Archief - Systeemfout, plz check

Het archief is een bevroren moment uit een vorige versie van dit forum, met andere regels en andere bazen. Deze posts weerspiegelen op geen enkele manier onze huidige ideeën, waarden of wereldbeelden en zijn op sommige plaatsen gecensureerd wegens ontoelaatbaar. Veel zijn in een andere tijdsgeest gemaakt, al dan niet ironisch - zoals in het ironische subforum Off-Topic - en zouden op dit moment niet meer gepost (mogen) worden. Toch bieden we dit archief nog graag aan als informatiedatabank en naslagwerk. Lees er hier meer over of start een gesprek met anderen.
V

Ventage

Legacy Member
Daarjuist, toen ik een dvd in mn laptop stak, kreeg ik het alombekende blauwe scherm van windows. Er was een fout en ze hadden een 'fysieke geheugendump' of zoiets moeten uitvoeren. Toen ik hem daarna terug opstartte, kreeg ik dit: http://img397.imageshack.us/img397/8074/wtfve2.jpg.
Kheb nu ook een logje gemaakt.
Zou je misschien eens kunnen kijken of er iets mis is met mijn laptop of moet ik mee geen zorgen maken of is dit niet het juiste forum daarvoor?

*edit* kan je ook eens checken of ik het 'msn-virus' heb?

Logfile of HijackThis v1.99.1
Scan saved at 21:43:19, on 28-11-2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Creative\Mixer\CTSVolFE.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\StartupMonitor.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Softwin\BitDefender10\bdmcon.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
C:\WINDOWS\system32\dlcccoms.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\BHODemon 2\BHODemon.exe
C:\Program Files\Dell Network Assistant\ezi_hnm2.exe
C:\Program Files\Dell Network Assistant\ezi_hnm2.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Gj\Mijn documenten\Hijack this & drweg-cureit & cc cleaner\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.be/ig/dell?hl=nl&client=dell-row&channel=be&ibd=3060917
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.be/hws/sb/dell-row/nl/side.html?channel=be
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.be/hws/sb/dell-row/nl/side.html?channel=be
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://netlogin.kuleuven.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www1.euro.dell.com/content/default.aspx?c=be&l=nl&s=gen
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www1.euro.dell.com/content/default.aspx?c=be&l=nl&s=gen
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.be/hws/sb/dell-row/nl/side.html?channel=be
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.be/ig/dell?hl=nl&client=dell-row&channel=be&ibd=3060917
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [CTSVolFE.exe] "C:\Program Files\Creative\Mixer\CTSVolFE.exe" /r
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [DLCCCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLCCtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [dlccmon.exe] "C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe"
O4 - HKLM\..\Run: [Run StartupMonitor] StartupMonitor.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: BHODemon 2.0.lnk = C:\Program Files\BHODemon 2\BHODemon.exe
O4 - Startup: Dell Network Assistant.lnk = C:\Program Files\Dell Network Assistant\ezi_hnm2.exe
O4 - Startup: OpenOffice.org 2.0 .lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/SSC/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: Creative Labs Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe
O23 - Service: dlcc_device - Unknown owner - C:\WINDOWS\system32\dlcccoms.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender10\vsserv.exe" /service (file missing)
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

Alvast bedankt

Ventage :niceone:
J

Jurgenv1

Legacy Member
Je kan zelf checken als je de stappen uitvoert die in de sticky staat. :)
V

Ventage

Legacy Member
maar dan moetk msn de-installere enzo
ga ik toch niet mee beginnen denk ik :p

maar voor de rest, hoe zit het met die systeemfout?
is er iets mis met mn laptop?
V

Ventage

Legacy Member
Gj - 06-11-29 0:52:44,37 Service Pack 2
ComboFix 06.11.27W - Running from: "C:\Program Files\Mozilla Firefox"

((((((((((((((((((((((((((((((( Files Created from 2006-10-29 to 2006-11-29 ))))))))))))))))))))))))))))))))))


