Problemen met het surfen met IE

[anoniem]

De laatste tijd heb ik wat problemen met het surfen op het internet. Elke site die ik bezoek (ongeacht hoevaak ik er al ben geweest) laad opzich best snel en goed, alleen op het moment dat er in mn statusbalk "gereed" staat blijft hij steeds ongeveer 30 sec. tot 1 min. hangen. Ik kan dan helemaal niks in dat venster, ook de link's werken dan niet en kan voor de rest geen knop gebruiken. Ik kan wel gewoon een nieuw venster openen of een venster gebruiken die ik al had geopend. Het lijkt niet zo heel lang 30 sec. maar het is wel heel erg irritant! Ik gebruik zeer regelmatig spybot en leeg mn temp files, dus daar kan het niet aan liggen. Ik gebruik norton en zoneAlarm maar ook als ik die uit zet heb ik het probleem. Ik heb ook al hijackthis gebruikt (zie onderstaand) maar heb geen idee wat ik kan verwijderen, kan iemand mij helpen? BVD MVG SOS [u:b70ce4f981] [/u:b70ce4f981] Logfile of HijackThis v1.97.7 Scan saved at 11:58:49, on 29-2-2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\NetScreen\NetScreen-Remote\IreIKE.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\NetScreen\NetScreen-Remote\IPSecMon.exe C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\PROGRA~1\NORTON~1\NORTON~1\navapw32.exe C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe C:\Program Files\Trust\Trust mouse utility\1.1\mouse32a.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe D:\Program files\Kazaa Lite K++\Kazaa.kpp C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe C:\DOCUME~1\Jeroen\LOCALS~1\Temp\bundle.exe D:\Program files\NetPumper\NetPumperIEProxy.exe C:\Program Files\QuickTime\qttask.exe C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe C:\Program Files\NetScreen\NetScreen-Remote\SafeCfg.exe C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposol08.exe C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe C:\WINDOWS\System32\HPZipm12.exe C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe E:\Setup's\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://startpagina.nl/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file) O1 - Hosts: 66.98.178.19 06272002-dbase.hitcountz.net O1 - Hosts: 66.98.178.19 1ca.cqcounter.com O1 - Hosts: 66.98.178.19 2001-007.com O1 - Hosts: 66.98.178.19 ad-logics.com O1 - Hosts: 66.98.178.19 ad.trafficmp.com O1 - Hosts: 66.98.178.19 adclient.rottentomatoes.com O1 - Hosts: 66.98.178.19 adcounter.globeandmail.com O1 - Hosts: 66.98.178.19 adcounter.theglobeandmail.com O1 - Hosts: 66.98.178.19 adlog.com.com O1 - Hosts: 66.98.178.19 admanmail.com O1 - Hosts: 66.98.178.19 ads.specificpop.com O1 - Hosts: 66.98.178.19 adtech.de O1 - Hosts: 66.98.178.19 askmen.thruport.com O1 - Hosts: 66.98.178.19 banner.0catch.com O1 - Hosts: 66.98.178.19 bilbo.counted.com O1 - Hosts: 66.98.178.19 c1.statcounter.com O1 - Hosts: 66.98.178.19 c1.thecounter.com O1 - Hosts: 66.98.178.19 c2.gostats.com O1 - Hosts: 66.98.178.19 c2.thecounter.com O1 - Hosts: 66.98.178.19 c3.thecounter.com O1 - Hosts: 66.98.178.19 c3.xxxcounter.com O1 - Hosts: 66.98.178.19 cashcounter.com O1 - Hosts: 66.98.178.19 cgi.hotstat.nl O1 - Hosts: 66.98.178.19 clit6.sextracker.com O1 - Hosts: 66.98.178.19 clit8.sextracker.com O1 - Hosts: 66.98.178.19 cookies.cmpnet.com O1 - Hosts: 66.98.178.19 counter.aaddzz.com O1 - Hosts: 66.98.178.19 counter.bloke.com O1 - Hosts: 66.98.178.19 counter.hitslink.com O1 - Hosts: 66.98.178.19 counter.yadro.ru O1 - Hosts: 66.98.178.19 counter14.sextracker.com O1 - Hosts: 66.98.178.19 counter16.bravenet.com O1 - Hosts: 66.98.178.19 counter17.bravenet.com O1 - Hosts: 66.98.178.19 counter2.hitslink.com O1 - Hosts: 66.98.178.19 counter26.bravenet.com O1 - Hosts: 66.98.178.19 counter32.bravenet.com O1 - Hosts: 66.98.178.19 counter34.breavenet.com O1 - Hosts: 66.98.178.19 counter41.bravenet.com O1 - Hosts: 66.98.178.19 counter47.bravenet.com O1 - Hosts: 66.98.178.19 counter6.sextracker.com O1 - Hosts: 66.98.178.19 counter8.bravenet.com O1 - Hosts: 66.98.178.19 data.coremetrics.com O1 - Hosts: 66.98.178.19 delivery.loopingclick.com O1 - Hosts: 66.98.178.19 dwclick.com O1 - Hosts: 66.98.178.19 ebay.doubleclick.net O1 - Hosts: 66.98.178.19 ehg-amerix.hitbox.com O1 - Hosts: 66.98.178.19 ehg-bestbuy.hitbox.com O1 - Hosts: 66.98.178.19 ehg-crain.hitbox.com O1 - Hosts: 66.98.178.19 ehg-dig.hitbox.com O1 - Hosts: 66.98.178.19 ehg-eckounlimited.hitbox.com O1 - Hosts: 66.98.178.19 ehg-espn.hitbox.com O1 - Hosts: 66.98.178.19 ehg-idg.hitbox.com O1 - Hosts: 66.98.178.19 ehg-liveperson.hitbox.com O1 - Hosts: 66.98.178.19 ehg-oreilley.hitbox.com O1 - Hosts: 66.98.178.19 ehg-space.hitbox.com O1 - Hosts: 66.98.178.19 ehg-sportsline.hitbox.com O1 - Hosts: 66.98.178.19 ehg-techtarget.hitbox.com O1 - Hosts: 66.98.178.19 ehg-tigerdirect.hitbox.com O1 - Hosts: 66.98.178.19 ehg-uniontrib.hitbox.com O1 - Hosts: 66.98.178.19 ehg-viacom.hitbox.com O1 - Hosts: 66.98.178.19 ehg.commjun.hitbox.com O1 - Hosts: 66.98.178.19 ehg.hitbox.com O1 - Hosts: 66.98.178.19 fastclick.net O1 - Hosts: 66.98.178.19 fcstats.bcentral.com O1 - Hosts: 66.98.178.19 flycast.com O1 - Hosts: 66.98.178.19 g-wizzads.net O1 - Hosts: 66.98.178.19 gostats.com O1 - Hosts: 66.98.178.19 gtcc1.acecounter.com O1 - Hosts: 66.98.178.19 hc2.humanclick.com O1 - Hosts: 66.98.178.19 hit2.hotlog.ru O1 - Hosts: 66.98.178.19 hit37.chark.dk O1 - Hosts: 66.98.178.19 hitbox.com O1 - Hosts: 66.98.178.19 hits.webstat.com O1 - Hosts: 66.98.178.19 images.dailydiscounts.com O1 - Hosts: 66.98.178.19 imp.clickability.com O1 - Hosts: 66.98.178.19 impacts.alliancehub.com O1 - Hosts: 66.98.178.19 insightfirst.com