Multidesk.be » Forums » Virussen, adware, spyware, ... » V9 verwijderen lukt niet

  • Pagina
  • 1 van 1
0 gasten lezen dit onderwerp.
^ Onderwerp geschreven door EvelienR op donderdag 24 september 2015 om 21:57:14.
EvelienR heeft nog geen avatar toegevoegd
Multiviteit: 2
Dag allemaal,

Het lukt ons niet om onze pc mallware-vrij te krijgen.
Bij openen van Internet Explorer blijft v9 als startpagina komen.
Willen jullie deze logs eens bekijken:

Malwarebytes Anti-Malware
www.malwarebytes.org

Scandatum: 24/09/2015
Scantijd: 18:47
Logboekbestand:
Beheerder: Ja

Versie: 2.1.8.1057
Malware-database: v2015.09.24.03
Rootkit-database: v2015.09.22.01
Licentie: Gratis
Malware-bescherming: Uitgeschakeld
Bescherming tegen kwaadaardige websites: Uitgeschakeld
Zelfbescherming: Uitgeschakeld

Besturingssysteem: Windows 8.1
Processor: x64
Bestandssysteem: NTFS
Gebruiker: Rita

Scantype: Bedreigingsscan
Resultaat: Voltooid
Objecten gescand: 387210
Verstreken tijd: 31 min, 5 sec

Geheugen: Ingeschakeld
Opstarten: Ingeschakeld
Bestandssysteem: Ingeschakeld
Archieven: Ingeschakeld
Rootkits: Uitgeschakeld
Heuristiek: Ingeschakeld
POP: Ingeschakeld
POA: Ingeschakeld

Processen: 0
(Geen kwaadaardige items gedetecteerd)

Modules: 0
(Geen kwaadaardige items gedetecteerd)

Registersleutels: 0
(Geen kwaadaardige items gedetecteerd)

Registerwaarden: 0
(Geen kwaadaardige items gedetecteerd)

Registerdata: 0
(Geen kwaadaardige items gedetecteerd)

Mappen: 0
(Geen kwaadaardige items gedetecteerd)

Bestanden: 0
(Geen kwaadaardige items gedetecteerd)

Fysieke Sectoren: 0
(Geen kwaadaardige items gedetecteerd)


(end)

Malwarebytes Anti-Malware
www.malwarebytes.org

Scandatum: 25/08/2015
Scantijd: 14:44
Logboekbestand:
Beheerder: Ja

Versie: 2.1.8.1057
Malware-database: v2015.08.25.04
Rootkit-database: v2015.08.16.01
Licentie: Gratis
Malware-bescherming: Uitgeschakeld
Bescherming tegen kwaadaardige websites: Uitgeschakeld
Zelfbescherming: Uitgeschakeld

Besturingssysteem: Windows 8.1
Processor: x64
Bestandssysteem: NTFS
Gebruiker: Rita

Scantype: Bedreigingsscan
Resultaat: Voltooid
Objecten gescand: 383723
Verstreken tijd: 29 min, 53 sec

Geheugen: Ingeschakeld
Opstarten: Ingeschakeld
Bestandssysteem: Ingeschakeld
Archieven: Ingeschakeld
Rootkits: Uitgeschakeld
Heuristiek: Ingeschakeld
POP: Ingeschakeld
POA: Ingeschakeld

Processen: 0
(Geen kwaadaardige items gedetecteerd)

Modules: 0
(Geen kwaadaardige items gedetecteerd)

Registersleutels: 8
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{23119123-0854-469D-807A-171568457991}, In quarantaine, [5bad2edf8a01fc3a31d7cb0a689a0ef2],
PUP.Optional.MyScrapNook.A, HKLM\SOFTWARE\CLASSES\TypeLib\{03119103-0854-469D-807A-171568457991}, In quarantaine, [fb0d22ebadde4ee828e0def7e31fb24e],
PUP.Optional.Desk365.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Desk 365 RunAsStdUser, Verwijder-bij-herstart, [98704ebf1c6f83b313f9ed33f211b24e],
PUP.Optional.OmigaPlus.ShrtCln, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Omiga Plus RunAsStdUser, Verwijder-bij-herstart, [a5638e7f5b308aacc490c15d788b9b65],
PUP.Optional.MyWebSearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CF6E4B1C-DBDE-457E-9CEF-AB8ECAC8A5E8}, In quarantaine, [8a7e17f63b5042f4c2ec119859abac54],
PUP.Optional.Mindspark.A, HKU\S-1-5-21-295760202-3936470170-3150341136-1001\SOFTWARE\APPDATALOW\SOFTWARE\FromDocToPDF_65, In quarantaine, [7b8d9677f4978ea8b84668ee51b2728e],
PUP.Optional.Mindspark.A, HKU\S-1-5-21-295760202-3936470170-3150341136-1001\SOFTWARE\APPDATALOW\SOFTWARE\VideoDownloadConverter_4z, In quarantaine, [45c310fd83085cda3cb72d293fc4ee12],
PUP.Optional.MyWebSearch.A, HKU\S-1-5-21-295760202-3936470170-3150341136-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{CF6E4B1C-DBDE-457E-9CEF-AB8ECAC8A5E8}, In quarantaine, [d23643cae0ab9d99a904c0e9e123aa56],

