[Spyware] Na installeren MSN plus

[dbzfan]

Hallo,

Tijdens het installeren van msn plus ben ik schijnbaar vergeten af te vinken dat ik spyware wil dus nu zit m'n hele pc onder. Ik heb Hitman Pro gedraait en die heeft het grootste deel opgeruimt, nu heb ik soms alleen nog popups en er staan mappen in m'n favorieten die ik weg wil hebben... Maar ik kan ze niet verwijderen, rechtermuisknop reageert gewoon niet in IE en in de map Favorieten staan ze er gewoon niet bij

Mijn Hijackthislog:

code:

Logfile of HijackThis v1.97.7
Scan saved at 20:13:18, on 9-4-2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\Ati2evxx.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
D:\WINDOWS\system32\Ati2evxx.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
D:\Program Files\Logitech\iTouch\iTouch.exe
D:\Program Files\HP\HP Software Update\HPWuSchd.exe
D:\Program Files\NetLimiter\NetLimiter.exe
D:\Program Files\D-Tools\daemon.exe
D:\Program Files\Common Files\Logitech\QCDriver\LVCOMS.EXE
D:\Program Files\Common Files\Symantec Shared\ccApp.exe
D:\Program Files\MessengerPlus! 3\MsgPlus.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Steam\Steam.exe
D:\Program Files\Messenger\msmsgs.exe
D:\Program Files\ATITool\ATITool.exe
D:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
D:\Program Files\Norton AntiVirus\navapsvc.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
D:\Program Files\MSN Messenger\MsnMsgr.Exe
D:\Program Files\Internet Explorer\iexplore.exe
d:\progra~1\intern~1\iexplore.exe
D:\mIRC\mirc.exe
D:\Program Files\Windows Media Player\wmplayer.exe
D:\Program Files\Internet Explorer\iexplore.exe
D:\Documents and Settings\René\Mijn documenten\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.vwfsikrxzk.org/f6iQP5l/gmUUanQZjTggA4g21jZ4VGqvzFLEjWZBKcC9JRE4Z3OvH2YEicA/rUj8.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.home.nl/
O1 - Hosts: 80.247.199.247 dvdr.experience
O1 - Hosts: 217.67.238.20 pnw.since98.gov
O1 - Hosts: 217.67.238.20 pnw.since98.gov
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - D:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {E5A1691B-D188-4419-AD02-90002030B8EE} - D:\PROGRA~1\FlashFXP\IEFlash.dll
O2 - BHO: (no name) - {ECC3D9A2-0956-75E9-8C81-A1A5C1BA2B11} - D:\DOCUME~1\REN~1\APPLIC~1\EGGSSI~1\CAST BOLT.exe
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - D:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [RemoteControl] "D:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [NeroCheck] D:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [zBrowser Launcher] D:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [HP Software Update] "D:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "D:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [NetLimiter] D:\Program Files\NetLimiter\NetLimiter.exe /s
O4 - HKLM\..\Run: [DAEMON Tools-1033] "D:\Program Files\D-Tools\daemon.exe"  -lang 1033
O4 - HKLM\..\Run: [LVCOMS] D:\Program Files\Common Files\Logitech\QCDriver\LVCOMS.EXE
O4 - HKLM\..\Run: [ccApp] D:\Program Files\Common Files\Symantec Shared\ccApp.exe
O4 - HKLM\..\Run: [ccRegVfy] D:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe
O4 - HKLM\..\Run: [RegTweak] D:\Program Files\Rage3DTweak\RegTwk.exe
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MessengerPlus3] "D:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\RunServices: [Updating service] win32.exe
O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Steam] D:\Program Files\Steam\Steam.exe -silent
O4 - HKCU\..\Run: [MSMSGS] "D:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MessengerPlus3] "D:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "D:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: ATITool.lnk = D:\Program Files\ATITool\ATITool.exe
O4 - Global Startup: Cisco Systems VPN Client.lnk = D:\Program Files\Cisco Systems\VPN Client\vpngui.exe
O4 - Global Startup: gameutil.exe.lnk = ?
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Onderzoek (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38205.3988194444
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {D1E7CBDA-E60E-4970-A01C-37301EF7BF98} (Measurement Service Client v.3.4) - http://ccon.futuremark.com/global/msc34.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

[Wortelsoep]

MsgPlus uninstallen

[BioHazard]

Sorry ik had fout gelezen, je had dus per ongeluk de sponsor geinstalleerd..

