kan niet inloggen op bepaalde websites, kan wel wabpagina zien

tender · 21 augustus 2013

Sinds eneige tijd kon ik bepaalde websites niet meer openen, ,dat kan nu weer wel na het verwijderen van een trojan.

Nu kan ik al terug op de aanlogpaginas, maar verder raak ik nog niet , ik kan bvb mijn login en of paswoord niet ingeven

wie helpt?

hierbij alvast men hijackthis

Logfile of random's system information tool 1.08 (written by random/random)

Run by Herman at 2013-08-21 11:53:29

Microsoft Windows 7 Home Premium Service Pack 1

System drive C: has 1800 GB (95%) free of 1888 GB

Total RAM: 8169 MB (68% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 11:53:35, on 21/08/2013

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v9.00 (9.00.8112.16502)

Boot mode: Normal

Running processes:

C:\Program Files (x86)\Norton Management\Engine\3.2.0.19\ccSvcHst.exe

C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe

C:\Users\Herman\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe

C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe

C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin

C:\Program Files (x86)\Common Files\Isabel\isa_kbc_certupdate.exe

C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE

C:\Program Files (x86)\Windows Live\Mail\wlmail.exe

C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

C:\Users\Herman\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4V1Q7HOH\RSIT-1.06.exe

C:\Program Files (x86)\trend micro\Herman.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

F2 - REG:system.ini: UserInit=userinit.exe,

O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\coIEPlg.dll

O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\IPS\IPSBHO.DLL

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O3 - Toolbar: Wincore Mediabar - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\PROGRA~2\BEARSH~1\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll

O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\coIEPlg.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O4 - HKLM\..\Run: [MobileBroadband] C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe /silent

O4 - HKLM\..\Run: [isaKbcCertUpdate] C:\Program Files (x86)\Common Files\Isabel\isa_kbc_certupdate.exe

O4 - HKLM\..\Run: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [beid] "C:\Program Files (x86)\Belgium Identity Card\beid35gui.exe" /startup

O4 - HKCU\..\Run: [skyDrive] "C:\Users\Herman\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background

O4 - HKCU\..\Run: [N0MxRDQ1QkM2OTczRDdEQU] C:\Users\Herman\C_2get.exe

O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\Run: [Norton Download Manager{NSME22-B22-4abb-B07C-C084B04B4F12}] C:\Program Files (x86)\Norton Management\Engine\3.1.0.24\ccSvcHst.exe /m (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [Norton Download Manager{NSME22-B22-4abb-B07C-C084B04B4F12}] C:\Program Files (x86)\Norton Management\Engine\3.1.0.24\ccSvcHst.exe /m (User 'Default user')

O4 - Startup: OpenOffice.org 3.4.1.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe

O4 - Global Startup: WDDMStatus.lnk = C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe

O4 - Global Startup: WDSmartWare.lnk = C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe

O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O15 - Trusted Zone: http://cbc-pdf.cbc.be

O15 - Trusted Zone: CBC

O15 - Trusted Zone: http://www.cbccorporate.be

O15 - Trusted Zone: ?SOB - Úvodní stránka

O15 - Trusted Zone: http://www.csob.sk

O15 - Trusted Zone: http://col.isabel.be

O15 - Trusted Zone: http://www.isabel.be

O15 - Trusted Zone: http://www.beta.isabel.be

O15 - Trusted Zone: http://col.isabel.eu

O15 - Trusted Zone: http://www.isabel.eu

O15 - Trusted Zone: http://www.beta.isabel.eu

O15 - Trusted Zone: http://kbc-pdf.kbc.be

O15 - Trusted Zone: KBC

O15 - Trusted Zone: *.kbc.be

O15 - Trusted Zone: KBC Asset Management

O15 - Trusted Zone: http://www.kbcam.com

O15 - Trusted Zone: http://www.kbcbankingforbusiness.com

O15 - Trusted Zone: http://www.kbccorporates.com

O15 - Trusted Zone: http://www.kbcfi.com

O15 - Trusted Zone: *.kbcgroup.eu

O15 - Trusted Zone: http://www.kbcmerchantbanking.com

O15 - Trusted Zone: http://www.kh.hu

O15 - Trusted Zone: http://cbc-pdf.cbc.be (HKLM)

O15 - Trusted Zone: CBC (HKLM)

O15 - Trusted Zone: http://www.cbccorporate.be (HKLM)

O15 - Trusted Zone: ?SOB - Úvodní stránka (HKLM)

O15 - Trusted Zone: http://www.csob.sk (HKLM)

O15 - Trusted Zone: http://col.isabel.be (HKLM)

O15 - Trusted Zone: http://www.isabel.be (HKLM)

O15 - Trusted Zone: http://www.beta.isabel.be (HKLM)

O15 - Trusted Zone: http://col.isabel.eu (HKLM)

O15 - Trusted Zone: http://www.isabel.eu (HKLM)

O15 - Trusted Zone: http://www.beta.isabel.eu (HKLM)

O15 - Trusted Zone: http://kbc-pdf.kbc.be (HKLM)

O15 - Trusted Zone: KBC (HKLM)

O15 - Trusted Zone: KBC Asset Management (HKLM)

O15 - Trusted Zone: http://www.kbcam.com (HKLM)

O15 - Trusted Zone: http://www.kbcbankingforbusiness.com (HKLM)

O15 - Trusted Zone: http://www.kbccorporates.com (HKLM)

O15 - Trusted Zone: http://www.kbcfi.com (HKLM)

O15 - Trusted Zone: http://www.kbcmerchantbanking.com (HKLM)

O15 - Trusted Zone: http://www.kh.hu (HKLM)

O17 - HKLM\System\CCS\Services\Tcpip\..\{DCE1EC11-C0B7-45EF-A596-54ED4F206A04}: NameServer = 8.8.8.8,4.4.4.4

O17 - HKLM\System\CCS\Services\Tcpip\..\{F19D85DB-29B2-46E2-B560-4B3A301CA233}: NameServer = 81.169.62.171 81.169.62.171

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\Skype4COM.dll

O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)

O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)

O23 - Service: @C:\Program Files\LiveSafer\LiveSaferRes.dll,-149 (LiveSafer) - LiveSafer B.V. - C:\Program Files\LiveSafer\LiveSafer.exe

O23 - Service: Norton Management (MCLIENT) - Symantec Corporation - C:\Program Files (x86)\Norton Management\Engine\3.2.0.19\ccSvcHst.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)

O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)

O23 - Service: Norton PC Checkup Application Launcher - Symantec Corporation - C:\Program Files (x86)\Norton PC Checkup 3.0\SymcPCCULaunchSvc.exe

O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)

O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)

O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)

O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)

O23 - Service: Vodafone Mobile Broadband-service (VmbService) - Vodafone - C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)

O23 - Service: WD SmartWare Drive Manager Service (WDDMService) - WDC - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe

O23 - Service: WD SmartWare Background Service (WDSmartWareBackgroundService) - Memeo - C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--

End of file - 12974 bytes

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job

C:\windows\tasks\AutoKMS.job

C:\windows\tasks\DealPlyLiveUpdateTaskMachineUA.job

C:\windows\tasks\GoogleUpdateTaskMachineCore.job

C:\windows\tasks\GoogleUpdateTaskMachineUA.job

C:\windows\tasks\OptimizerPro1UpdaterTask{4BE798C5-4D23-4237-83CD-B1862C20F0C0}.job

C:\windows\tasks\schedule!451760640.job

C:\windows\tasks\SpeedyPC Pro.job

C:\windows\tasks\Spybot - Search & Destroy - Scheduled Task.job

C:\windows\tasks\Spybot - Search & Destroy Updater - Scheduled Task.job

C:\windows\tasks\WxDFastUpdaterTask{075D5BE4-C846-4F2F-B710-FC4C1F75FF29}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]

Norton Identity Protection - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\coIEPlg.dll [2013-05-31 509776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]

Norton Vulnerability Protection - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\IPS\IPSBHO.DLL [2013-04-09 387040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]

Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2013-08-19 192592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - Wincore Mediabar - C:\PROGRA~2\BEARSH~1\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll [2011-12-27 87480]

{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\coIEPlg.dll [2013-05-31 509776]

{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2013-08-19 192592]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"MobileBroadband"=C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe [2010-06-25 253952]

"IsaKbcCertUpdate"=C:\Program Files (x86)\Common Files\Isabel\isa_kbc_certupdate.exe [2012-10-15 1085528]

"CanonSolutionMenuEx"=C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [2010-04-02 1185112]

"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]

"beid"=C:\Program Files (x86)\Belgium Identity Card\beid35gui.exe /startup []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"SkyDrive"=C:\Users\Herman\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [2013-08-16 257136]

"N0MxRDQ1QkM2OTczRDdEQU"=C:\Users\Herman\C_2get.exe []

"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

WDDMStatus.lnk - C:\Program Files (x86)\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe

WDSmartWare.lnk - C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe

C:\Users\Herman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

OpenOffice.org 3.4.1.lnk - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]

"SecurityProviders"=credssp.dll, schannel.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"ConsentPromptBehaviorAdmin"=5

"ConsentPromptBehaviorUser"=3

"EnableUIADesktopToggle"=0

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoInstrumentation"=1

"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoActiveDesktop"=1

"NoActiveDesktopChanges"=1

"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2013-08-21 11:53:29 ----D---- C:\rsit

2013-08-21 11:53:29 ----D---- C:\Program Files (x86)\trend micro

2013-08-20 19:50:22 ----D---- C:\Users\Herman\AppData\Roaming\Malwarebytes

2013-08-20 19:50:13 ----D---- C:\ProgramData\Malwarebytes

2013-08-20 19:50:12 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-08-20 19:38:20 ----D---- C:\Users\Herman\AppData\Roaming\TeamViewer

