ik heb vaak last van reclames van adzgalore

[Anoniem2]

ik heb vaak last van reclames van adzgalore \r\n\r\nik heb even een hijacktis log gemaak hier het resultaat \r\n\r\nLogfile of Trend Micro HijackThis v2.0.2 \r\nScan saved at 16:12:04, on 28-5-2008 \r\nPlatform: Windows XP SP2 (WinNT 5.01.2600) \r\nMSIE: Internet Explorer v7.00 (7.00.6000.16640) \r\nBoot mode: Normal \r\n\r\nRunning processes: \r\nC:\\WINDOWS\\System32\\smss.exe \r\nC:\\WINDOWS\\system32\\csrss.exe \r\nC:\\WINDOWS\\system32\\winlogon.exe \r\nC:\\WINDOWS\\system32\\services.exe \r\nC:\\WINDOWS\\system32\\lsass.exe \r\nC:\\WINDOWS\\system32\\svchost.exe \r\nC:\\WINDOWS\\system32\\svchost.exe \r\nC:\\WINDOWS\\System32\\svchost.exe \r\nC:\\Norman\\Npm\\bin\\ELOGSVC.EXE \r\nC:\\Norman\\Npm\\Bin\\Zanda.exe \r\nC:\\WINDOWS\\system32\\svchost.exe \r\nC:\\WINDOWS\\system32\\svchost.exe \r\nC:\\WINDOWS\\Explorer.EXE \r\nC:\\WINDOWS\\system32\\spoolsv.exe \r\nC:\\Program Files\\CyberLink\\PowerDVD\\PDVDServ.exe \r\nC:\\Program Files\\HP\\HP Software Update\\HPWuSchd2.exe \r\nC:\\Norman\\Npm\\bin\\ZLH.EXE \r\nC:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\WrtMon.exe \r\nC:\\Program Files\\Java\\jre1.6.0_05\\bin\\jusched.exe \r\nC:\\Program Files\\Google\\Google Desktop Search\\GoogleDesktop.exe \r\nC:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\WrtProc.exe \r\nC:\\WINDOWS\\system32\\ctfmon.exe \r\nC:\\Program Files\\Windows Live\\Messenger\\MsnMsgr.Exe \r\nC:\\Program Files\\Texthelp Systems\\Browsealoud\\4.0\\BAloud4.exe \r\nC:\\Program Files\\Google\\Google Desktop Search\\GoogleDesktop.exe \r\nC:\\Program Files\\Windows Media Player\\WMPNSCFG.exe \r\nC:\\Program Files\\Google\\Google Updater\\GoogleUpdater.exe \r\nC:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe \r\nC:\\Program Files\\Google\\Google Desktop Search\\GoogleDesktop.exe \r\nC:\\Program Files\\Google\\Common\\Google Updater\\GoogleUpdaterService.exe \r\nC:\\WINDOWS\\system32\\svchost.exe \r\nC:\\Norman\\Npm\\bin\\NJEEVES.EXE \r\nC:\\WINDOWS\\System32\\svchost.exe \r\nC:\\Program Files\\Windows Media Player\\WMPNetwk.exe \r\nC:\\WINDOWS\\System32\\alg.exe \r\nC:\\Norman\\Nvc\\BIN\\NIP.EXE \r\nC:\\Norman\\Nvc\\BIN\\NVCSCHED.EXE \r\nC:\\Norman\\Nvc\\bin\\nvcoas.exe \r\nC:\\Norman\\Nvc\\bin\\cclaw.exe \r\nC:\\Program Files\\Windows Live\\Messenger\\usnsvc.exe \r\nC:\\Program Files\\Adobe\\Reader 8.0\\Reader\\AcroRd32.exe \r\nC:\\WINDOWS\\system32\\DllHost.exe \r\nC:\\Program Files\\Internet Explorer\\iexplore.exe \r\nC:\\WINDOWS\\system32\\wuauclt.exe \r\nC:\\WINDOWS\\system32\\wuauclt.exe \r\nC:\\Program Files\\Trend Micro\\HijackThis\\HijackThis.exe \r\nC:\\WINDOWS\\system32\\wbem\\wmiprvse.exe \r\n\r\nR0 - HKCU\\Software\\Microsoft\\Internet Explorer\\Main,Start Page = [url]http://www.google.nl/[/url] \r\nR1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Default_Page_URL = [url]http://go.microsoft.com/fwlink/?LinkId=69157[/url] \r\nR1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Default_Search_URL = [url]http://go.microsoft.com/fwlink/?LinkId=54896[/url] \r\nR1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Search