een HijackThis-logje ter analyse.

Zer0Day · 29 jan 2014

Verwijder Ccleaner eens volledig, herstart de computer en download de tool dan opnieuw via deze link: CCleaner - PC Optimization and Cleaning - Free Download

Nickkenny · 29 jan 2014

Heb ccleaner verwijderd, maar krijg steeds de melding.

Zer0Day · 29 jan 2014

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met deze tool.

Download

Zoek.exe naar het bureaublad (niet de .zip- of .rar-versie).

Zoek.exe uitvoeren
Wanneer u problemen ondervindt bij het uitvoeren van dit programma of bepaalde foutmeldingen te zien krijgt laat dit dan even weten in uw bericht.

Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.
Dubbelklik op Zoek.exe om de tool te starten.
Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Klik nu op de knop "Run script".
Er verschijnt een popup met de melding dat er geen script aangetroffen is, druk gewoon op OK.
Zoek.exe gaat nu een scan + reparatie uitvoeren, bij sommige systemen kan deze langer dan een half uur duren.
Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
Mocht na de herstart geen logje verschijnen, start zoek.exe dan opnieuw, de log verschijnt dan alsnog.
Post het geopende logje in het volgende bericht.

Nickkenny · 29 jan 2014

Zoek.exe v5.0.0.0 Updated 29-January-2014
Tool run by eigenaar on wo 29/01/2014 at 21:47:46,99.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\eigenaar\Desktop\zoek.exe [Scan all users] [Quick Scan] [Auto Clean]
==== System Restore Info ======================
29/01/2014 21:49:10 Zoek.exe System Restore Point Created Succesfully.
==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\application updater deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\application updater deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vToolbarUpdater15.1.0 deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\vToolbarUpdater15.1.0 deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vToolbarUpdater15.2.0 deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\vToolbarUpdater15.2.0 deleted successfully
==== Deleting Files \ Folders ======================
C:\ProgramData\Malwarebytes' Anti-Malware (portable) deleted
"C:\Users\eigenaar\AppData\Roaming\Vso" deleted
==== Files Recently Created / Modified ======================
====== C:\Windows ====
2014-01-28 20:32:54 F042EE4C8D66248D9B86DCF52ABAE416 256000 ----a-w- C:\Windows\PEV.exe
2014-01-28 20:32:54 9E05A9C264C8A908A8E79450FCBFF047 80412 ----a-w- C:\Windows\grep.exe
2014-01-28 20:32:54 5E832F4FAF5F481F2EAF3B3A48F603B8 68096 ----a-w- C:\Windows\zip.exe
2014-01-28 20:32:54 0297C72529807322B152F517FDB0A9FC 406528 ----a-w- C:\Windows\SWSC.exe
2014-01-28 20:32:54 0277C027A26428DB64EF4F64F52BB4FD 208896 ----a-w- C:\Windows\MBR.exe
====== C:\Users\eigenaar\AppData\Local\Temp ====
====== Java Cache =====
2014-01-29 17:38:50 EBF6E92DDA6D0B786D3EFA647BE9325B 3798 ----a-w- C:\Users\eigenaar\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14\519f558e-446cd5e7
2014-01-28 15:27:23 871956844584A457B2C2C6981F24BCB2 1511324 ----a-w- C:\Users\eigenaar\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\16\5a327c10-46f77b6e
2014-01-29 17:38:27 2E0A20C8B48EB37F27E2D18CC2A6990D 1511324 ----a-w- C:\Users\eigenaar\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\16\7cb3eb50-5bfb5be0
2014-01-29 17:38:29 5A01550132D5E1923DB2FA5DE008A351 23931 ----a-w- C:\Users\eigenaar\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38\2fb889a6-19932d6e
2014-01-29 17:40:03 5B60D17EE67F732A2745EEBB60CB8CE6 1511324 ----a-w- C:\Users\eigenaar\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40\6a749f68-1d32888f
2014-01-29 17:40:09 EBF6E92DDA6D0B786D3EFA647BE9325B 3798 ----a-w- C:\Users\eigenaar\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\46487aaa-26bbcb34
2014-01-28 15:27:38 1D9C5641F7D8E38FC42091D687CC9DAB 65477 ----a-w- C:\Users\eigenaar\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47\51a306ef-19838bee
2014-01-28 15:37:45 563E322446B3EB79C3DD2C1562275CB1 3491 ----a-w- C:\Users\eigenaar\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\48\35e8fd30-48994324
2014-01-29 17:38:46 F45C30D0A5D8C15F82FED2388F1A520D 48294 ----a-w- C:\Users\eigenaar\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5\456d0005-3b87f364
