Reclames e.d.-

syrietje · 20 mar 2015, 13:26

Dit is een vraag voor een vriend (want ikzelf heb er geen last van) : hij kent weinig of niks van computers, maar je kent dat hé : op van alles klikken en naar sites gaan waar hij beter niet naartoe gaat, enz x 100. Het gevolg is dat er natuurlijk veelvuldig reclames en andere zaken ineens te voorschijn komen en dat is niet leuk. Ik wil voor hem zijn pc wel eens éénmalig opkuisen, maar daar ik ook niet een expert ben, vraag ik jullie : wat kan ik het best (gratis) downloaden om komaf te maken met die reclames ? Ik weet dat hij de (gratis) versie van Avast erop heeft staan en Ccleaner, meer niet.

Sony · 20 mar 2015, 14:44

syrietje,

Om te beginnen:
Download AdwCleaner: (download start automatisch)
https://toolslib.net/downloads/finish/1/
Downloaden --> opstarten --> Scannen --> wachten --> Verwijderen (zeker doen) --> na het heropstarten van de computer ziet u een log tekst Kopieer die tekst en plaats die hier.

Als u de log mist kunt u die vinden bij:
C:\AdwCleaner\Adwcleaner(S0).txt
Openen met kladblok --> tekst selecteren en hier plakken.

Nadat de log hier geplaatst is:
start adwcleaner --> deïnstalleren klikken.
Als u die nog nodig hebt moet die toch terug gedownload worden.

Nadien zien we wel verder.

Sony

syrietje · 23 mar 2015, 19:42

# AdwCleaner v4.113 - Logfile created 23/03/2015 at 19:37:23
# Updated 22/03/2015 by Xplode
# Database : 2015-03-23.1 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : Floros - VALILIS-PC
# Running from : C:\Users\Floros\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\36KLJ5GQ\adwcleaner_4.113.exe
# Option : Cleaning

***** [ Services ] *****

Service Deleted : FilmFanaticService
[#] Service Deleted : Update Rolimno
[#] Service Deleted : Util Rolimno
Service Deleted : {234280f6-0eca-4130-85e8-3d4370f3360b}w64
Service Deleted : {d5addb71-db13-419d-aa7f-1053471a2509}w64
Service Deleted : {dfe2550a-bc38-40d2-a94b-22760bae1c54}w64
Service Deleted : {e4c6227e-782d-4fb9-9a91-19df3596a980}w64

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Coupons
Folder Deleted : C:\Program Files (x86)\FilmFanatic
Folder Deleted : C:\Program Files (x86)\MyPC Backup
Folder Deleted : C:\Program Files (x86)\VideoDownloadConverter_4z
Folder Deleted : C:\Program Files (x86)\Coupons
[!] Folder Deleted : C:\Program Files (x86)\Rolimno
Folder Deleted : C:\Users\Floros\AppData\Local\FilmFanatic
Folder Deleted : C:\Users\Floros\AppData\Local\iac
Folder Deleted : C:\Users\Floros\AppData\Local\pay-by-ads
Folder Deleted : C:\Users\Floros\AppData\Local\SevereWeatherAlerts
Folder Deleted : C:\Users\Floros\AppData\Local\Weather_Notifications,_LL
Folder Deleted : C:\Users\Floros\AppData\LocalLow\FilmFanatic
Folder Deleted : C:\Users\Floros\AppData\LocalLow\iac
Folder Deleted : C:\Users\Floros\AppData\LocalLow\VideoDownloadConverter_4z
Folder Deleted : C:\Users\Floros\AppData\Roaming\Systweak
Folder Deleted : C:\Users\Floros\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Severe Weather Alerts
Folder Deleted : C:\Users\Floros\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd
File Deleted : C:\Windows\System32\roboot64.exe
File Deleted : C:\Windows\System32\drivers\{234280f6-0eca-4130-85e8-3d4370f3360b}w64.sys
File Deleted : C:\Windows\System32\drivers\{d5addb71-db13-419d-aa7f-1053471a2509}w64.sys
File Deleted : C:\Windows\System32\drivers\{dfe2550a-bc38-40d2-a94b-22760bae1c54}w64.sys
File Deleted : C:\Windows\System32\drivers\{e4c6227e-782d-4fb9-9a91-19df3596a980}w64.sys

