'only the best' pop-ups/Home search startpagina

[gris]

Beste ASO's,


Ik zit met het volgende probleem. In mijn gewone browser krijg ik constant dezelfde hardnekkige startpagina namelijk deze http://www.pchell.com/support/onlythebest.shtml en de daarbij behorende 'only the best'-pop-ups.

Ik heb Adaware erover heen gehad in de veilige modus, spybot en CWShredder en het haalt allemaal niks uit. Ook Kazzaa-light bijv doet het opeens niet meer en krijg zo nu en dan foutmeldingen. Iemand enig idee hoe ik dit op een redelijk eenvoudige wijze kan oplossen. IK heb hetgene wat in bovenstaande link staat geprobeerd maar kom er niet uit.

Mvg,

Chris

______________________________________________________________________

Logfile of HijackThis v1.98.2
Scan saved at 17:58:31, on 25-12-04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Unable to get Internet Explorer version!

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\NETDK32.EXE
C:\WINDOWS\ATLKU32.EXE
C:\WINDOWS\SYSTEM\JAVACG.EXE
C:\WINDOWS\MFCGD32.EXE
C:\WINDOWS\SYSTEM\APPKY32.EXE
C:\WINDOWS\MFCGT.EXE
C:\WINDOWS\MFCSB.EXE
C:\WINDOWS\SYSTEM\MFCLO32.EXE
C:\WINDOWS\CRBM.EXE
C:\WINDOWS\SDKEK32.EXE
C:\WINDOWS\SYSTEM\JAVAYT32.EXE
C:\WINDOWS\MFCWI32.EXE
C:\WINDOWS\APIHZ32.EXE
C:\WINDOWS\SYSTEM\IPLB32.EXE
C:\WINDOWS\IEZZ.EXE
C:\WINDOWS\ATLXW.EXE
C:\WINDOWS\SYSTEM\WINLS32.EXE
C:\WINDOWS\SYSTEM\NETGE32.EXE
C:\PROGRAM FILES\MOUSE\AMOUMAIN.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\PROGRAM FILES\REAL\REALPLAYER\REALPLAY.EXE
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\PROGRAM FILES\WINZIP\WZQKPICK.EXE
C:\PROGRAM FILES\OLYMPUS\CAMEDIA MASTER 4.2\CM_CAMERA.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\APPKY32.EXE
C:\WINDOWS\JAVAWD32.EXE
C:\WINDOWS\SYSTEM\APPKY32.EXE
C:\WINDOWS\SYSTEM\SYSOT32.EXE
C:\WINDOWS\JAVAWD32.EXE
C:\WINDOWS\MFCYS32.EXE
C:\WINDOWS\JAVAWD32.EXE
C:\WINDOWS\SYSTEM\APIDY32.EXE
C:\WINDOWS\SYSTEM\APIDY32.EXE
C:\WINDOWS\SYSTEM\ATLKS.EXE
C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\APIDY32.EXE
C:\WINDOWS\SYSTEM\D3BH.EXE
C:\PROGRAM FILES\WINZIP\WINZIP32.EXE
C:\PROGRAM FILES\WINZIP\WINZIP32.EXE
C:\WINDOWS\TEMP\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system\legvr.dll/sp.html#93256
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system\legvr.dll/sp.html#93256
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system\legvr.dll/sp.html#93256
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system\legvr.dll/sp.html#93256
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system\legvr.dll/sp.html#93256
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system\legvr.dll/sp.html#93256
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system\legvr.dll/sp.html#93256
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer aangeboden door @Home
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://proxy:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: Class - {99FA4172-70BA-F5F0-EB8D-3E910E0ADD26} - C:\WINDOWS\APPHM.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [EnsoniqMixer] starter.exe
O4 - HKLM\..\Run: [WheelMouse] Amoumain.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\RunServices: [IPAC.EXE] C:\WINDOWS\IPAC.EXE
O4 - HKLM\..\RunServices: [APIXN32.EXE] C:\WINDOWS\SYSTEM\APIXN32.EXE
O4 - HKLM\..\RunServices: [MFCAS.EXE] C:\WINDOWS\MFCAS.EXE
O4 - HKLM\..\RunServices: [IEIS.EXE] C:\WINDOWS\IEIS.EXE
O4 - HKLM\..\RunServices: [SDKYG.EXE] C:\WINDOWS\SYSTEM\SDKYG.EXE
O4 - HKLM\..\RunServices: [CRPB.EXE] C:\WINDOWS\SYSTEM\CRPB.EXE
O4 - HKLM\..\RunServices: [APPFZ32.EXE] C:\WINDOWS\APPFZ32.EXE
O4 - HKLM\..\RunServices: [IPQQ.EXE] C:\WINDOWS\SYSTEM\IPQQ.EXE
O4 - HKLM\..\RunServices: [WINAF.EXE] C:\WINDOWS\SYSTEM\WINAF.EXE
O4 - HKLM\..\RunServices: [IPGB32.EXE] C:\WINDOWS\IPGB32.EXE
