bestrijding virus

[paashaas]

ja, dat klopt, als ik bv. naar pchelpforum ga, opent zich tegelijkertijd ook een tabblad met antivrussoftware, ook veel financiele pagina's,

er staan wel 5 advertenties per pagina, en die groene ikoontjes die als je er op klikt ook een advertentie weergeven, bij geschiedenis staat cdncache-a.akamaihd.net als internetadresvoor die popups.

Ik snap ook niet waarom ze steeds terugkomen, weet ook niet waar ik moet zoeken, hoop dat je nog iets weet.

- - - Updated - - -

De besmetting krijg ik bij ieder progamma wat ik open.

[kape]

Wil je nu dan nog eens een nieuw logje van RSIT plaatsen ?

[paashaas]

Logfile of random's system information tool 1.10 (written by random/random)

Run by cato at 2014-10-01 23:12:02

Microsoft Windows 7 Home Premium Service Pack 1

System drive C: has 68 GB (45%) free of 153 GB

Total RAM: 2013 MB (27% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 23:12:22, on 1-10-2014

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v11.0 (11.00.9600.17280)

Boot mode: Normal

Running processes:

C:\Windows\system32\taskeng.exe

C:\Windows\system32\taskhost.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\Microsoft Security Client\msseces.exe

C:\Windows\System32\igfxtray.exe

C:\Windows\System32\hkcmd.exe

C:\Windows\System32\igfxpers.exe

C:\Users\cato\Documents\Kies\KiesTrayAgent.exe

C:\Program Files\Skype\Phone\Skype.exe

C:\Users\cato\Documents\Kies\Kies.exe

C:\Users\cato\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

C:\Program Files\CCleaner\CCleaner.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\Program Files\Malwarebytes Anti-Malware\mbam.exe

C:\Windows\system32\wuauclt.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Users\cato\Downloads\RSIT.exe

C:\Program Files\trend micro\cato.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Google

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = msn

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Google

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Google

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe

O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [KiesTrayAgent] C:\Users\cato\Documents\Kies\KiesTrayAgent.exe

O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun

O4 - HKCU\..\Run: [KiesPreload] C:\Users\cato\Documents\Kies\Kies.exe /preload

O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\cato\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"

O4 - HKCU\..\Run: [EPSON Stylus DX7400 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICDE.EXE /FU "C:\Windows\TEMP\E_S97AC.tmp" /EF "HKCU"

O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200

O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll

O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe

O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe

O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

--

End of file - 5980 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

Java Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-09-06 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]

Skype Click to Call for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14 1709152]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-09-06 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2014-08-22 974432]

"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-02-11 137752]

"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-02-11 171032]

"Persistence"=C:\Windows\system32\igfxpers.exe [2011-02-11 172568]

"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]

"KiesTrayAgent"=C:\Users\cato\Documents\Kies\KiesTrayAgent.exe [2014-07-25 311616]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2012-11-09 17880752]

"KiesPreload"=C:\Users\cato\Documents\Kies\Kies.exe [2014-07-25 1562264]

"Spotify Web Helper"=C:\Users\cato\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [2014-03-07 1171968]

"EPSON Stylus DX7400 Series"=C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICDE.EXE [2007-04-12 182272]

"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner.exe [2014-09-25 4810520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]

C:\Windows\system32\igfxdev.dll [2011-02-11 228864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]

"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"ConsentPromptBehaviorAdmin"=5

"ConsentPromptBehaviorUser"=3

"EnableUIADesktopToggle"=0

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

"vidc.mrle"=msrle32.dll

"vidc.msvc"=msvidc32.dll

"msacm.imaadpcm"=imaadp32.acm

"msacm.msg711"=msg711.acm

"msacm.msgsm610"=msgsm32.acm

"msacm.msadpcm"=msadp32.acm

"midimapper"=midimap.dll

"wavemapper"=msacm32.drv

"vidc.uyvy"=msyuv.dll

"vidc.yuy2"=msyuv.dll

"vidc.yvyu"=msyuv.dll

"vidc.iyuv"=iyuv_32.dll

"vidc.i420"=iyuv_32.dll

"vidc.yvu9"=tsbyuv.dll

"msacm.l3acm"=C:\Windows\System32\l3codeca.acm

"vidc.cvid"=iccvid.dll

"wave"=wdmaud.drv

"midi"=wdmaud.drv

"mixer"=wdmaud.drv

"aux"=wdmaud.drv

"VIDC.FFDS"=ff_vfw.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-10-01 00:00:30 ----D---- C:\Program Files\ESET