Page = [url]http://go.microsoft.com/fwlink/?LinkId=54896[/url] \r\nR0 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Start Page = [url]http://go.microsoft.com/fwlink/?LinkId=69157[/url] \r\nR0 - HKLM\\Software\\Microsoft\\Internet Explorer\\Search,SearchAssistant = \r\nR0 - HKLM\\Software\\Microsoft\\Internet Explorer\\Search,CustomizeSearch = \r\nR0 - HKCU\\Software\\Microsoft\\Internet Explorer\\Toolbar,LinksFolderName = Koppelingen \r\nR3 - URLSearchHook: Labpixies Toolbar - {03e037d3-f080-4c0b-bdb5-a70c693ae36d} - C:\\Program Files\\Labpixies\\tbLabp.dll \r\nR3 - URLSearchHook: (no name) - {D0F777E3-0A96-4DC5-8C7C-649DA1F180A1} - (no file) \r\nR3 - URLSearchHook: jon0485 Toolbar - {ae018938-0189-4085-a76a-7fd9c4b6ffd3} - C:\\Program Files\\jon0485\\tbjon0.dll \r\nF2 - REG:system.ini: UserInit=C:\\WINDOWS\\system32\\userinit.exe \r\nO2 - BHO: Labpixies Toolbar - {03e037d3-f080-4c0b-bdb5-a70c693ae36d} - C:\\Program Files\\Labpixies\\tbLabp.dll \r\nO2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroIEHelper.dll \r\nO2 - BHO: TBSB01017 - {5EA0882B-9EC1-4CA8-8DDD-9E8A8C60ED13} - C:\\Program Files\\IEToolbar\\Google Radio\\rutger-nieuw.dll \r\nO2 - BHO: ba4bhoObj Class - {65B413AC-BDCC-4C33-A6DB-9C11306A5D0E} - C:\\Program Files\\Texthelp Systems\\Browsealoud\\4.0\\ba4bho.dll \r\nO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\\Program Files\\Java\\jre1.6.0_05\\bin\\ssv.dll \r\nO2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) \r\nO2 - BHO: cpmsky browser optimizer - {8ef6bc2f-9f6b-d126-3200-2e04d8136e90} - C:\\WINDOWS\\system32\\{a4803a97-e3a2-5cf7-5e29-a884924a4554}.dll (file missing) \r\nO2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\\Program Files\\Common Files\\Microsoft Shared\\Windows Live\\WindowsLiveLogin.dll \r\nO2 - BHO: adzgalore - {9949cbb4-b4ec-ea6f-887c-577be57a1fa3} - C:\\WINDOWS\\system32\\nse12E.dll \r\nO2 - BHO: adzgalore - {994B5FB4-0103-44A6-B6B3-C73572B362BC} - C:\\WINDOWS\\system32\\nsy26.dll \r\nO2 - BHO: Mouse Gestures - {A6A49249-57AE-4295-8D4D-18A9502C7D8E} - C:\\Program Files\\Internet Explorer\\Plugins\\Drowse\\MouseGestures.dll \r\nO2 - BHO: jon0485 Toolbar - {ae018938-0189-4085-a76a-7fd9c4b6ffd3} - C:\\Program Files\\jon0485\\tbjon0.dll \r\nO2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\\Program Files\\Google\\GoogleToolbarNotifier\\2.1.615.5858\\swg.dll \r\nO2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\\Program Files\\Windows Live Toolbar\\msntb.dll \r\nO2 - BHO: Ask Toolbar BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\\Program Files\\AskSBar\\bar\\1.bin\\ASKSBAR.DLL (file missing) \r\nO3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - \r\n\r\n-- \r\nEnd of file - 13286 bytes

[Anoniem2]

