Mededeling

**smeenk** · 09-05-08, 16:34

Probeer dit programma eens: LOP-uninstall.zip
Voer bij “Uninstall verification“ de zevencijferige code in en klik “Uninstall“
Klik bij “Legal notice” OK
Sluit alle vensters en klik OK
Wacht .......en klik bij “Uninstall complete for all users“ OK.

Doe daarna dit:
Download dit bestand: Deljob.exe (mirror)
Dubbelklik Deljob.exe.
Een logje(logit.txt) zal openen.
Post de inhoud van logit.txt in je volgende bericht.

Post ook een nieuw logje van Hijackthis

**liquid1211** · 09-05-08, 22:12

--------------------------------------------------------
Backups created in C:\deljob

BFBECC9B9CD17B3B.job
--------------------------------------------------------
Files in Windows Tasks folder

1-Click Maintenance.job
Controleren op updates voor Windows Live Toolbar.job
--------------------------------------------------------
Export App Data folders
--------------------------------------------------------
De volumenaam van station C is Systeem
Het volumenummer is 94F6-B82B

Map van C:\Documents and Settings\Eigenaar\Application Data

2008-05-09 22:10 <DIR> .
2008-05-09 22:10 <DIR> ..
2008-01-05 20:37 <DIR> BITTOR~1 .bittorrent
2008-04-03 22:08 <DIR> Adobe
2007-06-27 15:28 <DIR> AdobeAUM
2007-06-27 15:30 <DIR> AdobeUM
2007-10-11 19:45 <DIR> AFTERB~1 afterbeep
2007-03-29 02:21 <DIR> Ahead
2007-03-22 06:08 <DIR> APPLEC~1 Apple Computer
2008-01-06 03:37 <DIR> Arcsoft
2007-08-23 17:53 <DIR> ATI
2008-05-09 08:00 <DIR> AVG7
2007-09-28 08:35 <DIR> BASSIC~1 Bassic Technologies
2007-05-05 05:01 <DIR> BITDOW~1 BitDownload
2007-11-10 03:40 <DIR> BITTOR~2 BitTorrent
2007-12-15 16:14 <DIR> CALLIN~1 CallingID
2008-04-10 00:52 <DIR> COGNIV~1 Cogniview
2008-03-03 08:21 <DIR> Corel
2007-10-17 22:49 <DIR> CYBERL~1 CyberLink
2007-05-31 21:00 <DIR> DivX
2007-12-29 08:28 <DIR> DMCache
2007-09-27 01:55 <DIR> Earthsim
2008-01-24 01:04 <DIR> GETRIG~1 GetRightToGo
2007-07-29 19:14 <DIR> Google
2008-05-08 20:46 <DIR> Help
2007-10-07 21:28 <DIR> HOUSEC~1.6 HouseCall 6.6
2008-02-03 16:16 <DIR> HP
2008-04-22 14:49 <DIR> ICACLI~1 ICAClient
2007-04-29 23:33 <DIR> ICQ
2007-04-27 20:27 <DIR> ICQTOO~1 ICQ Toolbar
2007-02-27 22:40 <DIR> IDENTI~1 Identities
2007-12-10 01:55 <DIR> IDM
2007-12-16 02:36 <DIR> IMAGEZ~1 Image Zone Express
2007-02-27 22:55 <DIR> INSTAL~1 InstallShield
2008-01-13 22:16 <DIR> INTERN~1 InternetAnonymizer
2007-11-20 00:20 <DIR> INTERV~1 InterVideo
2008-01-13 23:35 <DIR> Lavasoft
2007-06-27 15:31 <DIR> LEADER~1 Leadertech
2008-02-22 19:22 <DIR> LimeWire
2007-02-28 20:34 <DIR> MACROM~1 Macromedia
2007-11-03 18:16 <DIR> MEDIAP~1 Media Player Classic
2008-05-08 19:13 <DIR> MICROS~1 Microsoft
2008-03-03 00:21 <DIR> mIRC
2008-05-09 13:43 <DIR> Mozilla
2007-12-02 04:32 <DIR> NCHSOF~1 NCH Software
2007-09-28 14:54 <DIR> NCHSWI~1 NCH Swift Sound
2008-04-24 13:06 <DIR> Nero
2008-01-05 21:55 <DIR> Nokia
2008-01-09 20:10 <DIR> NOKIAM~1 Nokia Multimedia Player
2007-03-06 18:47 <DIR> OFFICE~1 OfficeUpdate12
2008-05-09 02:18 <DIR> OPENOF~1.ORG OpenOffice.org2
2007-12-28 01:00 <DIR> PCSUIT~1 PC Suite
2008-01-09 12:17 <DIR> PrevxCSI
2007-10-26 21:29 <DIR> PRINTE~1 Printer Info Cache
2007-10-21 23:46 <DIR> RADLIG~1 RadLight Company
2008-03-24 02:57 <DIR> Real
2007-12-01 15:45 <DIR> RECORD~1 Recordpad
2007-09-25 23:59 <DIR> REGIST~1 RegistrySmart
2007-04-08 18:46 <DIR> SCREEN~1 Screenshot Sender
2008-03-02 14:40 <DIR> Shareaza
2007-12-15 23:26 <DIR> SIMPLE~1 Simple Star
2008-04-26 00:45 <DIR> Skype
2007-09-20 12:09 <DIR> SOFTWA~1 Software602
2007-06-24 22:38 <DIR> SONYER~1 Sony Ericsson
2008-02-05 04:44 <DIR> SOUNDS~1 SoundSpectrum
2007-08-15 17:58 <DIR> SpeedBit
2007-12-16 01:00 <DIR> STAROF~1 StarOffice8
2007-02-27 23:05 <DIR> Sun
2007-10-14 09:10 <DIR> SYNTRI~1 Syntrillium
2007-05-31 15:25 <DIR> Talkback
2007-06-24 22:38 <DIR> Teleca
2007-12-09 04:29 <DIR> TomTom
2007-09-27 00:05 <DIR> TUNEUP~1 TuneUp Software
2007-07-22 17:26 <DIR> Uniblue
2008-01-27 01:39 <DIR> VERSIO~1 VersionTracker Pro
2007-11-10 23:52 <DIR> vlc
2007-07-20 21:08 <DIR> WinRAR
2008-04-11 22:30 <DIR> WIZZTO~1 WizzTones
2008-03-02 19:40 <DIR> Yahoo!
0 bestand(en) 0 bytes
79 map(pen) 5,547,622,400 bytes beschikbaar
De volumenaam van station C is Systeem
Het volumenummer is 94F6-B82B

