Hijackthis hulp gevraagd

[cage]

Hallo mensen,

ik heb last van heel veel irritante pop-ups (sex, dating etc)

kan iemand mij helpen

Logfile of HijackThis v1.92.0
Scan saved at 23:00:50, on 24-6-2003
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://www.planet.nl/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant=
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [McAfee Guardian] "D:\Program Files\McAfee\McAfee Shared Components\Guardian\CMGrdian.exe" /SU
O4 - HKLM\..\Run: [rb32 lptt01] "D:\Program Files\rb32\rb32.exe"
O4 - HKLM\..\Run: [EM_EXEC] D:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [QuickTime Task] "D:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MCAgentExe] D:\Program Files\McAfee.com\Agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] D:\PROGRA~1\McAfee.com\Agent\mcupdate.exe
O4 - HKLM\..\Run: [VirusScanMSC] "D:\Program Files\McAfee\McAfee VirusScan\VsStat.exe" /EMBEDDING
O4 - HKLM\..\Run: [IST Service] D:\WINDOWS\istsvc.exe
O4 - HKLM\..\Run: [VideoAction_nl] c:\program files\comsoft\dialers\videoaction_nl\videoaction_nl.exe /noconnect
O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\ctfmon.exe
O4 - Startup: SpeedFan.lnk = D:\Program Files\SpeedFan\speedfan.exe
O8 - Extra context menu item: &Download with &DAP - D:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Yahoo! Dictionary - file:///D:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! Search - file:///D:\Program Files\Yahoo!\Common/ycsrch.htm
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O16 - DPF: {003FADA5-8FEE-11D6-AFB7-0004768F6183} (CryptoRSA Control) - https://www.p3.postbank.nl/sesam/CAX.cab
O16 - DPF: {0C568603-D79D-11D2-87A7-00C04FF158BB} (BrowseFolderPopup Class) - http://download.mcafee.com/molbin/Shared/MGBrwFld.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52...apple.com/qt505/nl/win/QuickTimeInstaller.exe
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37593.3147800926
O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yse/ymmapi_416.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {DE591B16-A452-11D6-AED1-0001030A4E46} (PBGNX Control) - https://www.p3.postbank.nl/GTO/PBGNX.cab


(heb ad-aware algedaan en spybot ook)

alvast bedankt!

 

[cage]

O4 - HKLM\..\Run: [VideoAction_nl] c:\program files\comsoft\dialers\videoaction_nl\videoaction_nl.exe /noconnect

deze heb ik al verwijderd!

(kreeg ik na het bezoeken van een GTA VC site :8-0: )

 

[Bennie]

Laat Hijackthis de volgende items fixen. Sluit je browser eerst.

O4 - HKLM\..\Run: [rb32 lptt01] "D:\Program Files\rb32\rb32.exe"
O4 - HKLM\..\Run: [VideoAction_nl] c:\program files\comsoft\dialers\videoaction_nl\videoaction_nl.exe /noconnect
O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - http://us.dl1.yimg.com/download.yah.../ymmapi_416.dll

Start PC daarna opnieuw op.

Groetjes,
Bennie

 

[cage]

Hej erg bedankt ik hoop dat het nu eindelijk eens over is
bedankt!

[Cage]

 

[Pieter Arntz]

@ Bennie & cage,

http://www.wilderssecurity.net/specialinfo/rapidblaster.html

Dit was waarschijnlijk nog een oude versie van RapidBlaster. De nieuwere zijn niet met HijackThis alleen te verwijderen.
Let op dat RapidBlaster moet draaien om RapidBlasterKiler te laten werken.

Laat deze ook Fixen:
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant=
O4 - HKLM\..\Run: [IST Service] D:\WINDOWS\istsvc.exe

en verwijder D:\WINDOWS\istsvc.exe na het opnieuw opstarten.

Info: http://www.doxdesk.com/parasite/ISTbar.html

Groetjes,

Pieter