***** [ Scheduled tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKCU\Software\Google\Chrome\Extensions\fcfenmboojpjinhpgggodefccipikbpd
Key Deleted : HKLM\SOFTWARE\Classes\FilmFanatic.FeedManager
Key Deleted : HKLM\SOFTWARE\Classes\FilmFanatic.FeedManager.1
Key Deleted : HKLM\SOFTWARE\Classes\FilmFanatic.HTMLMenu
Key Deleted : HKLM\SOFTWARE\Classes\FilmFanatic.HTMLMenu.1
Key Deleted : HKLM\SOFTWARE\Classes\FilmFanatic.HTMLPanel
Key Deleted : HKLM\SOFTWARE\Classes\FilmFanatic.HTMLPanel.1
Key Deleted : HKLM\SOFTWARE\Classes\FilmFanatic.MultipleButton
Key Deleted : HKLM\SOFTWARE\Classes\FilmFanatic.MultipleButton.1
Key Deleted : HKLM\SOFTWARE\Classes\FilmFanatic.PseudoTransparentPlugin
Key Deleted : HKLM\SOFTWARE\Classes\FilmFanatic.PseudoTransparentPlugin.1
Key Deleted : HKLM\SOFTWARE\Classes\FilmFanatic.ScriptButton
Key Deleted : HKLM\SOFTWARE\Classes\FilmFanatic.ScriptButton.1
Key Deleted : HKLM\SOFTWARE\Classes\FilmFanatic.SettingsPlugin
Key Deleted : HKLM\SOFTWARE\Classes\FilmFanatic.SettingsPlugin.1
Key Deleted : HKLM\SOFTWARE\Classes\FilmFanatic.ThirdPartyInstaller
Key Deleted : HKLM\SOFTWARE\Classes\FilmFanatic.ThirdPartyInstaller.1
Key Deleted : HKLM\SOFTWARE\Classes\FilmFanatic.ToolbarProtector
Key Deleted : HKLM\SOFTWARE\Classes\FilmFanatic.ToolbarProtector.1
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.DynamicBarButton
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.DynamicBarButton.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.FeedManager
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.FeedManager.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLMenu
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLMenu.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLPanel
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLPanel.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.MultipleButton
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.MultipleButton.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.PseudoTransparentPlugin
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.PseudoTransparentPlugin.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.Radio
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.Radio.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.RadioSettings
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.RadioSettings.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ScriptButton
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ScriptButton.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.SkinLauncher
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.SkinLauncher.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.SkinLauncherSettings
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.SkinLauncherSettings.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ThirdPartyInstaller
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ThirdPartyInstaller.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ToolbarProtector
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ToolbarProtector.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.UrlAlertButton
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.UrlAlertButton.1
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.XMLSessionPlugin
Key Deleted : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.XMLSessionPlugin.1
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [VideoDownloadConverter_4z Browser Plugin Loader]
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@VideoDownloadConverter_4z.com/Plugin
Key Deleted : HKCU\Software\Classes\keepmysearch
Value Deleted : HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN [FilmFanatic Search Scope Monitor]
Value Deleted : HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN [FilmFanatic AppIntegrator 32-bit]
Value Deleted : HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN [FilmFanatic EPM Support]
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Update Rolimno
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Util Rolimno
Key Deleted : HKCU\Software\ca2c69ba75764aed27bbb9c6003c3bb9
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{07D09E63-294F-4AA3-AB44-E61331AEC6A3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0B84B4B4-8AF8-4F1F-91FE-074A666F6425}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{12659BAB-1B90-4FBB-97CF-DB2D3475DC38}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{13119113-0854-469D-807A-171568457991}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1DA22A28-324D-4DD4-B2DC-66A3CEBF447F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1F6F39C1-00A8-4752-A94C-D0EA92D978B6}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2A1260C1-2964-453F-B0BA-FA429472EB5F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2F38D624-AC5D-4096-88CC-A58D2AC806E1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{33119133-0854-469D-807A-171568457991}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{363D5C92-10DC-4287-93E5-1832EECC48EC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3719959C-1CCD-4FA7-8EBB-7D9DED86FCCB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{37A2255C-D173-4B54-A455-13DE1DDA9F44}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B41BE90-F731-4137-AFF3-2CA951E7F0D9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3D429207-4689-492D-A0E5-CDC5DFBB5005}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3E9BE71D-A3FA-4224-AB29-2602ACD577FF}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4128C64D-F0DD-4811-9405-D22294E8151F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4C2743F0-A2E