Hallo,
Heel erg fijn dat jullie mij willen helpen!
Ik heb geprobeerd het internet opnieuw in te stellen en dat is gelukt, maar er verandert niets aan de situatie.
Daarna heb ik het programma gedraaid en de log overgetypt. Mijn zus wilde niet dat ik met een usb stick vanaf mijn vastlopende computer iets op haar computer zet, dus heb ik alles zelf over moeten typen, dus er kan een typfoutje inzitten.
Hier de logfile:
Logfile of Trend Micro Hijack This V2.0.4
Scan saved at 12:03:34, on 17-10-2012
Platform: windows 7 sp1 (Win NT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16450)
Running processes:
C:\Program Files (x86)\Egis Tec\My WinLocker 3\x86\mwlDeamon.exe
C:\Windows\System32\oem\SetEvent.exe
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files (x86)\Google Toolbar Notifier\GoogleToolbarNotifier.exe
C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files (x86)\Launch Manager\LMangager.exe
C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe
C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\apdproxy.exe
C:\Program Data\Ad-Aware Browsing Protection\adawarebp.exe
C:\PROGRA-2\AD-AWA-1\AdAware.exe
C:\Users\Monica\Desktop\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - RKCU\Software\Microsoft\Internet Explorer\Main,Start Page = • Forumindex
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_= URL = iGoogle Redirect
R1 - HKTM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://eis.esnips.com/page/search/?client-44id=bda82ac0-85c3-4b48-b0d2-41fde8d1391d
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,Customize Search =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,Links FolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO : Acro IEHelperStub - (18DF081C-E8AD-4283-A596-FA578C2EBDC) - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO : McAfee Phishing Filter - (27B4851A-3207-45A2-B947-BE8AFE6163AB) - (no file)
O2 - BHO : Groove GFS Browser Helper - (72853161-30c5-4D22-B7F9-0BBC1D38A37E) - C:\PROGRA-2\MICRO-1\Office14\GROOVEEX.DLL
O2 - BHO : Java Plug-In SSV Helper - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO : Aanmeldhulp voor Windows Live ID - (9030D464-4C02-4ABF-8ECC-5164766863c6) - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO : Google Toolbar Helper - (AA58ED58-01DD-4d91-8333-CF10577473F7) - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO : McAfee SiteAdvisor BHO - (B164E929-A1B6-4A06-B104-2CD0E90A88FF - C:\PROGRA-2\MICRO-1\Office14\URLREDIR.DLL
O2 - BHO : URLRedirectionBHO - (B4F3A835-0E21-4959-BA22-42B3008E02FE) - C:\PROGRA-2\MICRO-1\Office14\URLREDIR.DLL
O2 - BHO : eSnipBHO - (B530A9A4-1722-4D16-AAD6-AA85E3AD2ADE) - (no file)
O2 - BHO : Java Plug-In 2 SSV Helper - (DBC80044-A445-435b-BC74-9C25C1C588A9) - C:\Program Files (x86)\Java\jre6\bin\jpssv.dll
O3 - Toolbar : McAfee SiteAdvisor TOolbar - (0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064) - C:\PROGRA-2\mcafee\SITEAD-1\mcieplg.dll
O3 - Toolbar : Google Toolbar - (2318C2B1-4965-11d4-9B18-009027A5CD4F) - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [ArcadeDeluxeAgent] "C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ARcadeDeluxeAgent.exe"
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [bCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /Delay Services
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\apdproxy.exe"
O4 - HKLM\..\Run: [Ad-Aware Browsing Protection] "C:\Program Data\Ad-Aware Browsing Protection\adawarebp.exe"
O4 - HKLM\..\Run: [Ad-Aware Antivirus] "C:\Program Files (x86)\Ad-Aware Antivirus\AdAware Launcher"-- windows-run
O4 - HKCU\..\Run: [sidebar] C:\Program Files (x86)\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [sidebar] %Program Files%\Windows Sidevar\Sidebar.exe autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O9 - Extra button: @C:\Program Files (x86)\Windows Live \Writer\WindowsLiveWriterShortcuts.dll,-1004 - (219C3416-8CB2-491a-A3C7-D9FCDDC9D600) - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools'menuitem: @C:\Program Giles (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,1003 - (219C3416-8CB2-491a-A3C7-DFCDDC9D600) - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - (2670000A-7350-4f3c-8081-566EE0C6C49) - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
09 - Extra 'Tools'menuitem: Se&nd to OneNote - (267000A-7350-4f3c-8081-566EE0C6C49) - C:\Program Files (x86)\Microsoft Office\Office 14\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - (789FE86F-6FC4-46A1-9849-EDE0DBC95CA) - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
09 - Extra 'Tools'menuitem: OneNote Lin&ked Notes - (789FC86F-6FC4-46A1-9849-EDE0DB0C95CA) - C:\Program Giles (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O1O - Unknown file in Winsock LSD : C:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O1O - Unknown file in Winsock LSD : C:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPPHICS] Accelerated graphics
O15 - TrustedZone: Adobe
O15 - TrustedZone: http://softwarekuiche.com
O15 - TrustedZone: http://www.lay-by.org
O15 - TrustedZone: NOTICE
O16 - DPF: (E2883E8F-472F-4FB0-9522-AC9BF37916A7) - http://platfomdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: dssrequest - (SS13F07E-936B-4E52-9B00-067394E91CC5) - C:\PROGRA-2\mcafee\SITEAD-1\mcieplg.dll
O18 - Protocol: sacore - (5513F07E-936B-4E52-9B00-067394E91CC5) - C:\PROGRA-2\mcafee\SITEAD-1\mcieplg.dll
O18 - Protocol: wlpg - (E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324) - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter Hijack: text/xml - (807573E5-5146-11D5-A672-00B0D022E945) C:\Program Files (x86)\Common Files\Microsoft Shared\Office14\MSOXMF.DLL
O23 - Service: Ad-Aware Service - Lavasoft Limited - C:\Program FIles (x86)\Ad-Aware Antivirus\AdAwareService.exe
O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C: \Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe - 112 (ALG) - Unknown owner C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,100 (EFS) - Unknown owner C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files (x86)\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLiconsingService.exe
O23 - Service: GRegService (Greg_Service) - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (GUSVC) - Google- C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel ® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: @keyiso.dll,100 (KeyIso) Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: McAfee SiteAdvisor Service - McAfee Inc. - C:\PROGRA-2\mcafee\SITEAD-1\McSACore.exe
O23 - Service: @comres.dll, -2797 (MSDTC) - Unknown owner - C:\Windows\system32\msdtc.exe (file missing)
O23 - Service: My Win Locker Service (MWLService) - Egis Technology Inc. - C:\Program Files (x86)\Egis Tec\My Win Locker 3\x86\MXLService.exe
O23 - Service: NB Service - Nero AG - C:\Program Files (x86)\Nero\Nero7\NeroBackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NM Indexing Service -Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NTI Backup Now 5 Backup Service NTI BackupSvc - New Tech Infosystems, Inc. - C:\Program Files (x86) NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTIBackupSvc) - New Tech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (Protected Storage) -Unknown owner - C:\Windows\system32\lsass.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%systemroot%\system32\samsrv.dll,-1 (Samss) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Ad-Aware (SBAMSvc) - GFI Software - C:\Program Files (x86)\Ad-Aware Antivirus\SBAMSvc.exe
O23 - Service: @%SystemRoot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (SPPSVC) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
o23 - Service: Updater Service - Acer - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (Vault Svc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Miedia Player\wmpnetwk.exe (file missing)
Ik ben erg benieuwd wat ik verder nog kan doen.
Groetjes
Monie
