Archief - HiJacklog even checken aub :(

Het archief is een bevroren moment uit een vorige versie van dit forum, met andere regels en andere bazen. Deze posts weerspiegelen op geen enkele manier onze huidige ideeën, waarden of wereldbeelden en zijn op sommige plaatsen gecensureerd wegens ontoelaatbaar. Veel zijn in een andere tijdsgeest gemaakt, al dan niet ironisch - zoals in het ironische subforum Off-Topic - en zouden op dit moment niet meer gepost (mogen) worden. Toch bieden we dit archief nog graag aan als informatiedatabank en naslagwerk. Lees er hier meer over of start een gesprek met anderen.
R

Razhel

Legacy Member
Hallo, kheb laatste tijd last van Abetear.A, via msn binnengekomen en men virusscanner cured de trojan altijd maar na reboot is het er altijd weer. Dus wat ik al heb gevonden is: Trojan in system32 en nog ix in men temporary internet files altijd. Bericht dat ik krijg van virusscanner -> http://users.telenet.be/ben.gevaert/Abetear.A.bmp
Hier hebek een hijacklogje:

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 22:16:58, on 5/07/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Citrix\ICA Client\ssonsvr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\PROGRA~1\CA\ETRUST~1\realmon.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\Program Files\SPAMfighter\SFAgent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
C:\Program Files\CA\eTrust Antivirus\InoRT.exe
C:\Program Files\CA\eTrust Antivirus\InoTask.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\USER\Bureaublad\HiJackThis_v2.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hln.be/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1F6581D5-AA53-4b73-A6F9-41420C6B61F1} - C:\WINDOWS\system32\sanwdrtu.dll
O2 - BHO: (no name) - {28226A43-8516-47E8-8630-D9F7B0A2C9C4} - C:\WINDOWS\system32\pmkhe.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {748E6C81-DC7D-4974-BE84-016C7A71A0D2} - C:\WINDOWS\system32\xxyvwvu.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Realtime Monitor] C:\PROGRA~1\CA\ETRUST~1\realmon.exe -s
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
O4 - HKLM\..\Run: [SPAMfighter Agent] "C:\Program Files\SPAMfighter\SFAgent.exe" update delay 60
O4 - HKLM\..\Run: [icq.com] rundll32.exe "C:\WINDOWS\system32\mfpdxbgp.dll",forkonce
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Lokale service')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://losrubbos.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.kodakimages.com/DesktopModules/SpectorAlbum/ImageUploader3.cab
O20 - Winlogon Notify: pmkhe - C:\WINDOWS\system32\pmkhe.dll
O20 - Winlogon Notify: xxyvwvu - C:\WINDOWS\SYSTEM32\xxyvwvu.dll
O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: eTrust Antivirus RPC Server (InoRPC) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
O23 - Service: eTrust Antivirus Realtime Server (InoRT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRT.exe
O23 - Service: eTrust Antivirus Job Server (InoTask) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoTask.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe

--
End of file - 5764 bytes
En als er nog brol opstaat of dingen die pc maar vertragen ofzo moet ma zeggen, kwil da ke allemaal weg :)
thx bij voorbaat
J

Jurgenv1

Legacy Member
Download combofix.exe: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Plaats het op je bureaublad.
Dubbelklik er op om het programma te starten.
In het scherm dat verschijnt tik je een Y in om het cleaningsprocess te starten.
Volg de instructies op het scherm.
Als het tooltje klaar is, opent er een logfile (combofix.txt) Post de inhoud van dit bestandje samen met een nieuwe hijackthislog.
R

Razhel

Legacy Member
"USER" - 2007-07-06 13:32:39 - ComboFix 07-07-04.4 - Service Pack 2


(((((((((((((((((((((((((((((((((((((((((((( V Log )))))))))))))))))))))))))))))))))))))))))))))))))))))))