2014-01-28 15:33:16 A6E4653A5E6AF235D652D57191D9A012 1511324 ----a-w- C:\Users\eigenaar\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58\6bce3d3a-4bc2690c
2014-01-28 15:27:22 D3A6E91BBD489DAA2016E766879B5906 81 ----a-w- C:\Users\eigenaar\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\61\593bfc7d-6.0.lap
====== C:\Windows\SysWOW64 =====
2014-01-20 15:53:01 95E15A2DE75AB48728AB8E1911C3EDB1 264616 ----a-w- C:\Windows\SysWOW64\javaws.exe
2014-01-20 15:52:59 CB3638541DCAC86EE17FA8258202E20E 175016 ----a-w- C:\Windows\SysWOW64\javaw.exe
2014-01-20 15:52:59 A7871E39687EC6EE9712209DAE248B3A 96168 ----a-w- C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-20 15:52:59 9395BBE294045909A025C9F3DC3D9025 174504 ----a-w- C:\Windows\SysWOW64\java.exe
====== C:\Windows\SysWOW64\drivers =====
====== C:\Windows\Sysnative =====
2014-01-19 20:17:53 F2BF71FCEAB8FB8A691408C478E2FF4C 3156480 ----a-w- C:\Windows\Sysnative\win32k.sys
====== C:\Windows\Sysnative\drivers =====
2014-01-27 22:04:10 F24BD06AE917F57408999F79E91FD6BC 119000 ----a-w- C:\Windows\Sysnative\drivers\MBAMSwissArmy.sys
2014-01-27 22:02:27 CD51E1D0D638F1E07A6EDC98CD7F5DDA 91352 ----a-w- C:\Windows\Sysnative\drivers\mbamchameleon.sys
2014-01-19 20:18:01 FFA06EF43987ED0DD42AD59B260C0C78 7808 ----a-w- C:\Windows\Sysnative\drivers\usbd.sys
2014-01-19 20:18:01 DD253AFC3BC6CBA412342DE60C3647F3 30720 ----a-w- C:\Windows\Sysnative\drivers\usbuhci.sys
2014-01-19 20:18:01 DCA68B0943D6FA415F0C56C92158A83A 99840 ----a-w- C:\Windows\Sysnative\drivers\usbccgp.sys
2014-01-19 20:18:01 8D1196CFBB223621F2C67D45710F25BA 343040 ----a-w- C:\Windows\Sysnative\drivers\usbhub.sys
2014-01-19 20:18:01 765A92D428A8DB88B960DA5A8D6089DC 25600 ----a-w- C:\Windows\Sysnative\drivers\usbohci.sys
2014-01-19 20:18:01 18A85013A3E0F7E1755365D287443965 53248 ----a-w- C:\Windows\Sysnative\drivers\usbehci.sys
2014-01-19 20:18:01 12FEB33791920678F8433701C822BCFD 325120 ----a-w- C:\Windows\Sysnative\drivers\usbport.sys
2014-01-19 20:17:52 3555BA97171CD153118F73FDCCC8BFDE 376768 ----a-w- C:\Windows\Sysnative\drivers\netio.sys
2013-12-30 21:52:24 E0D3CD5841E5C7BE7B94BA946AF1E498 116736 ----a-w- C:\Windows\Sysnative\drivers\drmk.sys
2013-12-30 21:52:24 1E0B4CBBA91C6B041A14ECC2186F7E24 230400 ----a-w- C:\Windows\Sysnative\drivers\portcls.sys
====== C:\Windows\Tasks ======
====== C:\Windows\Temp ======
======= C:\Program Files =====
2014-01-28 20:15:31 -------- d-----w- C:\Program Files\trend micro
2014-01-24 18:13:07 -------- d-----w- C:\Program Files\iPod
2014-01-24 18:13:06 -------- d-----w- C:\Program Files\iTunes
======= C:\PROGRA~2 =====
2014-01-29 17:27:42 -------- d-----w- C:\PROGRA~2\depotcache
2014-01-29 16:05:40 -------- d-----w- C:\PROGRA~2\servers
2014-01-29 16:05:38 -------- d-----w- C:\PROGRA~2\reslists
2014-01-29 16:05:37 -------- d-----w- C:\PROGRA~2\remoteui
2014-01-29 16:05:30 -------- d-----w- C:\PROGRA~2\friends
2014-01-29 16:05:30 -------- d-----w- C:\PROGRA~2\controller_config
2014-01-29 16:05:30 -------- d-----w- C:\PROGRA~2\controller_base
2014-01-28 21:17:24 -------- d-----w- C:\PROGRA~2\ESET
2014-01-28 15:41:07 -------- d-----w- C:\PROGRA~2\package
2014-01-28 15:41:06 32 ----a-w- C:\PROGRA~2\Steam_1003.mst
2014-01-28 15:41:06 1354736 ----a-w- C:\PROGRA~2\SteamTmp.exe
2014-01-27 10:03:04 250280 ----a-w- C:\PROGRA~2\steamerrorreporter64.exe
2014-01-27 10:03:04 1811880 ----a-w- C:\PROGRA~2\streaming_client.exe
2014-01-27 10:02:52 341928 ----a-w- C:\PROGRA~2\crashhandler64.dll
2014-01-24 18:13:06 -------- d-----w- C:\PROGRA~2\iTunes
2014-01-20 16:29:43 -------- d-----w- C:\PROGRA~2\QuickTime
2014-01-20 16:25:20 -------- d-----w- C:\PROGRA~2\Secunia
2014-01-10 14:33:48 2107424 ----a-w- C:\PROGRA~2\libavcodec-55.dll.crypt
2014-01-10 14:33:42 717312 ----a-w- C:\PROGRA~2\SDL2.dll
2014-01-10 14:33:42 405 ----a-w- C:\PROGRA~2\ThirdPartyLegalNotices.css
2014-01-10 14:33:42 142460 ----a-w- C:\PROGRA~2\ThirdPartyLegalNotices.html
2014-01-05 13:21:36 -------- d-----w- C:\PROGRA~2\yaDIS
======= C: =====
====== C:\Users\eigenaar\AppData\Roaming ======
2014-01-28 20:45:48 -------- d-----w- C:\Users\UpdatusUser\AppData\Local\temp
2014-01-28 20:45:48 -------- d-----w- C:\Users\Public\AppData\Local\temp
2014-01-28 20:45:48 -------- d-----w- C:\Users\Default\AppData\Local\temp
