Malwarebytes www.malwarebytes.com -Logboekdetails- Scandatum: 21-11-18 Scantijd: 11:10 Logbestand: a534475a-ed75-11e8-9173-c025e91f1809.json -Software-informatie- Versie: 3.6.1.2711 Versie componenten: 1.0.482 Update pakketversie: 1.0.7949 Licentie: Proef -Systeeminformatie- Besturingssysteem: Windows 10 (Build 17134.407) Processor: x64 Bestandssysteem: NTFS Gebruiker: henk-quad\henk -Scansamenvatting- Scantype: Bedreigingsscan Scan geactiveerd door: Handmatig Resultaat: Voltooid Objecten gescand: 372337 Dreigingen herkend: 27 Dreigingen in quarantaine: 27 Verstreken tijd: 11 min, 17 sec -Scanopties- Geheugen: Ingeschakeld Opstarten: Ingeschakeld Bestandssysteem: Ingeschakeld Archieven: Ingeschakeld Rootkits: Uitgeschakeld Heuristiek: Ingeschakeld POP: Detectie POA: Detectie -Scandetails- Proces: 0 (Geen kwaadaardige items gedetecteerd) Module: 0 (Geen kwaadaardige items gedetecteerd) Registersleutel: 22 PUP.Optional.InstallCore, HKU\S-1-5-21-1716136967-1173365762-3251464594-1000\SOFTWARE\CSASTATS\ic, In quarantaine, [407], [586068],1.0.7949 PUP.Optional.DealPly, HKU\S-1-5-21-1716136967-1173365762-3251464594-1000\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\gaiilaahiahdejapggenmdmafpmbipje, In quarantaine, [64], [237621],1.0.7949 PUP.Optional.RegCleanPro, HKU\S-1-5-21-1716136967-1173365762-3251464594-1000\SOFTWARE\REG\Clean, In quarantaine, [1687], [347493],1.0.7949 PUP.Optional.StartGamePage, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\WOT W1, In quarantaine, [6063], [243514],1.0.7949 PUP.Optional.StartGamePage, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\WOT W2, In quarantaine, [6063], [243514],1.0.7949 PUP.Optional.StartGamePage, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\WOT WW1, In quarantaine, [6063], [243515],1.0.7949 PUP.Optional.StartGamePage, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\WOT WW2, In quarantaine, [6063], [243515],1.0.7949 PUP.Optional.SettingsManager, HKLM\SOFTWARE\WOW6432NODE\SmdmF, In quarantaine, [1528], [242950],1.0.7949 PUP.Optional.ASK.Generic, HKU\S-1-5-18\SOFTWARE\AskToolbar, In quarantaine, [1984], [549242],1.0.7949 PUP.Optional.CleanMyPC, HKLM\SOFTWARE\WOW6432NODE\REG\Clean, In quarantaine, [3225], [348488],1.0.7949 PUP.Optional.MultiPlug, HKLM\SOFTWARE\CLASSES\INTERFACE\{7041156A-0D2B-4DCD-A8EE-D0608BFCB2D0}, In quarantaine, [67], [169264],1.0.7949 PUP.Optional.MultiPlug, HKLM\SOFTWARE\CLASSES\INTERFACE\{9B41579A-1996-42F9-8F84-7B7786818CEF}, In quarantaine, [67], [169264],1.0.7949 PUP.Optional.MultiPlug, HKLM\SOFTWARE\CLASSES\INTERFACE\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}, In quarantaine, [67], [169264],1.0.7949 PUP.Optional.MultiPlug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{7041156A-0D2B-4DCD-A8EE-D0608BFCB2D0}, In quarantaine, [67], [169264],1.0.7949 PUP.Optional.MultiPlug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{9B41579A-1996-42F9-8F84-7B7786818CEF}, In quarantaine, [67], [169264],1.0.7949 PUP.Optional.MultiPlug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}, In quarantaine, [67], [169264],1.0.7949 PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{7041156A-0D2B-4DCD-A8EE-D0608BFCB2D0}, In quarantaine, [67], [169264],1.0.7949 PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{9B41579A-1996-42F9-8F84-7B7786818CEF}, In quarantaine, [67], [169264],1.0.7949 PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}, In quarantaine, [67], [169264],1.0.7949 PUP.Optional.MultiPlug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{E2343056-CC08-46AC-B898-BFC7ACF4E755}, In quarantaine, [67], [169264],1.0.7949 PUP.Optional.MultiPlug, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{E2343056-CC08-46AC-B898-BFC7ACF4E755}, In quarantaine, [67], [169264],1.0.7949 PUP.Optional.MultiPlug, HKLM\SOFTWARE\CLASSES\TYPELIB\{E2343056-CC08-46AC-B898-BFC7ACF4E755}, In quarantaine, [67], [169264],1.0.7949 Registerwaarde: 1 PUP.Optional.Astromenda, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY|APPPATH, In quarantaine, [267], [235613],1.0.7949 Registerdata: 0 (Geen kwaadaardige items gedetecteerd) Gegevensstroom: 0 (Geen kwaadaardige items gedetecteerd) Map: 0 (Geen kwaadaardige items gedetecteerd) Bestand: 4 PUP.Optional.AdvancedSystemCare, C:\WINDOWS\SYSTEM32\REGISTRYDEFRAGBOOTTIME.EXE, In quarantaine, [3803], [396386],1.0.7949 PUP.Optional.ScanGuard, C:\USERS\HENK\DOWNLOADS\SCANGUARD_SETUP.EXE, In quarantaine, [4570], [503748],1.0.7949 PUP.Optional.TotalAV, C:\USERS\HENK\DOWNLOADS\TOTALAV_SETUP.EXE, In quarantaine, [4588], [503750],1.0.7949 PUP.Optional.ASK, C:\WINDOWS\INSTALLER\1F4E2A.MSI, In quarantaine, [2], [113867],1.0.7949 Fysieke sector: 0 (Geen kwaadaardige items gedetecteerd) WMI: 0 (Geen kwaadaardige items gedetecteerd) (end)