2006-11-28 21:41 <DIR> dr-h----- C:\Documents and Settings\Gj\Onlangs geopend
2006-11-28 21:32 <DIR> d-------- C:\WINDOWS\Minidump
2006-11-25 17:27 <DIR> d-------- C:\Program Files\Common Files\Creative Labs Shared
2006-11-19 11:55 <DIR> d-------- C:\Program Files\Call of Duty
2006-11-16 15:00 <DIR> d-------- C:\97ad4979f2d6be890cb89a698d47ebfa
2006-11-14 17:34 <DIR> d-------- C:\Program Files\QuickTime
2006-11-14 17:34 <DIR> d-------- C:\Program Files\Apple Software Update
2006-11-14 17:34 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Apple Computer
2006-11-13 22:10 716,800 --a------ C:\WINDOWS\system32\SysInternals Bluescreen.scr
2006-11-13 20:51 <DIR> d--hs---- C:\WINDOWS\ftpcache
2006-11-13 18:47 <DIR> d-------- C:\Program Files\Lavalys
2006-11-07 17:57 <DIR> d-------- C:\Program Files\CCleaner
2006-11-07 16:03 <DIR> d-------- C:\Program Files\TGTSoft
2006-11-05 22:35 76,560 --a------ C:\WINDOWS\system32\drivers\tmcomm.sys
2006-11-05 21:41 <DIR> d-------- C:\Documents and Settings\Gj\DoctorWeb
2006-11-04 14:14 1,245,696 --a------ C:\WINDOWS\system32\msxml4.dll
2006-11-02 17:46 <DIR> d-------- C:\Documents and Settings\Gj\Application Data\Bitdefender
2006-11-02 17:41 <DIR> d-------- C:\Program Files\Softwin
2006-11-02 17:41 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\BitDefender
2006-11-02 17:37 <DIR> d-------- C:\Program Files\Common Files\Softwin
2006-10-29 12:24 162,304 --a------ C:\UNWISE.EXE