2014-09-30 18:14:07 ----A---- C:\MBAM Scanlog.txt

2014-09-29 22:17:38 ----SHD---- C:\$RECYCLE.BIN

2014-09-29 22:13:42 ----A---- C:\Windows\zoek-delete.exe

2014-09-29 22:13:40 ----D---- C:\Windows\Temp

2014-09-28 10:24:52 ----D---- C:\zoek_backup

2014-09-27 17:09:16 ----D---- C:\rsit

2014-09-27 16:17:53 ----D---- C:\AdwCleaner

2014-09-27 15:54:55 ----D---- C:\Users\cato\AppData\Roaming\Nico Mak Computing

2014-09-27 15:54:42 ----D---- C:\ProgramData\Nico Mak Computing

2014-09-27 15:54:28 ----A---- C:\Windows\system32\wsusnative32.exe

2014-09-24 19:37:50 ----A---- C:\Windows\system32\tzres.dll

2014-09-24 19:32:43 ----A---- C:\Windows\system32\drivers\48230029.sys

2014-09-22 22:00:00 ----A---- C:\Windows\system32\drivers\MBAMSwissArmy.sys

2014-09-22 21:59:18 ----D---- C:\ProgramData\Malwarebytes

2014-09-22 21:59:18 ----D---- C:\Program Files\Malwarebytes Anti-Malware

2014-09-22 21:59:18 ----A---- C:\Windows\system32\drivers\mwac.sys

2014-09-22 21:59:18 ----A---- C:\Windows\system32\drivers\mbamchameleon.sys

2014-09-22 21:59:18 ----A---- C:\Windows\system32\drivers\mbam.sys

2014-09-20 13:35:06 ----AH---- C:\Program Files\.picasa.ini

2014-09-20 12:40:57 ----A---- C:\Program Files\picasa39-setup.exe

2014-09-12 15:30:36 ----A---- C:\Windows\system32\iesetup.dll

2014-09-12 15:30:28 ----A---- C:\Windows\system32\ieui.dll

2014-09-12 15:30:27 ----A---- C:\Windows\system32\MshtmlDac.dll

2014-09-12 15:30:24 ----A---- C:\Windows\system32\jscript9diag.dll

2014-09-12 15:30:21 ----A---- C:\Windows\system32\ieetwcollectorres.dll

2014-09-12 15:30:20 ----A---- C:\Windows\system32\msrating.dll

2014-09-12 15:30:19 ----A---- C:\Windows\system32\mshtmled.dll

2014-09-12 15:30:18 ----A---- C:\Windows\system32\jsproxy.dll

2014-09-12 15:30:18 ----A---- C:\Windows\system32\ieapfltr.dll

2014-09-12 15:30:17 ----A---- C:\Windows\system32\ieUnatt.exe

2014-09-12 15:30:17 ----A---- C:\Windows\system32\dxtmsft.dll

2014-09-12 15:30:16 ----A---- C:\Windows\system32\iernonce.dll

2014-09-12 15:30:16 ----A---- C:\Windows\system32\dxtrans.dll

2014-09-12 15:30:15 ----A---- C:\Windows\system32\vbscript.dll

2014-09-12 15:30:14 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-09-12 15:30:12 ----A---- C:\Windows\system32\mshtmlmedia.dll

