Ga naar inhoud

AVG Secure Search

habhab
 Delen

Aanbevolen berichten

kape Grootmeester

kape

Geplaatst:
Geplaatst:

Open een kladblokbestand.

Kopieer en plak daarin de onderstaande vetgedrukte tekst.

File::

C:\Windows\system32\drivers\avgtpx64.sys

Folder::

c:\users\Gast\AppData\Local\AVG Secure Search

c:\users\Bert\AppData\Local\AVG Secure Search

c:\users\Mattijs\AppData\Local\AVG Secure Search

c:\users\Hans\AppData\Local\AVG Secure Search

c:\programdata\AVG Secure Search

c:\program files (x86)\Common Files\AVG Secure Search

C:\Program Files (x86)\AVG Secure Search

Driver::

vToolbarUpdater12.2.6

avgtp

Registry::

[-HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]

[-HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}]

[-HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj.1]

[-HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj]

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"vProt"=-

"ROC_ROC_NT"=-

DDS::

uStart Page = https://isearch.avg.com/?cid={7FDE92...a&d=2012-09-29 14:49&v=12.2.5.34&sap=hp

Sla dit bestand op je bureaublad op als CFScript.

Sleep CFScript.txt in ComboFix.exe

Dit zal ComboFix doen herstarten. Start opnieuw op als dat gevraagd wordt.

Post na herstart de inhoud van de Combofix.txt in je volgende bericht.

Link naar reactie
Delen op andere sites
habhab Meewerkend lid

habhab

Geplaatst:
  • Auteur
Geplaatst: (aangepast)

Vooreerst het goede nieuws. Ik kan opnieuw mijn homepage zelf bepalen. Ik merk wel dat bij opstarten van de internet explorer er gevraagd werd om de AVG security terug in te schakelen, wat ik wijselijk dus niet heb gedaan natuurlijk. 'k Zie wel dat ie nog in de lijst staat van plugins.

De folder "C:\ComboFix" was leeg, dus kon ik Combofix.txt niet vinden. Ik had de log echter in een textfile gesaved vooraleer ik moest rebooten omdat er blijkbaar weer iets was met een registery item. Hierbij de inhoud:

ComboFix 12-10-04.02 - Hans 07/10/2012 9:38.3.4 - x64

Microsoft Windows 7 Home Premium 6.1.7601.1.1252.32.1043.18.3957.2292 [GMT 2:00]

Gestart vanuit: c:\users\Hans\Desktop\ComboFix.exe

gebruikte Opdracht switches :: c:\users\Hans\Desktop\CFScript.txt

AV: McAfee Antivirus en antispyware *Enabled/Updated* {ADA629C7-7F48-5689-624A-3B76997E0892}

FW: McAfee Firewall *Enabled* {959DA8E2-3527-57D1-4915-924367AD4FE9}

SP: McAfee Antivirus en antispyware *Enabled/Updated* {16C7C823-5972-5907-58FA-0004E2F9422F}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

FILE ::

"c:\windows\system32\drivers\avgtpx64.sys"

.

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\program files (x86)\AVG Secure Search

