hijckthis logje

elie · 19 sep 2008

hoi beste mensen ,ik heb een probleem
mijn pc is heel traag heb alles gebrobeerd niets blijkt te helpen ,en om te formateren wil ik even wachten op jullie experts ,en o ja als ik opstart blijft de pc hangen bij het welkom logo een tijdje hangen en gaat dan door bedankt op voorhand wacht ongeduldig op hulp groetjes elie

dit is mijn hijckthis logje:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:02:32, on 19-9-2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20861)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\Program Files\SweetIM\Messenger\SweetIM.exe
C:\WINDOWS\system32\PuXpMan2.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\F-Secure\FSGUI\fsguidll.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\INCRED~1\bin\ImApp.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
--
End of file - 7156 bytes

gast99 · 19 sep 2008

Download MBAM (Malwarebytes' Anti-Malware) via hier of hier.

Dubbelklik op mbam-setup.exe om het programma te installeren.
- Zorg ervoor dat er een vinkje geplaatst is voor Update Malwarebytes' Anti-Malware en Start Malwarebytes' Anti-Malware, Klik daarna op "Voltooien".
- Indien een update gevonden werd, zal die gedownload en geïnstalleerd worden.
- Wanneer het programma volledig up to date is, selecteer dan in het tabblad Scanner : "Snelle Scan", daarna klik op Scan.
- Het scannen kan een tijdje duren, dus wees geduldig.
- Wanneer de scan voltooid is, klik op OK, daarna "Bekijk Resultaten" om de resultaten te zien.
- Zorg ervoor dat daar alles aangevinkt is, daarna klik op: Verwijder geselecteerde.
- Na het verwijderen zal een log openen en zal er gevraagd worden om de computer opnieuw op te starten. (Zie verder)
- De log wordt automatisch bewaard door MBAM en kan je terugvinden door op de "Logs" tab te klikken in MBAM.
- Kopieer en plak de inhoud van het logje in je volgend antwoord, samen met een nieuw HijackThis log.
Indien MBAM moeilijkheden heeft met het verwijderen van bepaalde bestanden zal het enkele meldingen geven waar je OK moet klikken.
Daarna zal het vragen om de Computer opnieuw op te starten... dus sta toe dat MBAM de computer opnieuw opstart.

