LOGFILE.....KAN IEMAND HIER NAAR KIJKEN A.U.B. ALVAST BEDANKT A.U.B.

Ga naar het laatste bericht

februari 2007

• timenting
  hallo ik heb een opmerking en een vraag ik zeg het alvast ik kan geen links meer openen behalfde deze maar die stond in faforieten, vandaar dat ik niet verder kan zoeken naar andere hulpmidelen. maar nu mijn vraag zoals jullie hierboven hebben kunnen lezen kan ik geen links meer openen mijn mappen in c: worden doorzichtig dus ik denk dat ik gehackt ben. ik heb een logfile gemaakt zodat jullie kunnen zien welke programma's er nu draaien. bedankt , alvast.
  
  Logfile of HijackThis v1.99.1
  Scan saved at 19:12:41, on 16-2-2007
  Platform: Windows XP SP2 (WinNT 5.01.2600)
  MSIE: Internet Explorer v7.00 (7.00.6000.16414)
  
  Running processes:
  C:\WINDOWS\System32\smss.exe
  C:\WINDOWS\system32\winlogon.exe
  C:\WINDOWS\system32\services.exe
  C:\WINDOWS\system32\lsass.exe
  C:\WINDOWS\system32\Ati2evxx.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\System32\svchost.exe
  C:\WINDOWS\system32\spoolsv.exe
  C:\WINDOWS\system32\Ati2evxx.exe
  C:\WINDOWS\Explorer.EXE
  C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
  C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
  C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
  C:\WINDOWS\system32\cisvc.exe
  C:\Program Files\KPN Telecom\IKB\IKBGuardian.exe
  C:\Program Files\Norton AntiVirus\navapsvc.exe
  C:\WINDOWS\system32\slserv.exe
  C:\WINDOWS\system32\svchost.exe
  C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
  C:\WINDOWS\SOUNDMAN.EXE
  C:\Program Files\Logitech\Video\LogiTray.exe
  C:\Program Files\Logitech\MouseWare\system\em_exec.exe
  C:\WINDOWS\system32\LVCOMSX.EXE
  C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
  C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
  C:\Program Files\Messenger\msmsgs.exe
  C:\WINDOWS\system32\ctfmon.exe
  C:\Program Files\Logitech\Video\FxSvr2.exe
  C:\WINDOWS\system32\cidaemon.exe
  C:\Program Files\MSN Messenger\msnmsgr.exe
  C:\Documents and Settings\Eigenaar\Local Settings\Temporary Internet Files\Content.IE5\AFPE7UO7\drweb-cureit[1].exe
  C:\DOCUME~1\Eigenaar\LOCALS~1\Temp\RarSFX1\_start.exe
  C:\DOCUME~1\Eigenaar\LOCALS~1\Temp\RarSFX1\cureit.exe
  C:\Program Files\Internet Explorer\iexplore.exe
  C:\Program Files\MSN Messenger\livecall.exe
  C:\Documents and Settings\Eigenaar\Bureaublad\mappen\hijackthis\HijackThis.exe
  C:\Documents and Settings\Eigenaar\Bureaublad\mappen\hijackthis\HijackThis.exe
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.co.uk/0SEENGB/SAOS01?FORM=TOOLBR
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.co.uk/0SEENGB/SAOS01?FORM=TOOLBR
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl/
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
  R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.co.uk/0SEENGB/SAOS01?FORM=TOOLBR
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
  O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
  O2 - BHO: XBTBPos00 - {6C007DCF-AD49-42CB-985B-033B904258D5} - C:\PROGRA~1\NO1TOR~1\NO1TOR~1.DLL (file missing)
  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
  O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
  O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
  O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
  O4 - HKLM\..\Run: [Control Center] C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
  O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
  O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
  O4 - HKLM\..\Run: [CardGate] "C:\Program Files\Softick\CardExport\CardGate.exe"
  O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
  O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\ImageStudio\ISStart.exe
  O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray.exe
  O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
  O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
  O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
  O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
  O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe
  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
  O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
  O4 - HKCU\..\Run: [JugsVc] C:\DOCUME~1\Eigenaar\APPLIC~1\FIVEBU~1\1HTM.exe
  O4 - HKCU\..\Run: [License Manager] "C:\Program Files\License_Manager\license_manager.exe " /silent
  O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
  O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
  O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
  O9 - Extra button: No1Torrent Toolbar - {9AD92007-0726-4C3C-9E90-ACC903298F07} - C:\Program Files\No1Torrent Toolbar\no1torrent.dll (file missing)
  O9 - Extra 'Tools' menuitem: No1Torrent Toolbar - {9AD92007-0726-4C3C-9E90-ACC903298F07} - C:\Program Files\No1Torrent Toolbar\no1torrent.dll (file missing)
  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O11 - Options group: [INTERNATIONAL] International*
  O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
  O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by116w.bay116.mail.live.com/mail/resources/MsnPUpld.cab
  O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1164460543266
  O16 - DPF: {BC4B2F36-CC7E-4995-ADF6-EAB4F4C4BA14} (IaxClientOcx Control) - http://www.smscity.nl/members/voip/smscity.CAB
  O16 - DPF: {CCA0B877-CB5E-4ADC-AD30-457C379512DD} (Gif89 Lite Class) - http://84.86.252.134:8081/xplugLite.cab
  O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://88.211.191.32:9999/activex/AMC.cab
  O17 - HKLM\System\CCS\Services\Tcpip\..\{4D3D9848-A5F0-4F6E-BD86-3E85CF62B534}: NameServer = 195.121.1.34,195.121.1.66
  O18 - Protocol: bw+0 - {9611E563-AA8C-4828-A485-C6D53F22B2F8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
  O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
  O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
  O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
  O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
  O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
  O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
  O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
  O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
  O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
  O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
  O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
  O23 - Service: IKBGuardian - KPN Telecom BV - C:\Program Files\KPN Telecom\IKB\IKBGuardian.exe
  O23 - Service: Microsoft authenticate service (MsaSvc) - Unknown owner - C:\WINDOWS\system32\msasvc.exe (file missing)
  O23 - Service: Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
  O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
  O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
  O23 - Service: ScriptBlocking Service (SBService) - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe (file missing)
  O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
  O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
  O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe (file missing)
  O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
  O23 - Service: SymWMI Service (SymWSC) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe (file missing)
  
