Destroyez

Ik ga het zo snel mogelijk proberen updaten. Bedankt voor alle hulp !!!

Hieronder vindt u het logje terug van Zoek.exe MvG Zoek.exe v5.0.0.0 Updated 13-November-2014 Tool run by Maxim on do 13/11/2014 at 20:48:24,92. Microsoft Windows 7 Home Premium 6.1.7600 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Vrij\Desktop\zoek.exe [scan all users] [Quick Scan] [Auto Clean] ==== System Restore Info ====================== 13/11/2014 20:50:16 Zoek.exe System Restore Point Created Succesfully. ==== Empty Folders Check ====================== C:\Users\Maxim\AppData\Roaming\Malwarebytes deleted successfully C:\Users\Maxim\AppData\Local\Adobe deleted successfully C:\Users\Maxim\AppData\Local\SwvUpdater deleted successfully C:\Users\Maxim\AppData\Local\VirtualStore deleted successfully ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== HKEY_USERS\S-1-5-21-2826479152-1464123832-2615865384-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{2D8D9ACC-F6D7-4362-8876-A275CA929591} deleted successfully ==== Deleting Services ====================== ==== Deleting Files \ Folders ====================== C:\PROGRA~3\Package Cache deleted C:\Windows\wininit.ini deleted C:\Windows\tasks\AmiUpdXp.job deleted C:\Windows\SysNative\config\systemprofile\Searches deleted ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== 2014-11-13 13:48:14 !HASH: COULD NOT OPEN FILE !!!!! 371243 ---ha-w- C:\Windows\MEMORY.DMP ====== C:\Users\Maxim\AppData\Local\Temp ==== 2014-11-11 18:46:30 8432EC1EF2368E776714527785327183 1392216 ----a-w- C:\Users\Vrij\AppData\Local\Temp\utt3742.tmp.exe 2014-11-08 08:47:13 5C73E64374D9BA37AC5569D1F7DE5C9B 665682 ----a-w- C:\Users\Maxim\AppData\Local\Temp\sqlite3.dll ====== Java Cache ===== 2014-11-02 18:09:30 FA4513EAD4867F7DF66822FCA1AFCDE3 19521 ----a-w- C:\Users\Vrij\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\2ea66e94-44a9601c 2014-11-02 18:10:09 C6B49E52D94D3C9046B23613225393E4 306 ----a-w- C:\Users\Vrij\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28\752f415c-5537634c ====== C:\Windows\SysWOW64 ===== ====== C:\Windows\SysWOW64\drivers ===== ====== C:\Windows\Sysnative ===== 2014-11-12 06:17:40 68D5709A11BAB03CBEC3CFF3BAD4BD23 304640 ----a-w- C:\Windows\Sysnative\generaltel.dll 2014-11-12 06:17:40 30549AFEE9048DC9ECC8C72D098E5DC0 228864 ----a-w- C:\Windows\Sysnative\aepdu.dll 2014-11-12 06:17:39 B07ABD69AB5548A3C05EA9967A3F7124 424448 ----a-w- C:\Windows\Sysnative\aeinv.dll ====== C:\Windows\Sysnative\drivers ===== 2014-11-11 16:46:16 26C43960C99EE861A5D0EDC4DCF3B1C3 129752 ----a-w- C:\Windows\Sysnative\drivers\MBAMSwissArmy.sys 2014-11-11 16:45:47 D3311B31C470E7681B14D9B014CBF9ED 93400 ----a-w- C:\Windows\Sysnative\drivers\mbamchameleon.sys 2014-11-11 16:45:47 95EF63A7827D4E3A229CBBCB42619E93 63704 ----a-w- C:\Windows\Sysnative\drivers\mwac.sys ====== C:\Windows\Tasks ====== 2014-11-13 13:44:15 BDFD55FBAAD9443AA71DCD5BB521865C 3360 ----a-w- C:\Windows\Sysnative\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2826479152-1464123832-2615865384-1001 ====== C:\Windows\Temp ====== ======= C:\Program Files ===== ======= C:\PROGRA~2 ===== 2014-10-22 16:42:21 -------- d-----w- C:\PROGRA~2\Cabela's Big Game Hunter Pro Hunts ======= ===== ====== C:\Users\Maxim\AppData\Roaming ====== ====== C:\Users\Maxim ====== 2014-11-11 16:44:54 32A7154F9934CF3AA5D945D02D069D1F 17523384 ----a-w- C:\Users\Vrij\Desktop\mbam-setup-2.0.0.1000.exe 2014-11-08 13:08:04 92B980C37F4C56498C65265BE033E42D 2145792 ----a-w- C:\Users\Vrij\Downloads\adwcleaner_4.100.exe 2014-10-22 17:01:41 -------- d-----w- C:\ProgramData\Steam ====== C: exe-files == 2014-11-13 19:46:57 217A410E73062703F2552A5F952A7BFE 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2826479152-1464123832-2615865384-1001\$IM352TR.exe 2014-11-12 06:17:39 C265E023A65D7DA049E1B1D957F714EE 161960 ----a-w- C:\Windows\System32\CompatTel\QueryAppBlock.exe 2014-11-12 06:17:39 037DF5FF4E17AD355309F0E4B15B48BE 46752 ----a-w- C:\Windows\System32\CompatTel\wicainventory.exe 2014-11-11 19:33:39 66C3E001C6FDC0A74B70A07C00F5C1EB 261637 ----a-w- C:\Users\Maxim\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B9O157HH\514b32604b757[1].exe 2014-11-11 18:46:47 8432EC1EF2368E776714527785327183 1392216 ----a-w- C:\Users\Vrij\AppData\Roaming\BitTorrent\BitTorrent.exe 2014-11-11 18:46:37 8432EC1EF2368E776714527785327183 1392216 ----a-w- C:\Users\Vrij\AppData\Roaming\BitTorrent\updates\7.9.2_34947.exe 2014-11-11 18:46:30 8432EC1EF2368E776714527785327183 1392216 ----a-w- C:\Users\Vrij\AppData\Local\Temp\utt3742.tmp.exe 2014-11-11 16:44:54 32A7154F9934CF3AA5D945D02D069D1F 17523384 ----a-w- C:\Users\Vrij\Desktop\mbam-setup-2.0.0.1000.exe 2014-11-08 13:08:04 92B980C37F4C56498C65265BE033E42D 2145792 ----a-w- C:\Users\Vrij\Downloads\adwcleaner_4.100.exe 2014-11-08 08:58:37 5DE97D29F631E076652694B4FADDF638 166400 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\LocalCopy\{21753540-8957-7936-F4F6-443E6DABA489}-stuprt.exe === C: other files == 2014-11-11 18:46:35 B4786722786E0A903FF7C9B53D084749 94 ----a-w- C:\Users\Vrij\AppData\Local\Temp\utt4C2F.tmp.bat 2014-11-11 16:46:16 26C43960C99EE861A5D0EDC4DCF3B1C3 129752 ----a-w- C:\Windows\System32\drivers\MBAMSwissArmy.sys 2014-11-11 16:45:47 D3311B31C470E7681B14D9B014CBF9ED 93400 ----a-w- C:\Windows\System32\drivers\mbamchameleon.sys 2014-11-11 16:45:47 95EF63A7827D4E3A229CBBCB42619E93 63704 ----a-w- C:\Windows\System32\drivers\mwac.sys ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-21-2826479152-1464123832-2615865384-1000\Software\Microsoft\Windows\CurrentVersion\Run] "Steam"="C:\Program Files (x86)\Steam\Steam.exe -silent" "BitTorrent"="C:\Users\Vrij\AppData\Roaming\BitTorrent\BitTorrent.exe /MINIMIZED" [HKEY_USERS\S-1-5-21-2826479152-1464123832-2615865384-1001\Software\Microsoft\Windows\CurrentVersion\Run] "swg"="C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" "Spotify"="C:\Users\Vrij\AppData\Roaming\Spotify\Spotify.exe /uri spotify:autostart" "Spotify Web Helper"="C:\Users\Vrij\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [HKEY_USERS\S-1-5-21-2826479152-1464123832-2615865384-1000\Software\Microsoft\Windows\CurrentVersion\runonce] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IAStorIcon"="C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" "SuiteTray"="C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" "EgisUpdate"="C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe -d" "EgisTecPMMUpdate"="C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe" "NortonOnlineBackupReminder"="C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe UNATTENDED" "Adobe Reader Speed Launcher"="C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" "BackupManagerTray"="C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe -h -k" "StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun" "LManager"="C:\Program Files (x86)\Launch Manager\LManager.exe" "MDS_Menu"="C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso UpdateWithCreateOnce Software\CyberLink\MediaShow Espresso\5.6" "ArcadeMovieService"="C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe" "APSDaemon"="C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" "BCSSync"="C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe /DelayServices" "TkBellExe"="C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe -osboot" "SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" "Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "PWRISOVM.EXE"="C:\Program Files (x86)\PowerISO\PWRISOVM.EXE" "iTunesHelper"="C:\Program Files (x86)\iTunes\iTunesHelper.