Hijackthis K-tje

[Anoniem2]

Hallo,\n\nIk ben echt een leek kwa virussen en weet ook eigenlijk niet veel van computers, ik internet ermee, mail wat, download wat muziek soms film, bewerk een foto, maar daarmee houdt het ook eigenlijk wel op, dus ik hoop dat iemand het geduld heeft mij hopelijk te helpen met al die paarden die telkens via mijn avg op mijn scherm komen ;)\n\nMijn AVG scanner vindt elke keer Trojaans paard Generic 16.zuh . Ook krijg ik meldingen dat er een prgramma toestemming nodig heeft.\nIk gebruik windows 7, heb avg, heb malwarebytes en hijackthis gedownload.\nIk heb net al wat topics doorgelezen en heb hijackthis een scan laten uitvoeren, dit is het resultaat (ik hoop dat ik dit goed doe ;))\n\nLogfile of Trend Micro HijackThis v2.0.2\nScan saved at 20:39:58, on 11-1-2010\nPlatform: Unknown Windows (WinNT 6.01.3504)\nMSIE: Internet Explorer v8.00 (8.00.7600.16385)\nBoot mode: Normal\n\nRunning processes:\nC:\\Windows\\system32\\Dwm.exe\nC:\\Windows\\system32\\taskhost.exe\nC:\\Windows\\Explorer.EXE\nC:\\Program Files\\Java\\jre6\\bin\\jusched.exe\nC:\\Program Files\\CyberLink\\PowerDVD9\\PDVD9Serv.exe\nC:\\Program Files\\CyberLink\\Shared Files\\brs.exe\nC:\\Program Files\\AVG\\AVG9\\avgtray.exe\nC:\\Program Files\\uTorrent\\uTorrent.exe\nC:\\Program Files\\Windows Sidebar\\sidebar.exe\nC:\\Program Files\\OpenOffice.org 3\\program\\soffice.exe\nC:\\Program Files\\OpenOffice.org 3\\program\\soffice.bin\nC:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe\nC:\\Program Files\\Windows Live\\Contacts\\wlcomm.exe\nC:\\Program Files\\Mozilla Firefox\\firefox.exe\nC:\\Program Files\\Malwarebytes\' Anti-Malware\\mbam.exe\nC:\\Windows\\system32\\SearchFilterHost.exe\nC:\\Program Files\\Trend Micro\\HijackThis\\HijackThis.exe\n\nR1 - HKCU\\Software\\Microsoft\\Internet Explorer\\Main,Search Page = [url]http://go.microsoft.com/fwlink/?LinkId=54896[/url]\nR0 - HKCU\\Software\\Microsoft\\Internet Explorer\\Main,Start Page = [url]http://go.microsoft.com/fwlink/?LinkId=69157[/url]\nR1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Default_Page_URL = [url]http://go.microsoft.com/fwlink/?LinkId=69157[/url]\nR1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Default_Search_URL = [url]http://go.microsoft.com/fwlink/?LinkId=54896[/url]\nR1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Search Page = [url]http://go.microsoft.com/fwlink/?LinkId=54896[/url]\nR0 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Start Page = [url]http://go.microsoft.com/fwlink/?LinkId=69157[/url]\nR0 - HKLM\\Software\\Microsoft\\Internet Explorer\\Search,SearchAssistant = \nR0 - HKLM\\Software\\Microsoft\\Internet Explorer\\Search,CustomizeSearch = \nR0 - HKCU\\Software\\Microsoft\\Internet Explorer\\Toolbar,LinksFolderName = \nR3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\\Program Files\\AVG\\AVG9\\Toolbar\\IEToolbar.dll\nO2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\\Program Files\\Common Files\\Adobe\\Acrobat\\ActiveX\\AcroIEHelperShim.dll\nO2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\\Program Files\\AVG\\AVG9\\avgssie.dll\nO2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)\nO2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\\Program Files\\Common Files\\Microsoft Shared\\Windows Live\\WindowsLiveLogin.dll\nO2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\\Program Files\\AVG\\AVG9\\Toolbar\\IEToolbar.dll\nO2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\\Program Files\\Java\\jre6\\bin\\jp2ssv.dll\nO3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\\Program Files\\AVG\\AVG9\\Toolbar\\IEToolbar.dll\nO4 - HKLM\\..