OTL logfile created on: 26-9-2011 17:36:29 - Run 1 OTL by OldTimer - Version 3.2.29.1 Folder = D:\DATA\Bureaublad Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000413 | Country: Nederland | Language: NLD | Date Format: d-M-yyyy 1022,42 Mb Total Physical Memory | 549,69 Mb Available Physical Memory | 53,76% Memory free 2,40 Gb Paging File | 2,01 Gb Available in Paging File | 83,72% Paging File free Paging file location(s): C:\pagefile.sys 1536 3072 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 46,15 Gb Total Space | 3,59 Gb Free Space | 7,78% Space Free | Partition Type: NTFS Drive D: | 63,48 Gb Total Space | 40,06 Gb Free Space | 63,10% Space Free | Partition Type: NTFS Drive E: | 67,11 Gb Total Space | 28,14 Gb Free Space | 41,92% Space Free | Partition Type: NTFS Drive F: | 830,94 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: UDF Computer Name: LOESJEMEDION | User Name: loes | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (SafeList) ==========[/color] PRC - [2011-09-26 17:34:43 | 000,582,656 | ---- | M] (OldTimer Tools) -- D:\DATA\Bureaublad\OTL.exe PRC - [2008-09-11 17:50:46 | 002,436,536 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec AntiVirus\Rtvscan.exe PRC - [2008-09-04 15:44:20 | 001,439,040 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec AntiVirus\SmcGui.exe PRC - [2008-09-04 15:44:18 | 001,787,200 | ---- | M] (Symantec Corporation) -- C:\Program Files\Symantec AntiVirus\Smc.exe PRC - [2008-08-14 14:45:52 | 000,115,560 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccApp.exe PRC - [2008-08-14 14:45:28 | 000,108,392 | ---- | M] (Symantec Corporation) -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe PRC - [2008-04-14 22:33:00 | 001,037,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007-05-17 23:45:33 | 000,271,720 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft LifeCam\MSCamS32.exe PRC - [2007-04-11 10:42:30 | 000,236,784 | ---- | M] (XIMETA, Inc.) -- C:\Program Files\NDAS\System\ndassvc.exe PRC - [2006-08-02 09:54:00 | 000,684,032 | ---- | M] (VIA Technologies, Inc.) -- C:\Program Files\VIAudioi\HDADeck\HDeck.exe PRC - [2001-10-08 12:59:36 | 000,049,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\Fast.exe PRC - [2001-10-08 12:59:36 | 000,045,632 | ---- | M] () -- C:\WINDOWS\system32\TaskSwitch.exe [color=#E56717]========== Modules (No Company Name) ==========[/color] MOD - [2008-04-14 22:32:32 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll MOD - [2001-10-08 12:59:36 | 000,045,632 | ---- | M] () -- C:\WINDOWS\system32\TaskSwitch.exe [color=#E56717]========== Win32 Services (SafeList) ==========[/color] SRV - File not found [On_Demand | Stopped] -- -- (sdCoreService) SRV - File not found [On_Demand | Stopped] -- -- (sdAuxService) SRV - [2010-04-22 02:28:00 | 003,570,600 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\WINDOWS\System32\GameMon.des -- (npggsvc) SRV - [2008-09-11 17:50:46 | 002,436,536 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec AntiVirus\Rtvscan.exe -- (Symantec AntiVirus) SRV - [2008-09-04 15:44:18 | 001,787,200 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Symantec AntiVirus\Smc.exe -- (SmcService) SRV - [2008-09-04 15:19:46 | 000,312,720 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec AntiVirus\SNAC.EXE -- (SNAC) SRV - [2008-08-14 14:45:28 | 000,108,392 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccSetMgr) SRV - [2008-08-14 14:45:28 | 000,108,392 | ---- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe -- (ccEvtMgr) SRV - [2008-06-30 16:36:35 | 003,093,872 | ---- | M] (Symantec Corporation) [On_Demand | Stopped] -- C:\Program Files\Symantec\LiveUpdate\LuComServer_3_3.EXE -- (LiveUpdate) SRV - [2008-04-07 10:17:30 | 000,430,592 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2007-05-17 23:45:33 | 000,271,720 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft LifeCam\MSCamS32.exe -- (MSCamSvc) SRV - [2007-04-11 10:42:30 | 000,236,784 | ---- | M] (XIMETA, Inc.) [Auto | Running] -- C:\Program Files\NDAS\System\ndassvc.exe -- (ndassvc) SRV - [2001-10-08 12:59:36 | 000,049,216 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\System32\Fast.exe -- (InteractiveLogon) [color=#E56717]========== Driver Services (SafeList) ==========[/color] DRV - [2011-08-18 13:44:56 | 001,576,312 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20110924.007\NAVEX15.SYS -- (NAVEX15) DRV - [2011-08-18 13:44:56 | 000,374,392 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\eengine\eeCtrl.sys -- (eeCtrl) DRV - [2011-08-18 13:44:56 | 000,086,136 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20110924.007\NAVENG.SYS -- (NAVENG) DRV - [2011-07-27 10:00:00 | 000,105,592 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\Common Files\Symantec Shared\eengine\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv) DRV - [2011-06-22 19:05:28 | 000,167,936 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\WpsHelper.sys -- (WpsHelper) DRV - [2011-06-13 22:10:11 | 000,010,872 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\SoftnyxGame\WolfTeamIS\apf001.sys -- (apf001) DRV - [2009-09-21 10:33:06 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk) DRV - [2009-08-12 00:19:20 | 000,056,992 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvhda32.sys -- (NVHDA) DRV - [2009-08-05 22:48:42 | 000,054,752 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\fssfltr_tdi.sys -- (fssfltr) DRV - [2009-07-30 11:15:54 | 000,014,336 | ---- | M] (ASUSTeK Computer Inc.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\EIO_XP.sys -- (EIO_XP) DRV - [2009-07-22 10:49:28 | 000,123,952 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SYMEVENT.SYS -- (SymEvent) DRV - [2009-07-22 10:41:46 | 000,102,664 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\tmcomm.sys -- (tmcomm) DRV - [2009-04-02 15:42:07 | 000,278,728 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt) DRV - [2009-04-02 15:42:06 | 000,025,416 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt) DRV - [2009-03-20 11:01:26 | 000,121,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bmdm.sys -- (ss_bmdm) DRV - [2009-03-20 11:01:26 | 000,090,112 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bbus.sys -- (ss_bbus) SAMSUNG USB Mobile Device (WDM) DRV - [2009-03-20 11:01:26 | 000,014,976 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ss_bmdfl.sys -- (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter) DRV - [2009-02-17 18:22:56 | 000,012,416 | ---- | M] (ASUSTeK Computer Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\asusgsb.sys -- (asusgsb) DRV - [2008-11-04 18:46:01 | 000,717,296 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - [2008-09-04 15:47:26 | 000,091,968 | ---- | M] (Symantec Corporation) [Kernel | Disabled | Stopped] -- C:\WINDOWS\SYSTEM32\Drivers\SysPlant.sys -- (SysPlant) DRV - [2008-09-04 15:45:36 | 000,041,792 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\WPSDRVnt.sys -- (WPS) DRV - [2008-08-25 13:36:30 | 000,081,288 | ---- | M] (PCTools Research Pty Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\iksyssec.sys -- (IKSysSec) DRV - [2008-08-25 13:36:28 | 000,066,952 | ---- | M] (PCTools Research Pty Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\iksysflt.sys -- (IKSysFlt) DRV - [2008-08-25 13:36:28 | 000,040,840 | ---- | M] (PCTools Research Pty Ltd.) [File_System | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ikfilesec.sys -- (IKFileSec) DRV - [2008-08-21 11:13:56 | 000,191,536 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\Drivers\SYMTDI.SYS -- (SYMTDI) DRV - [2008-08-21 11:13:56 | 000,027,696 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\Drivers\SYMREDRV.SYS -- (SYMREDRV) DRV - [2008-08-15 10:41:08 | 000,317,872 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\srtspl.sys -- (SRTSPL) DRV - [2008-08-15 10:41:08 | 000,043,696 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\srtspx.sys -- (SRTSPX) DRV - [2008-08-15 10:41:06 | 000,279,600 | ---- | M] (Symantec Corporation) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\srtsp.sys -- (SRTSP) DRV - [2008-07-30 17:42:12 | 000,023,888 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\COH_Mon.sys -- (COH_Mon) DRV - [2008-07-10 03:57:56 | 000,049,536 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Teefer2.sys -- (Teefer2) DRV - [2008-06-16 16:53:14 | 000,420,400 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys -- (SPBBCDrv) DRV - [2008-06-14 18:55:54 | 000,025,280 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi) DRV - [2008-04-13 22:05:30 | 000,036,224 | ---- | M] (ADMtek Incorporated.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\an983.sys -- (AN983) DRV - [2007-09-17 16:53:26 | 000,021,632 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd) DRV - [2007-07-03 17:58:20 | 000,106,792 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdmdm.sys -- (sscdmdm) DRV - [2007-07-03 17:57:24 | 000,011,944 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdmdfl.sys -- (sscdmdfl) DRV - [2007-07-03 17:54:24 | 000,080,552 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM) DRV - [2007-04-11 10:42:40 | 000,372,848 | ---- | M] (XIMETA, Inc.) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\ndasfat.sys -- (ndasfat) DRV - [2007-04-11 10:42:38 | 000,076,144 | ---- | M] (XIMETA, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ndasbus.sys -- (ndasbus) DRV - [2007-04-11 10:42:34 | 000,061,424 | ---- | M] (XIMETA, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\lpx.sys -- (lpx) DRV - [2007-04-11 10:42:30 | 000,254,704 | ---- | M] (XIMETA, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\lfsfilt.sys -- (lfsfilt) DRV - [2007-04-10 23:46:53 | 001,966,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\VX1000.sys -- (VX1000) DRV - [2007-01-29 17:12:52 | 000,018,432 | ---- | M] (ASUSTeK COMPUTER INC.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\AsusVRC.sys -- (ASUSVRC) DRV - [2006-08-02 09:54:00 | 000,137,216 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\viahduaa.sys -- (HdAudAddService) DRV - [2004-06-26 13:22:00 | 000,004,736 | ---- | M] (RDV Soft) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\vncdrv.sys -- (vncdrv) [color=#E56717]========== Standard Registry (SafeList) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://nl.msn.com/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll (Google Inc.) [2009-04-27 20:29:19 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\loes\Application Data\Mozilla\Extensions [2009-04-27 20:29:19 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\loes\Application Data\Mozilla\Extensions\mozswing@mozswing.org O1 HOSTS File: ([2010-11-03 21:27:34 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) O2 - BHO: (SimpleAdblock Class) - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Common Files\Simple Adblock\SimpleAdblock.dll (Simple Adblock) O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation) O4 - HKLM..\Run: [CoolSwitch] C:\WINDOWS\system32\TaskSwitch.exe () O4 - HKLM..\Run: [DXM6Patch_981116] C:\WINDOWS\p_981116.exe (Microsoft Corporation) O4 - HKLM..\Run: [HDAudDeck] C:\Program Files\VIAudioi\HDADeck\HDeck.exe (VIA Technologies, Inc.) O4 - HKLM..\Run: [MedionVFD] C:\Program Files\Medion Info Display\MdionLCM.exe (Dritek System Inc.) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe () O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutorun = 67108863 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O8 - Extra context menu item: Free YouTube Download - C:\Documents and Settings\loes\Application Data\DVDVideoSoftIEHelpers\freeyoutubedownload.htm () O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Documents and Settings\loes\Application Data\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm () O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} http://download.microsoft.com/download/E/3/9/E39C664F-A8E3-4F69-A109-1AE9849204EE/OGAControl.cab (Office Genuine Advantage Validation Tool) O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab (Checkers Class) O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control) O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} http://messenger.zone.msn.com/NL-BE/a-UNO1/GAME_UNO1.cab (UnoCtrl Class) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1213462485359 (WUWebControl Class) O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} https://www.battlefieldheroes.com/static/updater/BFHUpdater_4.0.53.0.cab (Battlefield Heroes Updater) O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab (Facebook Photo Uploader 5 Control) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.) O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab (MSN Games - Installer) O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} http://messenger.zone.msn.com/binary/Bankshot.cab57213.cab (CBreakshotControl Class) O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class) O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Java Plug-in 1.6.0_06) O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07) O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} http://messenger.zone.msn.com/binary/Chess.cab57176.cab (ZoneChess Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A862FE39-D096-4F35-9F7B-A27431D10DB3}: DhcpNameServer = 10.0.0.2 O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O24 - Desktop Components:0 (Mijn huidige introductiepagina) - About:Home O24 - Desktop WallPaper: C:\Documents and Settings\loes\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp O24 - Desktop BackupWallPaper: C:\Documents