c:\program files (x86)\AVG Secure Search\12.2.5.34\AVG Secure Search_toolbar.dll

c:\program files (x86)\AVG Secure Search\about.gif

c:\program files (x86)\AVG Secure Search\active-threats18.gif

c:\program files (x86)\AVG Secure Search\avguidx.dll

c:\program files (x86)\AVG Secure Search\calc.gif

c:\program files (x86)\AVG Secure Search\CleanHistory.gif

c:\program files (x86)\AVG Secure Search\configuration.xml

c:\program files (x86)\AVG Secure Search\current.gif

c:\program files (x86)\AVG Secure Search\currently-safe18.gif

c:\program files (x86)\AVG Secure Search\Facebook.gif

c:\program files (x86)\AVG Secure Search\favicon.ico

c:\program files (x86)\AVG Secure Search\feedback.gif

c:\program files (x86)\AVG Secure Search\help.gif

c:\program files (x86)\AVG Secure Search\icon18.gif

c:\program files (x86)\AVG Secure Search\labs.gif

c:\program files (x86)\AVG Secure Search\Licenses\Encoding_decoding_base64.txt

c:\program files (x86)\AVG Secure Search\Licenses\hmac.txt

c:\program files (x86)\AVG Secure Search\Licenses\LICENSE-bsdiff.txt

c:\program files (x86)\AVG Secure Search\Licenses\LICENSE-bzip.txt

c:\program files (x86)\AVG Secure Search\Licenses\LICENSE-JasonCpp.txt

c:\program files (x86)\AVG Secure Search\Licenses\LICENSE-MPL-NPAPI.txt

c:\program files (x86)\AVG Secure Search\Licenses\LICENSE-sparsehash.txt

c:\program files (x86)\AVG Secure Search\Licenses\PassthruApp.txt

c:\program files (x86)\AVG Secure Search\lip.exe

c:\program files (x86)\AVG Secure Search\note.gif

c:\program files (x86)\AVG Secure Search\PostInstall.exe

c:\program files (x86)\AVG Secure Search\PostInstaller.ini

c:\program files (x86)\AVG Secure Search\radio\bg.gif

c:\program files (x86)\AVG Secure Search\radio\play.gif

c:\program files (x86)\AVG Secure Search\radio\play_hover.gif

c:\program files (x86)\AVG Secure Search\radio\stop.gif

c:\program files (x86)\AVG Secure Search\radio\stop_hover.gif

c:\program files (x86)\AVG Secure Search\radio\v_minus.gif

c:\program files (x86)\AVG Secure Search\radio\v_minus_1.gif

c:\program files (x86)\AVG Secure Search\radio\v_plus.gif

c:\program files (x86)\AVG Secure Search\radio\v_plus_1.gif

c:\program files (x86)\AVG Secure Search\radio\vol_line_emp.gif

c:\program files (x86)\AVG Secure Search\radio\vol_line_full.gif

c:\program files (x86)\AVG Secure Search\radio\vol_line_half.gif

c:\program files (x86)\AVG Secure Search\remote_configuration.xml

c:\program files (x86)\AVG Secure Search\roc_nt.exe

c:\program files (x86)\AVG Secure Search\ROC_ROC_NT.exe

c:\program files (x86)\AVG Secure Search\search.gif

c:\program files (x86)\AVG Secure Search\SecuredSearch.gif

c:\program files (x86)\AVG Secure Search\setup.bmp

c:\program files (x86)\AVG Secure Search\speed-test.gif

c:\program files (x86)\AVG Secure Search\surf-with-caution18.gif

c:\program files (x86)\AVG Secure Search\toolbar.zip

c:\program files (x86)\AVG Secure Search\Uninstall.exe

c:\program files (x86)\AVG Secure Search\uninstall.gif

c:\program files (x86)\AVG Secure Search\updating18.gif

c:\program files (x86)\AVG Secure Search\vprot.exe

c:\program files (x86)\AVG Secure Search\weather.gif

c:\program files (x86)\AVG Secure Search\windows.gif

c:\program files (x86)\Common Files\AVG Secure Search

c:\program files (x86)\Common Files\AVG Secure Search\CommonInstaller\12.2.6\CommonInstaller.exe

c:\program files (x86)\Common Files\AVG Secure Search\DNTInstaller\12.2.6\avgdttbx.dll

c:\program files (x86)\Common Files\AVG Secure Search\DriverInstaller\12.2.6\DriverInstaller.exe

c:\program files (x86)\Common Files\AVG Secure Search\InstalledProducts.ini

c:\program files (x86)\Common Files\AVG Secure Search\ScriptHelperInstaller\12.2.6\ScriptHelper.exe

c:\program files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\12.2.6\npsitesafety.dll

c:\program files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\12.2.6\SiteSafety.dll

