[Resolved] kavo tavo problem (using other computer than previous

Hello and Welcome to the forums!

My name is Gringo and I'll be glad to help you with your computer problems. HijackThis logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that it happens.

Please do not run any other tool untill instructed to do so!
Please reply to this thread, do not start another!
Please tell me about any problems that have occurred during the fix.
Please tell me of any other symptoms you may be having as these can help also.
Please try as much as possible not to run anything while executing a fix.


If you follow these instructions, everything should go smoothly.

: Download and Run DSS :

Download Deckard's System Scanner (DSS) to your Desktop. You must be logged onto an account with administrator privileges.

• Close all applications and windows.
• Double-click on dss.exe to run it, and follow the prompts.
• When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt<- this one will be minimized.
• Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt and the extra.txt in your reply.

Gringo

Hi,

I have to say that the first time I ran the program it displayed main.txt and extra.txt, but I had to shut down my computer due to unexpected surconstances. When I ran the program again a bit later, it only showed main.txt not the extra.txt.

Anyway, this is the text f'rom main.txt :

Deckard's System Scanner v20071014.68
Run by [removed] on 2008-06-21 18:30:15
Computer is in Normal Mode.
——————————————————————————–



– HijackThis (run as Steven.exe) ———————————————-

Unable to find log (file not found); running clone.
– HijackThis Clone ————————————————————


Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2008-06-21 18:33:46
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\scardsvr.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\Program Files\AVG\AVG8\avgwdsvc.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Program Files\AVG\AVG8\avgrsx.exe
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVG\AVG8\avgemc.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\WINDOWS\system32\alg.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\MXOALDR.EXE
C:\Program Files\Medion Tools\KeyStat\KeyStat.exe
C:\WINDOWS\Dit.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Documents and Settings\Steven\Bureaublad\dss.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = google.net-studio.org
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\GoogleToolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\GoogleToolbar2.dll
O4 - HKLM\..\Run: [Realtime Monitor] C:\PROGRA~1\CA\ETRUST~1\realmon.exe -s
O4 - HKLM\..\Run: [MXOBG] C:\WINDOWS\MXOALDR.EXE
O4 - HKLM\..\Run: [Keyboard Status] C:\PROGRA~1\Medion Tools\KeyStat\KeyStat.exe
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\network diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\network diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: C:\WINDOWS\system32\nwprovau.dll
O15 - Trusted Zone: *.musicmatch.com (HKLM)
O15 - Trusted Zone: *.musicmatch.com (HKCU)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://fpdownload.macromedia.com/get/shock…director/sw.cab
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} () - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.6.108.cab
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) - http://office.microsoft.com/officeupdate/content/opuc2.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co…b?1106838455765
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) - file://C:\Program Files\AutoCAD 2002\AcDcToday.ocx
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://villadenagric1.spaces.live.com/Phot…ad/MsnPUpld.cab
O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://C:\Program Files\AutoCAD 2002\InstBanr.ocx
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://C:\Program Files\AutoCAD 2002\InstFred.ocx
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.macromedia.com/get/shock…ash/swflash.cab
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Program Files\AutoCAD 2002\AcPreview.ocx
O18 - Protocol: cdo - {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Program Files\Common Files\Microsoft Shared\Web Folders\PKMCDO.DLL
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll
O18 - Protocol: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll
O18 - Protocol: mso-offdap - {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Program Files\Common Files\Microsoft Shared\Web Components\10\OWC10.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL,avgrsstx.dll C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL
O23 - Service: Abel - Unknown owner - C:\Program Files\Cain\Abel.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\ati2evxx.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG8\avgwdsvc.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Desktop Manager 5.7.802.22438 (GoogleDesktopManager-022208-143751) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: mental ray 3.6 Satellite for Autodesk 3ds Max 2009 32-bit 32-bit (mi-raysat_3dsMax2009_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Retrospect Express HD Launcher (RetroExpLauncher) - Dantz Development Corporation - C:\Program Files\Dantz\Retrospect Express HD\retrorun.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: wampapache - Apache Software Foundation - C:\wamp\bin\apache\apache2.2.6\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - C:\wamp\bin\mysql\mysql5.0.45\bin\mysqld-nt.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\Program Files\Common Files\X10\Common\X10nets.exe


–
End of file - 11946 bytes

– Files created between 2008-05-21 and 2008-06-21 —————————–

2008-06-21 18:30:38 0 d——– C:\Program Files\Trend Micro
2008-06-19 20:25:56 0 d——– C:\Documents and Settings\Steven\Application Data\Skype
2008-06-18 22:29:05 0 d——– C:\Program Files\MSXML 6.0
2008-06-18 14:14:08 0 d——– C:\Documents and Settings\All Users\Application Data\Autodesk
2008-06-18 14:13:36 0 d——– C:\Program Files\Autodesk
2008-06-18 14:12:04 0 d——– C:\Program Files\MSBuild
2008-06-18 14:10:05 0 d——– C:\WINDOWS\system32\XPSViewer
2008-06-18 14:08:53 0 d——– C:\Program Files\Reference Assemblies
2008-06-17 14:09:59 0 d——– C:\Program Files\Auto Shutdown
2008-06-17 13:31:31 0 d——– C:\Program Files\DAEMON Tools Lite
2008-06-16 23:11:27 0 d——– C:\Program Files\Norton Security Scan
2008-06-16 20:50:44 0 d——– C:\Documents and Settings\Administrator\WINDOWS
2008-06-16 20:50:44 0 d—s—- C:\Documents and Settings\Administrator\UserData
2008-06-16 20:50:44 0 d–h—– C:\Documents and Settings\Administrator\Sjablonen
2008-06-16 20:50:44 0 dr-h—– C:\Documents and Settings\Administrator\SendTo
2008-06-16 20:50:44 0 dr-h—– C:\Documents and Settings\Administrator\Onlangs geopend
2008-06-16 20:50:44 0 d–h—– C:\Documents and Settings\Administrator\Netwerkprinteromgeving
2008-06-16 20:50:44 0 d–h—– C:\Documents and Settings\Administrator\NetHood
2008-06-16 20:50:44 0 dr——- C:\Documents and Settings\Administrator\Mijn documenten
2008-06-16 20:50:44 0 dr——- C:\Documents and Settings\Administrator\Menu Start
2008-06-16 20:50:44 0 d–h—– C:\Documents and Settings\Administrator\Local Settings
2008-06-16 20:50:44 0 dr——- C:\Documents and Settings\Administrator\Favorieten
2008-06-16 20:50:44 0 d–hs—- C:\Documents and Settings\Administrator\Cookies
2008-06-16 20:50:44 0 d——– C:\Documents and Settings\Administrator\Bureaublad
2008-06-16 20:50:44 0 dr-h—– C:\Documents and Settings\Administrator\Application Data
2008-06-16 20:50:44 0 d——– C:\Documents and Settings\Administrator\Application Data\Sun
2008-06-16 20:50:44 0 d—s—- C:\Documents and Settings\Administrator\Application Data\Microsoft
2008-06-16 20:50:44 0 d——– C:\Documents and Settings\Administrator\Application Data\Macromedia
2008-06-16 20:50:44 0 d——– C:\Documents and Settings\Administrator\Application Data\Identities
2008-06-16 20:50:44 0 d——– C:\Documents and Settings\Administrator\Application Data\CyberLink
2008-06-16 20:50:43 2097152 –ah—– C:\Documents and Settings\Administrator\NTUSER.DAT
2008-06-16 18:36:06 0 d——– C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-06-16 18:36:05 0 d——– C:\Program Files\Malwarebytes' Anti-Malware
2008-06-16 16:45:41 0 d——– C:\Documents and Settings\Maureen\Application Data\VSO
2008-06-14 13:28:15 0 d——– C:\Documents and Settings\Steven\Application Data\VSO
2008-06-14 13:27:50 0 d——– C:\Program Files\VSO
2008-06-14 13:12:12 0 d——– C:\Program Files\Batch Picture Resizer
2008-06-14 11:14:50 0 d——– C:\Program Files\DVDlabPro2
2008-06-13 17:52:08 0 d——– C:\Documents and Settings\Maureen\Application Data\Google
2008-06-08 20:15:51 0 d——– C:\Documents and Settings\Maureen\Application Data\Canopus
2008-05-27 18:15:33 0 d——– C:\Documents and Settings\Steven\Application Data\PlayFirst
2008-05-27 18:15:33 0 d——– C:\Documents and Settings\All Users\Application Data\PlayFirst
2008-05-27 17:12:58 0 d——– C:\Documents and Settings\All Users\Application Data\PlayPond
2008-05-26 12:12:05 0 d——– C:\Program Files\Gamehouse


– Find3M Report —————————————————————

2008-06-21 18:27:36 8405015 –a—— C:\WINDOWS\TempFile
2008-06-20 18:52:45 0 d——– C:\Program Files\Spyware Doctor
2008-06-19 23:28:19 0 d——– C:\Documents and Settings\Steven\Application Data\FileZilla
2008-06-19 22:43:39 0 d——– C:\Documents and Settings\Steven\Application Data\Adobe
2008-06-19 22:25:19 6526 –a—— C:\Documents and Settings\Steven\Application Data\wklnhst.dat
2008-06-18 14:23:32 0 d——– C:\Documents and Settings\Steven\Application Data\Autodesk
2008-06-18 14:15:27 0 d——– C:\Program Files\Common Files\Autodesk Shared
2008-06-18 14:12:28 511302 –a—— C:\WINDOWS\system32\perfh013.dat
2008-06-18 14:12:28 92142 –a—— C:\WINDOWS\system32\perfc013.dat
2008-06-17 12:18:56 0 d——– C:\Program Files\Steam
2008-06-16 23:10:47 0 d——– C:\Program Files\Google
2008-06-16 22:20:45 0 d——– C:\Program Files\Picasa2
2008-06-15 11:42:16 0 d——– C:\Documents and Settings\Steven\Application Data\LimeWire
2008-06-06 18:14:29 0 d——– C:\Program Files\Common Files\Adobe
2008-05-05 19:28:10 0 d——– C:\Program Files\AVG
2008-05-02 13:18:54 0 d——– C:\Documents and Settings\Steven\Application Data\Canopus
2008-04-30 15:43:54 0 d——– C:\Program Files\MSXML 4.0
2008-04-30 15:04:56 0 d–h—– C:\Program Files\InstallShield Installation Information
2008-04-30 15:04:56 0 d——– C:\Program Files\Common Files\Canopus Shared
2008-04-30 15:04:56 0 d——– C:\Program Files\Canopus
2008-04-30 15:04:21 0 d——– C:\Program Files\Common Files
2008-04-28 20:32:02 0 d——– C:\Program Files\Bytescout XLS Viewer
2008-04-21 19:39:18 0 d——– C:\Documents and Settings\Steven\Application Data\DAEMON Tools


– Registry Dump —————————————————————

*Note* empty entries & legit default entries are not shown


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Realtime Monitor"="C:\PROGRA~1\CA\ETRUST~1\realmon.exe" []
"MXOBG"="C:\WINDOWS\MXOALDR.EXE" [10/10/2003 12:23]
"Keyboard Status"="C:\PROGRA~1\Medion Tools\KeyStat\KeyStat.exe" [25/01/2005 12:03]
"Dit"="Dit.exe" [20/07/2004 19:18 C:\WINDOWS\Dit.exe]
"Cmaudio"="cmicnfg.cpl" []
"AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [05/05/2008 19:28]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [12/01/2005 22:05]
"ISTray"="C:\Program Files\Spyware Doctor\pctsTray.exe" [01/02/2008 12:55]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [02/11/2006 22:53]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [04/08/2004 14:00]
"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\daemon.exe" [01/04/2008 11:39]

C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [13/02/2001 11:01:04]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"NoDispCPL"=0 (0x0)
"NoDispBackgroundPage"=0 (0x0)
"NoDispSettingsPage"=0 (0x0)
"NoDispScrSavPage"=0 (0x0)
"DisableRegistryTools"=0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"=0 (0x0)
"NoPropertiesMyComputer"=0 (0x0)
"NoViewContextMenu"=0 (0x0)
"NoFileAssociate"=0 (0x0)
"NoFind"=0 (0x0)
"NoRun"=0 (0x0)
"NoClose"=0 (0x0)
"StartMenuLogoff"=0 (0x0)
"NoSMHelp"=0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoRun"=0 (0x0)
"NoFind"=0 (0x0)
"NoLogOff"=0 (0x0)
"NoSetFolders"=0 (0x0)
"DisallowRun"=0 (0x0)
"NoRecentDocsHistory"=0 (0x0)
"ClearRecentDocsOnExit"=0 (0x0)
"HideClock"=0 (0x0)
"NoTrayItemsDisplay"=0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL,avgrsstx.dll C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdauxservice"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sdcoreservice"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^Google Updater.lnk]
path=C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\Google Updater.lnk
backup=C:\WINDOWS\pss\Google Updater.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
"C:\Documents and Settings\All Users\Documenten\EA Games\DAEMON Tools Lite\daemon.exe" -autorun

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools-1033]
"C:\Program Files\D-Tools\daemon.exe" -lang 1033

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]
"C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MaxtorOneTouch]
C:\PROGRA~1\Maxtor\OneTouch\Utils\OneTouch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\WINDOWS\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RetroExpress]
C:\PROGRA~1\Dantz\RETROS~1\RetroExpress.exe /h

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
"C:\Program Files\Steam\Steam.exe" -silent

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"Avg7UpdSvc"=2 (0x2)
"PnkBstrA"=2 (0x2)
"AVGEMS"=2 (0x2)
"RetroExpLauncher"=2 (0x2)
"PnkBstrB"=2 (0x2)
"gusvc"=2 (0x2)
"GoogleDesktopManager-022208-143751"=3 (0x3)
"Abel"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
p2psvc p2psvc p2pimsvc p2pgasvc PNRPSvc


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2a634c2c-a830-11d9-8cc2-001109e2f95d}]
AutoRun\command- L:\setupSNK.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b3e63dac-938c-11dc-b99c-001109e0457f}]
AutoRun\command- N:\LaunchU3.exe -a




– End of Deckard's System Scanner: finished at 2008-06-21 18:34:17 ————

Hi,

Here is the extra.txt:

Deckard's System Scanner v20071014.68
Extra logfile - please post this as an attachment with your post.
——————————————————————————–

– System Information ———————————————————-

Microsoft Windows XP Home Edition (build 2600) SP 2.0
Architecture: X86; Language: Dutch

CPU 0: Intel® Pentium® 4 CPU 3.20GHz
CPU 1: Intel® Pentium® 4 CPU 3.20GHz
Percentage of Memory in Use: 48%
Physical Memory (total/avail): 1023.48 MiB / 525.9 MiB
Pagefile Memory (total/avail): 2459.92 MiB / 1945.59 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1984.87 MiB

C: is Fixed (NTFS) - 74.53 GiB total, 3.93 GiB free.
D: is Fixed (NTFS) - 57.91 GiB total, 25.04 GiB free.
E: is Fixed (FAT32) - 16.6 GiB total, 6.84 GiB free.
F: is Fixed (NTFS) - 149.04 GiB total, 26.78 GiB free.
G: is CDROM (No Media)
H: is CDROM (No Media)
J: is CDROM (No Media)
K: is Removable (No Media)
L: is Removable (No Media)
M: is Removable (No Media)

\\.\PHYSICALDRIVE1 - WDC WD1600JD-00HBB0 - 149.05 GiB - 1 partition
\PARTITION0 - Extended w/Extended Int 13 - 149.04 GiB - F:

\\.\PHYSICALDRIVE0 - WDC WD1600JD-00HBB0 - 149.05 GiB - 3 partitions
\PARTITION0 (bootable) - Installable File System - 74.53 GiB - C:
\PARTITION1 - Extended w/Extended Int 13 - 74.52 GiB - D: - E:

\\.\PHYSICALDRIVE2 - Generic CF Card CF USB Device

\\.\PHYSICALDRIVE3 - Generic MS/SD Combo MS USB Device

\\.\PHYSICALDRIVE4 - Generic SM/xD Combo SM USB Device



– Security Center ————————————————————-

AUOptions is scheduled to auto-install.
Windows Internal Firewall is enabled.

