Hijack logje Nickkenny

[Nickkenny]

Hallo, kunnen jullie eens kijken of er niets verkeerd is , bedankt alvast.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:02:29, on 18-8-2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [CD Autorun] C:\Program Files\TweakNow PowerPack 2009\CDAuto.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Lokale service')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1245347382296
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/mic...ls/en/x86/client/muweb_site.cab?1217014176781
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe
--
End of file - 6221 bytes

 

[wivy]

<table border="0" width="100%"><tbody><tr><td width="96%">Systeem taken</td><td width="2%">

</td><td width="2%">

</td></tr></tbody></table><table border="0" width="100%"><tbody><tr><td width="60">

</td><td valign="top">Analyseer uw Hijack log bestanden met behulp van Agics database
</td></tr></tbody></table>
<table border="0" width="100%"><tbody><tr></tr><tr bgcolor="#faffa8"><td width="150">

</td><td>Uw systeem lijkt schoon van schadelijk software, maar u heeft geen firewall actief. Hierdoor loopt u een verhoogd risico aanvallen van buitenaf
</td></tr></tbody></table>Overzicht van actieve taken: (Klik op de taken voor meer informatie)
<table border="0" width="100%"><tbody><tr bgcolor="#f0f0f0"><td bgcolor="#ddddff"> smss.exe</td><td>Systeem taak
</td><td>Session Manager Subsystem
</td></tr><tr bgcolor="#f0f0f0"><td bgcolor="#ddddff"> winlogon.exe</td><td>Systeem taak
</td><td>Microsoft Windows Logon Process
</td></tr><tr bgcolor="#f0f0f0"><td bgcolor="#ddddff"> services.exe</td><td>Systeem taak
</td><td>Windows Service Controller
</td></tr><tr bgcolor="#f0f0f0"><td bgcolor="#ddddff"> lsass.exe</td><td>Systeem taak
</td><td>Local Security Authority Service
</td></tr><tr bgcolor="#f0f0f0"><td bgcolor="#ddddff"> svchost.exe</td><td>Systeem taak
</td><td>Microsoft Service Host Process
</td></tr><tr bgcolor="#f0f0f0"><td bgcolor="#ddddff"> svchost.exe</td><td>Systeem taak
</td><td>Microsoft Service Host Process
</td></tr><tr bgcolor="#f0f0f0"><td bgcolor="#ddddff"> spoolsv.exe</td><td>Systeem taak
</td><td>Microsoft Printer Spooler Service
</td></tr><tr bgcolor="#f0f0f0"><td bgcolor="#ddddff"> Explorer.EXE</td><td>Systeem taak
</td><td>Microsoft Windows Explorer
</td></tr><tr bgcolor="#f0f0f0"><td bgcolor="#ddddff"> AppleMobileDeviceService.exe</td><td>Achtergrondtaak
</td><td>Apple Mobile Device Service
</td></tr><tr bgcolor="#f0f0f0"><td bgcolor="#ddddff"> avgwdsvc.exe</td><td>Achtergrondtaak
</td><td>avgwdsvc.exe
</td></tr><tr bgcolor="#f0f0f0"><td bgcolor="#ddddff"> mDNSResponder.exe</td><td>Achtergrondtaak
</td><td>Bonjour for Windows Component
</td></tr><tr bgcolor="#f0f0f0"><td bgcolor="#ddddff"> CTsvcCDA.exe</td><td>Achtergrondtaak
</td><td>Creative CD-ROM Services
</td></tr><tr bgcolor="#f0f0f0"><td bgcolor="#ddddff"> jqs.exe</td><td>Achtergrondtaak
</td><td>jqs.exe
</td></tr><tr bgcolor="#f0f0f0"><td bgcolor="#ddddff"> nvsvc32.exe</td><td>Applicatie
</td><td>NVIDIA Driver Helper Service
</td></tr><tr bgcolor="#f0f0f0"><td bgcolor="#ddddff"> ctfmon.exe</td><td>Systeem taak
</td><td>Alternative User Input Services
</td></tr><tr bgcolor="#f0f0f0"><td bgcolor="#ddddff"> svchost.exe</td><td>Systeem taak
</td><td>Microsoft Service Host Process
</td></tr><tr bgcolor="#f0f0f0"><td bgcolor="#ddddff"> TUProgSt.exe</td><td>Achtergrondtaak
</td><td>Tuneup Software
</td></tr><tr bgcolor="#f0f0f0"><td bgcolor="#ddddff"> MsPMSPSv.exe</td><td>Achtergrondtaak
</td><td>WMDM PMSP Service
</td></tr><tr bgcolor="#f0f0f0"><td bgcolor="#ddddff"> avgrsx.exe</td><td>Achtergrondtaak
</td><td>avgrsx.exe
</td></tr><tr bgcolor="#f0f0f0"><td bgcolor="#ddddff"> avgnsx.exe</td><td>Achtergrondtaak
</td><td>avgnsx.exe
</td></tr><tr bgcolor="#f0f0f0"><td bgcolor="#ddddff"> avgemc.exe</td><td>Virusscan
</td><td>AVG Anti-Virus Cleaner
</td></tr><tr bgcolor="#f0f0f0"><td bgcolor="#ddddff"> avgcsrvx.exe</td><td>Virusscan
</td><td>AVG Internet Security
</td></tr><tr bgcolor="#f0f0f0"><td bgcolor="#ddddff"> avgcsrvx.exe</td><td>Virusscan
</td><td>AVG Internet Security
</td></tr><tr bgcolor="#f0f0f0"><td bgcolor="#ddddff"> iexplore.exe</td><td>Applicatie
</td><td>Microsoft Internet Explorer
</td></tr><tr bgcolor="#f0f0f0"><td bgcolor="#ddddff"> iexplore.exe</td><td>Applicatie
</td><td>Microsoft Internet Explorer
</td></tr><tr bgcolor="#f0f0f0"><td bgcolor="#ddddff"> HijackThis.exe</td><td>Applicatie
</td><td>Merijn Hijackthis
</td></tr></tbody></table>