dit hoort er ook nog bij\r\n\r\nC:\\Program Files\\Windows Live Toolbar\\msntb.dll \r\nO3 - Toolbar: Labpixies Toolbar - {03e037d3-f080-4c0b-bdb5-a70c693ae36d} - C:\\Program Files\\Labpixies\\tbLabp.dll \r\nO3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\\Program Files\\AskSBar\\bar\\1.bin\\ASKSBAR.DLL (file missing) \r\nO3 - Toolbar: Google Radio - {7D6F15EF-4A6C-433C-B5F2-66BF6C7AC3F6} - C:\\Program Files\\IEToolbar\\Google Radio\\rutger-nieuw.dll \r\nO3 - Toolbar: jon0485 Toolbar - {ae018938-0189-4085-a76a-7fd9c4b6ffd3} - C:\\Program Files\\jon0485\\tbjon0.dll \r\nO4 - HKLM\\..\\Run: [NeroFilterCheck] C:\\WINDOWS\\system32\\NeroCheck.exe \r\nO4 - HKLM\\..\\Run: [RemoteControl] \"C:\\Program Files\\CyberLink\\PowerDVD\\PDVDServ.exe\" \r\nO4 - HKLM\\..\\Run: [HP Software Update] \"C:\\Program Files\\HP\\HP Software Update\\HPWuSchd2.exe\" \r\nO4 - HKLM\\..\\Run: [Norman ZANDA] C:\\Norman\\Npm\\bin\\ZLH.EXE /LOAD /SPLASH \r\nO4 - HKLM\\..\\Run: [CanonSolutionMenu] C:\\Program Files\\Canon\\SolutionMenu\\CNSLMAIN.exe /logon \r\nO4 - HKLM\\..\\Run: [WrtMon.exe] C:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\WrtMon.exe \r\nO4 - HKLM\\..\\Run: [SunJavaUpdateSched] \"C:\\Program Files\\Java\\jre1.6.0_05\\bin\\jusched.exe\" \r\nO4 - HKLM\\..\\Run: [Google Desktop Search] \"C:\\Program Files\\Google\\Google Desktop Search\\GoogleDesktop.exe\" /startup \r\nO4 - HKLM\\..\\Run: [QuickTime Task] \"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime \r\nO4 - HKLM\\..\\Run: [TopDesk] C:\\Program Files\\TopDesk\\topdesk.exe \r\nO4 - HKLM\\..\\Run: [Adobe Reader Speed Launcher] \"C:\\Program Files\\Adobe\\Reader 8.0\\Reader\\Reader_sl.exe\" \r\nO4 - HKLM\\..\\RunOnce: [PackFolders] C:\\WINDOWS\\BricoPackFoldersDelete.cmd \r\nO4 - HKCU\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\system32\\ctfmon.exe \r\nO4 - HKCU\\..\\Run: [MsnMsgr] \"C:\\Program Files\\Windows Live\\Messenger\\MsnMsgr.Exe\" /background \r\nO4 - HKCU\\..\\Run: [BAloud4] C:\\Program Files\\Texthelp Systems\\Browsealoud\\4.0\\BAloud4.exe \r\nO4 - HKCU\\..\\Run: [RocketDock] \"C:\\WINDOWS\\BricoPacks\\Vista Inspirat 2\\RocketDock\\RocketDock.exe\" \r\nO4 - HKCU\\..\\Run: [DU Meter] C:\\WINDOWS\\system32\\DUMeter.exe \r\nO4 - HKCU\\..\\Run: [WMPNSCFG] C:\\Program Files\\Windows Media Player\\WMPNSCFG.exe \r\nO4 - HKUS\\S-1-5-19\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\system32\\CTFMON.EXE (User \'Lokale service\') \r\nO4 - HKUS\\S-1-5-20\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\system32\\CTFMON.EXE (User \'Netwerkservice\') \r\nO4 - HKUS\\S-1-5-18\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\system32\\CTFMON.EXE (User \'SYSTEM\') \r\nO4 - HKUS\\.DEFAULT\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\system32\\CTFMON.EXE (User \'Default user\') \r\nO4 - Startup: IMVU.lnk = C:\\Program Files\\IMVU\\IMVUClient.exe \r\nO4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\\Program Files\\Microsoft Office\\Office12\\ONENOTEM.EXE \r\nO4 - Global Startup: Google Updater.lnk = C:\\Program Files\\Google\\Google Updater\\GoogleUpdater.exe \r\nO4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe \r\nO8 - Extra context menu item: &Windows Live Search - res://C:\\Program Files\\Windows Live Toolbar\\msntb.dll/search.htm \r\nO8 - Extra context menu item: Add to Windows &Live Favorites - [url]http://favorites.live.com/quickadd.aspx[/url] \r\nO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\\PROGRA~1\\MICROS~3\\Office12\\EXCEL.EXE/3000 \r\nO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\\Program Files\\Java\\jre1.6.0_05\\bin\\npjpi160_05.dll \r\nO9 - Extra \'Tools\' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\\Program Files\\Java\\jre1.6.0_05\\bin\\npjpi160_05.dll \r\nO9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\\Program Files\\Windows Live\\Writer\\WriterBrowserExtension.dll \r\nO9 - Extra \'Tools\' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\\Program Files\\Windows Live\\Writer\\WriterBrowserExtension.dll \r\nO9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\\PROGRA~1\\MICROS~3\\Office12\\ONBttnIE.dll \r\nO9 - Extra \'Tools\' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\\PROGRA~1\\MICROS~3\\Office12\\ONBttnIE.dll \r\nO9 - Extra button: (no name) - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - (no file) \r\nO9 - Extra button: (no name) - {4E660F19-E91E-41e1-88EF-D1DFAB118F67} - C:\\Program Files\\Internet Explorer\\Plugins\\Drowse\\MouseGestures.dll \r\nO9 - Extra \'Tools\' menuitem: Mouse Gestures... - {4E660F19-E91E-41e1-88EF-D1DFAB118F67} - C:\\Program Files\\Internet Explorer\\Plugins\\Drowse\\MouseGestures.dll \r\nO9 - Extra button: Google Radio - {7D6F15EF-4A6C-433C-B5F2-66BF6C7AC3F6} - C:\\Program Files\\IEToolbar\\Google Radio\\rutger-nieuw.dll \r\nO9 - Extra \'Tools\' menuitem: Google Radio - {7D6F15EF-4A6C-433C-B5F2-66BF6C7AC3F6} - C:\\Program Files\\IEToolbar\\Google Radio\\rutger-nieuw.dll \r\nO9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\\PROGRA~1\\MICROS~3\\Office12\\REFIEBAR.DLL \r\nO9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\\Documents and Settings\\van der heijden\\Menu Start\\Programma\'s\\IMVU\\Run IMVU.lnk (file missing) \r\nO9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe \r\nO9 - Extra \'Tools\' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe \r\nO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\\Program Files\\Messenger\\msmsgs.exe \r\nO9 - Extra \'Tools\' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\\Program Files\\Messenger\\msmsgs.exe \r\nO16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Plugin Control) - [url]http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab[/url] \r\nO16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - [url]http://www.kaspersky.nl/scanforvirus-en/kavwebscan_unicode.cab[/url] \r\nO16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - [url]http://download.ewido.net/ewidoOnlineScan.cab[/url] \r\nO16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - [url]http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab[/url] \r\nO16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - [url]http://messenger.zone.msn.com/NL-NL/a-UNO1/GAME_UNO1.cab[/url] \r\nO16 - DPF: {BD08A9D5-0E5C-4F42-99A3-C0CB5E860557} (CSolidBrowserObj