FirstRunDisabled is set.
AntivirusOverride is set.

AV: AVG Anti-Virus Free v8.0 (AVG Technologies)

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\\WINDOWS\\system32\\sessmgr.exe"="C:\\WINDOWS\\system32\\sessmgr.exe:*:enabled:Hulp op afstand"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:enabled:Windows Messenger"
"C:\\WINDOWS\\system32\\fxsclnt.exe"="C:\\WINDOWS\\system32\\fxsclnt.exe:*:enabled:Microsoft Fax Console"
"C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"="C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe:*:enabled:BlueSoleil (BlueTooth)"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\\WINDOWS\\system32\\sessmgr.exe"="C:\\WINDOWS\\system32\\sessmgr.exe:*:enabled:Hulp op afstand"
"C:\\WINDOWS\\system32\\fxsclnt.exe"="C:\\WINDOWS\\system32\\fxsclnt.exe:*:enabled:Microsoft Fax Console"
"C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"="C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe:*:enabled:BlueSoleil (BlueTooth)"
"C:\\Program Files\\CA\\eTrust Antivirus\\Realmon.exe"="C:\\Program Files\\CA\\eTrust Antivirus\\Realmon.exe:*:Disabled:Realmon"
"C:\\nfsutest\\Empire Earth.exe"="C:\\nfsutest\\Empire Earth.exe:*:Disabled:Empire Earth"
"\\\\LEPLAE\\Wolfenstein - Enemy Territory\\ETDED.EXE"="\\\\LEPLAE\\Wolfenstein - Enemy Territory\\ETDED.EXE:*:Enabled:ETDED.EXE"
"\\\\LEPLAE\\Wolfenstein - Enemy Territory\\ET.EXE"="\\\\LEPLAE\\Wolfenstein - Enemy Territory\\ET.EXE:*:Enabled:ET.EXE"
"C:\\Program Files\\Wolfenstein - Enemy Territory\\ET.exe"="C:\\Program Files\\Wolfenstein - Enemy Territory\\ET.exe:*:Enabled:ET"
"C:\\WINDOWS\\system32\\dplaysvr.exe"="C:\\WINDOWS\\system32\\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\\EA GAMES\\Battlefield 2 Demo\\Bf2_w32ded.exe"="C:\\EA GAMES\\Battlefield 2 Demo\\Bf2_w32ded.exe:*:Enabled:Bf2_w32ded"
"C:\\Program Files\\Internet Explorer\\IEXPLORE.EXE"="C:\\Program Files\\Internet Explorer\\IEXPLORE.EXE:*:Enabled:Internet Explorer"
"C:\\WINDOWS\\system32\\mmc.exe"="C:\\WINDOWS\\system32\\mmc.exe:*:Enabled:Microsoft Management Console"
"C:\\WINDOWS\\system32\\usmt\\migwiz.exe"="C:\\WINDOWS\\system32\\usmt\\migwiz.exe:*:Enabled:Wizard Bestanden en instellingen overzetten"
"C:\\Program Files\\Microsoft Games\\Age of Empires III\\age3.exe"="C:\\Program Files\\Microsoft Games\\Age of Empires III\\age3.exe:*:Disabled:Age of Empires 3"
"C:\\Age of empires\\empires2.exe"="C:\\Age of empires\\empires2.exe:*:Disabled:Age of Empires II"
"C:\\Program Files\\id Software\\Quake 4\\Quake4.exe"="C:\\Program Files\\id Software\\Quake 4\\Quake4.exe:*:Disabled:Quake 4"
"C:\\Program Files\\Road Rash_azzwarez.net_vpsite.ru\\Road Rash\\Road Rash\\ROADRASH.EXE"="C:\\Program Files\\Road Rash_azzwarez.net_vpsite.ru\\Road Rash\\Road Rash\\ROADRASH.EXE:*:Disabled:Road Rash for Windows 95 Executable"
"C:\\Program Files\\EA GAMES\\Need for Speed Most Wanted\\speed.exe"="C:\\Program Files\\EA GAMES\\Need for Speed Most Wanted\\speed.exe:*:Disabled:speed"
"C:\\Program Files\\EA GAMES\\Need for Speed Underground 2\\speed2.exe"="C:\\Program Files\\EA GAMES\\Need for Speed Underground 2\\speed2.exe:*:Disabled:speed2"
"C:\\Program Files\\CA\\eTrust Antivirus\\InocIT.exe"="C:\\Program Files\\CA\\eTrust Antivirus\\InocIT.exe:*:Disabled:InocIT"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"C:\\QUAKE\\WINQUAKE.EXE"="C:\\QUAKE\\WINQUAKE.EXE:*:Enabled:WINQUAKE"
"C:\\Program Files\\Steam\\steamapps\\somers_69\\counter-strike\\hl.exe"="C:\\Program Files\\Steam\\steamapps\\somers_69\\counter-strike\\hl.exe:*:Enabled:Half-Life Launcher"
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"="C:\\Program Files\\Bonjour\\mDNSResponder.exe:*:Enabled:Bonjour"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"D:\\Program Files\\EA GAMES\\Battlefield Vietnam\\bfvietnam.exe"="D:\\Program Files\\EA GAMES\\Battlefield Vietnam\\bfvietnam.exe:*:Enabled:bfvietnam"
"C:\\Program Files\\GameSpy Arcade\\Aphex.exe"="C:\\Program Files\\GameSpy Arcade\\Aphex.exe:*:Enabled:GameSpy Arcade"
"C:\\WINDOWS\\system32\\dpvsetup.exe"="C:\\WINDOWS\\system32\\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\\WINDOWS\\system32\\rundll32.exe"="C:\\WINDOWS\\system32\\rundll32.exe:*:Enabled:Een DLL-bestand als toepassing starten"
"C:\\Program Files\\Worms World Party\\wwp.exe"="C:\\Program Files\\Worms World Party\\wwp.exe:*:Enabled:Worms World Party"
"C:\\Program Files\\Cain\\Cain.exe"="C:\\Program Files\\Cain\\Cain.exe:*:Enabled:Cain - Password Recovery Utility"
"O:\\Programs\\Cain\\Cain.exe"="O:\\Programs\\Cain\\Cain.exe:*:Enabled:Cain - Password Recovery Utility"
"C:\\wamp\\bin\\apache\\apache2.2.6\\bin\\httpd.exe"="C:\\wamp\\bin\\apache\\apache2.2.6\\bin\\httpd.exe:*:Enabled:Apache HTTP Server"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\\Program Files\\AVG\\AVG8\\avgupd.exe"="C:\\Program Files\\AVG\\AVG8\\avgupd.exe:*:Enabled:avgupd.exe"
"C:\\Program Files\\AVG\\AVG8\\avgemc.exe"="C:\\Program Files\\AVG\\AVG8\\avgemc.exe:*:Enabled:avgemc.exe"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype. Take a deep breath "
"C:\\Program Files\\Autodesk\\Backburner\\monitor.exe"="C:\\Program Files\\Autodesk\\Backburner\\monitor.exe:*:Enabled:backburner 2.3 monitor"
"C:\\Program Files\\Autodesk\\Backburner\\manager.exe"="C:\\Program Files\\Autodesk\\Backburner\\manager.exe:*:Enabled:backburner 2.3 manager"
"C:\\Program Files\\Autodesk\\Backburner\\server.exe"="C:\\Program Files\\Autodesk\\Backburner\\server.exe:*:Enabled:backburner 2.3 server"
"C:\\Program Files\\Autodesk\\3ds Max 2009\\3dsmax.exe"="C:\\Program Files\\Autodesk\\3ds Max 2009\\3dsmax.exe:*:Enabled:Autodesk 3ds Max 2009 32-bit"


– Environment Variables ——————————————————-

ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\Steven\Application Data
CLIENTNAME=Console
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=NIEUWEPC
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\Steven
LOGONSERVER=\\NIEUWEPC
NUMBER_OF_PROCESSORS=2
OS=Windows_NT
Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\ATI Technologies\ATI Control Panel;C:\Program Files\Autodesk\Backburner\;C:\Program Files\Common Files\Autodesk Shared\;C:\Program Files\Omni-Bot;;C:\PROGRA~1\COMMON~1\MUVEET~1\030625
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 15 Model 4 Stepping 3, GenuineIntel
PROCESSOR_LEVEL=15
PROCESSOR_REVISION=0403
ProgramFiles=C:\Program Files
PROMPT=$P$G
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\Steven\LOCALS~1\Temp
TMP=C:\DOCUME~1\Steven\LOCALS~1\Temp
USERDOMAIN=NIEUWEPC
USERNAME=Steven
USERPROFILE=C:\Documents and Settings\Steven
windir=C:\WINDOWS
__COMPAT_LAYER=EnableNXShowUI


– User Profiles —————————————————————

Dirk (admin)
Maureen (admin)
Steven (admin)
Elien (admin)
Sonia (admin)
Administrator (admin)


