Ga naar inhoud

QoneS pagina verschijnt bij openen Internet Explorer

Jacques Marges
 Delen

Aanbevolen berichten

Jion Grootmeester

Jion

Geplaatst:
Geplaatst:

Dag Jacques,

welkom op PCH!

Voer eens het volgende uit, zodat we een beter overzicht krijgen van de infectie(s) op je systeem:

Download 51a5f5d096dae-icon_RSIT.pngRSIT van de onderstaande locaties en sla deze op het bureaublad op.

Hier staat een beschrijving hoe je kan kijken of je een 32- of 64-bitversie van Windows heeft.

Dubbelklik op RSIT.exe om de tool te starten.


  • Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  • Vervolgens wordt de "Disclaimer of warranty" getoond, klik vervolgens op "Continue"
  • Wanneer de tool gereed is wordt er een kladblok bestand genaamd "Log" geopend.
  • Plaats de inhoud hiervan in het volgende bericht.

Link naar reactie
Delen op andere sites
Jacques Marges Groentje

Jacques Marges

Geplaatst:
  • Auteur
Geplaatst:
Ja, het is dat gigantische log dat ik nodig heb. ;-)

Normaal gezien opent dit automatisch wanneer je RSIT uitvoert.

Indien niet, kan je het hier vinden: C:\rsit

Het is het bestand, genaamd LOG dat ik nodig heb.

Dag Jion, als ik "log" probeer in te voegen op deze plek dan opent het bestand zich

en is het bericht waarin ik nu typ geheel verdwenen.

Een amateur weet het echt nog beter als ik!!:dong:

Link naar reactie
Delen op andere sites
Jion Grootmeester

Jion

Geplaatst:
Geplaatst:

Je mag de inhoud van dat log volledig kopiëren hier in je volgend antwoord:

Open het log.

Toetscombinatie Ctrl A om alles te selecteren.

Dan Ctrl C om de geselecteerde text te kopiëren.

Dan ga je hier naar het forum waar je je nieuw antwoord kan plaatsen en gebruik je Ctrl V om de tekst hier te plakken.

Link naar reactie
Delen op andere sites
Jacques Marges Groentje

Jacques Marges

Geplaatst:
  • Auteur
Geplaatst:
Je mag de inhoud van dat log volledig kopiëren hier in je volgend antwoord:

Open het log.

Toetscombinatie Ctrl A om alles te selecteren.

Dan Ctrl C om de geselecteerde text te kopiëren.

Dan ga je hier naar het forum waar je je nieuw antwoord kan plaatsen en gebruik je Ctrl V om de tekst hier te plakken.

Logfile of random's system information tool 1.09 (written by random/random)

Run by Jacques at 2013-10-29 12:19:12

Microsoft Windows 7 Home Premium Service Pack 1

System drive C: has 390 GB (83%) free of 468 GB

Total RAM: 4040 MB (62% free)

======Listing Processes======

\SystemRoot\System32\smss.exe

%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

wininit.exe

%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

C:\Windows\system32\services.exe

C:\Windows\system32\lsass.exe

C:\Windows\system32\lsm.exe

winlogon.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"

"C:\Program Files (x86)\Acer\Registration\GREGsvc.exe"

"C:\Program Files\Acer\Acer Updater\UpdaterService.exe"

"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE"

"C:\Program Files (x86)\Norton AntiVirus\Engine\19.9.0.9\ccSvcHst.exe" /s "NAV" /m "C:\Program Files (x86)\Norton AntiVirus\Engine\19.9.0.9\diMaster.dll" /prefetch:1

C:\Windows\system32\svchost.exe -k imgsvc

"C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe"

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-bc1a8a2a-3945-4aa6-9cfe-b21e3cec8a32 -SystemEventPortName:HostProcess-acbe4dab-369b-4923-b467-db068abf57b8 -IoCancelEventPortName:HostProcess-32a5745f-f75e-4744-ba30-c0681f8e8d3a -NonStateChangingEventPortName:HostProcess-cef9acda-081a-4840-9324-629f6cd16529 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:6059c913-8045-4755-94fe-4b744ca51d6a -DeviceGroupId:WpdFsGroup

"taskhost.exe"

"C:\Windows\system32\Dwm.exe"

C:\Windows\Explorer.EXE

"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s

"C:\Windows\System32\igfxtray.exe"

"C:\Windows\System32\hkcmd.exe"

"C:\Windows\System32\igfxpers.exe"