2-41A0-9E65-798943109F42}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5354D921-3F52-47C5-938D-77A2FB6DEFE7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{631ACB68-57C3-48AF-9CC5-FCEC0837FFD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{66292684-B2C2-4C7C-B3D2-BF446E30744C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69407823-3494-4400-8D49-612549E8F4EE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6BFF4BCB-7A73-45A7-AC4C-389A34E1D1EF}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{71144427-1368-4D18-8DC9-2AE3CC4C4F83}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7F4A94DC-2191-4EE3-9F0B-C8A12199D22C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7F5AEBD9-3D48-43BE-ABCA-0AEFD286C4CD}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{84B7B98F-E018-4DBB-AB4C-4DDD3DFCB5FB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8FCA5302-6D6D-4645-BF99-D43CF76CE474}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{93FC722B-AB04-4CE2-B1A5-5B6889A72830}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9549F17F-105D-4802-96CB-6113ACC2CB53}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{99B340F7-76E0-44AB-9948-B95A1B475D39}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{99E1F6FD-2E94-4CF6-8344-1BA63CD3BD9B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BDE564F7-15C9-4C39-A5BA-6AD66A289997}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D5E9B421-C309-41DE-9014-800A2ADCDEB0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DD385519-22E7-4BE2-8A8D-35C66DF4858E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ED345812-2722-4DCA-9976-D01832DB44EE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EFBF47AA-3C29-4C00-9225-6001E6A0B1AC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FF48DBA6-5DD8-4D10-9EB0-0FA968502E66}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A85A5E6A-DE2C-4F4E-99DC-F469DF5A0EEC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9e875891-7854-4259-97ba-f4becaf516d0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{17B10E59-09E1-4C39-A738-6774D7AB7778}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1AD2049E-E483-4425-8555-8E0775ACB631}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1BE14FE1-3175-4324-A77B-33FE5CB7A6ED}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23119123-0854-469D-807A-171568457991}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2D9083CE-8758-4704-BA57-3C891D7452BD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3E9469AF-E866-4476-B767-810630F1F6E7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{47700C35-9E3E-4DAD-934C-0CE28A87237C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{716E443D-7CAA-44F1-866B-F45D00E712CC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{72063D77-7590-4DA9-A7F8-F5ECAF3632C4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7FC87AC5-FA93-476E-A32C-A941229DED0B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC65300A-DC43-4D86-B153-E59CF6E74216}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{980DBC5B-CA9A-4A10-8EA5-DC6D2928A43D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{03119103-0854-469D-807A-171568457991}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{1E617D6C-CAA2-4692-B350-C5B638422BDB}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2D3826A1-F3E8-45D6-94B5-C26D8EC0073B}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{335FDF69-47E2-4099-8B85-F743014942C5}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{37923200-6887-4B44-95D4-CAE8F83ECFEE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{3E5B610B-F82D-42FD-AA36-10B0C103BDD5}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{3EE17DD1-E28B-4AED-A3B2-9C29CB2C19D6}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{79332472-47F3-4E32-B07F-CF8DF4C58499}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{80154DB4-DC3D-41D7-A5DA-3B63549377A4}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{83AFB8A1-DFD5-4103-B5F7-52F2F114D188}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{864D5A22-9C34-48F6-9385-2E1EAF5F8C33}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{886F93AD-3CBB-4424-8442-A7340243540F}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{95C0D70C-E5ED-4618-AECC-E11066F86960}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{AA289DBC-59B6-40A5-AC7D-C90DF850289C}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{B04A9E6A-C9C5-4A2F-ADF9-B69BAC127A14}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{BC153A3C-0BB7-4EED-83AE-28E6E398F56E}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{CA723163-6FAD-43D4-8B93-0D8C52BD9974}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E9594C59-AA17-4E5B-B9A5-3B4B023B9A2E}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{F1F328EB-F5A5-432B-A54C-05F3EF5B0BD8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{FB0E8A09-F08C-44CF-9E15-97ADAC016248}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{FE8DBB09-C3D3-4477-80CB-D38914B94BB8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{7c647301-1e03-4cd4-8f45-307d0f94b0a4}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{312F84FB-8970-4FD3-BDDB-7012EAC4AFC9}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{631ACB68-57C3-48AF-9CC5-FCEC0837FFD3}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D5E9B421-C309-41DE-9014-800A2ADCDEB0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9e875891-7854-4259-97ba-f4becaf516d0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0B84B4B4-8AF8-4F1F-91FE-074A666F6425}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{312F84FB-8970-4FD3-BDDB-7012EAC