O1 - Hosts: 66.98.178.19 int.sitestat.com O1 - Hosts: 66.98.178.19 jkearns.freestats.com O1 - Hosts: 66.98.178.19 linktrack.bravenet.com O1 - Hosts: 66.98.178.19 logs.comics.com O1 - Hosts: 66.98.178.19 m1.nedstatbasic.net O1 - Hosts: 66.98.178.19 media101.sitebrand.com O1 - Hosts: 66.98.178.19 mediatrack.revenue.net O1 - Hosts: 66.98.178.19 mt122.mtree.com O1 - Hosts: 66.98.178.19 nedstat.s0.nl O1 - Hosts: 66.98.178.19 nl.sitestat.com O1 - Hosts: 66.98.178.19 partner.alerts.aol.com O1 - Hosts: 66.98.178.19 paxito.sitetracker.com O1 - Hosts: 66.98.178.19 perso.estat.com O1 - Hosts: 66.98.178.19 pmg.ad-logics.com O1 - Hosts: 66.98.178.19 postclick.adcentriconline.com O1 - Hosts: 66.98.178.19 prof.estat.com O1 - Hosts: 66.98.178.19 s10.sitemeter.com O1 - Hosts: 66.98.178.19 s11.sitemeter.com O1 - Hosts: 66.98.178.19 s12.sitemeter.com O1 - Hosts: 66.98.178.19 s13.sitemeter.com O1 - Hosts: 66.98.178.19 s14.sitemeter.com O1 - Hosts: 66.98.178.19 s15.sitemeter.com O1 - Hosts: 66.98.178.19 s16.sitemeter.com O1 - Hosts: 66.98.178.19 s2.statcounter.com O2 - BHO: (no name) - {000E7270-CC7A-0786-8E7A-DA09B51938A6} - C:\WINDOWS\System32\n3tpa1.dll O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\NORTON~1\navapw32.exe O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe O4 - HKLM\..\Run: [KAZAA] "D:\Program files\Kazaa Lite K++\kpp.exe" "D:\Program files\Kazaa Lite K++\Kazaa.kpp" /SYSTRAY O4 - HKLM\..\Run: [FLMTRUSTMOUSE] C:\Program Files\Trust\Trust mouse utility\1.1\mouse32a.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [CloneCDElbyCDFL] "d:\Program Files\CloneCD\ElbyCheck.exe" /L ElbyCDFL O4 - HKLM\..\Run: [SAHBundle] C:\DOCUME~1\Jeroen\LOCALS~1\Temp\bundle.exe O4 - HKLM\..\Run: [NetPumper] "D:\Program files\NetPumper\NetPumperIEProxy.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [sysu] "C:\progra~1\ddm\sysu.exe" O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe O4 - Global Startup: InterVideo WinCinema Manager.lnk = D:\Program files\InterVideo\Common\Bin\WinCinemaMgr.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ? O4 - Global Startup: NetScreen-Remote.lnk = C:\Program Files\NetScreen\NetScreen-Remote\SafeCfg.exe O4 - Global Startup: officejet 6100.lnk = ? O8 - Extra context menu item: Download with NetPumper - D:\Program files\NetPumper\AddUrl.htm O9 - Extra button: Related (HKLM) O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM) O16 - DPF: {003FADA5-8FEE-11D6-AFB7-0004768F6183} (CryptoRSA Control) - https://www.p3.postbank.nl/sesam/CAX.cab O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/swdir.cab O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37911.456087963 O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab O16 - DPF: {DE591B16-A452-11D6-AED1-0001030A4E46} (PBGNX Control) - https://gto.postbank.nl/GTO/PBGNX.cab O16 - DPF: {F5192746-22D6-41BD-9D2D-1E75D14FBD3C} (ddm_download.ddm_control) - http://download.rfwnad.com/cab/dlaccell.CAB O16 - DPF: {FE8287E9-5F43-11D3-ABCA-00105A5C1F46} (HouseCall Control) - http://www.housecall.nl/housecall/xscan4.cab