c:\program files (x86)\Common Files\AVG Secure Search\ToolBandTlb\12.2.6\toolband

c:\program files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\12.2.6\ViProtocol.dll

c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe

c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\12.2.6\UpdaterConfig.ini

c:\programdata\AVG Secure Search

c:\programdata\AVG Secure Search\12.2.5.34\chrome.manifest

c:\programdata\AVG Secure Search\12.2.5.34\chrome\avg.jar

c:\programdata\AVG Secure Search\12.2.5.34\components\avg-dnt-policy.js

c:\programdata\AVG Secure Search\12.2.5.34\components\toolbarhomeApi.js

c:\programdata\AVG Secure Search\12.2.5.34\icon.png

c:\programdata\AVG Secure Search\12.2.5.34\install.rdf

c:\programdata\AVG Secure Search\12.2.5.34\locale\en-US\global.dtd

c:\programdata\AVG Secure Search\12.2.5.34\locale\en-US\global.properties

c:\programdata\AVG Secure Search\12.2.5.34\modules\avg-dnt-adapter.js

c:\programdata\AVG Secure Search\12.2.5.34\modules\avg.xml

c:\programdata\AVG Secure Search\12.2.5.34\modules\avgJsm.js

c:\programdata\AVG Secure Search\12.2.5.34\modules\Bindings.xml

c:\programdata\AVG Secure Search\12.2.5.34\modules\configuration.js

c:\programdata\AVG Secure Search\12.2.5.34\modules\configuration_0.css

c:\programdata\AVG Secure Search\12.2.5.34\modules\configuration_0.xul

c:\programdata\AVG Secure Search\12.2.5.34\modules\HistoryCleaner.js

c:\programdata\AVG Secure Search\12.2.5.34\modules\IOJsm.js

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\cs\global.dtd

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\cs\global.properties

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\da\global.dtd

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\da\global.properties

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\de\global.dtd

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\de\global.properties

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\en\global.dtd

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\en\global.properties

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\es-es\global.dtd

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\es-es\global.properties

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\es\global.dtd

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\es\global.properties

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\fr\global.dtd

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\fr\global.properties

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\hu\global.dtd

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\hu\global.properties

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\id\global.dtd

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\id\global.properties

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\it\global.dtd

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\it\global.properties

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\ja\global.dtd

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\ja\global.properties

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\ko\global.dtd

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\ko\global.properties

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\ms\global.dtd

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\ms\global.properties

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\nl\global.dtd

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\nl\global.properties

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\pl\global.dtd

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\pl\global.properties

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\pt-br\global.dtd

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\pt-br\global.properties

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\pt\global.dtd

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\pt\global.properties

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\ru\global.dtd

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\ru\global.properties

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\sk\global.dtd

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\sk\global.properties

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\sr\global.dtd

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\sr\global.properties

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\tr\global.dtd

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\tr\global.properties

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\zh-cn\global.dtd

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\zh-cn\global.properties

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\zh-tw\global.dtd

c:\programdata\AVG Secure Search\12.2.5.34\modules\locale\zh-tw\global.properties

c:\programdata\AVG Secure Search\12.2.5.34\modules\Preferences.js

c:\programdata\AVG Secure Search\12.2.5.34\modules\propertiesJsm.js

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\about.png

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\active-threats18.png

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\ajax-loader.gif

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\calc.png

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\CleanHistory.png

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\close.png

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\current.png

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\currently-safe18.png

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\dnt.png

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\Facebook.gif

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\feedback.png

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\feedicon.png

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\help.png

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\icon_search.png

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\icon18.png

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\information-24.png

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\labs.png

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\loader.gif

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\note.png

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\questionmarkIcon.png

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\search.png

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\SecuredSearch.png

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\speed-test.png

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\surf-with-caution18.png

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\uninstall.png

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\updating18.png

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\weather.gif

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\window-close.png

c:\programdata\AVG Secure Search\12.2.5.34\modules\skin\windows.png

c:\programdata\AVG Secure Search\ChromeExt\12.2.5.34\avg.crx

c:\users\Bert\AppData\Local\AVG Secure Search

c:\users\Bert\AppData\Local\AVG Secure Search\DNT\dt.dat

c:\users\Bert\AppData\Local\AVG Secure Search\SiteSafety\l_2012_09_30_04_21_44.db

