Archief - Nogal irritant

Het archief is een bevroren moment uit een vorige versie van dit forum, met andere regels en andere bazen. Deze posts weerspiegelen op geen enkele manier onze huidige ideeën, waarden of wereldbeelden en zijn op sommige plaatsen gecensureerd wegens ontoelaatbaar. Veel zijn in een andere tijdsgeest gemaakt, al dan niet ironisch - zoals in het ironische subforum Off-Topic - en zouden op dit moment niet meer gepost (mogen) worden. Toch bieden we dit archief nog graag aan als informatiedatabank en naslagwerk. Lees er hier meer over of start een gesprek met anderen.
G

Ghastly

Legacy Member
Ik zit met een nogal irritant gevalleke hier. Waarschijnlijk opgeraapt door de vriendin met msn...
Popups (drivecleaner, "your system is running slow",...), soms taakbalk weg, soms minuten lang zwart scherm bij opstarten, the whole deal...


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:53:31, on 10/24/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\Program Files\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Lokale service')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Snelle start.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Download Web Info - C:\Program Files\Dataroute\Download.htm
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O20 - AppInit_DLLs: C:\WINDOWS\system32\wmfhotfix.dll
O22 - SharedTaskScheduler: apathies - {aed6f6a3-183c-488d-9f90-23db99f56e7f} - (no file)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: DomainService - Unknown owner - C:\WINDOWS\system32\mvmfseiw.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 4325 bytes

Mercikes!

Ghastly
J

Jurgenv1

Legacy Member
* Download SmitfraudFix (by S!Ri)
Unzip het naar je bureaublad.
Lees hier hoe je op de juiste wijze moet unzippen/uitpakken.
Dit zal een nieuwe map op je bureaublad aanmaken met de naam Smitfraudfix
Verder nog niet gebruiken.

* Start nu je pc op in VEILIGE MODE. ( zonder netwerkondersteuning! )
Hoe start ik in veilige mode op.

* Clean de Cache and Cookies in IE:
  • Sluit Internet Explorer.
  • Ga naar Configuratiescherm > Internet Opties > tab Algemeen
  • Klik de "Cookies verwijderen" knop
  • Klik op de "Bestanden verwijderen" knop ernaast
  • Vink aan: "Ook alle off line items verwijderen", klik OK
* Clean de Cache and Cookies in Firefox (In geval Firefox geïnstalleerd is):
  • Go to Extra > Opties.
  • Klik Privacy in het menu.
  • Klik op de knop wissen (Geschiedenis, Cookies, Cache).
  • Klik OK om het venster opnieuw te sluiten.
* Clean andere Temporary files + Prullenbak
  • Ga naar start > uitvoeren en typ: cleanmgr en klik ok.
  • Laat het je systeem scannen op bestanden die moeten verwijderd worden
  • Zorg er wel voor dat je daar enkel maar 'tijdelijke bestanden', 'tijdelijke internetbestanden' en 'prullenbak' staan aangevinkt.
  • Klik daarna op ok.
* Open de SmitfraudFix map en dubbelklik smitfraudfix.cmd
Kies optie #2 - Clean door 2 te typen en op "Enter" te klikken.

Er zal gevraagd worden : "Registry cleaning - Do you want to clean the registry ?"; antwoord "Yes/ja" door Y te typen en daarna op "Enter" te klikken. Dit zal je bureaublad terug herstellen en registersleutels die deze infectie heeft gemaakt terug verwijderen.

Daarna zal de tool nagaan als wininet.dll is geïnfecteerd. Indien dit het geval is, zal er gevraagd worden om de geïnfecteerde wininet.dll te herplaatsen met een niet geïnfecteerde kopie van wininet.dll aanwezig op je computer (indien gevonden); antwoord "Yes/ja" door Y te typen en daarna op Enter te klikken.

De tool zal daarna je computer opnieuw laten opstarten om de restanten te verwijderen;
Indien het niet automatisch opstart, start je pc zelf opnieuw op naar normale mode terug (dus geen veilige mode)
Een log zal openen na het opnieuw opstarten. Deze bevindt zich ook hier: C:\rapport.txt
Ik heb die log later nodig als checkup.

Opgelet : Optie #2 gebruiken op een niet geïnfecteerde computer zal uw bureaublad verwijderen.