2014-01-28 20:45:48 -------- d-----w- C:\Users\Default User\AppData\Local\temp
2014-01-12 09:41:01 -------- d-----w- C:\Users\eigenaar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
2013-12-30 21:43:19 -------- d-----w- C:\Users\eigenaar\AppData\Local\Secunia PSI
====== C:\Users\eigenaar ======
2014-01-28 21:05:53 54DB2B8C60F04C5ADE6D711D47EABA75 1166132 ----a-w- C:\Users\eigenaar\Desktop\adwcleaner.exe
2014-01-28 20:45:48 -------- d-----w- C:\Users\Public\AppData
2014-01-24 18:13:46 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-01-24 18:13:06 -------- d-----w- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-20 16:29:57 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2014-01-20 15:52:59 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-01-05 13:21:40 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\yaDIS
2013-12-30 21:49:23 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
====== C: exe-files ==
2014-01-29 20:21:45 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Users\eigenaar\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AOLWD673\ccsetup410[1].exe
2014-01-29 17:46:24 5F02DFAD00AC90A1EF5D0E255EAF75F2 70144 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\vvis.exe
2014-01-29 17:46:18 E41D233E02E5C3C1694C2FFC332F914F 92072 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\hl2.exe
2014-01-29 17:46:14 FF32FD081108CA51294AF1CFE7F388DF 79872 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\vrad.exe
2014-01-29 17:46:14 E9451C255DBD2E30C335C686D105C28C 70144 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\vtex.exe
2014-01-29 17:46:11 FAC128D97EA03CCEEE6EF20B2F388D9E 79360 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\shadercompile.exe
2014-01-29 17:46:11 DAA6F868EBC28B759C78A8C9ECA218DE 134144 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\splitskybox.exe
2014-01-29 17:45:59 AD49DD3571F136C530571BDB03B46FC9 144896 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\hammer.exe
2014-01-29 17:45:57 1DC5A1E0B442F3F427C5922B873D4AE3 252416 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\glview.exe
2014-01-29 17:45:55 8923FFD31968A0DA486B817B8BE60D2F 179200 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\captioncompiler.exe
2014-01-29 17:45:55 206EBAA00DE81788A30B904AE0BA5737 102400 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\demoinfo.exe
2014-01-29 17:27:45 F8918E8EF98B8B3CAC24A75E2E529592 1775104 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\dmxedit.exe
2014-01-29 17:27:45 F70B13B5B7DCF7EB0B2E7E1D4A8C0457 621568 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\dmxconvert.exe
2014-01-29 17:27:45 F07CE2F2AA3D3385B4322769331A183E 710144 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\vpk.exe
2014-01-29 17:27:45 F01D5DDD9043B353C5C8C77DDA38F43E 742912 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\height2normal.exe
2014-01-29 17:27:45 C07153D00AACFEF6BB1B825B4791F555 481280 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\vbspinfo.exe
2014-01-29 17:27:45 BB39FF950B925CA2F84576B63D5CCEDD 1740800 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\hlfaceposer.exe
2014-01-29 17:27:45 B76DDC8FC1B1E4F34DD1679B860CEB3B 1520640 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\vbsp.exe
2014-01-29 17:27:45 AFF47DE5A8C64A5F65F4AB3C9160641B 737792 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\normal2ssbump.exe
2014-01-29 17:27:45 AB2A866195BBC6A7AA8887057EC4D799 3322368 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\elementviewer.exe
2014-01-29 17:27:45 96ACB1224DD629494D7B029086E9D3A6 357888 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\motionmapper.exe
2014-01-29 17:27:45 84F10806E58D92CD97F0EC7318242CBA 768512 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\vtf2tga.exe
2014-01-29 17:27:45 7F32048E1AA8D413ADBF1332A17EA436 525824 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\hlmv.exe
2014-01-29 17:27:45 7084D7E71CA293F85D3B4A41C339D0EC 755712 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\height2ssbump.exe
2014-01-29 17:27:45 6A89D88BDB46FBD8B033CA8018E0ECC1 685056 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\pfm2tgas.exe
2014-01-29 17:27:45 497C52E64E582BAAE9D67D25A4318853 1966080 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\studiomdl.exe
