Ga naar inhoud

Searchgol Verwijderen


Aanbevolen berichten

Hi,

in een vorige vraag om hulp in verband met het verwijderen van deze malware had JUISTERR een oplossing geboden. Nu zit deze PC met hetzelfde probleem. Searchgol is niet te vinden in de lijst van programma's (add/remove programs). De  lijst van RSIT 64bit is al beschikbaar. De moderator (juisterr) leverde voor de vorige vrager een een kort programmaatje. Kan iemand ons hiermee verder helpen?

Eddy 

log.txt

Link naar reactie
Delen op andere sites


 

 

Schakel eerst de Antivirussoftware uit voordat je zoek.exe download of uitvoert.

Schakel je antivirus- en antispywareprogramma's tijdelijk uit, deze kunnen namelijk de werking van Zoek.exe nadelig beïnvloeden. 

(hier en hier) kan je lezen hoe je dat doet.

 


 

  • Wanneer Internet Explorer of een andere browser of virusscanner  melding geeft dat dit bestand onveilig zou zijn kan je dat negeren, het is namelijk een onterechte waarschuwing.


  • Dubbelklik vervolgens op Zoek.exe om de tool te starten.

Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.

Kopieer nu onderstaande code en plak die in het grote invulvenster:

Note: Dit script is speciaal bedoeld voor deze Computer, gebruik dit dan ook niet op andere computers met een gelijkaardig probleem.


Searchgol;fs
emptyclsid;
shortcutfix;
emptyfolderscheck;
firefoxlook; 
Chromelook; 
CHRdefaults;
autoclean; 
iedefaults; 
filesrcm;  
startupall;
resetieproxy;
 

 

Klik nu op de knop "Run script".

Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).

Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.

Post het geopende logje in het volgende bericht  als bijlage.


Link naar reactie
Delen op andere sites


Bedankt juisterr, de log in bijlage

Zoek.exe v5.0.0.0 Updated 10-December-2014

Tool run by Eddy on do 11/12/2014 at 15:59:08,32.

Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64

Running in: Normal Mode Internet Access Detected

Launched: H:\zzz Malware\zoek\zoek.exe.com [scan all users] [script inserted]

==== System Restore Info ======================

11/12/2014 16:02:51 Zoek.exe System Restore Point Created Succesfully.

==== Empty Folders Check ======================

C:\PROGRA~2\MSXML 4.0 deleted successfully

C:\PROGRA~2\Panda Security deleted successfully

C:\PROGRA~2\COMMON~1\Symantec Shared deleted successfully

C:\PROGRA~3\Babylon deleted successfully

C:\Users\Eddy\AppData\Roaming\IrfanView deleted successfully

C:\Users\Eddy\AppData\Roaming\Systweak deleted successfully

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== Deleting Files \ Folders ======================

C:\Users\Eddy\AppData\Local\Pay-By-Ads deleted

C:\PROGRA~2\Photo Notifier and Animation Creator deleted

C:\PROGRA~2\MyPC Backup deleted

C:\Users\Eddy\AppData\Roaming\Babylon deleted

C:\Users\Eddy\AppData\Roaming\OpenCandy deleted

C:\PROGRA~3\DSearchLink deleted

C:\Windows\SysNative\roboot64.exe deleted

C:\Users\Eddy\AppData\LocalLow\Delta deleted

C:\Windows\SysNative\config\systemprofile\Searches deleted

C:\windows\SysNative\GroupPolicy\Machine deleted

C:\windows\SysNative\GroupPolicy\User deleted

C:\windows\SysNative\GroupPolicy\gpt.ini deleted

==== Files Recently Created / Modified ======================

====== C:\Windows ====

====== C:\Users\Eddy\AppData\Local\Temp ====

2014-12-10 13:22:45 3B32CAA07D672F8A2E0DF5CB3A873F45 22704 ----a-w- C:\Users\Eddy\AppData\Local\Temp\ESGScanner.sys

2014-12-10 13:21:34 5973A242277FB7B19D46BB73178246FC 47329360 ----a-w- C:\Users\Eddy\AppData\Local\Temp\SHSetup.exe

====== Java Cache =====

====== C:\Windows\SysWOW64 =====

2014-12-10 12:40:20 FF0A6E76FAE624AC74780AB008752F98 3209728 ----a-w- C:\Windows\SysWOW64\mf.dll

2014-12-10 12:40:20 D17954CA6343F43B62637F51996B4E95 23040 ----a-w- C:\Windows\SysWOW64\mfpmp.exe

2014-12-10 12:40:20 60FBCF033FF42A40C916C01A962A8802 50176 ----a-w- C:\Windows\SysWOW64\rrinstaller.exe

2014-12-10 12:40:20 52096F5F476733F2E2725CF346FF373B 2048 ----a-w- C:\Windows\SysWOW64\mferror.dll

2014-12-10 12:40:20 20257A0BFB824B49055A6EEC29C72C03 103424 ----a-w- C:\Windows\SysWOW64\mfps.dll

2014-12-10 08:12:30 9ECFE118A6EBB0CA28F5AB8E54F12BF1 1174528 ----a-w- C:\Windows\SysWOW64\crypt32.dll

2014-12-10 08:12:30 623E143F2DF17C0106A9988F5D7DC878 143872 ----a-w- C:\Windows\SysWOW64\cryptsvc.dll

2014-12-10 08:12:26 E1456E7396022EBE4E5434188D1AC8B0 1230336 ----a-w- C:\Windows\SysWOW64\WindowsCodecs.dll

2014-12-10 08:12:23 BB25F69463AD8E7E51B5D9D158B5F8DF 30720 ----a-w- C:\Windows\SysWOW64\iernonce.dll

2014-12-10 08:12:23 2EADED07BDA52C1FC5A6D4E1CC5858F0 47616 ----a-w- C:\Windows\SysWOW64\ieetwproxystub.dll

2014-12-10 08:12:22 F98B3860BB47089EA8C1504F043E90E9 342200 ----a-w- C:\Windows\SysWOW64\iedkcs32.dll

2014-12-10 08:12:22 F34F6DC38A21FCDBB50CDD1EE97B1EA3 1307136 ----a-w- C:\Windows\SysWOW64\urlmon.dll

