Mededeling

Collapse
No announcement yet.

Log van Silvia

Collapse
X
Collapse
  •  
  • Page of 6
  • Filter
  • Tijd
  • Show
Clear All
new posts
Vorige 1 2 3 4 5 6 template Volgende
  • #1

    Log van Silvia

    Logfile of HijackThis v1.98.2
    Scan saved at 19:05:56, on 28-10-2004
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Sitecom\Bluetooth Software\bin\btwdins.exe
    C:\WINDOWS\System32\drivers\CDAC11BA.EXE
    C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\isafe.exe
    C:\WINDOWS\System32\CTsvcCDA.EXE
    C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
    C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
    C:\Program Files\F-Secure Internet Security\fswsclds.exe
    C:\WINDOWS\System32\nvsvc32.exe
    C:\Program Files\IP Insight\ARMon32a.exe
    C:\WINDOWS\System32\svchost.exe
    C:\PROGRA~1\Toolbar\TBPSSvc.exe
    C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe
    C:\Program Files\Common Files\WinTools\WToolsS.exe
    C:\WINDOWS\System32\MsPMSPSv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Creative\ShareDLL\CtNotify.exe
    C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe
    C:\Program Files\webHancer\Programs\whSurvey.exe
    C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
    C:\PROGRA~1\Save\Save.exe
    C:\PROGRA~1\MYWEBS~1\bar\4.bin\mwsoemon.exe
    C:\Program Files\Messenger Plus! 3\MsgPlus.exe
    C:\Program Files\Creative\ShareDLL\MediaDet.Exe
    C:\Program Files\MSN Apps\Updater\01.02.3000.1001\nl-be\msnappau.exe
    C:\WINDOWS\system32\ossproxy.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\Program Files\Common Files\WinTools\WToolsA.exe
    C:\PROGRA~1\Toolbar\TBPS.exe
    C:\PROGRA~1\CA\ETRUST~1\ETRUST~1\VetTray.exe
    C:\WINDOWS\accfax.exe
    C:\PROGRA~1\Toolbar\PIB.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Common Files\WinTools\WSup.exe
    C:\Program Files\System Soap Pro\soap.exe
    C:\Program Files\Sitecom\Bluetooth Software\BTTray.exe
    c:\progra~1\intern~1\iexplore.exe
    C:\WINDOWS\System32\WScript.exe
    C:\PROGRA~1\Sitecom\BLUETO~1\BTSTAC~1.EXE
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Hotbar\bin\4.5.1.0\HbSrv.exe
    C:\Program Files\Outlook Express\msimn.exe
    C:\DOCUME~1\SILIVI~1\LOCALS~1\Temp\Tijdelijke map 1 voor hijackthis[1].zip\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.websearch.com/ie.aspx?tb_id=50193
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hdqfmpgojwhh.com/Kdx2ULN7mVhsjXW2PMNGN/luh1yRoRZe1ZmkH6RuvJc.jpg
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.planet.nl
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.websearch.com/ie.aspx?tb_id=50193
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.be/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.websearch.com/ie.aspx?tb_id=50193
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Startpagina = file:///C:/Program%20Files/Plus18Point/Portal/portal.html
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
    R3 - URLSearchHook: (no name) - {8952A998-1E7E-4716-B23D-3DBE03910972} - C:\PROGRA~1\Toolbar\toolbar.dll
    O1 - Hosts: fferoptimizer.com
    O1 - Hosts: timizer.com
    O1 - Hosts: optimizer.com
    O1 - Hosts: eroptimizer.com
    O1 - Hosts: fferoptimizer.com
    O1 - Hosts: .offeroptimizer.com
    O1 - Hosts: so.offeroptimizer.com
    O1 - Hosts: 127
    O1 - Hosts: adso.offeroptimizer.com
    O1 - Hosts: 12
    O1 - Hosts: 1
    O1 - Hosts: 1
    O1 - Hosts: 1
    O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\4.bin\MWSSRCAS.DLL
    O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\3.bin\MYBAR.DLL (file missing)
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\4.bin\MWSBAR.DLL
    O2 - BHO: C:\WINDOWS\lbbho.dll - {0A4381C0-001F-4D10-9B9F-39ADB6517437} - C:\WINDOWS\lbbho.dll
    O2 - BHO: (no name) - {34E39622-8865-D962-8312-C24BD2825246} - C:\PROGRA~1\MEETSO~1\Spam 01.exe (file missing)
    O2 - BHO: (no name) - {49E0E0F0-5C30-11D4-945D-000000000000} - C:\WINDOWS\system32\IEHelper.dll
    O2 - BHO: URLLink Class - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:\Program Files\NewDotNet\newdotnet6_38.dll
    O2 - BHO: CATLEvents Object - {55E301E5-BA44-4095-BB0B-14E0123CCF71} - C:\DOCUME~1\SILIVI~1\LOCALS~1\Temp\xafcca.dat
    O2 - BHO: CATLEvents Object - {60112085-E1CE-4e0e-823A-EBB1AD98804C} - C:\DOCUME~1\SILIVI~1\LOCALS~1\Temp\moctnof.dat
    O2 - BHO: OpinionBar IE monitor - {6607C683-AE7C-11D4-ACD7-0050DAC291A2} - C:\PROGRA~1\OPINIO~1\MYIEMO~1.DLL
    O2 - BHO: (no name) - {6F206384-15BB-DD3A-D52B-D9AD1657CA8A} - C:\DOCUME~1\SILIVI~1\APPLIC~1\MEETSO~1\Spam 01.exe
    O2 - BHO: (no name) - {87766247-311C-43B4-8499-3D5FEC94A183} - C:\PROGRA~1\COMMON~1\WinTools\WToolsB.dll
    O2 - BHO: (no name) - {8952A998-1E7E-4716-B23D-3DBE03910972} - C:\PROGRA~1\Toolbar\toolbar.dll
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
    O2 - BHO: Httper - {A5483501-070C-41DD-AF44-9BD8864B3015} - C:\Program Files\Httper\httper.dll
    O2 - BHO: Hotbar - {B195B3B3-8A05-11D3-97A4-0004ACA6948E} - C:\Program Files\Hotbar\bin\4.5.1.0\HbHostIE.dll
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\nl-be\msntb.dll
    O2 - BHO: BHO Class - {C77E900A-FF55-400E-9BAA-E042C8212898} - C:\Program Files\Simpelinternet\Easybar\ToolbarStarter.dll
    O2 - BHO: WhIeHelperObj Class - {c900b400-cdfe-11d3-976a-00e02913a9e0} - C:\Program Files\webHancer\programs\whiehlpr.dll
    O3 - Toolbar: Zipclix - {319A68DB-06D0-46DA-9F93-A810D5A70836} - C:\Program Files\Zipclix\zipclix.dll
    O3 - Toolbar: &Hotbar - {B195B3B3-8A05-11D3-97A4-0004ACA6948E} - C:\Program Files\Hotbar\bin\4.5.1.0\HbHostIE.dll
    O3 - Toolbar: My &Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\4.bin\MWSBAR.DLL
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\nl-be\msntb.dll
    O3 - Toolbar: My &Search Bar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\Program Files\MyWay\myBar\3.bin\MYBAR.DLL (file missing)
    O3 - Toolbar: &Search Toolbar - {339BB23F-A864-48C0-A59F-29EA915965EC} - C:\PROGRA~1\Toolbar\toolbar.dll
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exe