c:\users\Gast\AppData\Local\AVG Secure Search

c:\users\Gast\AppData\Local\AVG Secure Search\DNT\dt.dat

c:\users\Hans\AppData\Local\AVG Secure Search

c:\users\Hans\AppData\Local\AVG Secure Search\DNT\dt.dat

c:\users\Hans\AppData\Local\AVG Secure Search\SiteSafety\l_2012_10_05_05_29_49.db

c:\users\Hans\AppData\Local\AVG Secure Search\SiteSafety\l_2012_10_07_12_33_36.db

c:\users\Mattijs\AppData\Local\AVG Secure Search

c:\users\Mattijs\AppData\Local\AVG Secure Search\DNT\dt.dat

c:\users\Mattijs\AppData\Local\AVG Secure Search\SiteSafety\l_2012_10_02_07_38_08.db

c:\users\Mattijs\AppData\Local\AVG Secure Search\SiteSafety\l_2012_10_06_08_56_56.db

c:\windows\system32\drivers\avgtpx64.sys

.

.

((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

-------\Legacy_AVGTP

-------\Service_avgtp

-------\Service_vToolbarUpdater12.2.6

.

.

(((((((((((((((((((( Bestanden Gemaakt van 2012-09-07 to 2012-10-07 ))))))))))))))))))))))))))))))

.

.

2012-10-07 07:48 . 2012-10-07 07:48 -------- d-----w- c:\users\Mattijs\AppData\Local\temp

2012-10-07 07:48 . 2012-10-07 07:48 -------- d-----w- c:\users\Gast\AppData\Local\temp

2012-10-07 07:48 . 2012-10-07 07:48 -------- d-----w- c:\users\Default\AppData\Local\temp

2012-10-07 07:48 . 2012-10-07 07:48 -------- d-----w- c:\users\Bram\AppData\Local\temp

2012-10-07 07:48 . 2012-10-07 07:48 -------- d-----w- c:\users\Bert\AppData\Local\temp

2012-10-07 06:27 . 2012-10-07 06:27 -------- d-----w- c:\users\Bram\AppData\Local\AVG Secure Search

2012-10-06 08:30 . 2012-08-21 21:01 245760 ----a-w- c:\windows\system32\OxpsConverter.exe

2012-10-05 13:19 . 2012-10-05 13:19 -------- d-----w- c:\users\Hans\AppData\Roaming\Malwarebytes

2012-10-05 13:18 . 2012-10-05 13:18 -------- d-----w- c:\programdata\Malwarebytes

2012-09-30 12:08 . 2012-09-30 12:08 -------- d-----w- c:\users\Bert\AppData\Local\Adobe

2012-09-29 18:38 . 2012-09-29 18:38 -------- d-----w- c:\program files (x86)\Chilkat Software Inc

2012-09-29 12:49 . 2012-09-29 12:51 -------- d-----w- c:\users\Hans\AppData\Roaming\pdfforge

2012-09-29 12:49 . 2012-07-29 11:59 96768 ----a-w- c:\windows\system32\pdfcmon.dll

2012-09-29 12:49 . 2012-05-05 09:54 137000 ----a-w- c:\windows\SysWow64\MSMAPI32.OCX

2012-09-29 12:49 . 2012-09-29 12:49 -------- d-----w- c:\program files (x86)\PDFCreator

2012-09-29 12:49 . 2012-05-05 09:54 23552 ----a-w- c:\windows\SysWow64\MSMPIDE.DLL

2012-09-29 12:48 . 2012-09-29 12:48 -------- d--h--w- c:\programdata\Common Files