2014-12-10 08:12:22 F25284C763E728E4DAC248C211D1FC5B 76288 ----a-w- C:\Windows\SysWOW64\mshtmled.dll

2014-12-10 08:12:22 D7A98A4CEA2E89F544065A00BF37FC10 688640 ----a-w- C:\Windows\SysWOW64\msfeeds.dll

2014-12-10 08:12:22 69AC6FD5B0B4DC963723E1EBDEE10A2C 285696 ----a-w- C:\Windows\SysWOW64\dxtrans.dll

2014-12-10 08:12:22 2ABC5587D582ACCEA30B4CF968C2A4A5 60416 ----a-w- C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-12-10 08:12:21 DEB9476A3CD1A5819DD4504BB7C6BA66 2724864 ----a-w- C:\Windows\SysWOW64\mshtml.tlb

2014-12-10 08:12:21 220505B0B3E96C857DD01729AF0CD369 19749376 ----a-w- C:\Windows\SysWOW64\mshtml.dll

2014-12-10 08:12:20 F0BCBD8FCDA145EED53ED66C45CC378B 62464 ----a-w- C:\Windows\SysWOW64\iesetup.dll

2014-12-10 08:12:20 EC5A3E4E21079B9D423AA0760828D678 620032 ----a-w- C:\Windows\SysWOW64\jscript9diag.dll

2014-12-10 08:12:20 D90585C3BE942DAAFBDC868FDC061844 115712 ----a-w- C:\Windows\SysWOW64\ieUnatt.exe

2014-12-10 08:12:20 759E2FAD5371512C6679FA346719493E 47104 ----a-w- C:\Windows\SysWOW64\jsproxy.dll

2014-12-10 08:12:20 543ADCEA31CF9C2B4EEB900D4AAFD0F9 2052096 ----a-w- C:\Windows\SysWOW64\inetcpl.cpl

2014-12-10 08:12:20 41AFA61E061E98E97272AC02184C8C2C 710144 ----a-w- C:\Windows\SysWOW64\ieapfltr.dll

2014-12-10 08:12:20 01777AB557997E98691E322225314E57 2277888 ----a-w- C:\Windows\SysWOW64\iertutil.dll

2014-12-10 08:12:19 CF9D05678B02B44FBC8D8AD8C9F30D58 478208 ----a-w- C:\Windows\SysWOW64\ieui.dll

2014-12-10 08:12:19 B59E370277EDB6643083B62297175628 12836864 ----a-w- C:\Windows\SysWOW64\ieframe.dll

2014-12-10 08:12:19 35BD045804B67E78F4CAB72CB820AF7F 418304 ----a-w- C:\Windows\SysWOW64\dxtmsft.dll

2014-12-10 08:12:18 F728E7E9937117E0F32F39840EB6D737 4299264 ----a-w- C:\Windows\SysWOW64\jscript9.dll

2014-12-10 08:12:18 5E4E0E43E0A5BF9F089696DFA7A3D677 1888256 ----a-w- C:\Windows\SysWOW64\wininet.dll

2014-12-10 08:12:18 37F078B5B435AFC6BF316F2AD14B469A 501248 ----a-w- C:\Windows\SysWOW64\vbscript.dll

2014-12-10 08:12:18 2E9E105037AC1274656C3D1125323352 1155072 ----a-w- C:\Windows\SysWOW64\mshtmlmedia.dll

2014-12-10 08:12:17 930F63D6BC43D4BCD937DFCECDA95F82 168960 ----a-w- C:\Windows\SysWOW64\msrating.dll

2014-12-10 08:12:17 29CED1A4777A43526A4ED8A7B6936883 64000 ----a-w- C:\Windows\SysWOW64\MshtmlDac.dll

2014-12-10 08:10:03 9EA3783672D21817B9DF1061B54C3B3C 155136 ----a-w- C:\Windows\SysWOW64\charmap.exe

2014-12-10 08:10:02 B975C202F590BBC5AA63225FBD148791 198656 ----a-w- C:\Windows\SysWOW64\WSManHTTPConfig.exe

2014-12-10 08:10:02 B6AC69FFBAA159DD5CEED814245A286D 214016 ----a-w- C:\Windows\SysWOW64\WsmWmiPl.dll

2014-12-10 08:10:02 5D9A1A3E5824CECE65871C60E5A08A1A 145920 ----a-w- C:\Windows\SysWOW64\WsmAuto.dll

2014-12-10 08:10:02 2C28FEC61C4AC68480A99CB7AA197FA9 248832 ----a-w- C:\Windows\SysWOW64\WSManMigrationPlugin.dll

2014-12-10 08:10:02 1DE9BD23AFA36150586C732D876D9B74 1177088 ----a-w- C:\Windows\SysWOW64\WsmSvc.dll

2014-12-10 08:10:00 50C73E54062BA252350F3F29580E28DA 2048 ----a-w- C:\Windows\SysWOW64\tzres.dll

====== C:\Windows\SysWOW64\drivers =====

====== C:\Windows\Sysnative =====

2014-12-10 12:40:20 AB2EB93A982A2C26BA3E4D2D65328804 24576 ----a-w- C:\Windows\Sysnative\mfpmp.exe

2014-12-10 12:40:20 9797A23F773C0782A0D91BEC44054166 206848 ----a-w- C:\Windows\Sysnative\mfps.dll

2014-12-10 12:40:20 6E1DDE0E72FB8268F42F6777CE4C5036 4121600 ----a-w- C:\Windows\Sysnative\mf.dll

2014-12-10 12:40:20 68E09E7CD4DC52F132A4B492ACE8C243 55808 ----a-w- C:\Windows\Sysnative\rrinstaller.exe

2014-12-10 12:40:20 63578DB847FCC40883CB8F303E785D46 2048 ----a-w- C:\Windows\Sysnative\mferror.dll

2014-12-10 08:12:33 8E64BB62AB3810D3C29ED50C405AD3BD 1232040 ----a-w- C:\Windows\Sysnative\aitstatic.exe

2014-12-10 08:12:32 F0356290BA3940F31AFF5566501495F7 192000 ----a-w- C:\Windows\Sysnative\aepic.dll

