Blue Screen of Death + 2 andere zaken

kape · 17 april 2012

Dus in het MSN-bestand zitten ook alle gegevens van de 01-lijnen ? Bijkomend vraagje : zit je .txt-bestand nog in je Prullenbak nà verwijderen ?

Nukron · 17 april 2012

Alle gegevens van de 01-lijnen zitten ook in het MSN-bestand ja. En m'n .txt zit nog in m'n prullenbak ja..

kape · 17 april 2012

Vermits beide Hosts-programma's blijkbaar niet werken, moeten we het anders aanpakken. Probeer eerst of je in het .txt-bestand en MSN-bestand alle items uit O1 kan verwijderen en zet het volgende in de plaats 127.0.0.1 Localhost.

Indien gelukt, plaats je het .txt-bestand terug op zijn oude locatie ... en dan maar weer een logje met HijackThis maken.

Nukron · 17 april 2012

Dat: 127.0.0.1 Localhost. is al mijn bovenste regel in beide hosts, alleen dan zonder . en staat hij een 'tab' verder.

Maargoed toch gedaan, mijn bovenste 2 regels zijn nu:

127.0.0.1 localhost

127.0.0.1 Localhost.

Hijackthis:

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 14:44:20, on 17-4-2012

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\acs.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe

C:\WINDOWS\Explorer.EXE

D:\Programma's\logmein\x86\LMIGuardianSvc.exe

D:\Programma's\logmein\x86\RaMaint.exe

D:\Programma's\logmein\x86\LogMeIn.exe

D:\Programma's\logmein\x86\LMIGuardianSvc.exe

C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

C:\WINDOWS\system32\PnkBstrA.exe

C:\WINDOWS\system32\PnkBstrB.exe

C:\Program Files\Trend Micro\RUBotted\TMRUBotted.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\RTHDCPL.EXE

C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

C:\Program Files\Spyware Doctor\pctsTray.exe

C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe

C:\Program Files\Trend Micro\RUBotted\TMRUBottedTray.exe

C:\Program Files\Common Files\MyPoiWorld Shared\MyPoiMonitor\MyPoiMonitor.exe

C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

C:\Program Files\Canon\MyPrinter\BJMyPrt.exe

C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe

C:\Program Files\Yuna Software\Messenger Plus!\PlusService.exe

C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe

D:\Programma's\logmein\x86\LogMeInSystray.exe

D:\Programma's\Itunes\iTunesHelper.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\WINDOWS\system32\ctfmon.exe

D:\Programma's\DAEMON Tools Lite\daemon.exe

D:\Programma's\utorrent\uTorrent.exe

C:\Program Files\Messenger\msmsgs.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

D:\programma's\steam\steam.exe

C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe

C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe

D:\Programma's\logmein\x86\LMIGuardianSvc.exe

C:\Program Files\Logitech\SetPoint\SetPoint.exe

C:\Program Files\NETGEAR\WN111v2\WN111V2.exe

C:\Program Files\Common Files\Logitech\KhalShared\KHALMNPR.EXE

C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe

D:\Programma's\Firefox\firefox.exe

C:\Program Files\Opera\opera.exe

D:\Programma's\Firefox\plugin-container.exe

D:\Programma's\HiJackThis\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Yahoo! Nederland

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo! Nederland

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo!

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

O1 - Hosts: 74.125.45.100 4-open-davinci.com

O1 - Hosts: 74.125.45.100 securitysoftwarepayments.com

O1 - Hosts: 74.125.45.100 privatesecuredpayments.com

O1 - Hosts: 74.125.45.100 secure.privatesecuredpayments.com

O1 - Hosts: 74.125.45.100 getantivirusplusnow.com

O1 - Hosts: 74.125.45.100 secure-plus-payments.com

O1 - Hosts: 74.125.45.100 getantivirusplusnow.com: The Leading Get Anti Virus Plus Now Site on the Net

