http://searchfunmoods.com verwijderen

• 

  Fabian

  08-12-2012 18:25

  Het heeft een halve dag geduurd maar de scan is eindelijk af:)

  Emsisoft Emergency Kit - Versie 3.0

  Laatste Update: 5-12-2012 20:56:48

  Scaninstellingen:

  Scantype: Diepe scan

  Objecten: Rootkits, Geheugen, Sporen, C:\, D:\, J:\

  Detecteer riskware: Uit

  Scan archieven: Aan

  ADS Scan: Aan

  Bestandsextensiefilter: Uit

  Geavanceerde cache: Aan

  Directe schijftoegang: Uit

  Scan gestart: 8-12-2012 12:06:53

  Key: hkey_users\.default\software\activationmanager Ontdekt: Trace.Registry.ADSTechnology (A)

  Key: hkey_users\s-1-5-18\software\activationmanager Ontdekt: Trace.Registry.ADSTechnology (A)

  C:\$Recycle.Bin\S-1-5-21-2010709158-3741065282-913981132-1000\$R2UB646.exe Ontdekt: Adware.Generic.288015 (B)

  D:\Music\Shared\acda & de munnink kapitein ii.mp3 Ontdekt: Trojan.Wimad.Gen.1 (B)

  Gescand 507873

  Gevonden 4

  Scan geëindigd: 8-12-2012 18:15:23

  Scantijd: 6:08:30

  D:\Music\Shared\acda & de munnink kapitein ii.mp3 Verwijderd Trojan.Wimad.Gen.1 (B)

  C:\$Recycle.Bin\S-1-5-21-2010709158-3741065282-913981132-1000\$R2UB646.exe Verwijderd Adware.Generic.288015 (B)

  Key: hkey_users\.default\software\activationmanager Verwijderd Trace.Registry.ADSTechnology (A)

  Key: hkey_users\s-1-5-18\software\activationmanager Verwijderd Trace.Registry.ADSTechnology (A)

  Verwijderd 4

  Rapporteren
• 

  Ben

  08-12-2012 18:38

  Hallo,

  Zou je een nieuw HijackThis logje willen oplaatsen en vertellen hoe het gaat.

  Gr.Ben

  Rapporteren
• 

  Fabian

  09-12-2012 13:56

  Logfile of Trend Micro HijackThis v2.0.4

  Scan saved at 13:55:55, on 9-12-2012

  Platform: Windows Vista (WinNT 6.00.1904)

  MSIE: Internet Explorer v7.00 (7.00.6000.17037)

  Boot mode: Normal

  Running processes:

  C:\Windows\system32\Dwm.exe

  C:\Windows\Explorer.EXE

  C:\Windows\system32\taskeng.exe

  C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe

  C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

  C:\Program Files\Windows Defender\MSASCui.exe

  C:\Program Files\Common Files\Symantec Shared\ccApp.exe

  C:\Program Files\Common Files\Java\Java Update\jusched.exe

  C:\Program Files\Sophos\AutoUpdate\ALMon.exe

  C:\Program Files\iTunes\iTunesHelper.exe

  D:\Program Files\Unlocker\UnlockerAssistant.exe

  C:\Windows\ehome\ehtray.exe

  C:\Program Files\Windows Live\Messenger\msnmsgr.exe

  J:\Program Files\Spotify\Data\SpotifyWebHelper.exe

  C:\Program Files\Windows Media Player\wmpnscfg.exe

  C:\Windows\ehome\ehmsas.exe

  C:\Windows\system32\wuauclt.exe

  C:\Program Files\Google\Chrome\Application\chrome.exe

  C:\Program Files\Google\Chrome\Application\chrome.exe

  C:\Program Files\Google\Chrome\Application\chrome.exe

  D:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

  C:\Program Files\Google\Chrome\Application\chrome.exe

  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1:9421;

  O1 - Hosts: ::1 localhost

  O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

  O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\1.0\NppBho.dll

  O2 - BHO: Sophos Web Content Scanner - {39EA7695-B3F2-4C44-A4BC-297ADA8FD235} - C:\Program Files\Sophos\Sophos Anti-Virus\SophosBHO.dll