2013-08-20 18:08:28 ----D---- C:\ProgramData\Mozilla

2013-08-20 14:11:49 ----D---- C:\Program Files (x86)\Advanced Port Scanner

2013-08-18 11:24:42 ----D---- C:\windows\CD95F661A5C444F5A6AAECDD91C240D5.TMP

2013-08-18 10:56:10 ----A---- C:\windows\SysWOW64\ntvdm64.dll

2013-08-18 10:56:10 ----A---- C:\windows\SysWOW64\ntoskrnl.exe

2013-08-18 10:56:10 ----A---- C:\windows\SysWOW64\ntkrnlpa.exe

2013-08-18 10:56:10 ----A---- C:\windows\SysWOW64\ntdll.dll

2013-08-18 10:56:09 ----A---- C:\windows\SysWOW64\wow32.dll

2013-08-18 10:56:09 ----A---- C:\windows\SysWOW64\user.exe

2013-08-18 10:56:09 ----A---- C:\windows\SysWOW64\setup16.exe

2013-08-18 10:56:09 ----A---- C:\windows\SysWOW64\instnm.exe

2013-08-17 18:24:49 ----D---- C:\Users\Herman\AppData\Roaming\TamoSoft

2013-08-17 18:24:42 ----D---- C:\Program Files (x86)\Essential NetTools

2013-08-17 18:24:12 ----D---- C:\Program Files (x86)\MyPC Backup

2013-08-17 18:23:38 ----D---- C:\Users\Herman\AppData\Roaming\DefaultTab

2013-08-16 19:28:17 ----A---- C:\windows\SysWOW64\vbscript.dll

2013-08-16 19:28:17 ----A---- C:\windows\SysWOW64\mshtmled.dll

2013-08-16 19:28:17 ----A---- C:\windows\SysWOW64\ieui.dll

2013-08-16 19:28:16 ----A---- C:\windows\SysWOW64\wininet.dll

2013-08-16 19:28:16 ----A---- C:\windows\SysWOW64\urlmon.dll

2013-08-16 19:28:16 ----A---- C:\windows\SysWOW64\url.dll

2013-08-16 19:28:16 ----A---- C:\windows\SysWOW64\msfeeds.dll

2013-08-16 19:28:16 ----A---- C:\windows\SysWOW64\ieUnatt.exe

2013-08-16 19:28:15 ----A---- C:\windows\SysWOW64\jsproxy.dll

2013-08-16 19:28:15 ----A---- C:\windows\SysWOW64\jscript9.dll

2013-08-16 19:28:15 ----A---- C:\windows\SysWOW64\jscript.dll

2013-08-16 19:28:15 ----A---- C:\windows\SysWOW64\iertutil.dll

2013-08-16 19:28:14 ----A---- C:\windows\SysWOW64\mshtml.dll

2013-08-16 19:28:13 ----A---- C:\windows\SysWOW64\ieframe.dll

2013-08-16 12:25:18 ----A---- C:\windows\SysWOW64\wintrust.dll

2013-08-16 12:25:18 ----A---- C:\windows\SysWOW64\cryptsvc.dll

2013-08-16 12:25:18 ----A---- C:\windows\SysWOW64\crypt32.dll

2013-08-16 12:25:17 ----A---- C:\windows\SysWOW64\cryptnet.dll

2013-08-16 12:24:35 ----A---- C:\windows\SysWOW64\tzres.dll

2013-08-16 12:24:27 ----A---- C:\windows\SysWOW64\WMVDECOD.DLL

2013-08-16 12:24:26 ----A---- C:\windows\SysWOW64\rpcrt4.dll

2013-08-08 13:35:31 ----A---- C:\windows\SysWOW64\xactengine2_8.dll

2013-08-08 13:35:31 ----A---- C:\windows\SysWOW64\x3daudio1_2.dll

2013-08-08 13:35:31 ----A---- C:\windows\SysWOW64\d3dx10_34.dll

2013-08-08 13:35:30 ----A---- C:\windows\SysWOW64\xinput1_3.dll

2013-08-08 13:35:30 ----A---- C:\windows\SysWOW64\xactengine2_7.dll

2013-08-08 13:35:30 ----A---- C:\windows\SysWOW64\d3dx9_34.dll

2013-08-08 13:35:30 ----A---- C:\windows\SysWOW64\d3dx9_33.dll

2013-08-08 13:35:30 ----A---- C:\windows\SysWOW64\d3dx10_33.dll

2013-08-08 13:35:30 ----A---- C:\windows\SysWOW64\D3DCompiler_34.dll

2013-08-08 13:35:30 ----A---- C:\windows\SysWOW64\D3DCompiler_33.dll

2013-08-08 13:35:29 ----A---- C:\windows\SysWOW64\xactengine2_6.dll

2013-08-08 13:35:29 ----A---- C:\windows\SysWOW64\xactengine2_5.dll

2013-08-08 13:35:29 ----A---- C:\windows\SysWOW64\d3dx10.dll

2013-08-08 13:35:28 ----A---- C:\windows\SysWOW64\xactengine2_4.dll

2013-08-08 13:35:28 ----A---- C:\windows\SysWOW64\x3daudio1_1.dll

2013-08-08 13:35:28 ----A---- C:\windows\SysWOW64\d3dx9_31.dll

2013-08-08 13:35:27 ----A---- C:\windows\SysWOW64\xinput1_2.dll

2013-08-08 13:35:27 ----A---- C:\windows\SysWOW64\xinput1_1.dll

2013-08-08 13:35:27 ----A---- C:\windows\SysWOW64\xactengine2_3.dll

2013-08-08 13:35:27 ----A---- C:\windows\SysWOW64\xactengine2_2.dll

2013-08-08 13:35:27 ----A---- C:\windows\SysWOW64\xactengine2_1.dll

2013-08-08 13:35:24 ----A---- C:\windows\SysWOW64\xactengine2_0.dll

2013-08-08 13:35:24 ----A---- C:\windows\SysWOW64\x3daudio1_0.dll

2013-08-08 13:35:24 ----A---- C:\windows\SysWOW64\d3dx9_30.dll

2013-08-08 13:35:24 ----A---- C:\windows\SysWOW64\d3dx9_29.dll

2013-08-08 13:35:24 ----A---- C:\windows\SysWOW64\d3dx9_28.dll

2013-08-08 13:35:24 ----A---- C:\windows\SysWOW64\d3dx9_27.dll

2013-08-08 13:35:23 ----A---- C:\windows\SysWOW64\d3dx9_26.dll

2013-08-08 13:35:23 ----A---- C:\windows\SysWOW64\d3dx9_25.dll

2013-08-08 13:35:23 ----A---- C:\windows\SysWOW64\d3dx9_24.dll

2013-08-08 13:35:04 ----A---- C:\windows\game.ini

2013-08-08 13:34:54 ----D---- C:\Program Files (x86)\Activision

2013-07-23 16:43:34 ----D---- C:\Program Files (x86)\Common Files\Canon_Inc_IC

2013-07-23 16:43:05 ----D---- C:\ProgramData\Canon_Inc_IC

======List of files/folders modified in the last 1 months======

2013-08-21 11:53:35 ----D---- C:\windows\Prefetch

2013-08-21 11:53:30 ----D---- C:\windows\Temp

2013-08-21 11:53:29 ----RD---- C:\Program Files (x86)

2013-08-21 11:39:45 ----D---- C:\ProgramData\LiveSafer

2013-08-21 10:42:58 ----SHD---- C:\System Volume Information

2013-08-21 10:40:33 ----D---- C:\windows\Tasks

2013-08-21 10:39:32 ----D---- C:\ProgramData\NVIDIA

2013-08-20 20:00:22 ----HD---- C:\ProgramData

2013-08-20 19:49:06 ----D---- C:\ProgramData\Spybot - Search & Destroy

2013-08-20 19:49:06 ----D---- C:\Program Files (x86)\Spybot - Search & Destroy

2013-08-20 19:48:08 ----D---- C:\Program Files (x86)\Mozilla Firefox

2013-08-20 19:14:01 ----SHD---- C:\windows\Installer

2013-08-20 19:14:01 ----SHD---- C:\Config.Msi

2013-08-20 18:06:25 ----D---- C:\Users\Herman\AppData\Roaming\Skype

2013-08-18 12:08:49 ----D---- C:\windows\winsxs

2013-08-18 12:05:51 ----D---- C:\windows\SysWOW64

2013-08-18 12:05:51 ----D---- C:\windows\System32

2013-08-18 12:05:50 ----D---- C:\windows\AppPatch

2013-08-18 11:28:35 ----D---- C:\Windows

2013-08-18 11:28:33 ----D---- C:\ProgramData\WinZip

2013-08-17 21:31:42 ----D---- C:\windows\rescache

2013-08-17 19:17:55 ----RSD---- C:\windows\assembly

2013-08-17 19:17:55 ----D---- C:\windows\Microsoft.NET

2013-08-17 18:23:48 ----D---- C:\windows\SysWOW64\GroupPolicy

2013-08-17 18:22:51 ----D---- C:\windows\Resources

2013-08-17 16:08:33 ----D---- C:\windows\SysWOW64\nl-NL

2013-08-17 16:08:32 ----D---- C:\Program Files (x86)\Internet Explorer

2013-08-17 16:08:31 ----D---- C:\windows\SysWOW64\migration

2013-08-16 19:36:43 ----D---- C:\windows\inf

2013-08-12 21:51:07 ----D---- C:\Users\Herman\AppData\Roaming\SoftGrid Client

2013-08-08 13:35:04 ----HD---- C:\Program Files (x86)\InstallShield Installation Information