O1 - Hosts: 74.125.45.100 www.secure-plus-payments.com

O1 - Hosts: 74.125.45.100 getavplusnow.com

O1 - Hosts: 74.125.45.100 securesoftwarebill.com

O1 - Hosts: 74.125.45.100 secure.paysecuresystem.com

O1 - Hosts: 74.125.45.100 paysoftbillsolution.com

O1 - Hosts: 64.86.17.32 google.ae

O1 - Hosts: 64.86.17.32 google.as

O1 - Hosts: 64.86.17.32 google.at

O1 - Hosts: 64.86.17.32 google.az

O1 - Hosts: 64.86.17.32 google.ba

O1 - Hosts: 64.86.17.32 google.be

O1 - Hosts: 64.86.17.32 google.bg

O1 - Hosts: 64.86.17.32 google.bs

O1 - Hosts: 64.86.17.32 google.ca

O1 - Hosts: 64.86.17.32 google.cd

O1 - Hosts: 64.86.17.32 google.com.gh

O1 - Hosts: 64.86.17.32 google.com.hk

O1 - Hosts: 64.86.17.32 google.com.jm

O1 - Hosts: 64.86.17.32 google.com.mx

O1 - Hosts: 64.86.17.32 google.com.my

O1 - Hosts: 64.86.17.32 google.com.na

O1 - Hosts: 64.86.17.32 google.com.nf

O1 - Hosts: 64.86.17.32 google.com.ng

O1 - Hosts: 64.86.17.32 google.ch

O1 - Hosts: 64.86.17.32 google.com.np

O1 - Hosts: 64.86.17.32 google.com.pr

O1 - Hosts: 64.86.17.32 google.com.qa

O1 - Hosts: 64.86.17.32 google.com.sg

O1 - Hosts: 64.86.17.32 google.com.tj

O1 - Hosts: 64.86.17.32 google.com.tw

O1 - Hosts: 64.86.17.32 google.dj

O1 - Hosts: 64.86.17.32 google.de

O1 - Hosts: 64.86.17.32 google.dk

O1 - Hosts: 64.86.17.32 google.dm

O1 - Hosts: 64.86.17.32 google.ee

O1 - Hosts: 64.86.17.32 google.fi

O1 - Hosts: 64.86.17.32 google.fm

O1 - Hosts: 64.86.17.32 google.fr

O1 - Hosts: 64.86.17.32 google.ge

O1 - Hosts: 64.86.17.32 google.gg

O1 - Hosts: 64.86.17.32 google.gm

O1 - Hosts: 64.86.17.32 google.gr

O1 - Hosts: 64.86.17.32 google.ht

O1 - Hosts: 64.86.17.32 google.ie

O1 - Hosts: 64.86.17.32 google.im

O1 - Hosts: 64.86.17.32 google.in

O1 - Hosts: 64.86.17.32 google.it

O1 - Hosts: 64.86.17.32 google.ki

O1 - Hosts: 64.86.17.32 google.la

O1 - Hosts: 64.86.17.32 google.li

O1 - Hosts: 64.86.17.32 google.lv

O1 - Hosts: 64.86.17.32 google.ma

O1 - Hosts: 64.86.17.32 google.ms

O1 - Hosts: 64.86.17.32 google.mu

O1 - Hosts: 64.86.17.32 google.mw

O1 - Hosts: 64.86.17.32 google.nl

O1 - Hosts: 64.86.17.32 google.no

O1 - Hosts: 64.86.17.32 google.nr

O1 - Hosts: 64.86.17.32 google.nu

O1 - Hosts: 64.86.17.32 google.pl

O1 - Hosts: 64.86.17.32 google.pn

O1 - Hosts: 64.86.17.32 google.pt

O1 - Hosts: 64.86.17.32 google.ro

O1 - Hosts: 64.86.17.32 google.ru

O1 - Hosts: 64.86.17.32 google.rw

O1 - Hosts: 64.86.17.32 google.sc

O1 - Hosts: 64.86.17.32 google.se

O1 - Hosts: 64.86.17.32 google.sh

O1 - Hosts: 64.86.17.32 google.si

O1 - Hosts: 64.86.17.32 google.sm

O1 - Hosts: 64.86.17.32 google.sn

O1 - Hosts: 64.86.17.32 google.st

O1 - Hosts: 64.86.17.32 google.tl

O1 - Hosts: 64.86.17.32 google.tm

O1 - Hosts: 64.86.17.32 google.tt

O1 - Hosts: 64.86.17.32 google.us

O1 - Hosts: 64.86.17.32 google.vu

O1 - Hosts: 64.86.17.32 google.ws

O1 - Hosts: 64.86.17.32 google.co.ck

O1 - Hosts: 64.86.17.32 google.co.id

O1 - Hosts: 64.86.17.32 google.co.il

O1 - Hosts: 64.86.17.32 google.co.in

O1 - Hosts: 64.86.17.32 google.co.jp

O1 - Hosts: 64.86.17.32 google.co.kr

O1 - Hosts: 64.86.17.32 google.co.ls

O1 - Hosts: 64.86.17.32 google.co.ma

O1 - Hosts: 64.86.17.32 google.co.nz

O1 - Hosts: 64.86.17.32 google.co.tz

O1 - Hosts: 64.86.17.32 google.co.ug

O1 - Hosts: 64.86.17.32 google.co.uk

O1 - Hosts: 64.86.17.32 google.co.za

O1 - Hosts: 64.86.17.32 google.co.zm

O1 - Hosts: 64.86.17.32 google.com

O1 - Hosts: 64.86.17.32 google.com.af

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [jswtrayutil] "C:\Program Files\NETGEAR\WN111v2\jswtrayutil.exe"