[anoniem]

Sluit alle open vensters, run HijackTHis nog een keer en laat volgende items repareren: R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file) O1 - Hosts: 66.98.178.19 06272002-dbase.hitcountz.net O1 - Hosts: 66.98.178.19 1ca.cqcounter.com O1 - Hosts: 66.98.178.19 2001-007.com O1 - Hosts: 66.98.178.19 ad-logics.com O1 - Hosts: 66.98.178.19 ad.trafficmp.com O1 - Hosts: 66.98.178.19 adclient.rottentomatoes.com O1 - Hosts: 66.98.178.19 adcounter.globeandmail.com O1 - Hosts: 66.98.178.19 adcounter.theglobeandmail.com O1 - Hosts: 66.98.178.19 adlog.com.com O1 - Hosts: 66.98.178.19 admanmail.com O1 - Hosts: 66.98.178.19 ads.specificpop.com O1 - Hosts: 66.98.178.19 adtech.de O1 - Hosts: 66.98.178.19 askmen.thruport.com O1 - Hosts: 66.98.178.19 banner.0catch.com O1 - Hosts: 66.98.178.19 bilbo.counted.com O1 - Hosts: 66.98.178.19 c1.statcounter.com O1 - Hosts: 66.98.178.19 c1.thecounter.com O1 - Hosts: 66.98.178.19 c2.gostats.com O1 - Hosts: 66.98.178.19 c2.thecounter.com O1 - Hosts: 66.98.178.19 c3.thecounter.com O1 - Hosts: 66.98.178.19 c3.xxxcounter.com O1 - Hosts: 66.98.178.19 cashcounter.com O1 - Hosts: 66.98.178.19 cgi.hotstat.nl O1 - Hosts: 66.98.178.19 clit6.sextracker.com O1 - Hosts: 66.98.178.19 clit8.sextracker.com O1 - Hosts: 66.98.178.19 cookies.cmpnet.com O1 - Hosts: 66.98.178.19 counter.aaddzz.com O1 - Hosts: 66.98.178.19 counter.bloke.com O1 - Hosts: 66.98.178.19 counter.hitslink.com O1 - Hosts: 66.98.178.19 counter.yadro.ru O1 - Hosts: 66.98.178.19 counter14.sextracker.com O1 - Hosts: 66.98.178.19 counter16.bravenet.com O1 - Hosts: 66.98.178.19 counter17.bravenet.com O1 - Hosts: 66.98.178.19 counter2.hitslink.com O1 - Hosts: 66.98.178.19 counter26.bravenet.com O1 - Hosts: 66.98.178.19 counter32.bravenet.com O1 - Hosts: 66.98.178.19 counter34.breavenet.com O1 - Hosts: 66.98.178.19 counter41.bravenet.com O1 - Hosts: 66.98.178.19 counter47.bravenet.com O1 - Hosts: 66.98.178.19 counter6.sextracker.com O1 - Hosts: 66.98.178.19 counter8.bravenet.com O1 - Hosts: 66.98.178.19 data.coremetrics.com O1 - Hosts: 66.98.178.19 delivery.loopingclick.com O1 - Hosts: 66.98.178.19 dwclick.com O1 - Hosts: 66.98.178.19 ebay.doubleclick.net O1 - Hosts: 66.98.178.19 ehg-amerix.hitbox.com O1 - Hosts: 66.98.178.19 ehg-bestbuy.hitbox.com O1 - Hosts: 66.98.178.19 ehg-crain.hitbox.com O1 - Hosts: 66.98.178.19 ehg-dig.hitbox.com O1 - Hosts: 66.98.178.19 ehg-eckounlimited.hitbox.com O1 - Hosts: 66.98.178.19 ehg-espn.hitbox.com O1 - Hosts: 66.98.178.19 ehg-idg.hitbox.com O1 - Hosts: 66.98.178.19 