Mededeling

Collapse
No announcement yet.

beste

Collapse
X
Collapse
  •  
  • Page of 1
  • Tijd
  • Show
Clear All
new posts
Vorige template Volgende
  • #1

    beste

    prettige feestdagen
    willen jullie aub eens na zien
    erzijn wel een paar programs afgezet met msconfig

    Logfile of HijackThis v1.99.0
    Scan saved at 11:52:05, on 31/12/2004
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    E:\WINDOWS\System32\smss.exe
    E:\WINDOWS\system32\winlogon.exe
    E:\WINDOWS\system32\services.exe
    E:\WINDOWS\system32\lsass.exe
    E:\WINDOWS\system32\svchost.exe
    E:\WINDOWS\System32\svchost.exe
    E:\WINDOWS\system32\spoolsv.exe
    E:\WINDOWS\Explorer.EXE
    E:\WINDOWS\system32\RunDll32.exe
    E:\WINDOWS\system32\PRISMSTA.EXE
    G:\PowerCinema\PCMService.exe
    E:\PROGRA~1\CA\ETRUST~1\realmon.exe
    E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    E:\Program Files\Logitech\Video\LogiTray.exe
    C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
    E:\WINDOWS\system32\ctfmon.exe
    G:\Program Files\Valve\Steam\Steam.exe
    E:\WINDOWS\system32\LVComS.exe
    E:\Program Files\MSN Messenger\MsnMsgr.Exe
    E:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
    E:\Program Files\Logitech\SetPoint\KEM.exe
    E:\PROGRAM FILES\LOGITECH\SETPOINT\KHALMNPR.EXE
    E:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
    E:\Program Files\CA\eTrust Antivirus\InoNmSrv.exe
    E:\Program Files\CA\eTrust Antivirus\InoRpc.exe
    E:\Program Files\CA\eTrust Antivirus\InoRT.exe
    E:\Program Files\CA\eTrust Antivirus\InoTask.exe
    E:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe
    E:\WINDOWS\System32\svchost.exe
    E:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
    E:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
    G:\PowerCinema\PCM2.exe
    E:\Program Files\Internet Explorer\iexplore.exe
    E:\Program Files\Internet Explorer\iexplore.exe
    E:\Documents and Settings\manu\Local Settings\Temporary Internet Files\Content.IE5\0D8TQBOT\hijackthis[1].exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://msn.be/
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: Search Relevancy - {1D7E3B41-23CE-469B-BE1B-A64B877923E1} - E:\PROGRA~1\SEARCH~1\SEARCH~2.DLL
    O2 - BHO: InstaFinder - {4E7BD74F-2B8D-469E-DCF7-F96DA086B434} - E:\WINDOWS\DOWNLO~1\instafin.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - G:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
    O4 - HKLM\..\Run: [PRISMSTA.EXE] PRISMSTA.EXE START
    O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
    O4 - HKLM\..\Run: [PCMService] "G:\PowerCinema\PCMService.exe"
    O4 - HKLM\..\Run: [Realtime Monitor] E:\PROGRA~1\CA\ETRUST~1\realmon.exe -s
    O4 - HKLM\..\Run: [ATIPTA] E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [Windows ControlAd] E:\Program Files\Windows ControlAd\WinCtlAd.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] E:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [LogitechVideoRepair] E:\Program Files\Logitech\Video\ISStart.exe
    O4 - HKLM\..\Run: [LogitechVideoTray] E:\Program Files\Logitech\Video\LogiTray.exe
    O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Steam] G:\Program Files\Valve\Steam\\Steam.exe -silent
    O4 - HKCU\..\Run: [MsnMsgr] "E:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - Global Startup: BTTray.lnk = ?
    O4 - Global Startup: Logitech Desktop Messenger.lnk = E:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O4 - Global Startup: Logitech SetPoint.lnk = E:\Program Files\Logitech\SetPoint\KEM.exe
    O8 - Extra context menu item: Verzenden naar &Bluetooth - E:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\j2re1.4.1_07\bin\npjpi141_07.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\j2re1.4.1_07\bin\npjpi141_07.dll
    O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - E:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - E:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe (file missing)
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe (file missing)
    O15 - Trusted Zone: *.musicmatch.com
    O15 - Trusted Zone: *.musicmatch.com (HKLM)
    O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540006} (CInstall Class) - http://www.errorguard.com/installation/Install.cab
    O16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - http://www.windowsecurity.com/trojanscan/TDECntrl.CAB
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1099433872796
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Besturing) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
    O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/vso/en-us/tools/mcfscan/2,0,0,4414/mcfscan.cab
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = pulla
    O17 - HKLM\Software\..\Telephony: DomainName = pulla
    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = pulla
    O23 - Service: Bluetooth Service - WIDCOMM, Inc. - E:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
    O23 - Service: CA License Client - Computer Associates - E:\Program Files\CA\SharedComponents\CA_LIC\lic98rmt.exe
    O23 - Service: CA License Server - Computer Associates - E:\Program Files\CA\SharedComponents\CA_LIC\lic98rmtd.exe
    O23 - Service: eTrust Antivirus Admin Server - Computer Associates International, Inc. - E:\Program Files\CA\eTrust Antivirus\InoNmSrv.exe
    O23 - Service: eTrust Antivirus RPC Server - Computer Associates International, Inc. - E:\Program Files\CA\eTrust Antivirus\InoRpc.exe
    O23 - Service: eTrust Antivirus Realtime Server - Computer Associates International, Inc. - E:\Program Files\CA\eTrust Antivirus\InoRT.exe
    O23 - Service: eTrust Antivirus Job Server - Computer Associates International, Inc. - E:\Program Files\CA\eTrust Antivirus\InoTask.exe
    O23 - Service: Event Log Watch - Computer Associates - E:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe
    O23 - Service: Sony SPTI Service - Sony Corporation - E:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
    O23 - Service: X10 Device Network Service - X10 - E:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
    Labels: Geen
      • Citaat
    • #2
      Kun je alles weer aanvinken in msconfig - opstarten, opnieuw opstarten, en een nieuw HijackThis logje posten? Als je rotzooi uitschakelt in HijackThis kan ik het niet zien, en blijft het op je PC zitten.
        • Citaat