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] "Malwarebytes Anti-Malware (cleanup)"="C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Steam"="C:\Program Files (x86)\Steam\Steam.exe -silent" "BitTorrent"="C:\Users\Vrij\AppData\Roaming\BitTorrent\BitTorrent.exe /MINIMIZED" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce] ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s" "RtHDVBg"="C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE3 " "AmIcoSinglun64"="C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" "ODDPwr"="C:\Program Files\Acer\Optical Drive Power Management\ODDPwr.exe" "mwlDaemon"="C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe" "IgfxTray"="C:\Windows\system32\igfxtray.exe" "HotKeysCmds"="C:\Windows\system32\hkcmd.exe" "Persistence"="C:\Windows\system32\igfxpers.exe" "PLFSetI"="C:\Windows\PLFSetI.exe" "Acer ePower Management"="C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe" "MSC"="c:\Program Files\Microsoft Security Client\msseces.exe -hide -runkey" "SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe " ==== Startup Folders ====================== 2014-02-17 13:17:21 1016 ----a-w- C:\Users\School\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk 2010-05-14 04:14:59 1782 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer VCM.lnk 2012-12-27 17:10:33 834 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [11/11/2014 17:38] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [17/10/2014 07:54] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ [undetermined Task] ==== Other Scheduled Tasks ====================== "C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\Windows\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"] "C:\Windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2826479152-1464123832-2615865384-1001" [C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe] "C:\Windows\SysNative\tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2826479152-1464123832-2615865384-1001" [C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe] "C:\Windows\SysNative\tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2826479152-1464123832-2615865384-1001" [C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe] "C:\Windows\SysNative\tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2826479152-1464123832-2615865384-1000" [C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe] "C:\Windows\SysNative\tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2826479152-1464123832-2615865384-1001" [C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe] "C:\Windows\SysNative\tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2826479152-1464123832-2615865384-1000" [C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe] "C:\Windows\SysNative\tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2826479152-1464123832-2615865384-1001" [C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe] "C:\Windows\SysNative\tasks\Apple\AppleSoftwareUpdate" [C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe] "C:\Windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc] "C:\Windows\SysNative\tasks\Recovery Management\Burn Notification" [C:\Program Files\Acer\Acer eRecovery Management\NotificationCenter\Notification.exe] ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "{34712C68-7391-4c47-94F3-8F88D49AD632}"="C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext" [19/01/2013 19:23] ==== Chromium Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions fheoggkfdfchfphceeifdbepaooicaho - No path found[] idhngdhcfkoamngbedgpaokgjbnpdiji - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx[29/11/2012 20:35] RealDownloader - Maxim\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji Google Wallet - Maxim\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda RealDownloader - School\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji Google Wallet - School\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda SiteAdvisor - Vrij\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho RealDownloader - Vrij\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji Google Wallet - Vrij\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda ==== Chromium Fix ====================== C:\Users\Maxim\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage deleted successfully C:\Users\Maxim\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage-journal deleted successfully C:\Users\Vrij\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="Google" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] No DefaultScope Set For HKCU New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="Google" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes {012E1000-F331-11DB-8314-0800200C9A66} Google Url="{searchTerms - Google Search}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="{searchTerms} - Bing" {22B5DDE2-66F5-47C6-995C-B3855F3B7CB9} Google Url="{searchTerms} - Google Search" {67A2568C-7A0A-4EED-AECC-B5405DE63B64} Bing Url="{searchTerms} - Bing" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="{searchTerms} - Google Search}" ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\fheoggkfdfchfphceeifdbepaooicaho deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\fheoggkfdfchfphceeifdbepaooicaho deleted successfully HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96} deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{EE171732-BEB4-4576-887D-CB62727F01CA} deleted successfully ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Maxim\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\School\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\School\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\Vrij\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\Vrij\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Maxim\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot C:\Users\Vrij\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot ==== Empty FireFox Cache ====================== No FireFox Profiles found ==== Empty Chrome Cache ====================== C:\Users\Maxim\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully C:\Users\School\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully C:\Users\Vrij\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache is not empty, a reboot is needed ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=1652 folders=249 97924125 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\temp emptied successfully C:\Users\Default User\AppData\Local\temp emptied successfully C:\Users\Maxim\AppData\Local\Temp will be emptied at reboot C:\Users\Public\AppData\Local\temp emptied successfully C:\Users\School\AppData\Local\temp emptied successfully C:\Users\Vrij\AppData\Local\Temp will be emptied at reboot C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Maxim\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\Maxim\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted "C:\Users\Vrij\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted "C:\Users\Vrij\AppData\Local\Temp\aipflib.log" not deleted "C:\Users\Vrij\AppData\Local\Temp\FXSAPIDebugLogFile.txt" not deleted "C:\Users\Vrij\AppData\Local\Temp\LManager.log" not deleted "C:\Users\Vrij\AppData\Local\Temp\LMworker.log" not deleted "C:\Users\Vrij\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\8R968YJH\partyflock.nl" not found ==== EOF on do 13/11/2014 at 21:39:09,03 ======================