Map van C:\Documents and Settings\All Users\Application Data

2008-05-09 22:10 <DIR> .
2008-05-09 22:10 <DIR> ..
2008-04-10 23:20 <DIR> Adobe
2007-12-01 05:44 <DIR> AM
2007-09-22 12:22 <DIR> APPLEC~1 Apple Computer
2008-01-06 04:57 <DIR> ArcSoft
2007-09-14 21:56 <DIR> ATI
2008-02-06 15:38 <DIR> Avg7
2007-05-28 01:47 <DIR> Backup
2007-11-20 00:20 <DIR> BenQ
2008-04-10 00:50 <DIR> COGNIV~1 Cogniview
2007-02-27 23:03 <DIR> CYBERL~1 CyberLink
2007-04-02 23:15 <DIR> DFX
2007-10-27 18:31 <DIR> DVDSHR~1 DVD Shrink
2007-10-27 18:52 <DIR> ELABOR~1 Elaborate Bytes
2008-04-03 22:07 <DIR> FLEXnet
2007-03-01 22:37 <DIR> Google
2008-01-19 17:18 <DIR> Grisoft
2008-02-03 16:13 <DIR> HP
2008-01-05 21:48 <DIR> INSTAL~1 Installations
2008-01-13 22:14 <DIR> INTERN~1 InternetAnonymizer
2007-10-29 21:50 <DIR> K7COMP~1 K7 Computing
2008-02-17 02:30 <DIR> Lavasoft
2007-10-06 02:05 <DIR> Logishrd
2007-03-16 01:05 <DIR> Logitech
2007-03-28 03:42 <DIR> MESSEN~1 Messenger Plus!
2008-05-08 19:28 <DIR> MICROS~1 Microsoft
2008-04-24 03:09 <DIR> MICROS~2 Microsoft Help
2007-05-31 15:24 <DIR> Mozilla
2007-12-02 04:33 <DIR> NCHSOF~1 NCH Software
2007-12-01 15:46 <DIR> NCHSWI~1 NCH Swift Sound
2008-02-02 15:19 <DIR> Nero
2008-01-05 21:49 <DIR> Nokia
2007-05-17 02:12 <DIR> NVIDIA
2007-02-27 23:07 <DIR> NVIEW_~1 nView_Profiles
2007-03-06 18:46 <DIR> OFFICE~1 Office Genuine Advantage
2008-01-08 19:39 <DIR> PCDRIV~1 PC Drivers HeadQuarters
2007-12-28 01:00 <DIR> PCSUIT~1 PC Suite
2007-11-18 02:40 <DIR> Prevx
2007-12-10 02:01 <DIR> Seagate
2007-12-15 23:45 <DIR> SIMPLE~1 Simple Star Shared
2007-10-05 22:25 <DIR> Skype
2007-08-15 17:58 <DIR> SpeedBit
2008-01-13 23:57 <DIR> SPYBOT~1 Spybot - Search & Destroy
2008-03-17 18:47 <DIR> TEMP
2008-02-16 21:14 <DIR> TomTom
2007-09-28 14:54 <DIR> TUNEUP~1 TuneUp Software
2007-11-29 00:34 <DIR> ULEADS~1 Ulead Systems
2007-02-28 20:20 <DIR> WINDOW~1 Windows Genuine Advantage
2008-02-02 07:19 <DIR> WINDOW~2 Windows Live Toolbar
2008-01-19 16:46 <DIR> WinZip
2008-03-21 22:31 <DIR> WLINST~1 WLInstaller
0 bestand(en) 0 bytes
52 map(pen) 5,547,618,304 bytes beschikbaar
--------------------------------------------------------
All User Accounts
--------------------------------------------------------
Administrator
All Users
Eigenaar
Gast
--------------------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:12, on 2008-05-09
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ANYCOM\Blue USB-200-250\bin\btwdins.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\PROGRA~1\TELENE~1\SMARTB~1\MotiveSB.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
C:\Program Files\InternetAnonymizer\GIAProxyService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\system32\WISPTIS.EXE
C:\Program Files\DFX\WMP\Apps\dfxgApp.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Hijack This\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: XTTBPos00 Class - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: InternetAnonymizer - {7873A33B-E2A1-4a0b-A418-B6378908ABAD} - C:\Program Files\InternetAnonymizer\GIAToolBar.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\TELENE~1\SMARTB~1\MotiveSB.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\HOMERunner.exe"