* Voer een onlinescan uit met Panda: http://www.pandasoftware.com/products/activescan.htm
Vink aan: All my computer
Zorg ervoor dat alles aangevinkt is in de scanopties.

Na de scan kan je een log laten maken. Bewaar die log naar je bureaublad en kopieer en plak die in je volgend bericht,
samen met een nieuwe HijackThis Log en de log van smitfraudfix ( C:\rapport.txt )
G

Ghastly

Legacy Member
Oke, niks in safemode kunnen doen, want explorer wou daar niet werken. Als ik een nieuw proces aanmaakte had ik niet genoeg tijd om een map open te doen voor explorer (en dus ook mijn taakblak) weer verdween. Dus alles in normal mode...

Hijack this:
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\RunDll32.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\notepad.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Lokale service')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Snelle start.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Download Web Info - C:\Program Files\Dataroute\Download.htm
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O20 - AppInit_DLLs: C:\WINDOWS\system32\wmfhotfix.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: DomainService - Unknown owner - C:\WINDOWS\system32\mvmfseiw.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

SmitFraudFix

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{aed6f6a3-183c-488d-9f90-23db99f56e7f}"="apathies"


»»»»»»»»»»»»»»»»»»»»»»»» Killing process


»»»»»»»»»»»»»»»»»»»»»»»» hosts


127.0.0.1 localhost

»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files

C:\DOCUME~1\ALLUSE~1\MENUST~1\Online Security Guide.url Deleted
C:\DOCUME~1\ALLUSE~1\MENUST~1\Security Troubleshooting.url Deleted
C:\DOCUME~1\Brett\FAVORI~1\Online Security Test.url Deleted

»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: VIA VT6105 Rhine III Fast Ethernet Adapter - Pakketplanner-minipoort
DNS Server Search Order: 192.168.2.1

HKLM\SYSTEM\CCS\Services\Tcpip\..\{0DDFEBD1-09E7-4950-8209-D37814F79A6F}: DhcpNameServer=192.168.2.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{0DDFEBD1-09E7-4950-8209-D37814F79A6F}: DhcpNameServer=192.168.2.1
HKLM\SYSTEM\CS2\Services\Tcpip\..\{0DDFEBD1-09E7-4950-8209-D37814F79A6F}: DhcpNameServer=192.168.123.254
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.2.1
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.2.1
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.123.254


»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

Registry Cleaning done.

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» End


De rest volgt...
G

Ghastly

Legacy Member
Panda deel1:
Incident Status Location

Spyware:Spyware/Virtumonde Not disinfected C:\WINDOWS\system32\ddayv.dll
Adware:adware/ist.istbar Not disinfected Windows Registry
Potentially unwanted tool:Application/Processor Not disinfected C:\Documents and Settings\Brett\Bureaublad\Smartfix\SmitfraudFix\Process.exe
Virus:Trj/Rebooter.J Disinfected C:\Documents and Settings\Brett\Bureaublad\Smartfix\SmitfraudFix\Reboot.exe
Potentially unwanted tool:Application/SuperFast Not disinfected C:\Documents and Settings\Brett\Bureaublad\Smartfix\SmitfraudFix\restart.exe
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Brett\Cookies\brett@atdmt[1].txt
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Brett\Cookies\brett@doubleclick[1].txt
Adware:Adware/WinAntivirus2006 Not disinfected C:\Documents and Settings\Brett\Local Settings\Temp\nipkuksy.dll
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\afyhpudq.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\aiqvqlwm.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\ancrkrwf.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\apgvxwso.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\awishirs.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\awlpiead.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\blmskjhv.exe
Spyware:Spyware/Virtumonde Not disinfected C:\WINDOWS\system32\bpqptaeg.dll
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\bqgoeqkw.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\bshgcqqr.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\byjroocn.exe
Adware:Adware/eZula Not disinfected C:\WINDOWS\system32\bytbmsfb.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\cayswlxw.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\cowfokft.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\crbqeonc.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\criqgvkk.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\csngjced.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\dcxyawka.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\dnigctim.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\dvnilhgi.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\eaxuxcap.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\eepnauwl.exe
Adware:Adware/eZula Not disinfected C:\WINDOWS\system32\emiwwmlv.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\enlllqap.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\esqcvpus.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\feueupbr.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\fmhxdafl.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\fqhggojg.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\fqnjtjrn.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\ftnhaxyk.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\fvyyhrou.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\fwjiwehp.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\fxhcyqvc.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\ggypdvlh.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\gmoiguwm.exe
Adware:Adware/eZula Not disinfected C:\WINDOWS\system32\govjplxm.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\gpusvdym.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\hkdmmdrx.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\hpretfws.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\iabqvrcx.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\idlluqgg.exe
Spyware:Spyware/Virtumonde Not disinfected C:\WINDOWS\system32\iifghif.dll
Virus:Trj/Downloader.OZB Disinfected
G

