Mededeling

Collapse
No announcement yet.

searchweb2 verwijderen

Collapse
X
  •  
  • Tijd
  • Show
Clear All
new posts

  • searchweb2 verwijderen

    Ik word echt HELEMAAL gek van lop.com met z'n searchweb . Van alles geprobeerd, laatste versies van Spybot, Adaware, Bitdefender, niets helpt. Het wordt wel herkend, maar niet verwijderd. Wie kan me helpen? Ik wil niet graag het eigen uninstall programma van Lop.com gebruiken, ik ga toch ook niet bij de duivel te biecht

    Logfile of HijackThis v1.99.0
    Scan saved at 21:38:07, on 4-1-2005
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    E:\WINDOWS\System32\smss.exe
    E:\WINDOWS\system32\winlogon.exe
    E:\WINDOWS\system32\services.exe
    E:\WINDOWS\system32\lsass.exe
    E:\WINDOWS\system32\svchost.exe
    E:\WINDOWS\System32\svchost.exe
    E:\WINDOWS\system32\spoolsv.exe
    E:\Program Files\Network Associates\Common Framework\FrameworkService.exe
    E:\Program Files\Virus scan\Mcshield.exe
    E:\Program Files\Virus scan\VsTskMgr.exe
    E:\WINDOWS\Explorer.EXE
    E:\Program Files\Virus scan\SHSTAT.EXE
    E:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
    E:\WINDOWS\system32\ctfmon.exe
    E:\Program Files\Internet Explorer\iexplore.exe
    E:\Program Files\Winzip\WZQKPICK.EXE
    e:\progra~1\intern~1\iexplore.exe
    E:\PROGRA~1\MICROS~2\Office\OUTLOOK.EXE
    E:\Program Files\Internet Explorer\iexplore.exe
    E:\WINDOWS\System32\msiexec.exe
    E:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe
    E:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe
    E:\Program Files\Softwin\BitDefender Desktop\vsserv.exe
    E:\Program Files\Softwin\BitDefender Desktop\bdmcon.exe
    E:\Program Files\Softwin\BitDefender Desktop\bdoesrv.exe
    E:\Program Files\Softwin\BitDefender Desktop\bdlite.exe
    E:\Program Files\Anti spyware programma's\Hijackthis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.roncpfokfrfwi.com/_6AMR9R9D6MtPDlOZYLcmcECgBrK/aIdUVbwfnSkx9HpoPMr3VhyOfuvb8cwxMUI.jpg
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mizghszgoepbkcxkej.info/_6AMR9R9D6O_fni6/koMpkyWBL6U5ZG2mJF7Jx0ltdM.html
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - E:\PROGRA~1\Spybot\SPYBOT~1\SDHelper.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - e:\program files\google\googletoolbar2.dll
    O2 - BHO: (no name) - {CC9C1090-1779-2320-F30B-4A22ABDB7D8E} - E:\DOCUME~1\RENSKE~1.CC5\APPLIC~1\LOGOHE~1\knob curb.exe
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - e:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [ShStatEXE] "E:\Program Files\Virus scan\SHSTAT.EXE" /STANDALONE
    O4 - HKLM\..\Run: [McAfeeUpdaterUI] "E:\Program Files\Network Associates\Common Framework\UpdaterUI.exe"
    O4 - HKLM\..\Run: [TkBellExe] "E:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [Deaf Sixth Boob Window] E:\Documents and Settings\All Users.WINDOWS\Application Data\infobonedeafsixth\wipe vga.exe
    O4 - HKLM\..\Run: [BDMCon] E:\Program Files\Softwin\BitDefender Desktop\\bdmcon.exe
    O4 - HKLM\..\Run: [BDNewsAgent] E:\Program Files\Softwin\BitDefender Desktop\\bdnagent.exe
    O4 - HKLM\..\Run: [BDOESRV] E:\Program Files\Softwin\BitDefender Desktop\\bdoesrv.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [license online] E:\DOCUME~1\HANSEN~1.CC5\APPLIC~1\FLAGFA~1\Sixthboneregs.exe
    O4 - HKCU\..\Run: [Tracks Eraser Pro] E:\Program Files\Anti spyware programma's\Lopcom\Tracks Eraser Pro\te.exe min
    O4 - Global Startup: Microsoft Office.lnk = E:\Program Files\Microsoft Office\Office\OSA9.EXE
    O4 - Global Startup: WinZip Quick Pick.lnk = E:\Program Files\Winzip\WZQKPICK.EXE
    O4 - Global Startup: Adobe Gamma Loader.lnk = E:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O8 - Extra context menu item: &Google Search - res://E:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
    O8 - Extra context menu item: Gelijkwaardige pagina's - res://E:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
    O8 - Extra context menu item: Koppelingspagina's - res://E:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
    O8 - Extra context menu item: Opgeslagen momentopname van de pagina - res://E:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {018A066F-584A-422F-AC4C-0B1F5FE5C040} (VacPro.olanda_ver3) - http://advnt01.com/dialer/olanda_ver3.CAB
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O16 - DPF: {DE591B16-A452-11D6-AED1-0001030A4E46} (PBGNX Control) - https://gto.postbank.nl/GTO/PBGNX.cab
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain =
    O17 - HKLM\Software\..\Telephony: DomainName =
    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain =
    O23 - Service: AutoComplete Service - Acesoft - E:\Program Files\Anti spyware programma's\Lopcom\Tracks Eraser Pro\autocomp.exe
    O23 - Service: BitDefender Scan Server - Unknown - E:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe
    O23 - Service: McAfee Framework Service - Network Associates, Inc. - E:\Program Files\Network Associates\Common Framework\FrameworkService.exe
    O23 - Service: Network Associates McShield - Network Associates, Inc. - E:\Program Files\Virus scan\Mcshield.exe
    O23 - Service: Network Associates Task Manager - Network Associates, Inc. - E:\Program Files\Virus scan\VsTskMgr.exe
    O23 - Service: BitDefender Virus Shield - Unknown - E:\Program Files\Softwin\BitDefender Desktop\vsserv.exe
    O23 - Service: BitDefender Communicator - Softwin - E:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe
    O23 - Service: ZESOFT - Unknown - E:\WINDOWS\zeta.exe (file missing)

