Malwarebytes www.malwarebytes.com -Logboekdetails- Scandatum: 07-08-17 Scantijd: 21:24 Logbestand: MB Scanlog.txt Beheerder: Ja -Software-informatie- Versie: 3.1.2.1733 Versie componenten: 1.0.160 Update pakketversie: 1.0.2251 Licentie: Gratis -Systeeminformatie- Besturingssysteem: Windows 8.1 Processor: x64 Bestandssysteem: NTFS Gebruiker: SCHILLEWAERTM\melissa -Scansamenvatting- Scantype: Aangepaste scan Resultaat: Voltooid Objecten gescand: 335817 Dreigingen herkend: 75 Dreigingen in quarantaine: 75 Verstreken tijd: 4 u., 9 min, 51 sec -Scanopties- Geheugen: Ingeschakeld Opstarten: Ingeschakeld Bestandssysteem: Ingeschakeld Archieven: Ingeschakeld Rootkits: Ingeschakeld Heuristiek: Ingeschakeld POP: Ingeschakeld POA: Ingeschakeld -Scandetails- Proces: 0 (Geen kwaadaardige items gedetecteerd) Module: 0 (Geen kwaadaardige items gedetecteerd) Registersleutel: 19 PUP.Optional.IStartSurf.ShrtCln, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, In quarantaine, [11846], [233272],1.0.2251 PUP.Optional.IStartSurf.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, In quarantaine, [11846], [233272],1.0.2251 PUP.Optional.IStartSurf.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472F-A0FF-E1416B8B2E3A}, In quarantaine, [11846], [233272],1.0.2251 PUP.Optional.IStartSurf.ShrtCln, HKU\S-1-5-21-3332202609-3110749998-3773026092-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}, In quarantaine, [11846], [233272],1.0.2251 PUP.Optional.IStartSurf.ShrtCln, HKU\S-1-5-21-3332202609-3110749998-3773026092-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0EBD0F69-14D4-4379-A982-6D91023DA126}, In quarantaine, [11846], [233272],1.0.2251 PUP.Optional.IStartSurf.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In quarantaine, [11846], [233272],1.0.2251 PUP.Optional.IStartSurf.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In quarantaine, [11846], [233272],1.0.2251 PUP.Optional.IStartSurf.ShrtCln, HKU\S-1-5-21-3332202609-3110749998-3773026092-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}, In quarantaine, [11846], [233272],1.0.2251 PUP.Optional.WinZipRegOp, HKU\S-1-5-18\SOFTWARE\NICO MAK COMPUTING\WinZip Registry Optimizer, In quarantaine, [12831], [254404],1.0.2251 PUP.Optional.ProductSetup, HKU\S-1-5-18\SOFTWARE\PRODUCTSETUP, In quarantaine, [15042], [242047],1.0.2251 PUP.Optional.IStartSurf.ShrtCln, HKU\S-1-5-21-3332202609-3110749998-3773026092-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{E733165D-CBCF-4FDA-883E-ADEF965B476C}, In quarantaine, [11846], [233272],1.0.2251 PUP.Optional.IStartSurf.ShrtCln, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{E733165D-CBCF-4FDA-883E-ADEF965B476C}, In quarantaine, [11846], [233272],1.0.2251 PUP.Optional.ProductSetup, HKU\S-1-5-21-3332202609-3110749998-3773026092-1001\SOFTWARE\PRODUCTSETUP, In quarantaine, [15042], [242047],1.0.2251 PUP.Optional.Linkury.ACMB1, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\Lightzap_RASAPI32, In quarantaine, [103], [259725],1.0.2251 PUP.Optional.Linkury.ACMB1, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\TRACING\Lightzap_RASMANCS, In quarantaine, [103], [259725],1.0.2251 PUP.Optional.MiuiTab, HKLM\SOFTWARE\WOW6432NODE\SUPDP, In quarantaine, [9619], [240843],1.0.2251 PUP.Optional.SupTab, HKLM\SOFTWARE\WOW6432NODE\SUPTAB, In quarantaine, [3859], [243702],1.0.2251 PUP.Optional.Vitruvian, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\csfd_vw_1_10_0_20, In quarantaine, [1601], [244588],1.0.2251 PUP.Optional.WindowsMangerProtect, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\WindowsMangerProtect, In quarantaine, [15367], [245008],1.0.2251 Registerwaarde: 15 PUP.Optional.IStartSurf.ShrtCln, HKU\S-1-5-21-3332202609-3110749998-3773026092-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, In quarantaine, [11846], [233272],1.0.2251 