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


2006-11-29 00:52 -------- d-------- C:\Program Files\Mozilla Firefox
2006-11-28 23:17 -------- d-------- C:\Program Files\mIRC
2006-11-28 21:40 -------- d-------- C:\Program Files\SpywareGuard
2006-11-28 21:40 -------- d-------- C:\Program Files\SpywareBlaster
2006-11-28 21:38 -------- d-------- C:\Documents and Settings\Gj\Application Data\OpenOffice.org2
2006-11-25 17:27 -------- d-------- C:\Program Files\Common Files
2006-11-23 02:33 -------- d-------- C:\Program Files\Dl_cats
2006-11-19 11:04 -------- d--h----- C:\Program Files\InstallShield Installation Information
2006-11-16 15:00 -------- d-------- C:\Program Files\Internet Explorer
2006-11-14 15:39 -------- d-------- C:\Program Files\The All-Seeing Eye
2006-11-13 21:17 163644 --a------ C:\WINDOWS\system32\drivers\secdrv.sys
2006-11-12 17:15 43520 --a------ C:\WINDOWS\system32\CmdLineExt03.dll
2006-11-06 21:08 -------- d-------- C:\Program Files\BHODemon 2
2006-11-02 17:39 -------- d-------- C:\Documents and Settings\Gj\Application Data\Lavasoft
2006-10-31 12:16 -------- d-------- C:\Program Files\Winamp
2006-10-25 18:11 -------- d-------- C:\Program Files\Wolfenstein - Enemy Territory
2006-10-23 20:08 -------- d-------- C:\Documents and Settings\Gj\Application Data\Macromedia
2006-10-22 14:40 -------- d-------- C:\Documents and Settings\Gj\Application Data\Sonic
2006-10-22 14:40 -------- d-------- C:\Documents and Settings\Gj\Application Data\Leadertech
2006-10-19 00:59 -------- d-------- C:\Program Files\Windows Media Player
2006-10-17 22:50 -------- d-------- C:\Program Files\Corel
2006-10-17 22:46 -------- d-------- C:\Documents and Settings\Gj\Application Data\Jasc Software Inc
2006-10-17 22:40 -------- d-------- C:\Program Files\AnalogX
2006-10-17 22:06 5 --ahs---- C:\WINDOWS\system32\ccedca5_s.dll
2006-10-16 20:41 -------- d-------- C:\Documents and Settings\Gj\Application Data\Kerio
2006-10-16 20:41 -------- d-------- C:\Documents and Settings\Gj\Application Data\IDS_COMPANY
2006-10-16 18:51 -------- d-------- C:\Program Files\Common Files\Wise Installation Wizard
2006-10-16 15:49 -------- d-------- C:\Program Files\Symantec Technical Support
2006-10-16 15:37 -------- d-------- C:\Program Files\Common Files\Symantec Shared
2006-10-16 11:40 -------- d-------- C:\Program Files\Java
2006-10-16 11:40 -------- d-------- C:\Program Files\Common Files\Java
2006-10-13 21:57 6216 --ahs---- C:\WINDOWS\system32\KGyGaAvL.sys
2006-10-13 21:57 56 -r-hs---- C:\WINDOWS\system32\C1760761D3.sys
2006-10-13 21:48 -------- d-------- C:\Program Files\Dell Photo AIO Printer 924
2006-10-13 21:46 -------- d-------- C:\Program Files\WinRAR
2006-10-13 21:45 -------- d-------- C:\Program Files\Creative
2006-10-13 13:41 144384 --a------ C:\WINDOWS\system32\nwprovau.dll
2006-10-11 08:22 -------- d-------- C:\Program Files\StickyPad
2006-10-11 01:24 86016 --a------ C:\WINDOWS\system32\OpenAL32.dll
2006-10-11 01:24 262144 --a------ C:\WINDOWS\system32\wrap_oal.dll
2006-10-06 17:18 -------- d-------- C:\Program Files\EA SPORTS
2006-10-06 13:24 -------- d-------- C:\Program Files\Warsow
2006-10-05 15:26 335605 --a------ C:\WINDOWS\Ximensions PP Starfield.scr
2006-10-05 15:26 -------- d-------- C:\Program Files\Ximensions PP Starfield
2006-10-02 20:43 -------- d-------- C:\Program Files\DivX
2006-10-02 18:57 -------- d-------- C:\Documents and Settings\Gj\Application Data\AdobeUM
2006-10-02 17:47 -------- d---s---- C:\Documents and Settings\Gj\Application Data\Microsoft
2006-10-02 17:40 -------- d-------- C:\Documents and Settings\Gj\Application Data\Adobe
2006-10-02 15:40 -------- d-------- C:\Documents and Settings\Gj\Application Data\Sun
2006-10-01 20:35 88 -r-hs---- C:\WINDOWS\system32\D3610776C1.sys
2006-10-01 20:17 -------- d-------- C:\Documents and Settings\Gj\Application Data\Mozilla
2006-09-26 18:02 0 --a------ C:\Documents and Settings\Gj\Application Data\wklnhst.dat
2006-09-22 18:20 20992 --a------ C:\WINDOWS\jestertb.dll
2006-09-18 19:11 778240 --a------ C:\WINDOWS\system32\divx_xx0c.dll
2006-09-18 19:11 778240 --a------ C:\WINDOWS\system32\divx_xx07.dll
2006-09-18 19:11 761856 --a------ C:\WINDOWS\system32\divx_xx11.dll
2006-09-18 19:11 620180 --a------ C:\WINDOWS\system32\DivX.dll
2006-09-17 13:51 49152 --a------ C:\WINDOWS\setpwrcg.exe
2006-09-13 06:07 1084416 --a------ C:\WINDOWS\system32\msxml3.dll


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries are not shown

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"MsnMsgr"="\"C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe\" /background"
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"SigmatelSysTrayApp"="stsystra.exe"
"ATICCC"="\"C:\\Program Files\\ATI Technologies\\ATI.ACE\\cli.exe\" runtime -Delay"
"SynTPEnh"="C:\\Program Files\\Synaptics\\SynTP\\SynTPEnh.exe"
"Dell QuickSet"="C:\\Program Files\\Dell\\QuickSet\\quickset.exe"
"IntelZeroConfig"="\"C:\\Program Files\\Intel\\Wireless\\bin\\ZCfgSvc.exe\""
"IntelWireless"="\"C:\\Program Files\\Intel\\Wireless\\Bin\\ifrmewrk.exe\" /tf Intel PROSet/Wireless"
"DVDLauncher"="\"C:\\Program Files\\CyberLink\\PowerDVD\\DVDLauncher.exe\""
"CTSVolFE.exe"="\"C:\\Program Files\\Creative\\Mixer\\CTSVolFE.exe\" /r"
"DMXLauncher"="C:\\Program Files\\Dell\\Media Experience\\DMXLauncher.exe"
"dla"="C:\\WINDOWS\\system32\\dla\\tfswctrl.exe"
"ISUSScheduler"="\"C:\\Program Files\\Common Files\\InstallShield\\UpdateService\\issch.exe\" -start"
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE"
"DLCCCATS"="rundll32 C:\\WINDOWS\\System32\\spool\\DRIVERS\\W32X86\\3\\DLCCtime.dll,_RunDLLEntry@16"
"dlccmon.exe"="\"C:\\Program Files\\Dell Photo AIO Printer 924\\dlccmon.exe\""
"Run StartupMonitor"="StartupMonitor.exe"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_09\\bin\\jusched.exe\""
"MSKDetectorExe"="C:\\Program Files\\McAfee\\SpamKiller\\MSKDetct.exe /uninstall"
"BDMCon"="\"C:\\Program Files\\Softwin\\BitDefender10\\bdmcon.exe\" /reg"
"BDAgent"="\"C:\\Program Files\\Softwin\\BitDefender10\\bdagent.exe\""
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"ISUSPM Startup"="\"C:\\Program Files\\Common Files\\InstallShield\\UpdateService\\isuspm.exe\" -startup"