Ghastly

Legacy Member
Panda deel 2:
C:\WINDOWS\system32\ikydcydm.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\irlbbrtc.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\irybacbq.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\jafbmosa.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\jkbmhurw.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\joslmvhc.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\jxrvsxxy.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\katnugmg.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\kfqtpqkr.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\lgwornvf.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\lhbevktl.exe
Spyware:Spyware/Virtumonde Not disinfected C:\WINDOWS\system32\ljjiife.dll
Adware:Adware/eZula Not disinfected C:\WINDOWS\system32\ljkiganv.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\lkruovhq.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\lojhiesg.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\lwcwkgoo.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\lyldopxl.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\lyyyndyj.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\mmxcuqab.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\mmyduthl.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\mrumickp.exe
Spyware:Spyware/Virtumonde Not disinfected C:\WINDOWS\system32\mxlbaohy.dll
Adware:Adware/eZula Not disinfected C:\WINDOWS\system32\narwnugd.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\nndhtxnx.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\npeatljq.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\npvwbggs.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\nukuihfj.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\ogwvqadx.exe
Virus:Trj/Downloader.OZB Disinfected
G

Ghastly

Legacy Member
Panda deel 3:
C:\WINDOWS\system32\oodvjtyh.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\osgytpnd.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\pbtlohuw.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\piebwepv.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\pjggnybd.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\ppwgyuaf.exe
Potentially unwanted tool:Application/Processor Not disinfected C:\WINDOWS\system32\Process.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\pwiebild.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\pwqpyicn.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\qlwsixcg.exe
Adware:Adware/eZula Not disinfected C:\WINDOWS\system32\rfnxrhul.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\rfpxyhww.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\rqkfvbwh.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\scusurtj.exe
Spyware:Spyware/Virtumonde Not disinfected C:\WINDOWS\system32\ssqrssq.dll
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\tckteauc.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\tlpqltxw.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\tnstljyk.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\tuxbtnhf.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\txhlsxau.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\ukebxump.exe
Adware:Adware/eZula Not disinfected C:\WINDOWS\system32\uqtiolgj.exe
Adware:Adware/eZula Not disinfected C:\WINDOWS\system32\vdrxpraa.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\vickbohm.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\vkshdmgi.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\vlgoaqda.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\vmbwvlec.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\vsrayupp.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\vusvmise.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\wadiqmbh.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\wsjgmmox.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\wtdegicy.exe
Adware:Adware/eZula Not disinfected C:\WINDOWS\system32\wuyowayg.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\xfqdtfly.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\xmaocjxa.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\xnildacl.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\xogtkotq.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\xsjhwgcr.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\xxacglgj.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\yenftpto.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\yifankul.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\yikxtyer.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\yktfdqwr.exe
Virus:Trj/Downloader.OZB Disinfected C:\WINDOWS\system32\yvgggmyf.exe
Adware:Adware/IST.ISTBar Not disinfected D:\Brett\downloads\Installers\Security\CRACK[1].CD-GetDataBack_for_FAT_v1.02.zip[adi.exe]
Potentially unwanted tool:Application/DriveCleaner Not disinfected D:\Brett\Temps\installdrivecleanerstart_nl.exe
Potentially unwanted tool:Application/Processor Not disinfected D:\Brett\Temps\SmitfraudFix.zip[SmitfraudFix/Process.exe]
Virus:Trj/Rebooter.J Disinfected D:\Brett\Temps\SmitfraudFix.zip[SmitfraudFix/Reboot.exe]
Potentially unwanted tool:Application/SuperFast Not disinfected D:\Brett\Temps\SmitfraudFix.zip[SmitfraudFix/restart.exe]