"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun

"C:\Program Files (x86)\MyTomTom 3\MyTomTomSA.exe"

"C:\Users\Jacques\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup

"C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe"

"C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE" /tsr

"C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe"

C:\Windows\system32\SearchIndexer.exe /Embedding

"C:\Program Files\Windows Media Player\wmpnetwk.exe"

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\System32\svchost.exe -k LocalServicePeerNet

taskeng.exe {DB3A6455-5037-4BAC-B96A-1EA3214E2249}

"C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe"

"C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe"

"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"

C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}

"C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe"

"C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe"

C:\Windows\System32\svchost.exe -k secsvcs

"C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe"

C:\Windows\system32\svchost.exe -k SDRSVC

"C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe"

"C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE"

"C:\Program Files\Internet Explorer\iexplore.exe" Windows 7 QoneS pagina verschijnt bij openen Internet Explorer

"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2100 CREDAT:209921 /prefetch:2

"C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingApp.exe" -Embedding

"C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingBar.exe" -Embedding

"C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingSurrogate.exe" -Embedding

"C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingSurrogate.exe" -Embedding

"C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingSurrogate.exe" -Embedding

"C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingSurrogate.exe" -Embedding

"C:\Users\Jacques\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KSDGEZV8\RSITx64.exe"

C:\Windows\system32\wbem\wmiprvse.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]

Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]

Norton Vulnerability Protection - C:\Program Files (x86)\Norton AntiVirus\Engine\19.9.0.9\IPS\IPSBHO.DLL [2012-06-21 210400]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]

Office Document Cache Handler - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]

Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll [2013-07-23 1451680]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]

Ask Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2013-02-08 1520776]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]

{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2013-02-08 1520776]

{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll [2013-07-23 1451680]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-11-11 11580520]

"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-08-31 167704]

"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-08-31 392472]

"Persistence"=C:\Windows\system32\igfxpers.exe [2011-08-31 416024]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]

"MyTomTomSA.exe"=C:\Program Files (x86)\MyTomTom 3\MyTomTomSA.exe [2013-05-23 455608]

"TC Login"=c:\tccargo\tccargo.exe --autostart []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]

"ArcadeMovieService"=C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [2012-04-26 179272]

"Hotkey Utility"=C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe [2011-08-11 627304]

""= []

"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]

C:\Users\Jacques\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

Dropbox.lnk - C:\Users\Jacques\AppData\Roaming\Dropbox\bin\Dropbox.exe

OneNote 2010 Schermopname en Snel starten.lnk - C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]

C:\Windows\system32\igfxdev.dll [2011-08-31 390144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]

"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SMPCHelper]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\tvnserver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"ConsentPromptBehaviorAdmin"=0

"ConsentPromptBehaviorUser"=3

"EnableLUA"=0

"EnableUIADesktopToggle"=0

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

"PromptOnSecureDesktop"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoActiveDesktop"=1

"NoActiveDesktopChanges"=1

"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

"vidc.mrle"=msrle32.dll

"vidc.msvc"=msvidc32.dll

"msacm.imaadpcm"=imaadp32.acm

"msacm.msg711"=msg711.acm

"msacm.msgsm610"=msgsm32.acm

"msacm.msadpcm"=msadp32.acm

"midimapper"=midimap.dll

"wavemapper"=msacm32.drv

"vidc.uyvy"=msyuv.dll

"vidc.yuy2"=msyuv.dll

"vidc.yvyu"=msyuv.dll

"vidc.iyuv"=iyuv_32.dll

"vidc.i420"=iyuv_32.dll

"vidc.yvu9"=tsbyuv.dll

"msacm.l3acm"=C:\Windows\System32\l3codeca.acm

"wave"=wdmaud.drv

"midi"=wdmaud.drv

"mixer"=wdmaud.drv

"aux"=wdmaud.drv

"wave1"=wdmaud.drv

"midi1"=wdmaud.drv

"mixer1"=wdmaud.drv

"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-10-29 12:19:12 ----D---- C:\rsit