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000000

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Mijn huidige introductiepagina"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,20,01,00,00,00,00,00,00,80,04,00,00,84,03,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=dword:40000004
"OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\
ff,ff,04,00,00,00
"RestoredStateInfo"=hex:18,00,00,00,6a,02,00,00,23,00,00,00,a4,00,00,00,9a,00,\
00,00,01,00,00,00

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"
"Sticky Pad"="C:\\Program Files\\StickyPad\\StickyPad.exe"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"
"Sticky Pad"="C:\\Program Files\\StickyPad\\StickyPad.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Preloader van browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Cache-daemon voor onderdeelcategorieën"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
"{81559C35-8464-49F7-BB0E-07A383BEF910}"=""

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"


Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\AppleSoftwareUpdate.job

Completion time: 06-11-29 0:53:15.03
C:\ComboFix.txt ... 06-11-29 00:53
J

Jurgenv1

Legacy Member
* Verwijder deze map eens:

C:\97ad4979f2d6be890cb89a698d47ebfa

Tja als je eventjes niet zonder MSN kan dan kan ik je niet veel helpen hé. :)
V

Ventage

Legacy Member
maar ik had het bestandje niet gedownload, alleen maar op de link geklikt
dus het bestand niet geaccepteerd
zou het dan ook binnen geraakt kunnen zijn?
K

KO

Legacy Member
Ventage zei:
maar ik had het bestandje niet gedownload, alleen maar op de link geklikt
dus het bestand niet geaccepteerd
zou het dan ook binnen geraakt kunnen zijn?
Klik om te vergroten...

Internet Explorer ? Dan hebde prijs.
Ik snap trouwens niet dat ge ni ff uw MSN kunt deinstalleren... Ik heb zelfs geen MSN.
V

Ventage

Legacy Member
is gebeurd nu :D
neenee, ik werk met firefox
dus kan het dan nog?

ben nu bezig met die dingen uit te voeren, maar ik kan avg anti-spyware niet updaten
hij zegt altijd "error: failed to connect to server update.ewido.net"
:(
J

Jurgenv1

Legacy Member
Ventage zei:
maar ik had het bestandje niet gedownload, alleen maar op de link geklikt
dus het bestand niet geaccepteerd
zou het dan ook binnen geraakt kunnen zijn?
Klik om te vergroten...

Dat kan al genoeg zijn, is gewoon MSN eventjes de-installeren, scannen, komen checken en voila. :)
V

Ventage

Legacy Member
Ventage zei:
is gebeurd nu :D
neenee, ik werk met firefox
dus kan het dan nog?

ben nu bezig met die dingen uit te voeren, maar ik kan avg anti-spyware niet updaten
hij zegt altijd "error: failed to connect to server update.ewido.net"
:(
Klik om te vergroten...

