Archief - eventueel msnvirus ?

Het archief is een bevroren moment uit een vorige versie van dit forum, met andere regels en andere bazen. Deze posts weerspiegelen op geen enkele manier onze huidige ideeën, waarden of wereldbeelden en zijn op sommige plaatsen gecensureerd wegens ontoelaatbaar. Veel zijn in een andere tijdsgeest gemaakt, al dan niet ironisch - zoals in het ironische subforum Off-Topic - en zouden op dit moment niet meer gepost (mogen) worden. Toch bieden we dit archief nog graag aan als informatiedatabank en naslagwerk. Lees er hier meer over of start een gesprek met anderen.
a

antHraxx

Legacy Member
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:28:20, on 5/03/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng****
C:\Windows\system32\Dwm****
C:\Program Files\Windows Defender\MSASCui****
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif****
C:\Program Files\Synaptics\SynTP\SynTPEnh****
C:\Windows\RtHDVCpl****
C:\Windows\System32\rundll32****
C:\Program Files\HomeCinema\PowerDVD\PDVDServ****
C:\Windows\System32\rundll32****
C:\Program Files\Google\Google Desktop Search\GoogleDesktop****
C:\Program Files\HP\HP Software Update\hpwuSchd2****
C:\Program Files\Windows Sidebar\sidebar****
C:\Program Files\BullGuard Software\BullGuard\BullGuard****
C:\Program Files\DAEMON Tools\daemon****
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor****
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex****
C:\Program Files\HP\Digital Imaging\bin\hpqtra08****
C:\Program Files\Last.fm\LastFMHelper****
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr****
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08****
C:\Program Files\Last.fm\LastFM****
C:\Windows\Explorer****
C:\Program Files\Mozilla Firefox\firefox****
C:\Windows\system32\conime****
C:\HiJackThis\HijackThis****

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.daemonsearch.com/intl/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.aldi.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui**** -hide
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif****"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh****
O4 - HKLM\..\Run: [BullGuard] "C:\Program Files\BullGuard Software\BullGuard\bullguard****" -boot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck****
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl****
O4 - HKLM\..\Run: [NvSvc] RUNDLL32**** C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32**** C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32**** C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\HomeCinema\PowerDVD\PDVDServ****"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\HomeCinema\PowerDVD\Language\Language****"
O4 - HKLM\..\Run: [UpdatePPShortCut] "C:\Program Files\HomeCinema\PowerProducer\MUITransfer\MUIStartMenu****" "C:\Program Files\HomeCinema\PowerProducer" update "Software\CyberLink\PowerProducer\4.0"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop****" /startup
O4 - HKLM\..\Run: [toolbar_eula_launcher] C:\Program Files\GoogleEULA\EULALauncher****
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2****
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl****"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar**** /autoRun
O4 - HKCU\..\Run: [BullGuard] "C:\Program Files\BullGuard Software\BullGuard\BullGuard****"
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon****" -lang 1033
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr****" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor****"
O4 - Startup: Last.fm Helper.lnk = C:\Program Files\Last.fm\LastFMHelper****
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08****
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL****/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: HP Clipboek - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: HP Slim selecteren - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc****
O23 - Service: BullGuard LiveUpdate (BGLiveSvc) - BullGuard Software - C:\Program Files\BullGuard Software\BullGuard\BullGuardUpdate****
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager****
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService****
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon****
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc****
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService****
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService****
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA****
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo****
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv****
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets****