\\Run: [SunJavaUpdateSched] \"C:\\Program Files\\Java\\jre6\\bin\\jusched.exe\"\nO4 - HKLM\\..\\Run: [Adobe Reader Speed Launcher] \"C:\\Program Files\\Adobe\\Reader 9.0\\Reader\\Reader_sl.exe\"\nO4 - HKLM\\..\\Run: [Adobe ARM] \"C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\"\nO4 - HKLM\\..\\Run: [RemoteControl9] \"C:\\Program Files\\CyberLink\\PowerDVD9\\PDVD9Serv.exe\"\nO4 - HKLM\\..\\Run: [PDVD9LanguageShortcut] \"C:\\Program Files\\CyberLink\\PowerDVD9\\Language\\Language.exe\"\nO4 - HKLM\\..\\Run: [BDRegion] C:\\Program Files\\Cyberlink\\Shared Files\\brs.exe\nO4 - HKLM\\..\\Run: [AVG9_TRAY] C:\\PROGRA~1\\AVG\\AVG9\\avgtray.exe\nO4 - HKCU\\..\\Run: [uTorrent] \"C:\\Program Files\\uTorrent\\uTorrent.exe\"\nO4 - HKCU\\..\\Run: [Sidebar] C:\\Program Files\\Windows Sidebar\\sidebar.exe /autoRun\nO4 - HKUS\\S-1-5-19\\..\\Run: [Sidebar] %ProgramFiles%\\Windows Sidebar\\Sidebar.exe /autoRun (User \'LOCAL SERVICE\')\nO4 - HKUS\\S-1-5-19\\..\\RunOnce: [mctadmin] C:\\Windows\\System32\\mctadmin.exe (User \'LOCAL SERVICE\')\nO4 - HKUS\\S-1-5-20\\..\\Run: [Sidebar] %ProgramFiles%\\Windows Sidebar\\Sidebar.exe /autoRun (User \'NETWORK SERVICE\')\nO4 - HKUS\\S-1-5-20\\..\\RunOnce: [mctadmin] C:\\Windows\\System32\\mctadmin.exe (User \'NETWORK SERVICE\')\nO4 - HKUS\\S-1-5-18\\..\\Run: [cbssreg] C:\\Windows\\TEMP\\edsv.tmp\\svchost.exe (User \'SYSTEM\')\nO4 - HKUS\\.DEFAULT\\..\\Run: [cbssreg] C:\\Windows\\TEMP\\edsv.tmp\\svchost.exe (User \'Default user\')\nO4 - Startup: LimeWire On Startup.lnk = C:\\Program Files\\LimeWire\\LimeWire.exe\nO4 - Startup: OpenOffice.org 3.1 .lnk = C:\\Program Files\\OpenOffice.org 3\\program\\quickstart.exe\nO13 - Gopher Prefix: \nO18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\\Program Files\\AVG\\AVG9\\avgpp.dll\nO18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\\PROGRA~1\\COMMON~1\\Skype\\SKYPE4~1.DLL\nO20 - AppInit_DLLs: avgrsstx.dll\nO23 - Service: AMD External Events Utility - AMD - C:\\Windows\\system32\\atiesrxx.exe\nO23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\\Program Files\\AVG\\AVG9\\avgemc.exe\nO23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\\Program Files\\AVG\\AVG9\\avgwdsvc.exe\nO23 - Service: NMSAccessU - Unknown owner - C:\\Program Files\\CDBurnerXP\\NMSAccessU.exe\n\n--\nEnd of file - 5198 bytes\n\n\nKan iemand mij helpen?\n\nAlvast bedankt,\n\nGr, Karin

[Anoniem2]

Hi,\r\n\r\nZet System Restore ([B][COLOR=\"RoyalBlue\"]Systeem Herstel[/COLOR][/B]) even uit en doe dan nog een keer een volledige scan met [COLOR=\"Red\"]AVG[/COLOR]. [COLOR=\"red\"]MBAM [/COLOR]mag ook.\r\n\r\nKan zijn dat het dan verholpen is.\r\n\r\nNiet vergeten om het [COLOR=\"Red\"]daarna [/COLOR][COLOR=\"red\"]weer [/COLOR][COLOR=\"red\"]aan [/COLOR]te zetten!\r\n\r\nJeep;)