    O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
    O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
    O4 - HKLM\..\Run: [Jet Detection] C:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe
    O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe" /icon
    O4 - HKLM\..\Run: [webHancer Survey Companion] "C:\Program Files\webHancer\Programs\whSurvey.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
    O4 - HKLM\..\Run: [SysUpd] C:\WINDOWS\sysupd.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
    O4 - HKLM\..\Run: [WhenUSave] C:\PROGRA~1\Save\Save.exe
    O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\4.bin\mwsoemon.exe
    O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
    O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
    O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\nl-be\msnappau.exe"
    O4 - HKLM\..\Run: [WeatherOnTray] C:\Program Files\Hotbar\bin\4.5.1.0\WeatherOnTray.exe
    O4 - HKLM\..\Run: [OSS] C:\WINDOWS\system32\ossproxy.exe -boot
    O4 - HKLM\..\Run: [The support more base] C:\Documents and Settings\All Users\Application Data\Pop bias the support\AXISROAD.exe
    O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,NewDotNetStartup -s
    O4 - HKLM\..\Run: [Hotbar] C:\Program Files\Hotbar\bin\4.5.1.0\HbInst.exe /Upgrade
    O4 - HKLM\..\Run: [fontcom] C:\WINDOWS\addins\fontcom.exe
    O4 - HKLM\..\Run: [*javacr] C:\WINDOWS\Config\javacr.exe
    O4 - HKLM\..\Run: [WinTools] C:\Program Files\Common Files\WinTools\WToolsA.exe
    O4 - HKLM\..\Run: [webHancer Agent] "C:\Program Files\webHancer\Programs\whAgent.exe"
    O4 - HKLM\..\Run: [TBPS] C:\PROGRA~1\Toolbar\TBPS.exe
    O4 - HKLM\..\Run: [*wave] C:\WINDOWS\Fonts\wave.exe
    O4 - HKLM\..\Run: [VetTray] C:\PROGRA~1\CA\ETRUST~1\ETRUST~1\VetTray.exe
    O4 - HKLM\..\Run: [*inetexp] C:\WINDOWS\AppPatch\inetexp.exe
    O4 - HKLM\..\Run: [HOLD FOR THUNK BARB] C:\Documents and Settings\All Users\Application Data\Bows real hold for\TypeGrid.exe
    O4 - HKLM\..\Run: [*apcat] C:\WINDOWS\system32\oobe\apcat.exe
    O4 - HKLM\..\Run: [*unmc] C:\WINDOWS\system\unmc.exe
    O4 - HKLM\..\Run: [*maintapi] C:\WINDOWS\maintapi.exe
    O4 - HKLM\..\Run: [*psacc] C:\WINDOWS\msagent\psacc.exe
    O4 - HKLM\..\Run: [*accfax] C:\WINDOWS\accfax.exe
    O4 - HKLM\..\RunOnce: [*accfax] C:\WINDOWS\accfax.exe rerun
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [TaskTray] C:\Program Files\Creative\SBAudigy\Taskbar\CTLTray.exe
    O4 - HKCU\..\Run: [Taskbar] C:\Program Files\Creative\SBAudigy\Taskbar\CTLTask.exe
    O4 - HKCU\..\Run: [PImenu] C:\Program Files\PImenu\PImenu.exe
    O4 - HKCU\..\Run: [System Soap Pro] C:\Program Files\System Soap Pro\soap.exe min
    O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\4.bin\mwsoemon.exe
    O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
    O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
    O4 - HKCU\..\Run: [Holesign] C:\DOCUME~1\SILIVI~1\APPLIC~1\IDOLOP~1\MFCDACID.exe
    O4 - HKCU\..\Run: [WinTools] C:\PROGRA~1\COMMON~1\WinTools\WToolsA.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\RunOnce: [*MS Setup] C:\WINDOWS\system32\bkinst.exe ren time:1098819515
    O4 - Startup: MyWebSearch Email Plugin.lnk = C:\Program Files\MyWebSearch\bar\4.bin\MWSOEMON.EXE
    O4 - Global Startup: BTTray.lnk = ?
    O4 - Global Startup: MyWebSearch Email Plugin.lnk = C:\Program Files\MyWebSearch\bar\4.bin\MWSOEMON.EXE
    O4 - Global Startup: Search.vbs
    O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNxdm122
    O8 - Extra context menu item: Verzenden naar &Bluetooth - C:\Program Files\Sitecom\Bluetooth Software\btsendto_ie_ctx.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
    O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Sitecom\Bluetooth Software\btsendto_ie.htm
    O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Sitecom\Bluetooth Software\btsendto_ie.htm
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O10 - Hijacked Internet access by New.Net
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O14 - IERESET.INF: START_PAGE_URL=http://www.planet.nl
    O16 - DPF: {00000000-CDDC-0704-0B53-2C8830E9FAEC} (IELoaderCtl Class) - http://install.global-netcom.de/ieloader.cab
    O16 - DPF: {086A694F-91FB-4068-B44C-124FB69BF05D} - http://www.searchwww.com/search.cab
    O16 - DPF: {11111111-1111-1111-1111-111111111111} - http://www.mediaswitch.nl/eromedia/launcher.exe
    O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralInitialSetup1.0.0.8.cab
    O16 - DPF: {421A63BA-4632-43E0-A942-3B4AB645BE51} - http://download-ak.systemsoap.com/ssoap/pptproactauthakamai/systemsoappro.cab
    O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - http://www.planet.nl/exent/classes/ExentCtl.ocx
    O16 - DPF: {70647AB5-18FD-4142-82B0-5852478DD0D4} (Vividence Connector Launcher) - http://task.vividence.com/download/ConnectorLauncher.cab
    O16 - DPF: {841A9192-5690-11D4-A258-0040954A01BE} (DialXSCtl Object) - http://dialxs.nl/install/dialxs.ocx
    O16 - DPF: {9B4AA442-9EBF-11D5-8C11-0050DA4957F5} - http://www.fastmp3.nl/test/nl.exe
    O16 - DPF: {A51DEDCD-20F7-11D4-98A5-00C0CA130748} (Tintel Class) - http://exe.dialer.tintel.nl/tcw.cab
    O16 - DPF: {C3DFA998-A486-11D4-AA25-00C04F72DAEB} (MSN Photo Upload Tool) - http://sc.groups.msn.com/controls/PhotoUC/MsnPUpld.cab
    O16 - DPF: {E0B795B4-FD95-4ABD-A375-27962EFCE8CF} (StarInstall Control) - http://install.serviceurl.de/StarInstall.ocx
    O16 - DPF: {E6A3C1E2-F792-483E-9133-596215172BE9} (AcceptLang Class) - http://runonce.msn.com/setacceptlang.cab
    O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://asp02.photoprintit.de/microsite/5/defaults/activex/XUpload.ocx
    O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/vso/en-us/tools/mcfscan/2,0,0,4400/mcfscan.cab
    O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{D2426C53-74F2-4D36-BA47-0309D6C0C01B}: NameServer = 195.121.1.34 195.121.1.66
    O18 - Protocol: tpro - {FF76A5DA-6158-4439-99FF-EDC1B3FE100C} - C:\PROGRA~1\Toolbar\toolbar.dll
    Labels: Geen
    • Citaat
  • #2
    Hoi Silvia, welkom op ASO!