--
End of file - 7794 bytes
B

Biglia

Legacy Member
antHraxx zei:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:28:20, on 5/03/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng****
C:\Windows\system32\Dwm****
C:\Program Files\Windows Defender\MSASCui****
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif****
C:\Program Files\Synaptics\SynTP\SynTPEnh****
C:\Windows\RtHDVCpl****
C:\Windows\System32\rundll32****
C:\Program Files\HomeCinema\PowerDVD\PDVDServ****
C:\Windows\System32\rundll32****
C:\Program Files\Google\Google Desktop Search\GoogleDesktop****
C:\Program Files\HP\HP Software Update\hpwuSchd2****
C:\Program Files\Windows Sidebar\sidebar****
C:\Program Files\BullGuard Software\BullGuard\BullGuard****
C:\Program Files\DAEMON Tools\daemon****
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor****
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex****
C:\Program Files\HP\Digital Imaging\bin\hpqtra08****
C:\Program Files\Last.fm\LastFMHelper****
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr****
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08****
C:\Program Files\Last.fm\LastFM****
C:\Windows\Explorer****
C:\Program Files\Mozilla Firefox\firefox****
C:\Windows\system32\conime****
C:\HiJackThis\HijackThis****

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.daemonsearch.com/intl/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.aldi.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll
O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui**** -hide
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif****"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh****
O4 - HKLM\..\Run: [BullGuard] "C:\Program Files\BullGuard Software\BullGuard\bullguard****" -boot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck****
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl****
O4 - HKLM\..\Run: [NvSvc] RUNDLL32**** C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32**** C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32**** C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\HomeCinema\PowerDVD\PDVDServ****"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\HomeCinema\PowerDVD\Language\Language****"
O4 - HKLM\..\Run: [UpdatePPShortCut] "C:\Program Files\HomeCinema\PowerProducer\MUITransfer\MUIStartMenu****" "C:\Program Files\HomeCinema\PowerProducer" update "Software\CyberLink\PowerProducer\4.0"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop****" /startup
O4 - HKLM\..\Run: [toolbar_eula_launcher] C:\Program Files\GoogleEULA\EULALauncher****
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2****
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl****"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar**** /autoRun
O4 - HKCU\..\Run: [BullGuard] "C:\Program Files\BullGuard Software\BullGuard\BullGuard****"
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon****" -lang 1033
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr****" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor****"
O4 - Startup: Last.fm Helper.lnk = C:\Program Files\Last.fm\LastFMHelper****
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08****
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL****/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: HP Clipboek - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: HP Slim selecteren - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc****
O23 - Service: BullGuard LiveUpdate (BGLiveSvc) - BullGuard Software - C:\Program Files\BullGuard Software\BullGuard\BullGuardUpdate****
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager****
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService****
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon****
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc****
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService****
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService****
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA****
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo****
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv****
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets****

--
End of file - 7794 bytes
Klik om te vergroten...

Bovenstaande is dus mijn log file van hijack this.
En dit is de log na uitvoeren van MSNfix:

------------- BENDEBOYS MSNFIX RAPORT -------------
- Version: 3.6.0.14 - Last Update: 17/02/08
- Scan performed on: wo 05/03/2008 - 20:18:07,27 By Hans
- Bootmode: Normal Mode

It is possible to complain about messenger virusses.
Visit MalwareComplaints.com for more information!

Het is mogelijk om uw beklag te doen tegen messenger virussen.
Bezoek MalwareComplaints.com voor meer informatie.


((((((((((((((( CREATED FILES LAST MONTH )))))))))))))))

