Archief - eventjes controleren plz

Het archief is een bevroren moment uit een vorige versie van dit forum, met andere regels en andere bazen. Deze posts weerspiegelen op geen enkele manier onze huidige ideeën, waarden of wereldbeelden en zijn op sommige plaatsen gecensureerd wegens ontoelaatbaar. Veel zijn in een andere tijdsgeest gemaakt, al dan niet ironisch - zoals in het ironische subforum Off-Topic - en zouden op dit moment niet meer gepost (mogen) worden. Toch bieden we dit archief nog graag aan als informatiedatabank en naslagwerk. Lees er hier meer over of start een gesprek met anderen.
b

bartichello

Legacy Member
Logfile of HijackThis v1.99.1
Scan saved at 18:38:40, on 9/07/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Google\Gmail Notifier\G001-1.0.25.0\gnotify.exe
C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
C:\Program Files\Telemeter 3.0\telemeter3.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\PROGRA~1\COMMON~1\SMANTE~1\ntvdm.exe
C:\DOCUME~1\BARTIC~1\APPLIC~1\CURITY~1\LGONUI~1.EXE
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Documents and Settings\Bartichello\Mijn documenten\instal's\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
R3 - URLSearchHook: (no name) - {AB5C3355-F59E-B869-C94F-8BBAAB381BE4} - C:\WINDOWS\system32\isc.dll
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O2 - BHO: (no name) - {AB5C3355-F59E-B869-C94F-8BBAAB381BE4} - C:\WINDOWS\system32\isc.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [ASUS Probe] C:\Program Files\ASUS\Probe\AsusProb.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\G001-1.0.25.0\gnotify.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
O4 - HKLM\..\Run: [Telemeter 3.0] "C:\Program Files\Telemeter 3.0\telemeter3.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [Aosa] "C:\PROGRA~1\COMMON~1\SMANTE~1\ntvdm.exe" -vt yazb
O4 - HKCU\..\Run: [Gyomjex] C:\DOCUME~1\BARTIC~1\APPLIC~1\CURITY~1\LGONUI~1.EXE
O4 - HKCU\..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: YAWn!.NET.lnk = C:\Program Files\YAWn.NET\YAWn.exe
O4 - Global Startup: Adobe Reader Snelle start.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1149789288909
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1149792379828
O18 - Protocol: bw+0 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {6BEF8EBE-B5F0-4ED8-A11D-C87E8F3925E4} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - AppInit_DLLs: C:\WINDOWS\system32\ping.dll
O20 - Winlogon Notify: winwly32 - C:\WINDOWS\SYSTEM32\winwly32.dll
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Unknown owner - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

laatste tijd nogal veel upload imo, eens zien wat er mee scheelt... ik weet trouwens niet wat der mee scheelt maar da 018 ding staat er kweetnie hoeveel tussen :s
E

Exit

Legacy Member
C:\DOCUME~1\BARTIC~1\APPLIC~1\CURITY~1\LGONUI~1.EX E **gekend?**

R3 - URLSearchHook: (no name) - {AB5C3355-F59E-B869-C94F-8BBAAB381BE4} - C:\WINDOWS\system32\isc.dll
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: (no name) - {AB5C3355-F59E-B869-C94F-8BBAAB381BE4} - C:\WINDOWS\system32\isc.dll
O4 - HKCU\..\Run: [Aosa] "C:\PROGRA~1\COMMON~1\SMANTE~1\ntvdm.exe" -vt yazb
O4 - HKCU\..\Run: [Gyomjex] C:\DOCUME~1\BARTIC~1\APPLIC~1\CURITY~1\LGONUI~1.EX E
O4 - Startup: YAWn!.NET.lnk = C:\Program Files\YAWn.NET\YAWn.exe
O20 - AppInit_DLLs: C:\WINDOWS\system32\ping.dll
O20 - Winlogon Notify: winwly32 - C:\WINDOWS\SYSTEM32\winwly32.dll

dit zijn de boosdoeners.
W8 ook op Jurgen om te checken is er beter van op de hoogte.
J

Jurgenv1

Legacy Member
* Laat deze uninstaller eens runnen:
http://www.outerinfo.com/OiUninstaller.exe

* Als je logitech desktop messenger niet echt gebruikt, dan raad ik je aan die te de-installeren omdat dit onnodig je systeem vertraagd, het zoekt namelijk naar updates voor je logitech producten terwijl dit prefect handmatig kan zonder zo te vertragen.

* Download en installeer Ewido Anti-Spyware 4.0.

  • Na de installatie, open Ewido Anti-Spyware 4.0:
    * onder "Status", klik op Change state naast "Resident shield".
    * onder "Update", klik op de Start update knop.
    * onder "Scanner", tab "Settings":
    • - onder "How to act?", klik op "Recommended actions" en selecteer Quarantine.
      - onder "Reports", selecteer Automatically generate report after every scan en verwijder het vinkje bij Only if threats were found
    Sluit Ewido. Laat het nog niet scannen.