Ik zit precies met problemen...
J

Jurgenv1

Legacy Member
Download combofix.exe: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Plaats het op je bureaublad.
Dubbelklik er op om het programma te starten.
In het scherm dat verschijnt tik je een Y in om het cleaningsprocess te starten.
Volg de instructies op het scherm.
Als het tooltje klaar is, opent er een logfile (combofix.txt) Post de inhoud van dit bestandje samen met een nieuwe hijackthislog.
G

Ghastly

Legacy Member
ComboFix 07-10-23.1 - Brett 2007-10-25 17:09:03.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1043.18.204 [GMT 2:00]
Gestart vanuit: D:\Brett\Temps\ComboFix(2).exe
.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Previous Run -------
.
C:\WINDOWS\cookies.ini
C:\WINDOWS\system32\bpqptaeg.dll
C:\WINDOWS\system32\bytbmsfb.exe
C:\WINDOWS\system32\ddayv.dll
C:\WINDOWS\system32\dwhdivyn.dll
C:\WINDOWS\system32\emiwwmlv.exe
C:\WINDOWS\system32\fhpasfwl.dll
C:\WINDOWS\system32\geatpqpb.ini
C:\WINDOWS\system32\govjplxm.exe
C:\WINDOWS\system32\gxfqxqxq.dll
C:\WINDOWS\system32\hnujaamn.dll
C:\WINDOWS\system32\jqlermcs.dll
C:\WINDOWS\system32\ljkiganv.exe
C:\WINDOWS\system32\lppagceg.dll
C:\WINDOWS\system32\mxlbaohy.dll
C:\WINDOWS\system32\narwnugd.exe
C:\WINDOWS\system32\qhdhluwd.dll
C:\WINDOWS\system32\rfnxrhul.exe
C:\WINDOWS\system32\siybuepm.dll
C:\WINDOWS\system32\tcuobnwu.dll
C:\WINDOWS\system32\uqtiolgj.exe
C:\WINDOWS\system32\usjrtwbu.dll
C:\WINDOWS\system32\vdrxpraa.exe
C:\WINDOWS\system32\vppnupxf.dll
C:\WINDOWS\system32\vtuhgppl.dll
C:\WINDOWS\system32\vyadd.bak1
C:\WINDOWS\system32\vyadd.bak2
C:\WINDOWS\system32\vyadd.ini
C:\WINDOWS\system32\vyadd.ini2
C:\WINDOWS\system32\vyadd.tmp
C:\WINDOWS\system32\wuyowayg.exe
C:\WINDOWS\system32\yhoablxm.ini

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.
-------\LEGACY_DOMAINSERVICE
-------\DomainService




(((((((((((((((((((( Bestanden Gemaakt van 2007-09-25 to 2007-10-25 ))))))))))))))))))))))))))))))
.

2007-10-25 16:58 51,200 --a------ C:\WINDOWS\NirCmd.exe
2007-10-25 15:26 <DIR> d-------- C:\WINDOWS\system32\ActiveScan
2007-10-25 15:24 2,124 --a------ C:\WINDOWS\system32\tmp.reg
2007-10-25 15:23 289,144 --a------ C:\WINDOWS\system32\VCCLSID.exe
2007-10-25 15:23 288,417 --a------ C:\WINDOWS\system32\SrchSTS.exe
2007-10-25 15:23 53,248 --a------ C:\WINDOWS\system32\Process.exe
2007-10-25 15:23 51,200 --a------ C:\WINDOWS\system32\dumphive.exe
2007-10-25 15:23 25,600 --a------ C:\WINDOWS\system32\WS2Fix.exe
2007-10-25 14:51 <DIR> d-------- C:\WINDOWS\pss
2007-10-24 18:02 <DIR> dr-h----- C:\Documents and Settings\Brett\Onlangs geopend
2007-10-24 17:53 <DIR> d-------- C:\Program Files\Trend Micro
2007-10-22 19:40 66,048 --a--c--- C:\WINDOWS\system32\dllcache\s3legacy.dll