– Add/Remove Programs ———————————————————

–> C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
–> C:\WINDOWS\UNNeroVision.exe /UNINSTALL
–> C:\WINDOWS\UNNMP.exe /UNINSTALL
–> MsiExec /X{65F1CF63-31E0-450B-96F3-4A88BE7361A6}
–> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E013C8D6-20D0-4E47-8FAB-3AD3F9C76390}\setup.exe" -uninst -f"C:\Program Files\BOB-DEBOECK\Uninst.isu" -c"C:\Program Files\BOB-DEBOECK\Uninst.dll"
–> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{28B97CAB-828F-49D8-A30A-675476F9BA92}\setup.exe" -l0x13 /cont -removeonly
–> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3D173DC5-4AE5-4B3F-9819-3977DD11B1D0}\setup.exe" -l0x13 -removeonly
–> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4E7DC12A-3597-4A94-9429-F6C6987361B1}\setup.exe" -l0x13 -removeonly
–> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6813C983-427E-4511-8456-E98FCAA1A125}\setup.exe" -l0x13 -removeonly
–> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7DADB304-AF20-48C3-A780-4B4133A08817}\setup.exe" -l0x13 -removeonly
–> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9225EABF-4457-403B-A82B-91614C9DDDF7}\setup.exe" -l0x13 -removeonly
–> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9C423CF6-2DAA-4A37-94B8-59D7ECC7DB13}\setup.exe" -l0x13 -removeonly
–> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{ACE66099-E18E-4037-83C8-9D182E5B9FA8}\setup.exe" -l0x13 -removeonly
–> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B34B6E67-FCDD-4E03-8742-B5701427FAFB}\setup.exe" -l0x13 -removeonly
–> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C9EFF51A-C925-4F1A-9DEB-DB5F970DE983}\setup.exe" -l0x13 -removeonly
–> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FA6CC4B4-7741-4F8D-8E81-15C4BAB9869B}\setup.exe" -l0x13 -removeonly
–> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
a·c·e Learner –> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\De Wilde CBT\a·c·e Learner\Uninst.isu"
a·c·e Result Viewer –> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\De Wilde CBT\a·c·e Result Viewer\Uninst.isu"
AC3Filter (remove only) –> C:\Program Files\AC3Filter\uninstall.exe
AceGain LiveUpdate 1.0 –> C:\WINDOWS\iun6002.exe "C:\Program Files\AceGain\LiveUpdate\irunin.ini"
Adobe Anchor Service CS3 –> MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}
Adobe Asset Services CS3 –> MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}
Adobe Bridge CS3 –> MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394}
Adobe Bridge Start Meeting –> MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23}
Adobe Camera Raw 4.0 –> MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
Adobe CMaps –> MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
Adobe Color Common Settings –> C:\Program Files\Common Files\Adobe\Installers\6c8e2cb4fd241c55406016127a6ab2e\Setup.exe
Adobe Color Common Settings –> MsiExec.exe /I{6D4AC5A4-4CF9-4F90-8111-B9B53CE257BF}
Adobe Color EU Extra Settings –> MsiExec.exe /I{51846830-E7B2-4218-8968-B77F0FF475B8}
Adobe Color JA Extra Settings –> MsiExec.exe /I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}
Adobe Color NA Recommended Settings –> MsiExec.exe /I{95655ED4-7CA5-46DF-907F-7144877A32E5}
Adobe Default Language CS3 –> MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
Adobe Device Central CS3 –> MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}
Adobe Dreamweaver CS3 –> C:\Program Files\Common Files\Adobe\Installers\7328fdfcb73660ec8b11d5a3d5c6232\Setup.exe
Adobe Dreamweaver CS3 –> MsiExec.exe /I{7C10F5C7-F00F-4BD3-A110-C7D240D2DD25}
Adobe ExtendScript Toolkit 2 –> C:\Program Files\Common Files\Adobe\Installers\3e054d2218e7aa282c2369d939e58ff\Setup.exe
Adobe ExtendScript Toolkit 2 –> MsiExec.exe /I{1BCEA516-B4C5-4B2D-BFA0-AB7910BAD862}
Adobe ExtendScript Toolkit 2 –> MsiExec.exe /I{24D7346D-D4B4-45E8-98EA-75EC14B42DD8}
Adobe Extension Manager CS3 –> MsiExec.exe /I{BE5F3842-8309-4754-92D5-83E02E6077A3}
Adobe Flash CS3 –> MsiExec.exe /I{6B52140A-F189-4945-BFFC-DB3F00B8C589}
Adobe Flash CS3 Professional –> C:\Program Files\Common Files\Adobe\Installers\c3c7fe8b09d497ab2b3fd91c9353390\Setup.exe
Adobe Flash Player 9 ActiveX –> MsiExec.exe /X{BC4F8E84-5E29-49EC-B4E7-E6F9CB50986C}
Adobe Flash Player 9 Plugin –> MsiExec.exe /X{88D422DB-E9C7-4E16-9D80-2999F4FD6AD9}
Adobe Flash Video Encoder –> MsiExec.exe /I{2EFFFC71-1E66-454E-A6E6-CEEC800B96D2}
Adobe Help Viewer CS3 –> MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245}
Adobe Illustrator CS3 –> C:\Program Files\Common Files\Adobe\Installers\a04a925a57548091300ada368235fc6\Setup.exe
Adobe Linguistics CS3 –> MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078}
Adobe PDF Library Files –> MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
Adobe Photoshop 7.0 –> C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Adobe\Photoshop 7.0\Uninst.isu" -c"C:\Program Files\Adobe\Photoshop 7.0\Uninst.dll"
Adobe Reader 8.1.2 - Nederlands –> MsiExec.exe /I{AC76BA86-7AD7-1043-7B44-A81200000003}
Adobe Setup –> MsiExec.exe /I{0650BB10-BCF4-400A-85EE-04097E3046C6}
Adobe Setup –> MsiExec.exe /I{4F3E17F8-F1C8-4A4B-9EB8-1EE2D190CDA9}
Adobe Setup –> MsiExec.exe /I{64C1FA9A-FA94-4B6E-B3E4-8573738E4AD1}
Adobe Setup –> MsiExec.exe /I{B3C02EC1-A7B0-4987-9A43-8789426AAA7D}
Adobe Setup –> MsiExec.exe /I{FFC1ADE3-944B-4231-894E-3903C37271D2}
Adobe Type Support –> MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
Adobe Update Manager CS3 –> MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8}
Adobe Version Cue CS3 Client –> MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}
Adobe WinSoft Linguistics Plugin –> MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}
AGEIA PhysX v7.07.09 –> MsiExec.exe /X{65F1CF63-31E0-450B-96F3-4A88BE7361A6}
AnswerWorks Runtime –> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\WexTech\AnswerWorks\Uninst.isu"
Ashampoo WinOptimizer 4.41 –> "C:\Program Files\Ashampoo\Ashampoo WinOptimizer 4\unins000.exe"
ATI - Software-verwijderprogramma –> C:\Program Files\ATI Technologies\UninstallAll\AtiCimUn.exe
ATI Control Panel –> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}\setup.exe"
ATI Display Driver –> rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean
Autodesk 3ds Max 2009 32-bit –> MsiExec.exe /I{FDD8070F-E3B9-0409-822C-CCFE5E82C14D}
Autodesk Backburner 2008.1 –> MsiExec.exe /I{3D347E6D-5A03-4342-B5BA-6A771885F379}
AVG Free 8.0 –> C:\Program Files\AVG\AVG8\setup.exe /UNINSTALL
Avid Free DV –> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BAD26CB5-035A-495E-83B8-92215B6DA3DE}\Setup.exe" -l0x9
Batch Picture Resizer 2.2 –> "C:\Program Files\Batch Picture Resizer\unins000.exe"
Battlefield Vietnam™ –> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E35B3C63-E958-4E31-A178-95D22024109A}\setup.exe" -l0x9
Beveiligingsupdate for Windows XP (KB923689) –> "C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe"
Beveiligingsupdate for Windows XP (KB941569) –> "C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB890046) –> "C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB893756) –> "C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB896358) –> "C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB896423) –> "C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB896428) –> "C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB899587) –> "C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB899591) –> "C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB900725) –> "C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB901017) –> "C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB901214) –> "C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB902400) –> "C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB904706) –> "C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB905414) –> "C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB905749) –> "C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB908519) –> "C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB911562) –> "C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB911927) –> "C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB913580) –> "C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB914388) –> "C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB914389) –> "C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB917344) –> "C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB917953) –> "C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB918118) –> "C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB918439) –> "C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB919007) –> "C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB920213) –> "C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB920670) –> "C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB920683) –> "C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB920685) –> "C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB921503) –> "C:\WINDOWS\$NtUninstallKB921503$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB922819) –> "C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB923191) –> "C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB923414) –> "C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB923980) –> "C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB924270) –> "C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB924496) –> "C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB924667) –> "C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB925902) –> "C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB926255) –> "C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB926436) –> "C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB927779) –> "C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB927802) –> "C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB928255) –> "C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB928843) –> "C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB929123) –> "C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB930178) –> "C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB931261) –> "C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB931784) –> "C:\WINDOWS\$NtUninstallKB931784$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB932168) –> "C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB933729) –> "C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB935839) –> "C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB935840) –> "C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB936021) –> "C:\WINDOWS\$NtUninstallKB936021$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB937143) –> "C:\WINDOWS\$NtUninstallKB937143$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB938127) –> "C:\WINDOWS\$NtUninstallKB938127$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB938829) –> "C:\WINDOWS\$NtUninstallKB938829$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB939653) –> "C:\WINDOWS\$NtUninstallKB939653$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB941202) –> "C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB941568) –> "C:\WINDOWS\$NtUninstallKB941568$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB941644) –> "C:\WINDOWS\$NtUninstallKB941644$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB941693) –> "C:\WINDOWS\$NtUninstallKB941693$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB943055) –> "C:\WINDOWS\$NtUninstallKB943055$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB943460) –> "C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB943485) –> "C:\WINDOWS\$NtUninstallKB943485$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB944653) –> "C:\WINDOWS\$NtUninstallKB944653$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB945553) –> "C:\WINDOWS\$NtUninstallKB945553$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB946026) –> "C:\WINDOWS\$NtUninstallKB946026$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB948590) –> "C:\WINDOWS\$NtUninstallKB948590$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB948881) –> "C:\WINDOWS\$NtUninstallKB948881$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB950749) –> "C:\WINDOWS\$NtUninstallKB950749$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB950760) –> "C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB950762) –> "C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB951376-v2) –> "C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB951376) –> "C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Beveiligingsupdate voor Windows XP (KB951698) –> "C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
BlueSoleil –> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B9F499B8-D1F0-42FC-84BE-CC552123CCCB}\setup.exe" -l0x13
BOB Software –> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E013C8D6-20D0-4E47-8FAB-3AD3F9C76390}\setup.exe" -uninst
BSPlayer –> "C:\Program Files\Webteh\BSplayer\uninstall.exe"
Bytescout XLS Viewer 2.00 (FREEWARE) –> "C:\Program Files\Bytescout XLS Viewer\unins000.exe"
C-Media High Definition Audio Driver –> C:\WINDOWS\system32\cmirmdrv.exe
Cain & Abel v4.9.14 –> C:\PROGRA~1\Cain\UNINSTAL.EXE C:\PROGRA~1\Cain\Install.log
Canopus ProCoder Express For EDIUS –> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D438FA08-515F-41DD-BBDC-AC3428AE9754}\Setup.exe" -l0x9
CCleaner (remove only) –> "C:\Program Files\CCleaner\uninst.exe"
Counter-Strike –> "C:\Program Files\Steam\steam.exe" steam://uninstall/10
Creatix V.92 Data Fax Modem –> agrsmdel
DAEMON Tools –> MsiExec.exe /I{3DED3A72-61A8-4B87-98A5-EF0BC8038AA0}
De Sims 2 –> C:\Program Files\EA GAMES\De Sims 2\EAUninstall.exe
De Sims 2 Nachtleven –> D:\Sims 2 Nachtleven\EAUninstall.exe
De Sims 2 Studentenleven –> C:\Program Files\EA GAMES\De Sims 2 Studentenleven\EAUninstall.exe
DeviceControl –> MsiExec.exe /I{EABE2A27-9452-472E-9389-EFF410E956E1}
DivX –> C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC
DivX Player –> C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER
DVD-lab PRO 2.2 –> "C:\Program Files\DVDlabPro2\unins000.exe"
DVD Decrypter (Remove Only) –> "C:\Program Files\DVD Decrypter\uninstall.exe"
DVD Shrink 3.2 –> "C:\Program Files\DVD Shrink\unins000.exe"
EAX Unified –> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Creative\EAX Unified\Uninst.isu"
EDIUS4 Settings –>
EDIUS4(SetupManager) –> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F28111F1-8DCC-4E3C-A6D4-5E1D05F28300}\setup.exe" -l0x9
Encarta Encyclopedie Winkler Prins –> MsiExec.exe /I{054E0044-64A6-4248-A026-9745C1E9E159}
Excel to PDF Converter 3.0 –> "C:\Program Files\PDF-Convert\xls2pdf\unins000.exe"
FBX Plugin 2009.0 for Max 2009 –> C:\Program Files\Autodesk\FBX\FbxPlugins\2009.0\Max2009\Uninstall.exe
FileZilla Client 3.0.3 –> C:\Program Files\FileZilla Client\uninstall.exe
Firebird SQL Server - MAGIX Edition 2.0.0.1 (NL) –> C:\Program Files\MAGIX\Common\Database\uninstall.exe
Free PS Convert driver 8.15 –> "C:\Program Files\psconvert\unins000.exe"
Free Sound Recorder v5.8.4 –> "C:\Program Files\Free Sound Recorder\unins000.exe"
FWW99 –> C:\WINDOWS\uninst.exe -f"C:\Program Files\Softwarehouse Macco\FWW99\DeIsL1.isu" -c"C:\Program Files\Softwarehouse Macco\FWW99\_ISREG32.DLL"
Generic USB CardReader 2.0 –> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EA1CB7AC-E221-4822-A789-0ADB051DC498}\Setup.exe" -l0x9 -wUninst
Google Desktop –> C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
Google Earth –> MsiExec.exe /I{1E04F83B-2AB9-4301-9EF7-E86307F79C72}
Google Toolbar for Internet Explorer –> MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29}
Google Toolbar for Internet Explorer –> regsvr32 /u /s "c:\program files\google\googletoolbar2.dll"
Google Updater –> "C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
HighMAT-uitbreiding voor de wizard Cd branden van Microsoft Windows XP –> MsiExec.exe /X{FCE65C4E-B0E8-4FBD-AD16-EDCBE6CD591F}
Hijackthis 1.99.1 –> "C:\Program Files\Hijackthis\unins000.exe"
Hotfix for Windows Media Format 11 SDK (KB929399) –> "C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Hotfix voor Windows XP (KB914440) –> "C:\WINDOWS\$NtUninstallKB914440$\spuninst\spuninst.exe"
Image Resizer Powertoy for Windows XP –> MsiExec.exe /I{1CB92574-96F2-467B-B793-5CEB35C40C29}
Informatie over uw PC –> MsiExec.exe /I{B8910DF6-1717-4554-AA96-93430B3F9481}
J2SE Development Kit 5.0 Update 5 –> MsiExec.exe /I{32A3A4F4-B792-11D6-A78A-00B0D0150050}
J2SE Runtime Environment 5.0 Update 1 –> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150010}
J2SE Runtime Environment 5.0 Update 5 –> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150050}
Java™ 6 Update 2 –> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160020}
Java™ 6 Update 3 –> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
JCreator Pro 2.50 –> "C:\Program Files\Xinox Software\JCreator Pro\unins000.exe"
KeyStat –> C:\WINDOWS\unin0413.exe -f"C:\Program Files\Medion\KeyStat\DeIsL1.isu" -c"C:\Program Files\Medion\KeyStat\_ISREG32.DLL"
LimeWire 4.14.8 –> "C:\Program Files\LimeWire\uninstall.exe"
Macromedia Dreamweaver 8 –> MsiExec.exe /I{0837A661-FEC3-48B3-876C-91E7D32048A9}
Macromedia Extension Manager –> MsiExec.exe /I{5546CDB5-2CE2-498B-B059-5B3BF81FC41F}
Macromedia Shockwave Player –> C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
MAGIX Foto Clinic 5.5 5.5.29.0 (NL) –> C:\Program Files\MAGIX\Foto_Clinic_55\instslct.exe
MAGIX Foto Manager 2007 4.1.1.89 (NL) –> C:\Program Files\MAGIX\Foto_Manager_2007\instslct.exe
MAGIX Music Manager 2006 7.4.0.463 (NL) –> C:\Program Files\MAGIX\Music_Manager_2006\instslct.exe
MAGIX Video deluxe 2007 PLUS 6.0.5.2 (NL) –> C:\Program Files\MAGIX\Video_deluxe_2007_PLUS\instslct.exe
Malwarebytes' Anti-Malware –> "C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Maxtor OneTouch –> C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{3EC91FDF-FE9A-43D5-96C4-8A9C24372500} /l1033
MediaShow 3.0 –> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D5A9B7C0-8751-11D8-9D75-000129760D75}\setup.exe" -uninstall
Microsoft AutoRoute 2005 –> MsiExec.exe /I{67E4EE98-59F4-4220-89A6-A20AF5BEC689}
Microsoft Compression Client Pack 1.0 for Windows XP –> "C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Office XP Professional met FrontPage –> MsiExec.exe /I{90280413-6000-11D3-8CFE-0050048383C9}
Microsoft Photo Premium 10 –> "C:\Program Files\Common Files\Microsoft Shared\Picture It!\RmvSuite.exe" ADDREMOVE=1 SKU=PREM
Microsoft User-Mode Driver Framework Feature Pack 1.0 –> "C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable –> MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Windows Journal Viewer –> MsiExec.exe /X{43DCF766-6838-4F9A-8C91-D92DA586DFA7}
Microsoft Word 2002 –> MsiExec.exe /I{911B0413-6000-11D3-8CFE-0050048383C9}
Microsoft Works –> MsiExec.exe /I{C745447C-4000-4339-9C64-60EF550E839A}
Microsoft Works 2005 Setup starten –> C:\Program Files\Microsoft Works Suite 2005\Setup\Launcher.exe /ARP H:\NL\
Microsoft Works Suite-invoegtoepassing Microsoft Word –> MsiExec.exe /I{68FF1199-3946-4413-A69A-4C920A067C5C}
Mozilla Firefox (2.0.0.14) –> C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSXML 6.0 Parser (KB933579) –> MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}
Musicmatch® Jukebox –> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{85D3CC30-8859-481A-9654-FD9B74310BEF}\setup.exe" -l0x9 -uninst
Nero Suite –> C:\Program Files\Common Files\Ahead\Uninstall\setup.exe /uninstall ExtraUninstallID=""
Nokia Connectivity Cable Driver –> MsiExec.exe /X{6882DD11-33B8-4DEA-8305-7E765BF74BD3}
Nokia PC Connectivity Solution –> MsiExec.exe /I{0D80391C-0A72-43BB-9BC2-143F63CC111D}
Norton Security Scan –> MsiExec.exe /I{7A2ABE01-E182-4045-8F34-972BDE03B4AB}
Omni-Bot 0.52 STABLE –> C:\Program Files\Omni-Bot\uninst.exe
Pacific Fighters –> C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{E149E957-F289-45E3-8645-1794A173F5AB} /l1033
PDF Settings –> MsiExec.exe /I{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}
PhotoNow! 1.0 –> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D36DD326-7280-11D8-97C8-000129760CBE}\setup.exe" -uninstall
Picasa 2 –> "C:\Program Files\Picasa2\Uninstall.exe"
PowerCinema 4.0 –> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\setup.exe" -uninstall
PowerDirector –> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}\setup.exe" -uninstall
PowerDVD –> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.exe" -uninstall
PowerISO –> "C:\Program Files\PowerISO\uninstall.exe"
PowerProducer –> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\setup.exe" -uninstall
Project64 1.6 –> MsiExec.exe /X{9559F7CA-5E34-4237-A2D9-D856464AD727}
PunkBuster for Battlefield Vietnam –> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D07643A3-CE41-4286-8C78-EB9C83E76DDB}\setup.exe" -l0x9
QuickTime –> C:\WINDOWS\unvise32qt.exe C:\WINDOWS\system32\QuickTime\Uninstall.log
Retrospect Express HD 1.0 –> MsiExec.exe /I{1E88F516-C8AA-4D17-9A54-8AB0768F34C1}
RT2500 USB Wireless LAN Card –> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5490B6EF-5A48-40B7-A9E0-D3B886D17A29}\setup.exe" -l0x9 -removeonly
SAMSUNG CDMA Modem Driver Set –> C:\WINDOWS\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe
SAMSUNG Mobile USB Modem 1.0 Software –> C:\WINDOWS\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe
SAMSUNG Mobile USB Modem Software –> C:\WINDOWS\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe
Samsung PC Studio –> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C4A4722E-79F9-417C-BD72-8D359A090C97}\setup.exe" -l0x13 -removeonly
Samsung PC Studio 3 USB Driver Installer –> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}\setup.exe" -l0x13 -removeonly
Shockwave –> C:\WINDOWS\system32\Macromed\SHOCKW~2\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~2\Install.log
Skype™ 3.6 –> MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
Smart Manager –> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1E02403C-C469-4937-9B94-7DF9F78888FA}\Setup.exe" -l0x9
Sony Picture Utility –> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D5068583-D569-468B-9755-5FBF5848F46F}\setup.exe" -l0x13 /removeonly uninstall -removeonly
Sony USB Driver –> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5C29CB8B-AC1E-4114-8D68-9CD080140D4A}\Setup.exe" UNINSTALL
Spyware Doctor 5.5 –> C:\Program Files\Spyware Doctor\unins000.exe /LOG
Stand O' Food –> O:\programs\STANDO~1\UNWISE.EXE /U O:\programs\STANDO~1\INSTALL.LOG
Steam –> MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
The Rosetta Stone –> C:\WINDOWS\unvise32.exe C:\Program Files\The Rosetta Stone\TRS Support\uninstal.log
Update voor Windows XP (KB894391) –> "C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe"
Update voor Windows XP (KB898461) –> "C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Update voor Windows XP (KB900485) –> "C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe"
Update voor Windows XP (KB904942) –> "C:\WINDOWS\$NtUninstallKB904942$\spuninst\spuninst.exe"
Update voor Windows XP (KB908531) –> "C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
Update voor Windows XP (KB910437) –> "C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
Update voor Windows XP (KB911280) –> "C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"
Update voor Windows XP (KB916595) –> "C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe"
Update voor Windows XP (KB920872) –> "C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe"
Update voor Windows XP (KB922582) –> "C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe"
Update voor Windows XP (KB925720) –> "C:\WINDOWS\$NtUninstallKB925720$\spuninst\spuninst.exe"
Update voor Windows XP (KB927891) –> "C:\WINDOWS\$NtUninstallKB927891$\spuninst\spuninst.exe"
Update voor Windows XP (KB930916) –> "C:\WINDOWS\$NtUninstallKB930916$\spuninst\spuninst.exe"
Update voor Windows XP (KB932823-v3) –> "C:\WINDOWS\$NtUninstallKB932823-v3$\spuninst\spuninst.exe"
Update voor Windows XP (KB933360) –> "C:\WINDOWS\$NtUninstallKB933360$\spuninst\spuninst.exe"
Update voor Windows XP (KB936357) –> "C:\WINDOWS\$NtUninstallKB936357$\spuninst\spuninst.exe"
Update voor Windows XP (KB938828) –> "C:\WINDOWS\$NtUninstallKB938828$\spuninst\spuninst.exe"
Update voor Windows XP (KB942763) –> "C:\WINDOWS\$NtUninstallKB942763$\spuninst\spuninst.exe"
USB Storage Adapter FX (MXO) –> MXOun.exe MXOFX
Video to Audio Converter 1.12 –> "C:\Program Files\SuperAudiotool\Video to Audio Converter\unins000.exe"
VideoLAN VLC media player 0.8.6h –> C:\Program Files\VideoLAN\VLC\uninstall.exe
videon –> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{261D0486-9127-4071-BA1D-FE784310752E}\Setup.exe" -l0x13
VobSub v2.23 (Remove Only) –> "C:\Program Files\Gabest\VobSub\uninstall.exe"
Vodafone 804SS USB driver Software –> C:\WINDOWS\system32\Samsung_USB_Drivers\4\SSVDUninstall.exe
Volo View Express –> C:\WINDOWS\uninst.exe -f"C:\Program Files\Volo View Express\DeIsL1.isu"
VSO Image Resizer 2.0.1.5 –> "C:\Program Files\VSO\Image Resizer\unins000.exe"
W83L518D –> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{CD815603-AB71-4CFB-B3AC-522298037ACC}\Setup.exe" -l0x13
WampServer 2.0 –> "c:\wamp\unins000.exe"
Winamp –> "C:\Program Files\Winamp\UninstWA.exe"
Windows Back-up –> MsiExec.exe /I{76EFFC7C-17A6-479D-9E47-8E658C1695AE}
Windows Communication Foundation –> MsiExec.exe /X{491DD792-AD81-429C-9EB4-86DD3D22E333}
Windows Imaging Component –> "C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Live aanmeldhulp –> MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986}
Windows Live installer –> MsiExec.exe /X{A258173E-F308-475A-951B-F1BF76A4451B}
Windows Live Messenger –> MsiExec.exe /X{A0C978B8-B82B-4FAD-8C31-EBEE8E57468A}
Windows Media Format 11 runtime –> "C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Presentation Foundation –> MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Windows Workflow Foundation –> MsiExec.exe /I{7D1B85BD-AA07-48B8-808D-67A4067FC6BD}
WinRAR –> C:\Program Files\WinRAR\uninstall.exe
X10 Hardware™ –> C:\WINDOWS\UNWISE.EXE C:\PROGRA~1\X10HAR~1\Install.log
XML Paper Specification Shared Components Pack 1.0 –>
XviD Decoder 1.0-Beta3 –> "C:\WINDOWS\system32\UninstXviDDec.exe"
Yahtzee –> C:\PROGRA~1\GAMEHO~1\Yahtzee\UNWISE.EXE /U C:\PROGRA~1\GAMEHO~1\Yahtzee\INSTALL.LOG