2014-12-10 08:12:32 E00981CF227CEEBE7B5A8D99C76D1116 741376 ----a-w- C:\Windows\Sysnative\invagent.dll

2014-12-10 08:12:32 DAF13A81A5FC895D68B1D9A72F65F4CB 413184 ----a-w- C:\Windows\Sysnative\generaltel.dll

2014-12-10 08:12:32 D257AF48934D2167BE15AA4008176381 1083392 ----a-w- C:\Windows\Sysnative\aeinv.dll

2014-12-10 08:12:32 985558125FEEC89AB4AD142158B066D7 830976 ----a-w- C:\Windows\Sysnative\appraiser.dll

2014-12-10 08:12:32 5CD6E919CE938A98AB25A2EA2C8C4EDA 227328 ----a-w- C:\Windows\Sysnative\aepdu.dll

2014-12-10 08:12:32 4253086737D81D7C9C160FDE6C037F44 396800 ----a-w- C:\Windows\Sysnative\devinv.dll

2014-12-10 08:12:30 D63B8B7FFF2D5BB8F00D51972501086D 1480192 ----a-w- C:\Windows\Sysnative\crypt32.dll

2014-12-10 08:12:30 19D511CC455C19DE1ADF60E6C39C85B6 187904 ----a-w- C:\Windows\Sysnative\cryptsvc.dll

2014-12-10 08:12:26 A9A0BFD706B3A24C403EEFEB0790D011 1424384 ----a-w- C:\Windows\Sysnative\WindowsCodecs.dll

2014-12-10 08:12:23 D471F7A428C21DB04D810445D12D68E0 48640 ----a-w- C:\Windows\Sysnative\ieetwproxystub.dll

2014-12-10 08:12:23 0FABE2AB8CA2D5CC7C95798533B4D057 114688 ----a-w- C:\Windows\Sysnative\ieetwcollector.exe

2014-12-10 08:12:22 F987718A5CA053DC23E94A531F1754A4 34304 ----a-w- C:\Windows\Sysnative\iernonce.dll

2014-12-10 08:12:22 9F07E8FC75C5F98A783ABFD3005EFC22 77824 ----a-w- C:\Windows\Sysnative\JavaScriptCollectionAgent.dll

2014-12-10 08:12:22 39B512C643812FC2D4843C0D4206C759 718848 ----a-w- C:\Windows\Sysnative\ie4uinit.exe

2014-12-10 08:12:22 077AEB068A51B396F25BBCAB0944FC3A 2724864 ----a-w- C:\Windows\Sysnative\mshtml.tlb

2014-12-10 08:12:20 E7A2061ADF0F4D430FECDA1E8D6B7BA6 1548288 ----a-w- C:\Windows\Sysnative\urlmon.dll

2014-12-10 08:12:20 B4E481E9498CE22113628C4E9EA24427 4096 ----a-w- C:\Windows\Sysnative\ieetwcollectorres.dll

2014-12-10 08:12:20 5BF0BAA1E5EF724287565E97C9219254 389296 ----a-w- C:\Windows\Sysnative\iedkcs32.dll

2014-12-10 08:12:19 EFBA893429814EA3244C87C2D1256618 800768 ----a-w- C:\Windows\Sysnative\ieapfltr.dll

2014-12-10 08:12:19 EBC8C9F61F4C148B8C6A28EDE80C51E4 968704 ----a-w- C:\Windows\Sysnative\MsSpellCheckingFacility.exe

2014-12-10 08:12:19 23AE7A3B44D5C550B81347288CE3230E 66560 ----a-w- C:\Windows\Sysnative\iesetup.dll

2014-12-10 08:12:19 14BA910E7731FC84EB85328BD0F1EE81 800768 ----a-w- C:\Windows\Sysnative\msfeeds.dll

2014-12-10 08:12:19 0AF0AEF0BA9EF6169E61C78504DCAE55 316928 ----a-w- C:\Windows\Sysnative\dxtrans.dll

2014-12-10 08:12:18 982B871A25B5078093FAD82D0AB0E3FC 2885120 ----a-w- C:\Windows\Sysnative\iertutil.dll

2014-12-10 08:12:18 3FE71E2A5BD3EC652E64FC8BCEFEDD2C 2125312 ----a-w- C:\Windows\Sysnative\inetcpl.cpl

2014-12-10 08:12:17 F7CCA58B973FB5EAED8D1F12DD3E51F6 490496 ----a-w- C:\Windows\Sysnative\dxtmsft.dll

2014-12-10 08:12:17 DFECAE6D925FBC9078870E16F98C471F 54784 ----a-w- C:\Windows\Sysnative\jsproxy.dll

2014-12-10 08:12:17 8EF01E2EF21D41A23FF70B28179F9ABE 633856 ----a-w- C:\Windows\Sysnative\ieui.dll

2014-12-10 08:12:17 5F24313333AB409251152CAFADA40015 144384 ----a-w- C:\Windows\Sysnative\ieUnatt.exe

2014-12-10 08:12:17 556D271F4243B273EDA353512BF3608A 14412800 ----a-w- C:\Windows\Sysnative\ieframe.dll

2014-12-10 08:12:16 DB10D681314714E0D4623E4C0CF6654A 92160 ----a-w- C:\Windows\Sysnative\mshtmled.dll

2014-12-10 08:12:16 8D64466AD12CA5677CD0099C43C58569 6039552 ----a-w- C:\Windows\Sysnative\jscript9.dll

2014-12-10 08:12:16 7AC115968B8856004920057B2271224C 1359360 ----a-w- C:\Windows\Sysnative\mshtmlmedia.dll

2014-12-10 08:12:16 4AF089160FE082E5EA5C4AA72782DCA2 2358272 ----a-w- C:\Windows\Sysnative\wininet.dll

2014-12-10 08:12:16 1D294810D3A8A8F722E86AA001F54DCC 580096 ----a-w- C:\Windows\Sysnative\vbscript.dll

2014-12-10 08:12:16 021DFF3CB0ADCD19B3AAA00A650FDEE2 814080 ----a-w- C:\Windows\Sysnative\jscript9diag.dll