2013-08-08 12:08:14 ----D---- C:\Program Files (x86)\Google

2013-08-07 21:37:20 ----RD---- C:\Program Files

2013-07-24 14:11:16 ----A---- C:\windows\SysWOW64\FlashPlayerApp.exe

2013-07-23 16:43:37 ----D---- C:\Program Files (x86)\Canon

2013-07-23 16:43:34 ----D---- C:\Program Files (x86)\Common Files

2013-07-23 16:43:22 ----D---- C:\Users\Herman\AppData\Roaming\Canon

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\windows\system32\drivers\pciide.sys []

R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys []

R0 SymDS;Symantec Data Store; C:\windows\system32\drivers\N360x64\1404000.028\SYMDS64.SYS []

R0 SymEFA;Symantec Extended File Attributes; C:\windows\system32\drivers\N360x64\1404000.028\SYMEFA64.SYS []

R1 BHDrvx64;BHDrvx64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\BASHDefs\20130715.001\BHDrvx64.sys [2013-05-31 1393240]

R1 ccSet_MCLIENT;Norton Management Settings Manager; C:\windows\system32\drivers\MCLIENTx64\0302000.013\ccSetx64.sys []

R1 ccSet_N360;Norton 360 Settings Manager; C:\windows\system32\drivers\N360x64\1404000.028\ccSetx64.sys []

R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\windows\system32\DRIVERS\dtsoftbus01.sys []

R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2013-08-20 484952]

R1 IDSVia64;IDSVia64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\IPSDefs\20130820.006\IDSvia64.sys [2013-08-20 520280]

R1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\windows\system32\drivers\N360x64\1404000.028\SRTSPX64.SYS []

R1 SymIM;Symantec Network Security Intermediate Filter Driver; C:\windows\system32\DRIVERS\SymIMv.sys []

R1 SymIRON;Symantec Iron Driver; C:\windows\system32\drivers\N360x64\1404000.028\Ironx64.SYS []

R1 SymNetS;Symantec Network Security WFP Driver; C:\windows\System32\Drivers\N360x64\1404000.028\SYMNETS.SYS []

R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys []

R3 e1cexpress;Intel® PRO/1000 PCI Express Network Connection Driver C; C:\windows\system32\DRIVERS\e1c62x64.sys []

R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2013-08-20 139864]

R3 MEIx64;Intel® Management Engine Interface; C:\windows\system32\drivers\HECIx64.sys []

R3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\VirusDefs\20130820.025\ENG64.SYS [2013-07-19 126040]

R3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\VirusDefs\20130820.025\EX64.SYS [2013-07-19 2098776]

R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\windows\system32\DRIVERS\nusb3hub.sys []

R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\windows\system32\drivers\nusb3xhc.sys []

R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\windows\system32\drivers\nvhda64v.sys []

R3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter; C:\windows\system32\DRIVERS\RTL8192su.sys []

R3 Sftfs;Sftfs; C:\windows\system32\DRIVERS\Sftfslh.sys []

R3 Sftplay;Sftplay; C:\windows\system32\DRIVERS\Sftplaylh.sys []

R3 Sftredir;Sftredir; C:\windows\system32\DRIVERS\Sftredirlh.sys []

R3 Sftvol;Sftvol; C:\windows\system32\DRIVERS\Sftvollh.sys []

R3 SRTSP;Symantec Real Time Storage Protection x64; C:\windows\System32\Drivers\N360x64\1404000.028\SRTSP64.SYS []

R3 SymEvent;SymEvent; \??\C:\windows\system32\Drivers\SYMEVENT64x86.SYS []

R3 usbscan;Stuurprogramma voor USB-scanner; C:\windows\system32\DRIVERS\usbscan.sys []

R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys []

R3 WDC_SAM;WD SCSI Pass Thru driver; C:\windows\system32\DRIVERS\wdcsam64.sys []

S3 ACSSCR;ACR38 Smart Card Reader; C:\windows\system32\DRIVERS\a38usb.sys []

S3 ewusbnet;HUAWEI USB-NDIS miniport; C:\windows\system32\DRIVERS\ewusbnet.sys []

S3 fssfltr;FssFltr; C:\windows\system32\DRIVERS\fssfltr.sys []

S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\windows\system32\DRIVERS\ewusbmdm.sys []

S3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys []

S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\windows\System32\drivers\rdpvideominiport.sys []

S3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys []

S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys []

S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys []

S3 WinUsb;WinUsb-stuurprogramma; C:\windows\system32\DRIVERS\WinUSB.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-10 65640]

R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624]

R2 LiveSafer;@C:\Program Files\LiveSafer\LiveSaferRes.dll,-149; C:\Program Files\LiveSafer\LiveSafer.exe [2011-10-07 125312]

R2 MCLIENT;Norton Management; C:\Program Files (x86)\Norton Management\Engine\3.2.0.19\ccSvcHst.exe [2012-10-11 143928]

R2 N360;Norton 360; C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\ccSvcHst.exe [2013-05-21 144368]

R2 Norton PC Checkup Application Launcher;Norton PC Checkup Application Launcher; C:\Program Files (x86)\Norton PC Checkup 3.0\SymcPCCULaunchSvc.exe [2012-08-22 132056]

R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe []

R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776]

R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-03-14 383264]

R2 VmbService;Vodafone Mobile Broadband-service; C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe [2010-06-25 9216]

R2 WDDMService;WD SmartWare Drive Manager Service; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [2010-01-21 130048]

R2 WDSmartWareBackgroundService;WD SmartWare Background Service; C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [2009-06-16 20480]

R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]

R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]

R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-16 136176]

S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-03-15 1266464]

S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-06-21 162408]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-24 257416]

S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-09-12 1512448]

S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-16 136176]

S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2013-04-16 194032]

S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]

S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe []

-----------------EOF-----------------

clarkie · 21 augustus 2013

Van zodra 1 van de experts online is zal deze je zeker verder helpen aangaande je vraag/probleem.

Mako · 21 augustus 2013

Hallo,

Download zoek.exe naar het bureaublad.
Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe
(hier of hier) kan je lezen hoe je dat doet.
- Dubbelklik op Zoek.exe om de tool te starten.
- Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
- Kopieer nu onderstaande code en plak die in het grote invulvenster:
- Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.

 
startupall;
filesrcm;
{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c};c
C:\PROGRA~2\BEARSH~1\MediaBar;fs
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run];r
"N0MxRDQ1QkM2OTczRDdEQU"=-;r
C:\Users\Herman\C_2get.exe;fp
C:\windows\tasks\schedule!451760640.job;f
C:\windows\tasks\WxDFastUpdaterTask{075D5BE4-C846-4F2F-B710-FC4C1F75FF29}.job
C:\windows\CD95F661A5C444F5A6AAECDD91C240D5.TMP;f
C:\Users\Herman\AppData\Roaming\DefaultTab;fs
autoclean;
chromelook;
firefoxlook;
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains];e
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains];e

Klik nu op de knop "Run script".
Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
Mocht na de herstart geen logje verschijnen, start zoek.exe dan opnieuw, de log verschijnt dan alsnog.
Post het geopende logje in het volgende bericht.

[*]Download MalwareBytes' Anti-Malware (website) en sla het op je bureaublad op.

Zorg dat er na de installatie een vinkje is geplaatst bij:

Update MalwareBytes' Anti-Malware
Start MalwareBytes' Anti-Malware
Je krijgt hier ook de keuze om de evaluatie versie van MBAM te gebruiken, indien je dit niet wilt vink dit dan uit.

Klik daarna op "Voltooien".

Indien een update gevonden wordt, zal die gedownload en geïnstalleerd worden.

Zodra het programma gestart is, ga dan naar het tabblad "Instellingen".
Vink hier aan: "Sluit Internet Explorer tijdens verwijdering van malware".
Ga daarna naar het tabblad "Scanner", kies hier voor "Snelle Scan".
Druk vervolgens op "Scannen" om de scan te starten.
Het scannen kan een tijdje duren, dus wees geduldig.
Wanneer de scan voltooid is, klik op OK, daarna "Bekijk Resultaten" om de resultaten te zien.
Zorg ervoor dat daar alles aangevinkt is, daarna klik op: "Verwijder geselecteerde".
Na het verwijderen zal een log openen en zal er gevraagd worden om de computer opnieuw op te starten.
Herstart de computer indien nodig en post hierna de log in het volgende bericht.

Groet,

Mako

tender · 21 augustus 2013

Malwarebytes had ik al een paar keer gedraaid , de eerste keer met resultaat, (gisteren)

vandaag niets meer te vinden

Zoek.exe Version 4.0.0.4 Updated 19-08-2013

Tool run by Herman on wo 21/08/2013 at 19:44:17,92.

Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\Herman\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9K3PCJEJ\zoek.exe [Quick Scan] [Auto Clean]

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== FireFox Fix ======================

ProfilePath: C:\Users\Herman\AppData\Roaming\Mozilla\Firefox\Profiles\extensions

---- Lines WebSearch removed from prefs.js ----

user_pref("browser.startup.homepage", "Search");

user_pref("browser.search.order.1", "WebSearch");

user_pref("browser.search.defaultenginename", "WebSearch");

user_pref("browser.search.selectedEngine", "WebSearch");

user_pref("browser.search.defaulturl", "Tuvaro=");

user_pref("browser.search.order.1,S", "WebSearch");

user_pref("browser.search.defaultenginename,S", "WebSearch");

user_pref("browser.search.selectedEngine,S", "WebSearch");

user_pref("keyword.URL", "Tuvaro=");

---- Lines WebSearch modified from prefs.js ----

---- Lines WebSearch removed from user.js ----

---- Lines OneClickDownload removed from prefs.js ----

---- Lines OneClickDownload modified from prefs.js ----

---- Lines OneClickDownload removed from user.js ----

---- FireFox user.js and prefs.js backups ----

user_20132108_1948_.backup

prefs_20132108_1948_.backup

ProfilePath: C:\Users\Herman\AppData\Roaming\Mozilla\Firefox\Profiles\mwisn1rt.default

user.js not found

---- Lines WebSearch removed from prefs.js ----

---- Lines WebSearch modified from prefs.js ----

---- Lines OneClickDownload removed from prefs.js ----

---- Lines OneClickDownload modified from prefs.js ----

---- FireFox user.js and prefs.js backups ----

prefs_20132108_1948_.backup

ProfilePath: C:\Users\Herman\AppData\Roaming\Mozilla\Firefox\Profiles\[opt]rs0

prefs.js not found

---- Lines WebSearch removed from prefs.js ----

---- Lines WebSearch modified from prefs.js ----

---- Lines WebSearch removed from user.js ----

---- Lines OneClickDownload removed from prefs.js ----

---- Lines OneClickDownload modified from prefs.js ----

---- Lines OneClickDownload removed from user.js ----

---- FireFox user.js and prefs.js backups ----

user_20132108_1948_.backup

==== Deleting Files \ Folders ======================

"C:\windows\SysNative\roboot64.exe" deleted

"C:\windows\SysNative\Tasks\Express FilesUpdate" deleted

"C:\Users\Herman\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\ftdownloader3@ftdownloader.com.xpi" deleted

"C:\Users\Herman\AppData\Roaming\Temp" deleted

"C:\Program Files (x86)\TornTV.com" deleted

"C:\Program Files (x86)\BearShare Applications\MediaBar" deleted

"C:\Program Files (x86)\1ClickDownload" deleted

"C:\Program Files (x86)\MyPC Backup" deleted

"C:\Program Files (x86)\Gophoto.it" deleted

"C:\Users\Herman\AppData\Roaming\ParetoLogic" deleted

"C:\Users\Herman\AppData\Roaming\DriverCure" deleted

"C:\Users\Herman\AppData\Roaming\DefaultTab" deleted

"C:\ProgramData\ParetoLogic" deleted

"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\wxDfast" deleted

"C:\Users\Herman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TornTV.com" deleted

"C:\Users\Herman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FTDownloader.com" deleted

"C:\Users\Herman\AppData\Local\PutLockerDownloader" deleted

"C:\Users\Herman\AppData\Local\PackageAware" deleted

"C:\Users\Herman\AppData\LocalLow\mediabarbs" deleted

"C:\windows\SysWow64\searchplugins" deleted

"C:\windows\SysWow64\Extensions" deleted

"C:\Users\Herman\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com" deleted

==== Files Recently Created / Modified ======================

====== C:\windows ====

2013-08-21 11:09:47 F042EE4C8D66248D9B86DCF52ABAE416 256000 ----a-w- C:\windows\PEV.exe

2013-08-21 11:09:47 9E05A9C264C8A908A8E79450FCBFF047 80412 ----a-w- C:\windows\grep.exe

2013-08-21 11:09:47 5E832F4FAF5F481F2EAF3B3A48F603B8 68096 ----a-w- C:\windows\zip.exe

2013-08-21 11:09:47 0297C72529807322B152F517FDB0A9FC 406528 ----a-w- C:\windows\SWSC.exe

2013-08-21 11:09:47 0277C027A26428DB64EF4F64F52BB4FD 208896 ----a-w- C:\windows\MBR.exe

2013-08-08 11:35:04 F5F55065141FB87DFADD1A8BCB76DC1E 336 ----a-w- C:\windows\game.ini

====== C:\Users\Herman\AppData\Local\Temp ====

====== C:\windows\SysWOW64 =====

2013-08-18 08:56:10 DD5F17D44E9966E7EA447AE8C4D12D6C 3968960 ----a-w- C:\windows\SysWOW64\ntkrnlpa.exe

2013-08-18 08:56:10 9FA7BF625122CCAC90FCD307174D8CF3 3913664 ----a-w- C:\windows\SysWOW64\ntoskrnl.exe

2013-08-18 08:56:10 77F5D2CB80697EB96C45E79A869A6FAC 14336 ----a-w- C:\windows\SysWOW64\ntvdm64.dll

2013-08-18 08:56:10 528D298F9914C558EA7A9809BE598E65 1292192 ----a-w- C:\windows\SysWOW64\ntdll.dll

2013-08-18 08:56:09 D313AE69128A75367AA36E15522931F6 7680 ----a-w- C:\windows\SysWOW64\instnm.exe

2013-08-18 08:56:09 CFEEF3185342ADEAE1E77A017052565B 2048 ----a-w- C:\windows\SysWOW64\user.exe

2013-08-18 08:56:09 4E77948A7BD16BA5724EC79C60176B03 5120 ----a-w- C:\windows\SysWOW64\wow32.dll

2013-08-18 08:56:09 3EED15C223E139C3A28B458800E52BF3 25600 ----a-w- C:\windows\SysWOW64\setup16.exe

2013-08-16 17:28:17 CA8860800EF5E387D0D4CC27F64E8011 176640 ----a-w- C:\windows\SysWOW64\ieui.dll

2013-08-16 17:28:17 C5EEAA837E52F7B4763D5678CEDB9FF4 2382848 ----a-w- C:\windows\SysWOW64\mshtml.tlb

2013-08-16 17:28:17 9C89AF1C0D74AEB51025F4B7A1A27A6E 73216 ----a-w- C:\windows\SysWOW64\mshtmled.dll

2013-08-16 17:28:17 87246CCD0088A7C7DE9ECAEC346DBB68 420864 ----a-w- C:\windows\SysWOW64\vbscript.dll

2013-08-16 17:28:16 E8B57171FBDC576F4ECBB075179C308B 1104384 ----a-w- C:\windows\SysWOW64\urlmon.dll

2013-08-16 17:28:16 E5085AC9642756F6467F0A28B85477E2 607744 ----a-w- C:\windows\SysWOW64\msfeeds.dll

2013-08-16 17:28:16 E500CEACB8FA2114C76FE39005F79C2D 231936 ----a-w- C:\windows\SysWOW64\url.dll

2013-08-16 17:28:16 6839F14A2507D9273BD13565DD880377 1129472 ----a-w- C:\windows\SysWOW64\wininet.dll

2013-08-16 17:28:16 3711B49D8CF265A24CD82FB3BCFFB1D5 142848 ----a-w- C:\windows\SysWOW64\ieUnatt.exe

2013-08-16 17:28:16 127359736B0A2093249F20B3B0395BBE 1427968 ----a-w- C:\windows\SysWOW64\inetcpl.cpl

2013-08-16 17:28:15 F3F218BAE79C4C104DFC44D8D530FD7C 1800704 ----a-w- C:\windows\SysWOW64\jscript9.dll

2013-08-16 17:28:15 C4C06D8FDF02BD36497BD91825BB4C17 1796096 ----a-w- C:\windows\SysWOW64\iertutil.dll

2013-08-16 17:28:15 0A725B5A547DE3B4C0E7A0F6F6E972A5 65536 ----a-w- C:\windows\SysWOW64\jsproxy.dll

2013-08-16 17:28:15 079C80C13024923DCF3DCCB4D8357637 717824 ----a-w- C:\windows\SysWOW64\jscript.dll

2013-08-16 17:28:14 7161E761E81356C8EF6383CB1AE41B8D 12334080 ----a-w- C:\windows\SysWOW64\mshtml.dll

2013-08-16 17:28:13 22BEE919EE9E20F6DA460F0EB5F37B03 9738752 ----a-w- C:\windows\SysWOW64\ieframe.dll

2013-08-16 10:25:18 AE8EB083B050E17A7D6EB5E28AECDDD6 1166848 ----a-w- C:\windows\SysWOW64\crypt32.dll

2013-08-16 10:25:18 7CA1BECEA5DE2643ADDAD32670E7A4C9 140288 ----a-w- C:\windows\SysWOW64\cryptsvc.dll

2013-08-16 10:25:18 68EAAEDF0365168B804E8728368FA946 175104 ----a-w- C:\windows\SysWOW64\wintrust.dll

2013-08-16 10:25:17 7B851A8018B1EA00A69707A390004884 103936 ----a-w- C:\windows\SysWOW64\cryptnet.dll

2013-08-16 10:24:35 D5E18BA95F9E7D787D25EF07AC68603E 2048 ----a-w- C:\windows\SysWOW64\tzres.dll

2013-08-16 10:24:27 0805487A6036A9F9C4E7AF7FEF835529 1620992 ----a-w- C:\windows\SysWOW64\WMVDECOD.DLL

2013-08-16 10:24:26 4DC999CED9429939D75682EBD7D48901 663552 ----a-w- C:\windows\SysWOW64\rpcrt4.dll

2013-08-08 11:35:31 5AA9987F2E62B56D7661B6901901F927 443752 ----a-w- C:\windows\SysWOW64\d3dx10_34.dll

2013-08-08 11:35:31 28964B7EE6347E7C59214D033B7D2B9A 266088 ----a-w- C:\windows\SysWOW64\xactengine2_8.dll

2013-08-08 11:35:31 066EE5D0D155D4F108757862F9F7BA54 18280 ----a-w- C:\windows\SysWOW64\x3daudio1_2.dll

2013-08-08 11:35:30 FAE7E1D578C42A7C3D9D61A99D178BD5 1123696 ----a-w- C:\windows\SysWOW64\D3DCompiler_33.dll

2013-08-08 11:35:30 CDB1CD22BAFF21F48606B3C1A18B000B 3495784 ----a-w- C:\windows\SysWOW64\d3dx9_33.dll

2013-08-08 11:35:30 7FEBB8CE2233CBAE738B16D42ED29674 261480 ----a-w- C:\windows\SysWOW64\xactengine2_7.dll

2013-08-08 11:35:30 77F595DEE5FFACEA72B135B1FCE1312E 81768 ----a-w- C:\windows\SysWOW64\xinput1_3.dll