– Application Event Log ——————————————————-

Event Record #/Type15597 / Error
Event Submitted/Written: 06/22/2008 03:00:02 PM
Event ID/Source: 1000 / Application Error
Event Description:
Vastgelopen toepassing: uzip.exe, versie: 2.7.1.0, vastgelopen module: uzip.exe, versie: 2.7.1.0, vastgelopen op: 0x00157457.
Verwerken van mediaspecifieke gebeurtenis voor [uzip.exe!ws!]

Event Record #/Type15594 / Success
Event Submitted/Written: 06/22/2008 02:17:03 PM
Event ID/Source: 12001 / usnjsvc
Event Description:
The Messenger Sharing USN Journal Reader service started successfully.

Event Record #/Type15552 / Success
Event Submitted/Written: 06/20/2008 05:46:13 PM
Event ID/Source: 12001 / usnjsvc
Event Description:
The Messenger Sharing USN Journal Reader service started successfully.

Event Record #/Type15540 / Success
Event Submitted/Written: 06/20/2008 11:30:28 AM
Event ID/Source: 12001 / usnjsvc
Event Description:
The Messenger Sharing USN Journal Reader service started successfully.

Event Record #/Type15513 / Warning
Event Submitted/Written: 06/19/2008 10:25:23 PM
Event ID/Source: 1001 / MsiInstaller
Event Description:
De detectie van product {911B0413-6000-11D3-8CFE-0050048383C9}, functie WORDFiles is mislukt tijdens het aanvragen van onderdeel {8E46FEFA-D973-6294-B305-E968CEDFFCB9}



– Security Event Log ———————————————————-

No Errors/Warnings found.


– System Event Log ————————————————————

Event Record #/Type207157 / Error
Event Submitted/Written: 06/22/2008 06:22:18 PM
Event ID/Source: 7026 / Service Control Manager
Event Description:
De volgende opstartstuurprogramma's zijn niet geladen:
d347bus

Event Record #/Type207130 / Error
Event Submitted/Written: 06/22/2008 02:16:17 PM
Event ID/Source: 7026 / Service Control Manager
Event Description:
De volgende opstartstuurprogramma's zijn niet geladen:
d347bus

Event Record #/Type207120 / Error
Event Submitted/Written: 06/22/2008 01:44:01 PM
Event ID/Source: 8032 / BROWSER
Event Description:
De Browser-service heeft te vaak de reservelijst op transport \Device\NwlnkNb niet kunnen ophalen.
De reservebrowser is gestopt.

Event Record #/Type207119 / Warning
Event Submitted/Written: 06/22/2008 01:41:57 PM
Event ID/Source: 8021 / BROWSER
Event Description:
De browser kan geen lijst met servers bij de masterbrowser \\OUDEPC op netwerk \Device\NwlnkNb ophalen.
De gegevens bevinden zich in de foutcode.

Event Record #/Type207106 / Error
Event Submitted/Written: 06/22/2008 01:29:28 PM
Event ID/Source: 7026 / Service Control Manager
Event Description:
De volgende opstartstuurprogramma's zijn niet geladen:
d347bus



– End of Deckard's System Scanner: finished at 2008-06-22 18:30:40 ————

Hi,

Yes I am aware of the program Cain & Abel installed on my computer, I can remove it, if neccesary.

Here are the logs from SUPERantispyware and Kaspersky (Hijack this still can't be fired up):

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 06/23/2008 at 07:40 PM

Application Version : 4.15.1000

Core Rules Database Version : 3487
Trace Rules Database Version: 1478

Scan type : Complete Scan
Total Scan Time : 01:35:41

Memory items scanned : 439
Memory threats detected : 0
Registry items scanned : 7372
Registry threats detected : 0
File items scanned : 173249
File threats detected : 28

