dajenzzz
Legacy Member
ksit me wa spy-weare die ik ni weg krijg me spybot en zo dus ik post het hier maar
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Network Associates\Alert Manager\amgrsrvc.exe
C:\Program Files\Common Files\Network Associates\log and quarantine\bin\i386\NAIlgpip.exe
C:\Program Files\Common Files\Network Associates\Outbreak Manager\Outbreak.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Network Associates\TVD\WebShield SMTP\MailCFG.exe
C:\Program Files\Network Associates\TVD\WebShield SMTP\mailscan.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\WinMX\WinMX.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\DOCUME~1\Jens\LOCALS~1\Temp\Temporary Directory 1 for hijackthis_199.zip\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.gomantwerpen.be
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.gomantwerpen.be
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = gomant.local
O17 - HKLM\Software\..\Telephony: DomainName = gomant.local
O17 - HKLM\System\CCS\Services\Tcpip\..\{2335286F-10C5-4FD6-8D8A-B2094A634E40}: NameServer = 62.235.14.4 62.235.13.199
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = gomant.local
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = gomant.local
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = gomant.local
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = gomant.local
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = gomant.local
O23 - Service: Network Associates Alert Manager (AlertManager) - McAfee Division of Network Associates, Inc. - C:\Program Files\Common Files\Network Associates\Alert Manager\amgrsrvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Network Associates Log Service - Networks Associates Technology, Inc. - C:\Program Files\Common Files\Network Associates\log and quarantine\bin\i386\NAIlgpip.exe
O23 - Service: Network Associates Outbreak Manager (Outbreak Manager) - Networks Associates Technology, Inc. - C:\Program Files\Common Files\Network Associates\Outbreak Manager\Outbreak.exe
O23 - Service: Network Associates WebShield SMTP MailCfg (WebShield SMTP MailCfg) - Unknown owner - C:\Program Files\Network Associates\TVD\WebShield SMTP\MailCFG.exe
O23 - Service: Network Associates WebShield SMTP MailScan (WebShield SMTP MailScan) - Network Associates, Inc. - C:\Program Files\Network Associates\TVD\WebShield SMTP\mailscan.exe
gomant is het domijn van mijn moeder haar werk.
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Network Associates\Alert Manager\amgrsrvc.exe
C:\Program Files\Common Files\Network Associates\log and quarantine\bin\i386\NAIlgpip.exe
C:\Program Files\Common Files\Network Associates\Outbreak Manager\Outbreak.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Network Associates\TVD\WebShield SMTP\MailCFG.exe
C:\Program Files\Network Associates\TVD\WebShield SMTP\mailscan.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\WinMX\WinMX.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\DOCUME~1\Jens\LOCALS~1\Temp\Temporary Directory 1 for hijackthis_199.zip\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.gomantwerpen.be
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.gomantwerpen.be
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = gomant.local
O17 - HKLM\Software\..\Telephony: DomainName = gomant.local
O17 - HKLM\System\CCS\Services\Tcpip\..\{2335286F-10C5-4FD6-8D8A-B2094A634E40}: NameServer = 62.235.14.4 62.235.13.199
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = gomant.local
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = gomant.local
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = gomant.local
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = gomant.local
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = gomant.local
O23 - Service: Network Associates Alert Manager (AlertManager) - McAfee Division of Network Associates, Inc. - C:\Program Files\Common Files\Network Associates\Alert Manager\amgrsrvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Network Associates Log Service - Networks Associates Technology, Inc. - C:\Program Files\Common Files\Network Associates\log and quarantine\bin\i386\NAIlgpip.exe
O23 - Service: Network Associates Outbreak Manager (Outbreak Manager) - Networks Associates Technology, Inc. - C:\Program Files\Common Files\Network Associates\Outbreak Manager\Outbreak.exe
O23 - Service: Network Associates WebShield SMTP MailCfg (WebShield SMTP MailCfg) - Unknown owner - C:\Program Files\Network Associates\TVD\WebShield SMTP\MailCFG.exe
O23 - Service: Network Associates WebShield SMTP MailScan (WebShield SMTP MailScan) - Network Associates, Inc. - C:\Program Files\Network Associates\TVD\WebShield SMTP\mailscan.exe
gomant is het domijn van mijn moeder haar werk.