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Lokale service')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'Default user')
O4 - Startup: OpenOffice.org 2.3 .lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
O4 - Startup: OpenOffice.org 2.4 .lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe
O4 - Global Startup: SMC EZ Connect N Wireless Utility.lnk = C:\Program Files\SMC\Common_11n\RaUI.exe
O4 - Global Startup: Telenet EasyCare.lnk = C:\Program Files\Telenet EasyCare\bin\matcli.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download video with Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Verzenden naar &Bluetooth-apparaat... - C:\Program Files\ANYCOM\Blue USB-200-250\btsendto_ie_ctx.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20070711/qtinstall.info.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} (asusTek_sysctrl Class) - http://support.asus.com/common/asusTek_sys_ctrl.cab
O16 - DPF: {13149882-F480-4F6B-8C6A-0764F75B99ED} (CrazyTalk4 Control) - http://plug-in.reallusion.com/CrazyTalk4.cab
O16 - DPF: {1EF9F042-C2EB-4293-8213-474CAEEF531D} (TmHcmsX Control) - http://www.trendsecure.com/framework/control/activex/TmHcmsX.CAB
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {238F6F83-B8B4-11CF-8771-00A024541EE3} (Citrix ICA Client) - http://a516.g.akamai.net/f/516/25175/7d/runaware.download.akamai.com/25175/citrix/wficat-no-eula.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {459E93B6-150E-45D5-8D4B-45C66FC035FE} (get_atlcom Class) - http://apps.corel.com/nos_dl_manager_dev/plugin/IEGetPlugin.ocx
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by119w.bay119.mail.live.com/mail/resources/MsnPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/2.0.0.1/sysreqlab2.cab
O16 - DPF: {6CE31B8D-8340-4DBD-B78E-BF59620924DC} (Quest3DCtlr2 Class) - http://www.quest3d.com/webplugin/download/quest3dactivex2.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1173199662296
O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} (NVIDIA Smart Scan) - http://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab
O16 - DPF: {B7D07999-2ADB-4AEB-997E-F61CB7B2E2CD} (TSEasyInstallX Control) - http://www.trendsecure.com/easy_install/_activex/en-US/TSEasyInstallX.CAB
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://driveragent.com/files/driveragent.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/mcfscan/2,2,0,5204/mcfscan.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\ANYCOM\Blue USB-200-250\bin\btwdins.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GIA Proxy Service (GIAProxyService) - InternetAnonymizer Corporation - C:\Program Files\InternetAnonymizer\GIAProxyService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Windows Live OneCare (winss) - Unknown owner - C:\Program Files\Microsoft Windows OneCare Live\winss.exe (file missing)