  • #2
    Hoi Helemaalhopeloos,


    1. Scan met HijackThis en vink de volgende items aan:

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.roncpfokfrfwi.com/_6AMR9R...uvb8cwxMUI.jpg
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mizghszgoepbkcxkej.info/_...F7Jx0ltdM.html

    O2 - BHO: (no name) - {CC9C1090-1779-2320-F30B-4A22ABDB7D8E} - E:\DOCUME~1\RENSKE~1.CC5\APPLIC~1\LOGOHE~1\knob curb.exe

    O4 - HKLM\..\Run: [Deaf Sixth Boob Window] E:\Documents and Settings\All Users.WINDOWS\Application Data\infobonedeafsixth\wipe vga.exe
    O4 - HKCU\..\Run: [license online] E:\DOCUME~1\HANSEN~1.CC5\APPLIC~1\FLAGFA~1\Sixthboneregs.exe

    O16 - DPF: {018A066F-584A-422F-AC4C-0B1F5FE5C040} (VacPro.olanda_ver3) - http://advnt01.com/dialer/olanda_ver3.CAB

    O23 - Service: ZESOFT - Unknown - E:\WINDOWS\zeta.exe (file missing)
    Sluit alle vensters behalve HijackThis zelf en klik op "Fix checked".

    2. Herstart de pc in veilige modus.
    Mocht je niet weten hoe dat moet, kijk dan hier even: http://www.virushelp.nl/veilige_modus.htm

    Zorg ervoor dat verborgen bestanden en mappen worden weergegeven.
    Hier kun je lezen hoe dat moet: http://users.telenet.be/marcvn/spyware/1117602.htm

    Verwijder nu, in veilige modus dus, de volgende mappen:

    E:\Documents and Settings\All Users.WINDOWS\Application Data\infobonedeafsixth <- die map

    E:\Documents and Settings\RENSKE~1.CC5\Application Data\LOGOHE~1 <- d.w.z. die map waarvan de naam begint met de letters "logohe" (het bestand "knob curb.exe" zit in die map; "RENSKE~1.CC5" staat voor een gebruikersnaam, HijackThis geeft dat hier helaas niet helemaal goed weer)

    E:\Documents and Settings\HANSEN~1.CC5\Application Data\FLAGFA~1 <- d.w.z. die map waarvan de naam begint met de letters "flagfa" (het bestand "Sixthboneregs.exe" zit in dit map; "HANSEN~1.CC5" staat voor een gebruikersnaam, HijackThis geeft dat hier helaas niet helemaal goed weer)

    3. Herstart de pc in 'normale modus'.

    4. Maak een nieuw log en plaats dat hier.

    Comment


    • #3
      Klaar!

