Ga naar inhoud

ik krijg steeds deze melding van syncui


anneke50

Aanbevolen berichten

  • Reacties 31
  • Aangemaakt
  • Laatste reactie

Beste reacties in dit topic

Beste reacties in dit topic

oke ik heb toch nog iets gedaan .maar als ik doe zoals jij zegt .krijg ik eerst deze melding

2rz4279.jpg

ik kan wel op oke klikken wat ik dan ook doe ,hij scant ook ,maar zie dan dit weer

10fq6if.jpg

ik druk weer braaf op oke en zie dan alles gescant .dan krijg ik het volgende probleem

ik kan het niet selecteren allemaal pffffffffffffffffffffff .wat een pc zeg hahaha

ik sluit voor vandaag af ,maar wil jullie wel alvast dank zeggen voor de tot nu toe geboden hulp

ik hoop echt dat we morgen verder kunnen met de juiste oplossing

Link naar reactie
Delen op andere sites

Goedemorgen allemaal .eindelijk is het gelukt ,hier is mijn log

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 10:13:32, on 7-2-2011

Platform: Windows 7 (WinNT 6.00.3504)

MSIE: Internet Explorer v8.00 (8.00.7600.16700)

Boot mode: Normal

Running processes:

C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe

C:\Program Files (x86)\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe

C:\Program Files (x86)\Adobe\Adobe Bridge CS4\Bridge.exe

C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe

C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe

C:\Program Files (x86)\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe

C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe

C:\Users\Gebruiker\AppData\Roaming\AutoChks.exe

C:\Program Files (x86)\Windows Live\Mail\wlmail.exe

C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10l_ActiveX.exe

C:\Users\GEBRUI~1\AppData\Local\Temp\TmIZJMKM5j.exe

C:\Program Files (x86)\Internet Explorer\IELowutil.exe

C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Ruim assortiment pc's en elektronica, scherpe prijzen! - norrod.nl

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = psp4you

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R3 - URLSearchHook: (no name) - {22e03916-85c5-44b0-8dc9-1830c11238d9} - (no file)

F2 - REG:system.ini: UserInit=userinit.exe

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\ievkbd.dll

O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll

O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll

O4 - HKLM\..\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe"

O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [EEventManager] C:\PROGRA~2\EPSONS~1\EVENTM~1\EEventManager.exe

O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide

O4 - HKLM\..\Run: [Corel File Shell Monitor] C:\Program Files (x86)\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe

O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin

O4 - HKCU\..\Run: [EPSON SX110 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFBE.EXE /FU "C:\Windows\TEMP\E_S7D69.tmp" /EF "HKCU"

O4 - HKCU\..\Run: [AdobeBridge] "C:\Program Files (x86)\Adobe\Adobe Bridge CS4\Bridge.exe" -stealth

O4 - HKCU\..\Run: [Auto Check Utility] "C:\Users\Gebruiker\AppData\Roaming\AutoChks.exe"

O4 - HKCU\..\Run: [Windows Audio Service] C:\Users\GEBRUI~1\AppData\Local\Temp\audio.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll

O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll

O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll

O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll

O9 - Extra button: &Virtueel toetsenbord - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll

O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Internetadressen c&ontrole - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O20 - AppInit_DLLs: C:\PROGRA~2\KASPER~1\KASPER~1\mzvkbd3.dll

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)

O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Process Monitor (LVPrcS64) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\SysWOW64\PSIService.exe

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--

End of file - 10177 bytes

Link naar reactie
Delen op andere sites

Ga naar Start – Uitvoeren/Zoekopdracht en tik in: sc stop "AMD External Events Utility"

Druk op Enter.

Ga naar Start – Uitvoeren/Zoekopdracht en tik in: sc delete "AMD External Events Utility"

Druk op Enter.

Start Hijackthis op. Ben je gebruiker van Vista of windows 7 kies dan voor “Run as administrator" of "Uitvoeren als administrator".

Selecteer “Do a system scan only”. Selecteer alleen de items die hieronder zijn genoemd:

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R3 - URLSearchHook: (no name) - {22e03916-85c5-44b0-8dc9-1830c11238d9} - (no file)

O4 - HKCU\..\Run: [Auto Check Utility] "C:\Users\Gebruiker\AppData\Roaming\AutoChks.exe

O4 - HKCU\..\Run: [Windows Audio Service] C:\Users\GEBRUI~1\AppData\Local\Temp\audio.exe

Klik op 'Fix checked' om de items te verwijderen.

Download MBAM (Malwarebytes Anti-Malware)

Dubbelklik op mbam-setup.exe om het programma te installeren.

