Archief - hijackthis logjes ivm msn virus

Het archief is een bevroren moment uit een vorige versie van dit forum, met andere regels en andere bazen. Deze posts weerspiegelen op geen enkele manier onze huidige ideeën, waarden of wereldbeelden en zijn op sommige plaatsen gecensureerd wegens ontoelaatbaar. Veel zijn in een andere tijdsgeest gemaakt, al dan niet ironisch - zoals in het ironische subforum Off-Topic - en zouden op dit moment niet meer gepost (mogen) worden. Toch bieden we dit archief nog graag aan als informatiedatabank en naslagwerk. Lees er hier meer over of start een gesprek met anderen.
P

PVBPVB

Legacy Member
1. hijackthis
Logfile of HijackThis v1.99.1
Scan saved at 22:28:50, on 26/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\Eigenaar\LOCALS~1\Temp\Rar$EX00.922\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.beyondgaming.be
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.eurosys.be/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [PSPVideo9] C:\Program Files\pspvideo9\pspVideo9.exe -t
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - Global Startup: Adobe Reader Snelle start.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: SATARAID5.lnk = ?
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.eurosys.be/
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - http://www.fileplanet.com/fpdlmgr/cabs/FPDC_2.3.0.97.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {A8F2B9BD-A6A0-486A-9744-18920D898429} (ScorchPlugin Class) - http://www.sibelius.com/download/software/win/ActiveXPlugin.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {FC11A119-C2F7-46F4-9E32-937ABA26816E} (AMI DicomDir TreeView Control 2.1) - file://D:\CDVIEWER\CdViewer.cab
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

2. combofix
Eigenaar - 06-11-26 22:21:02,67 Service Pack 2
ComboFix 06.11.26 - Running from: "C:\Documents and Settings\Eigenaar\Mijn documenten"

(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\Program Files\Inetget2
C:\Program Files\Ipwins
C:\Program Files\Common Files\{38011677-08A3-2067-0602-051028040020}
C:\Program Files\Common Files\{B8011677-08A3-2067-0602-051028040020}


((((((((((((((((((((((((((((((( Files Created from 2006-10-26 to 2006-11-26 ))))))))))))))))))))))))))))))))))


2006-11-26 19:23 <DIR> d-------- C:\WINDOWS\pss
2006-11-26 17:44 <DIR> d-------- C:\Documents and Settings\Eigenaar\Application Data\Lavasoft
2006-11-26 17:33 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2006-11-26 17:33 <DIR> d-------- C:\Program Files\Grisoft
2006-11-26 17:18 <DIR> d-------- C:\WINDOWS\SxsCaPendDel
2006-11-26 17:17 <DIR> d--hs---- C:\Config.Msi
2006-11-26 16:42 138,565 --a------ C:\Documents and Settings\Eigenaar\mcnew.exe
2006-11-26 16:40 138,565 --a------ C:\WINDOWS\system32\mcnew.exe
2006-11-18 00:13 <DIR> d-------- C:\5604daea23d8ba85b16124b2b9d73f
2006-11-04 14:14 1,245,696 --a------ C:\WINDOWS\system32\msxml4.dll
2006-10-31 11:50 <DIR> d-------- C:\Documents and Settings\Eigenaar\Application Data\yahoo!
2006-10-31 05:34 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\yahoo!
2006-10-30 17:37 <DIR> d-------- C:\Program Files\mIRC


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


2006-11-26 22:23 -------- d-------- C:\Program Files\Common Files
2006-11-26 22:13 -------- d-------- C:\Program Files\Steam
2006-11-26 22:10 -------- d-------- C:\Program Files\DAEMON Tools
2006-11-26 19:29 -------- d-------- C:\Program Files\Mozilla Firefox
2006-11-26 17:44 -------- d-------- C:\Program Files\Lavasoft
2006-11-26 17:17 -------- d-------- C:\Program Files\MSN Messenger
2006-11-26 15:27 -------- d-------- C:\Documents and Settings\Eigenaar\Application Data\Azureus
2006-11-18 00:12 -------- d-------- C:\Program Files\Internet Explorer
2006-11-10 17:00 -------- d--h----- C:\Program Files\InstallShield Installation Information
2006-11-10 17:00 -------- d-------- C:\Program Files\SEGA
2006-10-31 05:33 -------- d-------- C:\Program Files\Yahoo!
2006-10-30 11:26 -------- d-------- C:\Program Files\THQ
2006-10-27 21:15 -------- d-------- C:\Documents and Settings\Eigenaar\Application Data\dvdcss
2006-10-22 22:57 -------- d-------- C:\Program Files\Games Workshop
2006-10-20 18:03 -------- d-------- C:\Documents and Settings\Eigenaar\Application Data\Google
2006-10-20 15:45 -------- d-------- C:\Program Files\Electronic Arts
2006-10-15 19:41 -------- d-------- C:\Program Files\Google
2006-10-15 19:40 -------- d-------- C:\Documents and Settings\Eigenaar\Application Data\Macromedia
2006-10-14 18:16 -------- d-------- C:\Program Files\World of Warcraft
2006-10-14 14:11 -------- d-------- C:\Program Files\Activision
2006-10-13 17:12 -------- d-------- C:\Program Files\LimeWire
2006-10-13 13:41 144384 --a------ C:\WINDOWS\system32\nwprovau.dll
2006-10-07 09:10 -------- d-------- C:\Program Files\Alcatel
2006-10-01 19:18 -------- d-------- C:\Program Files\QuickTime
2006-10-01 19:18 -------- d-------- C:\Program Files\Apple Software Update
2006-10-01 09:21 -------- d-------- C:\Program Files\Azureus
2006-09-30 15:48 -------- d-------- C:\Program Files\Defcon
2006-09-30 14:27 -------- d-------- C:\Documents and Settings\Eigenaar\Application Data\IGN_DLM
2006-09-13 06:07 1084416 --a------ C:\WINDOWS\system32\msxml3.dll
2006-08-31 12:49 98304 --a------ C:\WINDOWS\system32\CmdLineExt.dll