    Je hebt echt afschuwelijk veel rotzooi op je PC staan. Draai eerst Ad Aware en SPybot, zie dit topic voor meer informatie/downloadlinks:
    Nucia Security Forums
    http://www.nucia.eu/forum/showthread.php?t=12


    Start hierna opnieuw op, maak een nieuw logje aan, en post dat hier.
    • Citaat

    Comment

    • #3
      Oke ik heb alles gescand met SPybot en Ad Aware.
      Heb weer een nieuwe log gemaakt,hier komt ie:

      Logfile of HijackThis v1.98.2
      Scan saved at 14:08:26, on 29-10-2004
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Sitecom\Bluetooth Software\bin\btwdins.exe
      C:\WINDOWS\System32\drivers\CDAC11BA.EXE
      C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\isafe.exe
      C:\WINDOWS\System32\CTsvcCDA.EXE
      C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
      C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
      C:\Program Files\F-Secure Internet Security\fswsclds.exe
      C:\Program Files\IP Insight\ARMon32a.exe
      C:\WINDOWS\System32\nvsvc32.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe
      C:\WINDOWS\System32\MsPMSPSv.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\wuauclt.exe
      C:\Program Files\Creative\ShareDLL\CtNotify.exe
      C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe
      C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\BearShare\BearShare.exe
      C:\Program Files\Creative\ShareDLL\MediaDet.Exe
      C:\Program Files\Messenger Plus! 3\MsgPlus.exe
      C:\Program Files\MSN Apps\Updater\01.02.3000.1001\nl-be\msnappau.exe
      C:\Program Files\BearShare\BearShare.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\PROGRA~1\CA\ETRUST~1\ETRUST~1\VetTray.exe
      C:\WINDOWS\addins\faxinfo.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Creative\SBAudigy\Taskbar\CTLTray.exe
      C:\Program Files\System Soap Pro\soap.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      c:\progra~1\intern~1\iexplore.exe
      C:\Program Files\Sitecom\Bluetooth Software\BTTray.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\PROGRA~1\Sitecom\BLUETO~1\BTSTAC~1.EXE
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\DOCUME~1\SILIVI~1\LOCALS~1\Temp\Tijdelijke map 1 voor hijackthis.zip\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://qctorrhnouwrrsflsbhcdzmy.us/Kdx2ULN7mVgmUYQwQ8zZEXy_JhQMdeCT6UjS/iNjWC2uzebElIKW9lfBYWDrcyyQ.php
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hdqfmpgojwhh.com/Kdx2ULN7mVhsjXW2PMNGN/luh1yRoRZe1ZmkH6RuvJc.jpg
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.planet.nl
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.be/
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Startpagina = file:///C:/Program%20Files/Plus18Point/Portal/portal.html
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
      R3 - URLSearchHook: (no name) - {87766247-311C-43B4-8499-3D5FEC94A183} - (no file)
      O1 - Hosts: fferoptimizer.com
      O1 - Hosts: timizer.com
      O1 - Hosts: optimizer.com
      O1 - Hosts: eroptimizer.com
      O1 - Hosts: fferoptimizer.com
      O1 - Hosts: .offeroptimizer.com
      O1 - Hosts: so.offeroptimizer.com
      O1 - Hosts: 127
      O1 - Hosts: adso.offeroptimizer.com
      O1 - Hosts: 12
      O1 - Hosts: 1
      O1 - Hosts: 1
      O1 - Hosts: 1
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
      O2 - BHO: C:\WINDOWS\lbbho.dll - {0A4381C0-001F-4D10-9B9F-39ADB6517437} - C:\WINDOWS\lbbho.dll
      O2 - BHO: (no name) - {34E39622-8865-D962-8312-C24BD2825246} - C:\PROGRA~1\MEETSO~1\Spam 01.exe (file missing)
      O2 - BHO: URLLink Class - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:\Program Files\NewDotNet\newdotnet6_38.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
      O2 - BHO: CATLEvents Object - {55E301E5-BA44-4095-BB0B-14E0123CCF71} - C:\DOCUME~1\SILIVI~1\LOCALS~1\Temp\ofnixaf.dat
      O2 - BHO: OpinionBar IE monitor - {6607C683-AE7C-11D4-ACD7-0050DAC291A2} - C:\PROGRA~1\OPINIO~1\MYIEMO~1.DLL
      O2 - BHO: (no name) - {6F206384-15BB-DD3A-D52B-D9AD1657CA8A} - C:\DOCUME~1\SILIVI~1\APPLIC~1\MEETSO~1\Spam 01.exe
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\nl-be\msntb.dll
      O2 - BHO: BHO Class - {C77E900A-FF55-400E-9BAA-E042C8212898} - C:\Program Files\Simpelinternet\Easybar\ToolbarStarter.dll