PUP.Optional.IStartSurf.ShrtCln, HKU\S-1-5-21-3332202609-3110749998-3773026092-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0EBD0F69-14D4-4379-A982-6D91023DA126}|URL, In quarantaine, [11846], [233272],1.0.2251 PUP.Optional.IStartSurf.ShrtCln, HKU\S-1-5-21-3332202609-3110749998-3773026092-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|DISPLAYNAME, In quarantaine, [11846], [233272],1.0.2251 PUP.Optional.IStartSurf.ShrtCln, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}|URL, In quarantaine, [11846], [233272],1.0.2251 PUP.Optional.IStartSurf.ShrtCln, HKU\S-1-5-21-3332202609-3110749998-3773026092-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|URL, In quarantaine, [11846], [233272],1.0.2251 PUP.Optional.ProductSetup, HKU\S-1-5-18\SOFTWARE\PRODUCTSETUP|TB, In quarantaine, [15042], [242047],1.0.2251 PUP.Optional.IStartSurf.ShrtCln, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{E733165D-CBCF-4FDA-883E-ADEF965B476C}|URL, In quarantaine, [11846], [233272],1.0.2251 PUP.Optional.ProductSetup, HKU\S-1-5-21-3332202609-3110749998-3773026092-1001\SOFTWARE\PRODUCTSETUP|TB, In quarantaine, [15042], [242047],1.0.2251 PUP.Optional.IStartSurf.ShrtCln, HKU\S-1-5-21-3332202609-3110749998-3773026092-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{33BB0A4E-99AF-4226-BDF6-49120163DE86}|TOPRESULTURL, In quarantaine, [11846], [233272],1.0.2251 PUP.Optional.IStartSurf.ShrtCln, HKU\S-1-5-21-3332202609-3110749998-3773026092-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{E733165D-CBCF-4FDA-883E-ADEF965B476C}|URL, In quarantaine, [11846], [233272],1.0.2251 PUP.Optional.Linkury.ACMB1, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS|APPINIT_DLLS, In quarantaine, [103], [-1],0.0.0 PUP.Optional.Linkury.ACMB1, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS|APPINIT_DLLS, In quarantaine, [103], [-1],0.0.0 PUP.Optional.MiuiTab, HKLM\SOFTWARE\WOW6432NODE\SUPDP|DIR, In quarantaine, [9619], [240843],1.0.2251 PUP.Optional.SupTab, HKLM\SOFTWARE\WOW6432NODE\SUPTAB|PTID, In quarantaine, [3859], [243702],1.0.2251 PUP.Optional.Vitruvian, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\csfd_vw_1_10_0_20|IMAGEPATH, In quarantaine, [1601], [244588],1.0.2251 Registerdata: 11 PUP.Optional.IStartSurf.ShrtCln, HKU\S-1-5-21-3332202609-3110749998-3773026092-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|DEFAULT_PAGE_URL, Vervangen, [11846], [291146],1.0.2251 PUP.Optional.IStartSurf.ShrtCln, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|DEFAULT_PAGE_URL, Vervangen, [11846], [291146],1.0.2251 PUP.Optional.IStartSurf.ShrtCln, HKU\S-1-5-18\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|FIRST HOME PAGE, Vervangen, [11846], [291146],1.0.2251 PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DEFAULTSCOPE, Vervangen, [14366], [292819],1.0.2251 PUP.Optional.IStartSurf.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|DEFAULT_SEARCH_URL, Vervangen, [11846], [291148],1.0.2251 PUP.Optional.IStartSurf.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|DEFAULT_PAGE_URL, Vervangen, [11846], [291148],1.0.2251 PUP.Optional.IStartSurf.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|SEARCH PAGE, Vervangen, [11846], [291148],1.0.2251 PUP.Optional.IStartSurf.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|DEFAULT_SEARCH_URL, Vervangen, [11846], [291148],1.0.2251 PUP.Optional.IStartSurf.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|DEFAULT_PAGE_URL, Vervangen, [11846], [291148],1.0.2251 PUP.Optional.IStartSurf.