2013-10-29 12:19:12 ----D---- C:\Program Files\trend micro

2013-10-28 20:38:08 ----D---- C:\ProgramData\eSafe

2013-10-25 21:52:11 ----D---- C:\Users\Jacques\AppData\Roaming\OpenOffice

2013-10-25 21:50:38 ----D---- C:\Program Files (x86)\OpenOffice 4

2013-10-22 10:33:01 ----D---- C:\Program Files (x86)\Liberty BASIC v4.03

2013-10-22 10:28:02 ----A---- C:\Windows\SYSWOW64\cuatro.ini

2013-10-14 16:14:13 ----A---- C:\Windows\SYSWOW64\ieui.dll

2013-10-14 16:14:13 ----A---- C:\Windows\system32\ieui.dll

2013-10-14 16:14:12 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe

2013-10-14 16:14:12 ----A---- C:\Windows\SYSWOW64\msfeeds.dll

2013-10-14 16:14:12 ----A---- C:\Windows\SYSWOW64\iesysprep.dll

2013-10-14 16:14:12 ----A---- C:\Windows\SYSWOW64\iesetup.dll

2013-10-14 16:14:12 ----A---- C:\Windows\SYSWOW64\iertutil.dll

2013-10-14 16:14:12 ----A---- C:\Windows\SYSWOW64\iernonce.dll

2013-10-14 16:14:12 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe

2013-10-14 16:14:12 ----A---- C:\Windows\system32\iesysprep.dll

2013-10-14 16:14:12 ----A---- C:\Windows\system32\iesetup.dll

2013-10-14 16:14:12 ----A---- C:\Windows\system32\iertutil.dll

2013-10-14 16:14:12 ----A---- C:\Windows\system32\iernonce.dll

2013-10-14 16:14:12 ----A---- C:\Windows\system32\ie4uinit.exe

2013-10-14 16:14:11 ----A---- C:\Windows\SYSWOW64\jscript.dll

2013-10-14 16:14:11 ----A---- C:\Windows\system32\msfeeds.dll

2013-10-14 16:14:11 ----A---- C:\Windows\system32\jscript9.dll

2013-10-14 16:14:11 ----A---- C:\Windows\system32\jscript.dll

2013-10-14 16:14:10 ----A---- C:\Windows\SYSWOW64\urlmon.dll

2013-10-14 16:14:10 ----A---- C:\Windows\SYSWOW64\jscript9.dll

2013-10-14 16:14:10 ----A---- C:\Windows\system32\urlmon.dll

2013-10-14 16:14:09 ----A---- C:\Windows\SYSWOW64\wininet.dll

2013-10-14 16:14:09 ----A---- C:\Windows\SYSWOW64\jsproxy.dll

2013-10-14 16:14:09 ----A---- C:\Windows\SYSWOW64\ieframe.dll

2013-10-14 16:14:09 ----A---- C:\Windows\system32\wininet.dll

2013-10-14 16:14:09 ----A---- C:\Windows\system32\jsproxy.dll

2013-10-14 16:14:08 ----A---- C:\Windows\system32\ieframe.dll

2013-10-14 16:14:07 ----A---- C:\Windows\system32\mshtml.dll

2013-10-14 16:14:05 ----A---- C:\Windows\SYSWOW64\mshtml.dll

2013-10-14 09:17:10 ----D---- C:\Users\Jacques\AppData\Roaming\Systweak

2013-10-14 09:17:09 ----A---- C:\Windows\system32\roboot64.exe

2013-10-14 09:06:13 ----A---- C:\Windows\SYSWOW64\comctl32.dll

2013-10-14 09:06:13 ----A---- C:\Windows\system32\comctl32.dll

2013-10-14 09:06:12 ----A---- C:\Windows\system32\drivers\Wdf01000.sys

2013-10-14 09:06:10 ----A---- C:\Windows\system32\drivers\usbcir.sys

2013-10-14 09:06:09 ----A---- C:\Windows\system32\drivers\usbscan.sys

2013-10-14 09:06:09 ----A---- C:\Windows\system32\drivers\hidparse.sys

2013-10-14 09:06:09 ----A---- C:\Windows\system32\drivers\hidclass.sys

2013-10-14 09:06:04 ----A---- C:\Windows\SYSWOW64\lpk.dll

2013-10-14 09:06:04 ----A---- C:\Windows\SYSWOW64\fontsub.dll

2013-10-14 09:06:04 ----A---- C:\Windows\SYSWOW64\dciman32.dll

2013-10-14 09:06:04 ----A---- C:\Windows\SYSWOW64\atmlib.dll

2013-10-14 09:06:04 ----A---- C:\Windows\SYSWOW64\atmfd.dll

2013-10-14 09:06:04 ----A---- C:\Windows\system32\lpk.dll

2013-10-14 09:06:04 ----A---- C:\Windows\system32\fontsub.dll

