Spyware Pc’tje?

hey EG

kheb hier ff een pc’tje met ontzettend veel spyware. zelf de startpagina is spyware

kheb al ad-aware gedraaid maar nog niet alles is weg. kheb hier een hijack this logje, kunnen jullie ff kijken wat er allemaal nog weg kan??

Logfile of HijackThis v1.99.1
Scan saved at 16:56:11, on 11-11-2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesCommon FilesSymantec SharedccSetMgr.exe
C:WINDOWSsystem32rundll32.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesHewlett-PackardHP Software UpdateHPWuSchd.exe
C:WINDOWSSystem32spooldriversw32x863hpztsb08.exe
C:Program FilesHewlett-PackardDigital Imagingbinhpotdd01.exe
C:Program FilesQuickTimeqttask.exe
C:Program FilesD-LinkAir UtilityAirCFG.exe
C:windowssystem32mdms.exe
C:WINDOWSSystem32rtf32.exe
C:WINDOWSSystem32paytime.exe
C:Program FilesCommon FilesSymantec SharedccApp.exe
C:WINDOWSSystem32ctfmon.exe
C:winstall.exe
C:WINDOWSSystem32paytime.exe
C:WINDOWSSystem32sysvcs.exe
C:WINDOWStool2.exe
C:WINDOWStool2.exe
C:Program FilesWZCBDL ServiceWZCBDLS.exe
C:Program FilesMessengermsmsgs.exe
C:WINDOWSsystem32rundll32.exe
C:WINDOWSSystem32msiexec.exe
C:WINDOWSexplorer.exe
C:Documents and SettingsArie en jannyBureaubladhijack thisHijackThis.exe

R1 – HKCUSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = c:secure32.html
R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = c:secure32.html
R1 – HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = c:secure32.html
R0 – HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = c:secure32.html
R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page = c:secure32.html
R0 – HKLMSoftwareMicrosoftInternet ExplorerMain,Local Page = c:secure32.html
R0 – HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Koppelingen
O3 – Toolbar: &Yahoo! Toolbar – {EF99BD32-C1FB-11D2-892F-0090271D4F88} – C:Program FilesYahoo!CompanionInstallscpn0yt.dll
O3 – Toolbar: &Radio – {8E718888-423F-11D2-876E-00A0C9082467} – C:WINDOWSSystem32MSDXM.OCX
O3 – Toolbar: RX Toolbar – {25D8BACF-3DE2-4B48-AE22-D659B8D835B0} – C:Program FilesRXToolBarRXToolBar.dll
O3 – Toolbar: Norton AntiVirus – {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} – C:Program FilesNorton AntiVirusNavShExt.dll
O4 – HKLM..Run: [HP Software Update] C:Program FilesHewlett-PackardHP Software UpdateHPWuSchd.exe
O4 – HKLM..Run: [HPDJ Taskbar Utility] C:WINDOWSSystem32spooldriversw32x863hpztsb08.exe
O4 – HKLM..Run: [DeviceDiscovery] C:Program FilesHewlett-PackardDigital Imagingbinhpotdd01.exe
O4 – HKLM..Run: [QuickTime Task] “C:Program FilesQuickTimeqttask.exe” -atboottime
O4 – HKLM..Run: [D-Link Air Utility] C:Program FilesD-LinkAir UtilityAirCFG.exe
O4 – HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 – HKLM..Run: [winshost.exe] C:WINDOWSSystem32winshost.exe
O4 – HKLM..Run: [firewall_anti] C:WINDOWSfirewall_anti.exe
O4 – HKLM..Run: [SysMemory manager] c:windowssystem32mdms.exe
O4 – HKLM..Run: [rtf32.exe] rtf32.exe
O4 – HKLM..Run: [PayTime] C:WINDOWSSystem32paytime.exe
O4 – HKCU..Run: [CTFMON.EXE] C:WINDOWSSystem32ctfmon.exe
O4 – HKCU..Run: [winshost.exe] C:WINDOWSSystem32winshost.exe
O4 – HKCU..Run: [Windows installer] C:winstall.exe
O4 – HKCU..Run: [PayTime] C:WINDOWSSystem32paytime.exe
O4 – HKCU..Run: [aupd] C:WINDOWSSystem32sysvcs.exe
O4 – HKCU..Run: [Shell] “C:Program FilesCommon FilesMicrosoft SharedWeb Foldersibm00005.exe”
O4 – Global Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOfficeOSA9.EXE
O9 – Extra button: Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – C:Program FilesMessengerMSMSGS.EXE
O9 – Extra ‘Tools’ menuitem: Windows Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – C:Program FilesMessengerMSMSGS.EXE
O16 – DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) – http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 – DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) – http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 – DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) – http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1111242416721
O16 – DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) – http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 – DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) – http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 – DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) – http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 – Protocol: msnim – {828030A1-22C1-4009-854F-8E305202313F} – “C:PROGRA~1MSNMES~1msgrapp.dll” (file missing)
O20 – Winlogon Notify: Applets – C:WINDOWSsystem32p46s0ej7eho.dll
O21 – SSODL: SysTray.Excn2 – {1722ECFF-4356-4f5b-B534-E67294FE75E9} – C:WINDOWSSystem32digkdjoq.dll
O21 – SSODL: SysTray.Exsn – {2368D1FC-2F5C-4f1b-B124-E67214FC78E2} – C:WINDOWSSystem32jagagjin.dll
O23 – Service: WZCBDL Service (WZCBDLService) – D-Link – C:Program FilesWZCBDL ServiceWZCBDLS.exe

Grtz

-Sphinxx