        Comment

        • #3
          ok hier is het ik hoop dat het goed is

          Logfile of HijackThis v1.98.1
          Scan saved at 22:13:05, on 1/01/2005
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

          <logje verwijderd, oude HJT versie>
          Last edited by H@ns; 02-01-05, 08:44.
            • Citaat

            Comment

            • #4
              Graag een logje posten met HijackThis 1.99.0, zoals je in je eerste post deed
                • Citaat

                Comment

                • #5
                  mijk excuses voor het misverstand



                  Logfile of HijackThis v1.99.0

                  Scan saved at 18:24:40, on 2/01/2005
                  Platform: Windows XP SP2 (WinNT 5.01.2600)
                  MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

                  Running processes:
                  E:\WINDOWS\System32\smss.exe
                  E:\WINDOWS\system32\winlogon.exe
                  E:\WINDOWS\system32\services.exe
                  E:\WINDOWS\system32\lsass.exe
                  E:\WINDOWS\system32\svchost.exe
                  E:\WINDOWS\System32\svchost.exe
                  E:\WINDOWS\system32\spoolsv.exe
                  E:\WINDOWS\Explorer.EXE
                  E:\WINDOWS\system32\RunDll32.exe
                  E:\WINDOWS\system32\PRISMSTA.EXE
                  G:\PowerCinema\PCMService.exe
                  E:\PROGRA~1\CA\ETRUST~1\realmon.exe
                  E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                  E:\Program Files\Logitech\Video\LogiTray.exe
                  C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
                  E:\Program Files\QuickTime\qttask.exe
                  E:\Program Files\Logitech\Mobile Phone Suite\MobilePhoneSuite.exe
                  C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
                  E:\WINDOWS\system32\LVComS.exe
                  E:\WINDOWS\system32\ctfmon.exe
                  G:\program files\valve\steam\steam.exe
                  E:\Program Files\MSN Messenger\MsnMsgr.Exe
                  E:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
                  E:\Program Files\Logitech\SetPoint\KEM.exe
                  E:\PROGRAM FILES\LOGITECH\SETPOINT\KHALMNPR.EXE
                  E:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
                  E:\Program Files\CA\eTrust Antivirus\InoNmSrv.exe
                  E:\Program Files\CA\eTrust Antivirus\InoRpc.exe
                  E:\Program Files\CA\eTrust Antivirus\InoRT.exe
                  E:\Program Files\CA\eTrust Antivirus\InoTask.exe
                  E:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe
                  E:\WINDOWS\System32\svchost.exe
                  E:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
                  E:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
                  C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmjb.exe
                  C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\MMDiag.exe
                  C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_director.exe
                  E:\Program Files\Internet Explorer\iexplore.exe
                  E:\Documents and Settings\manu\Local Settings\Temporary Internet Files\Content.IE5\0D8TQBOT\hijackthis[1].exe

