant.lnk = G:\Program Files\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = F:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = G:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Download with &DAP - G:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - G:\PROGRA~1\DAP\dapextie2.htm
O8 - Extra context menu item: Linked Ima&ges - G:\Program Files\IEimageN\IEimageN.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - G:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - G:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - G:\PROGRA~1\DAP\DAP.EXE
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - G:\Program Files\Sitecom\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - G:\Program Files\Sitecom\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Linked Images - {D8980DE8-9D4C-4fb0-8FB4-95B1FA4125AD} - G:\Program Files\IEimageN\IEimageN.htm
O9 - Extra 'Tools' menuitem: Linked Ima&ges - {D8980DE8-9D4C-4fb0-8FB4-95B1FA4125AD} - G:\Program Files\IEimageN\IEimageN.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) -
http://messenger.zone.msn(...)sClient.cab31267.cabO16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) -
http://asp07.photoprintit(...)/activex/XUpload.ocxO16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) -
http://messenger.zone.msn(...)howdown.cab31267.cabO18 - Filter: text/html - {8326A371-6AC7-4F7B-97F2-242AF1AB8084} - F:\WINDOWS\System32\aaem.dll
O18 - Filter: text/plain - {8326A371-6AC7-4F7B-97F2-242AF1AB8084} - F:\WINDOWS\System32\aaem.dll
O20 - Winlogon Notify: draw32 - F:\WINDOWS\SYSTEM32\draw32.dll
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - G:\Program Files\Sitecom\Bluetooth Software\bin\btwdins.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - F:\WINDOWS\System32\nvsvc32.exe