ehg-liveperson.hitbox.com O1 - Hosts: 66.98.178.19 ehg-oreilley.hitbox.com O1 - Hosts: 66.98.178.19 ehg-space.hitbox.com O1 - Hosts: 66.98.178.19 ehg-sportsline.hitbox.com O1 - Hosts: 66.98.178.19 ehg-techtarget.hitbox.com O1 - Hosts: 66.98.178.19 ehg-tigerdirect.hitbox.com O1 - Hosts: 66.98.178.19 ehg-uniontrib.hitbox.com O1 - Hosts: 66.98.178.19 ehg-viacom.hitbox.com O1 - Hosts: 66.98.178.19 ehg.commjun.hitbox.com O1 - Hosts: 66.98.178.19 ehg.hitbox.com O1 - Hosts: 66.98.178.19 fastclick.net O1 - Hosts: 66.98.178.19 fcstats.bcentral.com O1 - Hosts: 66.98.178.19 flycast.com O1 - Hosts: 66.98.178.19 g-wizzads.net O1 - Hosts: 66.98.178.19 gostats.com O1 - Hosts: 66.98.178.19 gtcc1.acecounter.com O1 - Hosts: 66.98.178.19 hc2.humanclick.com O1 - Hosts: 66.98.178.19 hit2.hotlog.ru O1 - Hosts: 66.98.178.19 hit37.chark.dk O1 - Hosts: 66.98.178.19 hitbox.com O1 - Hosts: 66.98.178.19 hits.webstat.com O1 - Hosts: 66.98.178.19 images.dailydiscounts.com O1 - Hosts: 66.98.178.19 imp.clickability.com O1 - Hosts: 66.98.178.19 impacts.alliancehub.com O1 - Hosts: 66.98.178.19 insightfirst.com O1 - Hosts: 66.98.178.19 int.sitestat.com O1 - Hosts: 66.98.178.19 jkearns.freestats.com O1 - Hosts: 66.98.178.19 linktrack.bravenet.com O1 - Hosts: 66.98.178.19 logs.comics.com O1 - Hosts: 66.98.178.19 m1.nedstatbasic.net O1 - Hosts: 66.98.178.19 media101.sitebrand.com O1 - Hosts: 66.98.178.19 mediatrack.revenue.net O1 - Hosts: 66.98.178.19 mt122.mtree.com O1 - Hosts: 66.98.178.19 nedstat.s0.nl O1 - Hosts: 66.98.178.19 nl.sitestat.com O1 - Hosts: 66.98.178.19 partner.alerts.aol.com O1 - Hosts: 66.98.178.19 paxito.sitetracker.com O1 - Hosts: 66.98.178.19 perso.estat.com O1 - Hosts: 66.98.178.19 pmg.ad-logics.com O1 - Hosts: 66.98.178.19 postclick.adcentriconline.com O1 - Hosts: 66.98.178.19 prof.estat.com O1 - Hosts: 66.98.178.19 s10.sitemeter.com O1 - Hosts: 66.98.178.19 s11.sitemeter.com O1 - Hosts: 66.98.178.19 s12.sitemeter.com O1 - Hosts: 66.98.178.19 s13.sitemeter.com O1 - Hosts: 66.98.178.19 s14.sitemeter.com O1 - Hosts: 66.98.178.19 s15.sitemeter.com O1 - Hosts: 66.98.178.19 s16.sitemeter.com O1 - Hosts: 66.98.178.19 s2.statcounter.com O2 - BHO: (no name) - {000E7270-CC7A-0786-8E7A-DA09B51938A6} - C:\WINDOWS\System32\n3tpa1.dll O4 - HKLM\..\Run: [SAHBundle] C:\DOCUME~1\Jeroen\LOCALS~1\Temp\bundle.exe O4 - HKLM\..\Run: [sysu] "C:\progra~1\ddm\sysu.exe" O16 - DPF: {F5192746-22D6-41BD-9D2D-1E75D14FBD3C} (ddm_download.ddm_control) - http://download.rfwnad.com/cab/dlaccell.CAB Zorg dat alle verborgen bestanden weergegeven worden. Reboot de pc in veilige modus en verwijder het volgende: het bestand n3tpa1.dll in C:\WINDOWS\System32\ de map ddm in c:\program files\ Maak de temp file leeg in C:\Documents and Settings\Jeroen\Local Settings Reboot en post een nieuwe log.