.
((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-10-25 13:47 --------- d-----w C:\Program Files\PC Connectivity Solution
2007-10-24 16:00 --------- d-----w C:\Program Files\CCleaner
2007-10-24 06:00 --------- d-----w C:\Documents and Settings\LocalService\Application Data\AVG7
2007-10-22 08:40 --------- d-----w C:\Documents and Settings\Brett\Application Data\LimeWire
2007-10-22 07:51 --------- d-----w C:\Program Files\Winamp
2007-10-22 07:35 --------- d-----w C:\Program Files\LimeWire
2007-10-22 06:37 --------- d-----w C:\Documents and Settings\Brett\Application Data\AVG7
2007-09-19 19:54 --------- d-----w C:\Program Files\MSN Messenger
2007-09-19 19:38 --------- d-----w C:\Program Files\RegCleaner
2007-09-01 14:15 --------- d-----w C:\Documents and Settings\Brett\Application Data\Apple Computer
2007-08-21 06:18 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll
2007-07-30 17:19 92,504 ----a-w C:\WINDOWS\system32\cdm.dll
2007-07-30 17:19 549,720 ----a-w C:\WINDOWS\system32\wuapi.dll
2007-07-30 17:19 53,080 ----a-w C:\WINDOWS\system32\wuauclt.exe
2007-07-30 17:19 43,352 -c--a-w C:\WINDOWS\system32\wups2.dll
2007-07-30 17:19 325,976 ----a-w C:\WINDOWS\system32\wucltui.dll
2007-07-30 17:19 203,096 ----a-w C:\WINDOWS\system32\wuweb.dll
2007-07-30 17:19 1,712,984 ----a-w C:\WINDOWS\system32\wuaueng.dll
2007-07-30 17:18 33,624 ----a-w C:\WINDOWS\system32\wups.dll
2006-01-17 12:42 774,144 -c--a-w C:\Program Files\RngInterstitial.dll
.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Cmaudio"="cmicnfg.cpl" []
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2007-10-24 08:18]
"PCSuiteTrayApplication"="C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2007-06-18 15:10]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 01:03]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"Nokia.PCSync"=C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\nnnnmkj]
nnnnmkj.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=C:\WINDOWS\system32\wmfhotfix.dll

R1 ATITool;ATITool Overclocking Utility;C:\WINDOWS\system32\DRIVERS\ATITool.sys
R1 sdcplh;sdcplh;C:\WINDOWS\system32\drivers\sdcplh.sys
S3 f4de29f2-29da-4440-a909-d8899a51af25;f4de29f2-29da-4440-a909-d8899a51af25;\??\I:\Player\cds300.dll

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e21b71aa-ea74-11da-91b7-000c7676a9d0}]
AutoRun\command - K:\LaunchU3.exe

.
**************************************************************************

catchme 0.3.1232 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-10-25 17:10:03
Windows 5.1.2600 Service Pack 2 NTFS

scannen van verborgen processen ...

scannen van verborgen autostart items ...

scannen van verborgen bestanden ...

Scan succesvol afgerond
verborgen bestanden: 0

**************************************************************************
.
Voltooingstijd: 2007-10-25 17:10:46
.
--- E O F ---
G

Ghastly

Legacy Member
Hijack
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:13:41, on 10/25/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\RunDll32.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Lokale service')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Snelle start.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Download Web Info - C:\Program Files\Dataroute\Download.htm
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O20 - AppInit_DLLs: C:\WINDOWS\system32\wmfhotfix.dll
O20 - Winlogon Notify: nnnnmkj - nnnnmkj.dll (file missing)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 4424 bytes
J

Jurgenv1

Legacy Member
* Open hijackthis en vink volgende regels aan:

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O20 - Winlogon Notify: nnnnmkj - nnnnmkj.dll (file missing)

* Sluit dan alle vensters behalve hijackthis en klik op 'fix checked'

* Herstart dan je pc en vertel hoe alles verder werkt.
Het archief is een bevroren moment uit een vorige versie van dit forum, met andere regels en andere bazen. Deze posts weerspiegelen op geen enkele manier onze huidige ideeën, waarden of wereldbeelden en zijn op sommige plaatsen gecensureerd wegens ontoelaatbaar. Veel zijn in een andere tijdsgeest gemaakt, al dan niet ironisch - zoals in het ironische subforum Off-Topic - en zouden op dit moment niet meer gepost (mogen) worden. Toch bieden we dit archief nog graag aan als informatiedatabank en naslagwerk. Lees er hier meer over of start een gesprek met anderen.
Terug
Bovenaan