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\nl-be\msntb.dll
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exe
      O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
      O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
      O4 - HKLM\..\Run: [Jet Detection] C:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe
      O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe" /icon
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
      O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
      O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\nl-be\msnappau.exe"
      O4 - HKLM\..\Run: [WeatherOnTray] C:\Program Files\Hotbar\bin\4.5.1.0\WeatherOnTray.exe
      O4 - HKLM\..\Run: [The support more base] C:\Documents and Settings\All Users\Application Data\Pop bias the support\AXISROAD.exe
      O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,NewDotNetStartup -s
      O4 - HKLM\..\Run: [VetTray] C:\PROGRA~1\CA\ETRUST~1\ETRUST~1\VetTray.exe
      O4 - HKLM\..\Run: [HOLD FOR THUNK BARB] C:\Documents and Settings\All Users\Application Data\Bows real hold for\TypeGrid.exe
      O4 - HKLM\..\Run: [WinTools] C:\Program Files\Common Files\WinTools\WToolsA.exe
      O4 - HKLM\..\Run: [*faxinfo] C:\WINDOWS\addins\faxinfo.exe
      O4 - HKLM\..\RunOnce: [*faxinfo] C:\WINDOWS\addins\faxinfo.exe rerun
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [TaskTray] C:\Program Files\Creative\SBAudigy\Taskbar\CTLTray.exe
      O4 - HKCU\..\Run: [Taskbar] C:\Program Files\Creative\SBAudigy\Taskbar\CTLTask.exe
      O4 - HKCU\..\Run: [PImenu] C:\Program Files\PImenu\PImenu.exe
      O4 - HKCU\..\Run: [System Soap Pro] C:\Program Files\System Soap Pro\soap.exe min
      O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
      O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
      O4 - HKCU\..\Run: [Holesign] C:\DOCUME~1\SILIVI~1\APPLIC~1\IDOLOP~1\MFCDACID.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\RunOnce: [*MS Setup] C:\WINDOWS\system32\bkinst.exe ren time:1099051658
      O4 - Global Startup: BTTray.lnk = ?
      O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNxdm122
      O8 - Extra context menu item: Verzenden naar &Bluetooth - C:\Program Files\Sitecom\Bluetooth Software\btsendto_ie_ctx.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
      O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Sitecom\Bluetooth Software\btsendto_ie.htm
      O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Sitecom\Bluetooth Software\btsendto_ie.htm
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O10 - Hijacked Internet access by New.Net
      O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
      O14 - IERESET.INF: START_PAGE_URL=http://www.planet.nl
      O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - http://www.planet.nl/exent/classes/ExentCtl.ocx
      O16 - DPF: {70647AB5-18FD-4142-82B0-5852478DD0D4} (Vividence Connector Launcher) - http://task.vividence.com/download/ConnectorLauncher.cab
      O16 - DPF: {9B4AA442-9EBF-11D5-8C11-0050DA4957F5} - http://www.fastmp3.nl/test/nl.exe
      O16 - DPF: {A51DEDCD-20F7-11D4-98A5-00C0CA130748} - http://exe.dialer.tintel.nl/tcw.cab
      O16 - DPF: {C3DFA998-A486-11D4-AA25-00C04F72DAEB} (MSN Photo Upload Tool) - http://sc.groups.msn.com/controls/PhotoUC/MsnPUpld.cab
      O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://asp02.photoprintit.de/microsite/5/defaults/activex/XUpload.ocx
      O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/vso/en-us/tools/mcfscan/2,0,0,4400/mcfscan.cab
      O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
      O17 - HKLM\System\CCS\Services\Tcpip\..\{D2426C53-74F2-4D36-BA47-0309D6C0C01B}: NameServer = 195.121.1.34 195.121.1.66
      • Citaat

      Comment

      • #4
        Hoi Silvia,

        Kun je even opnieuw opstarten, een nieuw logje aanmaken, en dat hier posten? Waarschijnlijk zullen diverse regels daardoor terugkomen, en ik wil graag weten of dat gebeurt, ja of nee
        • Citaat

        Comment

        • #5
          Hoi Hans,

          Ik heb gedaan wat je mij gevraagd hebt,ik heb opnieuw opgestart en een nieuwe log gemaakt.