                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://msn.be/
                  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
                  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
                  O2 - BHO: Search Relevancy - {1D7E3B41-23CE-469B-BE1B-A64B877923E1} - E:\PROGRA~1\SEARCH~1\SEARCH~2.DLL
                  O2 - BHO: InstaFinder - {4E7BD74F-2B8D-469E-DCF7-F96DA086B434} - E:\WINDOWS\DOWNLO~1\instafin.dll
                  O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - G:\PROGRA~1\SPYBOT~1\SDHelper.dll
                  O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
                  O4 - HKLM\..\Run: [PRISMSTA.EXE] PRISMSTA.EXE START
                  O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
                  O4 - HKLM\..\Run: [PCMService] "G:\PowerCinema\PCMService.exe"
                  O4 - HKLM\..\Run: [Realtime Monitor] E:\PROGRA~1\CA\ETRUST~1\realmon.exe -s
                  O4 - HKLM\..\Run: [ATIPTA] E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                  O4 - HKLM\..\Run: [Windows ControlAd] E:\Program Files\Windows ControlAd\WinCtlAd.exe
                  O4 - HKLM\..\Run: [NeroFilterCheck] E:\WINDOWS\system32\NeroCheck.exe
                  O4 - HKLM\..\Run: [LogitechVideoRepair] E:\Program Files\Logitech\Video\ISStart.exe
                  O4 - HKLM\..\Run: [LogitechVideoTray] E:\Program Files\Logitech\Video\LogiTray.exe
                  O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
                  O4 - HKLM\..\Run: [QuickTime Task] "E:\Program Files\QuickTime\qttask.exe" -atboottime
                  O4 - HKLM\..\Run: [Mobile Phone Suite] E:\Program Files\Logitech\Mobile Phone Suite\MobilePhoneSuite.exe -nogui
                  O4 - HKLM\..\Run: [mmtask] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
                  O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe
                  O4 - HKCU\..\Run: [Steam] "g:\program files\valve\steam\steam.exe" -silent
                  O4 - HKCU\..\Run: [MsnMsgr] "E:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
                  O4 - Global Startup: BTTray.lnk = ?
                  O4 - Global Startup: Logitech Desktop Messenger.lnk = E:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
                  O4 - Global Startup: Logitech SetPoint.lnk = E:\Program Files\Logitech\SetPoint\KEM.exe
                  O8 - Extra context menu item: Verzenden naar &Bluetooth - E:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
                  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\j2re1.4.1_07\bin\npjpi141_07.dll
                  O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\j2re1.4.1_07\bin\npjpi141_07.dll
                  O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - E:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
                  O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - E:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
                  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe (file missing)
                  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe (file missing)
                  O15 - Trusted Zone: *.musicmatch.com
                  O15 - Trusted Zone: *.musicmatch.com (HKLM)
                  O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540006} (CInstall Class) - http://www.errorguard.com/installation/Install.cab
                  O16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - http://www.windowsecurity.com/trojanscan/TDECntrl.CAB
                  O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1099433872796
                  O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Besturing) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
                  O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
                  O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/vso/en-us/tools/mcfscan/2,0,0,4414/mcfscan.cab
                  O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = pulla
                  O17 - HKLM\Software\..\Telephony: DomainName = pulla
                  O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = pulla
                  O23 - Service: Bluetooth Service - WIDCOMM, Inc. - E:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
                  O23 - Service: CA License Client - Computer Associates - E:\Program Files\CA\SharedComponents\CA_LIC\lic98rmt.exe
                  O23 - Service: CA License Server - Computer Associates - E:\Program Files\CA\SharedComponents\CA_LIC\lic98rmtd.exe
                  O23 - Service: eTrust Antivirus Admin Server - Computer Associates International, Inc. - E:\Program Files\CA\eTrust Antivirus\InoNmSrv.exe
                  O23 - Service: eTrust Antivirus RPC Server - Computer Associates International, Inc. - E:\Program Files\CA\eTrust Antivirus\InoRpc.exe
                  O23 - Service: eTrust Antivirus Realtime Server - Computer Associates International, Inc. - E:\Program Files\CA\eTrust Antivirus\InoRT.exe
                  O23 - Service: eTrust Antivirus Job Server - Computer Associates International, Inc. - E:\Program Files\CA\eTrust Antivirus\InoTask.exe
                  O23 - Service: Event Log Watch - Computer Associates - E:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe
                  O23 - Service: Sony SPTI Service - Sony Corporation - E:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
                  O23 - Service: X10 Device Network Service - X10 - E:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
                    • Citaat