Adware.Tracking Cookie
C:\Documents and Settings\Steven\Cookies\[removed][1].txt
C:\Documents and Settings\Steven\Cookies\steven@serving-sys[1].txt
C:\Documents and Settings\Steven\Cookies\[removed]-sys[2].txt
C:\Documents and Settings\Steven\Cookies\steven@doubleclick[2].txt
C:\Documents and Settings\Steven\Cookies\[removed][2].txt
C:\Documents and Settings\Steven\Cookies\steven@adtech[1].txt
C:\Documents and Settings\Steven\Cookies\steven@bluestreak[1].txt
C:\Documents and Settings\Steven\Cookies\steven@atdmt[2].txt
C:\Documents and Settings\Steven\Cookies\steven@2o7[1].txt
www.belstat.be [ C:\Documents and Settings\Dirk\Application Data\Mozilla\Firefox\Profiles\c5ov179b.default\cookies.txt ]
media.adrevolver.com [ C:\Documents and Settings\Maureen\Application Data\Mozilla\Firefox\Profiles\glkpv5oq.default\cookies.txt ]
.advertising.com [ C:\Documents and Settings\Maureen\Application Data\Mozilla\Firefox\Profiles\glkpv5oq.default\cookies.txt ]
.advertising.com [ C:\Documents and Settings\Maureen\Application Data\Mozilla\Firefox\Profiles\glkpv5oq.default\cookies.txt ]
.advertising.com [ C:\Documents and Settings\Maureen\Application Data\Mozilla\Firefox\Profiles\glkpv5oq.default\cookies.txt ]
.avgtechnologies.112.2o7.net [ C:\Documents and Settings\Maureen\Application Data\Mozilla\Firefox\Profiles\glkpv5oq.default\cookies.txt ]
.imrworldwide.com [ C:\Documents and Settings\Maureen\Application Data\Mozilla\Firefox\Profiles\glkpv5oq.default\cookies.txt ]
.imrworldwide.com [ C:\Documents and Settings\Maureen\Application Data\Mozilla\Firefox\Profiles\glkpv5oq.default\cookies.txt ]
www.belstat.be [ C:\Documents and Settings\Maureen\Application Data\Mozilla\Firefox\Profiles\glkpv5oq.default\cookies.txt ]
fl01.ct2.comclick.com [ C:\Documents and Settings\Maureen\Application Data\Mozilla\Firefox\Profiles\glkpv5oq.default\cookies.txt ]
fl01.ct2.comclick.com [ C:\Documents and Settings\Maureen\Application Data\Mozilla\Firefox\Profiles\glkpv5oq.default\cookies.txt ]
fl01.ct2.comclick.com [ C:\Documents and Settings\Maureen\Application Data\Mozilla\Firefox\Profiles\glkpv5oq.default\cookies.txt ]
C:\Documents and Settings\Maureen\Cookies\[removed][2].txt
C:\Documents and Settings\Maureen\Cookies\[removed][1].txt
C:\Documents and Settings\Maureen\Cookies\[removed][2].txt
C:\Documents and Settings\Maureen\Cookies\[removed][2].txt
C:\Documents and Settings\Maureen\Cookies\[removed][2].txt
C:\Documents and Settings\Maureen\Cookies\[removed].e-planning[1].txt
C:\Documents and Settings\Maureen\Cookies\maureen@bluestreak[1].txt
C:\Documents and Settings\Maureen\Cookies\[removed][2].txt
C:\Documents and Settings\Maureen\Cookies\maureen@indextools[2].txt
C:\Documents and Settings\Maureen\Cookies\maureen@insightexpressai[1].txt
C:\Documents and Settings\Maureen\Cookies\[removed][2].txt
C:\Documents and Settings\Maureen\Cookies\[removed][3].txt
C:\Documents and Settings\Maureen\Cookies\[removed][4].txt
C:\Documents and Settings\Maureen\Cookies\maureen@specificclick[2].txt
C:\Documents and Settings\Maureen\Cookies\[removed][2].txt
C:\Documents and Settings\Maureen\Cookies\[removed][2].txt
C:\Documents and Settings\Maureen\Cookies\[removed][1].txt
C:\Documents and Settings\Maureen\Cookies\[removed][2].txt
C:\Documents and Settings\Maureen\Cookies\maureen@xiti[1].txt
.bluestreak.com [ C:\Documents and Settings\Steven\Application Data\Mozilla\Firefox\Profiles\ra8sb9o6.default\cookies.txt ]
.atdmt.com [ C:\Documents and Settings\Steven\Application Data\Mozilla\Firefox\Profiles\ra8sb9o6.default\cookies.txt ]
.doubleclick.net [ C:\Documents and Settings\Steven\Application Data\Mozilla\Firefox\Profiles\ra8sb9o6.default\cookies.txt ]
.statcounter.com [ C:\Documents and Settings\Steven\Application Data\Mozilla\Firefox\Profiles\ra8sb9o6.default\cookies.txt ]
.kontera.com [ C:\Documents and Settings\Steven\Application Data\Mozilla\Firefox\Profiles\ra8sb9o6.default\cookies.txt ]
.kontera.com [ C:\Documents and Settings\Steven\Application Data\Mozilla\Firefox\Profiles\ra8sb9o6.default\cookies.txt ]
www.burstnet.com [ C:\Documents and Settings\Steven\Application Data\Mozilla\Firefox\Profiles\ra8sb9o6.default\cookies.txt ]
nl.sitestat.com [ C:\Documents and Settings\Steven\Application Data\Mozilla\Firefox\Profiles\ra8sb9o6.default\cookies.txt ]
nl.sitestat.com [ C:\Documents and Settings\Steven\Application Data\Mozilla\Firefox\Profiles\ra8sb9o6.default\cookies.txt ]
nl.sitestat.com [ C:\Documents and Settings\Steven\Application Data\Mozilla\Firefox\Profiles\ra8sb9o6.default\cookies.txt ]
.ads.pointroll.com [ C:\Documents and Settings\Steven\Application Data\Mozilla\Firefox\Profiles\ra8sb9o6.default\cookies.txt ]
.ads.pointroll.com [ C:\Documents and Settings\Steven\Application Data\Mozilla\Firefox\Profiles\ra8sb9o6.default\cookies.txt ]
.ads.pointroll.com [ C:\Documents and Settings\Steven\Application Data\Mozilla\Firefox\Profiles\ra8sb9o6.default\cookies.txt ]
.ads.pointroll.com [ C:\Documents and Settings\Steven\Application Data\Mozilla\Firefox\Profiles\ra8sb9o6.default\cookies.txt ]
.ads.pointroll.com [ C:\Documents and Settings\Steven\Application Data\Mozilla\Firefox\Profiles\ra8sb9o6.default\cookies.txt ]
.ads.pointroll.com [ C:\Documents and Settings\Steven\Application Data\Mozilla\Firefox\Profiles\ra8sb9o6.default\cookies.txt ]
.ads.pointroll.com [ C:\Documents and Settings\Steven\Application Data\Mozilla\Firefox\Profiles\ra8sb9o6.default\cookies.txt ]
.ads.pointroll.com [ C:\Documents and Settings\Steven\Application Data\Mozilla\Firefox\Profiles\ra8sb9o6.default\cookies.txt ]
.tripod.com [ C:\Documents and Settings\Steven\Application Data\Mozilla\Firefox\Profiles\ra8sb9o6.default\cookies.txt ]
.tripod.com [ C:\Documents and Settings\Steven\Application Data\Mozilla\Firefox\Profiles\ra8sb9o6.default\cookies.txt ]
server.iad.liveperson.net [ C:\Documents and Settings\Steven\Application Data\Mozilla\Firefox\Profiles\ra8sb9o6.default\cookies.txt ]
int.sitestat.com [ C:\Documents and Settings\Steven\Application Data\Mozilla\Firefox\Profiles\ra8sb9o6.default\cookies.txt ]
int.sitestat.com [ C:\Documents and Settings\Steven\Application Data\Mozilla\Firefox\Profiles\ra8sb9o6.default\cookies.txt ]
.paypal.112.2o7.net [ C:\Documents and Settings\Steven\Application Data\Mozilla\Firefox\Profiles\ra8sb9o6.default\cookies.txt ]
.stats.paypal.com [ C:\Documents and Settings\Steven\Application Data\Mozilla\Firefox\Profiles\ra8sb9o6.default\cookies.txt ]
.nextstat.com [ C:\Documents and Settings\Steven\Application Data\Mozilla\Firefox\Profiles\ra8sb9o6.default\cookies.txt ]


————————————————————————————————-

——————————————————————————–
KASPERSKY ONLINE SCANNER 7 REPORT
Tuesday, June 24, 2008
Operating System: Microsoft Windows XP Home Edition Service Pack 2 (build 2600)
Kaspersky Online Scanner 7 version: 7.0.25.0
Program database last update: Monday, June 23, 2008 21:29:33
Records in database: 880991
——————————————————————————–

Scan settings:
Scan using the following database: extended
Scan archives: yes
Scan mail databases: yes

Scan area - My Computer:
C:\
D:\
E:\
F:\
G:\
H:\
J:\
K:\
L:\
M:\

Scan statistics:
Files scanned: 175405
Threat name: 4
Infected objects: 13
Suspicious objects: 0
Duration of the scan: 10:46:27


File name / Threat name / Threats count
C:\autorun.reg Infected: Trojan.WinREG.AutoRun.a 1
C:\autorun.Vvbs Infected: Virus.VBS.Small.a 1
C:\Documents and Settings\Steven\Mijn documenten\Mijn muziek\Incomplete\Preview-T-5745425-catastrophe cure explosion in.mp3 Infected: Trojan-Downloader.WMA.Wimad.n 1
C:\Documents and Settings\Steven\Mijn documenten\Mijn muziek\Incomplete\T-5745425-catastrophe cure explosion in.mp3 Infected: Trojan-Downloader.WMA.Wimad.n 1
C:\WINDOWS\system32\autorun.inf Infected: Worm.Win32.AutoRun.dvw 1
C:\WINDOWS\system32\autorun.reg Infected: Trojan.WinREG.AutoRun.a 1
C:\WINDOWS\system32\autorun.Vvbs Infected: Virus.VBS.Small.a 1
D:\autorun.reg Infected: Trojan.WinREG.AutoRun.a 1
D:\autorun.Vvbs Infected: Virus.VBS.Small.a 1
E:\autorun.reg Infected: Trojan.WinREG.AutoRun.a 1
E:\autorun.Vvbs Infected: Virus.VBS.Small.a 1
F:\autorun.reg Infected: Trojan.WinREG.AutoRun.a 1
F:\autorun.Vvbs Infected: Virus.VBS.Small.a 1

The selected area was scanned.

Hi,

I renamed Hijackthis and made the shortcut, but I still can't start it.
Here is the combofix log:
———————————————————————————————————————————
ComboFix 08-06-20.4 - Steven 2008-06-25 12:15:30.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1043.18.560 [GMT 2:00]
Gestart vanuit: C:\Documents and Settings\Steven\Bureaublad\ComboFix.exe
.

(((((((((((((((((((( Bestanden Gemaakt van 2008-05-25 to 2008-06-25 ))))))))))))))))))))))))))))))
.

2008-06-23 18:00 . 2008-06-23 18:00 d——– C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2008-06-23 17:51 . 2008-06-23 17:51 d——– C:\Documents and Settings\Steven\Application Data\SUPERAntiSpyware.com
2008-06-22 14:28 . 2008-06-22 14:28 d——– C:\Program Files\VideoLAN
2008-06-21 18:30 . 2008-06-21 18:30 d——– C:\Program Files\Trend Micro
2008-06-21 14:55 . 2008-06-21 14:55 d——– C:\Deckard
2008-06-19 20:25 . 2008-06-19 22:24 d——– C:\Documents and Settings\Steven\Application Data\Skype
2008-06-18 22:29 . 2008-06-18 22:29 d——– C:\Program Files\MSXML 6.0
2008-06-18 14:14 . 2008-06-18 14:21 d——– C:\Documents and Settings\All Users\Application Data\Autodesk
2008-06-18 14:13 . 2008-06-18 14:15 d——– C:\Program Files\Autodesk
2008-06-18 14:12 . 2008-06-18 14:12 d——– C:\Program Files\MSBuild
2008-06-18 14:10 . 2008-06-18 14:10 d——– C:\WINDOWS\system32\XPSViewer
2008-06-18 14:08 . 2008-06-18 14:08 d——– C:\Program Files\Reference Assemblies
2008-06-18 14:08 . 2006-06-29 13:07 14,048 ——— C:\WINDOWS\system32\spmsg2.dll
2008-06-17 14:09 . 2008-06-17 14:12 d——– C:\Program Files\Auto Shutdown
2008-06-17 13:31 . 2008-06-17 13:31 d——– C:\Program Files\DAEMON Tools Lite
2008-06-16 23:11 . 2008-06-16 23:11 d——– C:\Program Files\Norton Security Scan
2008-06-16 20:50 . 2005-01-27 15:08 d——– C:\Documents and Settings\Administrator\WINDOWS
2008-06-16 20:50 . 2005-01-27 17:07 d—s—- C:\Documents and Settings\Administrator\UserData
2008-06-16 20:50 . 2005-01-27 11:49 d–h—– C:\Documents and Settings\Administrator\Sjablonen
2008-06-16 20:50 . 2005-03-01 16:22 dr-h—– C:\Documents and Settings\Administrator\Onlangs geopend
2008-06-16 20:50 . 2005-01-27 12:44 d–h—– C:\Documents and Settings\Administrator\Netwerkprinteromgeving
2008-06-16 20:50 . 2005-03-01 16:00 dr——- C:\Documents and Settings\Administrator\Mijn documenten
2008-06-16 20:50 . 2005-01-27 12:44 dr——- C:\Documents and Settings\Administrator\Menu Start
2008-06-16 20:50 . 2005-02-14 13:19 dr——- C:\Documents and Settings\Administrator\Favorieten
2008-06-16 20:50 . 2005-03-01 16:00 d——– C:\Documents and Settings\Administrator\Bureaublad
2008-06-16 20:50 . 2005-02-14 15:59 d——– C:\Documents and Settings\Administrator\Application Data\CyberLink
2008-06-16 20:50 . 2008-06-16 20:50 d——– C:\Documents and Settings\Administrator
2008-06-16 18:36 . 2008-06-16 18:44 d——– C:\Program Files\Malwarebytes' Anti-Malware
2008-06-16 18:36 . 2008-06-16 18:36 d——– C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-06-16 18:36 . 2008-06-10 19:02 34,296 –a—— C:\WINDOWS\system32\drivers\mbamcatchme.sys
2008-06-16 18:36 . 2008-06-10 19:02 15,864 –a—— C:\WINDOWS\system32\drivers\mbam.sys
2008-06-16 16:45 . 2008-06-16 17:29 d——– C:\Documents and Settings\Maureen\Application Data\VSO
2008-06-14 13:28 . 2008-06-14 13:33 d——– C:\Documents and Settings\Steven\Application Data\VSO
2008-06-14 13:27 . 2008-06-14 13:27 d——– C:\Program Files\VSO
2008-06-14 13:12 . 2008-06-14 13:12 d——– C:\Program Files\Batch Picture Resizer
2008-06-14 11:14 . 2008-06-14 11:14 d——– C:\Program Files\DVDlabPro2
2008-06-11 11:25 . 2008-06-14 20:00 272,640 ——— C:\WINDOWS\system32\drivers\bthport.sys
2008-06-11 11:25 . 2008-06-14 20:00 272,640 —–c— C:\WINDOWS\system32\dllcache\bthport.sys
2008-06-08 20:15 . 2008-06-08 20:15 d——– C:\Documents and Settings\Maureen\Application Data\Canopus
2008-06-05 19:39 . 2008-06-18 17:48 33 –a—— C:\WINDOWS\system32\cnpsedufet4a.EXT
2008-05-27 18:15 . 2008-05-27 18:15 d——– C:\Documents and Settings\Steven\Application Data\PlayFirst
2008-05-27 18:15 . 2008-05-27 18:15 d——– C:\Documents and Settings\All Users\Application Data\PlayFirst
2008-05-27 17:12 . 2008-05-27 17:12 d——– C:\Documents and Settings\All Users\Application Data\PlayPond
2008-05-26 12:12 . 2008-05-26 12:13 d——– C:\Program Files\Gamehouse

