Archief - log van probleem in software topic

Hier de log van het probleem in onderstaand topic, waar ook staat wat ik al geprobeerd heb enzo:

log

https://www.beyondgaming.be/archive/software.22/klik-reactie-probleem.466103

EDIT
Logfile of HijackThis v1.99.1
Scan saved at 21:35:48, on 19/12/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\pavsrv51.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\AVENGINE.EXE
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\pavProxy.exe
C:\Program Files\ICQ\Icq.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\ine\Mijn documenten\INE\Programs\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files\Panda Software\Panda Antivirus Platinum\Inicio.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [Olympic] C:\Documents and Settings\ine\Application Data\sgrunt\IE4321.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Festoon] C:\Program Files\Santa Cruz Networks\Festoon\Festoon.exe /BOOT
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: U.S.Robotics WLAN Adapter Configuration Utility.lnk = ?
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O15 - Trusted Zone: http://www.destrafstestudent.be
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=67633
O16 - DPF: {1D0D9077-3798-49BB-9058-393499174D5D} - file://c:\counter.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5F0C30E4-1E72-4DCC-85E5-57810F1CA97B} (McUpdatePortalFactory Class) - http://www.amiuptodate.com/vsc/bin/1,0,0,9/McUpdatePortal.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/mcfscan/2,1,0,4918/mcfscan.cab
O16 - DPF: {F630A6F3-F89E-4374-99CC-28A8AA003208} - http://sls.switchpoint.com/Connect/switchpoint/5.1/Starter.cab
O18 - Protocol: Festoon - (no CLSID) - (no file)
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: MsgPlusLoader.dll
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Panda Firewall Service (PAVFIRES) - Panda Software - C:\Program Files\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - C:\Program Files\Panda Software\Panda Antivirus Platinum\pavsrv51.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

Je Java software is verouderd.
Oudere versies hebben lekken die malware de kans geeft om zich te installeren op je systeem.
Doe eerst deze stappen om Java te de-installeren en de nieuwere versie te installeren:

Download Java Runtime Environment (JRE) 6.0.

• Scroll omlaag naar : "The J2SE Runtime Environment (JRE) allows end-users to run Java applications".
• Klik op de "Download" knop aan de rechterkant.
• Vink aan: "Accept License Agreement".
• De pagina zal herladen.
• Klik op de link om Windows Offline Installation te downloaden met Meerdere-talen, en bewaar het naar je Bureaublad
  .
• Sluit alle programma's die eventueel open zijn - Zeker je web browser!
• Ga dan naar Start > Configuratiescherm > Software en verwijder alle oudere versies van Java uit de Softwarelijst.
• Vink alles aan met Java Runtime Environment (JRE of J2SE) in de naam.
• Klik dan op Verwijderen of op de Wijzig/Verwijder knop.
• Herhaal dit tot alle oudere versies verdwenen zijn.
• Na het verwijderen van alle oudere versies, herstart je pc.
• Dubbelklik vervolgens op jre-6-windows-i586.exe op je Bureaublad om de nieuwste versie van Java te installeren.

* Open hijackthis en vink volgende regels aan:

O4 - HKLM\..\Run: [Olympic] C:\Documents and Settings\ine\Application Data\sgrunt\IE4321.exe
O18 - Protocol: Festoon - (no CLSID) - (no file)

* Sluit dan alle vensters behalve hijackthis en klik op 'fix checked'

* Download en unzip Killbox naar je bureaublad.
Klik op killbox.exe.
Selecteer de optie "Delete on reboot".
In het veld "Full Path of File to Delete" kopieer en plak je het volgende:

C:\Documents and Settings\ine\Application Data\sgrunt\IE4321.exe

Klik op de knop: single file (!Belangrijk!)

Daarna, Klik op de rode cirkel met het wit kruisje erin.
Killbox zal zeggen dat deze file zal verwijderd worden on reboot.. vraagt om nu te rebooten. Klik YES.

Je pc moet nu rebooten.