C:\WINDOWS\system32\bmbvcudu.dll
C:\WINDOWS\system32\bxogihlv.dll
C:\WINDOWS\system32\cqgxdhwh.dll
C:\WINDOWS\system32\mfpdxbgp.dll
C:\WINDOWS\system32\sanwdrtu.dll
C:\WINDOWS\system32\uvuixsll.dll
C:\WINDOWS\system32\cbxyxvt.dll
C:\WINDOWS\system32\efcyayw.dll
C:\WINDOWS\system32\ljjiffc.dll
C:\WINDOWS\system32\mljghhe.dll
C:\WINDOWS\system32\mljjhed.dll
C:\WINDOWS\system32\pmnonll.dll
C:\WINDOWS\system32\tuvvwxx.dll
C:\WINDOWS\system32\ehkmp.bak1
C:\WINDOWS\system32\ehkmp.bak2
C:\WINDOWS\system32\ehkmp.ini
C:\WINDOWS\system32\uducvbmb.ini
C:\WINDOWS\system32\hwhdxgqc.ini
C:\WINDOWS\system32\pgbxdpfm.ini
C:\WINDOWS\system32\llsxiuvu.ini
C:\WINDOWS\system32\pmkhe.dll
C:\WINDOWS\system32\xxyvwvu.dll


* * * POST RUN FILES/FOLDERS * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *



((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\DOCUME~1\ALLUSE~1\APPLIC~1.\TEMP


((((((((((((((((((((((((( Files Created from 2007-06-06 to 2007-07-06 )))))))))))))))))))))))))))))))


2007-07-06 13:41 <DIR> d-------- C:\WINDOWS\TEM
2007-07-06 13:29 51,200 --a------ C:\WINDOWS\nircmd.exe
2007-07-04 12:40 <DIR> d-------- C:\DOCUME~1\USER\APPLIC~1\Media Player Classic
2007-07-04 12:37 10,752 --a------ C:\WINDOWS\system32\ff_vfw.dll
2007-07-04 12:37 <DIR> d-------- C:\Program Files\K-Lite Codec Pack
2007-07-04 11:39 <DIR> d-------- C:\Program Files\Webteh
2007-07-04 11:38 2,897,821 --a------ C:\Temp\bsplayer137.826.exe
2007-07-04 00:13 <DIR> d-------- C:\DOCUME~1\USER\APPLIC~1\MSN6
2007-07-04 00:13 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\MSN6
2007-07-03 20:12 25,827,912 --a------ C:\Temp\wmp11-windowsxp-x86-nl-nl.exe
2007-07-03 16:53 <DIR> d--h----- C:\WINDOWS\system32\GroupPolicy
2007-07-03 14:47 <DIR> dr-h----- C:\DOCUME~1\USER\Onlangs geopend
2007-07-02 22:55 <DIR> d-------- C:\Program Files\Windows Media Connect 2
2007-07-02 22:49 <DIR> d-------- C:\WINDOWS\system32\drivers\UMDF
2007-07-02 19:46 <DIR> d-------- C:\Program Files\NoAdware5.0
2007-07-02 19:45 1,902,704 --a------ C:\Temp\noadware.exe
2007-06-29 19:07 <DIR> d-------- C:\Program Files\MSN Messenger
2007-06-29 19:05 17,874,288 --a------ C:\Temp\Install_Messenger.exe
2007-06-28 12:06 2,624 --a------ C:\WINDOWS\system32\mnqpmytb.exe
2007-06-27 23:07 183,808 --a------ C:\WINDOWS\system32\fer.exe
2007-06-27 11:54 <DIR> d-------- C:\Program Files\Common Files\Application
2007-06-27 11:54 <DIR> d-------- C:\Program Files\Common Files\Ankiro
2007-06-19 10:12 129,784 --------- C:\WINDOWS\system32\pxafs.dll