Zorg ervoor dat er een vinkje geplaatst is voor Update Malwarebytes' Anti-Malware en Start Malwarebytes' Anti-Malware, Klik daarna op "Voltooien".

Indien een update gevonden werd, zal die gedownload en geïnstalleerd worden.

Wanneer het programma volledig up to date is, selecteer dan in het tabblad Scanner : "Snelle Scan", daarna klik op Scan.

Het scannen kan een tijdje duren, dus wees geduldig.

Wanneer de scan voltooid is, klik op OK, daarna "Bekijk Resultaten" om de resultaten te zien.

Zorg ervoor dat daar alles aangevinkt is, daarna klik op: Verwijder geselecteerde.

Na het verwijderen zal een log openen en zal er gevraagd worden om de computer opnieuw op te starten. (Zie verder).

Indien er de rootkit (TDSS) aanwezig is, zal MBAM vragen te herstarten. Doe dit dan ook.

MBAM zal na de herstart opnieuw scannen en de rootkit verwijderen.

Het log wordt automatisch bewaard door MBAM en kan je terugvinden door op de "Logs" tab te klikken in het programma.

Indien MBAM moeilijkheden heeft met het verwijderen van bepaalde bestanden zal het enkele meldingen geven waar je OK moet klikken. Daarna zal het vragen om de computer opnieuw op te starten... dus sta toe dat MBAM de computer opnieuw opstart.

Plak de inhoud van het logje in je volgende bericht, samen met een nieuw HijackThis log.

aangepast door kape
Link naar reactie
Delen op andere sites

dit is de log

Malwarebytes' Anti-Malware 1.50.1.1100

www.malwarebytes.org

Databaseversie: 5701

Windows 6.1.7600

Internet Explorer 8.0.7600.16385

7-2-2011 12:32:45

mbam-log-2011-02-07 (12-32-45).txt

Scantype: Snelle scan

Objecten gescand: 157377

Verstreken tijd: 2 minuut/minuten, 33 seconde(n)

Geheugenprocessen geïnfecteerd: 1

Geheugenmodulen geïnfecteerd: 0

Registersleutels geïnfecteerd: 0

Registerwaarden geïnfecteerd: 1

Registerdata geïnfecteerd: 0

Mappen geïnfecteerd: 0

Bestanden geïnfecteerd: 93

Geheugenprocessen geïnfecteerd:

c:\Users\gebruiker\AppData\Roaming\AutoChks.exe (Malware.Generic) -> 2260 -> Unloaded process successfully.

Geheugenmodulen geïnfecteerd:

(Geen kwaadaardige objecten gedetecteerd)

Registersleutels geïnfecteerd:

(Geen kwaadaardige objecten gedetecteerd)

Registerwaarden geïnfecteerd:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Auto Check Utility (Malware.Generic) -> Value: Auto Check Utility -> Quarantined and deleted successfully.

Registerdata geïnfecteerd:

(Geen kwaadaardige objecten gedetecteerd)

Mappen geïnfecteerd:

(Geen kwaadaardige objecten gedetecteerd)

Bestanden geïnfecteerd:

c:\Users\gebruiker\AppData\Roaming\AutoChks.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\Gebruiker\AppData\Local\Temp\304xwhjb9tt.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\Gebruiker\AppData\Local\Temp\oasFjH.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\Gebruiker\AppData\Local\Temp\2h82v5oeukr.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\Gebruiker\AppData\Local\Temp\nc0zobzri.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\08uxrg4ob2.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\0ief20rdoi.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\1118ox68vt.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\1kiii0n3xav.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\2xrm2k2cplf.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\6ehejzubvo1.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\6m90gwigvua.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\74fyazre0bz.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\8odpautmi0e.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\9ljodxvowym.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\ae5er.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\audio.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\autoconvs.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\b8KLK.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\Bt0FIQgV.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\BuUjcRFh.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\C5mxEgJv.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\cRIL2.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\ctmfR.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\cYyiu.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\dEgQ7.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\dEny2.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\diIaQ.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\dpEFS.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\DvzBoZf8.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\e2lEa.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\ezbtC.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\F9lPDaAT.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\fmnnS.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\fouoV.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\fP31x.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\GXBMdy8O.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\hduwS.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\HL8OIH6u.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\hSO14.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\HWSzDTUK.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\I8OT9tvr.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\IT1xul7L.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\IT2qCwNo.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\itp8b.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\jtd8YR.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\kp0mlksg4.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\lje1sv2br.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\lyzEq9.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\m63M4w.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\mHKZ9R.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\n06hmh.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\n1NftO.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\oalpoxcvw.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\owYZnN.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\oxHJjX.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\pHDsrb.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\pWuy2e.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\q5con52t8.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\qbrtnbpzp.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\qcksszxbz.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\qisfoaxru.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\qjOpim.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\qrTFz3.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\rjygyjx7l.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\rloxh7wyi.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\rtgtaconn.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\shzaoavhs5.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\sqVIEQ9.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\srkI0b6.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\t2xkw7dyeg.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\tpFr9Tx.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\ty6ejz6nh9.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\tZkSLTN.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\u4uH87Z.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\uHM0ovC.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\vomfwjtnrv.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\vrD4RUD.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\w9rivkrao1.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\wbSFBwE.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\wLqIk5F.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\wwylfabyqc.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\x0FMlKF.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\x0jmdWg.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\xryqbnxh3c.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\yg3u2V1.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\yklrHUm.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\ynnrkp4h6e.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\z3ht6urg0k.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\zewi9ghy5b.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\zoslfafqdh.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\zpzmlcgqsn.exe (Malware.Generic) -> Quarantined and deleted successfully.