--
End of file - 13055 bytes

**smeenk** · 10-05-08, 07:18

Infectie lijkt verdwenen

Doe dit nog:

Start Hijackthis en vink alleen de volgende regels aan:
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
Sluit alle openstaande vensters(behalve Hijackthis) en klik op "Fix checked" om de geselecteerde regels te verwijderen.

Je Java software is verouderd.
Oudere versies hebben lekken die malware de kans geeft om zich te installeren op je systeem.
Doe eerst deze stappen om Java te de-installeren en de nieuwere versie te installeren:

Download Java Runtime Environment (JRE) 6u6 en bewaar het naar je Bureaublad.
Sluit alle programma's die eventueel open zijn - Zeker je web browser!
Ga dan naar Start > Configuratiescherm > Software en verwijder alle oudere versies van Java uit de Softwarelijst.
Vink alles aan met Java Runtime Environment (JRE of J2SE) in de naam.
Klik dan op Verwijderen of op de Wijzig/Verwijder knop.
Herhaal dit tot alle oudere versies verdwenen zijn.
Na het verwijderen van alle oudere versies, herstart je pc.
Dubbelklik vervolgens op jre-6u6-windows-i586-p.exe op je Bureaublad om de nieuwste versie van Java te installeren.

Download ATF cleaner (mirror)(gemaakt door Atribune)

Belangrijk: Sluit al je browservensters(IE en/of Firefox en/of Opera) om de tool goed te kunnen laten werken.

Dubbelklik op ATF cleaner om het programma te starten.
Op het tabblad "Main", plaats je een vinkje bij Select All.
Klik op de knop Empty Selected.

Het volgende doen als je ook FireFox als browser hebt:
Klik op tabblad "Firefox", plaats een vinkje bij Select All.
Wil je de door Firefox opgeslagen wachtwoorden behouden, dan klik je in het venster dat verschijnt op "No".
(dit haalt het vinkje weer weg bij "Firefox saved passwords")
Klik op de knop Empty Selected.

Het volgende doen als je ook Opera als browser hebt:
Klik op tabblad "Opera", plaats een vinkje bij Select All.
Wil je de door Opera opgeslagen wachtwoorden behouden, dan klik je in het venster dat verschijnt op "No".
Klik op de knop Empty Selected.
Ga naar het tabblad "Main" en klik op de knop Exit om het programma af te sluiten.

Schakel Systeemherstel uit. Herstart de computer. Schakel Systeemherstel weer in.
Kijk hier hoe je je systeemherstel moet uitschakelen.
Hiermee verwijder je eventuele restanten van de infecties uit je systeemherstel.

Dan denk ik dat alles weer OK is.

Groeten smeenk

Mededeling

cid popup

cid popup

Comment

Comment

Comment