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-07-05 13:00:31 -------- d-----w C:\DOCUME~1\USER\APPLIC~1\Azureus
2007-07-04 17:10:33 -------- d-----w C:\DOCUME~1\USER\APPLIC~1\AdobeUM
2007-07-03 14:57:34 -------- d-----w C:\Program Files\Messenger
2007-07-03 14:31:53 -------- d-----w C:\Program Files\Google
2007-06-29 11:42:35 54,272 ----a-w C:\WINDOWS\system32\perfc013.dat
2007-06-29 11:42:35 365,264 ----a-w C:\WINDOWS\system32\perfh013.dat
2007-06-27 09:54:14 -------- d-----w C:\Program Files\Spamfighter
2007-06-19 08:12:35 -------- d-----w C:\Program Files\Winamp
2007-06-13 11:34:48 -------- d-----w C:\DOCUME~1\USER\APPLIC~1\SPAMfighter
2007-06-12 10:30:28 -------- d-----w C:\Program Files\Windows Live Safety Center
2007-06-05 08:34:44 1,184,664 ----a-w C:\WINDOWS\system32\FreeImage.dll
2007-05-16 15:19:43 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll
2007-05-09 13:49:45 -------- d-----w C:\DOCUME~1\USER\APPLIC~1\Sony Corporation
2007-05-09 13:20:47 -------- d-----w C:\Program Files\Common Files\Sony Shared
2007-05-09 13:20:40 -------- d-----w C:\Program Files\Sony
2007-05-09 13:20:39 -------- d--h--w C:\Program Files\InstallShield Installation Information
2007-05-09 13:20:00 -------- d-----w C:\Program Files\Sony Corporation
2007-05-09 13:14:22 -------- d-----w C:\Program Files\Common Files\InstallShield
2007-05-06 20:31:11 76,560 ----a-w C:\WINDOWS\system32\drivers\tmcomm.sys
2007-04-25 14:22:52 144,896 ----a-w C:\WINDOWS\system32\schannel.dll
2007-04-18 16:15:26 2,854,400 ----a-w C:\WINDOWS\system32\msi.dll
2007-04-16 20:47:36 33,624 ----a-w C:\WINDOWS\system32\wups.dll
2007-04-16 20:45:54 1,710,936 ----a-w C:\WINDOWS\system32\wuaueng.dll
2007-04-16 20:45:48 549,720 ----a-w C:\WINDOWS\system32\wuapi.dll
2007-04-16 20:45:42 325,976 ----a-w C:\WINDOWS\system32\wucltui.dll
2007-04-16 20:45:36 203,096 ----a-w C:\WINDOWS\system32\wuweb.dll
2007-04-16 20:45:28 92,504 ----a-w C:\WINDOWS\system32\cdm.dll
2007-04-16 20:45:20 53,080 ----a-w C:\WINDOWS\system32\wuauclt.exe
2007-04-16 20:45:20 43,352 ----a-w C:\WINDOWS\system32\wups2.dll


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
2006-12-18 05:16 59032 --a------ C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
2005-05-31 02:04 853672 --a------ C:\PROGRA~1\SPYBOT~1\SDHelper.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
2007-03-14 03:43 501400 --a------ C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Realtime Monitor"="C:\PROGRA~1\CA\ETRUST~1\realmon.exe" [2004-04-06 17:14]
"@"="" []
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 03:43]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2006-09-01 15:57]
"SsAAD.exe"="C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe" [2006-01-07 02:36]
"SPAMfighter Agent"="C:\Program Files\SPAMfighter\SFAgent.exe" [2007-06-25 15:03]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 01:03]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-07-03 14:17]
"Steam"="" []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^Adobe Reader Snelle start.lnk]
path=C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\Adobe Reader Snelle start.lnk
backup=C:\WINDOWS\pss\Adobe Reader Snelle start.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\I&F Viewer toolbar]
"C:\Program Files\Photo Toolkit\ivbar\phototoolkitmem.exe" -start

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
"C:\Program Files\QuickTime\qttask.exe" -atboottime

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Smapp]
C:\Program Files\Analog Devices\SoundMAX\Smtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ce851405-ee63-11db-942a-0007e99bbb25}]
AutoRun\command- F:\CruzerProfile.exe /autorun


Contents of the 'Scheduled Tasks' folder
2006-09-27 16:08:48 C:\WINDOWS\tasks\AppleSoftwareUpdate.job

**************************************************************************

catchme 0.3.915 W2K/XP/Vista - rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-07-06 13:41:38
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

C:\WINDOWS\TEM

scan completed successfully
hidden files: 1

**************************************************************************

Completion time: 2007-07-06 13:43:43 - machine was rebooted
C:\ComboFix-quarantined-files.txt ... 2007-07-06 13:43