* Als je Adaware SE nog niet geïnstalleerd hebt, download, installeer en update het dan volgens de richtlijnen
die je kan vinden op: http://users.pandora.be/marcvn/spyware/1414188.htm


* open hijackthis en vink volgende regels aan:

R3 - URLSearchHook: (no name) - {AB5C3355-F59E-B869-C94F-8BBAAB381BE4} - C:\WINDOWS\system32\isc.dll
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: (no name) - {AB5C3355-F59E-B869-C94F-8BBAAB381BE4} - C:\WINDOWS\system32\isc.dll
O4 - HKCU\..\Run: [Aosa] "C:\PROGRA~1\COMMON~1\SMANTE~1\ntvdm.exe" -vt yazb
O4 - HKCU\..\Run: [Gyomjex] C:\DOCUME~1\BARTIC~1\APPLIC~1\CURITY~1\LGONUI~1.EX E
O20 - AppInit_DLLs: C:\WINDOWS\system32\ping.dll
O20 - Winlogon Notify: winwly32 - C:\WINDOWS\SYSTEM32\winwly32.dll

* sluit dan alle vensters behalve hijackthis en klik op 'fix checked'

* Start je computer op in VEILIGE MODUS

* verwijder volgende bestanden indien aanwezig:

C:\WINDOWS\SYSTEM32\winwly32.dll
C:\WINDOWS\system32\ping.dll

* Voer een volledige scan uit met Adaware en verwijder alles wat gevonden wordt.

  • open ewido en klik op de Scanner tab bovenaan en klik dan op Complete System Scan. Deze scan zal heel je systeem afcannen dus dit kan een tijdje duren
  • Ewido zal alle geïnfecteerde objecten aan de linkerkant tonen. Waneer de scan gedaan is, zal het alles naar de 'Quarantine' optie zetten. klik dan op de Apply all actions knop. Ewido zal dan het volgend bericht tonen aan de rechterkant: "All actions have been applied"
  • Klik dan op "Save Report", en dan op "Save Report As". dit zal een rapport maken Wees zeker dat je het rapport makkelijk kunt terugvinden (ijvoorbeeld op je bureaublad).

* Start je pc weer normaal

* Download ATF cleaner (by Atribune)

Dubbelklik op ATF cleaner om het programma te starten.
Op het tabblad "Main", plaats je een vinkje bij Select All.
Klik op de knop Empty Selected.

Gebruik je ook Firefox als browser:
Klik op tabblad "Firefox", plaats een vinkje bij Select All.
Wil je de door Firefox opgeslagen wachtwoorden behouden, dan klik je in het venster dat verschijnt op "No".
(dit verwijdert het vinkje bij "Firefox saved passwords")
Klik op de knop Empty Selected.

Gebruik je ook Opera als browser:
Klik op tabblad "Opera", plaats een vinkje bij Select All.
Wil je de door Opera opgeslagen wachtwoorden behouden, dan klik je in het venster dat verschijnt op "No".
Klik op de knop Empty Selected.
Ga naar het tabblad "Main" en klik op de knop Exit om het programma af te sluiten.

* post nu een nieuw hijackthis logje hier + het rapport van ewido
b

bartichello

Legacy Member
Logfile of HijackThis v1.99.1
Scan saved at 21:27:59, on 11/07/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Google\Gmail Notifier\G001-1.0.25.0\gnotify.exe
C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
C:\Program Files\Telemeter 3.0\telemeter3.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ewido anti-spyware 4.0\ewido.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\YAWn.NET\YAWn.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Bartichello\Mijn documenten\instal's\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [ASUS Probe] C:\Program Files\ASUS\Probe\AsusProb.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\G001-1.0.25.0\gnotify.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe
O4 - HKLM\..\Run: [Telemeter 3.0] "C:\Program Files\Telemeter 3.0\telemeter3.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /R
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: YAWn!.NET.lnk = C:\Program Files\YAWn.NET\YAWn.exe
O4 - Global Startup: Adobe Reader Snelle start.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1149789288909
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1149792379828
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: winwly32 - winwly32.dll (file missing)
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Unknown owner - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe


---------------------------------------------------------
ewido anti-spyware - Scan Report
---------------------------------------------------------

+ Created at: 21:11:21 11/07/2006

+ Scan result:



HKLM\SOFTWARE\Clickspring -> Adware.PurityScan : No action taken.
C:\Documents and Settings\Bartichello\Local Settings\Temp\OA.exe -> Downloader.PurityScan.cq : No action taken.
C:\Program Files\Common Files\Y1123OA.exe -> Downloader.PurityScan.cq : No action taken.
C:\Documents and Settings\Bartichello\Local Settings\Temporary Internet Files\Content.IE5\7Q04OGUQ\L[1].exe -> Downloader.Small.cvw : No action taken.
C:\WINDOWS\Temp\win40.tmp.exe -> Downloader.Small.cvw : No action taken.
C:\Documents and Settings\Bartichello\Mijn documenten\instal's\WinFixerScannerInstall.exe -> Not-A-Virus.Downloader.Win32.WinFixer.b : No action taken.
:mozilla.146:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.147:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.148:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
:mozilla.149:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\Bartichello\Cookies\bartichello@2o7[2].txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\Bartichello\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\Bartichello\Cookies\[email protected][1].txt -> TrackingCookie.2o7 : No action taken.
:mozilla.196:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Adjuggler : No action taken.
:mozilla.100:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Adtech : No action taken.
:mozilla.101:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Adtech : No action taken.
:mozilla.40:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.43:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Advertising : No action taken.
:mozilla.139:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Atdmt : No action taken.
:mozilla.247:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Bluestreak : No action taken.
:mozilla.228:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Casalemedia : No action taken.
:mozilla.124:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Clickhype : No action taken.
:mozilla.138:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Com : No action taken.
:mozilla.199:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Cqcounter : No action taken.
:mozilla.132:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Doubleclick : No action taken.
C:\Documents and Settings\Bartichello\Cookies\bartichello@doubleclick[1].txt -> TrackingCookie.Doubleclick : No action taken.
:mozilla.164:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Euroclick : No action taken.
:mozilla.165:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Euroclick : No action taken.
:mozilla.200:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.201:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.202:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
:mozilla.203:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Falkag : No action taken.
C:\Documents and Settings\Bartichello\Cookies\[email protected][2].txt -> TrackingCookie.Falkag : No action taken.
:mozilla.205:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Fastclick : No action taken.
:mozilla.45:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.46:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.47:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.49:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Hitbox : No action taken.
:mozilla.179:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Hotlog : No action taken.
:mozilla.76:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Masterstats : No action taken.
:mozilla.240:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Mediaplex : No action taken.
:mozilla.75:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.77:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.78:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.81:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.82:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.83:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.84:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.85:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.86:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.87:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Onestat : No action taken.
:mozilla.243:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.244:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
:mozilla.245:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Pointroll : No action taken.
C:\Documents and Settings\Bartichello\Cookies\[email protected][2].txt -> TrackingCookie.Reliablestats : No action taken.
:mozilla.143:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.144:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Sexcounter : No action taken.
:mozilla.136:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Sitestat : No action taken.
:mozilla.194:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Sitestat : No action taken.
:mozilla.180:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Spylog : No action taken.
:mozilla.157:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.158:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.159:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.160:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.161:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.162:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.163:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Statcounter : No action taken.
:mozilla.17:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.18:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Tradedoubler : No action taken.
:mozilla.198:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Tribalfusion : No action taken.
:mozilla.231:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.232:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.233:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.234:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.235:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.236:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Valuead : No action taken.
:mozilla.127:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
:mozilla.128:C:\Documents and Settings\Bartichello\Application Data\Mozilla\Firefox\Profiles\69f1nz5x.default\cookies.txt -> TrackingCookie.Yieldmanager : No action taken.
C:\Documents and Settings\Bartichello\Cookies\[email protected][1].txt -> TrackingCookie.Yieldmanager : No action taken.
C:\Documents and Settings\Bartichello\Local Settings\Temp\cli2B.tmp -> Trojan.Agent.vg : No action taken.
C:\WINDOWS\system32\__delete_on_reboot__w_i_n_w_l_y_3_2_._d_l_l_ -> Trojan.Agent.vg : No action taken.
[600] C:\WINDOWS\system32\winwly32.dll -> Trojan.Agent.vg : No action taken.


::Report end

ewido allemaal quarantined maar had men logje gemaakt voor ik dat had gedaan
J

Jurgenv1

Legacy Member
* fix volgende regel in hijackthis:

O20 - Winlogon Notify: winwly32 - winwly32.dll (file missing)

* post dan een nieuw hijackthis logje hier + het rapport van ewido
b

bartichello

Legacy Member
nou als dat de enige is denk ik wel dat het in orde is zo... die ewido scan duurt namelijk een 40tal minuten... zal ik in het weekend wel nog eens doen
Het archief is een bevroren moment uit een vorige versie van dit forum, met andere regels en andere bazen. Deze posts weerspiegelen op geen enkele manier onze huidige ideeën, waarden of wereldbeelden en zijn op sommige plaatsen gecensureerd wegens ontoelaatbaar. Veel zijn in een andere tijdsgeest gemaakt, al dan niet ironisch - zoals in het ironische subforum Off-Topic - en zouden op dit moment niet meer gepost (mogen) worden. Toch bieden we dit archief nog graag aan als informatiedatabank en naslagwerk. Lees er hier meer over of start een gesprek met anderen.
Terug
Bovenaan