O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"

O4 - HKLM\..\Run: [iSTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"

O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript

O4 - HKLM\..\Run: [TMRUBottedTray] "C:\Program Files\Trend Micro\RUBotted\TMRUBottedTray.exe"

O4 - HKLM\..\Run: [HitmanPro35] "C:\Program Files\Hitman Pro 3.5\HitmanPro35.exe" /scan:boot

O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe

O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin

O4 - HKLM\..\Run: [MyPoi Monitor] "C:\Program Files\Common Files\MyPoiWorld Shared\MyPoiMonitor\MyPoiMonitor.exe"

O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon

O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon

O4 - HKLM\..\Run: [MobileConnect] %programfiles%\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe /silent

O4 - HKLM\..\Run: [PlusService] C:\Program Files\Yuna Software\Messenger Plus!\PlusService.exe

O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice

O4 - HKLM\..\Run: [LogMeIn GUI] "D:\Programma's\logmein\x86\LogMeInSystray.exe"

O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

O4 - HKLM\..\Run: [iTunesHelper] "D:\Programma's\Itunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Programma's\DAEMON Tools Lite\daemon.exe" -autorun

O4 - HKCU\..\Run: [uTorrent] "D:\Programma's\utorrent\uTorrent.exe"

O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

O4 - HKCU\..\Run: [steam] "D:\programma's\steam\steam.exe" -silent

O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent

O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe"

O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Olivier\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Startup: FIFA 09 Registration.lnk = E:\Games\Fifa'09\Support\EAregister.exe

O4 - Startup: Logitech-productregistratie.lnk = C:\Program Files\Common Files\LogiShared\eReg\SetPoint\eReg.exe

O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe

O4 - Global Startup: NETGEAR WN111v2 Smart Wizard.lnk = C:\Program Files\NETGEAR\WN111v2\WN111V2.exe

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200

O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Documents and Settings\Olivier\Application Data\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm

O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

O23 - Service: Atheros Configuration Service (ACS) - Atheros - C:\WINDOWS\system32\acs.exe

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe

O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe

O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: Jumpstart Wifi Protected Setup (jswpsapi) - Atheros Communications, Inc. - C:\Program Files\NETGEAR\WN111v2\jswpsapi.exe

O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - D:\Programma's\logmein\x86\LMIGuardianSvc.exe

O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - D:\Programma's\logmein\x86\RaMaint.exe

O23 - Service: LogMeIn - LogMeIn, Inc. - D:\Programma's\logmein\x86\LogMeIn.exe

O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe

O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe

O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe

O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe

O23 - Service: Trend Micro RUBotted Service (RUBotted) - Trend Micro Inc. - C:\Program Files\Trend Micro\RUBotted\TMRUBotted.exe

O23 - Service: Ad-Aware (SBAMSvc) - Unknown owner - D:\Programma's\Ad-Aware Antivirus\Engine\SBAMSvc.exe (file missing)

O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

O23 - Service: TunngleService - Tunngle.net GmbH - D:\Programma's\Tunngle\TnglCtrl.exe

O23 - Service: Vodafone Mobile Connect Service (VMCService) - Vodafone - C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe

O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

--

End of file - 16673 bytes

Dus volgens mij heeft het niet echt gewerkt :/

kape · 17 april 2012

Dat: 127.0.0.1 Localhost. is al mijn bovenste regel in beide hosts, alleen dan zonder . en staat hij een 'tab' verder.Maargoed toch gedaan, mijn bovenste 2 regels zijn nu:
127.0.0.1 localhost

127.0.0.1 Localhost.

Het puntje achter Localhost was gewoon het puntje van het einde van de zin, dus niet van de tekst die je in de HOSTS moest zetten

Nu de standaard-localhost aanwezig is, mag je die nieuwe (met puntje) verwijderen. Kijk nadat je deze verwijderd hebt, eens opnieuw via kladblok of verwijderen gelukt is. En herhaal dit dan ook voor de andere items eronder, want ook die blijken inderdaad nu manueel nog niet verwijderd te zijn. Voer alles eens uit in "veilige modus", zonder netwerkverbinding. En kijk ook daarna weer via kladblok of die hele trits ongewenste items wél uit de HOSTS verdwenen zijn ?

Nukron · 17 april 2012

Zowel in normale modus als in veilige modus zijn alle O1-lijnen weg uit de 3 host bestanden: .MSN , .NEW en .txt echter, de MVPS en HostsXpert doen het beiden niet.

kape · 17 april 2012

Maak dan eens een nieuw logje met HijackThis.

Nukron · 17 april 2012

Volgens mij doet taakbeheer het in ieder geval weer

HiJack-report gewoon nog steeds hetzelfde volgens mij;

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 21:54:41, on 17-4-2012