Registerwaarden: 2
PUP.Optional.MyWebSearch.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8}|URL, http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?p2=^HJ^xdm070^YY^be&si=pconverter&ptb=AE7E5BA2-18DF-4E78-9DD2-682AEF397A1B&ind=2013052912&n=77fcbff0&psa=&st=sb&searchfor={searchTerms}, In quarantaine, [8a7e17f63b5042f4c2ec119859abac54]
PUP.Optional.MyWebSearch.A, HKU\S-1-5-21-295760202-3936470170-3150341136-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8}|URL, http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?p2=^HJ^xdm070^YY^be&si=pconverter&ptb=AE7E5BA2-18DF-4E78-9DD2-682AEF397A1B&ind=2013052912&n=77fcbff0&psa=&st=sb&searchfor={searchTerms}, In quarantaine, [d23643cae0ab9d99a904c0e9e123aa56]

Registerdata: 6
PUP.Optional.Portaldosites.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=TOSHIBAXMQ01ABD075_Y25SP0IOTXXY25SP0IOT&ts=1369843579, Goed: (www.google.com), Slecht: (http://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=TOSHIBAXMQ01ABD075_Y25SP0IOTXXY25SP0IOT&ts=1369843579),Vervangen,[4cbca26b0b80082ebb867ae0d23344bc]
PUP.Optional.Portaldosites.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=TOSHIBAXMQ01ABD075_Y25SP0IOTXXY25SP0IOT&ts=1369843579, Goed: (www.google.com), Slecht: (http://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=TOSHIBAXMQ01ABD075_Y25SP0IOTXXY25SP0IOT&ts=1369843579),Vervangen,[0afe9e6fe1aa39fdbf824b0fee17629e]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Goed: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Slecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Vervangen,[71976ba2ec9f41f57d4b5504c243a759]
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Goed: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Slecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Vervangen,[bd4be627484383b3dbed2e2b759014ec]
PUP.Optional.Portaldosites.ShrtCln, HKU\S-1-5-21-295760202-3936470170-3150341136-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, http://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=TOSHIBAXMQ01ABD075_Y25SP0IOTXXY25SP0IOT&ts=1369843579, Goed: (www.google.com), Slecht: (http://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=TOSHIBAXMQ01ABD075_Y25SP0IOTXXY25SP0IOT&ts=1369843579),Vervangen,[b25637d607845ed884bef2684fb6bf41]
PUP.Optional.Portaldosites.ShrtCln, HKU\S-1-5-21-295760202-3936470170-3150341136-1002\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, http://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=TOSHIBAXMQ01ABD075_Y25SP0IOTXXY25SP0IOT&ts=1369843579, Goed: (www.google.com), Slecht: (http://www.portaldosites.com/?utm_source=b&utm_medium=slbnew&from=slbnew&uid=TOSHIBAXMQ01ABD075_Y25SP0IOTXXY25SP0IOT&ts=1369843579),Vervangen,[33d5d736e0ab48eeb78b34268b7aa65a]

Mappen: 21
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\app, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\app\config, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\app\config\1, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\app\config\3, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\app\config\35, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\app\config\36, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\app\config\39, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\app\config\4, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\app\config\41, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\app\config\42, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\components, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\desk_bkg, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\promote, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\sysicons, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\wp, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Program Files (x86)\Desk 365, In quarantaine, [23e546c7dfac45f113892652976d7e82],
PUP.Optional.337Technologies.A, C:\Program Files (x86)\Common Files\337\libcef, In quarantaine, [e721db32a9e2c175ba9dc22738ca4db3],
PUP.Optional.337Technologies.A, C:\Program Files (x86)\Common Files\337\libcef\1.1364.1123, In quarantaine, [e721db32a9e2c175ba9dc22738ca4db3],
PUP.Optional.337Technologies.A, C:\Program Files (x86)\Common Files\337\libcef\1.1364.1123\locales, In quarantaine, [e721db32a9e2c175ba9dc22738ca4db3],

