antivirus.startpagina.nl

Witte achtergrond IE/Logfile

  • Anonymous avatar

    Frank

    Hoi,

    Onder mijn gebruikersnaam van mijn laptop word er een witte achtergrond in de IE 6.0 weergeven. Onder de gebruikersnaam van mijn man wordt er wel een goede kleur in de IE weergeven. Ik heb al gekeken bij Extra > Internet opties > Toegankelijkheid. Alles is uitgevinkt.

    Gescand met

    Adaware: veel spyware gevonden en verwijderd

    Spybot: veel spyware gevonden en verwijderd

    Coolwebscebber: 1 trojan gevonden en verwijderd

    Trendmicro Internet security 2004: Geen virus

    Het lukt me ook niet meer om na het updaten van msn messenger naar de 7.5 versie, in te loggen onder de gebruikersnaam (ook niet na het verwijderen van msn messenger)

    Alvast bedankt

    Frank

    Logfile of HijackThis v1.99.1

    Scan saved at 22:28:16, on 13-11-2005

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\Ati2evxx.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\Trend Micro\Internet Security\Tmntsrv.exe

    C:\Program Files\Trend Micro\Internet Security\tmproxy.exe

    C:\Program Files\Trend Micro\Internet Security\PccPfw.exe

    C:\WINDOWS\system32\Ati2evxx.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

    C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe

    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

    C:\Program Files\QuickTime\qttask.exe

    C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe

    C:\Program Files\HPQ\HP Wireless Assistant\HP Wireless Assistant.exe

    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

    C:\Program Files\Support.com\bin\tgcmd.exe

    C:\Program Files\Trend Micro\Internet Security\pccguide.exe

    C:\Program Files\Trend Micro\Internet Security\PCClient.exe

    C:\Program Files\Trend Micro\Internet Security\TMOAgent.exe

    C:\Program Files\Skype\Phone\Skype.exe

    C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

    C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE

    C:\Program Files\HPQ\SHARED\HPQWMI.exe

    C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Documents and Settings\Wendy\Local Settings\Temporary Internet Files\Content.IE5\9G5DJ5L3\hijackthis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=NL_NL&c=Q105&bd=pavilion&pf=laptop

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.marktplaats.nl/

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=NL_NL&c=Q105&bd=pavilion&pf=laptop

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

    R3 - URLSearchHook: (no name) - _{00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)

    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx

    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

    O3 - Toolbar: HP View - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll

    O4 - HKLM\..\Run: C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

    O4 - HKLM\..\Run: C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe

    O4 - HKLM\..\Run: “C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe” /r

    O4 - HKLM\..\Run: C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

    O4 - HKLM\..\Run: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

    O4 - HKLM\..\Run: “C:\Program Files\QuickTime\qttask.exe” -atboottime

    O4 - HKLM\..\Run: C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start

    O4 - HKLM\..\Run: C:\Program Files\HPQ\Default Settings\cpqset.exe

    O4 - HKLM\..\Run: “%ProgramFiles%\HPQ\HP Wireless Assistant\HP Wireless Assistant.exe”

    O4 - HKLM\..\Run: C:\WINDOWS\system32\NeroCheck.exe

    O4 - HKLM\..\Run: “C:\Program Files\HP\HP Software Update\HPWuSchd2.exe”

    O4 - HKLM\..\Run: “C:\Program Files\Support.com\bin\tgcmd.exe” /server /startmonitor /deaf

    O4 - HKLM\..\Run: D:\Setup.EXE

    O4 - HKLM\..\Run: “C:\Program Files\Trend Micro\Internet Security\pccguide.exe”

    O4 - HKLM\..\Run: “C:\Program Files\Trend Micro\Internet Security\PCClient.exe”

    O4 - HKLM\..\Run: “C:\Program Files\Trend Micro\Internet Security\TMOAgent.exe” /run

    O4 - HKCU\..\Run: “C:\Program Files\MSN Messenger\MsnMsgr.Exe” /background

    O4 - HKCU\..\Run: “C:\Program Files\Skype\Phone\Skype.exe” /nosplash /minimized

    O4 - Global Startup: BTTray.lnk = ?

    O4 - Global Startup: Event Reminder.lnk = C:\Program Files\Broderbund\PrintMaster\PMremind.exe

    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE

    O4 - Global Startup: Snelstart HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe

    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present

    O8 - Extra context menu item: Verzenden naar &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll

    O9 - Extra ‘Tools’ menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=NL_NL&c=Q105&bd=pavilion&pf=laptop

    O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/SSC/SharedContent/vc/bin/AvSniff.cab

    O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab

    O18 - Protocol: widimg - {EE7C2AFF-5742-44FF-BD0E-E521B0D3C3BA} - C:\WINDOWS\system32\btxppanel.dll

    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

    O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

    O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exe

    O23 - Service: Trend Micro Personal Firewall (PccPfw) - Trend Micro Incorporated. - C:\Program Files\Trend Micro\Internet Security\PccPfw.exe

    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

    O23 - Service: Trend NT Realtime Service (Tmntsrv) - Trend Micro Incorporated. - C:\Program Files\Trend Micro\Internet Security\Tmntsrv.exe

    O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Incorporated. - C:\Program Files\Trend Micro\Internet Security\tmproxy.exe

  • Anonymous avatar

    pablo

    ik zie in het logje eigenlijk geen oorzaak daarvoor :?:)

    is dit van de account met de witte achtergrond?

    start hijack,klik op scan en vink alleen de onderstaande regels aan:

    R3 - URLSearchHook: (no name) - _{00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)

    O4 - HKLM\..\Run: “C:\Program Files\Support.com\bin\tgcmd.exe” /server /startmonitor /deaf

    O4 - HKLM\..\Run: D:\Setup.EXE

    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE

    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present

    sluit alle vensters behalve hijack en klik op “fix checked”

    herstart je pc.

    als dit niet geholpen heeft zou ik het even bij de buren vragen ;)

    http://www.prikpagina.nl/read.php?f=571

    succes,

    paul :)