2014-12-10 08:12:15 D478A4CF07FB8ADF72FB16B88E8030B8 25059840 ----a-w- C:\Windows\Sysnative\mshtml.dll

2014-12-10 08:12:15 89296EF4A3729A049DA25B7D67A04078 199680 ----a-w- C:\Windows\Sysnative\msrating.dll

2014-12-10 08:12:15 17A157A4225CF562202AC71DB8103177 88064 ----a-w- C:\Windows\Sysnative\MshtmlDac.dll

2014-12-10 08:10:03 36E5E9D0400475230A7F57F274B88321 165888 ----a-w- C:\Windows\Sysnative\charmap.exe

2014-12-10 08:10:02 FDEB5EE2E4DB9DE9251DDAF6A5BCA070 346624 ----a-w- C:\Windows\Sysnative\WSManMigrationPlugin.dll

2014-12-10 08:10:02 D929ABD465A2DED963DA8B30946A8D5C 2020352 ----a-w- C:\Windows\Sysnative\WsmSvc.dll

2014-12-10 08:10:02 9B44CABE3536D0E3BF627176318AAFC9 181248 ----a-w- C:\Windows\Sysnative\WsmAuto.dll

2014-12-10 08:10:02 5C642B7B0365305451D579F3EFAD57D4 310272 ----a-w- C:\Windows\Sysnative\WsmWmiPl.dll

2014-12-10 08:10:02 41457C1909F6D1100C0F9B9CFF7960FC 266240 ----a-w- C:\Windows\Sysnative\WSManHTTPConfig.exe

2014-12-10 08:10:00 A026998E927FD2095505154CBD72F35B 2048 ----a-w- C:\Windows\Sysnative\tzres.dll

====== C:\Windows\Sysnative\drivers =====

2014-12-10 08:12:25 70988118145F5F10EF24720B97F35F65 119296 ----a-w- C:\Windows\Sysnative\drivers\tdx.sys

2014-11-15 16:41:21 3555BA97171CD153118F73FDCCC8BFDE 376768 ----a-w- C:\Windows\Sysnative\drivers\netio.sys

2014-11-15 16:41:21 17F685B67C74B8F7BFED4308790B71DE 288192 ----a-w- C:\Windows\Sysnative\drivers\FWPKCLNT.SYS

2014-11-15 16:41:21 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E 1903552 ----a-w- C:\Windows\Sysnative\drivers\tcpip.sys

2014-11-15 16:41:09 41774FF331F609EF442B7398EE6202B1 155064 ----a-w- C:\Windows\Sysnative\drivers\ksecpkg.sys

2014-11-15 16:41:09 353009DEDF918B2A51414F330CF72DEC 95680 ----a-w- C:\Windows\Sysnative\drivers\ksecdd.sys

2014-11-15 16:40:42 E0D3CD5841E5C7BE7B94BA946AF1E498 116736 ----a-w- C:\Windows\Sysnative\drivers\drmk.sys

2014-11-15 16:40:42 1E0B4CBBA91C6B041A14ECC2186F7E24 230400 ----a-w- C:\Windows\Sysnative\drivers\portcls.sys

2014-11-15 16:40:37 059F00DEF82BF41E433B7ED465847726 155584 ----a-w- C:\Windows\Sysnative\drivers\ataport.sys

2014-11-15 16:40:14 FFA06EF43987ED0DD42AD59B260C0C78 7808 ----a-w- C:\Windows\Sysnative\drivers\usbd.sys

2014-11-15 16:40:14 DD253AFC3BC6CBA412342DE60C3647F3 30720 ----a-w- C:\Windows\Sysnative\drivers\usbuhci.sys

2014-11-15 16:40:14 DCA68B0943D6FA415F0C56C92158A83A 99840 ----a-w- C:\Windows\Sysnative\drivers\usbccgp.sys

2014-11-15 16:40:14 8D1196CFBB223621F2C67D45710F25BA 343040 ----a-w- C:\Windows\Sysnative\drivers\usbhub.sys

2014-11-15 16:40:14 765A92D428A8DB88B960DA5A8D6089DC 25600 ----a-w- C:\Windows\Sysnative\drivers\usbohci.sys

2014-11-15 16:40:14 18A85013A3E0F7E1755365D287443965 53248 ----a-w- C:\Windows\Sysnative\drivers\usbehci.sys

2014-11-15 16:40:14 12FEB33791920678F8433701C822BCFD 325120 ----a-w- C:\Windows\Sysnative\drivers\usbport.sys

2014-11-15 16:40:10 760E38053BF56E501D562B70AD796B88 950128 ----a-w- C:\Windows\Sysnative\drivers\ndis.sys

2014-11-15 16:40:10 0E01641D96889BDEB22DE12D30575B08 41472 ----a-w- C:\Windows\Sysnative\drivers\RNDISMP.sys

2014-11-15 16:39:57 FA886682CFC5D36718D3E436AACF10B9 497152 ----a-w- C:\Windows\Sysnative\drivers\afd.sys

2014-11-15 16:39:56 E2C933EDBC389386EBE6D2BA953F43D8 785624 ----a-w- C:\Windows\Sysnative\drivers\Wdf01000.sys

2014-11-15 16:39:55 856E76B3641746ABBC2946BED1372098 32896 ----a-w- C:\Windows\Sysnative\drivers\hidparse.sys

2014-11-15 16:39:55 597C3699384E53CC59587ED50CCE5CA2 76800 ----a-w- C:\Windows\Sysnative\drivers\hidclass.sys

2014-11-15 16:39:53 1B16D0BD9841794A6E0CDE0CEF744ABC 45568 ----a-w- C:\Windows\Sysnative\drivers\tcpipreg.sys

2014-11-15 16:39:43 80B0F7D5CCF86CEB5D402EAAF61FEC31 100864 ----a-w- C:\Windows\Sysnative\drivers\usbcir.sys

2014-11-15 16:39:42 1A4F75E63C9FB84B85DFFC6B63FD5404 140800 ----a-w- C:\Windows\Sysnative\drivers\mrxdav.sys