2013-08-08 11:35:30 75F206C195BBACA6EF28565B1C0CD75C 1124720 ----a-w- C:\windows\SysWOW64\D3DCompiler_34.dll

2013-08-08 11:35:30 37A8171ACCF46A9C196054066C28827F 443752 ----a-w- C:\windows\SysWOW64\d3dx10_33.dll

2013-08-08 11:35:30 1CA939918ED1B930059B3A882DE6F648 3497832 ----a-w- C:\windows\SysWOW64\d3dx9_34.dll

2013-08-08 11:35:29 86C93789E9006F1AC47ED9DD47D4C8A1 251672 ----a-w- C:\windows\SysWOW64\xactengine2_5.dll

2013-08-08 11:35:29 6F34F7405807DCBF0B9BF6811C94C6D9 440080 ----a-w- C:\windows\SysWOW64\d3dx10.dll

2013-08-08 11:35:29 39000E033D39D19CCCE21AEAFCCE2476 255848 ----a-w- C:\windows\SysWOW64\xactengine2_6.dll

2013-08-08 11:35:28 797E24743937D67D69F28F2CF5052EE8 2414360 ----a-w- C:\windows\SysWOW64\d3dx9_31.dll

2013-08-08 11:35:28 6550E1A0A7BE611592C31222FCB981FB 237848 ----a-w- C:\windows\SysWOW64\xactengine2_4.dll

2013-08-08 11:35:28 121B131EAA369D8F58DACC5C39A77D80 15128 ----a-w- C:\windows\SysWOW64\x3daudio1_1.dll

2013-08-08 11:35:27 F1726346E583442541FE73429F8E9C10 62672 ----a-w- C:\windows\SysWOW64\xinput1_1.dll

2013-08-08 11:35:27 7C9952111F4C743B9F0D8B68B6ED93C9 229584 ----a-w- C:\windows\SysWOW64\xactengine2_1.dll

2013-08-08 11:35:27 69D841744B2BAE38FBB2D40A230A549C 236824 ----a-w- C:\windows\SysWOW64\xactengine2_3.dll

2013-08-08 11:35:27 5C4D3843B491C047B7A619901FBD2EC1 230168 ----a-w- C:\windows\SysWOW64\xactengine2_2.dll

2013-08-08 11:35:27 33B62BE226934E1B01F5043870C70427 62744 ----a-w- C:\windows\SysWOW64\xinput1_2.dll

2013-08-08 11:35:24 E415862612E65F10D7D888443ECD7594 2388176 ----a-w- C:\windows\SysWOW64\d3dx9_30.dll

2013-08-08 11:35:24 BE19B603DFBAA829EE5B7749B3BA97DB 2323664 ----a-w- C:\windows\SysWOW64\d3dx9_28.dll

2013-08-08 11:35:24 99F4FC172A5ACE36CF00AA7038D23F2C 2332368 ----a-w- C:\windows\SysWOW64\d3dx9_29.dll

2013-08-08 11:35:24 852EDC778A7A50077694F84D8E601234 2319568 ----a-w- C:\windows\SysWOW64\d3dx9_27.dll

2013-08-08 11:35:24 4E961525CC7FF0E5D7DA19E170B7C14C 14032 ----a-w- C:\windows\SysWOW64\x3daudio1_0.dll

2013-08-08 11:35:24 2112FE0C46662D429347A7D7B49E3ECE 230096 ----a-w- C:\windows\SysWOW64\xactengine2_0.dll

2013-08-08 11:35:23 BC831661963763AC4D504C5CABB1FDD9 2222800 ----a-w- C:\windows\SysWOW64\d3dx9_24.dll

2013-08-08 11:35:23 5B48FE9D6686F0D54B26A005ACE24D1D 2337488 ----a-w- C:\windows\SysWOW64\d3dx9_25.dll

2013-08-08 11:35:23 523AB607EEF81CC4D909E7FEBD8A788E 2297552 ----a-w- C:\windows\SysWOW64\d3dx9_26.dll

====== C:\windows\SysWOW64\drivers =====

====== C:\windows\Sysnative =====

2013-08-18 08:56:10 D6180FBBADA79BC28E5FD8187EBE7F64 243712 ----a-w- C:\windows\Sysnative\wow64.dll

2013-08-18 08:56:10 C19DCA1024135D5485E25AB1047F77BC 5550528 ----a-w- C:\windows\Sysnative\ntoskrnl.exe

2013-08-18 08:56:10 8E45DD84F8F786B2DB94AD95225B9246 1732032 ----a-w- C:\windows\Sysnative\ntdll.dll

2013-08-16 17:28:18 137A8EDEA806845F7042BE80A501BEF2 2382848 ----a-w- C:\windows\Sysnative\mshtml.tlb

2013-08-16 17:28:17 BBD3F2A134249E0752A7FCC815204EE8 248320 ----a-w- C:\windows\Sysnative\ieui.dll

2013-08-16 17:28:17 60109B1F6734770F27446BD7BF056F56 96768 ----a-w- C:\windows\Sysnative\mshtmled.dll

2013-08-16 17:28:16 CCADB1BFF9BD1966496A9C786E9B02C4 1494528 ----a-w- C:\windows\Sysnative\inetcpl.cpl

2013-08-16 17:28:16 CA87556BBA37D1B4F67C331186618673 1392128 ----a-w- C:\windows\Sysnative\wininet.dll

2013-08-16 17:28:16 B641368D3216D322EB8C1D6E433CD223 1346560 ----a-w- C:\windows\Sysnative\urlmon.dll

2013-08-16 17:28:16 A2B1F95AD5458E27F002449C76B0C46F 729088 ----a-w- C:\windows\Sysnative\msfeeds.dll

2013-08-16 17:28:16 7FE0D30B96E5DBE51F285B9AC6028453 237056 ----a-w- C:\windows\Sysnative\url.dll

2013-08-16 17:28:16 67F087197309C807412CC8C70BA10766 2312704 ----a-w- C:\windows\Sysnative\jscript9.dll

2013-08-16 17:28:16 4DC3BA4DAD1737AE700A62CF0D058E4F 173056 ----a-w- C:\windows\Sysnative\ieUnatt.exe

2013-08-16 17:28:15 87753A2B2D08E8750C5CC62FCFD515E8 599040 ----a-w- C:\windows\Sysnative\vbscript.dll

2013-08-16 17:28:15 82D66A2EBCD2F24EAFDE1F2447C09915 86016 ----a-w- C:\windows\Sysnative\jsproxy.dll

2013-08-16 17:28:15 57DDFF8D8DDE2F369335C678422BB71A 816640 ----a-w- C:\windows\Sysnative\jscript.dll

2013-08-16 17:28:15 3D85AC4E844FC488C139DF829AC6270D 2147840 ----a-w- C:\windows\Sysnative\iertutil.dll

2013-08-16 17:28:14 7D9371E3C8CF927D0A2A1D9E1161C324 17830400 ----a-w- C:\windows\Sysnative\mshtml.dll

2013-08-16 17:28:13 114BD6A60D8D5BCCDFA826ADEBA48D04 10926080 ----a-w- C:\windows\Sysnative\ieframe.dll

2013-08-16 10:25:18 A6B726DCA228F7878E38368A1BDC68BE 139776 ----a-w- C:\windows\Sysnative\cryptnet.dll

2013-08-16 10:25:18 959041D7014C97133D859B45BCA0FC58 224256 ----a-w- C:\windows\Sysnative\wintrust.dll

2013-08-16 10:25:18 6B400F211BEE880A37A1ED0368776BF4 184320 ----a-w- C:\windows\Sysnative\cryptsvc.dll

2013-08-16 10:25:18 287998A9BA0140ABB59792CDEB2F8483 1472512 ----a-w- C:\windows\Sysnative\crypt32.dll

2013-08-16 10:24:35 B3CA3253009D26666F5BCB16E77D2618 2048 ----a-w- C:\windows\Sysnative\tzres.dll

2013-08-16 10:24:27 D29200AB0B37B7293C6942EAF755295E 1888768 ----a-w- C:\windows\Sysnative\WMVDECOD.DLL

2013-08-16 10:24:26 26036E228D2467DE6975AD819C22C043 1217024 ----a-w- C:\windows\Sysnative\rpcrt4.dll

2013-08-08 11:35:31 DE898DF99037297B28732B42C094E362 21352 ----a-w- C:\windows\Sysnative\x3daudio1_2.dll

2013-08-08 11:35:31 1ED4E7A82BD5C7DEED082F00E63BB7A0 506728 ----a-w- C:\windows\Sysnative\d3dx10_34.dll

2013-08-08 11:35:31 14281DBB2EBE913D3DFFC49049E9B6CF 409960 ----a-w- C:\windows\Sysnative\xactengine2_8.dll

2013-08-08 11:35:30 BFB3091B167550EC6E6454813D3DB244 107368 ----a-w- C:\windows\Sysnative\xinput1_3.dll

2013-08-08 11:35:30 AE5D5439525B4A4CBF206058D493685D 4496232 ----a-w- C:\windows\Sysnative\d3dx9_34.dll

2013-08-08 11:35:30 9D9407F52B8E24E99358D9944B0D5FA3 1401200 ----a-w- C:\windows\Sysnative\D3DCompiler_34.dll

2013-08-08 11:35:30 8C970509E0AE10061E3ED6D51E34FEB9 403304 ----a-w- C:\windows\Sysnative\xactengine2_7.dll

2013-08-08 11:35:30 839C3921005BB41D441E3752C74F2292 506728 ----a-w- C:\windows\Sysnative\d3dx10_33.dll

2013-08-08 11:35:30 3EBF620536A13CA343E52ECA4F0DE7F8 1400176 ----a-w- C:\windows\Sysnative\D3DCompiler_33.dll