  O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

  O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

  O4 - HKLM\..\Run: %ProgramFiles%\Windows Defender\MSASCui.exe -hide

  O4 - HKLM\..\Run: “C:\Program Files\Common Files\Symantec Shared\ccApp.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Norton Internet Security\osCheck.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe” /a /m “C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll”

  O4 - HKLM\..\Run: “C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe”

  O4 - HKLM\..\Run: “C:\Program Files\Common Files\Java\Java Update\jusched.exe”

  O4 - HKLM\..\Run: C:\Users\Eigenaar\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BDYA7ELV\MediaPlayerUpgrade.exe

  O4 - HKLM\..\Run: C:\Program Files\Sophos\AutoUpdate\almon.exe

  O4 - HKLM\..\Run: “C:\Program Files\QuickTime\QTTask.exe” -atboottime

  O4 - HKLM\..\Run: “C:\Program Files\iTunes\iTunesHelper.exe”

  O4 - HKLM\..\Run: “D:\Program Files\Unlocker\UnlockerAssistant.exe”

  O4 - HKLM\..\Run: C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

  O4 - HKCU\..\Run: C:\Windows\ehome\ehTray.exe

  O4 - HKCU\..\Run: “C:\Program Files\Windows Live\Messenger\msnmsgr.exe” /background

  O4 - HKCU\..\Run: “C:\Users\Eigenaar\AppData\Local\Akamai\netsession_win.exe”

  O4 - HKCU\..\Run: “J:\Program Files\Spotify\Data\SpotifyWebHelper.exe”

  O4 - HKCU\..\Run: C:\Program Files\Windows Media Player\WMPNSCFG.exe

  O4 - HKUS\S-1-5-19\..\Run: %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User ‘LOCAL SERVICE’)

  O4 - HKUS\S-1-5-19\..\Run: rundll32.exe oobefldr.dll,ShowWelcomeCenter (User ‘LOCAL SERVICE’)

  O4 - HKUS\S-1-5-20\..\Run: %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User ‘NETWORK SERVICE’)

  O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

  O8 - Extra context menu item: Google Sidewiki… - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html

  O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

  O9 - Extra ‘Tools’ menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

  O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

  O20 - AppInit_DLLs: c:\progra~1\sophos\sophos~1\sophos~1.dll

  O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

  O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

  O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

  O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

  O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

  O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe

  O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

  O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

  O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe

  O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

  O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\isPwdSvc.exe

  O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

  O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe

  O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

  O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

  O23 - Service: NBService - Nero AG - D:\Program Files\Nero 7\Nero BackItUp\NBService.exe

  O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe

  O23 - Service: Sophos Anti-Virus status reporter (SAVAdminService) - Sophos Plc - C:\Program Files\Sophos\Sophos Anti-Virus\SAVAdminService.exe

  O23 - Service: Sophos Anti-Virus (SAVService) - Sophos Plc - C:\Program Files\Sophos\Sophos Anti-Virus\SavService.exe

  O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe

  O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe

  O23 - Service: Sophos AutoUpdate Service - Sophos Plc - C:\Program Files\Sophos\AutoUpdate\ALsvc.exe

  O23 - Service: Sophos Web Intelligence Service (swi_service) - Sophos Plc - C:\Program Files\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe

  O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

  O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe

  –

  End of file - 8599 bytes

  Rapporteren
• 

  Jos H

  09-12-2012 14:32

  Hoi Fabian, waar is SP1 van Vista.?

  Rapporteren
• 

  Ben

  09-12-2012 14:39

  Hallo,

  Dat ziet er alweer wat beter uit.

  Download Security Check (miror) by screen317 en sla het op je Bureaublad op.

  • Start Security Check

  • Volg de Instructies in het scherm

  • Aan het eind verschijnt een log (checkup.txt) plaats de inhoud ervan in je volgende antwoord.

  Gr.Ben

  Rapporteren
• 

  Fabian

  09-12-2012 18:48

  Results of screen317's Security Check version 0.99.56

  Windows Vista x86 (UAC is disabled!)

  Out of date service pack!!

  Internet Explorer 7 Out of date!

  ``````````````Antivirus/Firewall Check:``````````````

  WMI entry may not exist for antivirus; attempting automatic update.

  `````````Anti-malware/Other Utilities Check:`````````

  Spyware Doctor 5.5

  Malwarebytes Anti-Malware versie 1.65.1.1000

  CCleaner (remove only)

  Java(TM) 6 Update 24

  Java version out of Date!