* Download Dr.Web CureIt naar je bureaublad:
ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe

• Dubbelklik drweb-cureit.exe en sta het toe om de express scan te starten.
• Dit zal de bestanden scannen die momenteel in het geheugen geladen zijn en wanneer er iets gevonden wordt, klik de Yes to all knop bij de vraag 'cure it?'. Dit is enkel een korte scan.
• Eenmaal de korte scan is beeïndigd, Klik Options > Change Settings
• Kies de "Scan"-tab en verwijder het vinkje bij "Heuristic analyse"
• Terug in het hoofdvenster kan je de drives selecteren die je wilt laten scannen.
• Selecteer hier alle drives. Een rood bolletje zal dan tevoorschijn komen op de drives die je laat scannen.
• Klik daarna de groene pijl rechts om de scan te starten.
• Klik 'Yes to all' wanneer er gevraagd wordt om cure of move uit te voeren.
• Wanneer de scan gedaan is, kijk of je volgende icoontje kan aanklikken dat staat naast hetgeen gevonden werd:
  
• Indien wel, klik erop en daarna klik op het icoontje er net onder en kies: Move incurable zoals je zal zien in volgende afbeelding:
  
  
  
  Dit zal de bestanden verplaatsen naar volgende map %userprofile%\DoctorWeb\quarantaine-folder indien het niet gedesinfecteerd kan worden. (dit in het geval dat we samples nodig hebben)
• Na bovenstaande te selecteren, in het menu bovenaan van Dr.Web CureIt, klik file en kies save report list. Bewaar de log op je bureaublad.
• Sluit daarna Dr.Web Cureit.
• Herstart je computer!! Belangrijke stap, want het kan zijn dat Dr.Web Cureit bestanden zal verplaatsen/verwijderen tijdens herstart.
• Na het herstarten, Kopieer en plak de inhoud van die log die je eerder hebt bewaard in je volgende post met een nieuw hijackthis logje.

* Download en unzip Killbox naar je bureaublad.
Klik op killbox.exe.
Selecteer de optie "Delete on reboot".
In het veld "Full Path of File to Delete" kopieer en plak je het volgende:

C:\Documents and Settings\ine\Application Data\sgrunt\IE4321.exe

Klik op de knop: single file (!Belangrijk!)

Daarna, Klik op de rode cirkel met het wit kruisje erin.
Killbox zal zeggen dat deze file zal verwijderd worden on reboot.. vraagt om nu te rebooten. Klik YES.

Je pc moet nu rebooten.

Klik om te vergroten...

hier ging het mis... Ik kreeg het volgende:
"PendingFileRenameOperations Registry Data has been Removed by External Process!"

Kan dat zijn dat dat via Hijackthis al gedelete is, met op die fix checked te klikken?

BamBamsChica zei:

hier ging het mis... Ik kreeg het volgende:
"PendingFileRenameOperations Registry Data has been Removed by External Process!"

Kan dat zijn dat dat via Hijackthis al gedelete is, met op die fix checked te klikken?

Klik om te vergroten...

Nee je moet gewoon handmatig herstarten hoor, er is niks mis.

ok, zal ik direct doen dan

nieuwe Hijackthis:
Logfile of HijackThis v1.99.1
Scan saved at 19:16:22, on 25/12/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Santa Cruz Networks\Festoon\Festoon.exe
C:\Program Files\Java\jre1.6.0\bin\jusched.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\USR WLAN\USR 22Mbps WLAN Adapter\USRWLAN.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\pavsrv51.exe
C:\WINDOWS\system32\slserv.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\AVENGINE.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\pavProxy.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Documents and Settings\ine\Mijn documenten\INE\Programs\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files\Panda Software\Panda Antivirus Platinum\Inicio.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Festoon] C:\Program Files\Santa Cruz Networks\Festoon\Festoon.exe /BOOT
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0\bin\jusched.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: U.S.Robotics WLAN Adapter Configuration Utility.lnk = ?
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {1D0D9077-3798-49BB-9058-393499174D5D} - file://c:\counter.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5F0C30E4-1E72-4DCC-85E5-57810F1CA97B} (McUpdatePortalFactory Class) - http://www.amiuptodate.com/vsc/bin/1,0,0,9/McUpdatePortal.cab
O16 - DPF: {F630A6F3-F89E-4374-99CC-28A8AA003208} - http://sls.switchpoint.com/Connect/switchpoint/5.1/Starter.cab
O18 - Protocol: Festoon - (no CLSID) - (no file)
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: MsgPlusLoader.dll
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Panda Firewall Service (PAVFIRES) - Panda Software - C:\Program Files\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - C:\Program Files\Panda Software\Panda Antivirus Platinum\pavsrv51.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe


Cureit:

3.dat C:\Documents and Settings\ine Trojan.DownLoader.1296 Deleted.
cd_clint.dll C:\Documents and Settings\ine\Local Settings\Temp Adware.Cydoor Incurable.Moved.
mySetp.exe\data001 C:\Documents and Settings\ine\Local Settings\Temp\mySetp.exe Adware.MyWay
mySetp.exe\data002 C:\Documents and Settings\ine\Local Settings\Temp\mySetp.exe Adware.MyWay
mySetp.exe\data003 C:\Documents and Settings\ine\Local Settings\Temp\mySetp.exe Adware.MyWay
mySetp.exe C:\Documents and Settings\ine\Local Settings\Temp Archive contains infected objects Moved.
remove.exe C:\Documents and Settings\ine\Local Settings\Temp Trojan.MulDrop.1065 Incurable.Moved.
vxt1.game C:\Documents and Settings\ine\Local Settings\Temp Trojan.DownLoader.8077 Deleted.
vxt2.game C:\Documents and Settings\ine\Local Settings\Temp Trojan.DownLoader.9572 Deleted.
vxt3.game C:\Documents and Settings\ine\Local Settings\Temp Trojan.DownLoader.9540 Deleted.
vxt4.game C:\Documents and Settings\ine\Local Settings\Temp Trojan.Spambot Deleted.
__unin__.exe C:\Documents and Settings\ine\Local Settings\Temp Adware.Altnet Incurable.Moved.
jb[1].exe C:\Documents and Settings\ine\Local Settings\Temporary Internet Files\Content.IE5\KCOUPVC9 Trojan.PWS.Gamania Deleted.
wwww[1].exe C:\Documents and Settings\ine\Local Settings\Temporary Internet Files\Content.IE5\WNARQ5HZ BackDoor.Generic.1468 Deleted.
installfolderguard.exe C:\Documents and Settings\ine\Mijn documenten\INE\Programs Adware.SaveNow Incurable.Moved.
mirc.exe C:\Documents and Settings\ine\Mijn documenten\INE\Programs\mIRC\ZwamScript Program.mIRC.603 Incurable.Moved.
mirc.exe C:\Documents and Settings\ine\Mijn documenten\INE\ZwamScript Program.mIRC.603 Incurable.Moved.
dietk3.dat C:\Program Files\Diet K\dk Adware.Cydoor Incurable.Moved.
26FAFC56-8007-422D-A9B7-E82815 C:\Program Files\Microsoft AntiSpyware\Quarantine\3017B76F-EE35-4C3A-BF9C-DBE95C Adware.Altnet Incurable.Moved.
191381E6-0FAA-40C5-A7E4-43A361\data001 C:\Program Files\Microsoft AntiSpyware\Quarantine\CC0DD5C9-E73C-46D9-AA55-467714\191381E6-0FAA-40C5-A7E4-43A361 Adware.PeerNet
191381E6-0FAA-40C5-A7E4-43A361 C:\Program Files\Microsoft AntiSpyware\Quarantine\CC0DD5C9-E73C-46D9-AA55-467714 Archive contains infected objects Moved.
A0631782.dll C:\System Volume Information\_restore{A2F34569-C359-454C-A470-5B4F734E68AF}\RP873 Trojan.PWS.Gamania Deleted.
A0631783.exe C:\System Volume Information\_restore{A2F34569-C359-454C-A470-5B4F734E68AF}\RP873 BackDoor.Generic.1468 Deleted.
A0631784.exe C:\System Volume Information\_restore{A2F34569-C359-454C-A470-5B4F734E68AF}\RP873 Trojan.PWS.Gamania Deleted.
A0631789.dll C:\System Volume Information\_restore{A2F34569-C359-454C-A470-5B4F734E68AF}\RP874 Trojan.PWS.Gamania Deleted.
A0631790.exe C:\System Volume Information\_restore{A2F34569-C359-454C-A470-5B4F734E68AF}\RP874 Trojan.PWS.Gamania Deleted.
A0631791.exe C:\System Volume Information\_restore{A2F34569-C359-454C-A470-5B4F734E68AF}\RP874 BackDoor.Generic.1468 Deleted.
A0631826.dll C:\System Volume Information\_restore{A2F34569-C359-454C-A470-5B4F734E68AF}\RP874 Trojan.PWS.Tencent Deleted.
A0631828.EXE C:\System Volume Information\_restore{A2F34569-C359-454C-A470-5B4F734E68AF}\RP874 BackDoor.Generic.1468 Deleted.
a.exe C:\WINDOWS\Downloaded Program Files Trojan.DownLoader.2785 Deleted.
dropper.exe C:\WINDOWS\Downloaded Program Files Trojan.MulDrop.2020 Deleted.
popcaploader.dll C:\WINDOWS\Downloaded Program Files Program.PopcapLoader Incurable.Moved.
WebP2PInstaller.dll C:\WINDOWS\Downloaded Program Files Adware.PeerNet Incurable.Moved.
win32.exe C:\WINDOWS\Downloaded Program Files Trojan.DownLoader.10557 Deleted.
dropper.exe C:\WINDOWS\Downloaded Program Files\CONFLICT.1 Trojan.MulDrop.2020 Deleted.

