stein

Hallo, het adwcleaner bestand: [ATTACH]35782[/ATTACH] AdwCleaner[S0].txt

Hallo, het log bestand: [ATTACH]35749[/ATTACH] zoek-results.txt

Hallo, ik heb het log bestand terug in de bijlage gezet. [ATTACH]35743[/ATTACH] zoek-results.txt

Bedankt voor de snelle reactie, hier is het log bestand [ATTACH]35702[/ATTACH] log.txt

Beste Ik krijg al een tijdje een popup als ik chrome wil opstarten die zegt dat ik een ongeldige installatiekopie gebruik, ik heb vervolgens chrome opnieuw probereren te installeren maar opnieuw kreeg ik een foutmelding (zie afbeelding): . Hoe komt dit en hoe kan ik dit oplossen? Alvast bedankt

Hij zegt dat er nog altijd een virus opzit. Kan dit soms aan Norton zelf liggen?

Emsisoft Emergency Kit - Versie 1.0 Laatste Update: 6/03/2012 20:03:01 Scaninstellingen: Scantype: Diepe Scan Objecten: Geheugen, Sporen, Cookies, C:\, D:\ Scan archieven: Aan Heuristieken: Uit ADS Scan: Aan Scan gestart: 6/03/2012 20:03:54 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery Ontdekt: Trace.Directory.Advanced Archive Password Recovery 4.5!A2 c:\users\padeg\appdata\roaming\microsoft\windows\start menu\programs\ElcomSoft Ontdekt: Trace.Directory.Advanced Archive Password Recovery 4.5!A2 c:\users\padeg\appdata\roaming\microsoft\windows\start menu\programs\ElcomSoft\Advanced Archive Password Recovery Ontdekt: Trace.Directory.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\archpr.chm Ontdekt: Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\digits.chr Ontdekt: Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\english.chr Ontdekt: Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\english.dic Ontdekt: Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\english.lng Ontdekt: Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\file_id.diz Ontdekt: Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\german.chr Ontdekt: Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\german.dic Ontdekt: Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\german.lng Ontdekt: Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\license.txt Ontdekt: Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\order.txt Ontdekt: Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\readme.txt Ontdekt: Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\russian.chr Ontdekt: Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\russian.dic Ontdekt: Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\russian.lng Ontdekt: Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\special.chr Ontdekt: Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\users\padeg\appdata\roaming\microsoft\windows\start menu\programs\ElcomSoft\Advanced Archive Password Recovery\Advanced Archive Password Recovery Help.lnk Ontdekt: Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\users\padeg\appdata\roaming\microsoft\windows\start menu\programs\ElcomSoft\Advanced Archive Password Recovery\Advanced Archive Password Recovery.lnk Ontdekt: Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\users\padeg\appdata\roaming\microsoft\windows\start menu\programs\ElcomSoft\Advanced Archive Password Recovery\End-User License Agreement.lnk Ontdekt: Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\users\padeg\appdata\roaming\microsoft\windows\start menu\programs\ElcomSoft\Advanced Archive Password Recovery\How to order.lnk Ontdekt: Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\users\padeg\appdata\roaming\microsoft\windows\start menu\programs\ElcomSoft\Advanced Archive Password Recovery\Readme.lnk Ontdekt: Trace.File.Advanced Archive Password Recovery 4.5!A2 Key: HKEY_CURRENT_USER\software\imesh Ontdekt: Trace.Registry.IMesh!A2 Value: HKEY_CURRENT_USER\Software\iMesh --> LastOpenFileDir Ontdekt: Trace.Registry.iMesh!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery --> InstallDir Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery --> Start Menu Folder Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Archive Password Recovery --> DisplayIcon Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Archive Password Recovery --> DisplayName Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Archive Password Recovery --> DisplayVersion Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Archive Password Recovery --> HelpLink Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Archive Password Recovery --> HelpTelephone Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Archive Password Recovery --> InstallLocation Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Archive Password Recovery --> NoModify Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Archive Password Recovery --> NoRepair Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Archive Password Recovery --> Publisher Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Archive Password Recovery --> UninstallString Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Archive Password Recovery --> URLInfoAbout Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Archive Password Recovery --> URLUpdateInfo Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Archive Password Recovery --> VersionMajor Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Archive Password Recovery --> VersionMinor Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery --> CPUs/Threads don't care Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery --> Stat param #1 Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery --> Stat param #2 Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery --> Use # cpu(s) Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Language --> FileName Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Paths --> ProjectPath Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Stats --> StatParam1 Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Stats --> StatParam2 Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> AllCaps Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> AllCombinations Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> AllDigits Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> AllPrint Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> AllSmall Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> AllSpecial Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> AttackOnSelect Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> AttackType Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> Autosave Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> AutosaveDirectory Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> AutosaveFilename Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> AutosaveTimer Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> BinaryOK Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> CodeOptFor Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> DictionaryStartLine Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> EKey0 Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> EKey1 Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> EKey2 Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> EndAt Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> IsDictOEM Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> IsLogging Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> IsOEM Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> KnownByte1 Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> KnownByte2 Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> KnownByte3 Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> KnownByte4 Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> Mask Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> MaskSymbol Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> MaxLen Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> MinimizeToTray Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> MinLen Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> Priority Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> PTStartFromValue Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> SmartMutations Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> Space Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> StartFrom Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> UpdateTimer Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> UseKnownStart Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> UserDefined Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> UserDefinedCharsetII Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> UseWinzip Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> WinzipPercent Ontdekt: Trace.Registry.Advanced Archive Password Recovery 4.1!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:1361 Ontdekt: Trace.TrackingCookie.adserv!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:2776 Ontdekt: Trace.TrackingCookie.aol.com!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:3374 Ontdekt: Trace.TrackingCookie.webtrends!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:3401 Ontdekt: Trace.TrackingCookie.webtrends!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:4140 Ontdekt: Trace.TrackingCookie.uk.sitestat.com!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:4141 Ontdekt: Trace.TrackingCookie.uk.sitestat.com!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:5529 Ontdekt: Trace.TrackingCookie.www.wired!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:6057 Ontdekt: Trace.TrackingCookie.www.googleadservices.com!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:6468 Ontdekt: Trace.TrackingCookie.www.googleadservices.com!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:6628 Ontdekt: Trace.TrackingCookie.be.sitestat.com!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:6629 Ontdekt: Trace.TrackingCookie.be.sitestat.com!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:7167 Ontdekt: Trace.TrackingCookie.www.googleadservices.com!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:9051 Ontdekt: Trace.TrackingCookie.www.googleadservices.com!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:9129 Ontdekt: Trace.TrackingCookie.www.googleadservices.com!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:9604 Ontdekt: Trace.TrackingCookie.www.googleadservices.com!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:9767 Ontdekt: Trace.TrackingCookie.www.belstat.be!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:10797 Ontdekt: Trace.TrackingCookie.bimonline.insites.be!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:12272 Ontdekt: Trace.TrackingCookie.www.googleadservices.com!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:13475 Ontdekt: Trace.TrackingCookie.www.belstat.be!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:13588 Ontdekt: Trace.TrackingCookie.www.belstat.be!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:13602 Ontdekt: Trace.TrackingCookie.www.adspace.be!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:13625 Ontdekt: Trace.TrackingCookie.count!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:14270 Ontdekt: Trace.TrackingCookie.d1.openx.org!A2 C:\Users\Padeg\AppData\Local\dd7d761a\U\80000000.@ Ontdekt: Trojan.Win64!IK C:\Users\Padeg\AppData\Local\dd7d761a\U\800000cb.@ Ontdekt: Trojan.Win64!IK C:\Users\Padeg\AppData\Local\dd7d761a\U\800000cf.