[anoniem]

Nou heb alles gedaan, kon alleen in de veilige modus het bestand n3tpa1.dll niet meer vinden (op hele c schijf niet). Maar het probleem is wel opgelost! Ik kan weer lekker surfen, dus THANKS! onderstaand vind je nog wel mn nieuwe log. Weet je trouwens wat het precies was? dan weet ik waar ik weer voor moet oppassen. In iedergeval nogmaals heel erg bedankt! SOS Logfile of HijackThis v1.97.7 Scan saved at 14:04:13, on 29-2-2004 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\NetScreen\NetScreen-Remote\IreIKE.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\NORTON~1\NORTON~1\navapw32.exe C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe C:\Program Files\Trust\Trust mouse utility\1.1\mouse32a.exe D:\Program files\Kazaa Lite K++\Kazaa.kpp C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe D:\Program files\NetPumper\NetPumperIEProxy.exe C:\Program Files\QuickTime\qttask.exe C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe D:\Program files\InterVideo\Common\Bin\WinCinemaMgr.exe C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe C:\Program Files\NetScreen\NetScreen-Remote\SafeCfg.exe C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposol08.exe C:\Program Files\NetScreen\NetScreen-Remote\IPSecMon.exe C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe C:\WINDOWS\System32\HPZipm12.exe C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe E:\Setup's\Hijackthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://startpagina.nl/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\NORTON~1\navapw32.exe O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe O4 - HKLM\..\Run: [KAZAA] "D:\Program files\Kazaa Lite K++\kpp.exe" "D:\Program files\Kazaa Lite K++\Kazaa.kpp" /SYSTRAY O4 - HKLM\..\Run: [FLMTRUSTMOUSE] C:\Program Files\Trust\Trust mouse utility\1.1\mouse32a.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [CloneCDElbyCDFL] "d:\Program Files\CloneCD\ElbyCheck.exe" /L ElbyCDFL O4 - HKLM\..\Run: [NetPumper] "D:\Program files\NetPumper\NetPumperIEProxy.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe O4 - Global Startup: InterVideo WinCinema Manager.lnk = D:\Program files\InterVideo\Common\Bin\WinCinemaMgr.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ? O4 - Global Startup: NetScreen-Remote.lnk = C:\Program Files\NetScreen\NetScreen-Remote\SafeCfg.exe O4 - Global Startup: officejet 6100.lnk = ? O8 - Extra context menu item: Download with NetPumper - D:\Program files\NetPumper\AddUrl.htm O9 - Extra button: Related (HKLM) O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM) O16 - DPF: {003FADA5-8FEE-11D6-AFB7-0004768F6183} (CryptoRSA Control) - https://www.p3.postbank.nl/sesam/CAX.cab O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/swdir.cab O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37911.456087963 O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab O16 - DPF: {DE591B16-A452-11D6-AED1-0001030A4E46} (PBGNX Control) - https://gto.postbank.nl/GTO/PBGNX.cab O16 - DPF: {FE8287E9-5F43-11D3-ABCA-00105A5C1F46} (HouseCall Control) - http://www.housecall.nl/housecall/xscan4.cab

[anoniem]

Log lijkt me clean. Dit waren de oorzaken: - [url=http://www.doxdesk.com/parasite/ShopAtHomeSelect.html]ShopAtHomeSelect[/url] - [url=http://www.doxdesk.com/parasite/NetPal.html]NetPal[/url] (een transponder variant.) - [url=http://www.symantec.com/avcenter/venc/data/adware.dynamicupdater.html]Adware DynamicUpdater[/url]

[anoniem]

Ook ik zat met het probleem dat mijn browsers (ongeacht welke) bepaalde sites niet wilden laden. Het begon, toen ik mijn webspace bij @home had ingericht. Een nogal ongebruikelijke procedure volgen ze daar. In dit forum las ik iets over het prog HyackThis exe. Dat onderzoekt je zogenaamde hosts-bestand(en) in de Windowsmap (XP). In mijn geval zei het progje dat er zoveel aan het hostbestand te sleutelen viel, dat ik het beter kon....weggooien. Ondanks het onheilspellende icoontje van HyackThis (een ontstekingsmechanisme!) heb ik dat gedaan. En onmiddellijk werkte alles weer. Later zag ik over 'hosts' ook de nodige info staan in het freewareprogramma Spybot, dat zoals de naam zegt, spyware in de gaten houdt.