Virussen

Deze week inmiddels al 8 virussen gehad! 👿 … Stuk voor stuk waren het Trojans.

Maar goed, mijn virusscanner kreeg hem niet verwijderd.

Hij vond hem in Temporary Internet Files, dus ben ik naar de map toegegaan CTRL+A gedaan, delete, Kaspersky laten scannen hij vond niks meer.

Toen HouseCall Online Scan nog uitgevoerd, die vond ook niets.

Kan ik er nu vanuit gaan dat ik Virusvrij ben?

Hier mijn HJT-logfile

Logfile of HijackThis v1.99.1

Scan saved at 10:51:23, on 28-3-2005

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:

C:WINDOWSSystem32smss.exe

C:WINDOWSsystem32winlogon.exe

C:WINDOWSsystem32services.exe

C:WINDOWSsystem32lsass.exe

C:WINDOWSsystem32svchost.exe

C:WINDOWSSystem32svchost.exe

C:WINDOWSsystem32spoolsv.exe

C:PROGRA~1COMMON~1StardockSDMCP.exe

C:Program FilesStardockObject DesktopWindowBlindswbload.exe

C:WINDOWSExplorer.EXE

C:WINDOWSsystem32RUNDLL32.EXE

C:WINDOWSsystem32CTHELPER.EXE

C:Program FilesValveSteamSteam.exe

C:WINDOWSsystem32CTsvcCDA.exe

C:WINDOWSsystem32nvsvc32.exe

C:WINDOWSsystem32MsPMSPSv.exe

C:Program FilesInternet ExplorerIEXPLORE.EXE

C:Program FilesStardockObject DesktopWindowFXwfxload.exe

C:Documents and SettingsxxxxxxxxMijn documentenhijackthisHijackThis.exe

R0 – HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://localhost/

R0 – HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Koppelingen

O2 – BHO: AcroIEHlprObj Class – {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} – C:Program FilesAdobeAcrobat 7.0ActiveXAcroIEHelper.dll

O2 – BHO: WebBlinds – {4F92B827-1E56-4E30-A978-A17A7861A606} – C:PROGRA~1OBJECT~1WEBBLI~1webblinds.dll

O4 – HKLM..Run: [TCASUTIEXE] TCAUDIAG.EXE -off

O4 – HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup

O4 – HKLM..Run: [nwiz] nwiz.exe /install

O4 – HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSsystem32NvMcTray.dll,NvTaskbarInit

O4 – HKLM..Run: [CTHelper] CTHELPER.EXE

O4 – HKLM..Run: [UpdReg] C:WINDOWSUpdReg.EXE

O4 – HKLM..Run: [Jet Detection] “C:Program FilesCreativeSBLivePROGRAMADGJDet.exe”

O4 – HKLM..Run: [KAVPersonal50] “C:Program FilesKaspersky LabKaspersky Anti-Virus Personalkav.exe” /minimize

O4 – HKCU..Run: [Steam] C:Program FilesValveSteamSteam.exe -silent

O4 – HKCU..Run: [WindowFX] C:PROGRA~1STARDOCKOBJECT~1WINDOWFX\wfxload.exe

O8 – Extra context menu item: E&xport to Microsoft Excel – res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000

O8 – Extra context menu item: Save Flash – res://C:Program FilesUnH SolutionsFlash Saving PluginFlashSButton.dll/210

O9 – Extra button: Research – {92780B25-18CC-41C8-B9BE-3C9C571A8263} – C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL

O9 – Extra button: Flash – {43CF38F3-5AEC-45a3-AD31-04EB06E9C6CA} – C:Program FilesUnH SolutionsFlash Saving PluginFlashSButton.dll (HKCU)

O16 – DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) – http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1111924380656

O16 – DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Besturing) – http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab

O20 – Winlogon Notify: MCPClient – C:PROGRA~1COMMON~1Stardockmcpstub.dll

O20 – Winlogon Notify: WB – C:PROGRA~1STARDOCKOBJECT~1WINDOW~1fastload.dll

O23 – Service: Creative Service for CDROM Access – Creative Technology Ltd – C:WINDOWSsystem32CTsvcCDA.exe

O23 – Service: kavsvc – Kaspersky Lab – C:Program FilesKaspersky LabKaspersky Anti-Virus Personalkavsvc.exe

O23 – Service: Macromedia Licensing Service – Unknown owner – C:Program FilesCommon FilesMacromedia SharedServiceMacromedia Licensing.exe

O23 – Service: MySQL – Unknown owner – C:AppServmysqlbinmysqld-nt.exe (file missing)

O23 – Service: NVIDIA Display Driver Service (NVSvc) – NVIDIA Corporation – C:WINDOWSsystem32nvsvc32.exe

O23 – Service: Sandra Data Service (SandraDataSrv) – SiSoftware – C:Program FilesSiSoftwareSiSoftware Sandra Professional 2005RpcDataSrv.exe

O23 – Service: Sandra Service (SandraTheSrv) – SiSoftware – C:Program FilesSiSoftwareSiSoftware Sandra Professional 2005RpcSandraSrv.exe

Thanks Alvast.