Mijn excuses, het waren de potentieel ongewenste aanpassingen die al juist stonden Hieronder het resultaat van de laaste scan MvG Malwarebytes Anti-Malware www.malwarebytes.org Scandatum: 11/11/2014 Scantijd: 20:00:04 Logbestand: Beheerder: Ja Versie: 2.00.3.1025 Malwaredatabase: v2014.11.11.07 Rootkitdatabase: v2014.11.10.01 Licentie: Proef Malwarebescherming: Ingeschakeld Kwaadaardige Website Bescherming: Ingeschakeld Zelfbescherming: Uitgeschakeld Besturingssysteem: Windows 7 Processor: x64 Bestandssysteem: NTFS Gebruiker: Maxim Scantype: Bedreigingsscan Resultaat: Voltooid Objecten Gescand: 427675 Verstreken Tijd: 32 m, 35 s Geheugen: Ingeschakeld Opstarten: Ingeschakeld Bestandssysteem: Ingeschakeld Archieven: Ingeschakeld Rootkits: Uitgeschakeld Heuristiek: Ingeschakeld POP: Ingeschakeld POA: Ingeschakeld Processen: 0 (Geen kwaadaardige items gedetecteerd) Modules: 0 (Geen kwaadaardige items gedetecteerd) Registersleutels: 0 (Geen kwaadaardige items gedetecteerd) Registerwaardes: 0 (Geen kwaadaardige items gedetecteerd) Registerdata: 0 (Geen kwaadaardige items gedetecteerd) Mappen: 0 (Geen kwaadaardige items gedetecteerd) Bestanden: 1 PUP.Optional.InstallCore, C:\Users\School\Downloads\CR_Downloader_voor_visual-boy-advance.exe, In Quarantaine, [41427bbf354750e68f89a48728ddc739], Fysieke Sectoren: 0 (Geen kwaadaardige items gedetecteerd) (end)