and Settings\loes\Application Data\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2008-06-14 12:17:17 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2005-10-19 22:05:28 | 000,700,416 | ---- | M] (Electronic Arts Inc.) - C:\autorun.exe.back -- [ NTFS ] O32 - AutoRun File - [2008-10-28 22:58:10 | 000,000,052 | R--- | M] () - F:\Autorun.inf -- [ UDF ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2011-09-26 17:34:35 | 000,582,656 | ---- | C] (OldTimer Tools) -- D:\DATA\Bureaublad\OTL.exe [2011-09-25 21:47:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\loes\Menu Start\Programma's\HiJackThis [2011-09-25 21:47:11 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro [2011-09-07 16:02:06 | 000,713,312 | ---- | C] (NHN USA) -- C:\WINDOWS\System32\ijjiSetup.exe [2011-09-07 16:02:06 | 000,062,048 | ---- | C] (NHN USA Inc.) -- C:\WINDOWS\System32\ijjiProcessRestarter.exe [2011-09-07 15:48:30 | 000,000,000 | ---D | C] -- C:\ijji [2011-09-07 15:48:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programma's\ijji [2011-09-05 22:11:53 | 000,000,000 | ---D | C] -- C:\Program Files\Uplink Demo [2011-09-05 20:44:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\loes\Application Data\ijjigame [2011-09-05 20:43:43 | 000,058,800 | ---- | C] (NHN USA Corp.) -- C:\WINDOWS\System32\ijjiPlugin2.dll [2011-09-05 20:43:42 | 000,158,952 | ---- | C] (NHN Corporation) -- C:\WINDOWS\System32\PubPlugin.dll [2011-09-05 20:43:42 | 000,087,472 | ---- | C] (.) -- C:\WINDOWS\System32\ijjiChannelingPlugin.dll [2011-09-05 20:40:07 | 000,000,000 | ---D | C] -- C:\Program Files\REACTOR [2011-08-29 21:57:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\loes\Application Data\DVDVideoSoft [2011-08-29 21:56:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\loes\Application Data\DVDVideoSoftIEHelpers [2011-08-29 21:53:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Start\Programma's\DVDVideoSoft [5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2011-09-26 17:34:43 | 000,582,656 | ---- | M] (OldTimer Tools) -- D:\DATA\Bureaublad\OTL.exe [2011-09-26 17:31:14 | 000,000,452 | -H-- | M] () -- C:\WINDOWS\tasks\User_Feed_Synchronization-{D547CA4B-B4C8-4F69-BBCE-3E1FB65B9DDB}.job [2011-09-26 17:28:12 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2011-09-26 17:27:48 | 000,249,405 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml [2011-09-26 17:27:42 | 000,001,036 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2011-09-26 17:27:42 | 000,000,236 | ---- | M] () -- C:\WINDOWS\tasks\OGALogon.job [2011-09-26 17:27:33 | 000,000,304 | -HS- | M] () -- C:\WINDOWS\tasks\Vamhutb.job [2011-09-26 17:27:08 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2011-09-26 13:04:00 | 000,001,040 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2011-09-25 21:58:23 | 000,002,323 | ---- | M] () -- D:\DATA\Bureaublad\HiJackThis.lnk [2011-09-18 12:58:59 | 000,001,764 | ---- | M] () -- C:\Documents and Settings\All Users\Bureaublad\A.V.A.lnk [2011-09-14 22:38:23 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2011-09-14 10:30:20 | 000,004,877 | ---- | M] () -- D:\DATA\MIJNDOKUMENTEN\dieet.rtf [2011-08-31 17:00:50 | 000,022,216 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] [4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2011-09-25 21:47:12 | 000,002,323 | ---- | C] () -- D:\DATA\Bureaublad\HiJackThis.lnk [2011-09-18 12:58:59 | 000,001,764 | ---- | C] () -- C:\Documents and Settings\All Users\Bureaublad\A.V.A.lnk [2011-09-14 10:30:20 | 000,004,877 | ---- | C] () -- D:\DATA\MIJNDOKUMENTEN\dieet.rtf [2011-06-11 13:00:55 | 000,178,176 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll [2010-11-29 11:58:53 | 000,083,968 | RHS- | C] () -- C:\WINDOWS\System32\cmmon32E.dll [2010-11-07 22:29:37 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\CMMGR32.EXE [2010-09-17 22:36:37 | 000,012,920 | ---- | C] () -- C:\WINDOWS\System32\apl001.sys [2010-09-17 22:36:37 | 000,010,872 | ---- | C] () -- C:\WINDOWS\System32\apf001.sys [2010-05-24 17:24:44 | 000,000,028 | ---- | C] () -- C:\WINDOWS\Robota.INI [2010-05-22 15:31:26 | 000,120,200 | ---- | C] () -- C:\WINDOWS\System32\DLLDEV32i.dll [2010-03-04 21:48:27 | 000,005,084 | ---- | C] () -- C:\Documents and Settings\All Users\Application Data\xqkcebzs.dik [2010-02-21 11:48:22 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll [2010-02-21 11:48:22 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys [2010-02-21 11:48:12 | 000,002,528 | ---- | C] () -- C:\Documents and Settings\loes\Application