Stomme startpagina

[anoniem]

Download HijackThis. Uitleg en link vind je hier: http://www.tomcoyote.org/hjt/ Unzip en run het. Klik op Scan > Save log en sla het log op als een .txt bestand. Kopieer en plak de inhoud in je volgende bericht.

[anoniem]

[quote:5360ec9600="Ben Jonson"]Download HijackThis. Uitleg en link vind je hier: http://www.tomcoyote.org/hjt/ Unzip en run het. Klik op Scan > Save log en sla het log op als een .txt bestand. Kopieer en plak de inhoud in je volgende bericht.[/quote:5360ec9600] Had ik ook al gevraagd Ben.....

[anoniem]

[quote:3d3fa67599="M@rc"][quote:3d3fa67599="Ben Jonson"]Download HijackThis. Uitleg en link vind je hier: http://www.tomcoyote.org/hjt/ Unzip en run het. Klik op Scan > Save log en sla het log op als een .txt bestand. Kopieer en plak de inhoud in je volgende bericht.[/quote:3d3fa67599] Had ik ook al gevraagd Ben.....[/quote:3d3fa67599] Dat had ik tog al hier neergezet? Volges mij benk dat niet vergeten, er staat ergens 1 ding dat niet bekent voorkwam en de rest wel.

[anoniem]

Ja 1 ding heb je gepost, maar je kan best toch maar even die hele log posten...

[anoniem]