De instelling Behandel als Malware stond al aangeduid dus heb nog maal een scan genomen, in de bijlage vindt u het logje van RSIT Malwarebytes Anti-Malware www.malwarebytes.org Scandatum: 11/11/2014 Scantijd: 18:53:05 Logbestand: Beheerder: Ja Versie: 2.00.3.1025 Malwaredatabase: v2014.11.11.06 Rootkitdatabase: v2014.11.10.01 Licentie: Proef Malwarebescherming: Ingeschakeld Kwaadaardige Website Bescherming: Ingeschakeld Zelfbescherming: Uitgeschakeld Besturingssysteem: Windows 7 Processor: x64 Bestandssysteem: NTFS Gebruiker: Maxim Scantype: Bedreigingsscan Resultaat: Voltooid Objecten Gescand: 427684 Verstreken Tijd: 33 m, 17 s Geheugen: Ingeschakeld Opstarten: Ingeschakeld Bestandssysteem: Ingeschakeld Archieven: Ingeschakeld Rootkits: Uitgeschakeld Heuristiek: Ingeschakeld POP: Waarschuwen POA: Ingeschakeld Processen: 0 (Geen kwaadaardige items gedetecteerd) Modules: 0 (Geen kwaadaardige items gedetecteerd) Registersleutels: 11 PUP.Optional.DefaultTab.A, HKU\S-1-5-21-2826479152-1464123832-2615865384-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{7F6AFBF1-E065-4627-A2FD-810366367D01}, Geen Actie Door Gebruiker, [641e0634ccb0dd59477e8238996954ac], PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B2D33ED6-EBBD-467C-BF6F-F175D9B51363}, Geen Actie Door Gebruiker, [c8ba53e7d3a9c076415735859c660df3], PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BAD84EE2-624D-4e7c-A8BB-41EFD720FD77}, Geen Actie Door Gebruiker, [59290b2f99e37eb8d1c8c2f8b052ed13], PUP.Optional.DefaultTab.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\DefaultTab, Geen Actie Door Gebruiker, [1d6523173d3f1c1a2418cfa03fc41de3], PUP.Optional.SProtector.A, HKU\S-1-5-21-2826479152-1464123832-2615865384-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SProtector, Geen Actie Door Gebruiker, [037fa89236462f078e73fa8b5ea6639d], PUP.Optional.BitTorrentBar.A, HKU\S-1-5-21-2826479152-1464123832-2615865384-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\BittorrentBar_NL, Geen Actie Door Gebruiker, [a4de7bbf5725f83e7f83aa00808435cb], PUP.Optional.PriceGong.A, HKU\S-1-5-21-2826479152-1464123832-2615865384-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, Geen Actie Door Gebruiker, [4a3854e6ea92f343478ad29409fa28d8], PUP.Optional.SProtector.A, HKU\S-1-5-21-2826479152-1464123832-2615865384-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SProtector, Geen Actie Door Gebruiker, [a2e0ee4cf9832511ff02820346be7d83], PUP.Optional.BitTorrentBar.A, HKU\S-1-5-21-2826479152-1464123832-2615865384-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\BittorrentBar_NL, Geen Actie Door Gebruiker, [f58ddd5ddaa28da9a1619614709453ad], PUP.Optional.PriceGong.A, HKU\S-1-5-21-2826479152-1464123832-2615865384-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, Geen Actie Door Gebruiker, [91f1f14907754ee8864b3f27fa09ed13], PUP.Optional.Conduit.A, HKU\S-1-5-21-2826479152-1464123832-2615865384-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOWREGISTRY\DOMSTORAGE\conduit.com, Geen Actie Door Gebruiker, [a4dec872c8b4f73f655cd4d34cb8ea16], Registerwaardes: 0 (Geen kwaadaardige items gedetecteerd) Registerdata: 0 (Geen kwaadaardige items gedetecteerd) Mappen: 0 (Geen kwaadaardige items gedetecteerd) Bestanden: 1 PUP.Optional.InstallCore, C:\Users\School\Downloads\CR_Downloader_voor_visual-boy-advance.exe, Geen Actie Door Gebruiker, [e2a096a4116b7db935b38aa07491a15f], Fysieke Sectoren: 0 (Geen kwaadaardige items gedetecteerd) (end) log.txt