2013-10-14 09:06:04 ----A---- C:\Windows\system32\dciman32.dll

2013-10-14 09:06:04 ----A---- C:\Windows\system32\atmlib.dll

2013-10-14 09:06:04 ----A---- C:\Windows\system32\atmfd.dll

2013-10-14 09:06:02 ----A---- C:\Windows\system32\win32k.sys

2013-10-14 09:06:01 ----A---- C:\Windows\system32\drivers\tcpip.sys

2013-10-14 09:06:00 ----A---- C:\Windows\SYSWOW64\mswsock.dll

2013-10-14 09:06:00 ----A---- C:\Windows\system32\WebClnt.dll

2013-10-14 09:06:00 ----A---- C:\Windows\system32\mswsock.dll

2013-10-14 09:06:00 ----A---- C:\Windows\system32\drivers\afd.sys

2013-10-14 09:05:59 ----A---- C:\Windows\SYSWOW64\WebClnt.dll

2013-10-14 09:05:59 ----A---- C:\Windows\SYSWOW64\davclnt.dll

2013-10-14 09:05:59 ----A---- C:\Windows\system32\drivers\mrxdav.sys

2013-10-14 09:05:59 ----A---- C:\Windows\system32\davclnt.dll

2013-10-14 09:05:56 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe

2013-10-14 09:05:56 ----A---- C:\Windows\system32\tdh.dll

2013-10-14 09:05:56 ----A---- C:\Windows\system32\ntoskrnl.exe

2013-10-14 09:05:56 ----A---- C:\Windows\system32\advapi32.dll

2013-10-14 09:05:55 ----A---- C:\Windows\SYSWOW64\tdh.dll

2013-10-14 09:05:55 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe

2013-10-14 09:05:55 ----A---- C:\Windows\SYSWOW64\advapi32.dll

2013-10-14 09:05:55 ----A---- C:\Windows\system32\ntdll.dll

2013-10-14 09:05:54 ----A---- C:\Windows\SYSWOW64\wow32.dll

2013-10-14 09:05:54 ----A---- C:\Windows\SYSWOW64\user.exe

2013-10-14 09:05:54 ----A---- C:\Windows\SYSWOW64\setup16.exe

2013-10-14 09:05:54 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll

2013-10-14 09:05:54 ----A---- C:\Windows\SYSWOW64\ntdll.dll

2013-10-14 09:05:54 ----A---- C:\Windows\SYSWOW64\instnm.exe

2013-10-14 09:05:54 ----A---- C:\Windows\system32\wow64.dll

2013-10-14 09:05:46 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll

2013-10-14 09:05:46 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll

2013-10-14 09:03:29 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys

2013-10-14 09:03:28 ----A---- C:\Windows\system32\scavengeui.dll

2013-10-03 13:38:52 ----D---- C:\Users\Jacques\AppData\Roaming\Canneverbe Limited

2013-10-03 13:38:52 ----D---- C:\ProgramData\Canneverbe Limited

2013-10-03 13:37:00 ----D---- C:\Program Files (x86)\MyPC Backup

2013-10-03 13:36:28 ----D---- C:\Windows\SYSWOW64\searchplugins

2013-10-03 13:36:28 ----D---- C:\Windows\SYSWOW64\Extensions

2013-10-03 13:36:19 ----D---- C:\Program Files (x86)\Mozilla Firefox

2013-10-03 13:36:19 ----D---- C:\Program Files (x86)\CDBurnerXP

2013-10-03 13:36:12 ----D---- C:\ProgramData\DSearchLink

2013-10-03 13:35:56 ----D---- C:\ProgramData\Babylon

======List of files/folders modified in the last 1 month======

2013-10-29 12:19:15 ----D---- C:\Windows\Temp

2013-10-29 12:19:12 ----RD---- C:\Program Files

2013-10-29 11:59:05 ----D---- C:\Windows\System32

2013-10-29 11:59:05 ----D---- C:\Windows\inf

2013-10-29 11:59:05 ----A---- C:\Windows\system32\PerfStringBackup.INI

2013-10-29 11:56:49 ----A---- C:\Windows\SYSWOW64\log.txt

2013-10-29 11:55:39 ----D---- C:\ProgramData\clear.fi

2013-10-29 11:55:11 ----D---- C:\Users\Jacques\AppData\Roaming\Dropbox

2013-10-29 11:54:48 ----D---- C:\Windows\system32\config

2013-10-29 11:54:37 ----RD---- C:\Program Files (x86)