@ Ontdekt: Trojan.Win64!IK C:\Users\Padeg\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00428c Ontdekt: Trojan-Dropper.Win32.Injector!IK C:\Users\Padeg\AppData\Local\Temp\filehunter-update.exe Ontdekt: Hoax.Win32.ArchSMS!IK C:\Users\Padeg\Downloads\Facebook Private Profile Viewer Setup.zip/Facebook Private Profile Viewer Setup\Facebook Private Profile Viewer.exe Ontdekt: Win32.Malware!IK C:\Users\Public\VSO Software ConvertXtoDVD v4.1.19.365 Incl keygen-Lz\Keygen\Keygen.exe Ontdekt: possible-Threat.Keygen.LZ0!IK C:\Users\User\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44\2f834cac-2f0b2867/main.class Ontdekt: Trojan-Downloader.Java.Agent!IK D:\schijf\Users\johan\AppData\LocalLow\MyWebSearch\bar\setups\mwsautSp.exe/mwsSetup.CommonCodebase.exe Ontdekt: AdInstaller!IK D:\Users\johan\AppData\LocalLow\MyWebSearch\bar\setups\mwsautSp.exe/mwsSetup.CommonCodebase.exe Ontdekt: AdInstaller!IK Gescand Bestanden: 2059383 Sporen: 405504 Cookies: 3666 Processen: 84 Gevonden Bestanden: 10 Sporen: 92 Cookies: 24 Processen: 0 Registersleutels: 0 Scan Geëindigd: 7/03/2012 9:08:30 Scantijd: 13:04:36 D:\schijf\Users\johan\AppData\LocalLow\MyWebSearch\bar\setups\mwsautSp.exe/mwsSetup.CommonCodebase.exe Verwijderd AdInstaller!IK D:\Users\johan\AppData\LocalLow\MyWebSearch\bar\setups\mwsautSp.exe/mwsSetup.CommonCodebase.exe Verwijderd AdInstaller!IK C:\Users\User\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44\2f834cac-2f0b2867/main.class Verwijderd Trojan-Downloader.Java.Agent!IK C:\Users\Public\VSO Software ConvertXtoDVD v4.1.19.365 Incl keygen-Lz\Keygen\Keygen.exe Verwijderd possible-Threat.Keygen.LZ0!IK C:\Users\Padeg\Downloads\Facebook Private Profile Viewer Setup.zip/Facebook Private Profile Viewer Setup\Facebook Private Profile Viewer.exe Verwijderd Win32.Malware!IK C:\Users\Padeg\AppData\Local\Temp\filehunter-update.exe Verwijderd Hoax.Win32.ArchSMS!IK C:\Users\Padeg\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00428c Verwijderd Trojan-Dropper.Win32.Injector!IK C:\Users\Padeg\AppData\Local\dd7d761a\U\80000000.@ Verwijderd Trojan.Win64!IK C:\Users\Padeg\AppData\Local\dd7d761a\U\800000cb.@ Verwijderd Trojan.Win64!IK C:\Users\Padeg\AppData\Local\dd7d761a\U\800000cf.@ Verwijderd Trojan.Win64!IK C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:14270 Verwijderd Trace.TrackingCookie.d1.openx.org!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:13625 Verwijderd Trace.TrackingCookie.count!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:13602 Verwijderd Trace.TrackingCookie.www.adspace.be!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:10797 Verwijderd Trace.TrackingCookie.bimonline.insites.be!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:9767 Verwijderd Trace.TrackingCookie.www.belstat.be!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:13475 Verwijderd Trace.TrackingCookie.www.belstat.be!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:13588 Verwijderd Trace.TrackingCookie.www.belstat.be!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:6628 Verwijderd Trace.TrackingCookie.be.sitestat.com!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:6629 Verwijderd Trace.TrackingCookie.be.sitestat.com!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:6057 Verwijderd Trace.TrackingCookie.www.googleadservices.com!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:6468 Verwijderd Trace.TrackingCookie.www.googleadservices.com!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:7167 Verwijderd Trace.TrackingCookie.www.googleadservices.com!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:9051 Verwijderd Trace.TrackingCookie.www.googleadservices.com!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:9129 Verwijderd Trace.TrackingCookie.www.googleadservices.com!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:9604 Verwijderd Trace.TrackingCookie.www.googleadservices.com!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:12272 Verwijderd Trace.TrackingCookie.www.googleadservices.com!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:5529 Verwijderd Trace.TrackingCookie.www.wired!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:4140 Verwijderd Trace.TrackingCookie.uk.sitestat.com!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:4141 Verwijderd Trace.TrackingCookie.uk.sitestat.com!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:3374 Verwijderd Trace.TrackingCookie.webtrends!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:3401 Verwijderd Trace.TrackingCookie.webtrends!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:2776 Verwijderd Trace.TrackingCookie.aol.com!A2 C:\Users\Padeg\AppData\Roaming\Mozilla\Firefox\Profiles\8mey6jy4.default\cookies.sqlite:1361 Verwijderd Trace.TrackingCookie.adserv!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery --> CPUs/Threads don't care Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery --> Stat param #1 Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery --> Stat param #2 Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery --> Use # cpu(s) Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Language --> FileName Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Paths --> ProjectPath Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Stats --> StatParam1 Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Stats --> StatParam2 Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> AllCaps Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> AllCombinations Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> AllDigits Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> AllPrint Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> AllSmall Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> AllSpecial Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> AttackOnSelect Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> AttackType Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> Autosave Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> AutosaveDirectory Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> AutosaveFilename Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> AutosaveTimer Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> BinaryOK Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> CodeOptFor Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> DictionaryStartLine Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> EKey0 Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> EKey1 Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> EKey2 Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> EndAt Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> IsDictOEM Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> IsLogging Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> IsOEM Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> KnownByte1 Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> KnownByte2 Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> KnownByte3 Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> KnownByte4 Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> Mask Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> MaskSymbol Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> MaxLen Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> MinimizeToTray Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> MinLen Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> Priority Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> PTStartFromValue Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> SmartMutations Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> Space Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> StartFrom Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> UpdateTimer Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> UseKnownStart Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> UserDefined Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> UserDefinedCharsetII Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> UseWinzip Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery\Window Controls --> WinzipPercent Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.1!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery --> InstallDir Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Elcomsoft\Advanced Archive Password Recovery --> Start Menu Folder Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Archive Password Recovery --> DisplayIcon Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Archive Password Recovery --> DisplayName Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Archive Password Recovery --> DisplayVersion Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Archive Password Recovery --> HelpLink Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Archive Password Recovery --> HelpTelephone Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Archive Password Recovery --> InstallLocation Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Archive Password Recovery --> NoModify Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Archive Password Recovery --> NoRepair Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Archive Password Recovery --> Publisher Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Archive Password Recovery --> UninstallString Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Archive Password Recovery --> URLInfoAbout Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Archive Password Recovery --> URLUpdateInfo Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Archive Password Recovery --> VersionMajor Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Value: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced Archive Password Recovery --> VersionMinor Verwijderd Trace.Registry.Advanced Archive Password Recovery 4.5!A2 Key: HKEY_CURRENT_USER\software\imesh Verwijderd Trace.Registry.IMesh!A2 Value: HKEY_CURRENT_USER\Software\iMesh --> LastOpenFileDir Verwijderd Trace.Registry.IMesh!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\archpr.chm Verwijderd Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\digits.chr Verwijderd Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\english.chr Verwijderd Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\english.dic Verwijderd Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\english.lng Verwijderd Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\file_id.diz Verwijderd Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\german.chr Verwijderd Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\german.dic Verwijderd Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\german.lng Verwijderd Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\license.txt Verwijderd Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\order.txt Verwijderd Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\readme.txt Verwijderd Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\russian.chr Verwijderd Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\russian.dic Verwijderd Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\russian.lng Verwijderd Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery\special.chr Verwijderd Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\users\padeg\appdata\roaming\microsoft\windows\start menu\programs\ElcomSoft\Advanced Archive Password Recovery\Advanced Archive Password Recovery Help.lnk Verwijderd Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\users\padeg\appdata\roaming\microsoft\windows\start menu\programs\ElcomSoft\Advanced Archive Password Recovery\Advanced Archive Password Recovery.lnk Verwijderd Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\users\padeg\appdata\roaming\microsoft\windows\start menu\programs\ElcomSoft\Advanced Archive Password Recovery\End-User License Agreement.lnk Verwijderd Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\users\padeg\appdata\roaming\microsoft\windows\start menu\programs\ElcomSoft\Advanced Archive Password Recovery\How to order.lnk Verwijderd Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\users\padeg\appdata\roaming\microsoft\windows\start menu\programs\ElcomSoft\Advanced Archive Password Recovery\Readme.lnk Verwijderd Trace.File.Advanced Archive Password Recovery 4.5!A2 c:\program files (x86)\ElcomSoft\Advanced Archive Password Recovery Verwijderd Trace.Directory.Advanced Archive Password Recovery 4.5!A2 c:\users\padeg\appdata\roaming\microsoft\windows\start menu\programs\ElcomSoft Verwijderd Trace.Directory.Advanced Archive Password Recovery 4.5!A2 Verwijderd Bestanden: 10 Sporen: 92 Cookies: 23