2012-09-28 04:09 . 2012-04-20 14:40 196440 ----a-w- c:\windows\system32\drivers\HipShieldK.sys

2012-09-22 07:18 . 2012-09-22 07:18 -------- d-----w- c:\users\Bram\AppData\Local\Adobe

2012-09-16 13:27 . 2012-09-16 13:27 -------- d-----w- c:\program files\CCleaner

2012-09-16 09:39 . 2012-09-16 09:41 -------- d-----w- c:\users\Gast\AppData\Roaming\vlc

2012-09-16 09:11 . 2012-09-16 09:11 -------- d-----w- c:\users\Gast\AppData\Roaming\DivX

2012-09-16 09:09 . 2012-09-16 09:09 -------- d-----w- c:\users\Gast\AppData\Roaming\AVS4YOU

2012-09-15 12:18 . 2012-09-15 12:18 -------- d-----w- c:\program files (x86)\Common Files\McAfee

2012-09-15 12:18 . 2012-06-22 05:37 10288 ----a-w- c:\windows\system32\drivers\mfeclnk.sys

2012-09-15 12:18 . 2012-06-22 05:40 69672 ----a-w- c:\windows\system32\drivers\cfwids.sys

2012-09-15 12:18 . 2012-06-22 05:36 106112 ----a-w- c:\windows\system32\drivers\mferkdet.sys

2012-09-15 12:18 . 2012-06-22 05:35 513456 ----a-w- c:\windows\system32\drivers\mfefirek.sys

2012-09-15 12:18 . 2012-06-22 05:34 300392 ----a-w- c:\windows\system32\drivers\mfeavfk.sys

2012-09-15 12:18 . 2012-09-28 20:59 -------- d-----w- c:\program files\Common Files\McAfee

2012-09-15 12:18 . 2012-09-15 12:23 -------- d-----w- c:\program files\McAfee

2012-09-15 12:18 . 2012-09-29 08:10 -------- d-----w- c:\program files (x86)\McAfee

2012-09-15 12:12 . 2012-06-22 05:38 177144 ----a-w- c:\windows\system32\mfevtps.exe

2012-09-15 12:12 . 2012-09-28 04:10 -------- d-----w- c:\programdata\McAfee

2012-09-12 07:22 . 2012-08-22 18:12 950128 ----a-w- c:\windows\system32\drivers\ndis.sys

2012-09-12 07:22 . 2012-07-04 20:26 41472 ----a-w- c:\windows\system32\drivers\RNDISMP.sys

2012-09-12 07:22 . 2012-08-02 17:58 574464 ----a-w- c:\windows\system32\d3d10level9.dll

2012-09-12 07:22 . 2012-08-02 16:57 490496 ----a-w- c:\windows\SysWow64\d3d10level9.dll

2012-09-12 07:22 . 2012-08-22 18:12 1913200 ----a-w- c:\windows\system32\drivers\tcpip.sys

2012-09-12 07:22 . 2012-08-22 18:12 376688 ----a-w- c:\windows\system32\drivers\netio.sys

2012-09-12 07:22 . 2012-08-22 18:12 288624 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS

.

.

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-09-12 13:42 . 2012-07-13 09:52 64462936 ----a-w- c:\windows\system32\MRT.exe

2012-08-26 11:12 . 2012-07-08 16:27 73416 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2012-08-26 11:12 . 2012-07-08 16:27 696520 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe

2012-08-24 18:32 . 2012-08-24 18:32 98304 ----a-w- c:\windows\SysWow64\CmdLineExt.dll

2012-07-31 17:44 . 2012-07-31 17:44 268784 ----a-w- c:\windows\system32\javaws.exe

2012-07-31 17:44 . 2012-07-31 17:44 955888 ----a-w- c:\windows\system32\npDeployJava1.dll

2012-07-31 17:44 . 2012-07-31 17:44 189424 ----a-w- c:\windows\system32\javaw.exe

2012-07-31 17:44 . 2012-07-31 17:44 188912 ----a-w- c:\windows\system32\java.exe

2012-07-31 17:44 . 2012-07-31 17:44 839152 ----a-w- c:\windows\system32\deployJava1.dll

2012-07-18 18:15 . 2012-08-16 13:26 3148800 ----a-w- c:\windows\system32\win32k.sys

2012-07-13 09:51 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll

2012-07-13 09:51 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll

2012-07-12 08:58 . 2012-07-08 18:46 211144 ----a-w- c:\windows\SysWow64\BBLTmpl2.ocx

.