2013-10-28 22:34:43 ----SHD---- C:\Windows\Installer

2013-10-28 22:34:41 ----D---- C:\ProgramData\Microsoft Help

2013-10-28 22:25:35 ----D---- C:\Windows\SysWOW64

2013-10-28 22:25:03 ----D---- C:\Windows\system32\Tasks

2013-10-28 22:25:02 ----HD---- C:\ProgramData

2013-10-28 22:18:02 ----SHD---- C:\System Volume Information

2013-10-28 22:17:00 ----D---- C:\Windows\Tasks

2013-10-28 22:01:32 ----D---- C:\Program Files (x86)\Google

2013-10-28 21:55:43 ----RSD---- C:\Windows\assembly

2013-10-28 21:55:29 ----RSD---- C:\Windows\Fonts

2013-10-28 20:38:27 ----D---- C:\Windows\system32\catroot2

2013-10-28 11:38:33 ----D---- C:\Windows\system32\catroot

2013-10-26 21:00:21 ----D---- C:\Windows\Minidump

2013-10-26 20:59:55 ----D---- C:\Windows

2013-10-25 21:46:19 ----D---- C:\Windows\winsxs

2013-10-21 20:25:30 ----D---- C:\Windows\system32\NDF

2013-10-15 16:14:40 ----D---- C:\Windows\Microsoft.NET

2013-10-14 19:56:48 ----D---- C:\Windows\Prefetch

2013-10-14 19:54:12 ----D---- C:\Windows\system32\drivers

2013-10-14 19:54:12 ----D---- C:\Program Files\Internet Explorer

2013-10-14 19:54:12 ----D---- C:\Program Files (x86)\Internet Explorer

2013-10-14 19:54:11 ----D---- C:\Windows\AppPatch

2013-10-14 19:54:09 ----D---- C:\Windows\system32\DriverStore

2013-10-14 16:13:28 ----D---- C:\Program Files\Microsoft Silverlight

2013-10-14 16:13:28 ----D---- C:\Program Files (x86)\Microsoft Silverlight

2013-10-14 16:11:21 ----D---- C:\Windows\system32\MRT

2013-10-14 16:10:04 ----A---- C:\Windows\system32\MRT.exe

2013-10-14 16:08:01 ----D---- C:\Windows\system32\nl-NL

2013-10-14 12:30:05 ----D---- C:\Program Files (x86)\Common Files

2013-10-14 07:17:44 ----D---- C:\Windows\system32\wfp

2013-10-14 07:17:37 ----D---- C:\Windows\system32\wbem

2013-10-14 07:16:10 ----D---- C:\Windows\rescache

2013-10-14 07:16:08 ----D---- C:\Windows\system32\CodeIntegrity

2013-10-14 07:15:59 ----D---- C:\Windows\AppCompat

2013-10-14 07:15:55 ----D---- C:\Program Files\Common Files\Microsoft Shared

2013-10-14 07:15:24 ----D---- C:\Windows\registration

2013-10-07 20:02:49 ----D---- C:\Windows\SYSWOW64\drivers

2013-10-03 13:40:10 ----SD---- C:\Users\Jacques\AppData\Roaming\Microsoft

2013-09-30 15:06:08 ----D---- C:\Program Files\Common Files

2013-09-30 15:04:56 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-09-30 15:04:56 ----D---- C:\Program Files (x86)\iTunes

2013-09-30 15:04:42 ----DC---- C:\Windows\system32\DRVSTORE

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2010-11-06 438808]

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]

R0 SymDS;Symantec Data Store; C:\Windows\system32\drivers\NAVx64\1309000.009\SYMDS64.SYS [2011-07-25 451192]

R0 SymEFA;Symantec Extended File Attributes; C:\Windows\system32\drivers\NAVx64\1309000.009\SYMEFA64.SYS [2012-05-22 1129120]

R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2012-12-10 484512]

R1 IDSVia64;IDSVia64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\IPSDefs\20130109.001\IDSvia64.sys [2012-09-01 513184]

R1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\Windows\system32\drivers\NAVx64\1309000.009\SRTSPX64.SYS [2012-07-06 37536]

R1 SymNetS;Symantec Network Security WFP Driver; C:\Windows\System32\Drivers\NAVx64\1309000.009\SYMNETS.SYS [2012-04-18 405624]

R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]

R2 SSPORT;SSPORT; \??\C:\Windows\system32\Drivers\SSPORT.sys [2009-07-11 11576]

R3 e1cexpress;Intel® PRO/1000 PCI Express Network Connection Driver C; C:\Windows\system32\DRIVERS\e1c62x64.sys [2010-12-20 316080]