--- E O F ---




Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 13:45:55, on 6/07/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Citrix\ICA Client\ssonsvr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
C:\Program Files\CA\eTrust Antivirus\InoRT.exe
C:\Program Files\CA\eTrust Antivirus\InoTask.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\PROGRA~1\CA\ETRUST~1\realmon.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\Program Files\SPAMfighter\SFAgent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\USER\Bureaublad\HiJackThis_v2.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hln.be/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O4 - HKLM\..\Run: [Realtime Monitor] C:\PROGRA~1\CA\ETRUST~1\realmon.exe -s
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
O4 - HKLM\..\Run: [SPAMfighter Agent] "C:\Program Files\SPAMfighter\SFAgent.exe" update delay 60
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Lokale service')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://losrubbos.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.kodakimages.com/DesktopModules/SpectorAlbum/ImageUploader3.cab
O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: eTrust Antivirus RPC Server (InoRPC) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
O23 - Service: eTrust Antivirus Realtime Server (InoRT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRT.exe
O23 - Service: eTrust Antivirus Job Server (InoTask) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoTask.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe

--
End of file - 5067 bytes

voila :)
J

Jurgenv1

Legacy Member
Je zal MSN messenger eventjes moeten deïnstalleren of het volgende zal geen nut hebben:

Download OTMoveIt.exe en plaats het op je bureaublad:

Start OTMoveIt door dubbel te klikken op OTMoveIt.exe
In het linkerpaneel, waar het zegt: Paste List of Files/Folders to be Moved ,kopieer en plak je onderstaand gedeelte:

C:\WINDOWS\system32\mnqpmytb.exe
C:\WINDOWS\system32\fer.exe
C:\Program Files\NoAdware5.0

Klik daarna op de knop MoveIt onderaan.
Wanneer voltooid zal het een log aanmaken (********_******.log -- de * staat voor datum en tijd) in de volgende map: C:\_OTMoveIt\MovedFiles.
Post de inhoud daarvan in je volgende bericht met een nieuw hijackthis logje.
R

Razhel

Legacy Member
C:\WINDOWS\system32\mnqpmytb.exe moved successfully.
C:\WINDOWS\system32\fer.exe moved successfully.
C:\Program Files\NoAdware5.0\NoAdwareBackup moved successfully.
C:\Program Files\NoAdware5.0\logs moved successfully.
C:\Program Files\NoAdware5.0 moved successfully.

Created on 07/08/2007 17:53:14


Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 17:54:32, on 8/07/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Citrix\ICA Client\ssonsvr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\CA\ETRUST~1\realmon.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\Program Files\SPAMfighter\SFAgent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
C:\Program Files\CA\eTrust Antivirus\InoRT.exe
C:\Program Files\CA\eTrust Antivirus\InoTask.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\msiexec.exe
C:\Documents and Settings\USER\Bureaublad\HiJackThis_v2.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hln.be/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O4 - HKLM\..\Run: [Realtime Monitor] C:\PROGRA~1\CA\ETRUST~1\realmon.exe -s
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
O4 - HKLM\..\Run: [SPAMfighter Agent] "C:\Program Files\SPAMfighter\SFAgent.exe" update delay 60
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Lokale service')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://losrubbos.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.kodakimages.com/DesktopModules/SpectorAlbum/ImageUploader3.cab
O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: eTrust Antivirus RPC Server (InoRPC) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
O23 - Service: eTrust Antivirus Realtime Server (InoRT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRT.exe
O23 - Service: eTrust Antivirus Job Server (InoTask) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoTask.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe

--
End of file - 5069 bytes

ziezo, wat was er trouwens mis met NoAdware ?
R

Razhel

Legacy Member
euuhhjjmm... blijkbaaris men pc niet zo clean :) Kben nu aant scannen met avg anti spyware en ondertussen heeft ie al Dropper.agent.asf, Worm.VB.be, Trojan.agent.anr, Backdoor.MSNmaker.ak en nog andere gevonden...? :(
R

Razhel

Legacy Member
mja, da was gisteren en men broer eef pc dan afgesloten en rapport niet gesaved. Kheb wel vandaag ng keer nen fast scan gedaan en kom ik veel verdachte cookies tegen.

