ballonnetje virusalert

[Verwijderd]

hallo,

Ik heb een probleem met met 2 icoontjes in mijn windows balk.
Ik krijg de melding (van deze iconen) dat mijn pc niet beveiligd is en dat hij besmet is met een virus enzo...
(een van de icoontjes http://antivirusgolden.com/?aid=1331 )
En er staat Norton op mijn pc en die vindt niets.
Ik vind dit zeer vervelend

Plz weet iemand hier soms een oplossing voor..
Ik heb al gescand met veel programma's adware, spy sweeper, ....

http://img445.imageshack.us/img445/1860/backdv0.jpg
http://img524.imageshack.us/img524/2827/back2xi0.jpg
greetz moorke

alvast merci

[F_J_K]

Ik heb al gescand met veel programma's adware, spy sweeper, ....

Geef dan meteen ook even (je interpretatie van) het log van HJT, zoals uitgelegd in Beveiliging en Virussen - Nieuw topic starten zodat we meer kunnen zeggen dan algemene zaken die al honderd keer zijn genoemd in "alle" eerdere topics in B&V

[matel]

Je hebt dus spyware op de computer staan, wellicht een zeer hardnekkig soort, maar dat valt nog te bezien. Installeer eens hitman pro of windows defender.

[Verwijderd]

Logfile of HijackThis v1.99.1
Scan saved at 22:06:50, on 7/09/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ishost.exe
C:\WINDOWS\system32\issearch.exe
C:\WINDOWS\system32\isnotify.exe
C:\WINDOWS\system32\ismini.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\program files\valve\steam\steam.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\components\flx22.dll
C:\WINDOWS\system32\components\flx20.dll
C:\WINDOWS\system32\components\flx23.dll
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\iTunes\iTunes.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\components\flx28.dll
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\components\flx25.dll
C:\WINDOWS\system32\mspaint.exe
C:\Documents and Settings\Eigenaar\Bureaublad\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Safety Bar - {052b12f7-86fa-4921-8482-26c42316b522} - C:\Program Files\Safety Bar\SafetyBar.dll
O4 - HKLM\..\Run: [NvCplDaemon] "RUNDLL32.EXE" C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] "nwiz.exe" /install
O4 - HKLM\..\Run: [NvMediaCenter] "RunDLL32.exe" NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [CorelDRAW Graphics Suite 11b] "C:\Program Files\Corel\Corel Graphics 12\Languages\NL\Programs\Registration.exe" /title="CorelDRAW Graphics Suite 12" /date=091306 serial=dr12wex-1504397-kty lang=NL
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [Steam] "c:\program files\valve\steam\steam.exe" -silent
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec....ontent/vc/bin/AvSniff.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec....tent/common/bin/cabsa.cab
O18 - Protocol: bw+0 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {863327CD-907D-44E1-AF3F-27A70CEB4835} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O21 - SSODL: incestuously - {03413bf7-e34c-445b-bfc0-a2b127255871} - C:\WINDOWS\system32\urroxtl.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Norton Internet Security\comHost.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect-service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe


is dit goed??

[niels88]

Deze zijn in iedergeval NIET goed

C:\WINDOWS\system32\ishost.exe
C:\WINDOWS\system32\issearch.exe
C:\WINDOWS\system32\isnotify.exe
C:\WINDOWS\system32\ismini.exe

Shit vergeten, deze is het zowieso ook:

C:\WINDOWS\system32\urroxtl.dll

"A file used by the rogue antispyware app, SpywareQuake, to issue fake security alerts on your taskbar"

[ Voor 33% gewijzigd door niels88 op 07-09-2006 22:15 ]

[D-Three]

Yep. Deze ook niet:

O3 - Toolbar: Safety Bar - {052b12f7-86fa-4921-8482-26c42316b522} - C:\Program Files\Safety Bar\SafetyBar.dll

[Jckx]

Probeer eens HitmanPro.

[Verwijderd]

en???

wat moet ik doen want ik kan deze bestanden niet verwijderen (dacht ik al)

moor

[Martijnc]

Je hebt Smitfraud, je kan Smitfraudfix, Smitrem of roguescanfix proberen maar ik denk dat je weer een nieuwe variant hebt, als de tools niet werken kan je dan logs posten zodat we de tootljes kunnen updaten?

[niels88]

Hier is een goeie uitleg:
http://www.bleepingcomputer.com/forums/topic47826.html

[Verwijderd]

morgen eens proberen merci

bye

[Verwijderd]

hey

http://www.bleepingcomputer.com/forums/topic47826.html


Ik zit aan stap 10 en dan gaf roguesacan dit


http://img167.imageshack.us/img167/5889/raguescanka2.jpg

??

[Welleweerd]

als ik jou was had ik windows er gewoon opnieuw opgeknalt.. ben je van het hele gezeur af.. en loopt je windows ook een stuk soepeler.

na zo'n spyware epidimietje krijgt je systeem meestal een flinke deuk.. dus neem vanaaf vrij en knal je windows er opnieuw op.. just my 2 cents

[Martijnc]

Heb je wel een beheerdersacount?

[Remond_FRL]

dat is ook wel weer een hele dramatische oplossing

hitmanpro nu al eens geprobeerd ?

www.hitmanpro.nl

[Verwijderd]

ja ben beheerder
ok zal windows opnieuw installeren

merci

[Verwijderd]

probleem opgelost

merci voor reacties

[Rhannie]

Verwijderd schreef op zondag 10 september 2006 @ 21:09:
probleem opgelost

merci voor reacties

Zou je de oplossing van je probleem willen posten? Dan hebben degenen die hetzelfde probleem hebben en dit topic tegen komen met de search er ook nog wat aan.

[abaart]

Paddixx schreef op zondag 10 september 2006 @ 21:17:
[...]

Zou je de oplossing van je probleem willen posten? Dan hebben degenen die hetzelfde probleem hebben en dit topic tegen komen met de search er ook nog wat aan.

lezen helpt

Verwijderd schreef op zaterdag 09 september 2006 @ 11:35:
ok zal windows opnieuw installeren

[Rhannie]

abaart schreef op zondag 10 september 2006 @ 21:22:
[...]


lezen helpt


[...]

Het kan toch zijn dat 'ie alsnog een oplossing heeft gevonden voor zijn probleem dat niet zo ingrijpend is als Windows opnieuw installeren?

[Verwijderd]

Ik heb windows niet opnieuw geïnstalleerd.
heb deze uitleg uitgevoerd http://www.bleepingcomputer.com/forums/topic47826.html
plus ad aware en spybot laten draaien en alles was weg.

greetz

[Kurios]

Laat me raden, je zag op een website een melding dat je computer niet beveiligd was? (en je klikte er maar op?)

Dit is gewoon spyware/adware (hoe je het maar wilt noemen).

Advies hier is natuurlijk www.hitmanpro.nl (die pakt bijna alles)
en in ultiem geval windows opnieuw opstarten en niet alleen firefox gebruiken, maar ook niet overal lukraak ja op klikken.

[Verwijderd]

neen toch niet