4AFC9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4C2743F0-A2E2-41A0-9E65-798943109F42}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{631ACB68-57C3-48AF-9CC5-FCEC0837FFD3}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A86782D8-7B41-452F-A217-1854F72DBA54}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D5E9B421-C309-41DE-9014-800A2ADCDEB0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{38122A36-83B2-46B8-B39A-EC72A4614A07}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9e875891-7854-4259-97ba-f4becaf516d0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0B84B4B4-8AF8-4F1F-91FE-074A666F6425}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{312F84FB-8970-4FD3-BDDB-7012EAC4AFC9}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{631ACB68-57C3-48AF-9CC5-FCEC0837FFD3}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D5E9B421-C309-41DE-9014-800A2ADCDEB0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9e875891-7854-4259-97ba-f4becaf516d0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1DA22A28-324D-4DD4-B2DC-66A3CEBF447F}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1F6F39C1-00A8-4752-A94C-D0EA92D978B6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{2F38D624-AC5D-4096-88CC-A58D2AC806E1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{37A2255C-D173-4B54-A455-13DE1DDA9F44}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3E9BE71D-A3FA-4224-AB29-2602ACD577FF}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4C2743F0-A2E2-41A0-9E65-798943109F42}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5354D921-3F52-47C5-938D-77A2FB6DEFE7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{71144427-1368-4D18-8DC9-2AE3CC4C4F83}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{99E1F6FD-2E94-4CF6-8344-1BA63CD3BD9B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{ED345812-2722-4DCA-9976-D01832DB44EE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{38122A36-83B2-46B8-B39A-EC72A4614A07}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1BE14FE1-3175-4324-A77B-33FE5CB7A6ED}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2D9083CE-8758-4704-BA57-3C891D7452BD}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3D429207-4689-492D-A0E5-CDC5DFBB5005}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99B340F7-76E0-44AB-9948-B95A1B475D39}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B5CCB33F-6C0A-418A-8AF1-10C35BBD579A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F5BFAD3A-D783-4AD7-98AA-D8F082626F8D}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FC65300A-DC43-4D86-B153-E59CF6E74216}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{0B84B4B4-8AF8-4F1F-91FE-074A666F6425}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{0B84B4B4-8AF8-4F1F-91FE-074A666F6425}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{796B75F6-6187-47E2-8F1F-C16E059E6E19}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{93A3111F-4F74-4ED8-895E-D9708497629E}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{17B10E59-09E1-4C39-A738-6774D7AB7778}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1AD2049E-E483-4425-8555-8E0775ACB631}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1BE14FE1-3175-4324-A77B-33FE5CB7A6ED}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{23119123-0854-469D-807A-171568457991}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2D9083CE-8758-4704-BA57-3C891D7452BD}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3E9469AF-E866-4476-B767-810630F1F6E7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{47700C35-9E3E-4DAD-934C-0CE28A87237C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{716E443D-7CAA-44F1-866B-F45D00E712CC}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{72063D77-7590-4DA9-A7F8-F5ECAF3632C4}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{7FC87AC5-FA93-476E-A32C-A941229DED0B}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FC65300A-DC43-4D86-B153-E59CF6E74216}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{CA021789-C8CD-4676-BC40-90077A19D5CD}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{980DBC5B-CA9A-4A10-8EA5-DC6D2928A43D}
Value Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{23088CF8-EAF8-4BB3-A251-9BA61557AC75}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9F2E8BE3-0CA5-4C4C-8DBB-B75BA416BB62}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{23088cf8-eaf8-4bb3-a251-9ba61557ac75}
Key Deleted : HKCU\Software\distromatic
Key Deleted : HKCU\Software\FilmFanatic
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\systweak
Key Deleted : HKCU\Software\VideoDownloadConverter_4z
Key Deleted : HKCU\Software\Rolimno
Key Deleted : HKCU\Software\AppDataLow\Software\FilmFanatic
Key Deleted : HKCU\Software\AppDataLow\Software\VideoDownloadConverter_4z
Key Deleted : HKLM\SOFTWARE\FilmFanatic
Key Deleted : HKLM\SOFTWARE\systweak
Key Deleted : HKLM\SOFTWARE\VideoDownloadConverter_4z
Key Deleted : HKLM\SOFTWARE\Rolimno
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Search
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VideoDownloadConverter_4zbar Uninstall Internet Explorer
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FilmFanaticbar Uninstall Internet Explorer
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Coupon Printer for Windows5.0.0.0
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{ac225167-00fc-452d-94c5-bb93600e7d9a}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Rolimno
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\webcrawler.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.webcrawler.com