O4 - HKLM\..\RunServices: [SYSEA.EXE] C:\WINDOWS\SYSTEM\SYSEA.EXE
O4 - HKLM\..\RunServices: [ADDPX32.EXE] C:\WINDOWS\ADDPX32.EXE
O4 - HKLM\..\RunServices: [CRFR.EXE] C:\WINDOWS\SYSTEM\CRFR.EXE
O4 - HKLM\..\RunServices: [CRMO.EXE] C:\WINDOWS\SYSTEM\CRMO.EXE
O4 - HKLM\..\RunServices: [WINDJ32.EXE] C:\WINDOWS\WINDJ32.EXE
O4 - HKLM\..\RunServices: [ATLEY.EXE] C:\WINDOWS\SYSTEM\ATLEY.EXE
O4 - HKLM\..\RunServices: [D3CW32.EXE] C:\WINDOWS\D3CW32.EXE
O4 - HKLM\..\RunServices: [SYSMJ32.EXE] C:\WINDOWS\SYSTEM\SYSMJ32.EXE
O4 - HKLM\..\RunServices: [IEME.EXE] C:\WINDOWS\IEME.EXE
O4 - HKLM\..\RunServices: [ATLWU32.EXE] C:\WINDOWS\SYSTEM\ATLWU32.EXE
O4 - HKLM\..\RunServices: [SYSNK32.EXE] C:\WINDOWS\SYSTEM\SYSNK32.EXE
O4 - HKLM\..\RunServices: [IEAG32.EXE] C:\WINDOWS\SYSTEM\IEAG32.EXE
O4 - HKLM\..\RunServices: [SDKIR32.EXE] C:\WINDOWS\SDKIR32.EXE
O4 - HKLM\..\RunServices: [SYSXW.EXE] C:\WINDOWS\SYSTEM\SYSXW.EXE
O4 - HKLM\..\RunServices: [ADDZG.EXE] C:\WINDOWS\ADDZG.EXE
O4 - HKLM\..\RunServices: [IEID.EXE] C:\WINDOWS\IEID.EXE
O4 - HKLM\..\RunServices: [APPPW.EXE] C:\WINDOWS\APPPW.EXE
O4 - HKLM\..\RunServices: [NETZR32.EXE] C:\WINDOWS\SYSTEM\NETZR32.EXE
O4 - HKLM\..\RunServices: [ATLEZ.EXE] C:\WINDOWS\SYSTEM\ATLEZ.EXE
O4 - HKLM\..\RunServices: [JAVAAJ32.EXE] C:\WINDOWS\SYSTEM\JAVAAJ32.EXE
O4 - HKLM\..\RunServices: [MSPX.EXE] C:\WINDOWS\MSPX.EXE
O4 - HKLM\..\RunServices: [MSRG32.EXE] C:\WINDOWS\MSRG32.EXE
O4 - HKLM\..\RunServices: [ADDTI.EXE] C:\WINDOWS\ADDTI.EXE
O4 - HKLM\..\RunServices: [NTAX.EXE] C:\WINDOWS\NTAX.EXE
O4 - HKLM\..\RunServices: [APIOX.EXE] C:\WINDOWS\SYSTEM\APIOX.EXE
O4 - HKLM\..\RunServices: [CRPS.EXE] C:\WINDOWS\CRPS.EXE
O4 - HKLM\..\RunServices: [MSKC32.EXE] C:\WINDOWS\MSKC32.EXE
O4 - HKLM\..\RunServices: [SYSDS32.EXE] C:\WINDOWS\SYSDS32.EXE
O4 - HKLM\..\RunServices: [NETDK32.EXE] C:\WINDOWS\SYSTEM\NETDK32.EXE
O4 - HKLM\..\RunServices: [JAVACG.EXE] C:\WINDOWS\SYSTEM\JAVACG.EXE
O4 - HKLM\..\RunServices: [ATLKU32.EXE] C:\WINDOWS\ATLKU32.EXE
O4 - HKLM\..\RunServices: [APPKY32.EXE] C:\WINDOWS\SYSTEM\APPKY32.EXE
O4 - HKLM\..\RunServices: [MFCGT.EXE] C:\WINDOWS\MFCGT.EXE
O4 - HKLM\..\RunServices: [MFCGD32.EXE] C:\WINDOWS\MFCGD32.EXE
O4 - HKLM\..\RunServices: [MFCSB.EXE] C:\WINDOWS\MFCSB.EXE
O4 - HKLM\..\RunServices: [MFCLO32.EXE] C:\WINDOWS\SYSTEM\MFCLO32.EXE
O4 - HKLM\..\RunServices: [CRBM.EXE] C:\WINDOWS\CRBM.EXE
O4 - HKLM\..\RunServices: [SDKEK32.EXE] C:\WINDOWS\SDKEK32.EXE
O4 - HKLM\..\RunServices: [JAVAYT32.EXE] C:\WINDOWS\SYSTEM\JAVAYT32.EXE
O4 - HKLM\..\RunServices: [MFCWI32.EXE] C:\WINDOWS\MFCWI32.EXE
O4 - HKLM\..\RunServices: [IPLB32.EXE] C:\WINDOWS\SYSTEM\IPLB32.EXE
O4 - HKLM\..\RunServices: [NETGE32.EXE] C:\WINDOWS\SYSTEM\NETGE32.EXE
O4 - HKLM\..\RunServices: [APIHZ32.EXE] C:\WINDOWS\APIHZ32.EXE
O4 - HKLM\..\RunServices: [WINLS32.EXE] C:\WINDOWS\SYSTEM\WINLS32.EXE
O4 - HKLM\..\RunServices: [ATLXW.EXE] C:\WINDOWS\ATLXW.EXE
O4 - HKLM\..\RunServices: [IEZZ.EXE] C:\WINDOWS\IEZZ.EXE
O4 - HKLM\..\RunServices: [JAVAWD32.EXE] C:\WINDOWS\JAVAWD32.EXE
O4 - HKLM\..\RunServices: [SYSOT32.EXE] C:\WINDOWS\SYSTEM\SYSOT32.EXE
O4 - HKLM\..\RunServices: [MFCYS32.EXE] C:\WINDOWS\MFCYS32.EXE
O4 - HKLM\..\RunServices: [APIDY32.EXE] C:\WINDOWS\SYSTEM\APIDY32.EXE
O4 - HKLM\..\RunServices: [ATLKS.EXE] C:\WINDOWS\SYSTEM\ATLKS.EXE
O4 - HKLM\..\RunServices: [D3BH.EXE] C:\WINDOWS\SYSTEM\D3BH.EXE
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O4 - Startup: CAMEDIA Master.lnk = C:\Program Files\OLYMPUS\CAMEDIA Master 4.2\CM_camera.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll
O9 - Extra button: PopupPopper Configuratiescherm - {3E94F358-9537-4BBA-8D12-D7F8A0136973} - C:\Program Files\PopupPopper\SiteList.exe
O13 - DefaultPrefix:
O13 - WWW Prefix:
O13 - Home Prefix:
O13 - Mosaic Prefix:
O13 - FTP Prefix:
O13 - Gopher Prefix:

[Bobbi Flekman]

Hi gris,

Er is een nieuwere versie van HijackThis dan dat je gebruikt (1.99). Ga naar dit adres om deze te downloaden.

http://www.nucia.eu/downloads/hijackthis/index.html

Download Ad-aware SE en update het (Wereldbol ikoon, daarna Connect). Klik op "Perform Full System Scan". Ontvink "Search for negligible risk entries" en klik op "Next". Verwijder alles dat AdAware vindt.

Herstart je computer en scan nog een keer. Herhaal dit totdat AdAware niets meer vindt.

Download SpyBot S+D.
Na installatie, klik op "Search for Updates" en download wat het programma vindt.
Klik op "Search & Destroy" en op "Check for problems". Verwijder wat het vindt.

Laat je computer checken op deze sites:

Housecall Anti Virus Panda Anti Virus Trojan Scan

En dit is de link naar McAfee AVERT Stinger met instrukties voor gebruik.

Zet een vink bij "Auto Clean" voor je gaat scannen.Als het iets niet kan schoonmaken laat het het dan verwijderen of noteer de plaats zodat je het zelf kan verwijderen.

Post hierna een niewe log met versie 1.99!

[Buffy]

Aangezien reactie is uitgebleven, veronderstel ik dat het probleem is opgelost en sluit ik deze thread.