raytheray

Alles lijkt weer normaal! Heb ook firefox opnieuw geinstalleerd en heb geen vervelende inmenging meer. Fantastish wat jullie doen. BEDANKT

Combofix.txt is nergens te vinden. Ik ga firefox opnieuw installeren en zien wat er gebeurd....Alvast bedankt iedereen.

Heb ComboFix twee maal uitgevoerd. Ik kan het scannen volgen maar ik krijg nadien geen logbestand

Ik heb firefix nog niet terug geinstalleerd. Er is nog steeds IMESHARE.DL_ in I386 en imesh.dll in system 32. Is dat normaal?

Hier bijgevoegd het HiJackThis logje. Internet Explorer laat niet toe dat ik het mbam-log upload dus hier de "geplakte" versie Malwarebytes' Anti-Malware 1.51.2.1300 www.malwarebytes.org Database version: 8035 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 10/28/2011 5:07:14 PM mbam-log-2011-10-28 (17-07-14).txt Scan type: Quick scan Objects scanned: 171072 Time elapsed: 3 minute(s), 40 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 7 Registry Values Infected: 0 Registry Data Items Infected: 3 Folders Infected: 3 Files Infected: 3 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_CLASSES_ROOT\CLSID\{1D4DB7D2-6EC9-47a3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\TypeLib\{1D4DB7D0-6EC9-47a3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{1D4DB7D1-6EC9-47A3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\FunWebProductsInstaller.Start.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\FunWebProductsInstaller.Start (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully. Registry Values Infected: (No malicious items detected) Registry Data Items Infected: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\StartMenuLogoff (PUM.Hijack.StartMenu) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckedValue (PUM.Hijack.System.Hidden) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully. Folders Infected: c:\archivos de programa\funwebproducts (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\archivos de programa\funwebproducts\Installr (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\archivos de programa\funwebproducts\Installr\1.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully. Files Infected: c:\archivos de programa\funwebproducts\Installr\1.bin\F3EZSETP.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\archivos de programa\funwebproducts\Installr\1.bin\F3PLUGIN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\archivos de programa\funwebproducts\Installr\1.bin\NPFUNWEB.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully. hijackthis.log hijackthis.log

Op Revo Uninstaller is niets terug te vinden. Hierbij het resultaat van HiJackThis hijackthis.log

Heb geprobeerd imesh te verwijderen maar blijven nog over IMESHARE.DL_ in I386 en imeshare.dll in system 32 en daar durf ik niet aan beginnen.... Ik heb ook firefox verwijderd, met Internet Explorer heb ik geen probleem. Alvorens firefox opnieuw te instaleren zou ik natuurlijk graag van die imesh af willen. Er is Windows XP op deze laptop geinstalleerd. Bedankt voor alle reakties.