2014-09-12 15:30:12 ----A---- C:\Windows\system32\ieetwproxystub.dll

2014-09-12 15:30:12 ----A---- C:\Windows\system32\ieetwcollector.exe

2014-09-12 15:30:11 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe

2014-09-12 15:30:09 ----A---- C:\Windows\system32\msfeeds.dll

2014-09-12 15:30:09 ----A---- C:\Windows\system32\ie4uinit.exe

2014-09-12 15:30:08 ----A---- C:\Windows\system32\iedkcs32.dll

2014-09-12 15:30:02 ----A---- C:\Windows\system32\iertutil.dll

2014-09-12 15:30:00 ----A---- C:\Windows\system32\wininet.dll

2014-09-12 15:29:58 ----A---- C:\Windows\system32\jscript9.dll

2014-09-12 15:29:57 ----A---- C:\Windows\system32\urlmon.dll

2014-09-12 15:29:53 ----A---- C:\Windows\system32\mshtml.dll

2014-09-12 15:29:51 ----A---- C:\Windows\system32\ieframe.dll

2014-09-12 15:28:36 ----A---- C:\Windows\system32\msmpeg2vdec.dll

2014-09-12 13:03:04 ----A---- C:\Windows\system32\lsasrv.dll

2014-09-12 13:03:04 ----A---- C:\Windows\system32\kerberos.dll

2014-09-12 13:02:34 ----A---- C:\Windows\system32\d3d10warp.dll

2014-09-12 13:02:30 ----A---- C:\Windows\system32\TSWorkspace.dll

2014-09-12 13:02:23 ----A---- C:\Windows\system32\aepdu.dll

2014-09-12 13:02:22 ----A---- C:\Windows\system32\aeinv.dll

2014-09-06 10:07:52 ----D---- C:\Users\cato\AppData\Roaming\Oracle

2014-09-06 10:06:36 ----A---- C:\Windows\system32\javaws.exe

2014-09-06 10:06:25 ----A---- C:\Windows\system32\javaw.exe

2014-09-06 10:06:25 ----A---- C:\Windows\system32\java.exe

2014-09-06 10:06:04 ----D---- C:\Program Files\Java

======List of files/folders modified in the last 1 month======

2014-10-01 23:12:18 ----D---- C:\Windows\Prefetch

2014-10-01 23:12:10 ----D---- C:\Program Files\trend micro

2014-10-01 20:51:04 ----D---- C:\Windows\system32\config

2014-10-01 20:39:48 ----SHD---- C:\System Volume Information

2014-10-01 19:54:12 ----D---- C:\Windows\system32\catroot

2014-10-01 19:45:55 ----D---- C:\Windows

2014-10-01 05:14:46 ----RD---- C:\Program Files

2014-09-30 20:19:40 ----D---- C:\Windows\SoftwareDistribution

2014-09-30 19:07:52 ----D---- C:\Windows\system32\catroot2

2014-09-30 19:06:00 ----D---- C:\Windows\system32\drivers

2014-09-30 19:06:00 ----D---- C:\Windows\Branding

2014-09-29 21:48:49 ----D---- C:\Windows\System32

2014-09-29 21:40:27 ----D---- C:\Windows\system32\wdi

2014-09-28 20:52:35 ----D---- C:\Windows\inf

2014-09-28 11:08:33 ----HD---- C:\ProgramData

2014-09-28 11:08:33 ----D---- C:\Windows\system32\Tasks

2014-09-27 13:12:55 ----D---- C:\Program Files\CCleaner

2014-09-27 11:52:26 ----D---- C:\Windows\nl-NL

2014-09-26 21:50:53 ----D---- C:\Users\cato\AppData\Roaming\Skype

2014-09-25 19:18:00 ----D---- C:\Windows\rescache

2014-09-24 23:49:34 ----D---- C:\Windows\winsxs

2014-09-24 23:49:27 ----D---- C:\Windows\system32\nl-NL

2014-09-24 19:36:33 ----A---- C:\Windows\system32\FlashPlayerApp.exe

2014-09-22 22:18:51 ----D---- C:\Windows\Resources

2014-09-22 21:38:27 ----RD---- C:\Users

2014-09-22 08:41:56 ----N---- C:\Windows\system32\MpSigStub.exe

2014-09-22 08:24:58 ----D---- C:\Windows\debug

2014-09-20 20:39:08 ----D---- C:\Windows\Tasks

2014-09-20 20:36:40 ----HD---- C:\Windows\system32\GroupPolicy

2014-09-20 20:36:40 ----D---- C:\Program Files\Google

2014-09-20 13:13:09 ----D---- C:\Users\cato\AppData\Roaming\vlc

2014-09-19 08:55:54 ----SHD---- C:\Windows\Installer

2014-09-19 08:55:53 ----SHD---- C:\Config.Msi

2014-09-12 16:50:36 ----D---- C:\Windows\Microsoft.NET

2014-09-12 16:49:12 ----RSD---- C:\Windows\assembly

2014-09-12 16:34:54 ----D---- C:\Windows\system32\en-US

2014-09-12 16:34:52 ----D---- C:\Program Files\Internet Explorer

2014-09-12 15:28:32 ----D---- C:\Windows\system32\MRT

2014-09-12 15:18:11 ----A---- C:\Windows\system32\MRT.exe

2014-09-12 15:16:51 ----D---- C:\Program Files\Microsoft Security Client

2014-09-12 15:16:28 ----SD---- C:\Windows\system32\CompatTel

2014-09-12 15:11:59 ----A---- C:\Windows\system32\PerfStringBackup.INI

2014-09-07 19:06:39 ----D---- C:\Users\cato\AppData\Roaming\dvdcss

2014-09-06 10:06:13 ----A---- C:\Windows\system32\WindowsAccessBridge.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-07-17 231800]

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]

R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-07-17 95920]

R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]