R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-08-31 12306848]

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-11-11 2544488]

R3 IntcDAud;Intel® Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]

R3 MEIx64;Intel® Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]

R3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2010-08-11 1014624]

R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [2012-03-27 175736]

S1 BHDrvx64;BHDrvx64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\BASHDefs\20130107.001\BHDrvx64.sys [2012-10-24 1384608]

S1 ccSet_NAV;Norton AntiVirus Settings Manager; C:\Windows\system32\drivers\NAVx64\1309000.009\ccSetx64.sys [2012-06-07 167072]

S1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\NAVx64\1309000.009\Ironx64.SYS [2012-04-18 190072]

S2 DgiVecp;DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys []

S3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\VirusDefs\20130109.023\ENG64.SYS [2013-01-10 126112]

S3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\VirusDefs\20130109.023\EX64.SYS [2013-01-10 2084000]

S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]

S3 SRTSP;Symantec Real Time Storage Protection x64; C:\Windows\System32\Drivers\NAVx64\1309000.009\SRTSP64.SYS [2012-07-06 737952]

S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]

S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]

S3 usb_rndisx;USB RNDIS-adapter; C:\Windows\system32\drivers\usb8023x.sys [2013-02-12 19968]

S3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]

S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640]

R2 GREGService;GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2011-05-30 36456]

R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-11-06 13336]

R2 Live Updater Service;Live Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2011-04-22 244624]

R2 LMS;Intel® Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe [2010-12-20 325656]

R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]

R2 NAV;Norton AntiVirus; C:\Program Files (x86)\Norton AntiVirus\Engine\19.9.0.9\ccSvcHst.exe [2012-06-16 138272]

R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2013-07-02 93072]

R2 UNS;Intel® Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-12-20 2656280]

R3 BBUpdate;BBUpdate; C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe [2013-07-23 240288]

R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]

S2 BBSvc;BingBar Service; C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BBSvc.exe [2013-07-23 193696]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]

S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]

S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]

S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-02-22 1255736]

S3 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]

S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]

-----------------EOF-----------------

Link naar reactie
Delen op andere sites
Jion Grootmeester

Jion

Geplaatst:
Geplaatst:

Download 51a612a8b27e2-Zoek.pngZoek.zip naar het bureaublad.


  • Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.
  • Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.
  • Klik met de rechtermuisknop op Zoek.zip en klik op de optie "Alles uitpakken".
  • Dubbelklik op Zoek.exe om de tool te starten.
  • Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  • Kopieer nu onderstaande code en plak die in het grote invulvenster:
  • Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem. 

{D4027C7F-154A-4066-A1AD-4243D8127440};c
C:\Program Files (x86)\Ask.com;fs
C:\ProgramData\eSafe;fs
C:\Program Files (x86)\MyPC Backup;fs
C:\ProgramData\DSearchLink;fs
C:\ProgramData\Babylon;fs
hijackthis;
chromelook; 
firefoxlook; 
startupall; 
filesrcm;


  • Klik nu op de knop "Run script".
  • Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
  • Mocht na de herstart geen logje verschijnen, start zoek.exe dan opnieuw, de log verschijnt dan alsnog.
  • Post het geopende logje in het volgende bericht.

Link naar reactie
Delen op andere sites
Jacques Marges Groentje

Jacques Marges

Geplaatst:
  • Auteur
Geplaatst:
Je mag de inhoud van dat log volledig kopiëren hier in je volgend antwoord:

Open het log.

Toetscombinatie Ctrl A om alles te selecteren.

Dan Ctrl C om de geselecteerde text te kopiëren.

Dan ga je hier naar het forum waar je je nieuw antwoord kan plaatsen en gebruik je Ctrl V om de tekst hier te plakken.

Bedankt Jion voor alle moeite, we zijn er intussen uitgekomen!

Het knopje "probleem opgelost" kon ik niet vinden, dat heb je met die jongens van 72 jaar:D

Link naar reactie
Delen op andere sites
Gast
Dit topic is nu gesloten voor nieuwe reacties.
 Delen
Ga naar topic overzicht
Logo

OVER ONS

PC Helpforum helpt GRATIS computergebruikers sinds juli 2006. Ons team geeft via het forum professioneel antwoord op uw vragen en probeert uw pc problemen zo snel mogelijk op te lossen. Word lid vandaag, plaats je vraag online en het PC Helpforum-team helpt u graag verder!

SITEMAP

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.