*edit* adaware: ik heb het moeten uninstallen, omdat ik bitdefender heb geinstalleerd als av, as, ... en daarvoor moest ik adaware uninstallen
zou ik het dan wel terug installen?
J

Jurgenv1

Legacy Member
Ad-aware is geen antivirus...Kan dus onmogelijk in conflict komen met je AV. :)
J

Jurgenv1

Legacy Member
Ventage zei:
maar die bitdefender is ook anti-spyware
daarmee miss wel?
Klik om te vergroten...
Als je de ad-watch van ad-aware in real-time zet met de real time beveiliging van bitdefender (als die bestaat) dan kunnen ze conflicteren, als het alletwee gewoon scanners zijn kan dat geen kwaad.
V

Ventage

Legacy Member
en hoe zit het met mijn update die niet werkt van avg
is die echt nodig?
wss wel zeker, anders herkent die da virus nie ofzo

hij zegt altijd "error: failed to connect to server update.ewido.net"
J

Jurgenv1

Legacy Member
Ewido bestaat niet meet, het is AVG antispyware, heb je al geprobeerd te herinstalleren?
V

Ventage

Legacy Member
Combofix

Gj - 06-11-29 16:54:36,64 Service Pack 2
ComboFix 06.11.27W - Running from: "C:\Documents and Settings\Gj"

((((((((((((((((((((((((((((((( Files Created from 2006-10-29 to 2006-11-29 ))))))))))))))))))))))))))))))))))


2006-11-29 14:39 <DIR> d-------- C:\Program Files\Lavasoft
2006-11-29 14:36 <DIR> d-------- C:\Program Files\Grisoft
2006-11-29 14:28 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2006-11-28 21:41 <DIR> dr-h----- C:\Documents and Settings\Gj\Onlangs geopend
2006-11-28 21:32 <DIR> d-------- C:\WINDOWS\Minidump
2006-11-25 17:27 <DIR> d-------- C:\Program Files\Common Files\Creative Labs Shared
2006-11-19 11:55 <DIR> d-------- C:\Program Files\Call of Duty
2006-11-14 17:34 <DIR> d-------- C:\Program Files\QuickTime
2006-11-14 17:34 <DIR> d-------- C:\Program Files\Apple Software Update
2006-11-14 17:34 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Apple Computer
2006-11-13 22:10 716,800 --a------ C:\WINDOWS\system32\SysInternals Bluescreen.scr
2006-11-13 20:51 <DIR> d--hs---- C:\WINDOWS\ftpcache
2006-11-13 18:47 <DIR> d-------- C:\Program Files\Lavalys
2006-11-07 17:57 <DIR> d-------- C:\Program Files\CCleaner
2006-11-07 16:03 <DIR> d-------- C:\Program Files\TGTSoft
2006-11-05 22:35 76,560 --a------ C:\WINDOWS\system32\drivers\tmcomm.sys
2006-11-05 21:41 <DIR> d-------- C:\Documents and Settings\Gj\DoctorWeb
2006-11-04 14:14 1,245,696 --a------ C:\WINDOWS\system32\msxml4.dll
2006-11-02 17:46 <DIR> d-------- C:\Documents and Settings\Gj\Application Data\Bitdefender
2006-11-02 17:41 <DIR> d-------- C:\Program Files\Softwin
2006-11-02 17:41 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\BitDefender
2006-11-02 17:37 <DIR> d-------- C:\Program Files\Common Files\Softwin
2006-10-29 12:24 162,304 --a------ C:\UNWISE.EXE