[ Voor 49% gewijzigd door BioHazard op 09-04-2005 20:17 ]

[CyberThijs]

Oplossing die zeker werkt: je deinstalleert msgplus op de correcte manier, en daarna installeer je hem opnieuw zonder sponser

If you installed the sponsor program that comes with Messenger Plus! and if you want to get rid of it, the procedure is very simple. Please, do not create another thread to complain: nobody forced you to install the adware and the removal instructions are the same for everybody. The sponsor that optionally comes with Messenger Plus! is a harmless piece of software that installs various advertisements in Windows, it is adware, not spyware.

Removing the sponsor package won't take more than 2 minutes of your time but first, here is a list of things you must not do:

* Delete the sponsor files yourself
* Edit the registry to try to disable the sponsor
* Run adware removal tools such as Spybot S&D or Microsoft Anti-Spyware

Doing any of these actions will permanently damage the sponsor uninstall package and will prevent you from uninstalling it properly. These rules are actually valid for any other software. Always try to uninstall a program before trying to rely on something else. If you already did damage the setup package, the best thing to do is to try to reinstall the latest version with the sponsor before trying to uninstall everything properly. If you continue to experience problems after running an adware removal tool, please address your complains directly to the creators of the tool, neither I nor C2Media can be held responsible for the actions performed by another program.

As of version 3.50 it is no longer required to uninstall Messenger Plus! as well if you wish to uninstall the sponsor program. You can simply uninstall only the sponsor program and still keep Messenger Plus! on your computer if you installed both.

Follow the instructions below to uninstall the sponsor program.

* Go in Add/Remove Programs and double click on "Messenger Plus!" (or click on Remove)
* The "Messenger Plus! - Uninstall" is now displayed.
* If Messenger Plus!'s sponsor is currently installed, two options are displayed: both of them will uninstall the sponsor, however, if you want to keep Messenger Plus! installed on your computer, chose the first option (the sponsor is never re-installed automatically under any circumstances). If you don't see options to uninstall the sponsor, it either means that the sponsor was never installed on your computer or that another software damaged its uninstallation program permanently.
* Press "Next" or "Uninstall" depending on the option you chose (see above). If you chose to uninsstall Messenger Plus! as well, another set of options will be displayed. These options are related to Messenger Plus! only are will not affect the uninstallation of the sponsor.
* The sponsor screen is now displayed (if you don't see it, search for it in your Task Bar). To prove that someone is currently reading the screen, you have to type the code that is displayed. See screenshot below for an example. Once you enter the code, press Uninstall.

* If you entered the code properly, the program will ask you to confirm that you want to uninstall. You must answer "Yes" to this question, else, you won't have another chance of uninstalling.
* To complete the uninstallation, follow the instructions that are displayed (the first one is to close all your Internet Explorer windows, that's very important). When everything is complete, restart your computer and, voila!


If you follow the procedure properly, you won't need to do anything else. Do not follow any other procedure you find on the web, even on this forum. This one is the easiest and the best. It has been tested again and again, on every configuration possible and it does work.

Thank you for your patience,
Patchou

[PcFer]

Je moet msn plus even verwijderen via de uninstaller. Daarna kun je het gewoon weer installen maar dan ZONDER sponsor

offtopic:
spuit 11

[ Voor 9% gewijzigd door PcFer op 09-04-2005 20:21 ]

[dbzfan]

Verhip, het werkt Bedankt jongens!

[Verwijderd]

Als je hem met een anti addware progje hebt verwijderd kan het zijn dat je vaak msngplus moet uninstallen, dan installen met sponsor, dan uninstallen en dan installeren zonder sponsor. zodat bij het opnieuw installeren met sponsor alle originele bestanden weer goed komen.