  Adobe Flash Player 10 Flash Player out of Date!

  Adobe Reader 8 Adobe Reader out of Date!

  Google Chrome 23.0.1271.64

  Google Chrome 23.0.1271.91

  Google Chrome 23.0.1271.95

  ````````Process Check: objlist.exe by Laurent````````

  Norton ccSvcHst.exe

  Windows Defender MSASCui.exe

  Malwarebytes Anti-Malware mbamservice.exe

  Malwarebytes Anti-Malware mbamgui.exe

  Sophos Sophos Anti-Virus SavService.exe

  Sophos Sophos Anti-Virus SAVAdminService.exe

  Sophos Sophos Anti-Virus Web Intelligence swi_service.exe

  Malwarebytes' Anti-Malware mbamscheduler.exe

  Windows Defender MSASCui.exe

  `````````````````System Health check`````````````````

  Total Fragmentation on Drive C: %

  ````````````````````End of Log``````````````````````

  Rapporteren
• 

  Ben

  09-12-2012 19:40

  Hallo,

  Je loop heel wat updates achter met:

  Windows vista en Internet Explorer: klik Start > alle programma's > Windows update (haal hier alle updates binnen we zitten al aan SP 2)

  Haal ook de updates van:

  Java(TM) 6 Update 24 Java version out of Date!

  Adobe Flash Player 10 Flash Player out of Date!

  Adobe Reader 8 Adobe Reader out of Date!

  Plaats hierna een logje van Security Check.

  Gr.Ben

  Rapporteren
• 

  Fabian

  09-12-2012 20:27

  Bij het updaten van windows vista zijn 3 updates misluks. Dit is de productondersteuning bij de fout die hij geeft:

  5 resultaten voor “WindowsUpdate_80070490” “WindowsUpdate_dt000”

  1. 1 Windows Update: fout 80071A90, 80072efe of 80072f76

  2. 2 Windows Update error 80070490

  3. 3 Problemen met het installeren van updates oplossen

  4. 4 Windows Update: fout 80072efd

  5. 5 Windows Update: fout 8000FFFF

  Results of screen317's Security Check version 0.99.56

  Windows Vista x86 (UAC is disabled!)

  Out of date service pack!!

  Internet Explorer 7 Out of date!

  ``````````````Antivirus/Firewall Check:``````````````

  WMI entry may not exist for antivirus; attempting automatic update.

  `````````Anti-malware/Other Utilities Check:`````````

  Spyware Doctor 5.5

  Malwarebytes Anti-Malware versie 1.65.1.1000

  CCleaner (remove only)

  Java(TM) 6 Update 24

  Java 7 Update 9

  Adobe Flash Player 10 Flash Player out of Date!

  Adobe Reader 10.1.0 Adobe Reader out of Date!

  Google Chrome 23.0.1271.64

  Google Chrome 23.0.1271.91

  Google Chrome 23.0.1271.95

  ````````Process Check: objlist.exe by Laurent````````

  Norton ccSvcHst.exe

  Windows Defender MSASCui.exe

  Malwarebytes Anti-Malware mbamservice.exe

  Malwarebytes Anti-Malware mbamgui.exe

  Sophos Sophos Anti-Virus SavService.exe

  Sophos Sophos Anti-Virus SAVAdminService.exe

  Sophos Sophos Anti-Virus Web Intelligence swi_service.exe

  Malwarebytes' Anti-Malware mbamscheduler.exe

  Windows Defender MSASCui.exe

  `````````````````System Health check`````````````````

  Total Fragmentation on Drive C: %

  ````````````````````End of Log``````````````````````

  Rapporteren
• 

  Ben

  09-12-2012 20:43

  Hallo,

  Probeer het volgende download eerst de SP 1 en installeer die: http://www.microsoft.com/nl-nl/download/details.aspx?id=910

  Download daarna SP 2 en installeer die: http://www.microsoft.com/nl-nl/download/details.aspx?id=15278

  Gr.Ben

  Rapporteren
• 

  Fabian

  09-12-2012 21:08

  Ik heb te weinig ruimte op me C schijf. Zal hem morgen even defragmenteren. Hopelijk lukt het dan wel..

  Rapporteren

Dit topic is gesloten, er kunnen geen reacties meer worden geplaatst.