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


2006-11-29 16:54 -------- d-------- C:\Program Files\Mozilla Firefox
2006-11-29 16:52 -------- d-------- C:\Documents and Settings\Gj\Application Data\OpenOffice.org2
2006-11-29 14:39 -------- d-------- C:\Documents and Settings\Gj\Application Data\Lavasoft
2006-11-29 12:40 -------- d-------- C:\Program Files\Dl_cats
2006-11-28 23:17 -------- d-------- C:\Program Files\mIRC
2006-11-28 21:40 -------- d-------- C:\Program Files\SpywareGuard
2006-11-28 21:40 -------- d-------- C:\Program Files\SpywareBlaster
2006-11-25 17:27 -------- d-------- C:\Program Files\Common Files
2006-11-19 11:04 -------- d--h----- C:\Program Files\InstallShield Installation Information
2006-11-16 15:00 -------- d-------- C:\Program Files\Internet Explorer
2006-11-14 15:39 -------- d-------- C:\Program Files\The All-Seeing Eye
2006-11-13 21:17 163644 --a------ C:\WINDOWS\system32\drivers\secdrv.sys
2006-11-12 17:15 43520 --a------ C:\WINDOWS\system32\CmdLineExt03.dll
2006-11-06 21:08 -------- d-------- C:\Program Files\BHODemon 2
2006-10-31 12:16 -------- d-------- C:\Program Files\Winamp
2006-10-25 18:11 -------- d-------- C:\Program Files\Wolfenstein - Enemy Territory
2006-10-23 20:08 -------- d-------- C:\Documents and Settings\Gj\Application Data\Macromedia
2006-10-22 14:40 -------- d-------- C:\Documents and Settings\Gj\Application Data\Sonic
2006-10-22 14:40 -------- d-------- C:\Documents and Settings\Gj\Application Data\Leadertech
2006-10-19 00:59 -------- d-------- C:\Program Files\Windows Media Player
2006-10-17 22:50 -------- d-------- C:\Program Files\Corel
2006-10-17 22:46 -------- d-------- C:\Documents and Settings\Gj\Application Data\Jasc Software Inc
2006-10-17 22:40 -------- d-------- C:\Program Files\AnalogX
2006-10-17 22:06 5 --ahs---- C:\WINDOWS\system32\ccedca5_s.dll
2006-10-16 20:41 -------- d-------- C:\Documents and Settings\Gj\Application Data\Kerio
2006-10-16 20:41 -------- d-------- C:\Documents and Settings\Gj\Application Data\IDS_COMPANY
2006-10-16 18:51 -------- d-------- C:\Program Files\Common Files\Wise Installation Wizard
2006-10-16 15:49 -------- d-------- C:\Program Files\Symantec Technical Support
2006-10-16 15:37 -------- d-------- C:\Program Files\Common Files\Symantec Shared
2006-10-16 11:40 -------- d-------- C:\Program Files\Java
2006-10-16 11:40 -------- d-------- C:\Program Files\Common Files\Java
2006-10-13 21:57 6216 --ahs---- C:\WINDOWS\system32\KGyGaAvL.sys
2006-10-13 21:57 56 -r-hs---- C:\WINDOWS\system32\C1760761D3.sys
2006-10-13 21:48 -------- d-------- C:\Program Files\Dell Photo AIO Printer 924
2006-10-13 21:46 -------- d-------- C:\Program Files\WinRAR
2006-10-13 21:45 -------- d-------- C:\Program Files\Creative
2006-10-13 13:41 144384 --a------ C:\WINDOWS\system32\nwprovau.dll
2006-10-11 08:22 -------- d-------- C:\Program Files\StickyPad
2006-10-11 01:24 86016 --a------ C:\WINDOWS\system32\OpenAL32.dll
2006-10-11 01:24 262144 --a------ C:\WINDOWS\system32\wrap_oal.dll
2006-10-06 17:18 -------- d-------- C:\Program Files\EA SPORTS
2006-10-06 13:24 -------- d-------- C:\Program Files\Warsow
2006-10-05 15:26 335605 --a------ C:\WINDOWS\Ximensions PP Starfield.scr
2006-10-05 15:26 -------- d-------- C:\Program Files\Ximensions PP Starfield
2006-10-02 20:43 -------- d-------- C:\Program Files\DivX
2006-10-02 18:57 -------- d-------- C:\Documents and Settings\Gj\Application Data\AdobeUM
2006-10-02 17:47 -------- d---s---- C:\Documents and Settings\Gj\Application Data\Microsoft
2006-10-02 17:40 -------- d-------- C:\Documents and Settings\Gj\Application Data\Adobe
2006-10-02 15:40 -------- d-------- C:\Documents and Settings\Gj\Application Data\Sun
2006-10-01 20:35 88 -r-hs---- C:\WINDOWS\system32\D3610776C1.sys
2006-10-01 20:17 -------- d-------- C:\Documents and Settings\Gj\Application Data\Mozilla
2006-09-26 18:02 0 --a------ C:\Documents and Settings\Gj\Application Data\wklnhst.dat
2006-09-22 18:20 20992 --a------ C:\WINDOWS\jestertb.dll
2006-09-18 19:11 778240 --a------ C:\WINDOWS\system32\divx_xx0c.dll
2006-09-18 19:11 778240 --a------ C:\WINDOWS\system32\divx_xx07.dll
2006-09-18 19:11 761856 --a------ C:\WINDOWS\system32\divx_xx11.dll
2006-09-18 19:11 620180 --a------ C:\WINDOWS\system32\DivX.dll
2006-09-17 13:51 49152 --a------ C:\WINDOWS\setpwrcg.exe
2006-09-13 06:07 1084416 --a------ C:\WINDOWS\system32\msxml3.dll