2013-08-08 11:35:30 3172C3CAC8EA7CA1B5D5AF6699C037D6 4494184 ----a-w- C:\windows\Sysnative\d3dx9_33.dll

2013-08-08 11:35:29 8251826F04BA0822D08AD9B92C65A3D5 469264 ----a-w- C:\windows\Sysnative\d3dx10.dll

2013-08-08 11:35:29 4837A54574A6105D404A8560984B93DD 393576 ----a-w- C:\windows\Sysnative\xactengine2_6.dll

2013-08-08 11:35:29 398FF46FF7354FED2F0F1AECDB546866 390424 ----a-w- C:\windows\Sysnative\xactengine2_5.dll

2013-08-08 11:35:28 FAAA0BB9CD2905B25334132E5BA093EB 3977496 ----a-w- C:\windows\Sysnative\d3dx9_31.dll

2013-08-08 11:35:28 58BB51253427A834A8807B9245CC5965 364824 ----a-w- C:\windows\Sysnative\xactengine2_4.dll

2013-08-08 11:35:28 489E5B8BB1BD1028FF1C798EAAEC65E4 17688 ----a-w- C:\windows\Sysnative\x3daudio1_1.dll

2013-08-08 11:35:27 DC5A914C34EB12056531777D4DD0F44E 354072 ----a-w- C:\windows\Sysnative\xactengine2_2.dll

2013-08-08 11:35:27 6F9D3289D8B166E478AFFF9EFA92C42C 83664 ----a-w- C:\windows\Sysnative\xinput1_1.dll

2013-08-08 11:35:27 0CC809422AB40974DFF8078392E4D507 352464 ----a-w- C:\windows\Sysnative\xactengine2_1.dll

2013-08-08 11:35:27 06F15D3CB1AE0EAFA50F595B3FF8D9F5 83736 ----a-w- C:\windows\Sysnative\xinput1_2.dll

2013-08-08 11:35:27 0396D2A98B0CCD4419B572EBF618E81E 363288 ----a-w- C:\windows\Sysnative\xactengine2_3.dll

2013-08-08 11:35:24 F77D5AB654881E683CFF6650916C424E 16592 ----a-w- C:\windows\Sysnative\x3daudio1_0.dll

2013-08-08 11:35:24 E09A9CF383ACF4A28038561E62277377 3927248 ----a-w- C:\windows\Sysnative\d3dx9_30.dll

2013-08-08 11:35:24 CE5753F9A27837259EB52F3F47F39593 355536 ----a-w- C:\windows\Sysnative\xactengine2_0.dll

2013-08-08 11:35:24 914C3237E4D145A18DCD1D0D4C8659E1 3807440 ----a-w- C:\windows\Sysnative\d3dx9_27.dll

2013-08-08 11:35:24 88BAC8306D4EC79A82B1FFA17DC8CF4A 3815120 ----a-w- C:\windows\Sysnative\d3dx9_28.dll

2013-08-08 11:35:24 68B35CBDB4A8CC424718BBCC894FEEEA 3830992 ----a-w- C:\windows\Sysnative\d3dx9_29.dll

2013-08-08 11:35:23 B165DF72E13E6AF74D47013504319921 3544272 ----a-w- C:\windows\Sysnative\d3dx9_24.dll

2013-08-08 11:35:23 4C56E7C5B2A61353E534C7D15D05856D 3823312 ----a-w- C:\windows\Sysnative\d3dx9_25.dll

2013-08-08 11:35:23 44F5C5E27D6825E4E62420BC29B8B533 3767504 ----a-w- C:\windows\Sysnative\d3dx9_26.dll

====== C:\windows\Sysnative\drivers =====

2013-08-20 17:50:13 0BB97D43299910CBFBA59C461B99B910 25928 ----a-w- C:\windows\Sysnative\drivers\mbam.sys

2013-08-16 10:24:26 DB74544B75566C974815E79A62433F29 1910208 ----a-w- C:\windows\Sysnative\drivers\tcpip.sys

2013-08-16 10:24:26 4CE278FC9671BA81A138D70823FCAA09 39936 ----a-w- C:\windows\Sysnative\drivers\tssecsrv.sys

2013-08-10 17:21:50 BFD99DC6C7FEB2F8B20D488FDF3A9A55 43680 ----a-r- C:\windows\Sysnative\drivers\SymIMV.sys

====== C:\windows\Tasks ======

2013-08-17 14:13:44 9BF20405AA1BFDB3845735EB289700EB 2896 ----a-w- C:\windows\Sysnative\Tasks\AutoKMS

====== C:\windows\Temp ======

======= C:\Program Files =====

2013-08-07 19:37:20 -------- d-----w- C:\Program Files\Speccy

======= C:\Program Files (x86) =====

2013-08-21 14:10:54 -------- d-----w- C:\Program Files (x86)\Proxify Tray Application

2013-08-21 09:53:29 -------- d-----w- C:\Program Files (x86)\trend micro

2013-08-20 12:11:49 -------- d-----w- C:\Program Files (x86)\Advanced Port Scanner

2013-08-17 16:24:42 -------- d-----w- C:\Program Files (x86)\Essential NetTools

2013-08-08 11:34:54 -------- d-----w- C:\Program Files (x86)\Activision

2013-07-23 14:43:34 -------- d-----w- C:\Program Files (x86)\Common Files\Canon_Inc_IC

======= C: =====

====== C:\Users\Herman\AppData\Roaming ======

2013-08-21 11:25:40 -------- d-----w- C:\users\UpdatusUser\AppData\Local\temp

2013-08-21 11:25:40 -------- d-----w- C:\users\TEMP\AppData\Local\temp

2013-08-21 11:25:40 -------- d-----w- C:\users\TEMP.Gebruiker-PC\AppData\Local\temp

2013-08-21 11:25:40 -------- d-----w- C:\users\Public\AppData\Local\temp

2013-08-21 11:25:40 -------- d-----w- C:\users\Herman_old\AppData\Local\temp

2013-08-21 11:25:40 -------- d-----w- C:\users\Gebruiker\AppData\Local\temp

2013-08-21 11:25:40 -------- d-----w- C:\users\Default\AppData\Local\temp

2013-08-21 11:25:40 -------- d-----w- C:\users\Default User\AppData\Local\temp

2013-08-20 17:38:20 -------- d-----w- C:\users\Herman\AppData\Roaming\TeamViewer

2013-08-20 16:08:38 -------- d-----w- C:\users\Herman\AppData\Local\Mozilla

2013-08-20 12:11:49 -------- d-----w- C:\users\Herman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Advanced Port Scanner

2013-08-17 16:24:49 -------- d-----w- C:\users\Herman\AppData\Roaming\TamoSoft

2013-08-17 16:23:35 -------- d-----w- C:\users\Herman\AppData\Local\DealPlyLive

====== C:\Users\Herman ======

2013-08-21 14:10:55 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Proxify Tray Application

2013-08-21 11:25:40 -------- d-----w- C:\Users\Public\AppData

2013-08-21 11:25:40 -------- d-----w- C:\Users\Herman_old\AppData

2013-08-20 16:08:28 -------- d-----w- C:\ProgramData\Mozilla

2013-08-20 12:11:49 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Port Scanner

2013-08-18 10:47:18 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Users\Herman\netstat

2013-08-17 16:24:43 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Essential NetTools

2013-08-17 16:23:49 02C1EE40968BAA67C3A785CDA9807125 262 --sha-r- C:\Users\Herman\ntuser.pol

2013-08-08 11:35:08 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Activision

2013-08-08 10:08:15 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth

2013-07-23 14:43:05 -------- d-----w- C:\ProgramData\Canon_Inc_IC

====== C: exe-files ==

2013-08-21 14:10:54 66CDE0BB4818EEE75B8C9271931B7A5F 2689536 ----a-w- C:\Program Files (x86)\Proxify Tray Application\Proxify Tray Application.exe

2013-08-21 14:10:54 241AA58D9CC4573F4D1739FEADB57403 1171395 ----a-w- C:\Program Files (x86)\Proxify Tray Application\unins000.exe

2013-08-21 11:09:47 F042EE4C8D66248D9B86DCF52ABAE416 256000 ----a-w- C:\Windows\PEV.exe

2013-08-21 11:09:47 9E05A9C264C8A908A8E79450FCBFF047 80412 ----a-w- C:\Windows\grep.exe

2013-08-21 11:09:47 5E832F4FAF5F481F2EAF3B3A48F603B8 68096 ----a-w- C:\Windows\zip.exe

2013-08-21 11:09:47 0297C72529807322B152F517FDB0A9FC 406528 ----a-w- C:\Windows\SWSC.exe

2013-08-21 11:09:47 0277C027A26428DB64EF4F64F52BB4FD 208896 ----a-w- C:\Windows\MBR.exe

2013-08-21 09:53:30 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files (x86)\trend micro\Herman.exe

2013-08-19 09:07:48 D6E84508BBE50BBEEFAF02C865A96836 1070672 ----a-w- C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarManager_714BFB3B4B0991F6.exe

2013-08-19 09:06:53 42D0D34CAA293C83B4433A537DF13895 530912 ----a-w- C:\Program Files (x86)\Google\Update\Download\{F69EABDD-A4BB-4555-BE7E-1EA5F59BBA24}\7.5.4413.1752\GoogleToolbarInstaller_updater_signed.exe

2013-08-18 08:56:10 DD5F17D44E9966E7EA447AE8C4D12D6C 3968960 ----a-w- C:\Windows\SysWOW64\ntkrnlpa.exe

2013-08-18 08:56:10 C19DCA1024135D5485E25AB1047F77BC 5550528 ----a-w- C:\Windows\System32\ntoskrnl.exe

2013-08-18 08:56:10 9FA7BF625122CCAC90FCD307174D8CF3 3913664 ----a-w- C:\Windows\SysWOW64\ntoskrnl.exe