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 13:06:01 10/07/2007

+ Scan result:



:mozilla.366:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.49:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.50:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.51:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\USER\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\USER\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\USER\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\USER\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\USER\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\USER\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\USER\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\USER\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.246:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.248:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
C:\Documents and Settings\USER\Cookies\[email protected][1].txt -> TrackingCookie.Adobe : Cleaned.
:mozilla.374:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.375:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.31:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
C:\Documents and Settings\USER\Cookies\user@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.131:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
C:\Documents and Settings\USER\Cookies\user@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.151:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
C:\Documents and Settings\USER\Cookies\user@casinotropez[1].txt -> TrackingCookie.Casinotropez : Cleaned.
C:\Documents and Settings\USER\Cookies\user@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Cleaned.
:mozilla.16:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Documents and Settings\USER\Cookies\user@doubleclick[2].txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Documents and Settings\USER\Cookies\[email protected][2].txt -> TrackingCookie.Etracker : Cleaned.
C:\Documents and Settings\USER\Cookies\[email protected][1].txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.158:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.159:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.160:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.161:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.162:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.163:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.400:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.282:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.283:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
C:\Documents and Settings\USER\Cookies\user@ivwbox[1].txt -> TrackingCookie.Ivwbox : Cleaned.
:mozilla.167:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Live : Cleaned.
:mozilla.168:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Live : Cleaned.
:mozilla.169:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Live : Cleaned.
:mozilla.398:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.399:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
C:\Documents and Settings\USER\Cookies\[email protected][2].txt -> TrackingCookie.Msn : Cleaned.
C:\Documents and Settings\USER\Cookies\[email protected][1].txt -> TrackingCookie.Msn : Cleaned.
:mozilla.137:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Netflame : Cleaned.
:mozilla.138:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Netflame : Cleaned.
C:\Documents and Settings\USER\Cookies\user@oewabox[1].txt -> TrackingCookie.Oewabox : Cleaned.
:mozilla.147:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.148:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.149:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.150:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.144:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Paypal : Cleaned.
C:\Documents and Settings\USER\Cookies\[email protected][1].txt -> TrackingCookie.Paypal : Cleaned.
C:\Documents and Settings\USER\Cookies\[email protected][1].txt -> TrackingCookie.Quarterserver : Cleaned.
:mozilla.208:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.209:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.210:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.211:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.212:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.213:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
C:\Documents and Settings\USER\Cookies\[email protected][2].txt -> TrackingCookie.Serving-sys : Cleaned.
C:\Documents and Settings\USER\Cookies\user@serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.188:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.207:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.195:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.196:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.197:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
C:\Documents and Settings\USER\Cookies\[email protected][2].txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.97:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
C:\Documents and Settings\USER\Cookies\user@statistik-gallup[1].txt -> TrackingCookie.Statistik-gallup : Cleaned.
C:\Documents and Settings\USER\Cookies\[email protected][2].txt -> TrackingCookie.Tracking101 : Cleaned.
:mozilla.78:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.79:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.80:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.262:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.142:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Webtrends : Cleaned.
:mozilla.253:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.394:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Yadro : Cleaned.
:mozilla.395:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.396:C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\xd2tm4xm.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.


::Report end
R

Razhel

Legacy Member
uhu kweet, maar hoe krijgek ze binnen hé , kga kik niet naar die sites
J

Jurgenv1

Legacy Member
Voor cookies moet je geen zorgen maken, die zijn onschadelijk.
Het archief is een bevroren moment uit een vorige versie van dit forum, met andere regels en andere bazen. Deze posts weerspiegelen op geen enkele manier onze huidige ideeën, waarden of wereldbeelden en zijn op sommige plaatsen gecensureerd wegens ontoelaatbaar. Veel zijn in een andere tijdsgeest gemaakt, al dan niet ironisch - zoals in het ironische subforum Off-Topic - en zouden op dit moment niet meer gepost (mogen) worden. Toch bieden we dit archief nog graag aan als informatiedatabank en naslagwerk. Lees er hier meer over of start een gesprek met anderen.
Terug
Bovenaan