Ik heb het logje hieronder gekopiëerd omdat ik het bestand telkes opsla maar niet kan terug vinden bij het uploaden als bijlage. MvG "Malwarebytes Anti-Malware www.malwarebytes.org Scandatum: 11/11/2014 Scantijd: 17:49:27 Logbestand: Beheerder: Ja Versie: 2.00.3.1025 Malwaredatabase: v2014.11.11.06 Rootkitdatabase: v2014.11.10.01 Licentie: Proef Malwarebescherming: Ingeschakeld Kwaadaardige Website Bescherming: Ingeschakeld Zelfbescherming: Uitgeschakeld Besturingssysteem: Windows 7 Processor: x64 Bestandssysteem: NTFS Gebruiker: Maxim Scantype: Bedreigingsscan Resultaat: Voltooid Objecten Gescand: 427469 Verstreken Tijd: 29 m, 14 s Geheugen: Ingeschakeld Opstarten: Ingeschakeld Bestandssysteem: Ingeschakeld Archieven: Ingeschakeld Rootkits: Uitgeschakeld Heuristiek: Ingeschakeld POP: Waarschuwen POA: Ingeschakeld Processen: 0 (Geen kwaadaardige items gedetecteerd) Modules: 0 (Geen kwaadaardige items gedetecteerd) Registersleutels: 11 PUP.Optional.DefaultTab.A, HKU\S-1-5-21-2826479152-1464123832-2615865384-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{7F6AFBF1-E065-4627-A2FD-810366367D01}, Geen Actie Door Gebruiker, [6b17132790ecac8a992c407a9969de22], PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{B2D33ED6-EBBD-467C-BF6F-F175D9B51363}, Geen Actie Door Gebruiker, [384a1a2034487fb71088b60404fee51b], PUP.Optional.DefaultTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{BAD84EE2-624D-4e7c-A8BB-41EFD720FD77}, Geen Actie Door Gebruiker, [29592812f38926103762e2d8857d9070], PUP.Optional.DefaultTab.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\DefaultTab, Geen Actie Door Gebruiker, [eb9725150f6dff37bc80eb84966dcb35], PUP.Optional.SProtector.A, HKU\S-1-5-21-2826479152-1464123832-2615865384-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SProtector, Geen Actie Door Gebruiker, [2d5545f54f2dea4c9c65ceb753b1639d], PUP.Optional.BitTorrentBar.A, HKU\S-1-5-21-2826479152-1464123832-2615865384-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\BittorrentBar_NL, Geen Actie Door Gebruiker, [5a282e0c5824d462e41ea80219eb8c74], PUP.Optional.PriceGong.A, HKU\S-1-5-21-2826479152-1464123832-2615865384-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, Geen Actie Door Gebruiker, [4a3889b1a1db5dd903ceeb7b33d0936d], PUP.Optional.SProtector.A, HKU\S-1-5-21-2826479152-1464123832-2615865384-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SProtector, Geen Actie Door Gebruiker, [166c3dfd93e94ee8b34e1a6b31d37987], PUP.Optional.BitTorrentBar.A, HKU\S-1-5-21-2826479152-1464123832-2615865384-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\BittorrentBar_NL, Geen Actie Door Gebruiker, [8bf795a5d5a7a591cd357d2d12f2a060], PUP.Optional.PriceGong.A, HKU\S-1-5-21-2826479152-1464123832-2615865384-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, Geen Actie Door Gebruiker, [552d8eace795270fc1104a1c748f9e62], PUP.Optional.Conduit.A, HKU\S-1-5-21-2826479152-1464123832-2615865384-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOWREGISTRY\DOMSTORAGE\conduit.com, Geen Actie Door Gebruiker, [ec96a397403cf640635e129559abda26], Registerwaardes: 0 (Geen kwaadaardige items gedetecteerd) Registerdata: 0 (Geen kwaadaardige items gedetecteerd) Mappen: 0 (Geen kwaadaardige items gedetecteerd) Bestanden: 2 PUP.Optional.InstallCore, C:\Users\School\Downloads\CR_Downloader_voor_visual-boy-advance.exe, Geen Actie Door Gebruiker, [39494ded720a78be7a6e5dcd42c330d0], Trojan.Agent.ED, C:\Users\Vrij\AppData\Local\Temp\Low\stuprt.exe, In Quarantaine, [1072d565710bc670f851b72a808142be], Fysieke Sectoren: 0 (Geen kwaadaardige items gedetecteerd) (end)"