          Logfile of HijackThis v1.98.2
          Scan saved at 14:27:23, on 29-10-2004
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\Program Files\Sitecom\Bluetooth Software\bin\btwdins.exe
          C:\WINDOWS\System32\drivers\CDAC11BA.EXE
          C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\isafe.exe
          C:\WINDOWS\System32\CTsvcCDA.EXE
          C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
          C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
          C:\Program Files\F-Secure Internet Security\fswsclds.exe
          C:\Program Files\IP Insight\ARMon32a.exe
          C:\WINDOWS\System32\nvsvc32.exe
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe
          C:\WINDOWS\System32\MsPMSPSv.exe
          C:\WINDOWS\Explorer.EXE
          C:\Program Files\Creative\ShareDLL\CtNotify.exe
          C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe
          C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
          C:\Program Files\QuickTime\qttask.exe
          C:\Program Files\BearShare\BearShare.exe
          C:\Program Files\Messenger Plus! 3\MsgPlus.exe
          C:\Program Files\MSN Apps\Updater\01.02.3000.1001\nl-be\msnappau.exe
          C:\Program Files\Creative\ShareDLL\MediaDet.Exe
          C:\WINDOWS\system32\rundll32.exe
          C:\Program Files\BearShare\BearShare.exe
          C:\PROGRA~1\CA\ETRUST~1\ETRUST~1\VetTray.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\Creative\SBAudigy\Taskbar\CTLTray.exe
          C:\Program Files\Internet Explorer\iexplore.exe
          C:\Program Files\Creative\SBAudigy\Taskbar\CTLTask.exe
          C:\Program Files\System Soap Pro\soap.exe
          c:\progra~1\intern~1\iexplore.exe
          C:\Program Files\Sitecom\Bluetooth Software\BTTray.exe
          C:\Program Files\Internet Explorer\iexplore.exe
          C:\PROGRA~1\Sitecom\BLUETO~1\BTSTAC~1.EXE
          C:\Program Files\MSN Messenger\msnmsgr.exe
          C:\WINDOWS\system32\wuauclt.exe
          C:\DOCUME~1\SILIVI~1\LOCALS~1\Temp\Tijdelijke map 2 voor hijackthis.zip\HijackThis.exe
          C:\WINDOWS\addins\faxinfo.exe

          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.wdjkzdappayknqgc.com/Kdx2ULN7mVgmUYQwQ8zZEXy_JhQMdeCT6UjS/iNjWC2INYxudTzQDVfBYWDrcyyQ.asp
          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hdqfmpgojwhh.com/Kdx2ULN7mVhsjXW2PMNGN/luh1yRoRZe1ZmkH6RuvJc.jpg
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.planet.nl
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.be/
          R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Startpagina = file:///C:/Program%20Files/Plus18Point/Portal/portal.html
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
          R3 - URLSearchHook: (no name) - {87766247-311C-43B4-8499-3D5FEC94A183} - (no file)
          O1 - Hosts: fferoptimizer.com
          O1 - Hosts: timizer.com
          O1 - Hosts: optimizer.com
          O1 - Hosts: eroptimizer.com
          O1 - Hosts: fferoptimizer.com
          O1 - Hosts: .offeroptimizer.com
          O1 - Hosts: so.offeroptimizer.com
          O1 - Hosts: 127
          O1 - Hosts: adso.offeroptimizer.com
          O1 - Hosts: 12
          O1 - Hosts: 1
          O1 - Hosts: 1
          O1 - Hosts: 1
          O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
          O2 - BHO: C:\WINDOWS\lbbho.dll - {0A4381C0-001F-4D10-9B9F-39ADB6517437} - C:\WINDOWS\lbbho.dll
          O2 - BHO: (no name) - {34E39622-8865-D962-8312-C24BD2825246} - C:\PROGRA~1\MEETSO~1\Spam 01.exe (file missing)
          O2 - BHO: URLLink Class - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:\Program Files\NewDotNet\newdotnet6_38.dll
          O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
          O2 - BHO: CATLEvents Object - {55E301E5-BA44-4095-BB0B-14E0123CCF71} - C:\DOCUME~1\SILIVI~1\LOCALS~1\Temp\ofnixaf.dat
          O2 - BHO: OpinionBar IE monitor - {6607C683-AE7C-11D4-ACD7-0050DAC291A2} - C:\PROGRA~1\OPINIO~1\MYIEMO~1.DLL
          O2 - BHO: (no name) - {6F206384-15BB-DD3A-D52B-D9AD1657CA8A} - C:\DOCUME~1\SILIVI~1\APPLIC~1\MEETSO~1\Spam 01.exe
          O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
          O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\nl-be\msntb.dll
          O2 - BHO: BHO Class - {C77E900A-FF55-400E-9BAA-E042C8212898} - C:\Program Files\Simpelinternet\Easybar\ToolbarStarter.dll
          O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\nl-be\msntb.dll
          O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
          O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
          O4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exe
          O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
          O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
          O4 - HKLM\..\Run: [Jet Detection] C:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe
          O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
          O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe" /icon
          O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
          O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
          O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
          O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
          O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\nl-be\msnappau.exe"
          O4 - HKLM\..\Run: [WeatherOnTray] C:\Program Files\Hotbar\bin\4.5.1.0\WeatherOnTray.exe
          O4 - HKLM\..\Run: [The support more base] C:\Documents and Settings\All Users\Application Data\Pop bias the support\AXISROAD.exe
          O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,NewDotNetStartup -s
          O4 - HKLM\..\Run: [VetTray] C:\PROGRA~1\CA\ETRUST~1\ETRUST~1\VetTray.exe
          O4 - HKLM\..\Run: [HOLD FOR THUNK BARB] C:\Documents and Settings\All Users\Application Data\Bows real hold for\TypeGrid.exe
          O4 - HKLM\..\Run: [WinTools] C:\Program Files\Common Files\WinTools\WToolsA.exe
          O4 - HKLM\..\Run: [*faxinfo] C:\WINDOWS\addins\faxinfo.exe
          O4 - HKLM\..\RunOnce: [*faxinfo] C:\WINDOWS\addins\faxinfo.exe rerun
          O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [TaskTray] C:\Program Files\Creative\SBAudigy\Taskbar\CTLTray.exe
          O4 - HKCU\..\Run: [Taskbar] C:\Program Files\Creative\SBAudigy\Taskbar\CTLTask.exe
          O4 - HKCU\..\Run: [PImenu] C:\Program Files\PImenu\PImenu.exe
          O4 - HKCU\..\Run: [System Soap Pro] C:\Program Files\System Soap Pro\soap.exe min
          O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
          O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
          O4 - HKCU\..\Run: [Holesign] C:\DOCUME~1\SILIVI~1\APPLIC~1\IDOLOP~1\MFCDACID.exe
          O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
          O4 - HKCU\..\RunOnce: [*MS Setup] C:\WINDOWS\system32\bkinst.exe ren time:1099051658
          O4 - Global Startup: BTTray.lnk = ?
          O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNxdm122
          O8 - Extra context menu item: Verzenden naar &Bluetooth - C:\Program Files\Sitecom\Bluetooth Software\btsendto_ie_ctx.htm
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
          O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
          O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Sitecom\Bluetooth Software\btsendto_ie.htm
          O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Sitecom\Bluetooth Software\btsendto_ie.htm
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O10 - Hijacked Internet access by New.Net
          O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
          O14 - IERESET.INF: START_PAGE_URL=http://www.planet.nl
          O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - http://www.planet.nl/exent/classes/ExentCtl.ocx
          O16 - DPF: {70647AB5-18FD-4142-82B0-5852478DD0D4} (Vividence Connector Launcher) - http://task.vividence.com/download/ConnectorLauncher.cab
          O16 - DPF: {9B4AA442-9EBF-11D5-8C11-0050DA4957F5} - http://www.fastmp3.nl/test/nl.exe
          O16 - DPF: {A51DEDCD-20F7-11D4-98A5-00C0CA130748} - http://exe.dialer.tintel.nl/tcw.cab
          O16 - DPF: {C3DFA998-A486-11D4-AA25-00C04F72DAEB} (MSN Photo Upload Tool) - http://sc.groups.msn.com/controls/PhotoUC/MsnPUpld.cab
          O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://asp02.photoprintit.de/microsite/5/defaults/activex/XUpload.ocx
          O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/vso/en-us/tools/mcfscan/2,0,0,4400/mcfscan.cab
          O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
          O17 - HKLM\System\CCS\Services\Tcpip\..\{D2426C53-74F2-4D36-BA47-0309D6C0C01B}: NameServer = 195.121.1.34 195.121.1.66
          • Citaat