Object) - [url]http://www.solidstatenetworks.com/demos/plugintest/solidstateion.cab[/url] \r\nO16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - [url]http://game12.zylom.com/activex/zylomgamesplayer.cab[/url] \r\nO16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - [url]http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab[/url] \r\nO16 - DPF: {C9386579-3C0F-4713-82C6-5BA8088C7C8D} (Windows Live SkyDrive Upload Tool) - [url]https://secure.shared.live.com/Pa6vGqB728AxD-ckvrPc0A/etc/Microsoft.Live.Folders.RichUpload.cab[/url] \r\nO16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} - [url]http://a532.g.akamai.net/f/532/6712/5m/virtools.download.akamai.com/6712/player/install/installer.exe[/url] \r\nO16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - [url]http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab[/url] \r\nO20 - AppInit_DLLs: C:\\PROGRA~1\\Google\\GOOGLE~3\\GOEC62~1.DLL \r\nO23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\\Norman\\Npm\\bin\\ELOGSVC.EXE \r\nO23 - Service: Google Desktop Manager 5.7.802.22438 (GoogleDesktopManager-022208-143751) - Google - C:\\Program Files\\Google\\Google Desktop Search\\GoogleDesktop.exe \r\nO23 - Service: Google Updater Service (gusvc) - Google - C:\\Program Files\\Google\\Common\\Google Updater\\GoogleUpdaterService.exe \r\nO23 - Service: Norman NJeeves - Unknown owner - C:\\Norman\\Npm\\bin\\NJEEVES.EXE \r\nO23 - Service: Norman ZANDA - Norman ASA - C:\\Norman\\Npm\\Bin\\Zanda.exe \r\nO23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\\Norman\\Nvc\\bin\\nvcoas.exe \r\nO23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman ASA - C:\\Norman\\Nvc\\BIN\\NVCSCHED.EXE \r\nO23 - Service: Pml Driver HPZ12 - HP - C:\\WINDOWS\\system32\\HPZipm12.exe\r\n\r\nhet zou fijn zijn als iemand mij zou helpen

[Anoniem2]

[url]http://www.file.net/process/wrtmon.exe.html[/url]\r\n\r\n[url]http://www.file.net/process/wrtproc.exe.html[/url]\r\n\r\n[url]http://www.neuber.com/taskmanager/process/dllhost.exe.html[/url]\r\n\r\nmsconfig intypen in Start/uitvoeren, en OK klikken.\r\nkijk in tabblad opstarten en in tabblad services eens wat er opgestart wordt.\r\ndaar wordt geregeld wat er opgestart wordt wanneer windows opstart.\r\n\r\nheb je geen kennis van processen die je daar ziet?\r\ngoogle dan naar processen.\r\ntoets CTRL-ALT-DELTE om taakbeheer en kijk in tabblad processen welke processen er actief zijn.\r\nga op internet eens op zoek via google naar processen en services.\r\nomdat windows draait op processen en services, moet je je daar in verdiepen om windows volledig onder controle te krijgen.\r\nen snel te houden.\r\nals je vragen hebt vraag maar,\r\nverander nooit wat zonder dat je weet wat het effect is.\r\ndus eerst googlen.\r\nals je zeker weet dat iets uit kan, kan je het uitschakelen.\r\nin msconfig tabblad services kan je microsoft services verbergen aan vinken.\r\ndan zie je daar de niet microsoftservices die windows opstart.\r\nschakel daar niet iets uit wat je niet zeker weet dat het uit kan.\r\n\r\nservices zijn ook te vinden in Configuratiescherm/Systeembeheer/Services.\r\n\r\nga eens na welke services er voor nix opgestart worden.\r\nzoek met google\r\ner is veel info op het net, eigenlijk bijna alle info wel.