2013-08-18 08:56:09 D313AE69128A75367AA36E15522931F6 7680 ----a-w- C:\Windows\SysWOW64\instnm.exe

2013-08-18 08:56:09 CFEEF3185342ADEAE1E77A017052565B 2048 ----a-w- C:\Windows\SysWOW64\user.exe

2013-08-18 08:56:09 3EED15C223E139C3A28B458800E52BF3 25600 ----a-w- C:\Windows\SysWOW64\setup16.exe

2013-08-17 16:24:42 92A8F09101E41D1BAAE9464A31A5BAA4 274952 ----a-w- C:\Program Files (x86)\Essential NetTools\Uninstall.exe

2013-08-17 16:24:04 0722C11259BC327F793E8D50C097F597 6987472 ----a-w- C:\Users\Herman\Downloads\ent4zip\Setup.exe

2013-08-16 17:28:16 FA5B33E7BB143BCE846C303B528E8D62 763544 ----a-w- C:\Program Files\Internet Explorer\iexplore.exe

2013-08-16 17:28:16 57EC630DBD5F0713E77CB3540AB80A8E 757400 ----a-w- C:\Program Files (x86)\Internet Explorer\iexplore.exe

2013-08-16 17:28:16 4DC3BA4DAD1737AE700A62CF0D058E4F 173056 ----a-w- C:\Windows\System32\ieUnatt.exe

2013-08-16 17:28:16 3711B49D8CF265A24CD82FB3BCFFB1D5 142848 ----a-w- C:\Windows\SysWOW64\ieUnatt.exe

2013-08-16 10:17:33 1420ABA24CF82D66070BD0188F88588E 6040688 ----a-w- C:\Users\Herman\AppData\Local\Microsoft\SkyDrive\Update\skydrivesetup.exe

2013-08-16 10:17:33 1420ABA24CF82D66070BD0188F88588E 6040688 ----a-w- C:\Users\Herman\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\SkyDriveSetup.exe

2013-08-16 10:17:29 0F4D9B695D793B4979EE2A32A285191B 77424 ----a-w- C:\Users\Herman\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811\SkyDriveConfig.exe

=== C: other files ==

2013-08-20 17:50:13 0BB97D43299910CBFBA59C461B99B910 25928 ----a-w- C:\Windows\System32\drivers\mbam.sys

2013-08-16 10:24:26 DB74544B75566C974815E79A62433F29 1910208 ----a-w- C:\Windows\System32\drivers\tcpip.sys

2013-08-16 10:24:26 4CE278FC9671BA81A138D70823FCAA09 39936 ----a-w- C:\Windows\System32\drivers\tssecsrv.sys

==== Startup Registry Enabled ======================

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"Norton Download Manager{NSME22-B22-4abb-B07C-C084B04B4F12}"="C:\Program Files (x86)\Norton Management\Engine\3.1.0.24\ccSvcHst.exe /m"

[HKEY_USERS\S-1-5-21-180425363-2323255319-3442595982-1002\Software\Microsoft\Windows\CurrentVersion\Run]

"SkyDrive"="C:\Users\Herman\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe /background"

"DAEMON Tools Lite"="C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe -autorun"

"ProxifyTrayApp"="C:\Program Files (x86)\Proxify Tray Application\Proxify Tray Application.exe"

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run]

"Norton Download Manager{NSME22-B22-4abb-B07C-C084B04B4F12}"="C:\Program Files (x86)\Norton Management\Engine\3.1.0.24\ccSvcHst.exe /m"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"MobileBroadband"="C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe /silent"

"IsaKbcCertUpdate"="C:\Program Files (x86)\Common Files\Isabel\isa_kbc_certupdate.exe"

"CanonSolutionMenuEx"="C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon"

"Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"SkyDrive"="C:\Users\Herman\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe /background"

"DAEMON Tools Lite"="C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe -autorun"

"ProxifyTrayApp"="C:\Program Files (x86)\Proxify Tray Application\Proxify Tray Application.exe"

==== Startup Registry Enabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Persistence"="C:\windows\system32\igfxpers.exe"

"itype"="C:\Program Files\Microsoft IntelliType Pro\itype.exe"

"IgfxTray"="C:\windows\system32\igfxtray.exe"

"HotKeysCmds"="C:\windows\system32\hkcmd.exe"

"CanonMyPrinter"="C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon"

==== Startup Folders ======================

2013-05-16 16:32:19 1289 ----a-w- C:\users\Herman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk

2013-05-16 16:32:20 1326 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDDMStatus.lnk

2013-05-16 16:32:20 1381 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDSmartWare.lnk

==== Task Scheduler Jobs ======================

C:\windows\tasks\Adobe Flash Player Updater.job --a------ C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [24/07/2013 14:11]

C:\windows\tasks\AutoKMS.job --a------ C:\windows\AutoKMS\AutoKMS.exe [05/09/2012 13:54]

C:\windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [16/04/2013 17:38]

C:\windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [16/04/2013 17:38]

==== Firefox Extensions ======================

AppDir: C:\Program Files (x86)\Mozilla Firefox

- Undetermined - %AppDir%\extensions\belgiumeid@eid.belgium.be

==== Firefox Plugins ======================

Profilepath: C:\Users\Herman\AppData\Roaming\Mozilla\Firefox\Profiles\mwisn1rt.default

D4BD9F86123C87ECA570418B69326F99 - C:\windows\SysWOW64\npDeployJava1.dll - Java Deployment Toolkit 7.0.170.2

9C06DBC403F91D518ED117E460F03F85 - C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL - CANON iMAGE GATEWAY Album Plugin Utility for IJ

15E298B5EC5B89C5994A59863969D9FF - C:\windows\SysWOW64\npmproxy.dll - Microsoft® Windows® Operating System

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

bbffdhejhaoiflnpooogkckfdcmmjppn - C:\Program Files (x86)\FTDownloader.com\FTDownloader10.crx[]

gnoembeogfichhgabnmnbjicijmidnco - C:\ProgramData\wxDfast\gnoembeogfichhgabnmnbjicijmidnco.crx[]

kdidombaedgpfiiedeimiebkmbilgmlc - C:\Program Files (x86)\DefaultTab\DefaultTab.crx[]

lpmkgpnbiojfaoklbkpfneikocaobfai - C:\Users\Herman\AppData\Roaming\Media Finder\Extensions\mf_plugin_gc.crx[]

mkfokfffehpeedafpekjeddnmnjhmcmk - C:\Program Files (x86)\Norton 360\Engine\20.4.0.40\Exts\Chrome.crx[31/05/2013 03:49]

mphpbdjcljebbcnfopfngmfdackbbdgf - C:\Program Files (x86)\DealPly\DealPly.crx[]

nbmafkdmkkckhggblphicnnhlgljnoje - C:\Program Files (x86)\TornTV.com\torn2_10.crx[]

pfmopbbadnfoelckkcmjjeaaegjpjjbk - C:\Program Files (x86)\Gophoto.it\gophotoit14.crx[]

Google Docs - Herman - Default\Extensions\aohghmighlieiainnegkcijnfilokake

Google Drive - Herman - Default\Extensions\apdfllckaahabafndbhieahigkjlhalf

YouTube - Herman - Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo

Google Search - Herman - Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

Norton Identity Protection - Herman - Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk

GoPhoto.it - Herman - Default\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk

Gmail - Herman - Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== Chrome Fix ======================

C:\Users\Herman\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_mphpbdjcljebbcnfopfngmfdackbbdgf_0.localstorage deleted successfully

C:\Users\Herman\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk deleted successfully

==== Set IE to Default ======================

Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="https://www.google.be/"

New Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="https://www.google.be/"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="{searchTerms} - Bing"

{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="{searchTerms} - Google Search}"

{9BB47C17-9C68-4BB3-B188-DD9AF0FD22} Unknown Url="Not_Found"

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-180425363-2323255319-3442595982-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} deleted successfully

HKEY_USERS\S-1-5-21-180425363-2323255319-3442595982-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} deleted successfully

HKEY_USERS\S-1-5-21-180425363-2323255319-3442595982-1002\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} deleted successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\bbffdhejhaoiflnpooogkckfdcmmjppn deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\gnoembeogfichhgabnmnbjicijmidnco deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\lpmkgpnbiojfaoklbkpfneikocaobfai deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\mphpbdjcljebbcnfopfngmfdackbbdgf deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\nbmafkdmkkckhggblphicnnhlgljnoje deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk deleted successfully

==== Empty IE Cache ======================

C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

C:\Users\Herman\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

C:\Users\Herman\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0NCP1PP9 will be deleted at reboot

C:\Users\Herman\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4V1Q7HOH will be deleted at reboot

C:\Users\Herman\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9K3PCJEJ will be deleted at reboot

C:\Users\Herman\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QLKRW6JM will be deleted at reboot

C:\Users\Herman\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini will be deleted at reboot

C:\Users\Herman\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

C:\windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

C:\users\Herman\AppData\Local\Mozilla\Firefox\Profiles\mwisn1rt.default\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\users\Herman\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\windows\Temp successfully emptied

C:\Users\Herman\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\Herman\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini" deleted

"C:\Users\Herman\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted

"C:\windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found

"C:\Users\Herman\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0NCP1PP9" not found

"C:\Users\Herman\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4V1Q7HOH" not found

"C:\Users\Herman\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9K3PCJEJ" not found

"C:\Users\Herman\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QLKRW6JM" not found

==== EOF on wo 21/08/2013 at 19:54:44,98 ======================

Mako · 21 augustus 2013

Hoi,

Het lijkt er niet op dat je die instructies goed begrepen hebt .

Download zoek.exe naar het bureaublad.

Launched: C:\Users\Herman\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9K3PCJEJ\zoek.exe [Quick Scan] [Auto Clean]

Herneem nu nog even de stappen uit bericht #3 aub.