2014-11-15 16:38:39 87CE5C8965E101CCCED1F4675557E868 985536 ----a-w- C:\Windows\Sysnative\drivers\dxgkrnl.sys

2014-11-15 16:38:39 1F04CFB79DD5FB7694468CE3FB3DCC31 265064 ----a-w- C:\Windows\Sysnative\drivers\dxgmms1.sys

2014-11-15 16:37:46 B3222734D80013D2C73841B0C549FA63 27584 ----a-w- C:\Windows\Sysnative\drivers\Diskdump.sys

2014-11-15 16:37:46 A3F0BC5897F9D3786A3CB695B163633A 190912 ----a-w- C:\Windows\Sysnative\drivers\storport.sys

2014-11-15 16:37:46 96BB922A0981BC7432C8CF52B5410FE6 274880 ----a-w- C:\Windows\Sysnative\drivers\msiscsi.sys

2014-11-15 16:36:06 FE571E088C2D83619D2D48D4E961BF41 212480 ----a-w- C:\Windows\Sysnative\drivers\rdpwd.sys

2014-11-15 16:36:06 E232A3B43A894BB327FC161529BD9ED1 39936 ----a-w- C:\Windows\Sysnative\drivers\tssecsrv.sys

2014-11-15 16:35:39 1A29A59A4C5BA6F8C85062A613B7E2B2 1684928 ----a-w- C:\Windows\Sysnative\drivers\ntfs.sys

2014-11-15 16:34:54 EBF28856F69CF094A902F884CF989706 458712 ----a-w- C:\Windows\Sysnative\drivers\cng.sys

====== C:\Windows\Tasks ======

2014-12-10 13:22:45 F28A6611410446140C67D67182983FE4 3330 ----a-w- C:\Windows\Sysnative\Tasks\SpyHunter4Startup

2014-11-16 08:43:04 1E0B24CA4C79951627616EEEEEF8013F 3970 ----a-w- C:\Windows\Sysnative\Tasks\User_Feed_Synchronization-{1DB531C6-5E3D-4994-9AE7-2234C4571D2A}

====== C:\Windows\Temp ======

======= C:\Program Files =====

2014-12-10 13:38:46 -------- d-----w- C:\Program Files\trend micro

2014-12-10 13:22:41 -------- d-----w- C:\Program Files\Enigma Software Group

======= C:\PROGRA~2 =====

2014-12-10 13:21:51 -------- d-----w- C:\PROGRA~2\COMMON~1\Wise Installation Wizard

======= C: =====

2014-12-10 13:23:10 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\autoexec.bat

====== C:\Users\Eddy\AppData\Roaming ======

2014-12-10 13:22:41 -------- d-----w- C:\Users\Eddy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter

2014-11-16 22:21:03 -------- d-sh--w- C:\Users\Eddy\AppData\Locallow\EmieUserList

2014-11-16 22:21:03 -------- d-sh--w- C:\Users\Eddy\AppData\Locallow\EmieSiteList

2014-11-16 22:21:03 -------- d-sh--w- C:\Users\Eddy\AppData\Locallow\EmieBrowserModeList

2014-11-16 22:19:52 -------- d-sh--w- C:\Users\Eddy\AppData\Local\EmieUserList

2014-11-16 22:19:52 -------- d-sh--w- C:\Users\Eddy\AppData\Local\EmieSiteList

2014-11-16 22:19:52 -------- d-sh--w- C:\Users\Eddy\AppData\Local\EmieBrowserModeList

====== C:\Users\Eddy ======

====== C: exe-files ==

2014-12-11 14:42:34 25D473D7805261C752DA738B13E35816 185271 ----a-w- C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP\WiseCustomCalla31.exe

2014-12-10 13:38:50 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\Eddy.exe

2014-12-10 13:22:41 36B98B8197E1BE8E7382D29C1A3628AA 110080 ----a-r- C:\Users\Eddy\AppData\Roaming\Microsoft\Installer\{ACF5FE1B-3772-4068-8B87-2D2A6EFD0A05}\IconF7A21AF7.exe

2014-12-10 13:22:41 36B98B8197E1BE8E7382D29C1A3628AA 110080 ----a-r- C:\Users\Eddy\AppData\Roaming\Microsoft\Installer\{ACF5FE1B-3772-4068-8B87-2D2A6EFD0A05}\IconD7F16134.exe

2014-12-10 13:22:41 36B98B8197E1BE8E7382D29C1A3628AA 110080 ----a-r- C:\Users\Eddy\AppData\Roaming\Microsoft\Installer\{ACF5FE1B-3772-4068-8B87-2D2A6EFD0A05}\Icon1226A4C5.exe

2014-12-10 13:21:53 EDB10586A061A621BBA2CB32E5E3220B 190429 ----a-w- C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP\WiseCustomCalla37.exe

2014-12-10 13:21:34 5973A242277FB7B19D46BB73178246FC 47329360 ----a-w- C:\Users\Eddy\AppData\Local\Temp\SHSetup.exe

2014-12-10 12:40:20 D17954CA6343F43B62637F51996B4E95 23040 ----a-w- C:\Windows\SysWOW64\mfpmp.exe

2014-12-10 12:40:20 AB2EB93A982A2C26BA3E4D2D65328804 24576 ----a-w- C:\Windows\System32\mfpmp.exe

2014-12-10 12:40:20 68E09E7CD4DC52F132A4B492ACE8C243 55808 ----a-w- C:\Windows\System32\rrinstaller.exe

2014-12-10 12:40:20 60FBCF033FF42A40C916C01A962A8802 50176 ----a-w- C:\Windows\SysWOW64\rrinstaller.exe

2014-12-10 08:12:33 8E64BB62AB3810D3C29ED50C405AD3BD 1232040 ----a-w- C:\Windows\System32\aitstatic.exe

2014-12-10 08:12:33 65536EB5F53B76562BBE0DE332A8BA3C 66216 ----a-w- C:\Windows\System32\CompatTel\diagtrackrunner.exe

2014-12-10 08:12:32 CCEE34CF7D700825AD839FAB298A0129 46760 ----a-w- C:\Windows\System32\CompatTel\wicainventory.exe