          Comment

          • #6
            Hoi Silvia,

            Bedankt

            We hebben heel veel dingen te verwijderen, dus doe je best het zo goed mogelijk uit te voeren

            Vooraf: BearShare is een slecht P2P programma, het is beter dat je het verwijderd (komt nog terug in de instructies, maar zonder uitleg waarom het weg moet, dus zet ik dat hier even neer ) Tevens is System Soap Pro een verkeerd programma, ik weet niet of je dit zelf geinstalleerd hebt, maar het moet van je PC af

            1. Ga naar Deze Computer, dubbelklik daar op C. Dubbelklik op Program Files. Klik nu op "Bestand" > "Nieuw" > "Map". Noem deze map HJT of HijackThis. Plaats nu de HijackThis.exe in DIE map. Draai in het vervolg HijackThis vanuit DIE map . Dit in verband met de backups die dit programma maakt

            2. Vink deze aan in HijackThis:

            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.wdjkzdappayknqgc.com/Kdx2...fBYWDrcyyQ.asp
            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hdqfmpgojwhh.com/Kdx2ULN7...ZmkH6RuvJc.jpg
            R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Startpagina = file:///C:/Program%20Files/Plus18Point/Portal/portal.html

            R3 - URLSearchHook: (no name) - {87766247-311C-43B4-8499-3D5FEC94A183} - (no file)

            O1 - Hosts: fferoptimizer.com
            O1 - Hosts: timizer.com
            O1 - Hosts: optimizer.com
            O1 - Hosts: eroptimizer.com
            O1 - Hosts: fferoptimizer.com
            O1 - Hosts: .offeroptimizer.com
            O1 - Hosts: so.offeroptimizer.com
            O1 - Hosts: 127
            O1 - Hosts: adso.offeroptimizer.com
            O1 - Hosts: 12
            O1 - Hosts: 1
            O1 - Hosts: 1
            O1 - Hosts: 1

            O2 - BHO: C:\WINDOWS\lbbho.dll - {0A4381C0-001F-4D10-9B9F-39ADB6517437} - C:\WINDOWS\lbbho.dll
            O2 - BHO: (no name) - {34E39622-8865-D962-8312-C24BD2825246} - C:\PROGRA~1\MEETSO~1\Spam 01.exe (file missing)
            O2 - BHO: URLLink Class - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:\Program Files\NewDotNet\newdotnet6_38.dll
            O2 - BHO: CATLEvents Object - {55E301E5-BA44-4095-BB0B-14E0123CCF71} - C:\DOCUME~1\SILIVI~1\LOCALS~1\Temp\ofnixaf.dat
            O2 - BHO: (no name) - {6F206384-15BB-DD3A-D52B-D9AD1657CA8A} - C:\DOCUME~1\SILIVI~1\APPLIC~1\MEETSO~1\Spam 01.exe
            O2 - BHO: BHO Class - {C77E900A-FF55-400E-9BAA-E042C8212898} - C:\Program Files\Simpelinternet\Easybar\ToolbarStarter.dll