2014-01-29 17:27:45 2D6D1C720F2B01A46B20C8E9BD3D91B1 2741760 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\qc_eyes.exe
2014-01-29 17:27:45 29A53FC1151D9A996C5C5B2BF143B545 483328 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\bspzip.exe
2014-01-29 17:27:45 076FA7D212F637A7003BF10A10BE1F85 756224 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\mksheet.exe
2014-01-28 21:17:24 CE0D0B11986FD2C0247AE88A59B36A6E 579904 ----a-w- C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe
2014-01-28 21:17:24 BDB7D97012F9B3102DB72AA76A24942A 546944 ----a-w- C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe
2014-01-28 21:17:24 7C9EEC809FB9CDA26EFC245C001EA980 2347384 ----a-w- C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe
2014-01-28 21:17:24 7ABF8849E76732C357F419B1AF5668F2 546944 ----a-w- C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScannerA.exe
2014-01-28 21:17:24 6D4ED8A5C071F29730A6F0B943FEEA3A 122584 ----a-w- C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerUninstaller.exe
2014-01-28 21:05:53 54DB2B8C60F04C5ADE6D711D47EABA75 1166132 ----a-w- C:\Users\eigenaar\Desktop\adwcleaner.exe
2014-01-28 20:32:54 F042EE4C8D66248D9B86DCF52ABAE416 256000 ----a-w- C:\Windows\PEV.exe
2014-01-28 20:32:54 9E05A9C264C8A908A8E79450FCBFF047 80412 ----a-w- C:\Windows\grep.exe
2014-01-28 20:32:54 5E832F4FAF5F481F2EAF3B3A48F603B8 68096 ----a-w- C:\Windows\zip.exe
2014-01-28 20:32:54 0297C72529807322B152F517FDB0A9FC 406528 ----a-w- C:\Windows\SWSC.exe
2014-01-28 20:32:54 0277C027A26428DB64EF4F64F52BB4FD 208896 ----a-w- C:\Windows\MBR.exe
2014-01-28 20:15:32 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\eigenaar.exe
2014-01-28 15:41:06 E3CD0A561F3AABE8607BF1474F4AE1DD 1354736 ----a-w- C:\Program Files (x86)\SteamTmp.exe
2014-01-27 10:03:04 B8332EA22D380CB8EE349320B36BA155 1811880 ----a-w- C:\Program Files (x86)\streaming_client.exe
2014-01-27 10:03:04 168CF1DBA0B4D9208B870BD0AFCF95FB 250280 ----a-w- C:\Program Files (x86)\steamerrorreporter64.exe
=== C: other files ==
2014-01-29 17:46:14 DF41D60DAF7E6DA8A973E84D497E8438 240 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\vtex.bat
2014-01-29 17:46:10 9BC9D104569B77B55E3F3663134F472F 600 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\set_sdk_env.bat
2014-01-29 17:45:59 B596E11A6BE8A1016CB1D708F8D9567B 267 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\HLMV.bat
2014-01-29 17:45:58 D20B510D28B2288A0C16634B8A6F935C 266 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\Hammer.bat
2014-01-29 17:45:54 81EB9328BD2B23A80244B584462F9393 244 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\check_sdk_env.bat
2014-01-29 17:45:53 D3F38A6C43EC513F555B0CEFAE80AF6E 278 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\Faceposer.bat
2014-01-29 17:27:45 2CCD5FF5A58F932ECB004D8881C9CA43 7337896 ----a-w- C:\Program Files (x86)\SteamApps\common\Counter-Strike Source\bin\itemtest.com
2014-01-27 22:04:10 F24BD06AE917F57408999F79E91FD6BC 119000 ----a-w- C:\Windows\System32\drivers\MBAMSwissArmy.sys
2014-01-27 22:02:27 CD51E1D0D638F1E07A6EDC98CD7F5DDA 91352 ----a-w- C:\Windows\System32\drivers\mbamchameleon.sys
==== Startup Registry Enabled ======================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"ATKOSD2"="C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
"HControlUser"="C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe"
==== Startup Registry Enabled x64 ======================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe /hide /waitservice"
"ETDCtrl"="%ProgramFiles%\Elantech\ETDCtrl.exe "
==== Startup Registry Disabled ======================
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run-]
"SunJavaUpdateSched"="\"C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe\""
"iTunesHelper"="\"C:\\Program Files (x86)\\iTunes\\iTunesHelper.exe\""
"ATKMEDIA"="C:\\Program Files (x86)\\ASUS\\ATK Package\\ATK Media\\DMedia.exe"
"Malwarebytes' Anti-Malware"="\"C:\\Program Files\\Malwarebytes' Anti-Malware\\mbamgui.exe\" /starttray"
"Adobe ARM"="\"C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\""
"QuickTime Task"="\"C:\\Program Files (x86)\\QuickTime\\QTTask.exe\" -atboottime"
"APSDaemon"="\"C:\\Program Files (x86)\\Common Files\\Apple\\Apple Application Support\\APSDaemon.exe\""