* Open hijackthis en vink volgende regel aan:

O18 - Protocol: Festoon - (no CLSID) - (no file)

* Sluit dan alle vensters behalve hijackthis en klik op 'fix checked'

* Download en installeer AVG Anti-Spyware.

• 
  Na de installatie, open AVG Anti-Spyware:
  * onder "Status", klik op Change state naast "Resident shield". (wijzig van active naar inactive!)
  * onder "Update", klik op de Start update knop.
  * onder "Scanner", tab "Settings":
  • - onder "How to act?", klik op "Recommended actions" en selecteer Quarantine. (ZEER BELANGRIJK!)
    * onder "Reports", selecteer Automatically generate report after every scan en verwijder het vinkje bij Only if threats were found
  Sluit AVG Anti-Spyware. Laat het nog niet scannen.

* Als je Adaware SE nog niet geïnstalleerd hebt, download, installeer en update het dan volgens de richtlijnen
die je kan vinden op: http://users.pandora.be/marcvn/spyware/1414188.htm
Download link van Ad-aware: http://www.lavasoftusa.com/products/ad-aware_se_personal.php

* Start je computer op in VEILIGE MODUS

* Voer een volledige scan uit met Adaware en verwijder alles wat gevonden wordt.

* Start AVG Anti-Spyware.

• * Klik op Scan en kies Complete System Scan.
  Na de scan; volg onderstaande instructies :
  BELANGRIJK : Klik niet op de "Save Scan Report" knop vooraleer je de "Apply all Actions" knop hebt aangeklikt !
  * Draag er zorg voor dat Set all elements to: op Quarantine staat (1),
  zoniet klik op de link en kies Quarantine in de popup menu. (2)
  (Dit geldt niet voor cookies, deze worden onveranderlijk gedelete !)
  * Onderaan het venster klik op de Apply all Actions knop. (3)
  
  
  
  * Wanneer je de melding krijgt 'All actions have been applied', klik je onderaan op de knop Save Report.

* Herstart je computer in normale modus.

* Download ATF cleaner (by Atribune)

Dubbelklik op ATF cleaner om het programma te starten.
Op het tabblad "Main", plaats je een vinkje bij Select All.
Klik op de knop Empty Selected.

Gebruik je ook Firefox als browser:
Klik op tabblad "Firefox", plaats een vinkje bij Select All.
Wil je de door Firefox opgeslagen wachtwoorden behouden, dan klik je in het venster dat verschijnt op "No".
(dit verwijdert het vinkje bij "Firefox saved passwords")
Klik op de knop Empty Selected.

Gebruik je ook Opera als browser:
Klik op tabblad "Opera", plaats een vinkje bij Select All.
Wil je de door Opera opgeslagen wachtwoorden behouden, dan klik je in het venster dat verschijnt op "No".
Klik op de knop Empty Selected.
Ga naar het tabblad "Main" en klik op de knop Exit om het programma af te sluiten.