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries are not shown

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"MsnMsgr"="\"C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe\" /background"
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"SigmatelSysTrayApp"="stsystra.exe"
"ATICCC"="\"C:\\Program Files\\ATI Technologies\\ATI.ACE\\cli.exe\" runtime -Delay"
"SynTPEnh"="C:\\Program Files\\Synaptics\\SynTP\\SynTPEnh.exe"
"Dell QuickSet"="C:\\Program Files\\Dell\\QuickSet\\quickset.exe"
"IntelZeroConfig"="\"C:\\Program Files\\Intel\\Wireless\\bin\\ZCfgSvc.exe\""
"IntelWireless"="\"C:\\Program Files\\Intel\\Wireless\\Bin\\ifrmewrk.exe\" /tf Intel PROSet/Wireless"
"DVDLauncher"="\"C:\\Program Files\\CyberLink\\PowerDVD\\DVDLauncher.exe\""
"CTSVolFE.exe"="\"C:\\Program Files\\Creative\\Mixer\\CTSVolFE.exe\" /r"
"DMXLauncher"="C:\\Program Files\\Dell\\Media Experience\\DMXLauncher.exe"
"dla"="C:\\WINDOWS\\system32\\dla\\tfswctrl.exe"
"ISUSScheduler"="\"C:\\Program Files\\Common Files\\InstallShield\\UpdateService\\issch.exe\" -start"
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE"
"DLCCCATS"="rundll32 C:\\WINDOWS\\System32\\spool\\DRIVERS\\W32X86\\3\\DLCCtime.dll,_RunDLLEntry@16"
"dlccmon.exe"="\"C:\\Program Files\\Dell Photo AIO Printer 924\\dlccmon.exe\""
"Run StartupMonitor"="StartupMonitor.exe"
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_09\\bin\\jusched.exe\""
"MSKDetectorExe"="C:\\Program Files\\McAfee\\SpamKiller\\MSKDetct.exe /uninstall"
"BDMCon"="\"C:\\Program Files\\Softwin\\BitDefender10\\bdmcon.exe\" /reg"
"BDAgent"="\"C:\\Program Files\\Softwin\\BitDefender10\\bdagent.exe\""
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"ISUSPM Startup"="\"C:\\Program Files\\Common Files\\InstallShield\\UpdateService\\isuspm.exe\" -startup"
"!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000001

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Mijn huidige introductiepagina"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,20,01,00,00,00,00,00,00,80,04,00,00,84,03,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\
ff,ff,04,00,00,00
"RestoredStateInfo"=hex:18,00,00,00,6a,02,00,00,23,00,00,00,a4,00,00,00,9a,00,\
00,00,01,00,00,00

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"
"Sticky Pad"="C:\\Program Files\\StickyPad\\StickyPad.exe"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"
"Sticky Pad"="C:\\Program Files\\StickyPad\\StickyPad.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Preloader van browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Cache-daemon voor onderdeelcategorieën"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
"{81559C35-8464-49F7-BB0E-07A383BEF910}"=""
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"


Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\AppleSoftwareUpdate.job

Completion time: 06-11-29 16:55:09.59
C:\ComboFix.txt ... 06-11-29 16:55
C:\ComboFix2.txt ... 06-11-29 00:53
Klik om te vergroten...
V

Ventage

Legacy Member
AVG

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 16:44:57 29-11-2006

+ Scan result:



:mozilla.57:C:\Documents and Settings\Gj\Application Data\Mozilla\Firefox\Profiles\do8hf6im.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.58:C:\Documents and Settings\Gj\Application Data\Mozilla\Firefox\Profiles\do8hf6im.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.59:C:\Documents and Settings\Gj\Application Data\Mozilla\Firefox\Profiles\do8hf6im.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.65:C:\Documents and Settings\Gj\Application Data\Mozilla\Firefox\Profiles\do8hf6im.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.66:C:\Documents and Settings\Gj\Application Data\Mozilla\Firefox\Profiles\do8hf6im.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.67:C:\Documents and Settings\Gj\Application Data\Mozilla\Firefox\Profiles\do8hf6im.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.68:C:\Documents and Settings\Gj\Application Data\Mozilla\Firefox\Profiles\do8hf6im.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.69:C:\Documents and Settings\Gj\Application Data\Mozilla\Firefox\Profiles\do8hf6im.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.16:C:\Documents and Settings\Gj\Application Data\Mozilla\Firefox\Profiles\do8hf6im.default\cookies.txt -> TrackingCookie.Com : Cleaned.