.
((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-06-25 10:12 17,408 —-a-w C:\WINDOWS\system32\drivers\USBCRFT.SYS
2008-06-23 20:53 ——— d—a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-06-23 15:51 ——— d—–w C:\Program Files\Common Files\Wise Installation Wizard
2008-06-20 16:52 ——— d—–w C:\Program Files\Spyware Doctor
2008-06-19 21:28 ——— d—–w C:\Documents and Settings\Steven\Application Data\FileZilla
2008-06-19 20:25 6,526 —-a-w C:\Documents and Settings\Steven\Application Data\wklnhst.dat
2008-06-18 12:23 ——— d—–w C:\Documents and Settings\Steven\Application Data\Autodesk
2008-06-18 12:15 ——— d—–w C:\Program Files\Common Files\Autodesk Shared
2008-06-17 10:24 ——— d—–w C:\Documents and Settings\All Users\Application Data\RetroExp
2008-06-17 10:18 ——— d—–w C:\Program Files\Steam
2008-06-16 21:10 ——— d—–w C:\Program Files\Google
2008-06-16 21:10 ——— d—–w C:\Documents and Settings\All Users\Application Data\Google Updater
2008-06-16 20:20 ——— d—–w C:\Program Files\Picasa2
2008-06-16 14:37 ——— d—–w C:\Documents and Settings\Maureen\Application Data\Ahead
2008-06-15 09:42 ——— d—–w C:\Documents and Settings\Steven\Application Data\LimeWire
2008-06-08 20:58 ——— d—–w C:\Documents and Settings\Maureen\Application Data\Skype
2008-06-08 20:22 ——— d—–w C:\Documents and Settings\Maureen\Application Data\skypePM
2008-06-06 16:14 ——— d—–w C:\Program Files\Common Files\Adobe
2008-06-01 11:32 612 —-a-w C:\Documents and Settings\Maureen\Application Data\wklnhst.dat
2008-05-08 12:28 202,752 —-a-w C:\WINDOWS\system32\drivers\rmcast.sys
2008-05-07 05:16 1,291,776 —-a-w C:\WINDOWS\system32\quartz.dll
2008-05-05 17:28 96,520 —-a-w C:\WINDOWS\system32\drivers\avgldx86.sys
2008-05-05 17:28 75,272 —-a-w C:\WINDOWS\system32\drivers\avgtdix.sys
2008-05-05 17:28 10,520 —-a-w C:\WINDOWS\system32\avgrsstx.dll
2008-05-05 17:28 ——— d—–w C:\Program Files\AVG
2008-05-05 17:28 ——— d—–w C:\Documents and Settings\All Users\Application Data\avg8
2008-05-02 11:18 ——— d—–w C:\Documents and Settings\Steven\Application Data\Canopus
2008-04-30 13:43 ——— d—–w C:\Program Files\MSXML 4.0
2008-04-30 13:05 ——— d—–w C:\Documents and Settings\All Users\Application Data\Apple Computer
2008-04-30 13:04 ——— d–h–w C:\Program Files\InstallShield Installation Information
2008-04-30 13:04 ——— d—–w C:\Program Files\Common Files\Canopus Shared
2008-04-30 13:04 ——— d—–w C:\Program Files\Canopus
2008-04-28 18:32 ——— d—–w C:\Program Files\Bytescout XLS Viewer
2008-04-23 04:22 826,368 —-a-w C:\WINDOWS\system32\wininet.dll
2008-03-25 04:51 621,344 —-a-w C:\WINDOWS\system32\mswstr10.dll
2008-03-25 04:51 183,072 —-a-w C:\WINDOWS\system32\msjint40.dll
2008-03-20 21:03 32 —-a-w C:\Documents and Settings\All Users\Application Data\ezsid.dat
2007-12-26 16:25 5,202 —-a-w C:\Documents and Settings\Dirk\Application Data\wklnhst.dat
2007-11-17 16:07 400 —-a-w C:\Documents and Settings\Elien\Application Data\wklnhst.dat
2006-05-15 16:43 96,240 —-a-w C:\Documents and Settings\Steven\Application Data\GDIPFONTCACHEV1.DAT
2005-01-27 13:59 8 –sh–r C:\WINDOWS\system32\62A95D688F.sys
2007-02-27 17:39 56 –sh–r C:\WINDOWS\system32\6CE2E5913E.sys
2006-07-30 22:20 959 –sha-r C:\WINDOWS\system32\autorun.bin
2007-11-16 15:47 14,186 –sha-w C:\WINDOWS\system32\KGyGaAvL.sys
.

((((((((((((((((((((((((((((( snapshot@2008-06-24_20.42.53.79 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-06-24 17:48:41 2,048 –s-a-w C:\WINDOWS\bootstat.dat
+ 2008-06-25 10:09:34 2,048 –s-a-w C:\WINDOWS\bootstat.dat
.
((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 22:53 204288]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 14:00 15360]
"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\daemon.exe" [2008-04-01 11:39 486856]
"SUPERAntiSpyware"="C:\Documents and Settings\Steven\Bureaublad\SUPERAntiSpyware.exe" [2008-05-28 10:33 1506544]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Realtime Monitor"="C:\PROGRA~1\CA\ETRUST~1\realmon.exe" [ ]
"MXOBG"="C:\WINDOWS\MXOALDR.EXE" [2003-10-10 12:23 94208]
"Keyboard Status"="C:\PROGRA~1\Medion Tools\KeyStat\KeyStat.exe" [2005-01-25 12:03 411648]
"Dit"="Dit.exe" [2004-07-20 19:18 90112 C:\WINDOWS\Dit.exe]
"Cmaudio"="cmicnfg.cpl,CMICtrlWnd" []
"AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2008-05-05 19:28 1177368]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-01-12 22:05 344064]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 14:00 15360]

C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 11:01:04 83360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 0 (0x0)
"NoFileAssociate"= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoLogOff"= 0 (0x0)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Documents and Settings\Steven\Bureaublad\SASSEH.DLL [2008-05-13 10:13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Documents and Settings\Steven\Bureaublad\SASWINLO.dll 2007-04-19 13:41 294912 C:\Documents and Settings\Steven\Bureaublad\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL,avgrsstx.dll C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.CDV5"= cdv5codc.dll
"vidc.CLLC"= cllccodc.dll
"vidc.CUVC"= cuvccodc.dll
"vidc.CDVC"= cdvccodc.dll
"vidc.CDVH"= cdvhcodc.dll

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^Google Updater.lnk]
path=C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\Google Updater.lnk
backup=C:\WINDOWS\pss\Google Updater.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
–a—— 2008-04-01 11:39 486856 C:\Documents and Settings\All Users\Documenten\EA Games\DAEMON Tools Lite\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools-1033]
–a—— 2004-08-22 17:05 81920 C:\Program Files\D-Tools\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]
–a—— 2008-06-16 23:11 29744 C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MaxtorOneTouch]
–a—— 2004-08-31 10:23 823296 C:\PROGRA~1\Maxtor\OneTouch\Utils\OneTouch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
–a—— 2001-07-09 11:50 155648 C:\WINDOWS\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RetroExpress]
–a—— 2004-07-30 16:47 6946816 C:\PROGRA~1\Dantz\RETROS~1\RetroExpress.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
–a—— 2008-06-17 12:17 1271032 C:\Program Files\Steam\Steam.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"Avg7UpdSvc"=2 (0x2)
"PnkBstrA"=2 (0x2)
"AVGEMS"=2 (0x2)
"RetroExpLauncher"=2 (0x2)
"PnkBstrB"=2 (0x2)
"gusvc"=2 (0x2)
"GoogleDesktopManager-022208-143751"=3 (0x3)
"Abel"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"C:\\WINDOWS\\system32\\sessmgr.exe"=
"C:\\WINDOWS\\system32\\fxsclnt.exe"=
"C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"\\\\LEPLAE\\Wolfenstein - Enemy Territory\\ETDED.EXE"=
"\\\\LEPLAE\\Wolfenstein - Enemy Territory\\ET.EXE"=
"C:\\Program Files\\Wolfenstein - Enemy Territory\\ET.exe"=
"C:\\WINDOWS\\system32\\dplaysvr.exe"=
"C:\\Program Files\\Internet Explorer\\IEXPLORE.EXE"=
"C:\\WINDOWS\\system32\\mmc.exe"=
"C:\\WINDOWS\\system32\\usmt\\migwiz.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\Program Files\\LimeWire\\LimeWire.exe"=
"C:\\QUAKE\\WINQUAKE.EXE"=
"C:\\Program Files\\Steam\\steamapps\\somers_69\\counter-strike\\hl.exe"=
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"D:\\Program Files\\EA GAMES\\Battlefield Vietnam\\bfvietnam.exe"=
"C:\\WINDOWS\\system32\\dpvsetup.exe"=
"C:\\wamp\\bin\\apache\\apache2.2.6\\bin\\httpd.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgemc.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=
"C:\\Program Files\\Autodesk\\Backburner\\monitor.exe"=
"C:\\Program Files\\Autodesk\\Backburner\\manager.exe"=
"C:\\Program Files\\Autodesk\\Backburner\\server.exe"=
"C:\\Program Files\\Autodesk\\3ds Max 2009\\3dsmax.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
"3587:TCP"= 3587:TCP:Windows Peer-to-Peer-groepering
"3540:UDP"= 3540:UDP:PNRP (Peer Name Resolution Protocol)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)

R1 AvgLdx86;AVG AVI Loader Driver x86;C:\WINDOWS\system32\Drivers\avgldx86.sys [2008-05-05 19:28]
R1 cdrblock;cdrblock;C:\WINDOWS\system32\DRIVERS\cdrblock.sys [2005-06-14 18:34]
R1 cdrport;cdrport;C:\WINDOWS\system32\DRIVERS\cdrport.sys [2005-03-11 16:28]
R2 ACEDRV08;ACEDRV08;C:\WINDOWS\system32\drivers\ACEDRV08.sys [2007-07-03 18:09]
R2 avg8emc;AVG8 E-mail Scanner;C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-05-05 19:28]
R2 avg8wd;AVG8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-05-05 19:28]
R2 AvgTdiX;AVG8 Network Redirector;C:\WINDOWS\system32\Drivers\avgtdix.sys [2008-05-05 19:28]
R2 mi-raysat_3dsMax2009_32;mental ray 3.6 Satellite for Autodesk 3ds Max 2009 32-bit 32-bit;"C:\Program Files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe" [2008-03-10 00:04]
R2 NwSapAgent;SAP Agent;C:\WINDOWS\system32\svchost.exe [2004-08-04 14:00]
R3 3xHybrid;3xHybrid service;C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2005-02-09 18:02]
R3 cmudax;C-Media High Definition Audio Interface;C:\WINDOWS\system32\drivers\cmudax.sys [2004-10-01 14:58]
R3 wbscr;Winbond Smartcard Reader for I/O;C:\WINDOWS\system32\drivers\wbscr.sys [2002-04-24 13:07]
S3 CardReaderFilter;Card Reader Filter;C:\WINDOWS\system32\Drivers\USBCRFT.SYS [2008-06-25 12:12]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe [2005-11-17 14:18]
S3 p2pgasvc;Groepsverificatie van peer-netwerken;C:\WINDOWS\system32\svchost.exe [2004-08-04 14:00]
S3 p2pimsvc;Identiteitsbeheer van peer-netwerken;C:\WINDOWS\system32\svchost.exe [2004-08-04 14:00]
S3 p2psvc;Peer-netwerken;C:\WINDOWS\system32\svchost.exe [2004-08-04 14:00]
S3 PNRPSvc;Naamomzettingsprotocol van peer-netwerken;C:\WINDOWS\system32\svchost.exe [2004-08-04 14:00]
S3 sonypvs1;Sony Digital Imaging Video2;C:\WINDOWS\system32\DRIVERS\sonypvs1.sys [2006-10-30 13:46]
S3 wampapache;wampapache;"c:\wamp\bin\apache\apache2.2.6\bin\httpd.exe" -k runservice []
S3 wampmysqld;wampmysqld;c:\wamp\bin\mysql\mysql5.0.45\bin\mysqld-nt.exe wampmysqld []
S4 Abel;Abel;C:\Program Files\Cain\Abel.exe []
S4 GoogleDesktopManager-022208-143751;Google Desktop Manager 5.7.802.22438;"C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-06-16 23:11]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
p2psvc REG_MULTI_SZ p2psvc p2pimsvc p2pgasvc PNRPSvc

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2a634c2c-a830-11d9-8cc2-001109e2f95d}]
\Shell\AutoRun\command - L:\setupSNK.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b3e63dac-938c-11dc-b99c-001109e0457f}]
\Shell\AutoRun\command - N:\LaunchU3.exe -a

*Newly Created Service* - CATCHME
.
Inhoud van de 'Gedeelde Taken' map
"2007-12-23 14:27:45 C:\WINDOWS\Tasks\Norton Security Scan.job"
- C:\Program Files\Norton Security Scan\Nss.exe
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-25 12:19:14
Windows 5.1.2600 Service Pack 2 NTFS

scannen van verborgen processen …

scannen van verborgen autostart items …

scannen van verborgen bestanden …

Scan succesvol afgerond
verborgen bestanden: 0

**************************************************************************
.
Voltooingstijd: 2008-06-25 12:24:10
ComboFix-quarantined-files.txt 2008-06-25 10:24:03
ComboFix2.txt 2008-06-24 18:43:15

Pre-Run: 4,204,601,344 bytes beschikbaar
Post-Run: 4,186,873,856 bytes beschikbaar

256 — E O F — 2008-06-20 09:47:55

Here's the combofix log:
——————————————
ComboFix 08-06-20.4 - Steven 2008-06-24 19:43:53.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1043.18.555 [GMT 2:00]
Gestart vanuit: C:\Documents and Settings\Steven\Bureaublad\ComboFix.exe
Command switches used :: C:\Documents and Settings\Steven\Bureaublad\WindowsXP-KB310994-SP2-Home-BootDisk-NLD.exe
* Nieuw herstelpunt werd aangemaakt
.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\system32\AutoRun.inf
C:\WINDOWS\system32\autorun.reg
C:\WINDOWS\system32\media
C:\WINDOWS\system32\media\AvidRender.wav

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

——-\Legacy_NPF


(((((((((((((((((((( Bestanden Gemaakt van 2008-05-24 to 2008-06-24 ))))))))))))))))))))))))))))))
.