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17496

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Google Chrome v41.0.2272.101

[C:\Users\Floros\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://rts.dsrlte.com/?q={searchTerms}
[C:\Users\Floros\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://rts.dsrlte.com/?q={searchTerms}

*************************

AdwCleaner[R0].txt - [24001 bytes] - [23/03/2015 19:35:22]
AdwCleaner[S0].txt - [23134 bytes] - [23/03/2015 19:37:23]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [23194 bytes] ##########

Sony · 23 mar 2015, 20:06

syrietje,

ja dat was al de moeite nietwaar ?
Laat Malwarebytes ook eens scannen, wat gevonden wordt in quarantaine laten zetten, plaats dan de quarantaine log hier.
Handleiding MalwareBytes:
http://www.malwarebytes-anti-malware.nl ... ndleiding/
MalwareBytes Programma download start automatisch:
http://www.malwarebytes.org/mwb-download/var2/confirm/

Sony

syrietje · 24 mar 2015, 09:08

Welke van de 3 scans moet ik aanduiden , of alle 3 ? Kun je die alle 3 aanduiden of 1 voor 1 ?

verhaegen · 24 mar 2015, 09:19

die met de recenste datum

Sony · 24 mar 2015, 10:01

syrietje,

staat er iets in quarantaine ook ?

Sony

syrietje · 24 mar 2015, 10:21

Sony, ik moet de scan nog doen bij die vriend (ik doe het via Team Vieuw maar voor het ogenblik is hij niet thuis).
Mijn vorige vraag was maar omdat ik even de link van de "handleiding" had bezien en daar waren 3 verschillende scans die je kon aanduiden.
Maar ik heb ondertussen bij mijn eigen computer even die malwarebytes gedownload en daar is het automatisch. Dus straks verder nieuws.

syrietje · 24 mar 2015, 11:36

Oei, ik denk dat ik iets verkeerd gedaan heb. Heb dus de scan laten lopen en er waren 23 gededecteerd. Heb die laten opslagen en toen moest de computer afgesloten en herstart worden. Okay tot daar. Maar waar vind ik nu die log met 23 gedecteerde terug ??? Ik ben al gaan kijken bij C/.../Malwarebytes maar alles opengedaan, maar niets gevonden. Help !!!

