popups

  • frank

    is die goed zoow

  • Erik

    We gaan het anders doen.

    Ga naar deze pagina; http://www.ad-w-a-r-e.com/cgi-bin/UnInstaller

    Onderaan de pagina klik je op accept.

    Schrijjf de Uninstallkey op, let op hoofd en kleine letters.

    Klik op Download uninstaller en volg de aanwijzingen.

    Als je klaar bent post dan nog een nieuw Hijackthis logje svp :-)

  • frank

    ik had gedownload maar toen gaf programa ewido

    een meding en toen was die weg wouk het nog een keer probeeren en toen kwap dit er testaan

    An UnInstaller has already been requested twice from you IP address today and the number of requests is limited by two per day, please try again tomorrow.

    Thank you for using the Look2Me application.

  • Erik

    Mag ik dan nog een nieuw HJT logje :?

  • frank

    ik had het gedaan maar toen gaf ewido een melding

    en toen was die op eens weg

    toen wouw ik het nog een keer probbern maar toen kwam dit

    An UnInstaller has already been requested twice from you IP address today and the number of requests is limited by two per day, please try again tomorrow.

    Thank you for using the Look2Me application.

  • frank

    ik moet er meestopen van mam

    jullie zien het wel as ik er weer ben

  • Erik

    Zorg dan wel dat je er de tijd voor kan nemen, vertel dat ook maar aan ons mam want anders gaat het niet lukken ben ik bang voor.

    Begin morgen hier eens mee:

    Download en installeer de trialversie van spysweeper http://www.webroot.com/shoppingcart/tryme.php?bjpc=64011&vcode=DT02

    Installeer het programma en update het.

    Doe een volledige systeem scan, bewaar het logje en post dat hier samen met een nieuw HJT logje

  • frank

    Logfile of HijackThis v1.99.1

    Scan saved at 18:47:34, on 16-11-2005

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

    C:\Program Files\ewido\security suite\ewidoctrl.exe

    C:\Program Files\ewido\security suite\ewidoguard.exe

    C:\Program Files\Norton AntiVirus\navapsvc.exe

    C:\ATI Technologies\ATI Control Panel\atiptaxx.exe

    C:\Program Files\Common Files\Symantec Shared\ccApp.exe

    C:\Program Files\Norton AntiVirus\SAVScan.exe

    C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

    C:\Program Files\Messenger\msmsgs.exe

    C:\Program Files\MSN Messenger\MsnMsgr.Exe

    C:\WINDOWS\system32\slserv.exe

    C:\PROGRA~1\INCRED~1\bin\IMApp.exe

    C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

    C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe

    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

    C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

    C:\WINDOWS\system32\wuauclt.exe

    C:\Documents and Settings\Frank\Mijn documenten\hjjdisc\hijackthis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer aangeboden door @Home

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy:8080

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll

    O4 - HKLM\..\Run: Ati2mdxx.exe

    O4 - HKLM\..\Run: C:\ATI Technologies\ATI Control Panel\atiptaxx.exe

    O4 - HKLM\..\Run: “C:\Program Files\Common Files\Symantec Shared\ccApp.exe”

    O4 - HKLM\..\Run: C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer

    O4 - HKLM\..\Run: C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto

    O4 - HKLM\..\Run: “C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe” /startintray

    O4 - HKCU\..\Run: “C:\Program Files\Messenger\msmsgs.exe” /background

    O4 - HKCU\..\Run: “C:\Program Files\MSN Messenger\MsnMsgr.Exe” /background

    O4 - HKCU\..\Run: C:\Program Files\IncrediMail\bin\IncMail.exe /c

    O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm

    O8 - Extra context menu item: &Google Zoeken - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html

    O8 - Extra context menu item: &Woord vertalen in het Nederlands - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html

    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000

    O8 - Extra context menu item: Gelijkwaardige pagina's - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html

    O8 - Extra context menu item: Koppelingspagina's - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html

    O8 - Extra context menu item: Opgeslagen momentopname van de pagina - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html

    O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O14 - IERESET.INF: START_PAGE_URL=http://start.home.nl/

    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab

    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - “C:\PROGRA~1\MSNMES~1\msgrapp.dll” (file missing)

    O20 - Winlogon Notify: cert32 - C:\WINDOWS\SYSTEM32\cert32.dll

    O21 - SSODL: HI0FAJHE - {5F1C2594-31A3-6904-0264-412B47D57FC5} - C:\WINDOWS\System32\Ppjlah32.dll (file missing)

    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe

    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

    O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe

    O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe

    O23 - Service: Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe

    O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe

    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe

    O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

    O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

    O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

    O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe

    Spy Sweeper will provide you with detailed information about the operations being performed in this area.

    Updating spyware definitions from Webroot.com

    Please wait… This may take a few minutes…

    Your spyware definitions have been updated.

    You are now protected against 113583 known traces.

    To subscribe by phone, simply dial 1 866 612-4227

    To ensure proper removal of spyware, adware and other unwanted items, be sure to close any programs that are open.