elie · 19 sep 2008

hoi Rosty hier het logje van MBAM

Malwarebytes' Anti-Malware 1.28
Database versie: 1176
Windows 5.1.2600 Service Pack 3
19-9-2008 20:53:25
mbam-log-2008-09-19 (20-53-25).txt
Scan type: Snelle Scan
Objecten gescand: 45373
Verstreken tijd: 7 minute(s), 5 second(s)
Geheugenprocessen geïnfecteerd: 0
Geheugenmodulen geïnfecteerd: 0
Registersleutels geïnfecteerd: 20
Registerwaarden geïnfecteerd: 0
Registerdata bestanden geïnfecteerd: 0
Mappen geïnfecteerd: 4
Bestanden geïnfecteerd: 23
Geheugenprocessen geïnfecteerd:
(Geen kwaadaardige items gevonden)
Geheugenmodulen geïnfecteerd:
(Geen kwaadaardige items gevonden)
Registersleutels geïnfecteerd:
HKEY_CLASSES_ROOT\TypeLib\{51b5287b-1776-4dd7-8ec2-9ef1beaf4102} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{1ed66e9b-5a1b-4354-9a00-8ce8c809f0a0} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{1fd72a8c-e2ce-41eb-9aa4-3d2e18dca49f} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3f6fc238-3d6c-455f-b1ad-203f3f9de391} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{6f7c160f-ece1-4dfc-a4c1-ae0d0aa5cd20} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{8573fcf1-941e-4d3a-880b-3f34b380104b} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{99102376-125c-4a3b-b236-b5f2a94c4259} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{9f2d645b-c067-4001-9212-f5dc813415fe} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{a8999341-7238-4aee-806f-2d2fea37c255} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{c0f24fd7-d91a-4858-be9b-fcf1da5b2a31} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{e09c0c3d-3c14-4f65-b4d1-cf7dd53f7af3} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{09c38747-4633-4aee-9c9a-efa67f08ab13} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{11b75807-e720-460b-99c5-d750581d9f3a} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{2fa44b26-f9a8-469c-af7e-c5d301e1bf4b} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{5c6289f4-c822-45d0-9bbe-06bce8a7a8eb} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{6a0cc99a-3471-4fc3-9bf9-e9dfd9cf7a05} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{84fd864b-8b6b-41ac-8ce3-15f3bbbae904} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{c9f99872-310a-4f9d-9e36-ed5c8fd6a5b0} (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\malware scanner_is1 (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Malware Scanner (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
Registerwaarden geïnfecteerd:
(Geen kwaadaardige items gevonden)
Registerdata bestanden geïnfecteerd:
(Geen kwaadaardige items gevonden)
Mappen geïnfecteerd:
C:\Program Files\MalwareRemover.com (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Program Files\MalwareRemover.com\Malware Scanner (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Program Files\MalwareRemover.com\Malware Scanner\Patches (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Program Files\MalwareRemover.com\Malware Scanner\Quarantine (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
Bestanden geïnfecteerd:
C:\Program Files\MalwareRemover.com\Malware Scanner\Core.dll (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Program Files\MalwareRemover.com\Malware Scanner\*****.eXe (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Program Files\MalwareRemover.com\Malware Scanner\DataBase.ini (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Program Files\MalwareRemover.com\Malware Scanner\DB1.ms (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Program Files\MalwareRemover.com\Malware Scanner\DB2.ms (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Program Files\MalwareRemover.com\Malware Scanner\DB3.ms (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Program Files\MalwareRemover.com\Malware Scanner\DB4.ms (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Program Files\MalwareRemover.com\Malware Scanner\DB5.ms (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Program Files\MalwareRemover.com\Malware Scanner\English.inf (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Program Files\MalwareRemover.com\Malware Scanner\English.jpg (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Program Files\MalwareRemover.com\Malware Scanner\Fire.ms (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Program Files\MalwareRemover.com\Malware Scanner\Help.chm (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Program Files\MalwareRemover.com\Malware Scanner\hosts (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Program Files\MalwareRemover.com\Malware Scanner\MalScr.exe (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Program Files\MalwareRemover.com\Malware Scanner\MsgBox.ms (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Program Files\MalwareRemover.com\Malware Scanner\Purchase.ms (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Program Files\MalwareRemover.com\Malware Scanner\Scanner.ms (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Program Files\MalwareRemover.com\Malware Scanner\scanning.ms (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Program Files\MalwareRemover.com\Malware Scanner\Splash.spl (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Program Files\MalwareRemover.com\Malware Scanner\unins000.dat (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Program Files\MalwareRemover.com\Malware Scanner\unins000.exe (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Program Files\MalwareRemover.com\Malware Scanner\update.cli (Rogue.MalwareScanner) -> Quarantined and deleted successfully.
C:\Program Files\MalwareRemover.com\Malware Scanner\update.exe (Rogue.MalwareScanner) -> Quarantined and deleted successfully.

en hier het logje van hijckthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:04:14, on 19-9-2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20861)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\Program Files\F-Secure\FSGUI\fsguidll.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\INCRED~1\bin\ImApp.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Netwerkservice')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
--
End of file - 7115 bytes

groetjes elie

gast99 · 20 sep 2008

Deze zien er goed uit. Nog problemen?

elie · 20 sep 2008

Rosty ik heb nog een probleem
als ik op start blijft de pc 1 min hangen bij het welkom scherm maar voor de rest alles ok je bent een krak heel hartelijk bedankt voor alles

gast99 · 20 sep 2008

elie zei:
Rosty ik heb nog een probleem
als ik op start blijft de pc 1 min hangen bij het welkom scherm maar voor de rest alles ok je bent een krak heel hartelijk bedankt voor alles

Hoi,

dat is waarschijnlijk omdat er een zwaar prog opstart bij het opstarten van windows.

Lees deze Preventie pagina met info en tips hoe dit in de toekomst te voorkomen.
En lees deze pagina om je computer terug te optimaliseren na het verwijderen van malware.

Extra nota: Zorg ervoor dat je programma's up to date zijn - want oudere versies kunnen Security Leaks bevatten. Om na te gaan welke programma's je moet updaten, voer de Secunia Software Inspector Scan uit.

elie · 20 sep 2008

hoi Rosty ik heb f-secure draaien zou uk deze verweideren en KAV instaleren
bedankt voor je hulp groetjes elie

gast99 · 20 sep 2008

elie zei:
hoi Rosty ik heb f-secure draaien zou uk deze verweideren en KAV instaleren
bedankt voor je hulp groetjes elie

Dat is nu iets dat ik niet in uw plaats kan beslissen!! Is F-Secure een betaalde versie? Indien niet kun je deze eens verwijderen en KAV proberen. Op deze manier be je geen geld kwijt hé.
Of je schakelt F-Secure uit en probeert KAV eens en zie wat je het beste bevalt.

elie · 20 sep 2008

Hoi Rosty ik heb mijne f-secure uitgezet en terug opgestart
maar de pc blijft nog altijd hangen bij het blauw welkom scherm 1 min en start dan door groetjes elie

gast99 · 21 sep 2008

Hey elie,

mal- of spyware is het zekr niet. Misschien eens vragen in het software forum.