  
  16 februari 2007 19:20
• louwrens
  ff hitmanpro draaien.
  die NOD32 WEL installaren, is een goede scanner.
  en natuurlijk een goede firewall;)
  16 februari 2007 19:48
• christiaan
  Ik denk dat het spyware is.
  en dit vertrouw ik ook niet
  [b]C:\Documents and Settings\Eigenaar\Local Settings\Temporary Internet Files\Content.IE5\AFPE7UO7\drweb-cureit[1].exe
  C:\DOCUME~1\Eigenaar\LOCALS~1\Temp\RarSFX1\_start.exe
  C:\DOCUME~1\Eigenaar\LOCALS~1\Temp\RarSFX1\cureit.exe[/b]
  16 februari 2007 20:12
• timenting
  zal ik deze hele map dan amar verwijdern ik weet namelijk ook niet waar deze voor is.. ?
  17 februari 2007 13:27
• ali
  Download en installeer Ccleaner. Deze ruimt de troep op.
  http://www.ccleaner.com
  17 februari 2007 13:29
• timenting
  dank je..?><!
  17 februari 2007 13:37
• sparky
  Je kan ook je virusscanner eens laten draaien.
  Als het echt niet help zul je hem moeten formatteren.
  17 februari 2007 14:09
• timenting
  even denken me virusscanner heeft 867 bestanden gevonden nou trojan horse en al die shit.
  verwijdert maar mijn links op internet doen het nog steets niet snapt iemand dit>??
  17 februari 2007 17:16
• louwrens
  dat hebben die virussen gedaan
  CCleaner en HitmanPRO herstellen dat meestal
  17 februari 2007 17:35
• irfan
  O9 - Extra button: No1Torrent Toolbar - {9AD92007-0726-4C3C-9E90-ACC903298F07} - C:\Program Files\No1Torrent Toolbar\no1torrent.dll (file missing)
  O9 - Extra 'Tools' menuitem: No1Torrent Toolbar - {9AD92007-0726-4C3C-9E90-ACC903298F07} - C:\Program Files\No1Torrent Toolbar\no1torrent.dll (file missing)
  
  Hierbij zit een virus dat weet ik 100% zeker heb ik ook gehad
  
  Ik kan trouwens ook geen links van bepaalde sitesmeer openen
  17 februari 2007 17:51