scherm

[klimmer]

Als ik het internet open dan opent de pagina die ik moet hebben, maar er opent zich tegelijkertijd een nieuw venster.
Hoe kan ik vanaf komen.
Ik gebruik Windows XP en IE 7

[MandersOnline]

Wat staat er in dat tweede tabblad?

Ik heb het probleem zelf niet.

[klimmer]

B.v. Win een macbook dat is gewoon een nieuw internetadres dat zich opent.

[MandersOnline]

Lijkt haast wel een Stukkie Spyware op je PC.

Is het steeds een of andere Reclame Pagina??

[klimmer]

Nu krijg ik van Error Safe een venster om die te laten controleren en te installeren.
Ik weet het niet meer wat te doen.

[MandersOnline]

Error Safe is een Vize Knakker die jou PC vol gooit met rommel.

http://www.ewido.net/en/download/

Ga daar even heen en download AVG Anti-Spyware.

Hiermee kan je een hoop rommel van je PC laten vissen en als je dat hebt gedaan zou ik graag een Hijackthis log willen hebben zodat we nog even wat dieper kunnen lopen schoon vegen.

[klimmer]

Wat moet ik doen met de AVG scan?

Resultaat van:Logfile of HijackThis v1.99.1
Scan saved at 10:55:45, on 20-5-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\SYMANT~1\VPTray.exe
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Netropa\Multimedia Keyboard\TrayMon.exe
C:\Program Files\Netropa\Onscreen Display\OSD.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Symantec AntiVirus\Rtvscan.exe
C:\Program Files\ClickTray Calendar\ClickTray.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\IncrediMail\bin\IncMail.exe
C:\Program Files\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.planet.nl/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://r.office.microsoft.com/r/rlidOff ... ?clid=1043
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\Google\Googletoolbar1.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKLM\..\Run: [MULTIMEDIA KEYBOARD] C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe
O4 - HKLM\..\Run: [setup] rundll32.exe "C:\WINDOWS\system32\lhfpkxly.dll",realset
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: ClickTray Calendar.lnk = C:\Program Files\ClickTray Calendar\ClickTray.exe
O8 - Extra context menu item: Exporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.adobe.com/pub/shockwa ... wflash.cab
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: Droppix Service - Droppix - C:\Program Files\Common Files\Droppix\DxService.exe
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe


Hier is het resultaat van :AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 10:53:01 20-5-2007

+ Scan result:



C:\Program Files\Common Files\Companion Wizard\WapCHK.dll -> Adware.Companion : Ignored.
C:\Program Files\Common Files\Companion Wizard\WapCHK{13E63BDA-E0D0-4B6E-B1DF-7C2C295FA007}.dll -> Adware.Companion : Ignored.
HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager -> Adware.HotBar : Ignored.
HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager.1 -> Adware.HotBar : Ignored.
HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager\CLSID -> Adware.HotBar : Ignored.
HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager\CurVer -> Adware.HotBar : Ignored.
C:\WINDOWS\mirar_distro_876260.exe -> Adware.SaveNow : Ignored.
C:\WINDOWS\system32\UpMedia\ContentTool.dll -> Adware.SmartShopper : Ignored.
C:\WINDOWS\system32\UpMedia\SearchTool.dll -> Adware.SmartShopper : Ignored.
C:\RECYCLER\S-1-5-21-1614895754-1364589140-839522115-500\Dc5\SAccU.exe -> Adware.SurfAcc : Ignored.
C:\RECYCLER\S-1-5-21-1614895754-1364589140-839522115-500\Dc6.exe -> Adware.SurfAccuracy : Ignored.
C:\System Volume Information\_restore{26C3F862-6E29-4DE1-AA29-3D895E2DEAD4}\RP1\A0338099.exe -> Adware.SystemDoctor : Ignored.
C:\System Volume Information\_restore{26C3F862-6E29-4DE1-AA29-3D895E2DEAD4}\RP1\A0338079.sys -> Adware.WinAntiVirus : Ignored.
C:\System Volume Information\_restore{26C3F862-6E29-4DE1-AA29-3D895E2DEAD4}\RP1\A0338080.sys -> Adware.WinAntiVirus : Ignored.
C:\System Volume Information\_restore{26C3F862-6E29-4DE1-AA29-3D895E2DEAD4}\RP1\A0338081.exe -> Adware.WinAntiVirus : Ignored.
C:\System Volume Information\_restore{26C3F862-6E29-4DE1-AA29-3D895E2DEAD4}\RP1\A0338082.dll -> Adware.WinAntiVirus : Ignored.
C:\System Volume Information\_restore{26C3F862-6E29-4DE1-AA29-3D895E2DEAD4}\RP1\A0338083.exe -> Adware.WinAntiVirus : Ignored.
C:\System Volume Information\_restore{26C3F862-6E29-4DE1-AA29-3D895E2DEAD4}\RP1\A0338084.sys -> Adware.WinAntiVirus : Ignored.
C:\System Volume Information\_restore{26C3F862-6E29-4DE1-AA29-3D895E2DEAD4}\RP1\A0338085.dll -> Adware.WinAntiVirus : Ignored.
C:\System Volume Information\_restore{26C3F862-6E29-4DE1-AA29-3D895E2DEAD4}\RP1\A0338086.exe -> Adware.WinAntiVirus : Ignored.
C:\System Volume Information\_restore{26C3F862-6E29-4DE1-AA29-3D895E2DEAD4}\RP1\A0338088.dll -> Adware.WinAntiVirus : Ignored.
C:\System Volume Information\_restore{26C3F862-6E29-4DE1-AA29-3D895E2DEAD4}\RP1\A0338089.exe -> Adware.WinAntiVirus : Ignored.
C:\System Volume Information\_restore{26C3F862-6E29-4DE1-AA29-3D895E2DEAD4}\RP1\A0338090.dll -> Adware.WinAntiVirus : Ignored.
C:\System Volume Information\_restore{26C3F862-6E29-4DE1-AA29-3D895E2DEAD4}\RP1\A0338092.dll -> Adware.WinAntiVirus : Ignored.
C:\System Volume Information\_restore{26C3F862-6E29-4DE1-AA29-3D895E2DEAD4}\RP1\A0338093.cpl -> Adware.WinAntiVirus : Ignored.
C:\System Volume Information\_restore{26C3F862-6E29-4DE1-AA29-3D895E2DEAD4}\RP1\A0338094.dll -> Adware.WinAntiVirus : Ignored.
C:\System Volume Information\_restore{26C3F862-6E29-4DE1-AA29-3D895E2DEAD4}\RP1\A0338097.exe -> Adware.WinAntiVirus : Ignored.
C:\System Volume Information\_restore{26C3F862-6E29-4DE1-AA29-3D895E2DEAD4}\RP1\A0338098.exe -> Adware.WinAntiVirus : Ignored.
C:\System Volume Information\_restore{26C3F862-6E29-4DE1-AA29-3D895E2DEAD4}\RP1\A0338100.exe -> Adware.WinAntiVirus : Ignored.
C:\System Volume Information\_restore{26C3F862-6E29-4DE1-AA29-3D895E2DEAD4}\RP1\A0338101.exe -> Adware.WinAntiVirus : Ignored.
C:\System Volume Information\_restore{26C3F862-6E29-4DE1-AA29-3D895E2DEAD4}\RP1\A0338102.exe -> Adware.WinAntiVirus : Ignored.
C:\System Volume Information\_restore{26C3F862-6E29-4DE1-AA29-3D895E2DEAD4}\RP1\A0338103.exe -> Adware.WinAntiVirus : Ignored.
C:\System Volume Information\_restore{26C3F862-6E29-4DE1-AA29-3D895E2DEAD4}\RP1\A0338107.sys -> Adware.WinAntiVirus : Ignored.
HKU\S-1-5-21-1614895754-1364589140-839522115-500\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2178F3FB-2560-458F-BDEE-631E2FE0DFE4} -> Adware.WinAntiVirus : Ignored.
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\TFSNYBOT\ErrorSafeDutchNewReleaseInstall[1].cab/UERSM_9999_N91S2009NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.o : Ignored.
C:\Documents and Settings\Administrator\Cookies\administrator@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Ignored.
C:\Documents and Settings\Administrator\Cookies\administrator@doubleclick[2].txt -> TrackingCookie.Doubleclick : Ignored.
C:\Documents and Settings\Administrator\Cookies\administrator@mediaplex[1].txt -> TrackingCookie.Mediaplex : Ignored.
C:\Documents and Settings\Administrator\Cookies\administrator@stat.onestat[1].txt -> TrackingCookie.Onestat : Ignored.
C:\Documents and Settings\Administrator\Cookies\administrator@www.paypal[1].txt -> TrackingCookie.Paypal : Ignored.
C:\Documents and Settings\Administrator\Cookies\administrator@stats1.reliablestats[2].txt -> TrackingCookie.Reliablestats : Ignored.
C:\Documents and Settings\Administrator\Cookies\administrator@weborama[1].txt -> TrackingCookie.Weborama : Ignored.
C:\Documents and Settings\Administrator\Cookies\administrator@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Ignored.
C:\Documents and Settings\Administrator\Cookies\administrator@zedo[1].txt -> TrackingCookie.Zedo : Ignored.
C:\Program Files\hijackthis\backups\backup-20070411-205531-903.dll -> Trojan.BHO.b : Ignored.


::Report end

[MandersOnline]

Resultaat van:Logfile of HijackThis v1.99.1
Scan saved at 10:55:45, on 20-5-2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16441)


R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://r.office.microsoft.com/r/rlidOff ... ?clid=1043


O4 - HKLM\..\Run: [setup] rundll32.exe "C:\WINDOWS\system32\lhfpkxly.dll",realset

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe


O11 - Options group: [INTERNATIONAL] International*

O23 - Service: Droppix Service - Droppix - C:\Program Files\Common Files\Droppix\DxService.exe
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)

verder wat betreft dat lijstje van die AVG die dingen mag je allemaal weg mikken en niet Ignoren want daar schiet je niets mee op het is allemaal rommel.

[klimmer]

Bedankt voor de hulp.