    Your Sweep Options indicate the following will be swept:

    Drives: C:

    Also sweeping: Memory, Cookies, Registry

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    Adware found: icannnews

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    Adware found: azsearch toolbar

    Trojan Horse found: spamrelayer_alpiok

    Trojan Horse found: trojan-backdoor-zubox

    Spy Cookie found: hbmediapro cookie

    Spy Cookie found: belnk cookie

    Spy Cookie found: rn11 cookie

    Spy Cookie found: upspiral cookie

    Spy Cookie found: cc214142 cookie

    Adware found: spysheriff

    Trojan Horse found: trojan-backdoor-us15info

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    Adware found: targetsaver

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    Adware found: command

    Full Sweep has completed. Elapsed time 00:14:45

    Traces Found: 89

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

  • frank

    Spy Sweeper will provide you with detailed information about the operations being performed in this area.

    Updating spyware definitions from Webroot.com

    Please wait… This may take a few minutes…

    Your spyware definitions have been updated.

    You are now protected against 113583 known traces.

    To subscribe by phone, simply dial 1 866 612-4227

    To ensure proper removal of spyware, adware and other unwanted items, be sure to close any programs that are open.

    Your Sweep Options indicate the following will be swept:

    Drives: C:

    Also sweeping: Memory, Cookies, Registry

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    Adware found: icannnews

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    Adware found: azsearch toolbar

    Trojan Horse found: spamrelayer_alpiok

    Trojan Horse found: trojan-backdoor-zubox

    Spy Cookie found: hbmediapro cookie

    Spy Cookie found: belnk cookie

    Spy Cookie found: rn11 cookie

    Spy Cookie found: upspiral cookie

    Spy Cookie found: cc214142 cookie

    Adware found: spysheriff

    Trojan Horse found: trojan-backdoor-us15info

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    Adware found: targetsaver

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    Adware found: command

    Full Sweep has completed. Elapsed time 00:14:45

    Traces Found: 89

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com

    \

    Logfile of HijackThis v1.99.1

    Scan saved at 18:47:34, on 16-11-2005

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

    C:\Program Files\ewido\security suite\ewidoctrl.exe

    C:\Program Files\ewido\security suite\ewidoguard.exe

    C:\Program Files\Norton AntiVirus\navapsvc.exe

    C:\ATI Technologies\ATI Control Panel\atiptaxx.exe

    C:\Program Files\Common Files\Symantec Shared\ccApp.exe

    C:\Program Files\Norton AntiVirus\SAVScan.exe

    C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

    C:\Program Files\Messenger\msmsgs.exe

    C:\Program Files\MSN Messenger\MsnMsgr.Exe

    C:\WINDOWS\system32\slserv.exe

    C:\PROGRA~1\INCRED~1\bin\IMApp.exe

    C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

    C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe

    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

    C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

    C:\WINDOWS\system32\wuauclt.exe

    C:\Documents and Settings\Frank\Mijn documenten\hjjdisc\hijackthis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer aangeboden door @Home

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy:8080

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll

    O4 - HKLM\..\Run: Ati2mdxx.exe

    O4 - HKLM\..\Run: C:\ATI Technologies\ATI Control Panel\atiptaxx.exe

    O4 - HKLM\..\Run: “C:\Program Files\Common Files\Symantec Shared\ccApp.exe”

    O4 - HKLM\..\Run: C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer

    O4 - HKLM\..\Run: C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto

    O4 - HKLM\..\Run: “C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe” /startintray

    O4 - HKCU\..\Run: “C:\Program Files\Messenger\msmsgs.exe” /background

    O4 - HKCU\..\Run: “C:\Program Files\MSN Messenger\MsnMsgr.Exe” /background

    O4 - HKCU\..\Run: C:\Program Files\IncrediMail\bin\IncMail.exe /c

    O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm

    O8 - Extra context menu item: &Google Zoeken - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html

    O8 - Extra context menu item: &Woord vertalen in het Nederlands - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html

    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000

    O8 - Extra context menu item: Gelijkwaardige pagina's - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html

    O8 - Extra context menu item: Koppelingspagina's - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html

    O8 - Extra context menu item: Opgeslagen momentopname van de pagina - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html

    O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O14 - IERESET.INF: START_PAGE_URL=http://start.home.nl/

    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab

    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - “C:\PROGRA~1\MSNMES~1\msgrapp.dll” (file missing)

    O20 - Winlogon Notify: cert32 - C:\WINDOWS\SYSTEM32\cert32.dll

    O21 - SSODL: HI0FAJHE - {5F1C2594-31A3-6904-0264-412B47D57FC5} - C:\WINDOWS\System32\Ppjlah32.dll (file missing)

    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe

    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

    O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe

    O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe

    O23 - Service: Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe

    O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe

    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe

    O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

    O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe

    O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

    O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H+H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe

  • Erik

    Hoi Frank,

    Vink in Hijackthis de volgende regels aan:

    O20 - Winlogon Notify: cert32 - C:\WINDOWS\SYSTEM32\cert32.dll

    O21 - SSODL: HI0FAJHE - {5F1C2594-31A3-6904-0264-412B47D57FC5} - C:\WINDOWS\System32\Ppjlah32.dll (file missing)

    Sluit alle andere vensters en klik op fix checked

    zet in configuratiescherm-mapoptie's eerst een vinkje bij “verborgen bestanden en mappen weergeven” en haal het vinkje weg bij “extensie's voor bekende bestandstypen verbergen” en bij “beschermde besturingsbestanden verbergen ( aanbevolen) ”,klik op toepassen en ok

    Delete het volgende bestand:

    C:\WINDOWS\SYSTEM32\cert32.dll <== bestand

    Post hierna nog een logje en vertel of je problemen bent tegengekomen :?