meftah123
02-10-2008, 21:54
Hallo, Ik heb een irritante worm/virus/malware op mijn computer. Ik heb een scan gedaan met HIJACK THIS. Maar ik weet nu niet wat er mis is. Ik kan dat virus wel onderscheppen met Malwarebytes, maar dan keert het virus terug nadat ik de pc opnieuw heb gestart? Ik denk dat het iets met die SVCHOST te maken heeft, kan dat? Graag hulp AUB? Dit is de Logfile: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 21:49:39, on 2-10-2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss***** C:\WINDOWS\system32\winlogon***** C:\WINDOWS\system32\services***** C:\WINDOWS\system32\lsass***** C:\WINDOWS\system32\svchost***** C:\WINDOWS\System32\svchost***** C:\WINDOWS\system32\LEXBCES***** C:\WINDOWS\system32\spoolsv***** c:\APPS\Powercinema\Kernel\TV\CLCapSvc***** C:\Program Files\ESET\ESET Smart Security\ekrn***** c:\APPS\HIDSERVICE\HIDSERVICE***** C:\Program Files\SiteAdvisor\6261\SAService***** C:\WINDOWS\system32\svchost***** C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr***** c:\APPS\Powercinema\Kernel\TV\CLSched***** C:\Program Files\Windows Live\Messenger\usnsvc***** C:\WINDOWS\Explorer***** C:\Program Files\Windows Live\Messenger\msnmsgr***** C:\Program Files\Internet Explorer\iexplore***** C:\Program Files\Internet Explorer\iexplore***** C:\Program Files\Internet Explorer\Iexplore***** C:\Program Files\Trend Micro\HijackThis\HijackThis***** R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl/ O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask*****" -atboottime O4 - HKCU\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask*****" -atboottime O4 - Global Startup: PalTalk.lnk = C:\Program Files\Paltalk Messenger\paltalk***** O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc***** O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched***** O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv***** O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn***** O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE***** O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES***** O23 - Service: SiteAdvisor-service (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6261\SAService***** O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr***** -- End of file - 2472 bytes