[quote:948c0740c4="M@rc"]Ja 1 ding heb je gepost, maar je kan best toch maar even die hele log posten...[/quote:948c0740c4] Logfile of HijackThis v1.97.3 Scan saved at 19:17:58, on 9-11-2003 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v5.50 (5.50.4134.0100) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\SYSTEM\MPREXE.EXE C:\NORMAN\NVC\BIN\ZANDA.EXE C:\WINDOWS\SYSTEM\MSTASK.EXE C:\WINDOWS\SYSTEM\SSDPSRV.EXE C:\NORMAN\NVC\BIN\CCLAW.EXE C:\NORMAN\NVC\BIN\NVCSCHED.EXE C:\NORMAN\NVC\BIN\NJEEVES.EXE C:\WINDOWS\EXPLORER.EXE C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE C:\WINDOWS\TASKMON.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\NORMAN\NVC\BIN\ZLH.EXE C:\WINDOWS\LOADQM.EXE C:\NORMAN\NVC\BIN\NYMSE.EXE C:\WINDOWS\SYSTEM\ICSMGR.EXE C:\PROGRAM FILES\BROWSER MOUSE\BROWSER MOUSE\1.0\LWBWHEEL.EXE C:\WINDOWS\SYSTEM\WMIEXE.EXE C:\PROGRAM FILES\DOWNLOADWARE ENGINE\DWE.EXE C:\PROGRAM FILES\COMMON FILES\CMEII\CMESYS.EXE C:\PROGRAM FILES\DOWNLOADWARE ENGINE\ALP2PLIB.EXE C:\PROGRAM FILES\BILLP STUDIOS\WINPATROL\WINPATROL.EXE C:\PROGRAM FILES\COMMON FILES\GMT\GMT.EXE C:\PROGRAM FILES\PRECISIONTIME\PRECISIONTIME.EXE C:\PROGRAM FILES\IMESH LIGHT\CLIENT\IMESHCLIENT.EXE C:\WINDOWS\SYSTEM\DDHELP.EXE C:\NORMAN\NVC\BIN\NIU.EXE C:\PROGRAM FILES\OUTLOOK EXPRESS\MSIMN.EXE C:\WINDOWS\SYSTEM\PSTORES.EXE C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE C:\WINDOWS\SYSTEM\STIMON.EXE C:\PROGRAM FILES\ZIPMAGIC\ZMOPEN.EXE C:\PROGRAM FILES\ZIPMAGIC\ZM.EXE C:\WINDOWS\TEMP\~~ZMTEMP\HIJACKTHIS.EXE R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.planet.nl/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen R3 - URLSearchHook: WebSearch Class - {9368D063-44BE-49B9-BD14-BB9663FD38FC} - C:\PROGRAM FILES\SCBAR\V1\SCBAR.DLL F1 - win.ini: run=C:\WINDOWS\..\PROGRA~1\COMMON~1\MICROS~1\MSINFO\info32.exe O1 - Hosts: 216.177.73.139 auto.search.msn.com O1 - Hosts: 216.177.73.139 search.netscape.com O1 - Hosts: 216.177.73.139 ieautosearch O2 - BHO: Ipswitch.WsftpBrowserHelper - {601ED020-FB6C-11D3-87D8-0050DA59922B} - C:\PROGRAM FILES\WS_FTP PRO\WSBHO2K0.DLL O2 - BHO: Natural Language Navigation - {60E78CAC-E9A7-4302-B9EE-8582EDE22FBF} - C:\WINDOWS\SYSTEM\BHO001.DLL O2 - BHO: (no name) - {03c67291-3657-41c3-8425-cd8b0b6adc5d} - C:\WINDOWS\APPLICATION DATA\STGBLSSYEEEA.DLL O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL O2 - BHO: Support Software - {85A702BA-EA8F-4B83-AA07-07A5186ACD7E} - C:\PROGRAM FILES\SUPPORT SOFTWARE\SS2.DLL O2 - BHO: (no name) - {C77E900A-FF55-400E-9BAA-E042C8212898} - C:\PROGRAM FILES\SIMPELINTERNET\EASYBAR\TOOLBARSTARTER.DLL (file missing) O3 - Toolbar: @msdxmLC.dll,-1@1043,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX O3 - Toolbar: umesscrchld - {59f8bfcd-047c-4820-9a9e-932d0e36523d} - C:\WINDOWS\APPLICATION DATA\STGBLSSYEEEA.DLL O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLENAV.DLL O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s O4 - HKLM\..\Run: [SystemTray] SysTray.Exe O4 - HKLM\..\Run: [Norman ZANDA] C:\NORMAN\NVC\BIN\ZLH.EXE /LOAD /SPLASH O4 - HKLM\..\Run: [LoadQM] loadqm.exe O4 - HKLM\..\Run: [ICSMGR] ICSMGR.EXE O4 - HKLM\..\Run: [LWBMOUSE] C:\Program Files\Browser Mouse\Browser Mouse\1.0\lwbwheel.exe O4 - HKLM\..\Run: [WINSTART001.EXE] C:\WINDOWS\System\WINSTART001.EXE -b O4 - HKLM\..\Run: [Desksite CMA] c:\program files\desksite\bin\cma.exe O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme O4 - HKLM\..\Run: [DownloadWare Engine] "C:\PROGRAM FILES\DOWNLOADWARE ENGINE\DWE.EXE" /H O4 - HKLM\..\Run: [SearchEnhancement] "C:\PROGRAM FILES\SCBAR\V1\SCBAR.EXE" /U O4 - HKLM\..\Run: [CMESys] "C:\PROGRAM FILES\COMMON FILES\CMEII\CMESYS.EXE" O4 - HKLM\..\Run: [SSK Service] C:\WINDOWS\WINSSK32.EXE O4 - HKLM\..\Run: [xwybwsj] rundll32 C:\WINDOWS\SYSTEM\xwybwsj.dll,Init 1 O4 - HKLM\..\Run: [Tapicfg.exe] \tapicfg.exe O4 - HKLM\..\Run: [WinPatrol] C:\PROGRA~1\BILLPS~1\WINPAT~1\WinPatrol.exe O4 - HKLM\..\RunServices: [Norman ZANDA] C:\NORMAN\NVC\BIN\ZANDA.EXE /LOAD O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe O4 - HKCU\..\Run: [SSK Service] C:\WINDOWS\WINSSK32.EXE O4 - Startup: GStartup.lnk = C:\Program Files\Common Files\GMT\GMT.exe O4 - Startup: PrecisionTime.lnk = C:\Program Files\PrecisionTime\PrecisionTime.exe O4 - Startup: iMesh.lnk = C:\Program Files\iMesh Light\Client\iMeshClient.exe O8 - Extra context menu item: &Google Search - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLENAV.DLL/cmsearch.html O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLENAV.DLL/cmcache.html O8 - Extra context menu item: Si&milar Pages - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLENAV.DLL/cmsimilar.html O8 - Extra context menu item: Backward &Links - res://C:\WINDOWS\DOWNLOADED PROGRAM FILES\GOOGLENAV.DLL/cmbacklinks.html O9 - Extra button: Related (HKLM) O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab O16 - DPF: {EABA57A8-B747-46F2-9E3F-CDCD4C6C6A33} (MetaInstaller Class) - http://vjtool.cocacola.nl/packages/metainstaller.cab O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab O16 - DPF: {02C20140-76F8-4763-83D5-B660107B7A90} (Loader Class) - http://connect.online-dialer.com/MaConnect.cab O16 - DPF: {841A9192-5690-11D4-A258-0040954A01BE} (DialXSCtl Object) - http://dialxs.nl/install/dialxs.ocx O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697514} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp3_mp3.cab O16 - DPF: {03C543A1-C090-418F-A1D0-FB96380D601D} (preload control) - http://www.thepaymentcentre.com/build/preload.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab O16 - DPF: {8522F9B3-38C5-4AA4-AE40-7401F1BBC851} - http://www.terra.es/personal9/centuryrules/wrn/mp3_plugin.exe O16 - DPF: {E3802230-F0E2-4A75-9947-EAB78DD8153F} (InstallerX Class) - http://www.euroklik.nl/easybar.cab O16 - DPF: {6CB5E471-C305-11D3-99A8-000086395495} (Google Activate) - http://toolbar.google.com/data/nl/deleon/1.1.62-deleon/GoogleNav.cab O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB O19 - User stylesheet: C:\WINDOWS\Web\win.def O19 - User stylesheet: C:\WINDOWS\default.css (HKLM)

[anoniem]

Je hebt zelfs virussen :roll: http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=ADW_TENGET.A&VSect=T en Sobig. Verwijder die eerst: http://housecall.antivirus.com/housecall/start_corp.asp Daarna run je CWShredder: http://www.spywareinfo.com/~merijn/files/cwshredder.zip Daarna mag je een nieuwe log posten.

[anoniem]

cwshredder downloaden, runnen en je bent er vanaf!