2008-03-05 - 9:37:08 - A.S.. "C:\Windows\bootstat.dat"
2008-03-04 -23:10:38 - A.... "C:\Windows\bthservsdp.dat"
2008-02-21 -19:33:40 - A.... "C:\Windows\hpoins14.dat"
2008-02-13 -19:10:04 - A.... "C:\Windows\nsreg.dat"
2008-02-14 - 2:11:24 - A.... "C:\Windows\System32\advpack.dll"
2008-01-11 -15:16:20 - A.... "C:\Windows\System32\asferror.dll"
2008-02-14 - 2:18:14 - A.... "C:\Windows\System32\batt.dll"
2008-02-14 - 2:18:18 - A.... "C:\Windows\System32\cfgmgr32.dll"
2008-01-05 -19:17:48 - A.... "C:\Windows\System32\client_cc.dll"
2008-02-14 - 2:18:14 - A.... "C:\Windows\System32\dispci.dll"
2008-02-14 - 2:18:16 - A.... "C:\Windows\System32\dpx.dll"
2008-02-14 - 2:18:18 - A.... "C:\Windows\System32\drvinst.exe"
2008-02-14 - 2:11:20 - A.... "C:\Windows\System32\dxtmsft.dll"
2008-02-14 - 2:11:20 - A.... "C:\Windows\System32\dxtrans.dll"
2008-02-14 - 2:18:16 - A.... "C:\Windows\System32\f3ahvoas.dll"
2008-02-16 -17:14:38 - A.... "C:\Windows\System32\FNTCACHE.DAT"
2008-02-14 - 2:15:00 - A.... "C:\Windows\System32\gameux.dll"
2008-02-14 - 2:11:18 - A.... "C:\Windows\System32\icardie.dll"
2008-02-14 - 2:11:16 - A.... "C:\Windows\System32\ie4uinit.exe"
2008-02-14 - 2:11:22 - A.... "C:\Windows\System32\ieapfltr.dll"
2008-02-14 - 2:11:30 - A.... "C:\Windows\System32\ieframe.dll"
2008-02-14 - 2:11:16 - A.... "C:\Windows\System32\iernonce.dll"
2008-02-14 - 2:11:16 - A.... "C:\Windows\System32\iesetup.dll"
2008-02-14 - 2:11:30 - A.... "C:\Windows\System32\ieui.dll"
2008-02-14 - 2:11:16 - A.... "C:\Windows\System32\ieUnatt.exe"
2008-02-14 - 2:11:24 - A.... "C:\Windows\System32\jsproxy.dll"
2008-02-14 - 2:18:16 - A.... "C:\Windows\System32\kbd106n.dll"
2008-01-11 -15:16:20 - A.... "C:\Windows\System32\LAPRXY.DLL"
2008-02-14 - 2:18:14 - A.... "C:\Windows\System32\loadperf.dll"
2008-02-14 - 2:18:14 - A.... "C:\Windows\System32\lodctr.exe"
2008-01-10 - 6:50:50 - A.... "C:\Windows\System32\mcmde.dll"
2008-02-04 -15:09:48 - A.... "C:\Windows\System32\mrt.exe"
2008-02-14 - 2:11:26 - A.... "C:\Windows\System32\mshtml.dll"
2008-02-14 - 2:11:28 - A.... "C:\Windows\System32\mshtmled.dll"
2008-02-14 - 2:11:20 - A.... "C:\Windows\System32\mstime.dll"
2008-02-14 - 2:15:22 - A.... "C:\Windows\System32\netcfg.exe"
2008-02-14 - 2:15:22 - A.... "C:\Windows\System32\netiougc.exe"
2008-02-14 - 2:18:14 - A.... "C:\Windows\System32\nshhttp.dll"
2008-02-14 - 2:15:44 - A.... "C:\Windows\System32\ntkrnlpa.exe"
2008-02-14 - 2:15:44 - A.... "C:\Windows\System32\ntoskrnl.exe"
2008-02-14 - 2:18:16 - A.... "C:\Windows\System32\oleaut32.dll"
2008-03-05 - 9:44:16 - A.... "C:\Windows\System32\perfc009.dat"
2008-03-05 - 9:44:16 - A.... "C:\Windows\System32\perfc013.dat"
2008-03-05 - 9:44:16 - A.... "C:\Windows\System32\perfh009.dat"
2008-03-05 - 9:44:16 - A.... "C:\Windows\System32\perfh013.dat"
2008-02-14 - 2:11:24 - A.... "C:\Windows\System32\pngfilt.dll"
2008-02-20 -20:57:18 - A.... "C:\Windows\System32\PnkBstrA.exe"
2008-02-24 -23:03:50 - A.... "C:\Windows\System32\PnkBstrB.exe"
2008-02-14 - 2:18:14 - A.... "C:\Windows\System32\prflbmsg.dll"
2008-01-11 -15:16:44 - A.... "C:\Windows\System32\quartz.dll"
2008-02-14 - 2:18:12 - A.... "C:\Windows\System32\schedsvc.dll"
2008-02-14 - 2:18:16 - A.... "C:\Windows\System32\setupapi.dll"
2008-02-14 - 2:15:22 - A.... "C:\Windows\System32\tcpipcfg.dll"
2008-01-11 -15:09:28 - A.... "C:\Windows\System32\tzres.dll"
2008-02-14 - 2:18:18 - A.... "C:\Windows\System32\umpnpmgr.dll"
2008-02-14 - 2:18:14 - A.... "C:\Windows\System32\unlodctr.exe"
2008-02-14 - 2:11:22 - A.... "C:\Windows\System32\urlmon.dll"
2008-02-14 - 2:19:16 - A.... "C:\Windows\System32\WebClnt.dll"
2008-02-14 - 2:11:24 - A.... "C:\Windows\System32\wininet.dll"
2008-02-14 - 2:18:14 - A.... "C:\Windows\System32\winload.exe"
2008-01-11 -15:16:20 - A.... "C:\Windows\System32\WMASF.DLL"
2008-02-14 - 2:18:18 - A.... "C:\Windows\System32\wpd_ci.dll"
2008-03-05 -20:20:14 - A.SH. "C:\Users\Hans\NTUSER.DAT"