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|SEARCH PAGE, Vervangen, [11846], [291148],1.0.2251 PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DEFAULTSCOPE, Vervangen, [14366], [292819],1.0.2251 Gegevensstroom: 0 (Geen kwaadaardige items gedetecteerd) Map: 5 PUP.Optional.ProtectWindowsManager, C:\ProgramData\eWinManProe\update, In quarantaine, [12889], [180703],1.0.2251 PUP.Optional.ProtectWindowsManager, C:\ProgramData\eWinManProe, In quarantaine, [12889], [180703],1.0.2251 PUP.Optional.IHProtectUpDate, C:\ProgramData\IHProtectUpDate\update, In quarantaine, [12353], [177733],1.0.2251 PUP.Optional.IHProtectUpDate, C:\ProgramData\IHProtectUpDate, In quarantaine, [12353], [177733],1.0.2251 PUP.Optional.Yontoo, C:\Users\melissa\AppData\Local\Temp\Discovery App, In quarantaine, [53], [181196],1.0.2251 Bestand: 25 PUP.Optional.WebCake, C:\ADWCLEANER\QUARANTINE\C\USERS\MELISSA\APPDATA\ROAMING\MOVDAP\WEBCAKEDESKTOP.EXE.VIR, Verwijder-bij-herstart, [3882], [8798],1.0.2251 PUP.Optional.Yontoo, C:\ADWCLEANER\QUARANTINE\C\USERS\MELISSA\APPDATA\ROAMING\MOVDAP\DAT\MAINTAIN.DAT.VIR, Verwijder-bij-herstart, [53], [117231],1.0.2251 PUP.Optional.Yontoo, C:\ADWCLEANER\QUARANTINE\C\USERS\MELISSA\APPDATA\ROAMING\MOVDAP\DAT\DORA.DAT.VIR, Verwijder-bij-herstart, [53], [107984],1.0.2251 PUP.Optional.DeltaTB, C:\ADWCLEANER\QUARANTINE\C\USERS\MELISSA\APPDATA\ROAMING\OPENCANDY\2B885636B68A4E4290D29407DB89EE31\DELTATB.EXE.VIR, In quarantaine, [3345], [2886],1.0.2251 PUP.Optional.ProtectWindowsManager, C:\ProgramData\eWinManProe\updateconf, In quarantaine, [12889], [180703],1.0.2251 PUP.Optional.IHProtectUpDate, C:\ProgramData\IHProtectUpDate\update\conf, In quarantaine, [12353], [177733],1.0.2251 PUP.Optional.Yontoo, C:\Users\melissa\AppData\Local\Temp\Discovery App\7za.exe, In quarantaine, [53], [181196],1.0.2251 PUP.Optional.Yontoo, C:\Users\melissa\AppData\Local\Temp\Discovery App\Setup.exe, In quarantaine, [53], [181196],1.0.2251 PUP.Optional.Yontoo, C:\Users\melissa\AppData\Local\Temp\Discovery App\temp.zip, In quarantaine, [53], [181196],1.0.2251 PUP.Optional.Vitruvian, C:\USERS\MELISSA\APPDATA\LOCAL\TEMP\VITRUVIAN-INSTALLER-PROCESSES-V0002, In quarantaine, [1601], [244587],1.0.2251 PUP.Optional.Vitruvian, C:\USERS\MELISSA\APPDATA\LOCAL\TEMP\VITRUVIAN-INSTALLER-SOFTWAREREGKEYS-V0002, In quarantaine, [1601], [244587],1.0.2251 PUP.Optional.Vitruvian, C:\USERS\MELISSA\APPDATA\LOCAL\TEMP\VITRUVIAN-INSTALLER-UNINSTALL-V0002, In quarantaine, [1601], [244587],1.0.2251 PUP.Optional.Vitruvian, C:\USERS\MELISSA\APPDATA\LOCAL\TEMP\VITRUVIAN-INSTALLER-SCHEDULEDTASKS-V0001, In quarantaine, [1601], [244587],1.0.2251 PUP.Optional.Linkury, C:\USERS\MELISSA\APPDATA\LOCAL\TEMP\IS1103351991\144016A5_STP.EXE, In quarantaine, [334], [112406],1.0.2251 PUP.Optional.Vitruvian, C:\USERS\MELISSA\APPDATA\LOCAL\TEMP\VITRUVIAN-INSTALLER-INSTALL-V0003, In quarantaine, [1601], [244587],1.0.2251 PUP.Optional.Linkury, C:\USERS\MELISSA\APPDATA\LOCAL\TEMP\RARSFX1\MOSES.EXE, In quarantaine, [334], [112406],1.0.2251 PUP.Optional.Yontoo, C:\USERS\MELISSA\APPDATA\LOCAL\TEMP\IS1103351991\75F48FC6_STP.EXE, In quarantaine, [53], [88188],1.0.2251 PUP.Optional.SpeedingUpMyPC, C:\USERS\MELISSA\APPDATA\LOCAL\TEMP\IS1103351991\2B106F13_STP\PCSPEEDMAXIMIZER_AQML_AFD_PPI_BELSUIS_4P.EXE, In quarantaine, [942], [331684],1.0.2251 PUP.Optional.CleverSearch, C:\USERS\MELISSA\APPDATA\LOCAL\TEMP\IS361488532\021B5D79_STP\CLEVERSEARCH-SETUP-1.10.0.20.EXE, In quarantaine, [7277], [76381],1.0.2251 PUP.Optional.OpenCandy, C:\USERS\MELISSA\APPDATA\ROAMING\UTORRENT\UPDATES\3.4.3_40298.EXE, In quarantaine, [540], [317290],1.0.2251 PUP.Optional.InstallCore, C:\USERS\MELISSA\APPDATA\ROAMING\FLVTOCONVERTER\FLVTOCONVERTERSETUPV0.7.2.EXE, In quarantaine, [3], [79846],1.0.2251 PUP.Optional.InstallCore, C:\USERS\MELISSA\APPDATA\ROAMING\FLVTOCONVERTER\FLVTOCONVERTERSETUPV0.7.3.EXE, In quarantaine, [3], [79846],1.0.2251 PUP.Optional.WinZipRegistryOptimizer, C:\WINDOWS\SYSTEM32\ROBOOT64.EXE, In quarantaine, [729], [335595],1.0.2251 PUP.Optional.WinZipRegistryOptimizer, C:\WINDOWS\TASKS\REGISTRY OPTIMIZER_UPDATES.JOB, In quarantaine, [729], [356973],1.0.2251 PUP.Optional.WinZipRegistryOptimizer, C:\WINDOWS\TASKS\REGISTRY OPTIMIZER_DEFAULT.JOB, In quarantaine, [729], [356973],1.0.2251 Fysieke sector: 0 (Geen kwaadaardige items gedetecteerd) (end)