c:\Users\gebruiker\AppData\Local\Temp\zqovr64eop.exe (Malware.Generic) -> Quarantined and deleted successfully.

---------- Post toegevoegd om 12:44 ---------- Vorige post was om 12:40 ----------

nu wil ik dus weer een hyjackthis log doen .ook als administator ,maar hij opent geen kladblok nu dus ik kan het weer niet selecteren

grrrrrrrrrrrrrrrrrrrrrr

---------- Post toegevoegd om 12:52 ---------- Vorige post was om 12:44 ----------

maar zo lang ik nu al op de pc zit DE MELDING IS ER NOG NIET WEER IN GEKOMEN

JIPPIEEEEEEEEEEEEEEEEEEEEEEE

Link naar reactie
Delen op andere sites

dit is de enigste die ik zie staan

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 10:13:32, on 7-2-2011

Platform: Windows 7 (WinNT 6.00.3504)

MSIE: Internet Explorer v8.00 (8.00.7600.16700)

Boot mode: Normal

Running processes:

C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe

C:\Program Files (x86)\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe

C:\Program Files (x86)\Adobe\Adobe Bridge CS4\Bridge.exe

C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe

C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe

C:\Program Files (x86)\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe

C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe

C:\Users\Gebruiker\AppData\Roaming\AutoChks.exe

C:\Program Files (x86)\Windows Live\Mail\wlmail.exe

C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10l_ActiveX.exe

C:\Users\GEBRUI~1\AppData\Local\Temp\TmIZJMKM5j.exe

C:\Program Files (x86)\Internet Explorer\IELowutil.exe

C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Ruim assortiment pc's en elektronica, scherpe prijzen! - norrod.nl

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = psp4you

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R3 - URLSearchHook: (no name) - {22e03916-85c5-44b0-8dc9-1830c11238d9} - (no file)

F2 - REG:system.ini: UserInit=userinit.exe

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\ievkbd.dll

O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll

O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll

O4 - HKLM\..\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe"

O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [EEventManager] C:\PROGRA~2\EPSONS~1\EVENTM~1\EEventManager.exe

O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide

O4 - HKLM\..\Run: [Corel File Shell Monitor] C:\Program Files (x86)\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe

O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin

O4 - HKCU\..\Run: [EPSON SX110 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFBE.EXE /FU "C:\Windows\TEMP\E_S7D69.tmp" /EF "HKCU"

O4 - HKCU\..\Run: [AdobeBridge] "C:\Program Files (x86)\Adobe\Adobe Bridge CS4\Bridge.exe" -stealth

O4 - HKCU\..\Run: [Auto Check Utility] "C:\Users\Gebruiker\AppData\Roaming\AutoChks.exe"

O4 - HKCU\..\Run: [Windows Audio Service] C:\Users\GEBRUI~1\AppData\Local\Temp\audio.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll

O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll

O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll

O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll

O9 - Extra button: &Virtueel toetsenbord - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll

O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Internetadressen c&ontrole - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\klwtbbho.dll

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O20 - AppInit_DLLs: C:\PROGRA~2\KASPER~1\KASPER~1\mzvkbd3.dll

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)

O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Process Monitor (LVPrcS64) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\SysWOW64\PSIService.exe

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--

End of file - 10177 bytes

Link naar reactie
Delen op andere sites

Gast
Dit topic is nu gesloten voor nieuwe reacties.

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.