            O4 - HKLM\..\Run: [BearShare] "C:\Program Files\BearShare\BearShare.exe" /pause
            O4 - HKLM\..\Run: [WeatherOnTray] C:\Program Files\Hotbar\bin\4.5.1.0\WeatherOnTray.exe
            O4 - HKLM\..\Run: [The support more base] C:\Documents and Settings\All Users\Application Data\Pop bias the support\AXISROAD.exe
            O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,NewDotNetStartup -s
            O4 - HKLM\..\Run: [HOLD FOR THUNK BARB] C:\Documents and Settings\All Users\Application Data\Bows real hold for\TypeGrid.exe
            O4 - HKLM\..\Run: [WinTools] C:\Program Files\Common Files\WinTools\WToolsA.exe
            O4 - HKLM\..\Run: [*faxinfo] C:\WINDOWS\addins\faxinfo.exe
            O4 - HKLM\..\RunOnce: [*faxinfo] C:\WINDOWS\addins\faxinfo.exe rerun
            O4 - HKCU\..\Run: [System Soap Pro] C:\Program Files\System Soap Pro\soap.exe min
            O4 - HKCU\..\RunOnce: [*MS Setup] C:\WINDOWS\system32\bkinst.exe ren time:1099051658

            O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNxdm122

            O16 - DPF: {A51DEDCD-20F7-11D4-98A5-00C0CA130748} - http://exe.dialer.tintel.nl/tcw.cab
            3. Sluit alle andere vensters en browsers, en klik op Fix Checked.

            4. Ga nu naar Start - Configuratiescherm - Software en de-installeer:
            - New.Net (kan er ook staan als "NewDotNet")
            - BearShare
            - System Soap Pro
            - WinTools
            - HotBar/WeatherOnTray
            - SimpelInternet/EasyBar

            5. Start opnieuw op in veilige modus.
            Zorg ervoor dat verborgen bestanden en mappen zichtbaar zijn: Verkenner > Extra > Mapopties > Tablad Weergave > scroll naar beneden en vink het vakje voor "Verborgen bestanden en mappen weergeven" aan.

            6. Verwijder, in veilige modus:
            Mappen
            C:\Program Files\MEETSO...
            C:\Program Files\NewDotNet
            C:\Program Files\Simpelinternet
            C:\Documents and Settings\SILIVI~1\Application Data\MEETSO...
            C:\Program Files\Hotbar
            C:\Program Files\System Soap Pro
            C:\Documents and Settings\All Users\Application Data\Pop bias the support
            C:\Program Files\Common Files\WinTools
            C:\Documents and Settings\All Users\Application Data\Bows real hold for

            Bestanden
            C:\WINDOWS\system32\bkinst.exe
            C:\WINDOWS\addins\faxinfo.exe

            7. Start opnieuw op in normale modus.

            8. Draai een volledige scan met Ad Aware en Spybot S&D.

            9. Start opnieuw op, maak een nieuw HijackThis logje, en post dat hier.

            Voor de regels in je logje met een sterretje is een speciale fix nodig, maar ik wil eerst het ergste van je PC afhebben
            • Citaat

            Comment

            • #7
              Wanneer je met bovenstaande instructies klaar bent, ook graag het volgende uitvoeren:

              Download VX2Finder hiervandaan:
              http://www.downloads.subratam.org/VX2Finder.exe


              Draai VX2Finder. Klik op de "click to find VX2.BetterInternet" knop. Klik daarna op "Make Log"

              Kopier en plak de inhoud van dit log in een nieuw reply hier
              • Citaat

              Comment

              • #8
                Ik heb twee vragen:

                1) Ik kan Wintools,System Soap pro en Hotbar/WeatherOnTray niet vinden in software.
                Dus ik kan die ook niet verwijderen.

                2) Kan ke mij ook uitleggen hoe ik in de veilig modus kom en hoe ik er weer uit kom?
                Deze vraag stel ik omdat een kennis van mij niet meer uit de veilig modus kon komen en daarom haar pc weg moest brengen voor ''reparatie'' en daar heb ik natuurlijk geen zin in.


                BTW mijn pc loopt al sneller als voorheen,dat voordeel heb ik nu dus al!
                • Citaat

                Comment

                • #9
                  Als je ze niet kunt vinden hoef je ze ook niet te verwijderen

                  Voor je tweede vraag: http://www.virushelp.nl/veilige_modus.htm
                  • Citaat

                  Comment

                  • #10
                    Ik kan die mappen niet vinden in de veilige modes.
                    • Citaat

                    Comment

                    • #11
                      Geen van allen?
                      • Citaat

                      Comment

                      • #12
                        Nee,misschien doe ik wel iets fout hoor,maar ik heb naar mijn weten alles nagekeken.
                        • Citaat

                        Comment

                        • #13
                          Vandaag nogmaals geprobeert die mappen te vinden en te verwijderen in een veilige modus,maar weer kom ik die mappen niet vinden en dus ook niet verwijderen.
                          Kan iemand mij misschien een tip geven hoe ik dat wel kan vinden?

                          Groetjes van silvia
                          • Citaat

                          Comment

                          • #14
                            Vreemd, maar niet onoverkomelijk. Kun je een nieuw HijackThis logje plaatsen s.v.p.?
                            • Citaat

                            Comment

                            • #15
                              Ook vanavond weer geprobeert die mappen toe zoeken in een veilige modus,weer zonder resultaat helaas,maar ik heb op jou verzoek weer een log gemaakt.
                              Komt ie:

                              Logfile of HijackThis v1.98.2
                              Scan saved at 22:24:31, on 31-10-2004
                              Platform: Windows XP SP2 (WinNT 5.01.2600)
                              MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