Hallo, Norton zegt dat het virus er nog altijd opzit.

Hello, van Malware: Malwarebytes Anti-Malware (-evaluatieversie-) 1.60.1.1000 Malwarebytes : Free anti-malware, anti-virus and spyware removal download Databaseversie: v2012.03.05.06 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 Padeg :: PADEG-PC [administrator] Realtime bescherming: Ingeschakeld 5/03/2012 17:10:47 mbam-log-2012-03-05 (17-10-47).txt Scantype: Snelle scan Ingeschakelde scanopties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM Uitgeschakelde scanopties: P2P Objecten gescand: 223382 Verstreken tijd: 5 minuut/minuten, 25 seconde(n) Geheugenprocessen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Geheugenmodulen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registersleutels gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registerwaarden gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registerdata gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Mappen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Bestanden gedetecteerd: 6 C:\Users\Padeg\AppData\Local\Temp\FH\extension.exe (Adware.Soge) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Padeg\Downloads\Mathematica 8.0 Crack.exe (PUP.FileHunter) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Padeg\Downloads\SoftonicDownloader_for_pes-2012.exe (PUP.BundleOffer.Downloader.S) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Padeg\AppData\Local\Temp\FH\extension.exe (PUP.Dropper) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Padeg\AppData\Local\Temp\FH\FileHunter-Win32.exe (PUP.FileHunter) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Windows\Temp\{E9C1E1AC-C9B2-4c85-94DE-9C1518918D02}.tlb (Rootkit.Zeroaccess) -> Succesvol in quarantaine geplaatst en verwijderd. (einde) Van HijackThis: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 17:29:43, on 5/03/2012 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v9.00 (9.00.8112.16421) Boot mode: Normal Running processes: C:\Program Files\ASUS\Six Engine\SixEngine.exe C:\Program Files (x86)\TeamViewer\Version6\TeamViewer.exe C:\Program Files (x86)\Norton Internet Security\Norton Internet Security\Engine\18.7.0.13\ccSvcHst.exe C:\Program Files (x86)\Analog Devices\SoundMAX\SoundMAX.exe C:\Program Files (x86)\Vtune\TBPANEL.exe C:\Program Files (x86)\Steam\steam.exe C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe C:\Program Files\ASUS\TurboV\TurboV.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\Winamp\winampa.exe C:\Program Files (x86)\CyberLink\PowerDVD11\PDVD11Serv.exe C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe C:\Program Files (x86)\iTunes\iTunesHelper.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Windows\SysWOW64\NOTEPAD.EXE C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=;ftp=;https=; R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Norton Internet Security\Engine\18.7.0.13\coIEPlg.dll O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Norton Internet Security\Engine\18.7.0.13\IPS\IPSBHO.DLL O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll O2 - BHO: Microsoft Web Test Recorder 10.0 Helper - {DDA57003-0068-4ed2-9D32-4D1EC707D94D} - C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Norton Internet Security\Engine\18.7.0.13\coIEPlg.dll O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe O4 - HKLM\..\Run: [TurboV] "C:\Program Files\ASUS\TurboV\TurboV.exe" -b O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe" O4 - HKLM\..\Run: [RemoteControl11] C:\Program Files (x86)\CyberLink\PowerDVD11\PDVD11Serv.exe O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray O4 - HKCU\..\Run: [TBPanel] C:\Program Files (x86)\Vtune\TBPanel.exe /A O4 - HKCU\..\Run: [steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent O4 - HKCU\..\Run: [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe O4 - HKCU\..\Run: [KiesHelper] C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe /s O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-21-3616432596-1278615917-2514195500-1001\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser') O4 - HKUS\S-1-5-21-3616432596-1278615917-2514195500-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser') O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000 O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O17 - HKLM\System\CCS\Services\Tcpip\..\{66F8101B-1279-44CA-979A-E547F1159497}: NameServer = 208.67.222.222,208.67.220.220 O17 - HKLM\System\CS1\Services\Tcpip\..\{66F8101B-1279-44CA-979A-E547F1159497}: NameServer = 208.67.222.222,208.67.220.220 O17 - HKLM\System\CS2\Services\Tcpip\..\{66F8101B-1279-44CA-979A-E547F1159497}: NameServer = 208.67.222.222,208.67.220.220 O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Unknown owner - C:\Windows\system32\AEADISRV.EXE (file missing) O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: ASUS System Control Service (AsSysCtrlService) - ASUSTeK Computer Inc. - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: CLHNServiceForPowerDVD - Unknown owner - C:\Program Files (x86)\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe O23 - Service: CyberLink PowerDVD 11.0 Monitor Service - CyberLink - C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe O23 - Service: CyberLink PowerDVD 11.0 Service - CyberLink - C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: DVM Meta Data Export Service (MDES) - DeviceVM - C:\ASUS.SYS\CONFIG\DVMExportService.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Norton Internet Security\Engine\18.7.0.13\ccSvcHst.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 14470 bytes

Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 20:24:01, on 4/03/2012 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v9.00 (9.00.8112.16421) Boot mode: Normal Running processes: C:\Program Files\ASUS\Six Engine\SixEngine.exe C:\Program Files (x86)\Norton Internet Security\Norton Internet Security\Engine\18.7.0.13\ccSvcHst.exe C:\Program Files (x86)\TeamViewer\Version6\TeamViewer.exe C:\Program Files (x86)\Analog Devices\SoundMAX\SoundMAX.exe C:\Program Files (x86)\Vtune\TBPANEL.exe C:\Program Files (x86)\Steam\steam.exe C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe C:\Program Files\ASUS\TurboV\TurboV.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\Winamp\winampa.exe C:\Program Files (x86)\CyberLink\PowerDVD11\PDVD11Serv.exe C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe C:\Program Files (x86)\iTunes\iTunesHelper.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=;ftp=;https=; R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (file missing) R3 - URLSearchHook: (no name) - {2d8d9acc-f6d7-4362-8876-a275ca929591} - (no file) F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Norton Internet Security\Engine\18.7.0.13\coIEPlg.dll O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Norton Internet Security\Engine\18.7.0.13\IPS\IPSBHO.DLL O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL O2 - BHO: MediaBar - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\PROGRA~2\BEARSH~1\MediaBar\Datamngr\ToolBar\bsdtxmltbpi.dll (file missing) O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing) O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (file missing) O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll O2 - BHO: Microsoft Web Test Recorder 10.0 Helper - {DDA57003-0068-4ed2-9D32-4D1EC707D94D} - C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Norton Internet Security\Engine\18.7.0.13\coIEPlg.dll O3 - Toolbar: MediaBar - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\PROGRA~2\BEARSH~1\MediaBar\Datamngr\ToolBar\bsdtxmltbpi.dll (file missing) O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing) O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (file missing) O4 - HKLM\..\Run: [soundMAXPnP] C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe O4 - HKLM\..\Run: [TurboV] "C:\Program Files\ASUS\TurboV\TurboV.exe" -b O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe" O4 - HKLM\..\Run: [RemoteControl11] C:\Program Files (x86)\CyberLink\PowerDVD11\PDVD11Serv.exe O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" O4 - HKCU\..\Run: [TBPanel] C:\Program Files (x86)\Vtune\TBPanel.exe /A O4 - HKCU\..\Run: [steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent O4 - HKCU\..\Run: [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe O4 - HKCU\..\Run: [KiesHelper] C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe /s O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-21-3616432596-1278615917-2514195500-1001\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser') O4 - HKUS\S-1-5-21-3616432596-1278615917-2514195500-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser') O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000 O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O17 - HKLM\System\CCS\Services\Tcpip\..\{66F8101B-1279-44CA-979A-E547F1159497}: NameServer = 208.67.222.222,208.67.220.220 O17 - HKLM\System\CS1\Services\Tcpip\..\{66F8101B-1279-44CA-979A-E547F1159497}: NameServer = 208.67.222.222,208.67.220.220 O17 - HKLM\System\CS2\Services\Tcpip\..\{66F8101B-1279-44CA-979A-E547F1159497}: NameServer = 208.67.222.222,208.67.220.220 O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O20 - AppInit_DLLs: O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Unknown owner - C:\Windows\system32\AEADISRV.EXE (file missing) O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: ASUS System Control Service (AsSysCtrlService) - ASUSTeK Computer Inc. - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: CLHNServiceForPowerDVD - Unknown owner - C:\Program Files (x86)\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe O23 - Service: CyberLink PowerDVD 11.0 Monitor Service - CyberLink - C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe O23 - Service: CyberLink PowerDVD 11.0 Service - CyberLink - C:\Program Files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe O23 - Service: DVM Meta Data Export Service (MDES) - DeviceVM - C:\ASUS.SYS\CONFIG\DVMExportService.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Norton Internet Security\Engine\18.7.0.13\ccSvcHst.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 15301 bytes

Beste, Vandaag zat ik te surfen op google en als bv. op een de link van youtube klikte kwam er iets toaal anders te voorschijn. Direct erna heb ik mijn virusscanner laten scannen en die dedecteerde een trojaans paard: zeroacces.B. Helaas moest ik die handmatig verwijderen via een removal tool van NortonAntiVirus die enkel werkt bij een 32-bit. Doordat ik een 64-bit(windows 7) heb is dit dus niet gelukt. Hopelijk kan iemand mij helpen want ik weet echt niet wat ik moet doen. Met vriendelijke groeten en alvast bedankt. Stein