2008-06-23 18:00 . 2008-06-23 18:00 d——– C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2008-06-23 17:51 . 2008-06-23 17:51 d——– C:\Documents and Settings\Steven\Application Data\SUPERAntiSpyware.com
2008-06-22 14:28 . 2008-06-22 14:28 d——– C:\Program Files\VideoLAN
2008-06-21 18:30 . 2008-06-21 18:30 d——– C:\Program Files\Trend Micro
2008-06-21 14:55 . 2008-06-21 14:55 d——– C:\Deckard
2008-06-19 20:25 . 2008-06-19 22:24 d——– C:\Documents and Settings\Steven\Application Data\Skype
2008-06-18 22:29 . 2008-06-18 22:29 d——– C:\Program Files\MSXML 6.0
2008-06-18 14:14 . 2008-06-18 14:21 d——– C:\Documents and Settings\All Users\Application Data\Autodesk
2008-06-18 14:13 . 2008-06-18 14:15 d——– C:\Program Files\Autodesk
2008-06-18 14:12 . 2008-06-18 14:12 d——– C:\Program Files\MSBuild
2008-06-18 14:10 . 2008-06-18 14:10 d——– C:\WINDOWS\system32\XPSViewer
2008-06-18 14:08 . 2008-06-18 14:08 d——– C:\Program Files\Reference Assemblies
2008-06-18 14:08 . 2006-06-29 13:07 14,048 ——— C:\WINDOWS\system32\spmsg2.dll
2008-06-17 14:09 . 2008-06-17 14:12 d——– C:\Program Files\Auto Shutdown
2008-06-17 13:31 . 2008-06-17 13:31 d——– C:\Program Files\DAEMON Tools Lite
2008-06-16 23:11 . 2008-06-16 23:11 d——– C:\Program Files\Norton Security Scan
2008-06-16 20:50 . 2005-01-27 15:08 d——– C:\Documents and Settings\Administrator\WINDOWS
2008-06-16 20:50 . 2005-01-27 17:07 d—s—- C:\Documents and Settings\Administrator\UserData
2008-06-16 20:50 . 2005-01-27 11:49 d–h—– C:\Documents and Settings\Administrator\Sjablonen
2008-06-16 20:50 . 2005-03-01 16:22 dr-h—– C:\Documents and Settings\Administrator\Onlangs geopend
2008-06-16 20:50 . 2005-01-27 12:44 d–h—– C:\Documents and Settings\Administrator\Netwerkprinteromgeving
2008-06-16 20:50 . 2005-03-01 16:00 dr——- C:\Documents and Settings\Administrator\Mijn documenten
2008-06-16 20:50 . 2005-01-27 12:44 dr——- C:\Documents and Settings\Administrator\Menu Start
2008-06-16 20:50 . 2005-02-14 13:19 dr——- C:\Documents and Settings\Administrator\Favorieten
2008-06-16 20:50 . 2005-03-01 16:00 d——– C:\Documents and Settings\Administrator\Bureaublad
2008-06-16 20:50 . 2005-02-14 15:59 d——– C:\Documents and Settings\Administrator\Application Data\CyberLink
2008-06-16 20:50 . 2008-06-16 20:50 d——– C:\Documents and Settings\Administrator
2008-06-16 18:36 . 2008-06-16 18:44 d——– C:\Program Files\Malwarebytes' Anti-Malware
2008-06-16 18:36 . 2008-06-16 18:36 d——– C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-06-16 18:36 . 2008-06-10 19:02 34,296 –a—— C:\WINDOWS\system32\drivers\mbamcatchme.sys
2008-06-16 18:36 . 2008-06-10 19:02 15,864 –a—— C:\WINDOWS\system32\drivers\mbam.sys
2008-06-16 16:45 . 2008-06-16 17:29 d——– C:\Documents and Settings\Maureen\Application Data\VSO
2008-06-14 13:28 . 2008-06-14 13:33 d——– C:\Documents and Settings\Steven\Application Data\VSO
2008-06-14 13:27 . 2008-06-14 13:27 d——– C:\Program Files\VSO
2008-06-14 13:12 . 2008-06-14 13:12 d——– C:\Program Files\Batch Picture Resizer
2008-06-14 11:14 . 2008-06-14 11:14 d——– C:\Program Files\DVDlabPro2
2008-06-11 11:25 . 2008-06-14 20:00 272,640 ——— C:\WINDOWS\system32\drivers\bthport.sys
2008-06-11 11:25 . 2008-06-14 20:00 272,640 —–c— C:\WINDOWS\system32\dllcache\bthport.sys
2008-06-08 20:15 . 2008-06-08 20:15 d——– C:\Documents and Settings\Maureen\Application Data\Canopus
2008-06-05 19:39 . 2008-06-18 17:48 33 –a—— C:\WINDOWS\system32\cnpsedufet4a.EXT
2008-05-27 18:15 . 2008-05-27 18:15 d——– C:\Documents and Settings\Steven\Application Data\PlayFirst
2008-05-27 18:15 . 2008-05-27 18:15 d——– C:\Documents and Settings\All Users\Application Data\PlayFirst
2008-05-27 17:12 . 2008-05-27 17:12 d——– C:\Documents and Settings\All Users\Application Data\PlayPond
2008-05-26 12:12 . 2008-05-26 12:13 d——– C:\Program Files\Gamehouse

.
((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-06-24 18:31 17,408 —-a-w C:\WINDOWS\system32\drivers\USBCRFT.SYS
2008-06-23 20:53 ——— d—a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-06-23 15:51 ——— d—–w C:\Program Files\Common Files\Wise Installation Wizard
2008-06-20 16:52 ——— d—–w C:\Program Files\Spyware Doctor
2008-06-19 21:28 ——— d—–w C:\Documents and Settings\Steven\Application Data\FileZilla
2008-06-19 20:25 6,526 —-a-w C:\Documents and Settings\Steven\Application Data\wklnhst.dat
2008-06-18 12:23 ——— d—–w C:\Documents and Settings\Steven\Application Data\Autodesk
2008-06-18 12:15 ——— d—–w C:\Program Files\Common Files\Autodesk Shared
2008-06-17 10:24 ——— d—–w C:\Documents and Settings\All Users\Application Data\RetroExp
2008-06-17 10:18 ——— d—–w C:\Program Files\Steam
2008-06-16 21:10 ——— d—–w C:\Program Files\Google
2008-06-16 21:10 ——— d—–w C:\Documents and Settings\All Users\Application Data\Google Updater
2008-06-16 20:20 ——— d—–w C:\Program Files\Picasa2
2008-06-16 14:37 ——— d—–w C:\Documents and Settings\Maureen\Application Data\Ahead
2008-06-15 09:42 ——— d—–w C:\Documents and Settings\Steven\Application Data\LimeWire
2008-06-08 20:58 ——— d—–w C:\Documents and Settings\Maureen\Application Data\Skype
2008-06-08 20:22 ——— d—–w C:\Documents and Settings\Maureen\Application Data\skypePM
2008-06-06 16:14 ——— d—–w C:\Program Files\Common Files\Adobe
2008-06-01 11:32 612 —-a-w C:\Documents and Settings\Maureen\Application Data\wklnhst.dat
2008-05-08 12:28 202,752 —-a-w C:\WINDOWS\system32\drivers\rmcast.sys
2008-05-05 17:28 96,520 —-a-w C:\WINDOWS\system32\drivers\avgldx86.sys
2008-05-05 17:28 75,272 —-a-w C:\WINDOWS\system32\drivers\avgtdix.sys
2008-05-05 17:28 ——— d—–w C:\Program Files\AVG
2008-05-05 17:28 ——— d—–w C:\Documents and Settings\All Users\Application Data\avg8
2008-05-02 11:18 ——— d—–w C:\Documents and Settings\Steven\Application Data\Canopus
2008-04-30 13:43 ——— d—–w C:\Program Files\MSXML 4.0
2008-04-30 13:05 ——— d—–w C:\Documents and Settings\All Users\Application Data\Apple Computer
2008-04-30 13:04 ——— d–h–w C:\Program Files\InstallShield Installation Information
2008-04-30 13:04 ——— d—–w C:\Program Files\Common Files\Canopus Shared
2008-04-30 13:04 ——— d—–w C:\Program Files\Canopus
2008-04-28 18:32 ——— d—–w C:\Program Files\Bytescout XLS Viewer
2008-03-20 21:03 32 —-a-w C:\Documents and Settings\All Users\Application Data\ezsid.dat
2007-12-26 16:25 5,202 —-a-w C:\Documents and Settings\Dirk\Application Data\wklnhst.dat
2007-11-17 16:07 400 —-a-w C:\Documents and Settings\Elien\Application Data\wklnhst.dat
2006-05-15 16:43 96,240 —-a-w C:\Documents and Settings\Steven\Application Data\GDIPFONTCACHEV1.DAT
2005-01-27 13:59 8 –sh–r C:\WINDOWS\system32\62A95D688F.sys
2007-02-27 17:39 56 –sh–r C:\WINDOWS\system32\6CE2E5913E.sys
2006-07-30 22:20 959 –sha-r C:\WINDOWS\system32\autorun.bin
2007-11-16 15:47 14,186 –sha-w C:\WINDOWS\system32\KGyGaAvL.sys
.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 22:53 204288]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 14:00 15360]
"DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\daemon.exe" [2008-04-01 11:39 486856]
"SUPERAntiSpyware"="C:\Documents and Settings\Steven\Bureaublad\SUPERAntiSpyware.exe" [2008-05-28 10:33 1506544]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Realtime Monitor"="C:\PROGRA~1\CA\ETRUST~1\realmon.exe" [ ]
"MXOBG"="C:\WINDOWS\MXOALDR.EXE" [2003-10-10 12:23 94208]
"Keyboard Status"="C:\PROGRA~1\Medion Tools\KeyStat\KeyStat.exe" [2005-01-25 12:03 411648]
"Dit"="Dit.exe" [2004-07-20 19:18 90112 C:\WINDOWS\Dit.exe]
"Cmaudio"="cmicnfg.cpl,CMICtrlWnd" []
"AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2008-05-05 19:28 1177368]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-01-12 22:05 344064]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 14:00 15360]

C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 11:01:04 83360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 0 (0x0)
"NoFileAssociate"= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoLogOff"= 0 (0x0)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Documents and Settings\Steven\Bureaublad\SASSEH.DLL [2008-05-13 10:13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Documents and Settings\Steven\Bureaublad\SASWINLO.dll 2007-04-19 13:41 294912 C:\Documents and Settings\Steven\Bureaublad\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL,avgrsstx.dll C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.CDV5"= cdv5codc.dll
"vidc.CLLC"= cllccodc.dll
"vidc.CUVC"= cuvccodc.dll
"vidc.CDVC"= cdvccodc.dll
"vidc.CDVH"= cdvhcodc.dll

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^Google Updater.lnk]
path=C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\Google Updater.lnk
backup=C:\WINDOWS\pss\Google Updater.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
–a—— 2008-04-01 11:39 486856 C:\Documents and Settings\All Users\Documenten\EA Games\DAEMON Tools Lite\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools-1033]
–a—— 2004-08-22 17:05 81920 C:\Program Files\D-Tools\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]
–a—— 2008-06-16 23:11 29744 C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MaxtorOneTouch]
–a—— 2004-08-31 10:23 823296 C:\PROGRA~1\Maxtor\OneTouch\Utils\OneTouch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
–a—— 2001-07-09 11:50 155648 C:\WINDOWS\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RetroExpress]
–a—— 2004-07-30 16:47 6946816 C:\PROGRA~1\Dantz\RETROS~1\RetroExpress.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
–a—— 2008-06-17 12:17 1271032 C:\Program Files\Steam\Steam.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"Avg7UpdSvc"=2 (0x2)
"PnkBstrA"=2 (0x2)
"AVGEMS"=2 (0x2)
"RetroExpLauncher"=2 (0x2)
"PnkBstrB"=2 (0x2)
"gusvc"=2 (0x2)
"GoogleDesktopManager-022208-143751"=3 (0x3)
"Abel"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"C:\\WINDOWS\\system32\\sessmgr.exe"=
"C:\\WINDOWS\\system32\\fxsclnt.exe"=
"C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"\\\\LEPLAE\\Wolfenstein - Enemy Territory\\ETDED.EXE"=
"\\\\LEPLAE\\Wolfenstein - Enemy Territory\\ET.EXE"=
"C:\\Program Files\\Wolfenstein - Enemy Territory\\ET.exe"=
"C:\\WINDOWS\\system32\\dplaysvr.exe"=
"C:\\Program Files\\Internet Explorer\\IEXPLORE.EXE"=
"C:\\WINDOWS\\system32\\mmc.exe"=
"C:\\WINDOWS\\system32\\usmt\\migwiz.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\Program Files\\LimeWire\\LimeWire.exe"=
"C:\\QUAKE\\WINQUAKE.EXE"=
"C:\\Program Files\\Steam\\steamapps\\somers_69\\counter-strike\\hl.exe"=
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"D:\\Program Files\\EA GAMES\\Battlefield Vietnam\\bfvietnam.exe"=
"C:\\WINDOWS\\system32\\dpvsetup.exe"=
"C:\\wamp\\bin\\apache\\apache2.2.6\\bin\\httpd.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgemc.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=
"C:\\Program Files\\Autodesk\\Backburner\\monitor.exe"=
"C:\\Program Files\\Autodesk\\Backburner\\manager.exe"=
"C:\\Program Files\\Autodesk\\Backburner\\server.exe"=
"C:\\Program Files\\Autodesk\\3ds Max 2009\\3dsmax.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
"3587:TCP"= 3587:TCP:Windows Peer-to-Peer-groepering
"3540:UDP"= 3540:UDP:PNRP (Peer Name Resolution Protocol)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)