==== Startup Registry Disabled x64 ======================
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run-]
"ETDWare"="%ProgramFiles%\\Elantech\\ETDCtrl.exe"
"ETDCtrl"="%ProgramFiles%\\Elantech\\ETDCtrl.exe"
"HotKeysCmds"="\"C:\\Windows\\system32\\hkcmd.exe\""
"Persistence"="\"C:\\Windows\\system32\\igfxpers.exe\""
"RtHDVCpl"="C:\\Program Files\\Realtek\\Audio\\HDA\\RAVCpl64.exe -s"
"IgfxTray"="\"C:\\Windows\\system32\\igfxtray.exe\""

==== Task Scheduler Jobs ======================
C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [18/01/2014 23:18]
==== Other Scheduled Tasks ======================
"C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe]
"C:\Windows\SysNative\tasks\Adobe-online actualiseringsprogramma" [C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe]
"C:\Windows\SysNative\tasks\ATKOSD2" [C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe]
"C:\Windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe]
"C:\Windows\SysNative\tasks\Java Update Scheduler" [C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe]
"C:\Windows\SysNative\tasks\SidebarExecute" [C:\Program Files\Windows Sidebar\sidebar.exe]
"C:\Windows\SysNative\tasks\{DB100305-2634-4B11-ABB0-16C5AA33648C}" ["C:\Program Files (x86)\Internet Explorer\iexplore.exe" http://ui.skype.com/ui/0/6.0.73.126.456/nl/abandoninstall?page=tsWLM]
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.google.be/"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"Default"=hex(0):
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.google.be/"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="{searchTerms} - Bing"
{34507AFC-9B12-4E11-A673-3E4253B83C8A} Unknown Url="Not_Found"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={sea...startIndex={startIndex?}&startPage={startPage}"
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-1214992259-975148313-4146878049-1000\Software\Microsoft\Internet Explorer\SearchScopes\{34507AFC-9B12-4E11-A673-3E4253B83C8A} deleted successfully
==== Deleting CLSID Registry Values ======================