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries are not shown

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"MsnMsgr"="\"C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe\" /background"
"Steam"="\"C:\\Program Files\\Steam\\Steam.exe\" -silent"
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
"swg"="C:\\Program Files\\Google\\GoogleToolbarNotifier\\1.2.908.5008\\GoogleToolbarNotifier.exe"
"Yahoo! Pager"="\"C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe\" -quiet"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"NVMixerTray"="\"C:\\Program Files\\NVIDIA Corporation\\NvMixer\\NVMixerTray.exe\""
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"nwiz"="nwiz.exe /install"
"SunJavaUpdateSched"="C:\\Program Files\\Java\\jre1.5.0_03\\bin\\jusched.exe"
"DAEMON Tools"="\"C:\\Program Files\\DAEMON Tools\\daemon.exe\" -lang 1033"
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"NeroFilterCheck"="C:\\Program Files\\Common Files\\Ahead\\Lib\\NeroCheck.exe"
"PSPVideo9"="C:\\Program Files\\pspvideo9\\pspVideo9.exe -t"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"SpeedTouch USB Diagnostics"="\"C:\\Program Files\\Alcatel\\SpeedTouch USB\\Dragdiag.exe\" /icon"
"NvMediaCenter"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvMcTray.dll,NvTaskbarInit"
"!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"
"MSConfig"="C:\\WINDOWS\\PCHealth\\HelpCtr\\Binaries\\MSConfig.exe /auto"

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000001

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Mijn huidige introductiepagina"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,00,01,00,00,00,00,00,00,00,04,00,00,e2,03,00,00,00,\
00,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:04,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,ff,ff,00,00,ff,ff,00,00,ff,ff,ff,ff,ff,ff,\
ff,ff,04,00,00,00
"RestoredStateInfo"=hex:18,00,00,00,f2,01,00,00,23,00,00,00,7c,00,00,00,72,00,\
00,00,01,00,00,00

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Preloader van browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Cache-daemon voor onderdeelcategorieën"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091
"NoRecentDocsMenu"=dword:00000001

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"


Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\AppleSoftwareUpdate.job

Completion time: 06-11-26 22:24:03.93
C:\ComboFix.txt ... 06-11-26 22:24
P

PVBPVB

Legacy Member
3. AVG
---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 22:10:30 26/11/2006

+ Scan result:



C:\Documents and Settings\Eigenaar\Local Settings\Temp\b122.exe -> Adware.Maxifiles : Cleaned with backup (quarantined).
C:\Documents and Settings\Eigenaar\Local Settings\Temporary Internet Files\Content.IE5\CXE3KXIN\122[1].net -> Adware.Maxifiles : Cleaned with backup (quarantined).
C:\Program Files\ipwins\ipwins.exe -> Adware.Maxifiles : Cleaned with backup (quarantined).
C:\Documents and Settings\Eigenaar\Bureaublad\winstall.exe -> Adware.PurityScan : Cleaned with backup (quarantined).
C:\Documents and Settings\Eigenaar\Local Settings\Temporary Internet Files\Content.IE5\UAH93666\webinstall[1].exe -> Adware.PurityScan : Cleaned with backup (quarantined).
C:\Documents and Settings\Eigenaar\winstall.exe -> Adware.PurityScan : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{EDE6EDA1-8363-404B-AFCC-4B865EA5347D}\RP159\A0023057.exe -> Adware.PurityScan : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{EDE6EDA1-8363-404B-AFCC-4B865EA5347D}\RP159\A0024106.exe -> Adware.PurityScan : Cleaned with backup (quarantined).
C:\WINDOWS\system32\winstall.exe -> Adware.PurityScan : Cleaned with backup (quarantined).
C:\Program Files\DAEMON Tools\SetupDTSB.exe -> Adware.SaveNow : Cleaned with backup (quarantined).
C:\Documents and Settings\Eigenaar\Local Settings\Temporary Internet Files\Content.IE5\A98JK5CN\pic2038[1].pif -> Backdoor.Agent.aim : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{EDE6EDA1-8363-404B-AFCC-4B865EA5347D}\RP159\A0023088.rbf -> Backdoor.Agent.aim : Cleaned with backup (quarantined).
C:\Documents and Settings\Eigenaar\Local Settings\Temporary Internet Files\Content.IE5\P3JZHP0E\speedtest2[1].dll -> Not-A-Virus.Downloader.Win32.InsTool.a : Cleaned with backup (quarantined).
:mozilla.198:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.209:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.273:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.487:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.48:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.50:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.51:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.52:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.53:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.54:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.55:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.56:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.57:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.58:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Eigenaar\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Eigenaar\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Eigenaar\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Eigenaar\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Eigenaar\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Eigenaar\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.488:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.489:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.500:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
C:\Documents and Settings\Eigenaar\Cookies\eigenaar@adbrite[1].txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.551:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.552:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.553:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.554:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.462:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.433:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.547:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
:mozilla.513:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.454:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
C:\Documents and Settings\Eigenaar\Cookies\[email protected][2].txt -> TrackingCookie.Clickhype : Cleaned.
:mozilla.543:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.549:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.455:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Com : Cleaned.
C:\Documents and Settings\Eigenaar\Cookies\eigenaar@com[1].txt -> TrackingCookie.Com : Cleaned.
:mozilla.20:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.448:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.233:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.474:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.376:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Masterstats : Cleaned.
:mozilla.295:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.409:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
C:\Documents and Settings\Eigenaar\Cookies\[email protected][2].txt -> TrackingCookie.Overture : Cleaned.
:mozilla.450:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.451:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.452:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.453:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.402:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.403:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.203:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.204:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.205:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.206:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned.
:mozilla.464:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.322:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.323:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.324:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.325:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.326:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.479:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.210:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.300:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.432:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.468:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.469:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.222:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.223:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.224:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.225:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.226:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.227:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.228:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.229:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.94:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.95:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
C:\Documents and Settings\Eigenaar\Cookies\[email protected][1].txt -> TrackingCookie.Tacoda : Cleaned.
C:\Documents and Settings\Eigenaar\Cookies\eigenaar@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.19:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.116:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
C:\Documents and Settings\Eigenaar\Cookies\eigenaar@yadro[2].txt -> TrackingCookie.Yadro : Cleaned.
:mozilla.463:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.480:C:\Documents and Settings\Eigenaar\Application Data\Mozilla\Firefox\Profiles\yr3cn0pl.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\Documents and Settings\Eigenaar\Cookies\[email protected][1].txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\Documents and Settings\Eigenaar\Bureaublad\isetup.exe -> Trojan.Small : Cleaned with backup (quarantined).
C:\Documents and Settings\Eigenaar\Local Settings\Temporary Internet Files\Content.IE5\ZY9RLT8G\spot[1].exe -> Trojan.Small : Cleaned with backup (quarantined).
C:\Documents and Settings\Eigenaar\isetup.exe -> Trojan.Small : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{EDE6EDA1-8363-404B-AFCC-4B865EA5347D}\RP159\A0023056.exe -> Trojan.Small : Cleaned with backup (quarantined).
C:\WINDOWS\system32\isetup.exe -> Trojan.Small : Cleaned with backup (quarantined).


::Report end

voila dit zijn al mijn reportjes nadat ik de tests heb uitgevoerd, dus kan ik nu weer gewoon wl-messenger installeren ?

Heel erg bedankt alvast met de raad en instructies :niceone:
J

Jurgenv1

Legacy Member
* Verwijder volgende map:

C:\5604daea23d8ba85b16124b2b9d73f

* Voor de rest ziet het er goed uit, installeer messenger terug en vetel me hoe alles verder werkt. :)
J

Jurgenv1

Legacy Member
Graag gedaan. ;) Let nu op in het vervolg met wat ze doorsturen. :)
Het archief is een bevroren moment uit een vorige versie van dit forum, met andere regels en andere bazen. Deze posts weerspiegelen op geen enkele manier onze huidige ideeën, waarden of wereldbeelden en zijn op sommige plaatsen gecensureerd wegens ontoelaatbaar. Veel zijn in een andere tijdsgeest gemaakt, al dan niet ironisch - zoals in het ironische subforum Off-Topic - en zouden op dit moment niet meer gepost (mogen) worden. Toch bieden we dit archief nog graag aan als informatiedatabank en naslagwerk. Lees er hier meer over of start een gesprek met anderen.
Terug
Bovenaan