Doorzoek het forum
Zoeken met Startpagina
Startpagina Thema's
Bertold
Auteur: Bertold (—.cable.quicknet.nl)
Datum: 28-10-2005 18:19
Goede middag….
Op pc van mijn ma valt de internet steeds uit….ze heeft sinds 4 maanden geen firewall meer omdat mijn broer zijn pc heefdt meegenomen en daar was het aangesloten……
Ik heb de stappenplan gedaan van het antiviruspagina…..
Ik ben een leek op dit gebied dus….
Dus moest ik een systemscan doen en hier op zitten…misschien dat jullie de fouten zien??
Logfile of HijackThis v1.99.1
Scan saved at 18:04:05, on 28-10-2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\PROGRAM FILES\AGNITUM\OUTPOST FIREWALL 1.0\OUTPOST.EXE
C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\PROGRAM FILES\REAL\REALPLAYER\REALPLAY.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\DESKTOP\HIJACKTHIS.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = +s
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = www.ficyxtohfokmphgu.com/2OJr46D2efF2P135IlQtto7xRqUbFUjtWWIw7gOWQbkZ5i3RGX5wC2/XVpwS3fmR.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.multikabel.nl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Startpagina = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = file:///C:/Program%20Files/Plus18Point/Portal/portal.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer aangeboden door Multikabel
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX (file missing)
O2 - BHO: thunk close - {7E943E4C-46AE-BB34-E22A-4C673D3704DE} - C:\PROGRAM FILES\GRIDFUNKOKAY\MEALVGA.DLL (file missing)
O2 - BHO: (no name) - {49E0E0F0-5C30-11D4-945D-000000000000} - C:\WINDOWS\SYSTEM\IEHelper.dll (file missing)
O2 - BHO: (no name) - {7E15DE91-CAAB-F54B-D118-F7F32D41B713} - C:\WINDOWS\APPLICATION DATA\GRIDFUNKOKAY\MAGS BOOB.EXE
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: C:\WINDOWS\p_981116.exe /Q:A
O4 - HKLM\..\Run: C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: “C:\WINDOWS\SYSTEM\QTTASK.EXE” -atboottime
O4 - HKLM\..\Run: SysTray.Exe
O4 - HKLM\..\Run: C:\WINDOWS\All Users\Application Data\fourerrormailopen\Defy Date.exe
O4 - HKLM\..\Run: C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: “C:\Program Files\Agnitum\Outpost Firewall 1.0\outpost.exe” /waitservice
O4 - HKLM\..\RunServices: Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: mstask.exe
O4 - HKLM\..\RunServices: C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\RunServices: C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
O4 - HKLM\..\RunServices: C:\PROGRAM FILES\AGNITUM\OUTPOST FIREWALL 1.0\outpost.exe /service
O4 - HKLM\..\RunServices: C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
O4 - HKCU\..\Run: C:\WINDOWS\APPLIC~1\STUPID~1\FILM HOLD BURN.exe
O8 - Extra context menu item: &Search - bar.mywebsearch.com/menusearch.html?p=ZNxdm119YYNL
O14 - IERESET.INF: START_PAGE_URL=http://www.multikabel.nl
O16 - DPF: {9B4AA442-9EBF-11D5-8C11-0050DA4957F5} - www.cavello.com/dialxs/plugins/d/2/440/nl.exe
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - messenger.zone.msn.com/binary/MessengerStatsClient.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - messenger.zone.msn.com/binary/SolitaireShowdown.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - messenger.zone.msn.com/binary/MineSweeper.cab
O16 - DPF: {10000000-1000-0000-1000-000000000000} - ms-its:mhtml:file://C:\foo.mht!http://www.free32.com/POP.CHM::/sp.exe
O16 - DPF: {E3802230-F0E2-4A75-9947-EAB78DD8153F} (InstallerX Class) - www.klikeuro.nl/cab/EasyWebInstaller.cab
O16 - DPF: {CE69F98F-2AF3-4306-BAC6-A79070EDA1B4} (Zylom Loader Object) - game15.zylomgames.com/activex/zylomloader.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - 195.18.69.102/activex/AxisCamControl.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - www.popcap.com/games/popcaploader_v6.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - by15fd.bay15.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - 137.222.163.13:8080/contentFactory/media/qtplugin.cab
O16 - DPF: {BD3653E4-884B-43C4-970B-670802501B7F} - akamai.downloadv3.com/binaries/P2EClient/EGAUTH_1043_EN.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - www.bitdefender.com/scan8/oscan8.cab
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - acs.pandasoftware.com/activescan/as5free/asinst.cab
alvast bedankt voor de tips….
heb het paar dagen geleden ook opgezet, maar werd niet wijzer van…..
graag hulp……alvast bedankt…