      He Buffy, bedankt voor je snelle reactie. Het ziet er nu al een stuk beter uit. Hieronder mijn laatste scan:

      Logfile of HijackThis v1.99.0
      Scan saved at 22:28:02, on 4-1-2005
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      E:\WINDOWS\System32\smss.exe
      E:\WINDOWS\system32\winlogon.exe
      E:\WINDOWS\system32\services.exe
      E:\WINDOWS\system32\lsass.exe
      E:\WINDOWS\system32\svchost.exe
      E:\WINDOWS\System32\svchost.exe
      E:\WINDOWS\system32\spoolsv.exe
      E:\WINDOWS\Explorer.EXE
      E:\Program Files\Virus scan\SHSTAT.EXE
      E:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
      E:\Program Files\Softwin\BitDefender Desktop\bdmcon.exe
      E:\Program Files\Softwin\BitDefender Desktop\bdoesrv.exe
      E:\WINDOWS\system32\ctfmon.exe
      E:\Program Files\Winzip\WZQKPICK.EXE
      E:\Program Files\Network Associates\Common Framework\FrameworkService.exe
      E:\Program Files\Virus scan\Mcshield.exe
      E:\Program Files\Virus scan\VsTskMgr.exe
      E:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe
      E:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe
      E:\Program Files\Softwin\BitDefender Desktop\vsserv.exe
      E:\Program Files\Anti spyware programma's\Hijackthis\HijackThis.exe
      E:\WINDOWS\system32\wuauclt.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - E:\PROGRA~1\Spybot\SPYBOT~1\SDHelper.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - e:\program files\google\googletoolbar2.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - e:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [ShStatEXE] "E:\Program Files\Virus scan\SHSTAT.EXE" /STANDALONE
      O4 - HKLM\..\Run: [McAfeeUpdaterUI] "E:\Program Files\Network Associates\Common Framework\UpdaterUI.exe"
      O4 - HKLM\..\Run: [TkBellExe] "E:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [BDMCon] E:\Program Files\Softwin\BitDefender Desktop\\bdmcon.exe
      O4 - HKLM\..\Run: [BDNewsAgent] E:\Program Files\Softwin\BitDefender Desktop\\bdnagent.exe
      O4 - HKLM\..\Run: [BDOESRV] E:\Program Files\Softwin\BitDefender Desktop\\bdoesrv.exe
      O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [Tracks Eraser Pro] E:\Program Files\Anti spyware programma's\Lopcom\Tracks Eraser Pro\te.exe min
      O4 - Global Startup: Microsoft Office.lnk = E:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: WinZip Quick Pick.lnk = E:\Program Files\Winzip\WZQKPICK.EXE
      O4 - Global Startup: Adobe Gamma Loader.lnk = E:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
      O8 - Extra context menu item: &Google Search - res://E:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
      O8 - Extra context menu item: Gelijkwaardige pagina's - res://E:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
      O8 - Extra context menu item: Koppelingspagina's - res://E:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
      O8 - Extra context menu item: Opgeslagen momentopname van de pagina - res://E:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O16 - DPF: {DE591B16-A452-11D6-AED1-0001030A4E46} (PBGNX Control) - https://gto.postbank.nl/GTO/PBGNX.cab
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain =
      O17 - HKLM\Software\..\Telephony: DomainName =
      O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain =
      O23 - Service: AutoComplete Service - Acesoft - E:\Program Files\Anti spyware programma's\Lopcom\Tracks Eraser Pro\autocomp.exe
      O23 - Service: BitDefender Scan Server - Unknown - E:\Program Files\Common Files\Softwin\BitDefender Scan Server\bdss.exe
      O23 - Service: McAfee Framework Service - Network Associates, Inc. - E:\Program Files\Network Associates\Common Framework\FrameworkService.exe
      O23 - Service: Network Associates McShield - Network Associates, Inc. - E:\Program Files\Virus scan\Mcshield.exe
      O23 - Service: Network Associates Task Manager - Network Associates, Inc. - E:\Program Files\Virus scan\VsTskMgr.exe
      O23 - Service: BitDefender Virus Shield - Unknown - E:\Program Files\Softwin\BitDefender Desktop\vsserv.exe
      O23 - Service: BitDefender Communicator - Softwin - E:\Program Files\Common Files\Softwin\BitDefender Communicator\xcommsvr.exe

      Comment


      • #4
        Ziet er netjes uit nu. Zijn de problemen opgelost?

        Comment


        • #5
          Top

          Helemaal goed! Als je een man bent, dan ga ik eens een biertje met je drinken , als je een vrouw bent, krijg je een dikke kus van me . Nogmaals bedankt!

          Comment


          • #6
            Graag gedaan. Maar vrouwen lusten ook wel een biertje hoor.

            Comment

            Sorry, you are not authorized to view this page
            Working...
            X
            😀
            🥰
            🤢
            😎
            😡
            👍
            👎