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"ISUSPM"="c:\programdata\FLEXnet\Connect\11\ISUSPM.exe" [2009-05-05 222496]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-12-17 98304]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]

"IndexSearch"="c:\program files (x86)\Dell Printers\paperport\PaperPort\IndexSearch.exe" [2010-03-16 46368]

"PaperPort PTD"="c:\program files (x86)\Dell Printers\paperport\PaperPort\pptd40nt.exe" [2010-03-16 29984]

"PDFHook"="c:\program files (x86)\Dell Printers\paperport\PDFViewer\pdfpro5hook.exe" [2010-03-05 636192]

"PDF5 Registry Controller"="c:\program files (x86)\Dell Printers\paperport\PDFViewer\RegistryController.exe" [2010-03-05 62752]

"Desktop Disc Tool"="c:\program files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe" [2009-10-15 498160]

"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-20 59240]

"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2012-04-18 421888]

"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376]

"mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2012-09-12 1535112]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

SetPoint.lnk - c:\program files\SetPoint\SetPoint.exe [2012-7-13 1207312]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"LoadAppInit_DLLs"=0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"aux"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

@=""

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R2 gupdate;Google Update-service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-07-13 136176]

R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-26 250568]

R3 gupdatem;Google Update-service (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-07-13 136176]

R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [2012-06-22 106112]

R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2009-09-21 315664]

R3 NtrigDigitizerUSBLowerFilter;N-trig HID Tablet Digitizer KMDF Filter Driver;c:\windows\system32\DRIVERS\NtrigDigitizerUSBLowerFilter.sys [x]

R3 PCDSRVC{1E208CE0-FB7451FF-06020101}_0;PCDSRVC{1E208CE0-FB7451FF-06020101}_0 - PCDR Kernel Mode Service Helper Driver;c:\program files\dell support center\pcdsrvc_x64.pkms [2012-04-10 25072]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]

R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2012-07-09 1255736]

S0 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys [2012-06-22 335784]

S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2011-11-29 55856]

S1 A2DDA;A2 Direct Disk Access Support Driver;c:\users\Hans\Desktop\Get rid of virus\EmsisoftEmergencyKit\Run\a2ddax64.sys [2012-09-16 23208]

S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]

S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]

S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_0057cbec48a2d7cf\AESTSr64.exe [2009-03-03 89600]

S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-12-17 202752]

S2 DLSDB;Dell Printer Status Database;c:\program files\Dell Printers\Additional Color Laser Software\Status Monitor\DLSDBNT.EXE [2010-06-01 344384]

S2 DMAgent;Red Bend-service voor apparaatbeheer voor Intel® PROSet/Wireless WiMAX-software;c:\program files\Intel\WiMAX\Bin\DMAgent.exe [2009-09-15 403456]

S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2012-08-31 201304]

S2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2012-08-31 201304]

S2 McNaiAnn;McAfee VirusScan Announcer;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2012-08-31 201304]

S2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe [2012-06-22 218320]

S2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [2012-06-22 177144]

S2 PDFProFiltSrvPP;PDFProFiltSrvPP;c:\program files (x86)\Dell Printers\paperport\PaperPort\PDFProFiltSrvPP.exe [2010-03-16 144672]

S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-08-31 2754984]

S2 WiMAXAppSrv;Intel® PROSet/Wireless WiMAX-service;c:\program files\Intel\WiMAX\Bin\AppSrv.exe [2009-09-15 907264]