                    Comment

                    • #6
                      Hoi Manu,

                      Ga naar Deze Computer, dubbelklik daar op C. Dubbelklik op Program Files. Klik nu op "Bestand" > "Nieuw" > "Map". Noem deze map HJT of HijackThis. Plaats nu de HijackThis.exe in DIE map. Draai in het vervolg HijackThis vanuit DIE map . Dit in verband met de backups die dit programma maakt

                      1. Start HijackThis, en vink onderstaande regels aan:

                      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

                      O2 - BHO: Search Relevancy - {1D7E3B41-23CE-469B-BE1B-A64B877923E1} - E:\PROGRA~1\SEARCH~1\SEARCH~2.DLL
                      O2 - BHO: InstaFinder - {4E7BD74F-2B8D-469E-DCF7-F96DA086B434} - E:\WINDOWS\DOWNLO~1\instafin.dll

                      O4 - HKLM\..\Run: [Windows ControlAd] E:\Program Files\Windows ControlAd\WinCtlAd.exe
                      2. Sluit alle andere vensters en browsers, en klik op de knop “Fix Checked”.

                      3. Start opnieuw op in veilige modus.
                      Zorg ervoor dat verborgen bestanden en mappen zichtbaar zijn: Verkenner > Extra > Mapopties > Tablad Weergave > scroll naar beneden en vink het vakje voor "Verborgen bestanden en mappen weergeven" aan.

                      4. Ga naar Windows Verkenner (Rechtsklikken op Start - Verkennen). Zoek en verwijder het volgende:
                      Mappen:
                      E:\Program Files\SearchRelevancy
                      E:\Program Files\Windows ControlAd

                      Bestand:
                      C:\Windows\Downloaded Program Files\instafin.dll

                      5. Start opnieuw op in normale modus, maak een nieuw logje aan met HijackThis, en post dat hier
                        • Citaat

                        Comment

                        • #7
                          ik heb alleen het bestand " instafin.dll"niet gevonden.



                          Logfile of HijackThis v1.99.0
                          Scan saved at 23:37:19, on 3/01/2005
                          Platform: Windows XP SP2 (WinNT 5.01.2600)
                          MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

                          Running processes:
                          E:\WINDOWS\System32\smss.exe
                          E:\WINDOWS\system32\winlogon.exe
                          E:\WINDOWS\system32\services.exe
                          E:\WINDOWS\system32\lsass.exe
                          E:\WINDOWS\system32\svchost.exe
                          E:\WINDOWS\System32\svchost.exe
                          E:\WINDOWS\system32\spoolsv.exe
                          E:\WINDOWS\Explorer.EXE
                          E:\WINDOWS\system32\RunDll32.exe
                          E:\WINDOWS\system32\PRISMSTA.EXE
                          G:\PowerCinema\PCMService.exe
                          E:\PROGRA~1\CA\ETRUST~1\realmon.exe
                          E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                          E:\Program Files\Logitech\Video\LogiTray.exe
                          E:\WINDOWS\system32\LVComS.exe
                          C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
                          E:\Program Files\QuickTime\qttask.exe
                          E:\Program Files\Logitech\Mobile Phone Suite\MobilePhoneSuite.exe
                          C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
                          E:\WINDOWS\system32\ctfmon.exe
                          G:\program files\valve\steam\steam.exe
                          E:\Program Files\MSN Messenger\MsnMsgr.Exe
                          E:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
                          E:\Program Files\Logitech\SetPoint\KEM.exe
                          E:\PROGRAM FILES\LOGITECH\SETPOINT\KHALMNPR.EXE
                          E:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
                          E:\Program Files\CA\eTrust Antivirus\InoNmSrv.exe
                          E:\Program Files\CA\eTrust Antivirus\InoRpc.exe
                          E:\Program Files\CA\eTrust Antivirus\InoRT.exe
                          E:\Program Files\CA\eTrust Antivirus\InoTask.exe
                          E:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe
                          E:\WINDOWS\System32\svchost.exe
                          E:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
                          E:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
                          E:\Program Files\Internet Explorer\iexplore.exe
                          E:\hijackthis\hijackthis.exe