::Report end
Klik om te vergroten...

Hijackthis

Logfile of HijackThis v1.99.1
Scan saved at 16:57:24, on 29-11-2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Creative\Mixer\CTSVolFE.exe
C:\Program Files\Dell\Media Experience\DMXLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\StartupMonitor.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\WINDOWS\system32\dlcccoms.exe
C:\Program Files\Softwin\BitDefender10\bdmcon.exe
C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\BHODemon 2\BHODemon.exe
C:\Program Files\Dell Network Assistant\ezi_hnm2.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\Dell Network Assistant\ezi_hnm2.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Gj\Mijn documenten\Hijack this & drweg-cureit & cc cleaner\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.be/ig/dell?hl=nl&client=dell-row&channel=be&ibd=3060917
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.be/hws/sb/dell-row/nl/side.html?channel=be
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.be/hws/sb/dell-row/nl/side.html?channel=be
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://netlogin.kuleuven.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www1.euro.dell.com/content/default.aspx?c=be&l=nl&s=gen
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www1.euro.dell.com/content/default.aspx?c=be&l=nl&s=gen
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.be/hws/sb/dell-row/nl/side.html?channel=be
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.be/ig/dell?hl=nl&client=dell-row&channel=be&ibd=3060917
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [CTSVolFE.exe] "C:\Program Files\Creative\Mixer\CTSVolFE.exe" /r
O4 - HKLM\..\Run: [DMXLauncher] C:\Program Files\Dell\Media Experience\DMXLauncher.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [DLCCCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\DLCCtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [dlccmon.exe] "C:\Program Files\Dell Photo AIO Printer 924\dlccmon.exe"
O4 - HKLM\..\Run: [Run StartupMonitor] StartupMonitor.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: BHODemon 2.0.lnk = C:\Program Files\BHODemon 2\BHODemon.exe
O4 - Startup: Dell Network Assistant.lnk = C:\Program Files\Dell Network Assistant\ezi_hnm2.exe
O4 - Startup: OpenOffice.org 2.0 .lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/SSC/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: Creative Labs Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe
O23 - Service: dlcc_device - Unknown owner - C:\WINDOWS\system32\dlcccoms.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender10\vsserv.exe" /service (file missing)
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)
Klik om te vergroten...
J

Jurgenv1

Legacy Member
* Je Java software is verouderd. oudere versies hebben lekken die malware de kans geeft om zich te installeren op je systeem. Doe eerst deze stappen om Java te de-installeren en de nieuwere versie te installeren:

  • Download de nieuwste versie hier: Java Runtime Environment (JRE) 5.0 Update 10.
  • Vink het volgende aan waar er staat: "Accept License Agreement".
  • De pagina zal herladen.
  • Klik op de link om Windows Offline Installation te downloaden met Meerdere-talen En bewaar het naar je bureaublad.
  • Sluit alle programma's die eventueel open zijn - Zeker je web browser!
  • Ga dan naar Start > Configuratiescherm en dubbelklik op software en verwijder alle oudere versies van Java.
  • Vink alles aan met Java Runtime Environment (JRE of J2SE) in de naam.
  • Klik dan op Verwijderen of Wijzig/Verwijder knop.
  • Herhaal dit tot alle oudere versies verdwenen zijn.
  • Na het verwijderen van alle oudere versies, herstart dan je pc.
  • Dubbelkik dan op jre-1_5_0_10-windows-i586-p.exe op je bureaublad om de nieuwste versie van Java te installeren.

* Voor de rest ziet het er goed uit.
Het archief is een bevroren moment uit een vorige versie van dit forum, met andere regels en andere bazen. Deze posts weerspiegelen op geen enkele manier onze huidige ideeën, waarden of wereldbeelden en zijn op sommige plaatsen gecensureerd wegens ontoelaatbaar. Veel zijn in een andere tijdsgeest gemaakt, al dan niet ironisch - zoals in het ironische subforum Off-Topic - en zouden op dit moment niet meer gepost (mogen) worden. Toch bieden we dit archief nog graag aan als informatiedatabank en naslagwerk. Lees er hier meer over of start een gesprek met anderen.
Terug
Bovenaan