Verder zijn er in het logje veel zaken terug te vinden die initieel niet aanwezig waren. Indien je op een ander forum geholpen wordt, wil je dat dan ook even melden aub. Zo wordt er geen dubbel werk verricht en werken we niet naast elkaar.

Je hoeft geen nieuwe scan meer te doen met MBAM maar plaats wel even het logje van gisteren (met resultaat).

tender · 25 augustus 2013

kan niet reageren blijkbaar

Mako · 25 augustus 2013

Hoi,

Hoe bedoel je precies?

tender · 25 augustus 2013

telkens ik de logs wil doorsturen blokeert de website , is er een restrictie op de grootte van de bestanden?

Mako · 25 augustus 2013

Hoi,

Over het algemeen zou het uploaden van dergelijke logbestanden geen probleem mogen zijn. Probeer anders eens de inhoud van de logjes in je volgende bericht te plakken.

Ik vraag intussen ook even de maximale bestandsgrootte na ;-).

tender · 25 augustus 2013

sorry lukt niet

- - - Updated - - -

Malwarebytes Anti-Malware 1.75.0.1300

www.malwarebytes.org

Databaseversie: v2013.08.20.05

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 9.0.8112.16421

Herman :: GEBRUIKER-PC [administrator]

20/08/2013 19:53:10

mbam-log-2013-08-20 (19-53-10).txt

Scan type: Snelle scan

Uitgeschakelde scan opties: P2P

Objecten gescand: 278913

Verstreken tijd: 2 minuut/minuten, 52 seconde(n)

Geheugenprocessen gedetecteerd: 1

C:\Users\Herman\AppData\Roaming\DEFAULTTAB\DEFAULTTAB\DTUpdate.exe (PUP.Optional.DefaultTab) -> 1924 -> Zal worden verwijderd tijdens het herstarten.

Geheugenmodulen gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

Registersleutels gedetecteerd: 49

HKCR\CLSID\{7F6AFBF1-E065-4627-A2FD-810366367D01} (PUP.Optional.DefaultTab) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\TypeLib\{FEB62B15-CC00-4736-AAEC-BA046C9DFF73} (PUP.Optional.DefaultTab) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60} (PUP.Optional.DefaultTab) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DefaultTabBHO.DefaultTabBrowser.1 (PUP.Optional.DefaultTab) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DefaultTabBHO.DefaultTabBrowser (PUP.Optional.DefaultTab) -> Succesvol in quarantaine geplaatst en verwijderd.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01} (PUP.Optional.DefaultTab) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01} (PUP.Optional.DefaultTab) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{7F6AFBF1-E065-4627-A2FD-810366367D01} (PUP.Optional.DefaultTab) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7F6AFBF1-E065-4627-A2FD-810366367D01} (PUP.Optional.DefaultTab) -> Succesvol in quarantaine geplaatst en verwijderd.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01} (PUP.Optional.DefaultTab) -> Succesvol in quarantaine geplaatst en verwijderd.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DealPly (PUP.Optional.DealPly) -> Succesvol in quarantaine geplaatst en verwijderd.

HKLM\SYSTEM\CurrentControlSet\Services\DefaultTabSearch (PUP.Optional.DefaultTab) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DealPlyLive.OneClickCtrl.9 (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DealPlyLive.OneClickProcessLauncherMachine (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DealPlyLive.OneClickProcessLauncherMachine.1.0 (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DealPlyLive.Update3WebControl.3 (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DealPlyLiveUpdate.CoCreateAsync (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DealPlyLiveUpdate.CoCreateAsync.1.0 (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DealPlyLiveUpdate.CoreClass (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DealPlyLiveUpdate.CoreClass.1 (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DealPlyLiveUpdate.CoreMachineClass (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DealPlyLiveUpdate.CoreMachineClass.1 (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DealPlyLiveUpdate.CredentialDialogMachine (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DealPlyLiveUpdate.CredentialDialogMachine.1.0 (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DealPlyLiveUpdate.OnDemandCOMClassMachine (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DealPlyLiveUpdate.OnDemandCOMClassMachine.1.0 (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DealPlyLiveUpdate.OnDemandCOMClassMachineFallback (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DealPlyLiveUpdate.OnDemandCOMClassMachineFallback.1.0 (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DealPlyLiveUpdate.OnDemandCOMClassSvc (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DealPlyLiveUpdate.OnDemandCOMClassSvc.1.0 (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DealPlyLiveUpdate.ProcessLauncher (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DealPlyLiveUpdate.ProcessLauncher.1.0 (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DealPlyLiveUpdate.Update3COMClassService (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DealPlyLiveUpdate.Update3COMClassService.1.0 (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DealPlyLiveUpdate.Update3WebMachine (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DealPlyLiveUpdate.Update3WebMachine.1.0 (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DealPlyLiveUpdate.Update3WebMachineFallback (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DealPlyLiveUpdate.Update3WebMachineFallback.1.0 (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DealPlyLiveUpdate.Update3WebSvc (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\DealPlyLiveUpdate.Update3WebSvc.1.0 (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKLM\SYSTEM\CurrentControlSet\Services\dealplylive (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DEALPLYLIVE.EXE (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKLM\SYSTEM\CurrentControlSet\Services\dealplylivem (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKLM\SYSTEM\CurrentControlSet\Services\DefaultTabUpdate (PUP.Optional.DefaultTab) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\CLSID\{7F1796B2-BEC6-427B-B734-F9C75ED94A80} (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F1796B2-BEC6-427B-B734-F9C75ED94A80} (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F1796B2-BEC6-427B-B734-F9C75ED94A80} (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

HKCR\CLSID\{0D89DE71-3D99-4288-84DC-F18F1047A7D8} (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

Registerwaarden gedetecteerd: 1

HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Data: 0L1N1H2O1S -> Succesvol in quarantaine geplaatst en verwijderd.

Registerdata gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)

Mappen gedetecteerd: 16

C:\Program Files (x86)\DealPly (PUP.Optional.DealPly) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEFAULTTAB (PUP.Optional.DefaultTab) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Users\Herman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly (PUP.OPtional.Dealply) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\ProgramData\DEALPLYLIVE (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\ProgramData\DEALPLYLIVE\Update (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\ProgramData\DEALPLYLIVE\Update\Log (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Users\Herman\AppData\Roaming\Dealply (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Users\Herman\AppData\Roaming\Dealply\UpdateProc (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\CrashReports (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0 (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\Download (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\Install (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\Offline (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\Offline\{4DC4B1F0-5291-4277-AA7D-52968FD09C00} (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

Bestanden gedetecteerd: 87

C:\Users\Herman\AppData\Roaming\DEFAULTTAB\DEFAULTTAB\DEFAULTTABBHO.DLL (PUP.Optional.DefaultTab) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Users\Herman\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabStart.exe (PUP.Optional.DefaultTab) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Users\Herman\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabStart64.exe (PUP.Optional.DefaultTab) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Users\Herman\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabWrap.dll (PUP.Optional.DefaultTab) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Users\Herman\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabWrap64.dll (PUP.Optional.DefaultTab) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Users\Herman\AppData\Roaming\DefaultTab\DefaultTab\update.exe (PUP.Optional.DefaultTab) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Users\Herman\Downloads\Spybot Search & Destroy.exe (PUP.Optional.Solimba) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DealPly\DealPly.crx (PUP.Optional.DealPly) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DealPly\DealPly.xpi (PUP.Optional.DealPly) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DealPly\DealPlyIE64.dll (PUP.Optional.DealPly) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DealPly\icon.ico (PUP.Optional.DealPly) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DealPly\uninst.exe (PUP.Optional.DealPly) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Windows\Tasks\DEALPLYLIVEUPDATETASKMACHINECORE.JOB (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEFAULTTAB\DEFAULTTAB.CRX (PUP.Optional.DefaultTab) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEFAULTTAB\DefaultTabSearch.exe (PUP.Optional.DefaultTab) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEFAULTTAB\uid (PUP.Optional.DefaultTab) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Users\Herman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly\UNINSTALL DEALPLY.LNK (PUP.OPtional.Dealply) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Users\Herman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly\DealPly Help.url (PUP.OPtional.Dealply) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Users\Herman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly\DealPly.url (PUP.OPtional.Dealply) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\DEALPLYLIVE.EXE (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Users\Herman\AppData\Roaming\DEFAULTTAB\DEFAULTTAB\DTUpdate.exe (PUP.Optional.DefaultTab) -> Zal worden verwijderd tijdens het herstarten.

C:\ProgramData\DEALPLYLIVE\Update\Log\DealPlyLive.log (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Users\Herman\AppData\Roaming\Dealply\UPDATEPROC\config.dat (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\DealPlyLive.exe (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\DealPlyLiveBroker.exe (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\DealPlyLiveHandler.exe (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\DealPlyLiveHelper.msi (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\DealPlyLiveOnDemand.exe (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdate.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_am.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_ar.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_bg.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_bn.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_ca.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_cs.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_da.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_de.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_el.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_en-GB.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_en.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_es-419.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_es.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_et.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_fa.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_fi.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_fil.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_fr.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_gu.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_hi.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_hr.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_hu.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_id.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_is.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_it.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_iw.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_ja.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_kn.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_ko.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_lt.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_lv.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_ml.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_mr.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_ms.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_nl.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_no.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_pl.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_pt-BR.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_pt-PT.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_ro.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_ru.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_sk.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_sl.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_sr.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_sv.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_sw.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_ta.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_te.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_th.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_tr.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_uk.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_ur.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_vi.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_zh-CN.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\goopdateres_zh-TW.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\npGoogleUpdate3.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\psmachine.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

C:\Program Files (x86)\DEALPLYLIVE\Update\1.3.23.0\psuser.dll (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd.

(einde)