* Post dan een nieuw hijackthis logje hier met het rapport van AVG antispyware.

nieuwe Hijackthis:

Logfile of HijackThis v1.99.1
Scan saved at 12:38:14, on 26/12/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\Program Files\Santa Cruz Networks\Festoon\Festoon.exe
C:\Program Files\Java\jre1.6.0\bin\jusched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\USR WLAN\USR 22Mbps WLAN Adapter\USRWLAN.EXE
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\pavsrv51.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\AVENGINE.EXE
C:\Program Files\Panda Software\Panda Antivirus Platinum\pavProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\taskmgr.exe
C:\Documents and Settings\ine\Mijn documenten\INE\Programs\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files\Panda Software\Panda Antivirus Platinum\Inicio.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Festoon] C:\Program Files\Santa Cruz Networks\Festoon\Festoon.exe /BOOT
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: U.S.Robotics WLAN Adapter Configuration Utility.lnk = ?
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {1D0D9077-3798-49BB-9058-393499174D5D} - file://c:\counter.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5F0C30E4-1E72-4DCC-85E5-57810F1CA97B} (McUpdatePortalFactory Class) - http://www.amiuptodate.com/vsc/bin/1,0,0,9/McUpdatePortal.cab
O16 - DPF: {F630A6F3-F89E-4374-99CC-28A8AA003208} - http://sls.switchpoint.com/Connect/switchpoint/5.1/Starter.cab
O18 - Protocol: Festoon - (no CLSID) - (no file)
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: MsgPlusLoader.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Panda Firewall Service (PAVFIRES) - Panda Software - C:\Program Files\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - C:\Program Files\Panda Software\Panda Antivirus Platinum\pavsrv51.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

AVG Antispyware:

+ Created at: 12:22:26 26/12/2006
+ Scan result:

C:\Documents and Settings\ine\DoctorWeb\Quarantine\26FAFC56-8007-422D-A9B7-E82815 -> Adware.Altnet : Cleaned with backup (quarantined).
C:\Documents and Settings\ine\DoctorWeb\Quarantine\__unin__.exe -> Adware.Altnet : Cleaned with backup (quarantined).
C:\Documents and Settings\ine\DoctorWeb\Quarantine\dietk3.dat -> Adware.Cydoor : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{A2F34569-C359-454C-A470-5B4F734E68AF}\RP877\A0632482.dll -> Adware.Cydoor : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{A2F34569-C359-454C-A470-5B4F734E68AF}\RP877\A0632483.dll -> Adware.PeerNet : Cleaned with backup (quarantined).
C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBarBHO.dll -> Adware.Viewpoint : Cleaned with backup (quarantined).
C:\Documents and Settings\ine\DoctorWeb\Quarantine\remove.exe -> Downloader.Keenval.f : Cleaned with backup (quarantined).
C:\Documents and Settings\ine\Mijn documenten\INE\Programs\MSN\MsgPlus-254.exe/sponsor.exe -> Downloader.Swizzor.ag : Cleaned with backup (quarantined).
C:\Documents and Settings\ine\Mijn documenten\INE\Programs\MSN\MsgPlus-301.exe/Sponsor.exe -> Downloader.Swizzor.bt : Cleaned with backup (quarantined).
C:\Documents and Settings\ine\DoctorWeb\Quarantine\popcaploader.dll -> Not-A-Virus.Downloader.Win32.PopCap.b : Cleaned with backup (quarantined).
:mozilla.745:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.100:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.728:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.79:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.80:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.81:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.82:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.83:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.84:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.84:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.85:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.85:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.86:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.86:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.87:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.87:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.88:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.89:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.90:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.91:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.92:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.93:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.94:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.95:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.96:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.97:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.98:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.99:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\ine\Cookies\ine@adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.348:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.349:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.436:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.437:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.200:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.201:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.202:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.203:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.204:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.205:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.351:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.249:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.36:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
C:\Documents and Settings\ine\Cookies\ine@atdmt[1].txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.282:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Belstat : Cleaned.
:mozilla.283:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Belstat : Cleaned.
:mozilla.284:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Belstat : Cleaned.
:mozilla.285:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Belstat : Cleaned.
:mozilla.267:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Bfast : Cleaned.
:mozilla.709:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Bfast : Cleaned.
:mozilla.319:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.327:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.567:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.568:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
C:\Documents and Settings\ine\Cookies\ine@burstnet[1].txt -> TrackingCookie.Burstnet : Cleaned.
C:\Documents and Settings\ine\Cookies\[email protected][1].txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.268:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.269:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.270:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.271:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.272:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.273:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.300:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.714:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Clickhype : Cleaned.
:mozilla.322:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.323:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.857:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.858:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Com : Cleaned.
C:\Documents and Settings\ine\Cookies\ine@com[1].txt -> TrackingCookie.Com : Cleaned.
:mozilla.697:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned.
:mozilla.397:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Cqcounter : Cleaned.
:mozilla.118:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.136:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.137:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.72:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Documents and Settings\ine\Cookies\ine@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.348:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Estat : Cleaned.
:mozilla.334:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.335:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.350:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.429:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.150:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.153:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.154:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.155:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.156:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.192:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.193:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.194:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.195:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.196:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.302:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.45:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.46:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.47:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.48:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.49:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.50:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.56:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.57:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.58:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.59:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.52:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.53:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.90:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.91:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.92:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.93:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.94:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.329:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.211:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.212:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.214:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.221:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.222:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.223:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.224:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.225:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.226:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.227:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.228:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.264:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.318:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.509:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.683:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.281:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Hitslink : Cleaned.
:mozilla.282:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Hitslink : Cleaned.
:mozilla.283:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Hitslink : Cleaned.
:mozilla.284:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Hitslink : Cleaned.
:mozilla.848:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Hitslink : Cleaned.
:mozilla.849:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Hitslink : Cleaned.
:mozilla.850:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Hitslink : Cleaned.
:mozilla.851:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Hitslink : Cleaned.
:mozilla.184:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Ivwbox : Cleaned.
C:\Documents and Settings\ine\Cookies\ine@ivwbox[2].txt -> TrackingCookie.Ivwbox : Cleaned.
:mozilla.197:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Komtrack : Cleaned.
:mozilla.198:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Komtrack : Cleaned.
C:\Documents and Settings\ine\Cookies\[email protected][1].txt -> TrackingCookie.Masterstats : Cleaned.
:mozilla.199:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.220:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.157:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.158:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.159:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.164:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.320:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.321:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.322:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.323:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.324:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.325:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.326:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.327:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.344:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.345:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.723:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
C:\Documents and Settings\ine\Cookies\[email protected][1].txt -> TrackingCookie.Planetactive : Cleaned.
C:\Documents and Settings\ine\Cookies\[email protected][1].txt -> TrackingCookie.Porntrack : Cleaned.
:mozilla.169:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Revenue : Cleaned.
:mozilla.332:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Revenue : Cleaned.
:mozilla.587:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Revenue : Cleaned.
:mozilla.405:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.406:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.407:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.408:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.110:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.124:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.260:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.261:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.324:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.388:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.452:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.475:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.491:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.499:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.518:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.681:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.701:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.702:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.747:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.748:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
C:\Documents and Settings\ine\Cookies\[email protected][2].txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.134:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Starware : Cleaned.
:mozilla.287:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Starware : Cleaned.
:mozilla.288:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Starware : Cleaned.
:mozilla.289:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Starware : Cleaned.
:mozilla.775:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Starware : Cleaned.
:mozilla.838:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Starware : Cleaned.
:mozilla.839:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Starware : Cleaned.
:mozilla.156:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.161:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.162:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.163:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.