S3 bpenum;bpenum;c:\windows\system32\DRIVERS\bpenum.sys [2009-09-15 71168]

S3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [2012-06-22 69672]

S3 HECIx64;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]

S3 HipShieldK;McAfee Inc. HipShieldK;c:\windows\system32\drivers\HipShieldK.sys [2012-04-20 196440]

S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [2010-02-26 158976]

S3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [2012-06-22 513456]

S3 NETw5s64;Intel® Wireless WiFi Link adapter stuurprogramma onder Windows 7 64 Bit;c:\windows\system32\DRIVERS\NETw5s64.sys [2009-09-15 6952960]

S3 O2MDGRDR;O2MDGRDR;c:\windows\system32\DRIVERS\o2mdgx64.sys [2009-11-13 74272]

S3 RTL8167;Realtek 8167 NT-stuurprogramma;c:\windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]

S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]

.

.

--- Andere Services/Drivers In Geheugen ---

.

*Deregistered* - mfeavfk01

.

Inhoud van de 'Gedeelde Taken' map

.

2012-10-07 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-08 11:12]

.

2012-10-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-07-13 11:17]

.

2012-10-07 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-07-13 11:17]

.

2012-09-09 c:\windows\Tasks\PCDoctorBackgroundMonitorTask.job

- c:\program files\Dell Support Center\uaclauncher.exe [2012-05-22 07:16]

.

2012-10-07 c:\windows\Tasks\SystemToolsDailyTest.job

- c:\program files\Dell Support Center\uaclauncher.exe [2012-05-22 07:16]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2010-01-21 487424]

"IntelWireless"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2009-09-21 1926928]

"IntelWirelessWiMAX"="c:\program files\Intel\WiMAX\Bin\WiMAXCU.exe" [2009-09-16 1437696]

"NtrigApplet"="c:\program files\N-trig\N-trig Software Bundle\NtrigApplet.exe" [2009-10-27 2322432]

"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [bU]

"DLPSP"="c:\program files\Dell Printers\Additional Color Laser Software\Status Monitor\DLPSP.EXE" [2010-06-01 913216]

"DLUPDR"="c:\program files\Dell Printers\Additional Color Laser Software\Updater\DLUPDR.EXE" [2010-06-01 587584]

"DLQLU"="c:\program files\Dell Printers\Additional Color Laser Software\Launcher\DLQLU.EXE" [2010-06-01 1284416]

"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2009-06-17 130576]

.

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler]

"{1984DD45-52CF-49cd-AB77-18F378FEA264}"= "c:\program files (x86)\Stardock\Fences\FencesMenu64.dll" [2010-06-22 253288]

.

------- Bijkomende Scan -------

.

uLocal Page = c:\windows\system32\blank.htm

mLocal Page = c:\windows\SysWOW64\blank.htm

uSearchURL,(Default) = hxxp://search.yahoo.com/search?fr=mcafee&p=%s%s

IE: E&xporteren naar Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000

TCP: DhcpNameServer = 195.130.130.5 195.130.131.5

Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} -

.

- - - - ORPHANS VERWIJDERD - - - -

.

BHO-{95B7759C-8C7F-4BF1-B163-73684A933233} - c:\program files (x86)\AVG Secure Search\12.2.5.34\AVG Secure Search_toolbar.dll

AddRemove-AVG Secure Search - c:\program files (x86)\AVG Secure Search\UNINSTALL.exe

AddRemove-Savings Sidekick - c:\program files (x86)\Savings Sidekick\Uninstall.exe

.

.

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PCDSRVC{1E208CE0-FB7451FF-06020101}_0]

"ImagePath"="\??\c:\program files\dell support center\pcdsrvc_x64.pkms"

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_265_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_265_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_265_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_265_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_265.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]

@="?????????????????? v1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]

@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]

@="?????????????????? v2"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]

@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]

"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,

00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

------------------------ Andere Aktieve Processen ------------------------

.

c:\windows\system32\DRIVERS\o2flash.exe

c:\windows\SysWOW64\rundll32.exe

c:\program files (x86)\TeamViewer\Version7\TeamViewer.exe

c:\program files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe

c:\program files (x86)\TeamViewer\Version7\tv_w32.exe

.