==== Empty IE Cache ======================
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\eigenaar\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\eigenaar\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
==== Empty FireFox Cache ======================
No FireFox Profiles found
==== Empty Chrome Cache ======================
No Chrome User Data found
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
C:\zoek_backup (files=1 folders=1 85 bytes)
==== Empty Temp Folders ======================
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Public\AppData\Local\Temp emptied successfully
C:\Users\UpdatusUser\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Users\eigenaar\AppData\Local\Temp will be emptied at reboot
C:\Windows\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\Windows\Temp successfully emptied
C:\Users\eigenaar\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== Deleting Files / Folders ======================
"C:\Users\eigenaar\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted
"C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted
"C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted
==== EOF on wo 29/01/2014 at 22:01:56,01 ======================

Zer0Day · 29 jan 2014

Download de

32 of 64 bit versie van HitmanPro naar het bureaublad.

HitmanPro (32bit)
HitmanPro (64bit)

Klik hier voor een uitgebreide handleiding van HitmanPro.

Dubbelklik op "HitmanPro.exe" en klik op "volgende"
Vink de optie "Ik accepteer de voorwaarden van de gebruikersovereenkomst aan" en klik op "Volgende"
Klik in het setup scherm nu nogmaals op "Volgende", nu zal automatisch de scan starten, doe verder niets op de computer totdat de scan gereed is.
Als de scan klaar is klik je op "volgende"
Activeer nu de gratis licentie, hiermee kunt u 30 dagen gratis HitmanPro gebruiken en de gevonden infecties verwijderen.
Note: indien u reeds eerder gebruik hebt gemaakt van de 30 dagen trial-versie van HitmanPro is het niet meer mogelijk om gratis de gevonden infecties te verwijderen.
Als het verwijderen gereed is klik je onderin het scherm op "Save log" of "Logbestand opslaan" en sla deze op bijvoorbeeld het bureaublad op.
Post dit logje.
Klik nu op de knop "Herstarten".

Nickkenny · 30 jan 2014

zie hier het log van hitmanpro

Code:

HitmanPro 3.7.9.212
[URL="http://www.hitmanpro.com"]www.hitmanpro.com[/URL]
   Computer name . . . . : WIN-7
   Windows . . . . . . . : 6.1.1.7601.X64/4
   User name . . . . . . : Win-7\eigenaar
   UAC . . . . . . . . . : Disabled
   License . . . . . . . : Free
   Scan date . . . . . . : 2014-01-30 18:02:22
   Scan mode . . . . . . : Normal
   Scan duration . . . . : 5m 19s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : No
   Threats . . . . . . . : 0
   Traces  . . . . . . . : 41
   Objects scanned . . . : 1.526.543
   Files scanned . . . . : 27.445
   Remnants scanned  . . : 277.616 files / 1.221.482 keys
Potential Unwanted Programs _________________________________________________
   HKLM\SOFTWARE\Classes\Record\{2009AF2F-5786-3067-8799-B97F7832FDD6}\ (FLV Player)
   HKLM\SOFTWARE\Classes\Record\{425E7597-03A2-338D-B72A-0E51FFE77A7E}\ (FLV Player)
   HKLM\SOFTWARE\Classes\Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24}\ (FLV Player)
   HKLM\SOFTWARE\Classes\Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9}\ (FLV Player)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E\ (AskBar)
   HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\5E8031606EB60A64C882918F8FF38DD4\ (FLV Player)
   HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964\ (FLV Player)
   HKU\S-1-5-21-1214992259-975148313-4146878049-1000\Software\Microsoft\Installer\UpgradeCodes\5E8031606EB60A64C882918F8FF38DD4\ (FLV Player)
   HKU\S-1-5-21-1214992259-975148313-4146878049-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\SnapDo.exe (FLV Player)
Cookies _____________________________________________________________________
   C:\Users\eigenaar\AppData\Roaming\Microsoft\Windows\Cookies\07Z8F6MO.txt
   C:\Users\eigenaar\AppData\Roaming\Microsoft\Windows\Cookies\0OZRY3DT.txt
   C:\Users\eigenaar\AppData\Roaming\Microsoft\Windows\Cookies\2G27L7CY.txt
   C:\Users\eigenaar\AppData\Roaming\Microsoft\Windows\Cookies\3IA6HCVA.txt
   C:\Users\eigenaar\AppData\Roaming\Microsoft\Windows\Cookies\3ONMXTDN.txt
   C:\Users\eigenaar\AppData\Roaming\Microsoft\Windows\Cookies\9WRY7HUC.txt
   C:\Users\eigenaar\AppData\Roaming\Microsoft\Windows\Cookies\D6K7W3E0.txt
   C:\Users\eigenaar\AppData\Roaming\Microsoft\Windows\Cookies\ERTF7G5B.txt
   C:\Users\eigenaar\AppData\Roaming\Microsoft\Windows\Cookies\EW90N3PC.txt
   C:\Users\eigenaar\AppData\Roaming\Microsoft\Windows\Cookies\L841SRSB.txt
   C:\Users\eigenaar\AppData\Roaming\Microsoft\Windows\Cookies\LFFKGFCI.txt
   C:\Users\eigenaar\AppData\Roaming\Microsoft\Windows\Cookies\MXGDSEBY.txt
   C:\Users\eigenaar\AppData\Roaming\Microsoft\Windows\Cookies\S2MDMOFH.txt
   C:\Users\eigenaar\AppData\Roaming\Microsoft\Windows\Cookies\S6UUJ8CU.txt

Zer0Day · 30 jan 2014

Alle gevonden items mogen verwijderd worden.

Daarna nogmaals ccleaner proberen. Als je dan nog steeds een melding krijgt, schakel dan tijdelijk je virusscanner uit tijdens de download want dat zal een valse melding zijn van je scanner.

Nickkenny · 30 jan 2014

Krijg nog steeds de melding van ccleaner , zal eens virrusscanner uit zetten en dan downloaden.
Alvast bedankt om te helpen

Zer0Day · 30 jan 2014

Ja, het zal best zijn zo.

Doe dit juist nog is:

Download

Delfix by Xplode naar het bureaublad.

Dubbelklik op Delfix.exe om de tool te starten.
Zet nu vinkjes voor de volgende items:

Activate UAC
Remove disinfection tools
Create registry backup
Purge System Restore
Reset system settings

Klik nu op "Run" en wacht geduldig tot de tool gereed is.
Wanneer de tool gereed is wordt er een logbestand aangemaakt. Dit hoeft u echter niet te plaatsen.

een HijackThis-logje ter analyse.

Zer0Day

Niet meer actief

Nickkenny

Zer0Day

Niet meer actief

Nickkenny

Zer0Day

Niet meer actief

Nickkenny

Zer0Day

Niet meer actief

Nickkenny

Zer0Day

Niet meer actief