Bestanden: 101
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\components\libcef_1.1364_wallpaper.exe, In quarantaine, [96724dc00e7d05313939ccb4ff060cf4],
PUP.Optional.E7, C:\Users\Rita\AppData\Roaming\eIntaller\974E7D67C0D34d3aA22765F047050462\Desk365.exe, In quarantaine, [10f865a82b6087afba2c74ab06fad828],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Omiga Plus\wallpaper_components.exe, In quarantaine, [37d1f617e1aafe380f63522ef70e37c9],
PUP.Optional.Desk365.A, C:\Windows\System32\Tasks\Desk 365 RunAsStdUser, In quarantaine, [e42432db1d6ea195927c23fe5fa4bc44],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\promote.xml, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\accelerate, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\desk_bkg_list.xml, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\desk_list.xml, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\desk_settings.ini, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\process_mgr.xml, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\app\config\1\angrybirds.db, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\app\config\1\angrybirds.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\app\config\3\BigFarm.db, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\app\config\3\BigFarm.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\app\config\35\Gmail.db, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\app\config\35\Gmail.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\app\config\36\Outlook.db, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\app\config\36\Outlook.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\app\config\39\ESPN.db, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\app\config\39\ESPN.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\app\config\4\Empire.db, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\app\config\4\Empire.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\app\config\41\gcalendar.db, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\app\config\41\gcalendar.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\app\config\42\pulse.db, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\app\config\42\pulse.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_1.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_2.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_3.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_4.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_5.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\desk_bkg\desk_bkg_default.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons\iexplore_65b6db66de06cd7dd6503f314d75a431_48_48.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons\337_7c9140b13c049fd26989f7fa25b77cb1_48_48.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons\angrybirds_00ff92c12703baaf0130d6aec427d047_48_48.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons\Barbie_00a67ff4ef657679a6c88553135d62ad_48_48.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons\BigFarm_de933b0e5218a4db24bebe3d55ed3558_48_48.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons\CCleaner_540ead5a544b16f2583d196c576df8ac_48_48.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons\chrome_49c27705d2f62a4f6b2c6e949bb0c503.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons\chrome_49c27705d2f62a4f6b2c6e949bb0c503_48_48.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons\Empire_22b42f57d1c467841280810e218d5510_48_48.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons\ESPN_a7b078f5f5f5b87efcef66ab5783cf9d_48_48.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons\Facebook_aab07bc79cf599b25c0110f32d46a3ef_48_48.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons\gcalendar_50b3e3c5fc202f0cfcae8032b2465c1b_48_48.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons\Gmail_731b6d011bd9f67463a916a496775935_48_48.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons\Google_60d75cb277f0c452fa60dba8350caf65_48_48.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons\iexplore_65b6db66de06cd7dd6503f314d75a431.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons\Mario_52934d81761dc31187a93a3a0be7fecc_48_48.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons\Outlook_6f817b67fa6af1a9c8abfa3813a8595c_48_48.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons\pulse_b5a242da04cc06eacd02b1ca41e3583c_48_48.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons\sys_computer_20_20.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons\sys_computer_48_48.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons\sys_control_panel_20_20.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons\sys_control_panel_48_48.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons\sys_downloads_20_20.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons\sys_my_documents_20_20.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons\sys_my_documents_48_48.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons\sys_network_48_48.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons\Twitter_ebddd85ec04b7b94a2b2e97b73a90a4a_48_48.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\icons\Youtube_bf18fdfc4aefd6417a8bacae4be5b415_48_48.png, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\promote\337.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\promote\337_7c9140b13c049fd26989f7fa25b77cb1.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\promote\barbie.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\promote\Barbie_00a67ff4ef657679a6c88553135d62ad.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\promote\facebook.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\promote\Facebook_aab07bc79cf599b25c0110f32d46a3ef.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\promote\GameCenter.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\promote\google.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\promote\Google_60d75cb277f0c452fa60dba8350caf65.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\promote\mario.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\promote\Mario_52934d81761dc31187a93a3a0be7fecc.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\promote\twitter.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\promote\Twitter_ebddd85ec04b7b94a2b2e97b73a90a4a.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\promote\v9.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\promote\youtube.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\promote\Youtube_bf18fdfc4aefd6417a8bacae4be5b415.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\sysicons\imageres.dll_104.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\sysicons\imageres.dll_107.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\sysicons\imageres.dll_175.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\sysicons\imageres.dll_20.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\sysicons\shell32.dll_21.ico, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\wp\r0.jpg, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\wp\r1.jpg, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\wp\r2.jpg, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\wp\r3.jpg, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\wp\r4.jpg, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\wp\r5.jpg, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\wp\r6.jpg, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\wp\r7.jpg, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\wp\r8.jpg, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Users\Rita\AppData\Roaming\Desk 365\wp\r9.jpg, In quarantaine, [2ddb937a5833fb3b33681266e024cc34],
PUP.Optional.Desk365.A, C:\Program Files (x86)\Desk 365\promote.xml, In quarantaine, [23e546c7dfac45f113892652976d7e82],
PUP.Optional.Desk365.A, C:\Program Files (x86)\Desk 365\desk_bkg_list.xml, In quarantaine, [23e546c7dfac45f113892652976d7e82],
PUP.Optional.Desk365.A, C:\Program Files (x86)\Desk 365\desk_list.xml, In quarantaine, [23e546c7dfac45f113892652976d7e82],
PUP.Optional.Desk365.A, C:\Program Files (x86)\Desk 365\desk_settings.ini, In quarantaine, [23e546c7dfac45f113892652976d7e82],
PUP.Optional.Desk365.A, C:\Program Files (x86)\Desk 365\process_mgr.xml, In quarantaine, [23e546c7dfac45f113892652976d7e82],
PUP.Optional.Desk365.A, C:\Program Files (x86)\Desk 365\recent.xml, In quarantaine, [23e546c7dfac45f113892652976d7e82],
PUP.Optional.OmigaPlus.ShrtCln, C:\Windows\System32\Tasks\Omiga Plus RunAsStdUser, In quarantaine, [749424e9dead80b6df9a4b64867e9a66],
PUP.Optional.337Technologies.A, C:\Program Files (x86)\Common Files\337\libcef\1.1364.1123\icudt.dll, In quarantaine, [e721db32a9e2c175ba9dc22738ca4db3],
PUP.Optional.337Technologies.A, C:\Program Files (x86)\Common Files\337\libcef\1.1364.1123\libcef.dll, In quarantaine, [e721db32a9e2c175ba9dc22738ca4db3],
PUP.Optional.337Technologies.A, C:\Program Files (x86)\Common Files\337\libcef\1.1364.1123\locales\en-US.pak, In quarantaine, [e721db32a9e2c175ba9dc22738ca4db3],