R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2011-02-11 9036800]

R3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20); C:\Windows\system32\DRIVERS\L1C62x86.sys [2009-07-14 50688]

R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2014-05-12 23256]

R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2014-10-01 110296]

R3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2014-05-12 51928]

S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]

S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]

S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]

S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]

S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]

S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]

S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]

S3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 36352]

S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]

S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736]

S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]

R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-07-14 1390176]

R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-07-14 1767520]

R2 MBAMScheduler;MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-05-12 1809720]

R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [2014-05-12 860472]

R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2014-08-22 22192]

R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 1713536]

R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2014-08-22 288120]

S2 892cc6a3;Performance Optimizer; c:\progra~2\perfor~1\PerformanceOptimizerSvc.dll,service []

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]

S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-11-09 160944]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-24 267440]

S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-06-06 136120]

S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-08-18 108032]

S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-12-17 1343400]

S4 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]

S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

2 oktober 2014 aangepast door kape
dubbelpost verwijderd

[paashaas]

het wordt al erger, dat virus staat me ook al niet meer toe om op jullie website te komen.

i.p.v. verschijnen steeds meer virussen, met texten dat mijn data beschadigd zijn etc, en ik progamma's daarvoor moet downloaden etc.

ongekend, nog nooit zoiets meegemaakt.

[kape]

Download Dr.Web CureIt, scroll helemaal tot onderaan de pagina en sla het op je bureaublad op.

• Klik op het icoontje om het programma te starten.
  
• Op het scherm "License and updates" zet je een vinkje in het vakje om deel te nemen aan de verbetering van Dr. Web en ga je verder via "Continue".
  
• Met de button "Start Scanning" zet je de scanning in gang. Indien er besmettingen ontdekt worden, krijg je een opsomming met de meldingen "Object" (bestandsnaam), "Threat"(naam van de besmetting), "Action" (keuzevak voor actie) en "Path" (locatie waar het bestand zich bevindt).
  
• Bij "Action" kan je (indien nodig) handmatig ingrijpen, door te kiezen voor "Move" (verplaatsen), "Delete" (verwijderen) of "Ignore" (negeren).
  
• In deze fase kan je al de eerste keer kiezen voor het tonen van de resultaten in een rapport, door te klikken op "Open Report".
  
• Om alle besmettingen samen te verwijderen, kies je voor "Neutralize". De besmette bestanden worden dan verplaatst naar de quarantaine van Dr. Web.
  
• Herstart vervolgens de computer!! Dit is een belangrijke stap want het kan zijn dat Dr.Web bestanden zal verplaatsen/verwijderen tijdens herstart.
  
• Na het herstarten op je opnieuw het rapport via "Open Report" en kopieer en plak je de inhoud van dit rapport in je volgende bericht.
  

[paashaas]

wordt vanavond laat.

[kape]

Geen probleem ... we lezen hier het resultaat dan wel ;-)

[paashaas]

hoi kape, progamma reageert niet meer als ik wil plakken, volgens het logje zitten er geen virussen in de computer, helaas zitten ze er nog wel.

Mooie boel dit, nog bedankt tot zover.

[kape]

Je hebt Chrome als standaardbrowser. Heb je nog een andere browser (IE, FF, o.i.d.) op deze PC staan ? Zo ja, heb je daar dezelfde problemen mee als bij gebruik van Chrome ?

[paashaas]

goede vraag, heb alleen chrome,mischien een idee om van browser te wisselen.