geertvanbeek

Malwarebytes Anti-Malware 1.65.1.1000 www.malwarebytes.org Database version: v2012.11.11.02 Windows XP Service Pack 3 x86 NTFS Internet Explorer 8.0.6001.18702 Geert :: VAN-BEEK [administrator] 11/11/2012 10:52:22 AM mbam-log-2012-11-11 (10-52-22).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 303176 Time elapsed: 12 minute(s), 23 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 2 C:\Program Files\BrowserCompanion\jsloader.dll (PUP.Blabbers) -> Delete on reboot. C:\Program Files\BrowserCompanion\updatebhoWin32.dll (PUP.Blabbers) -> Delete on reboot. Registry Keys Detected: 13 HKCR\CLSID\{5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} (PUP.Blabbers) -> Quarantined and deleted successfully. HKCR\TypeLib\{830B56CB-FD22-44AA-9887-7898F4F4158D} (PUP.Blabbers) -> Quarantined and deleted successfully. HKCR\tdataprotocol.CTData.1 (PUP.Blabbers) -> Quarantined and deleted successfully. HKCR\tdataprotocol.CTData (PUP.Blabbers) -> Quarantined and deleted successfully. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{00CBB66B-1D3B-46D3-9577-323A336ACB50} (PUP.Blabbers) -> Quarantined and deleted successfully. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00CBB66B-1D3B-46D3-9577-323A336ACB50} (PUP.Blabbers) -> Quarantined and deleted successfully. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{963B125B-8B21-49A2-A3A8-E37092276531} (PUP.Blabbers) -> Quarantined and deleted successfully. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531} (PUP.Blabbers) -> Quarantined and deleted successfully. HKCR\TypeLib\{8830DDF0-3042-404D-A62C-384A85E34833} (PUP.Blabbers) -> Quarantined and deleted successfully. HKCR\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767} (PUP.Blabbers) -> Quarantined and deleted successfully. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BrowserCompanion (PUP.Blabbers) -> Quarantined and deleted successfully. HKCR\TypeLib\{955B782E-CDC8-4CEE-B6F6-AD7D541A8D8A} (PUP.Blabbers) -> Quarantined and deleted successfully. HKCR\Interface\{9F0C17EB-EF2C-4278-9136-2D547656BC03} (PUP.Blabbers) -> Quarantined and deleted successfully. Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 4 C:\Program Files\BrowserCompanion (PUP.Blabbers) -> Delete on reboot. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache (PUP.Blabbers) -> Quarantined and deleted successfully. Files Detected: 77 C:\Program Files\BrowserCompanion\tdataprotocol.dll (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Program Files\BrowserCompanion\blabbers-ff-full.xpi (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Program Files\BrowserCompanion\blabbers-ch.crx (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Program Files\BrowserCompanion\jsloader.dll (PUP.Blabbers) -> Delete on reboot. C:\Program Files\BrowserCompanion\logo.ico (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Program Files\BrowserCompanion\terms.lnk.url (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Program Files\BrowserCompanion\toolbar.dll (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Program Files\BrowserCompanion\uninstall.exe (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Program Files\BrowserCompanion\updatebhoWin32.dll (PUP.Blabbers) -> Delete on reboot. C:\Program Files\BrowserCompanion\updatebhoWin32.dll_1 (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Program Files\BrowserCompanion\updater.ini (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Program Files\BrowserCompanion\widgetserv.exe (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\BCHelper.exe (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\fix2.js (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\fix3.js (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\fix4.js (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\icon.png (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\jquery4toolbar.js (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\lock.js (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\witapi.js (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\witmain.js (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\wittoolbar.js (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\witwidgetapi.js (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\0324adea3b6ec02af09ea4ae9424591b (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\0324adea3b6ec02af09ea4ae9424591b_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\150b7566b7871fb6e0ef44753d0c6dc3_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\21fe9188d6a27a1b22819cec45b99ec5 (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\21fe9188d6a27a1b22819cec45b99ec5_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\231785d024a11371bfc94ffff0a4b741_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\292124057d00cb0fa73db6b90d079658 (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\292124057d00cb0fa73db6b90d079658_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\2e0dda2d2281da01c330dc3e12b45a9d_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\38207d71d9cc86fb6daebc118ce6286c_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\4713e82e27fb9719d76577d1585acb00_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\477f5134e73f0099219c494cb23f6657_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\b3688636ecfdc491aea728939c15f43e_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\b5080fd498f4580cd85cbf8ff41766c5_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\b9e8f0dd61fe894ea8803ea9bd7fa95c (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\b9e8f0dd61fe894ea8803ea9bd7fa95c_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\cefaca9bd43dde3cd28bfd0fddac41d4 (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\cefaca9bd43dde3cd28bfd0fddac41d4_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\d5747e13728fd7df356bc13545143ea6_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\d6418e300158fb16d8396d122d4b423b_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\dab4675adfcee5857b92891f74e26f03 (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\dab4675adfcee5857b92891f74e26f03_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\f254e56f8c066ef3bf0783e046dc7ecd (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\f254e56f8c066ef3bf0783e046dc7ecd_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\fa74672918974682c82b8d91dfbe0d6b (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\fa74672918974682c82b8d91dfbe0d6b_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\ff4d692d5e7cccbc4b3e9ef4062b1c6f (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\ff4d692d5e7cccbc4b3e9ef4062b1c6f_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\e797b807b4545245d85048f0398296a9_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\e919434ec29526b28593c426e4264271 (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\e919434ec29526b28593c426e4264271_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\e9e14a99847657c53e1cc29cc55ab7af_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\ece5f266221b5245c6e3d7e27ddee963 (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\ece5f266221b5245c6e3d7e27ddee963_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\eeab68dd74d26245087956fb3caf6937_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\f03527c67e08602d2e4c18ae7867300d (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\4d3d10bd28ff623813254a49b26be41f_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\6496a43cad388e4b78f1ecce8fcffc27_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\6d091eb0bf44b762a039ee138e6b165c_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\6f8b3140943075f95ae0c74c1a13b752_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\8fd0e5f2c42f56c41599ca329ef70350_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\924d47e6f7775d82becea30059272aae (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\924d47e6f7775d82becea30059272aae_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\9c2afdb0a6d9bf59b300144154b58c67_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\9c86b973456448ae01f1cbc0d6cf607a_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\a227f4517bd7937e697182f46906a6b4_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\a6d4447986c4e442d92ed00b149c14f3_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\a95092a9bd34f5cfc98f78ca74502f36_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\aa36bceec49c832079e270icmc219ats (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\aeee69848edcb080584c8630e879efda (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\aeee69848edcb080584c8630e879efda_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\4d3d10bd28ff623813254a49b26be41f (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\e797b807b4545245d85048f0398296a9 (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\f03527c67e08602d2e4c18ae7867300d_expire (PUP.Blabbers) -> Quarantined and deleted successfully. (end) - - - Updated - - - Het probleem is verholpen en hieronder de log van Hijack nog eens. Heel erg bedankt en succes met jullie perfecte site. Malwarebytes Anti-Malware 1.65.1.1000 www.malwarebytes.org Database version: v2012.11.11.02 Windows XP Service Pack 3 x86 NTFS Internet Explorer 8.0.6001.18702 Geert :: VAN-BEEK [administrator] 11/11/2012 10:52:22 AM mbam-log-2012-11-11 (10-52-22).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 303176 Time elapsed: 12 minute(s), 23 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 2 C:\Program Files\BrowserCompanion\jsloader.dll (PUP.Blabbers) -> Delete on reboot. C:\Program Files\BrowserCompanion\updatebhoWin32.dll (PUP.Blabbers) -> Delete on reboot. Registry Keys Detected: 13 HKCR\CLSID\{5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} (PUP.Blabbers) -> Quarantined and deleted successfully. HKCR\TypeLib\{830B56CB-FD22-44AA-9887-7898F4F4158D} (PUP.Blabbers) -> Quarantined and deleted successfully. HKCR\tdataprotocol.CTData.1 (PUP.Blabbers) -> Quarantined and deleted successfully. HKCR\tdataprotocol.CTData (PUP.Blabbers) -> Quarantined and deleted successfully. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{00CBB66B-1D3B-46D3-9577-323A336ACB50} (PUP.Blabbers) -> Quarantined and deleted successfully. