Heb sinds een paar dagen problemen met shortcuts naar sexsites die plotseling op de desktop staan( en na verwijdering steeds terugkomen)+homepage van explorer kan ik niet meer zelf instellen(verandert onmiddellijk terug naar cool web search). Wie kan me helpen om dit probleem op te lossen aub?
Alvast bedankt.
Yves
Hieronder het Hijack this log:
Logfile of HijackThis v1.98.2
Scan saved at 19:17:52, on 21/11/2004
Platform: Windows 2000 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\mspmspsv.exe
C:\WINNT\System32\ZipToA.exe
C:\WINNT\Explorer.exe
C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINNT\System32\systime.exe
C:\PROGRA~1\COMMON~1\ADAPTE~1\CreateCD\CREATE~1.EXE
C:\WINNT\System32\internat.exe
C:\WINNT\System32\systime.exe
C:\Program Files\TOPCOM\Skyracer Wireless LAN USB\ZDConfig.exe
C:\WINNT\System32\MsiExec.exe
C:\Program Files\InterMute\SpySubtract\CWShredder.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\WinZip\winzip32.exe
C:\DOCUME~1\yves\LOCALS~1\Temp\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://213.159.117.134/index.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://213.159.117.134/index.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://213.159.117.134/index.php
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://213.159.117.134/index.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://213.159.117.134/index.php
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://213.159.117.134/index.php
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = gedebe.be
O17 - HKLM\System\CCS\Services\Tcpip\..\{6328F546-FCA8-4A0A-9173-4493D330516B}: Domain = gedebe.be
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = gedebe.be
Alvast bedankt.
Yves
Hieronder het Hijack this log:
Logfile of HijackThis v1.98.2
Scan saved at 19:17:52, on 21/11/2004
Platform: Windows 2000 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\System32\mspmspsv.exe
C:\WINNT\System32\ZipToA.exe
C:\WINNT\Explorer.exe
C:\Program Files\Iomega\DriveIcons\ImgIcon.exe
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINNT\System32\systime.exe
C:\PROGRA~1\COMMON~1\ADAPTE~1\CreateCD\CREATE~1.EXE
C:\WINNT\System32\internat.exe
C:\WINNT\System32\systime.exe
C:\Program Files\TOPCOM\Skyracer Wireless LAN USB\ZDConfig.exe
C:\WINNT\System32\MsiExec.exe
C:\Program Files\InterMute\SpySubtract\CWShredder.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\WinZip\winzip32.exe
C:\DOCUME~1\yves\LOCALS~1\Temp\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://213.159.117.134/index.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://213.159.117.134/index.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://213.159.117.134/index.php
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://213.159.117.134/index.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://213.159.117.134/index.php
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://213.159.117.134/index.php
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = gedebe.be
O17 - HKLM\System\CCS\Services\Tcpip\..\{6328F546-FCA8-4A0A-9173-4493D330516B}: Domain = gedebe.be
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = gedebe.be