2014-12-10 08:12:32 A192555B09BD2A45940D7E449F311AF6 161960 ----a-w- C:\Windows\System32\CompatTel\QueryAppBlock.exe

2014-12-10 08:12:23 0FABE2AB8CA2D5CC7C95798533B4D057 114688 ----a-w- C:\Windows\System32\ieetwcollector.exe

2014-12-10 08:12:22 A8A8FD02E3A9264A603892DE1F522166 221184 ----a-w- C:\Program Files (x86)\Internet Explorer\ielowutil.exe

2014-12-10 08:12:22 39B512C643812FC2D4843C0D4206C759 718848 ----a-w- C:\Windows\System32\ie4uinit.exe

2014-12-10 08:12:20 D90585C3BE942DAAFBDC868FDC061844 115712 ----a-w- C:\Windows\SysWOW64\ieUnatt.exe

2014-12-10 08:12:20 B7BCC767AC0E76384BCDC292184DD8C8 222720 ----a-w- C:\Program Files\Internet Explorer\ielowutil.exe

2014-12-10 08:12:20 A24BFBAE8B50A6780B68FF3673FAB52F 815280 ----a-w- C:\Program Files (x86)\Internet Explorer\iexplore.exe

2014-12-10 08:12:20 43CE0C99DBC0F96DB2B7259B0BE0930E 468992 ----a-w- C:\Program Files (x86)\Internet Explorer\ieinstal.exe

2014-12-10 08:12:19 EBC8C9F61F4C148B8C6A28EDE80C51E4 968704 ----a-w- C:\Windows\System32\MsSpellCheckingFacility.exe

2014-12-10 08:12:18 C3D17F3199D39A2AB85956A63731F188 484352 ----a-w- C:\Program Files\Internet Explorer\ieinstal.exe

2014-12-10 08:12:18 2A9DA9E7462EBA3F6D2036E8D18FF773 813744 ----a-w- C:\Program Files\Internet Explorer\iexplore.exe

2014-12-10 08:12:17 5F24313333AB409251152CAFADA40015 144384 ----a-w- C:\Windows\System32\ieUnatt.exe

2014-12-10 08:10:03 9EA3783672D21817B9DF1061B54C3B3C 155136 ----a-w- C:\Windows\SysWOW64\charmap.exe

2014-12-10 08:10:03 36E5E9D0400475230A7F57F274B88321 165888 ----a-w- C:\Windows\System32\charmap.exe

2014-12-10 08:10:02 B975C202F590BBC5AA63225FBD148791 198656 ----a-w- C:\Windows\SysWOW64\WSManHTTPConfig.exe

2014-12-10 08:10:02 41457C1909F6D1100C0F9B9CFF7960FC 266240 ----a-w- C:\Windows\System32\WSManHTTPConfig.exe

2014-12-10 08:10:00 BE8F985609BE0809B7E29960AC997511 49664 ----a-w- C:\Windows\servicing\GC64\tzupd.exe

2014-12-04 20:55:34 EB1482D0C28EA78549B936F06ACC4FDE 40749136 ----a-w- C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\39.0.2171.71\39.0.2171.71_chrome_installer.exe

=== C: other files ==

2014-12-10 13:23:10 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\autoexec.bat

2014-12-10 13:22:50 B97BE69C0A4230C285C087A726540F79 7538560 ----a-w- C:\Program Files\Enigma Software Group\SpyHunter\SH4.com

2014-12-10 13:22:45 3B32CAA07D672F8A2E0DF5CB3A873F45 22704 ----a-w- C:\Users\Eddy\AppData\Local\Temp\ESGScanner.sys

2014-12-10 08:12:25 70988118145F5F10EF24720B97F35F65 119296 ----a-w- C:\Windows\System32\drivers\tdx.sys

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"HDAudDeck"="C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r"

"T Probe"="C:\Program Files (x86)\ASUS\T Probe\TProbe.exe -b"

"StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun"

"Adobe Reader Speed Launcher"="C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

"Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

"GDFirewallTray"="C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe"

"G Data ASM"="C:\Program Files (x86)\G Data\InternetSecurity\DelayLoader\AutorunDelayLoader.exe /autostart"

==== Startup Registry Enabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE"

"AdobeAAMUpdater-1.0"="C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"

==== Startup Folders ======================

2010-03-18 00:07:31 1751 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Logitech SetPoint.lnk

==== Task Scheduler Jobs ======================

C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [12/09/2014 14:55]

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [19/10/2014 18:51]

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ [undetermined Task]

==== Other Scheduled Tasks ======================

"C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe]

"C:\Windows\SysNative\tasks\AdobeAAMUpdater-1.0-Core_i5-Eddy-Eddy" [C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe]

"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]

"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]

"C:\Windows\SysNative\tasks\SidebarExecute" [C:\Program Files\Windows Sidebar\sidebar.exe]

"C:\Windows\SysNative\tasks\SpyHunter4Startup" ["C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe"]

"C:\Windows\SysNative\tasks\User_Feed_Synchronization-{1DB531C6-5E3D-4994-9AE7-2234C4571D2A}" [C:\Windows\system32\msfeedssync.exe]

"C:\Windows\SysNative\tasks\{B6CE95B9-1DB7-4335-BBB4-F96676471649}" [C:\Program Files (x86)\ACD Systems\ACDSee\9.0\ACDSee9.exe]

"C:\Windows\SysNative\tasks\ASUS\ASUS RegRun Loader" [C:\Program Files (x86)\ASUS\AASP\1.01.02\AsLoader.exe]

"C:\Windows\SysNative\tasks\ASUS\ASUS Update Checker" [C:\Program Files (x86)\ASUS\ASUSUpdate\UpdateChecker\UpdateChecker.exe]

==== Chromium Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

ieakfmpjhljbpbfpldjkddkjmmgjmgon - C:\Program Files (x86)\WebConnect\ieakfmpjhljbpbfpldjkddkjmmgjmgon.crx[]

YouTube - Eddy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo

Google Search - Eddy\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

Google Wallet - Eddy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

Gmail - Eddy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== Chromium Fix ======================

C:\Users\Eddy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage deleted successfully

C:\Users\Eddy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage-journal deleted successfully

C:\Users\Eddy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage deleted successfully