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00CBB66B-1D3B-46D3-9577-323A336ACB50} (PUP.Blabbers) -> Quarantined and deleted successfully. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{963B125B-8B21-49A2-A3A8-E37092276531} (PUP.Blabbers) -> Quarantined and deleted successfully. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531} (PUP.Blabbers) -> Quarantined and deleted successfully. HKCR\TypeLib\{8830DDF0-3042-404D-A62C-384A85E34833} (PUP.Blabbers) -> Quarantined and deleted successfully. HKCR\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767} (PUP.Blabbers) -> Quarantined and deleted successfully. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BrowserCompanion (PUP.Blabbers) -> Quarantined and deleted successfully. HKCR\TypeLib\{955B782E-CDC8-4CEE-B6F6-AD7D541A8D8A} (PUP.Blabbers) -> Quarantined and deleted successfully. HKCR\Interface\{9F0C17EB-EF2C-4278-9136-2D547656BC03} (PUP.Blabbers) -> Quarantined and deleted successfully. Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 4 C:\Program Files\BrowserCompanion (PUP.Blabbers) -> Delete on reboot. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache (PUP.Blabbers) -> Quarantined and deleted successfully. Files Detected: 77 C:\Program Files\BrowserCompanion\tdataprotocol.dll (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Program Files\BrowserCompanion\blabbers-ff-full.xpi (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Program Files\BrowserCompanion\blabbers-ch.crx (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Program Files\BrowserCompanion\jsloader.dll (PUP.Blabbers) -> Delete on reboot. C:\Program Files\BrowserCompanion\logo.ico (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Program Files\BrowserCompanion\terms.lnk.url (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Program Files\BrowserCompanion\toolbar.dll (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Program Files\BrowserCompanion\uninstall.exe (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Program Files\BrowserCompanion\updatebhoWin32.dll (PUP.Blabbers) -> Delete on reboot. C:\Program Files\BrowserCompanion\updatebhoWin32.dll_1 (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Program Files\BrowserCompanion\updater.ini (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Program Files\BrowserCompanion\widgetserv.exe (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\BCHelper.exe (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\fix2.js (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\fix3.js (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\fix4.js (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\icon.png (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\jquery4toolbar.js (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\lock.js (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\witapi.js (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\witmain.js (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\wittoolbar.js (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\witwidgetapi.js (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\0324adea3b6ec02af09ea4ae9424591b (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\0324adea3b6ec02af09ea4ae9424591b_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\150b7566b7871fb6e0ef44753d0c6dc3_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\21fe9188d6a27a1b22819cec45b99ec5 (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\21fe9188d6a27a1b22819cec45b99ec5_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\231785d024a11371bfc94ffff0a4b741_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\292124057d00cb0fa73db6b90d079658 (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\292124057d00cb0fa73db6b90d079658_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\2e0dda2d2281da01c330dc3e12b45a9d_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\38207d71d9cc86fb6daebc118ce6286c_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\4713e82e27fb9719d76577d1585acb00_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\477f5134e73f0099219c494cb23f6657_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\b3688636ecfdc491aea728939c15f43e_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\b5080fd498f4580cd85cbf8ff41766c5_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\b9e8f0dd61fe894ea8803ea9bd7fa95c (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\b9e8f0dd61fe894ea8803ea9bd7fa95c_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\cefaca9bd43dde3cd28bfd0fddac41d4 (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\cefaca9bd43dde3cd28bfd0fddac41d4_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\d5747e13728fd7df356bc13545143ea6_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\d6418e300158fb16d8396d122d4b423b_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\dab4675adfcee5857b92891f74e26f03 (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\dab4675adfcee5857b92891f74e26f03_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\f254e56f8c066ef3bf0783e046dc7ecd (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\f254e56f8c066ef3bf0783e046dc7ecd_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\fa74672918974682c82b8d91dfbe0d6b (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\fa74672918974682c82b8d91dfbe0d6b_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\ff4d692d5e7cccbc4b3e9ef4062b1c6f (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\ff4d692d5e7cccbc4b3e9ef4062b1c6f_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\e797b807b4545245d85048f0398296a9_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\e919434ec29526b28593c426e4264271 (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\e919434ec29526b28593c426e4264271_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\e9e14a99847657c53e1cc29cc55ab7af_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\ece5f266221b5245c6e3d7e27ddee963 (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\ece5f266221b5245c6e3d7e27ddee963_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\eeab68dd74d26245087956fb3caf6937_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\f03527c67e08602d2e4c18ae7867300d (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\4d3d10bd28ff623813254a49b26be41f_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\6496a43cad388e4b78f1ecce8fcffc27_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\6d091eb0bf44b762a039ee138e6b165c_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\6f8b3140943075f95ae0c74c1a13b752_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\8fd0e5f2c42f56c41599ca329ef70350_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\924d47e6f7775d82becea30059272aae (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\924d47e6f7775d82becea30059272aae_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\9c2afdb0a6d9bf59b300144154b58c67_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\9c86b973456448ae01f1cbc0d6cf607a_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\a227f4517bd7937e697182f46906a6b4_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\a6d4447986c4e442d92ed00b149c14f3_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\a95092a9bd34f5cfc98f78ca74502f36_NL (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\aa36bceec49c832079e270icmc219ats (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\aeee69848edcb080584c8630e879efda (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\aeee69848edcb080584c8630e879efda_expire (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\4d3d10bd28ff623813254a49b26be41f (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\e797b807b4545245d85048f0398296a9 (PUP.Blabbers) -> Quarantined and deleted successfully. C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\cache\f03527c67e08602d2e4c18ae7867300d_expire (PUP.Blabbers) -> Quarantined and deleted successfully. (end)

Hier het logje van Hijackthis. Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 10:10:51 PM, on 11/10/2012 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\ESET\ESET Smart Security\ekrn.exe C:\WINDOWS\system32\inetsrv\inetinfo.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\umonit.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\ESET\ESET Smart Security\egui.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\msiexec.exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer, optimized for Bing and MSN O2 - BHO: script helper for ie - {00cbb66b-1d3b-46d3-9577-323a336acb50} - C:\Program Files\BrowserCompanion\jsloader.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Update Timer - {963B125B-8B21-49A2-A3A8-E37092276531} - C:\Program Files\BrowserCompanion\updatebhoWin32.dll O2 - BHO: Wincore Mediabar - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll (file missing) O3 - Toolbar: Wincore Mediabar - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll (file missing) O4 - HKLM\..\Run: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode O4 - HKLM\..\Run: [uMonit] C:\WINDOWS\System32\umonit.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [iSUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler O4 - HKCU\..\Run: [Easy Driver Pro] C:\Program Files\DRIVERS VOOR AUDIO\Easy Driver Pro\DPLauncher.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-21-436374069-179605362-839522115-1004\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Bettina') O4 - Startup: Mediacontrole Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe O4 - Startup: tcbhn.lnk = C:\Documents and Settings\Geert\AppData\LocalLow\bbrs_002.tb\content\BCHelper.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} (JuniperSetupClientControl Class) - https://nomad.cegelec.com/dana-cached/sc/JuniperSetupClient.cab O18 - Protocol: base64 - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files\BrowserCompanion\tdataprotocol.dll O18 - Protocol: chrome - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files\BrowserCompanion\tdataprotocol.dll O18 - Protocol: prox - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files\BrowserCompanion\tdataprotocol.dll O20 - AppInit_DLLs: O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe -- End of file - 6407 bytes