Data\$_hpcst$.hpc [2010-02-08 22:46:09 | 000,138,056 | ---- | C] () -- C:\Documents and Settings\loes\Application Data\PnkBstrK.sys [2009-11-06 04:14:42 | 000,041,872 | ---- | C] () -- C:\WINDOWS\System32\xfcodec.dll [2009-08-21 17:58:40 | 000,122,880 | ---- | C] () -- C:\WINDOWS\System32\AitVirtualComInstall.exe [2009-08-06 01:50:00 | 001,597,690 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin [2009-08-03 15:07:42 | 000,403,816 | ---- | C] () -- C:\WINDOWS\System32\OGACheckControl.dll [2009-08-03 15:07:42 | 000,230,768 | ---- | C] () -- C:\WINDOWS\System32\OGAEXEC.exe [2009-07-27 11:13:28 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\ASDR.exe [2009-07-20 21:10:48 | 000,307,200 | ---- | C] () -- C:\WINDOWS\System32\InstallVCOM.exe [2009-06-30 10:57:02 | 000,716,264 | ---- | C] () -- C:\WINDOWS\unins000.exe [2009-06-30 10:57:02 | 000,000,747 | ---- | C] () -- C:\WINDOWS\unins000.dat [2009-04-02 15:42:07 | 000,278,728 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys [2009-04-02 15:42:06 | 000,025,416 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys [2009-01-28 21:43:58 | 000,860,211 | --S- | C] () -- C:\WINDOWS\System32\XSIFtk-3.6.2.1.dll [2008-11-05 16:41:22 | 000,011,264 | ---- | C] () -- C:\Documents and Settings\loes\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2008-10-17 17:22:52 | 000,253,696 | ---- | C] () -- C:\WINDOWS\pptpunin.exe [2008-09-20 11:59:41 | 000,000,579 | ---- | C] () -- C:\WINDOWS\eReg.dat [2008-09-20 10:46:59 | 000,021,840 | ---- | C] () -- C:\WINDOWS\System32\SIntfNT.dll [2008-09-20 10:46:59 | 000,017,212 | ---- | C] () -- C:\WINDOWS\System32\SIntf32.dll [2008-09-20 10:46:59 | 000,012,067 | ---- | C] () -- C:\WINDOWS\System32\SIntf16.dll [2008-09-20 10:41:50 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll [2008-06-16 09:46:06 | 000,015,498 | ---- | C] () -- C:\WINDOWS\VX1000.ini [2008-06-14 21:37:06 | 000,000,127 | ---- | C] () -- C:\Documents and Settings\loes\Local Settings\Application Data\fusioncache.dat [2008-06-14 18:48:45 | 000,019,968 | ---- | C] () -- C:\WINDOWS\System32\cpuinf32.dll [2008-06-14 18:38:03 | 000,000,395 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2008-06-14 18:16:43 | 000,000,000 | ---- | C] () -- C:\WINDOWS\vpc32.INI [2008-06-14 14:04:38 | 000,004,207 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2008-06-14 14:03:42 | 000,220,040 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2008-06-14 12:18:57 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat [2008-06-14 12:14:19 | 000,021,748 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat [2008-05-04 18:39:34 | 000,002,560 | ---- | C] () -- C:\WINDOWS\System32\ViaClassCoInstaller.dll [2007-10-25 18:26:10 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys [2006-06-12 21:43:22 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll [2006-06-12 21:43:22 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll [2006-06-12 21:43:22 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll [2006-06-12 21:43:22 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll [2006-06-12 21:43:22 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll [2006-06-12 21:43:22 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll [2006-06-12 21:43:22 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll [2006-06-12 21:43:22 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll [2006-06-12 21:43:22 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll [2004-08-02 14:20:40 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat [2001-10-08 13:24:26 | 000,148,544 | ---- | C] () -- C:\WINDOWS\System32\msvdm.dll [2001-10-08 12:59:50 | 000,198,720 | ---- | C] () -- C:\WINDOWS\System32\timershot.exe [2001-10-08 12:59:46 | 000,016,960 | ---- | C] () -- C:\WINDOWS\System32\mag.dll [2001-10-08 12:59:40 | 000,222,784 | ---- | C] () -- C:\WINDOWS\System32\PowerCalc.exe [2001-10-08 12:59:36 | 000,045,632 | ---- | C] () -- C:\WINDOWS\System32\TaskSwitch.exe [2001-09-07 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin [2001-09-07 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat [2001-09-07 14:00:00 | 000,509,978 | ---- | C] () -- C:\WINDOWS\System32\perfh013.dat [2001-09-07 14:00:00 | 000,441,996 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat [2001-09-07 14:00:00 | 000,318,670 | ---- | C] () -- C:\WINDOWS\System32\perfi013.dat [2001-09-07 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat [2001-09-07 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat [2001-09-07 14:00:00 | 