**************************************************************************

.

Voltooingstijd: 2012-10-07 10:09:13 - machine werd herstart

ComboFix-quarantined-files.txt 2012-10-07 08:09

ComboFix2.txt 2012-10-06 18:30

.

Pre-Run: 447.325.028.352 bytes beschikbaar

Post-Run: 446.861.070.336 bytes beschikbaar

.

- - End Of File - - 2ABC73FB841617718565044692A96691

aangepast door habhab
Link naar reactie
Delen op andere sites
kape Grootmeester

kape

Geplaatst:
Geplaatst: (aangepast)

Het lijkt er sterk op dat de problemen binnengehaald zijn bij een download, maar achteraf is het moeilijk zeggen wat de exacte oorzaak is. In elk geval heeft McAfee hier niet adequaat op gereageerd, maar dat is niet alleen bij McAfee zo. Ook andere scanners laten al eens een poortje open om gelijkaardige besmettingen tot op de PC te laten doordringen.

Problemen van de baan, dan is het tijd voor de “grote schoonmaak” : verwijderen van gebruikte programma’s, een cleaning en het verwijderen van de besmette herstelpunten.

Verwijder Combofix: Start -> Uitvoeren/Zoekopdracht/Programma’s en bestanden zoeken en typ daar: ComboFix /Uninstall

Dit zal Combofix verwijderen + gerelateerde mappen en bestanden, herstelt de klokinstellingen opnieuw, verbergt de bestandsextensies, gaat verborgen bestanden en systeembestanden terug verbergen en maakt een nieuw herstelpunt.

Indien aanwezig mag je de map C:\Qoobox manueel verwijderen.

Download CCleaner.

Klik op “Download Latest Version” en dan start de download van CCleaner automatisch en gratis op.

Installeer het en start CCleaner op. Klik in de linkse kolom op “Cleaner”. Klik achtereenvolgens op ‘Analyseren’ en 'Schoonmaken'. Soms is 1 analyse niet voldoende. Deze procedure mag je herhalen tot de analyse geen fouten meer aangeeft. Klik vervolgens in de linkse kolom op “Register” en klik op ‘Scan naar problemen”. Als er fouten gevonden worden klik je op ”Herstel geselecteerde problemen” en ”OK”. Dan krijg je de vraag om een back-up te maken. Klik op “JA”. Kies dan “Herstel alle geselecteerde fouten”. Sluit hierna CCleaner terug af.

Wil je dit uitgebreid in beeld bekijken, klik dan hier voor de handleiding.

Het is aangewezen om de bestaande herstelpunten te verwijderen (daar zitten besmette herstelpunten tussen die je eventueel zou kunnen terugzetten). In Windows 7

  • via Start -> Configuratiescherm -> Systeem & Beveiliging -> Systeem -> Systeembeveiliging -> schakel nu systeemherstel uit door de gewenste schijf te selecteren en op "configureren" te klikken.
  • Klik nu op "verwijderen" om alle herstelpunten te verwijderen.
  • Klik op "Toepassen" en "OK".
  • Herstart nu de PC.

Indien dit allemaal probleemloos verlopen is, mag je hieronder op "markeer als opgelost" tokkelen !

aangepast door kape
Link naar reactie
Delen op andere sites
Gast
Dit topic is nu gesloten voor nieuwe reacties.
 Delen
Ga naar topic overzicht
Logo

OVER ONS

PC Helpforum helpt GRATIS computergebruikers sinds juli 2006. Ons team geeft via het forum professioneel antwoord op uw vragen en probeert uw pc problemen zo snel mogelijk op te lossen. Word lid vandaag, plaats je vraag online en het PC Helpforum-team helpt u graag verder!

SITEMAP

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.