In de bijlage vindt u het log bestandje. MvG AdwCleaner[S0].txt

Beste, Toen ik deze morgen Internet Explorer openede kreeg ik direct een scherm van Interpol waarop stond dat ik illegale bestand op mijn pc staan had. Na veel gesukkel heb ik het toch kunnen sluiten. Nu heb ik schrik dat heel mijn pc geblokkeerd gaat geraken indien ik het nog eens open. Ik ben momenteel een volledige scan aan het doen met Microsoft Essentials. Maar ik weet niet of dit dan ook alles effectief verwijderd van malware van mijn pc. Met Vriendelijke groeten [ATTACH]37176[/ATTACH] log.txt

Alles ging vlot, nogmaals bedankt voor de hulp !!

Hij werkt terug normaal, het opstarten gaat even snel als vroeger. Bedankt voor de hulp !!!

Volgende logje AdwCleaner[R1].txt

[ATTACH]30691[/ATTACH] Hierboven het nieuwe logje zoek-results2.txt

Hieronder vindt u het logje van Zoek.exe. zoek-results.txt

Logje zit in de bijlage log.txt

Sinds dit weekend start mijn laptop zeer traag op, hij blijft soms paar minuten op windows logo staan. Ik heb onlangs last gehad van een trojaaans paard, heb deze via microsoft essentials kunnen verwijderen, maar nu denk ik toch dat er meer aan de hand is. Wat kan ik doen ? [ATTACH]30650[/ATTACH] hijackthis.log

Ik ga het zo laten, de pc is bijna 10 jaar oud, dus het is de moeite niet meer om er zo veel tijd nog in te steken. Alvast bedankt voor al de hulp !!!