000,091,590 | ---- | C] () -- C:\WINDOWS\System32\perfc013.dat [2001-09-07 14:00:00 | 000,071,932 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat [2001-09-07 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin [2001-09-07 14:00:00 | 000,039,178 | ---- | C] () -- C:\WINDOWS\System32\perfd013.dat [2001-09-07 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat [2001-09-07 14:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat [2001-09-07 14:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin [2001-09-07 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat [color=#E56717]========== LOP Check ==========[/color] [2011-01-16 15:56:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\AlawarWrapper [2008-06-14 14:39:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\ashampoo [2009-07-28 21:42:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Egoset [2009-07-28 23:13:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\FarmFrenzy2 [2009-09-15 21:27:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Firefly Studios [2010-06-03 19:57:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\MAGIX [2010-02-21 11:50:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\PC Suite [2008-11-25 22:24:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\pixelStorm [2008-11-02 17:47:09 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TEMP [2010-02-21 15:34:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Total Gameplay [2011-01-11 22:35:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\TuneUp Software [2010-12-18 16:22:21 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\All Users\Application Data\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16} [2011-06-08 21:09:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\loes\Application Data\.minecraft [2008-06-14 14:40:38 | 000,000,000 | ---D | M] -- C:\Documents and Settings\loes\Application Data\Ashampoo [2009-02-26 22:40:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\loes\Application Data\Atari [2010-03-02 10:31:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\loes\Application Data\Boolat Games [2008-11-04 18:46:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\loes\Application Data\DAEMON Tools [2011-08-31 21:15:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\loes\Application Data\DVDVideoSoft [2011-08-29 21:56:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\loes\Application Data\DVDVideoSoftIEHelpers [2011-09-06 19:43:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\loes\Application Data\GetRightToGo [2010-05-22 22:25:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\loes\Application Data\Hardcore [2011-09-19 22:09:18 | 000,000,000 | ---D | M] -- C:\Documents and Settings\loes\Application Data\ijjigame [2010-03-03 22:56:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\loes\Application Data\JAM Software [2010-05-22 22:26:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\loes\Application Data\Juce VST Host [2010-03-04 22:35:59 | 000,000,000 | ---D | M] -- C:\Documents and Settings\loes\Application Data\Leawo [2010-05-23 12:04:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\loes\Application Data\MAGIX [2011-06-11 13:05:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\loes\Application Data\OxelonMC [2010-02-21 11:50:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\loes\Application Data\PC Suite [2010-02-21 11:48:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\loes\Application Data\Samsung [2011-01-11 22:32:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\loes\Application Data\Simple Adblock [2010-11-07 22:23:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\loes\Application Data\SuperAdBlocker.com [2010-03-17 18:30:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\loes\Application Data\TeamViewer [2010-12-18 16:23:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\loes\Application Data\TuneUp Software [2010-06-03 21:49:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\loes\Application Data\Uniblue [2010-09-10 21:04:25 | 000,000,000 | ---D | M] -- C:\Documents and Settings\loes\Application Data\uTorrent [2011-09-26 17:27:42 | 000,000,236 | ---- | M] () -- C:\WINDOWS\Tasks\OGALogon.job [2011-09-26 17:31:14 | 000,000,452 | -H-- | M] () -- C:\WINDOWS\Tasks\User_Feed_Synchronization-{D547CA4B-B4C8-4F69-BBCE-3E1FB65B9DDB}.job [2011-09-26 17:27:33 | 000,000,304 | -HS- | M] () -- C:\WINDOWS\Tasks\Vamhutb.job [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DFC5A2B2 < End of report >