C:\Users\Eddy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal deleted successfully

C:\Users\Eddy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.boostsaves.com_0.localstorage deleted successfully

C:\Users\Eddy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.boostsaves.com_0.localstorage-journal deleted successfully

C:\Users\Eddy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.boostsaves.com_0.localstorage deleted successfully

C:\Users\Eddy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.boostsaves.com_0.localstorage-journal deleted successfully

C:\Users\Eddy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fastdailyfind.com_0.localstorage deleted successfully

C:\Users\Eddy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fastdailyfind.com_0.localstorage-journal deleted successfully

C:\Users\Eddy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_rondomservices.nieuwsblad.be_0.localstorage deleted successfully

C:\Users\Eddy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_rondomservices.nieuwsblad.be_0.localstorage-journal deleted successfully

C:\Users\Eddy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_click.dealshark.com_0.localstorage deleted successfully

C:\Users\Eddy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_click.dealshark.com_0.localstorage-journal deleted successfully

C:\Users\Eddy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_secure.tlbsearch.com_0.localstorage deleted successfully

C:\Users\Eddy\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_secure.tlbsearch.com_0.localstorage-journal deleted successfully

C:\Users\Eddy\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ieakfmpjhljbpbfpldjkddkjmmgjmgon deleted successfully

==== Set IE to Default ======================

Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://www.google.be/webhp?nord=1"

"Search Bar"="http://www.google.com/ie"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]

@="http://www.google.com/search?q=%s"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]

"SearchAssistant"="http://www.google.com/ie"

"Default_Search_URL"="http://www.google.com/ie"

New Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"

"Start Page"="http://www.google.be/webhp?nord=1"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]

"(Default)"="http://search.msn.com/results.asp?q=%s"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]

"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"

"SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

"DefaultScope"="{B8DB68EF-BC88-4B5C-93D4-2227AD00217E}"

{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"

{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Unknown Url="Not_Found"

{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Unknown Url="Not_Found"

{B8DB68EF-BC88-4B5C-93D4-2227AD00217E} Google Url="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8&rlz=1I7ADFA_nlBE457"

==== Reset Google Chrome ======================

C:\Users\Eddy\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully

C:\Users\Eddy\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-4025108282-1848387709-1659974605-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} deleted successfully

HKEY_USERS\S-1-5-21-4025108282-1848387709-1659974605-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} deleted successfully

==== Deleting CLSID Registry Values ======================

==== shortcuts on Users Desktops ======================

C:\Users\Public\Desktop\ACDSee for PENTAX 3.0.lnk - C:\Windows\Installer\{92022F8E-2E55-4A16-88EB-B4778B35E942}\ACDSeeDesktopShortcu_B2D418833BFC4BA0A2F65A2C9836C238.exe

C:\Users\Public\Desktop\Adobe Photoshop Elements 10.lnk - C:\Program Files (x86)\Adobe\Elements 10 Organizer\Photoshop Elements 10.0.exe

C:\Users\Public\Desktop\G DATA INTERNET SECURITY.lnk - C:\Program Files (x86)\G Data\InternetSecurity\GUI\GDSC.exe

C:\Users\Public\Desktop\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Users\Public\Desktop\ACDSee for PENTAX 3.0.lnk - C:\Windows\Installer\{92022F8E-2E55-4A16-88EB-B4778B35E942}\ACDSeeDesktopShortcu_B2D418833BFC4BA0A2F65A2C9836C238.exe

C:\Users\Public\Desktop\Adobe Photoshop Elements 10.lnk - C:\Program Files (x86)\Adobe\Elements 10 Organizer\Photoshop Elements 10.0.exe

C:\Users\Public\Desktop\G DATA INTERNET SECURITY.lnk - C:\Program Files (x86)\G Data\InternetSecurity\GUI\GDSC.exe

C:\Users\Public\Desktop\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Users\Public\Desktop\ACDSee for PENTAX 3.0.lnk - C:\Windows\Installer\{92022F8E-2E55-4A16-88EB-B4778B35E942}\ACDSeeDesktopShortcu_B2D418833BFC4BA0A2F65A2C9836C238.exe

C:\Users\Public\Desktop\Adobe Photoshop Elements 10.lnk - C:\Program Files (x86)\Adobe\Elements 10 Organizer\Photoshop Elements 10.0.exe

C:\Users\Public\Desktop\G DATA INTERNET SECURITY.lnk - C:\Program Files (x86)\G Data\InternetSecurity\GUI\GDSC.exe

C:\Users\Public\Desktop\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Users\Public\Desktop\ACDSee for PENTAX 3.0.lnk - C:\Windows\Installer\{92022F8E-2E55-4A16-88EB-B4778B35E942}\ACDSeeDesktopShortcu_B2D418833BFC4BA0A2F65A2C9836C238.exe

C:\Users\Public\Desktop\Adobe Photoshop Elements 10.lnk - C:\Program Files (x86)\Adobe\Elements 10 Organizer\Photoshop Elements 10.0.exe

C:\Users\Public\Desktop\G DATA INTERNET SECURITY.lnk - C:\Program Files (x86)\G Data\InternetSecurity\GUI\GDSC.exe

C:\Users\Public\Desktop\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Users\Public\Desktop\ACDSee for PENTAX 3.0.lnk - C:\Windows\Installer\{92022F8E-2E55-4A16-88EB-B4778B35E942}\ACDSeeDesktopShortcu_B2D418833BFC4BA0A2F65A2C9836C238.exe

C:\Users\Public\Desktop\Adobe Photoshop Elements 10.lnk - C:\Program Files (x86)\Adobe\Elements 10 Organizer\Photoshop Elements 10.0.exe

C:\Users\Public\Desktop\G DATA INTERNET SECURITY.lnk - C:\Program Files (x86)\G Data\InternetSecurity\GUI\GDSC.exe

C:\Users\Public\Desktop\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Users\Public\Desktop\ACDSee for PENTAX 3.0.lnk - C:\Windows\Installer\{92022F8E-2E55-4A16-88EB-B4778B35E942}\ACDSeeDesktopShortcu_B2D418833BFC4BA0A2F65A2C9836C238.exe