((((((((((((((( DELETING )))))))))))))))


!! FILES BEFORE FIX !!

C:\Windows\System32\javaws.exe

!! FILES AFTER FIX !!


((((((((((((((( ShellServiceObjectDelayLoad )))))))))))))))

"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"

---------- END OF LOG ----------
B

Biglia

Legacy Member
Jurgenv1 zei:
En nog problemen na de msnfix? :)
Klik om te vergroten...

Mnee, toch nog niks ondervonden. Ik had geklikt op die link en dan opende een venster in firefox en kreeg ik melding om een dosbestand te downloaden. Dat leek mij heel verdacht en ik denk dat ik op annuleren geklikt heb. Maar ik wou toch zeker zijn dat mijn pc niet besmet was door alleen al op de link te klikken. Ook het merkelijk trager werken van de pc maakte mij een beetje ongerust. Maar voorlopig ondervind ik dus niks vreemds.

Bedankt voor de hulp :)
J

Jurgenv1

Legacy Member
Download MsnCleaner_eng.zip
Pak het uit naar je Bureaublad, maar gebruik het nog niet.
  • Herstart je computer in Veilige modus.
  • Pak MsnCleaner uit (unzippen) en dubbelklik op MsnCleaner_eng.exe om het te starten.
  • Wijzig via het uitschuifmenu onder "Language" de taal naar Dutch
  • Klik op de Analyseer knop.
  • Een rapport zal worden gemaakt bij het beëindigen van de scan.
  • Indien een infectie wordt gevonden : klik op de Verwijder knop.
  • Sluit MsnCleaner via de Exit knop.
  • Herstart in Normale modus.
  • Post de inhoud van C:\MsnCleaner.txt in je volgende antwoord.
Het archief is een bevroren moment uit een vorige versie van dit forum, met andere regels en andere bazen. Deze posts weerspiegelen op geen enkele manier onze huidige ideeën, waarden of wereldbeelden en zijn op sommige plaatsen gecensureerd wegens ontoelaatbaar. Veel zijn in een andere tijdsgeest gemaakt, al dan niet ironisch - zoals in het ironische subforum Off-Topic - en zouden op dit moment niet meer gepost (mogen) worden. Toch bieden we dit archief nog graag aan als informatiedatabank en naslagwerk. Lees er hier meer over of start een gesprek met anderen.
Terug
Bovenaan