vervolg in volgende post

:mozilla.164:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.165:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.168:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.169:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.170:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.171:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.172:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.172:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.173:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.173:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.174:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.175:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.176:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.177:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.372:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.373:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
C:\Documents and Settings\ine\Cookies\[email protected][1].txt -> TrackingCookie.Tacoda : Cleaned.
C:\Documents and Settings\ine\Cookies\ine@tacoda[2].txt -> TrackingCookie.Tacoda : Cleaned.
C:\Documents and Settings\ine\Cookies\[email protected][2].txt -> TrackingCookie.Texttbnru : Cleaned.
:mozilla.153:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.184:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.188:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.189:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.190:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.191:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.175:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.54:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.121:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.241:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Yadro : Cleaned.
:mozilla.244:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Yadro : Cleaned.
C:\Documents and Settings\ine\Cookies\ine@yadro[2].txt -> TrackingCookie.Yadro : Cleaned.
:mozilla.231:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.232:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.233:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.234:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.235:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.89:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.95:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.96:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\c5vzm3fi.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\Documents and Settings\ine\Cookies\[email protected][1].txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.485:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.486:C:\Documents and Settings\ine\Application Data\Mozilla\Firefox\Profiles\8jjewsh4.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
C:\Documents and Settings\ine\Local Settings\Temp\fjdg.exe -> Trojan.Dialer.gu : Cleaned with backup (quarantined).
C:\WINDOWS\demoresoxe.dll -> Trojan.Dialer.gu : Cleaned with backup (quarantined).
C:\WINDOWS\Downloaded Program Files\AUTO_2184_N.exe -> Trojan.Dialer.hh : Cleaned with backup (quarantined).
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\AUTO_2184_N.exe -> Trojan.Dialer.hh : Cleaned with backup (quarantined).

::Report end

Ziet er goed uit, hoe werkt alles verder?

seems to work maar dat was al ergens bij één van de eerste stappen Maar ik had ondertussen nog iets anders van crap binnengekregen, ma da was met systemrestore vanzelf weggegaan. Nu lijkt alles opgelost Heel fel bedankt.

Hoe komt dat eigenlijk dat ik met ne geupdate mcaffee nix van al die dingen vond? Met Cureit had ik 33 virussen ofzoiets

McAfee is dan ook niet een antivirus die ik aanraad wegens grof geheugen verbruik en iets minder waar voor het geld.

Mja, daarvoor had ik Panda met een verlopen licentie, die ik nu nog altijd heb... tijd dat ik iets deftig zoek

Installeer een gratis en goeie AV die je pc niet zo vertraagd: AVG Free antivirus, antivir en Avast! Home edition zijn er een paar van. Voor Avast moet je wel nog eens gratis registreren voor je de antivirus kan gebruiken, zie hier voor meer info.

help, het is terug ik heb nochtans altijd die spyware en antivirus opstaan nu..

Post gewoon een nieuw logje.

Logfile of HijackThis v1.99.1
Scan saved at 22:47:05, on 29/12/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\Program Files\Java\jre1.6.0\bin\jusched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\USR WLAN\USR 22Mbps WLAN Adapter\USRWLAN.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Adobe\Acrobat 6.0\Reader\AcroRd32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Documents and Settings\ine\Mijn documenten\INE\Programs\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Festoon] C:\Program Files\Santa Cruz Networks\Festoon\Festoon.exe /BOOT
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: U.S.Robotics WLAN Adapter Configuration Utility.lnk = ?
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {1D0D9077-3798-49BB-9058-393499174D5D} - file://c:\counter.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5F0C30E4-1E72-4DCC-85E5-57810F1CA97B} (McUpdatePortalFactory Class) - http://www.amiuptodate.com/vsc/bin/1,0,0,9/McUpdatePortal.cab
O16 - DPF: {F630A6F3-F89E-4374-99CC-28A8AA003208} - http://sls.switchpoint.com/Connect/switchpoint/5.1/Starter.cab
O18 - Protocol: Festoon - (no CLSID) - (no file)
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: MsgPlusLoader.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe



zo...

der staat btw zo'n bestandje op mn bureaublad met als naam ~ en dat niet herkend wordt.. Hoe komt dat? 'k heb dat heel vroeger op andere pc's ook al wel es gehad, ma nooit geweten waar dat vandaan kwam..

* Volgende regel moet je fixen in hijackthis:

O16 - DPF: {1D0D9077-3798-49BB-9058-393499174D5D} - file://c:\counter.cab

Doe anders eens opnieuw een scan met dr.web en post het rapport hier.

BamBamsChica zei:

der staat btw zo'n bestandje op mn bureaublad met als naam ~ en dat niet herkend wordt.. Hoe komt dat? 'k heb dat heel vroeger op andere pc's ook al wel es gehad, ma nooit geweten waar dat vandaan kwam..

Klik om te vergroten...

Bug met Outlook Express dacht ik