C:\Users\Public\Desktop\Adobe Photoshop Elements 10.lnk - C:\Program Files (x86)\Adobe\Elements 10 Organizer\Photoshop Elements 10.0.exe

C:\Users\Public\Desktop\G DATA INTERNET SECURITY.lnk - C:\Program Files (x86)\G Data\InternetSecurity\GUI\GDSC.exe

C:\Users\Public\Desktop\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Users\Public\Desktop\ACDSee for PENTAX 3.0.lnk - C:\Windows\Installer\{92022F8E-2E55-4A16-88EB-B4778B35E942}\ACDSeeDesktopShortcu_B2D418833BFC4BA0A2F65A2C9836C238.exe

C:\Users\Public\Desktop\Adobe Photoshop Elements 10.lnk - C:\Program Files (x86)\Adobe\Elements 10 Organizer\Photoshop Elements 10.0.exe

C:\Users\Public\Desktop\G DATA INTERNET SECURITY.lnk - C:\Program Files (x86)\G Data\InternetSecurity\GUI\GDSC.exe

C:\Users\Public\Desktop\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==== shortcuts on All Users Desktop ======================

C:\Users\Public\Desktop\ACDSee for PENTAX 3.0.lnk - C:\Windows\Installer\{92022F8E-2E55-4A16-88EB-B4778B35E942}\ACDSeeDesktopShortcu_B2D418833BFC4BA0A2F65A2C9836C238.exe

C:\Users\Public\Desktop\Adobe Photoshop Elements 10.lnk - C:\Program Files (x86)\Adobe\Elements 10 Organizer\Photoshop Elements 10.0.exe

C:\Users\Public\Desktop\G DATA INTERNET SECURITY.lnk - C:\Program Files (x86)\G Data\InternetSecurity\GUI\GDSC.exe

C:\Users\Public\Desktop\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==== shortcuts in Users Start Menu ======================

C:\Users\Eddy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Users\Eddy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe -extoff

C:\Users\Eddy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter\SpyHunter Emergency Startup.lnk - C:\Windows\explorer.exe "C:\Program Files (x86)\Enigma Software Group\SpyHunter\SH4.com"

C:\Users\Eddy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter\SpyHunter.lnk - C:\Program Files (x86)\Enigma Software Group\SpyHunter\SpyHunter4.exe

C:\Users\Eddy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter\Uninstall SpyHunter.lnk - C:\Windows\SysWOW64\msiexec.exe /X {ACF5FE1B-3772-4068-8B87-2D2A6EFD0A05}

==== shortcuts in All Users Start Menu ======================

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk - C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G DATA INTERNET SECURITY\G DATA INTERNET SECURITY.lnk - C:\Program Files (x86)\G Data\InternetSecurity\GUI\GDSC.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==== shortcuts in Quick Launch ======================

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -

C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -

C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -

C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -

C:\Users\Eddy\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Users\Eddy\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Users\Eddy\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -

C:\Users\Eddy\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -

C:\Users\Eddy\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\G Data InternetSecurity.lnk - C:\Program Files (x86)\G Data\InternetSecurity\GUI\GDSC.exe

C:\Users\Eddy\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Internet Explorer (64-bit).lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Users\Eddy\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Microsoft Office Excel 2003.lnk - C:\Windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\xlicons.exe

C:\Users\Eddy\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Microsoft Office Outlook 2003.lnk - C:\Windows\Installer\{90110409-6000-11D3-8CFE-0150048383C9}\outicon.exe

C:\Users\Eddy\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\ACDSee for PENTAX 3.0.lnk - C:\Windows\Installer\{92022F8E-2E55-4A16-88EB-B4778B35E942}\ACDSeeDesktopShortcu_B2D418833BFC4BA0A2F65A2C9836C238.exe

C:\Users\Eddy\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Users\Eddy\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk - C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Users\Eddy\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Explorer.lnk - C:\Windows\explorer.exe

C:\Users\Eddy\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Windows Live Mail.lnk - C:\Program Files (x86)\Windows Live\Mail\wlmail.exe

==== Reset IE Proxy ======================

Value(s) before fix:

"ProxyEnable"=dword:00000000

Value(s) after fix:

"ProxyEnable"=dword:00000000

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\ieakfmpjhljbpbfpldjkddkjmmgjmgon deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Eddy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Eddy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Eddy\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=74 folders=22 6819091 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully

C:\Users\Default User\AppData\Local\Temp emptied successfully

C:\Users\Eddy\AppData\Local\Temp will be emptied at reboot

C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully

C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully

C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied

C:\Users\Eddy\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on do 11/12/2014 at 16:23:08,89 ======================

Link naar reactie
Delen op andere sites

Download adwcleaner.pngAdwCleaner by Xplode naar het bureaublad.

  • Sluit alle openstaande vensters.

Dubbelklik op AdwCleaner om hem te starten.

Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren,

Door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.

Klik vervolgens op Scannen.

Klik vervolgens op Verwijderen als er items zijn gevonden.

Klik bij Herstarten Noodzakelijk op OK.


 

Nadat de PC opnieuw is opgestart, opent meestal een logfile.

Anders is het hier terug te vinden C:\AdwCleaner\AdwCleaner[s0].txt.

 

Logbestand plaatsen


Voeg het logbestand met de naam C:\AdwCleaner\AdwCleaner[s0].txt als bijlage toe aan het volgende bericht.

 


Link naar reactie
Delen op andere sites


Lijkt wel zo.

 

Wil je zoek.exe opnieuw starten en dan deze code gebruiken aub.

 

 
 
C:\Program Files\searchgol;fp
{00078E95-3A4A-4137-8DE7-2824908D1C17};c
{8F547BDD-FCD4-48F8-A06F-573D6F404A3C};c
Searchgol.com;a
Searchgol;a
silentrunners;
emptyclsid;
shortcutfix;
firefoxlook; 
Chromelook; 
CHRdefaults;
autoclean; 
 
 
plaats de uitslag aub.
Link naar reactie
Delen op andere sites

Gast
Dit topic is nu gesloten voor nieuwe reacties.
 Delen

×
×
  • Nieuwe aanmaken...