Fysieke Sectoren: 0
(Geen kwaadaardige items gedetecteerd)


(end)



Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:55:54, on 24/09/2015
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17840)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\hijackthis\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: ::1 localhost
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O4 - HKLM\..\Run: [Dolby Home Theater v4] "C:\Dolby PCEE4\pcee4.exe" -autostart
O4 - HKLM\..\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
O4 - HKCU\..\Run: [SpybotPostWindows10UpgradeReInstall] "C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe"
O4 - HKLM\..\Policies\Explorer\Run: [BtvStack] "C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe"
O4 - Global Startup: Acer Backup Manager Tray.lnk = C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: AtherosSvc - Unknown owner - C:\WINDOWS\system32\AdminService.exe (file missing)
O23 - Service: CCDMonitorService - Acer Incorporated - C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Device Fast-lane Service (DeviceFastLaneService) - Acer Incorporated - C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) - Unknown owner - C:\WINDOWS\system32\igfxCUIService.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Dritek RF Button Command Service (RfButtonDriverService) - Dritek System INC. - C:\Windows\RfBtnSvc64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Wlan Agent - Atheros - C:\Program Files (x86)\Qualcomm Atheros\Ath_WlanAgent.exe

--
End of file - 9696 bytes
^ Reactie #1 geschreven door Wheeldigger op vrijdag 25 september 2015 om 22:07:38.
Wheeldigger's avatar
Multiviteit: 10173
Moderator
Volg eerst het Stappenplan VOLLEDIG,
zelfs al heb je al scans gedaan.
Hier staan de meest recente producten, en hier werken onze HJT mensen graag mee.
Zorg ervoor dat je logs als bijlage in je post staan!

Succes ;)
  • Pagina
  • 1 van 1

Snel-antwoordformulier
Toon uitgebreid antwoordformulier Bericht nalezen Bericht plaatsen