R1 AvgLdx86;AVG AVI Loader Driver x86;C:\WINDOWS\system32\Drivers\avgldx86.sys [2008-05-05 19:28]
R1 cdrblock;cdrblock;C:\WINDOWS\system32\DRIVERS\cdrblock.sys [2005-06-14 18:34]
R1 cdrport;cdrport;C:\WINDOWS\system32\DRIVERS\cdrport.sys [2005-03-11 16:28]
R2 ACEDRV08;ACEDRV08;C:\WINDOWS\system32\drivers\ACEDRV08.sys [2007-07-03 18:09]
R2 avg8emc;AVG8 E-mail Scanner;C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-05-05 19:28]
R2 avg8wd;AVG8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-05-05 19:28]
R2 AvgTdiX;AVG8 Network Redirector;C:\WINDOWS\system32\Drivers\avgtdix.sys [2008-05-05 19:28]
R2 mi-raysat_3dsMax2009_32;mental ray 3.6 Satellite for Autodesk 3ds Max 2009 32-bit 32-bit;"C:\Program Files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe" [2008-03-10 00:04]
R2 NwSapAgent;SAP Agent;C:\WINDOWS\system32\svchost.exe [2004-08-04 14:00]
R3 3xHybrid;3xHybrid service;C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2005-02-09 18:02]
R3 cmudax;C-Media High Definition Audio Interface;C:\WINDOWS\system32\drivers\cmudax.sys [2004-10-01 14:58]
R3 wbscr;Winbond Smartcard Reader for I/O;C:\WINDOWS\system32\drivers\wbscr.sys [2002-04-24 13:07]
S3 CardReaderFilter;Card Reader Filter;C:\WINDOWS\system32\Drivers\USBCRFT.SYS [2008-06-24 20:31]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe [2005-11-17 14:18]
S3 p2pgasvc;Groepsverificatie van peer-netwerken;C:\WINDOWS\system32\svchost.exe [2004-08-04 14:00]
S3 p2pimsvc;Identiteitsbeheer van peer-netwerken;C:\WINDOWS\system32\svchost.exe [2004-08-04 14:00]
S3 p2psvc;Peer-netwerken;C:\WINDOWS\system32\svchost.exe [2004-08-04 14:00]
S3 PNRPSvc;Naamomzettingsprotocol van peer-netwerken;C:\WINDOWS\system32\svchost.exe [2004-08-04 14:00]
S3 sonypvs1;Sony Digital Imaging Video2;C:\WINDOWS\system32\DRIVERS\sonypvs1.sys [2006-10-30 13:46]
S3 wampapache;wampapache;"c:\wamp\bin\apache\apache2.2.6\bin\httpd.exe" -k runservice []
S3 wampmysqld;wampmysqld;c:\wamp\bin\mysql\mysql5.0.45\bin\mysqld-nt.exe wampmysqld []
S4 Abel;Abel;C:\Program Files\Cain\Abel.exe []
S4 GoogleDesktopManager-022208-143751;Google Desktop Manager 5.7.802.22438;"C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-06-16 23:11]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
p2psvc REG_MULTI_SZ p2psvc p2pimsvc p2pgasvc PNRPSvc

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2a634c2c-a830-11d9-8cc2-001109e2f95d}]
\Shell\AutoRun\command - L:\setupSNK.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{b3e63dac-938c-11dc-b99c-001109e0457f}]
\Shell\AutoRun\command - N:\LaunchU3.exe -a

.
Inhoud van de 'Gedeelde Taken' map
"2007-12-23 14:27:45 C:\WINDOWS\Tasks\Norton Security Scan.job"
- C:\Program Files\Norton Security Scan\Nss.exe
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-24 20:30:43
Windows 5.1.2600 Service Pack 2 NTFS

scannen van verborgen processen …

scannen van verborgen autostart items …

scannen van verborgen bestanden …

Scan succesvol afgerond
verborgen bestanden: 0

**************************************************************************
.
———————— Other Running Processes ————————
.
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\system32\scardsvr.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\tcpsvcs.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\system32\rundll32.exe
.
**************************************************************************
.
Voltooingstijd: 2008-06-24 20:43:14 - machine was rebooted
ComboFix-quarantined-files.txt 2008-06-24 18:43:10

Pre-Run: 3,969,355,776 bytes beschikbaar
Post-Run: 3,918,127,104 bytes beschikbaar

WindowsXP-KB310994-SP2-Home-BootDisk-NLD.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

283 — E O F — 2008-06-20 09:47:55
—————————————————————-
I'm not sure, but I think this is the log from flash_desinfector, I found it in C:\log.txt
—————————————————————-
(11:47:45)(MainThread)(Alert) main: -> ###################### Log started ######################
(11:47:46)(MainThread)(Informal) main.engine.start: -> Starting thread
(11:47:46)(MainThread)(Informal) main.engine.start: -> Thread init done
(11:47:46)(WorkThread)(Informal) Thread.run.VolumeManager: -> Found new volume
-VolumeName: \\?\Volume{614c6ea4-9bc2-11d9-8ca6-806d6172696f}\

(11:47:46)(WorkThread)(Informal) Thread.run.VolumeManager.CDefragVolume::start: -> Attaching InterferenceProtector to volume
-volume: \??\Volume{614c6ea4-9bc2-11d9-8ca6-806d6172696f}

(11:47:46)(WorkThread)(Informal) Thread.run.VolumeManager.DefragVolumeManager: -> Adding volume.
-Name: \\?\Volume{614c6ea4-9bc2-11d9-8ca6-806d6172696f}\
-Drive Path: F:\
-Filesystem: NTFS

(11:47:46)(WorkThread)(Informal) Thread.run.VolumeManager.DefragVolumeManager.DefragVolumeManager: -> Registered change notification for volume.
-Volume: \\?\Volume{614c6ea4-9bc2-11d9-8ca6-806d6172696f}\

(11:47:46)(WorkThread)(Informal) Thread.run: -> Starting new defragmentation
-Volume: \\?\Volume{614c6ea4-9bc2-11d9-8ca6-806d6172696f}\

(11:47:46)(WorkThread)(Informal) Thread.run.Defragger: -> Begin work
-State: 0
-Volume: \\?\Volume{614c6ea4-9bc2-11d9-8ca6-806d6172696f}\

(11:47:46)(WorkThread)(Informal) Thread.run.Defragger: -> Initializing volume state
(11:47:46)(WorkThread)(Informal) Thread.run.Defragger.VolumeState: -> Marking file as unmovable.
-FileID: 281474976710656
-Path: \\?\Volume{614c6ea4-9bc2-11d9-8ca6-806d6172696f}\$MFT

(11:47:46)(WorkThread)(Informal) Thread.run.Defragger.CDesktopActivityMonitorManager: -> New session found
-sessionid: 0
-status: WTSActive
-name: Console

(11:47:46)(WorkThread)(Error) Thread.run.Defragger.CDesktopActivityMonitorManager.CDesktopActivityMonitorManag
er: -> Error creating session avatar
-Error: BindToObjectFailed (-2147221164) for session 0

(11:47:46)(WorkThread)(Informal) Thread.run.Defragger: -> Finished initializing volume state
-Don't use areas: (787392..1123264)
-Total Clusters: 39070072

(11:47:46)(WorkThread)(Informal) Thread.run.Defragger.CDefragger: -> Enough free clusters found.
-Total clusters: 39070072
-Free clusters: 7503194
-Usable free clusters: 7167346
-Needed free clusters: 16

(11:47:46)(WorkThread)(Informal) Thread.run.Defragger: -> Compensating unmovable
(11:47:47)(WorkThread)(Informal) Thread.run.Defragger: -> Finished compensating unmovable
(11:47:47)(WorkThread)(Informal) Thread.run.Defragger: -> Creating target state
(11:47:48)(WorkThread)(Informal) Thread.run.Defragger: -> Finished creating target state
-WorstDesperation: 0

(11:47:48)(WorkThread)(Informal) Thread.run.Defragger: -> Uncompensating unmovable
(11:47:48)(WorkThread)(Informal) Thread.run.Defragger: -> Finished uncompensating unmovable.
(11:47:48)(WorkThread)(Informal) Thread.run.Defragger: -> Moving clusters
(11:51:02)(WorkThread)(Informal) Thread.run.Defragger: -> Finished moving clusters.
(11:51:02)(WorkThread)(Informal) Thread.run: -> Done defragging all volume for single run. Returning.
(11:51:02)(WorkThread)(Informal) Thread.run.DefragVolumeManager: -> Unregistered change notification for volume.
-Volume: \\?\Volume{614c6ea4-9bc2-11d9-8ca6-806d6172696f}\

(11:51:02)(WorkThread)(Informal) Thread.run: -> thread::run has finished
(11:51:02)(MainThread)(Informal) main.engine::cleanupAfterStop: -> thread ended. Deleting thread object.
(11:51:02)(MainThread)(Informal) main.engine::cleanupAfterStop: -> Thread object deleted.
(11:51:04)(MainThread)(Informal) main.Engine destructor: -> Calling stop.
(11:51:04)(MainThread)(Informal) main.Engine destructor: -> Deleting config.
(11:51:04)(MainThread)(Informal) main.Engine destructor: -> Engine destructor finished.
——————————————————————————————————————–
HijackThis started, but it showed an error, here's the log:
——————————————————————————————————————–
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:49:05, on 29/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\WINDOWS\MXOALDR.EXE
C:\PROGRA~1\Medion Tools\KeyStat\KeyStat.exe
C:\WINDOWS\Dit.exe
C:\WINDOWS\system32\RunDll32.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\scanner.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.be
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O4 - HKLM\..\Run: [Realtime Monitor] C:\PROGRA~1\CA\ETRUST~1\realmon.exe -s
O4 - HKLM\..\Run: [MXOBG] C:\WINDOWS\MXOALDR.EXE
O4 - HKLM\..\Run: [Keyboard Status] C:\PROGRA~1\Medion Tools\KeyStat\KeyStat.exe
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Documents and Settings\Steven\Bureaublad\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.aldi.com/
O15 - Trusted Zone: *.musicmatch.com
O15 - Trusted Zone: *.musicmatch.com (HKLM)
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.6.108.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co…b?1106838455765
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) - file://C:\Program Files\AutoCAD 2002\AcDcToday.ocx
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://villadenagric1.spaces.live.com/Phot…ad/MsnPUpld.cab
O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://C:\Program Files\AutoCAD 2002\InstBanr.ocx
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://C:\Program Files\AutoCAD 2002\InstFred.ocx
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Program Files\AutoCAD 2002\AcPreview.ocx
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL,avgrsstx.dll C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Documents and Settings\Steven\Bureaublad\SASWINLO.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: mental ray 3.6 Satellite for Autodesk 3ds Max 2009 32-bit 32-bit (mi-raysat_3dsMax2009_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.6\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.0.45\bin\mysqld-nt.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

–
End of file - 9709 bytes

Hi,
I can't remember what the error was when I open HijackThis, but this time no error occured.

MBAM log (It didn't find any threats):


Malwarebytes' Anti-Malware 1.19
Database versie: 907
Windows 5.1.2600 Service Pack 2

15:09:06 30/06/2008
mbam-log-6-30-2008 (15-09-06).txt

Scan type: Snelle Scan
Objecten gescand: 53822
Verstreken tijd: 6 minute(s), 48 second(s)

Geheugenprocessen geïnfecteerd: 0
Geheugenmodulen geïnfecteerd: 0
Registersleutels geïnfecteerd: 0
Registerwaarden geïnfecteerd: 0
Registerdata bestanden geïnfecteerd: 0
Mappen geïnfecteerd: 0
Bestanden geïnfecteerd: 0

Geheugenprocessen geïnfecteerd:
(Geen kwaadaardige items gevonden)

Geheugenmodulen geïnfecteerd:
(Geen kwaadaardige items gevonden)

Registersleutels geïnfecteerd:
(Geen kwaadaardige items gevonden)

Registerwaarden geïnfecteerd:
(Geen kwaadaardige items gevonden)

Registerdata bestanden geïnfecteerd:
(Geen kwaadaardige items gevonden)

Mappen geïnfecteerd:
(Geen kwaadaardige items gevonden)

Bestanden geïnfecteerd:
(Geen kwaadaardige items gevonden)
————————————————————-


HijackThis
————————————————————-
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:12:34, on 30/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Windows Media Player\WMPNetwk.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\MXOALDR.EXE
C:\PROGRA~1\Medion Tools\KeyStat\KeyStat.exe
C:\WINDOWS\Dit.exe
C:\WINDOWS\system32\RunDll32.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\scanner.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.be
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [MXOBG] C:\WINDOWS\MXOALDR.EXE
O4 - HKLM\..\Run: [Keyboard Status] C:\PROGRA~1\Medion Tools\KeyStat\KeyStat.exe
O4 - HKLM\..\Run: [Dit] Dit.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')
O4 - HKUS\S-1-5-21-1343599765-1884910559-416212166-1008\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Maureen')
O4 - HKUS\S-1-5-21-1343599765-1884910559-416212166-1008\..\Run: [Automatisch EPSON Stylus DX8400 Series op OUDEPC] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICEE.EXE /FU "C:\WINDOWS\TEMP\E_S27.tmp" /EF "HKCU" (User 'Maureen')
O4 - HKUS\S-1-5-21-1343599765-1884910559-416212166-1008\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe (User 'Maureen')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.aldi.com/
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.6.108.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co…b?1106838455765
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) - file://C:\Program Files\AutoCAD 2002\AcDcToday.ocx
O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://villadenagric1.spaces.live.com/Phot…ad/MsnPUpld.cab
O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - file://C:\Program Files\AutoCAD 2002\InstBanr.ocx
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - file://C:\Program Files\AutoCAD 2002\InstFred.ocx
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - file://C:\Program Files\AutoCAD 2002\AcPreview.ocx
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL,avgrsstx.dll C:\PROGRA~1\Google\GOOGLE~4\GOEC62~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Documents and Settings\Steven\Bureaublad\SASWINLO.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\Home Cinema\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: mental ray 3.6 Satellite for Autodesk 3ds Max 2009 32-bit 32-bit (mi-raysat_3dsMax2009_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.6\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.0.45\bin\mysqld-nt.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

–
End of file - 10259 bytes