                              Running processes:
                              C:\WINDOWS\System32\smss.exe
                              C:\WINDOWS\system32\winlogon.exe
                              C:\WINDOWS\system32\services.exe
                              C:\WINDOWS\system32\lsass.exe
                              C:\WINDOWS\system32\svchost.exe
                              C:\WINDOWS\System32\svchost.exe
                              C:\WINDOWS\system32\spoolsv.exe
                              C:\Program Files\Sitecom\Bluetooth Software\bin\btwdins.exe
                              C:\WINDOWS\System32\drivers\CDAC11BA.EXE
                              C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\isafe.exe
                              C:\WINDOWS\System32\CTsvcCDA.EXE
                              C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe
                              C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
                              C:\Program Files\F-Secure Internet Security\fswsclds.exe
                              C:\Program Files\IP Insight\ARMon32a.exe
                              C:\WINDOWS\System32\nvsvc32.exe
                              C:\WINDOWS\System32\svchost.exe
                              C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe
                              C:\WINDOWS\System32\MsPMSPSv.exe
                              C:\WINDOWS\Explorer.EXE
                              C:\Program Files\Creative\ShareDLL\CtNotify.exe
                              C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe
                              C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
                              C:\Program Files\Messenger Plus! 3\MsgPlus.exe
                              C:\Program Files\MSN Apps\Updater\01.02.3000.1001\nl-be\msnappau.exe
                              C:\PROGRA~1\CA\ETRUST~1\ETRUST~1\VetTray.exe
                              C:\Program Files\Creative\ShareDLL\MediaDet.Exe
                              C:\WINDOWS\system32\rundll32.exe
                              C:\WINDOWS\system32\ctfmon.exe
                              C:\Program Files\Sitecom\Bluetooth Software\BTTray.exe
                              c:\progra~1\intern~1\iexplore.exe
                              C:\PROGRA~1\Sitecom\BLUETO~1\BTSTAC~1.EXE
                              C:\WINDOWS\addins\diskvga.exe
                              C:\Program Files\Messenger\msmsgs.exe
                              C:\WINDOWS\Help\starter\runwin.exe
                              C:\Program Files\Internet Explorer\iexplore.exe
                              C:\Program Files\MSN Messenger\msnmsgr.exe
                              C:\Program Files\Internet Explorer\iexplore.exe
                              C:\Hijack This\HijackThis.exe

                              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.ralljrqwpmprdhk.us/Kdx2ULN7mVgmUYQwQ8zZEXy_JhQMdeCT6UjS/iNjWC2fd5opPGorCFfBYWDrcyyQ.html
                              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.megwqpywfdfqzdug.info/Kdx2ULN7mVhsjXW2PMNGN3WCQus3Ln2q1ZmkH6RuvJc.cgi
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.planet.nl
                              R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
                              O1 - Hosts: .com
                              O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
                              O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
                              O2 - BHO: OpinionBar IE monitor - {6607C683-AE7C-11D4-ACD7-0050DAC291A2} - C:\PROGRA~1\OPINIO~1\MYIEMO~1.DLL
                              O2 - BHO: CATLEvents Object - {870B70D4-F6DA-47AE-9158-D146440A0A4D} - C:\DOCUME~1\SILIVI~1\LOCALS~1\Temp\niwnur.dat
                              O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
                              O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\nl-be\msntb.dll
                              O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\nl-be\msntb.dll
                              O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
                              O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
                              O4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exe
                              O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
                              O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
                              O4 - HKLM\..\Run: [Jet Detection] C:\Program Files\Creative\SBAudigy\PROGRAM\ADGJDet.exe
                              O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
                              O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe" /icon
                              O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
                              O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                              O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
                              O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
                              O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\nl-be\msnappau.exe"
                              O4 - HKLM\..\Run: [VetTray] C:\PROGRA~1\CA\ETRUST~1\ETRUST~1\VetTray.exe
                              O4 - HKLM\..\Run: [*faxinfo] C:\WINDOWS\addins\faxinfo.exe
                              O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,NewDotNetStartup -s
                              O4 - HKLM\..\RunOnce: [*runwin] C:\WINDOWS\Help\starter\runwin.exe rerun
                              O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                              O4 - HKCU\..\Run: [TaskTray] C:\Program Files\Creative\SBAudigy\Taskbar\CTLTray.exe
                              O4 - HKCU\..\Run: [Taskbar] C:\Program Files\Creative\SBAudigy\Taskbar\CTLTask.exe
                              O4 - HKCU\..\Run: [PImenu] C:\Program Files\PImenu\PImenu.exe
                              O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
                              O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
                              O4 - HKCU\..\Run: [Holesign] C:\DOCUME~1\SILIVI~1\APPLIC~1\IDOLOP~1\MFCDACID.exe
                              O4 - HKCU\..\Run: [areslite] "C:\Program Files\Ares Lite Edition\AresLite.exe" -h
                              O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
                              O4 - HKCU\..\RunOnce: [*MS Setup] C:\WINDOWS\system32\bkinst.exe ren time:1099129123
                              O4 - Global Startup: BTTray.lnk = ?
                              O8 - Extra context menu item: Verzenden naar &Bluetooth - C:\Program Files\Sitecom\Bluetooth Software\btsendto_ie_ctx.htm
                              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
                              O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
                              O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Sitecom\Bluetooth Software\btsendto_ie.htm
                              O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Sitecom\Bluetooth Software\btsendto_ie.htm
                              O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                              O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                              O10 - Hijacked Internet access by New.Net
                              O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
                              O14 - IERESET.INF: START_PAGE_URL=http://www.planet.nl
                              O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - http://www.planet.nl/exent/classes/ExentCtl.ocx
                              O16 - DPF: {70647AB5-18FD-4142-82B0-5852478DD0D4} (Vividence Connector Launcher) - http://task.vividence.com/download/ConnectorLauncher.cab
                              O16 - DPF: {9B4AA442-9EBF-11D5-8C11-0050DA4957F5} - http://www.fastmp3.nl/test/nl.exe
                              O16 - DPF: {C3DFA998-A486-11D4-AA25-00C04F72DAEB} (MSN Photo Upload Tool) - http://sc.groups.msn.com/controls/PhotoUC/MsnPUpld.cab
                              O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://asp02.photoprintit.de/microsite/5/defaults/activex/XUpload.ocx
                              O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/vso/en-us/tools/mcfscan/2,0,0,4400/mcfscan.cab
                              O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
                              O17 - HKLM\System\CCS\Services\Tcpip\..\{D2426C53-74F2-4D36-BA47-0309D6C0C01B}: NameServer = 195.121.1.34 195.121.1.66
                              • Citaat

                              Comment

                              Vorige 1 2 3 4 5 6 template Volgende
                              Sorry, you are not authorized to view this page
                              Working...
                              X