                          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://msn.be/
                          R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
                          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
                          O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
                          O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - G:\PROGRA~1\SPYBOT~1\SDHelper.dll
                          O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
                          O4 - HKLM\..\Run: [PRISMSTA.EXE] PRISMSTA.EXE START
                          O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
                          O4 - HKLM\..\Run: [PCMService] "G:\PowerCinema\PCMService.exe"
                          O4 - HKLM\..\Run: [Realtime Monitor] E:\PROGRA~1\CA\ETRUST~1\realmon.exe -s
                          O4 - HKLM\..\Run: [ATIPTA] E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                          O4 - HKLM\..\Run: [NeroFilterCheck] E:\WINDOWS\system32\NeroCheck.exe
                          O4 - HKLM\..\Run: [LogitechVideoRepair] E:\Program Files\Logitech\Video\ISStart.exe
                          O4 - HKLM\..\Run: [LogitechVideoTray] E:\Program Files\Logitech\Video\LogiTray.exe
                          O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
                          O4 - HKLM\..\Run: [QuickTime Task] "E:\Program Files\QuickTime\qttask.exe" -atboottime
                          O4 - HKLM\..\Run: [Mobile Phone Suite] E:\Program Files\Logitech\Mobile Phone Suite\MobilePhoneSuite.exe -nogui
                          O4 - HKLM\..\Run: [mmtask] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
                          O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe
                          O4 - HKCU\..\Run: [Steam] "g:\program files\valve\steam\steam.exe" -silent
                          O4 - HKCU\..\Run: [MsnMsgr] "E:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
                          O4 - Global Startup: BTTray.lnk = ?
                          O4 - Global Startup: Logitech Desktop Messenger.lnk = E:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
                          O4 - Global Startup: Logitech SetPoint.lnk = E:\Program Files\Logitech\SetPoint\KEM.exe
                          O8 - Extra context menu item: Verzenden naar &Bluetooth - E:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
                          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\j2re1.4.1_07\bin\npjpi141_07.dll
                          O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\j2re1.4.1_07\bin\npjpi141_07.dll
                          O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - E:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
                          O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - E:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
                          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe (file missing)
                          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe (file missing)
                          O15 - Trusted Zone: *.musicmatch.com
                          O15 - Trusted Zone: *.musicmatch.com (HKLM)
                          O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540006} (CInstall Class) - http://www.errorguard.com/installation/Install.cab
                          O16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - http://www.windowsecurity.com/trojanscan/TDECntrl.CAB
                          O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1099433872796
                          O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Besturing) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
                          O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
                          O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/vso/en-us/tools/mcfscan/2,0,0,4414/mcfscan.cab
                          O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = pulla
                          O17 - HKLM\Software\..\Telephony: DomainName = pulla
                          O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = pulla
                          O23 - Service: Bluetooth Service - WIDCOMM, Inc. - E:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
                          O23 - Service: CA License Client - Computer Associates - E:\Program Files\CA\SharedComponents\CA_LIC\lic98rmt.exe
                          O23 - Service: CA License Server - Computer Associates - E:\Program Files\CA\SharedComponents\CA_LIC\lic98rmtd.exe
                          O23 - Service: eTrust Antivirus Admin Server - Computer Associates International, Inc. - E:\Program Files\CA\eTrust Antivirus\InoNmSrv.exe
                          O23 - Service: eTrust Antivirus RPC Server - Computer Associates International, Inc. - E:\Program Files\CA\eTrust Antivirus\InoRpc.exe
                          O23 - Service: eTrust Antivirus Realtime Server - Computer Associates International, Inc. - E:\Program Files\CA\eTrust Antivirus\InoRT.exe
                          O23 - Service: eTrust Antivirus Job Server - Computer Associates International, Inc. - E:\Program Files\CA\eTrust Antivirus\InoTask.exe
                          O23 - Service: Event Log Watch - Computer Associates - E:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe
                          O23 - Service: Sony SPTI Service - Sony Corporation - E:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
                          O23 - Service: X10 Device Network Service - X10 - E:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
                            • Citaat

                            Comment

                            • #8
                              Alleen deze regel nog even fixen:

                              O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540006} (CInstall Class) - http://www.errorguard.com/installation/Install.cab

                              Start opnieuw op.

                              Je logje is nu schoon. Draait alles weer naar behoren?
                                • Citaat

                                Comment

                                • #9
                                  Dank u voor de hulp alles werk naar behoren.
                                  groeten manu
                                    • Citaat

                                    Comment

                                    Vorige template Volgende
                                    Sorry, you are not authorized to view this page
                                    Working...
                                    X
                                    😀
                                    🥰
                                    🤢
                                    😎
                                    😡
                                    👍
                                    👎