Sony · 24 mar 2015, 11:52

syrietje,

Malwarbytes starten op Historie klikken en dan op quarantaine
Als u op programma logboeken klikt kunt u een logboek aanduiden en openen dan ziet u ook wat er eventueel gevonden is.

Sony

Sony · 24 mar 2015, 11:58

syrietje,

De volgende manier is de beste om Malwarebytes te gebruiken:

Klik in het menu van Malwarebytes ANTI-MALWARE op Ïnstellingen" en daar op "Detectie en Bescherming" en zet vervolgens een vinkje bij "Scan naar rootkits".
Klik vervolgens op de knop Scan nu om een bedreigingsscan uit te voeren.
Er zal nu gecontroleerd worden op beschikbare updates, klik hier op "Nu bijwerken als er beschikbare updates zijn.
De scan wordt nu automatisch gestart,wanneer de scan gereed is en er bedreigingen zijn gedetecteerd krijgt u hier een overzicht van.
Wanneer er geen bedreigingen zijn gedetecteerd klikt u na de scan op Bekijk gedetailleerd logboek.
Klik vervolgens op de knop Acties toepassen, bij de melding dat uw computer opnieuw opgestart moet worden klikt u op Nee.
Klik vervolgens op de knop Bekijk gedetailleerd logboek en klik op de knop exporteer
en kies de optie tekstbestand (*.txt).
Geef vervolgens een bestandsnaam op voor het opslaan van het logbestand, bijvoorbeeld MBAM Scanlog en klik vervolgens op de knop Opslaan.
Dit bestand zal standaard op uw bureaublad worden opgeslagen. (als MBAM Scanlog.txt)

Sony

syrietje · 24 mar 2015, 12:55

Malwarebytes Anti-Malware
www.malwarebytes.org

Scandatum: 24/03/2015
Scantijd: 10:57:05
Logbestand: Logbestand P.txt
Beheerder: Ja

Versie: 2.01.4.1018
Malware Gegevensbestand: v2015.03.24.02
Rootkit Gegevensbestand: v2015.02.25.01
Licentie: Proef
Malwarebescherming: Ingeschakeld
Kwaadaardige Website Bescherming: Ingeschakeld
Zelfbescherming: Uitgeschakeld

Besturingssysteem: Windows 7 Service Pack 1
Processor: x64
Bestandssysteem: NTFS
Gebruiker: Floros

Scantype: Bedreigingsscan
Resultaat: Voltooid
Objecten Gescand: 336114
Verstreken Tijd: 20 m, 43 s

Geheugen: Ingeschakeld
Opstarten: Ingeschakeld
Bestandssysteem: Ingeschakeld
Archieven: Ingeschakeld
Rootkits: Uitgeschakeld
Heuristiek: Ingeschakeld
POP: Ingeschakeld
POA: Ingeschakeld

Processen: 1
PUP.Optional.MaintainerSvc.A, C:\ProgramData\27be6962-d56d-4315-829e-0f381e2ea4c8\maintainer.exe, 1940, Verwijder-bij-Herstart, [aca6e46596f4e452eaa0e40fb64bd22e]

Modules: 0
(Geen kwaadaardige items gedetecteerd)

Registersleutels: 3
PUP.Optional.MaintainerSvc.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\MaintainerSvc3.82.8331930, In Quarantaine, [aca6e46596f4e452eaa0e40fb64bd22e],
PUP.Optional.Rolimno.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\fhhkecgfjgooimebgoohgglnmfagcfpp, In Quarantaine, [95bd4603276339fd150b9d45d52ea35d],
PUP.Optional.SevereWeatherAlerts.A, HKU\S-1-5-21-961847453-1311847995-1856455885-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\SevereWeatherAlerts.exe, In Quarantaine, [db773118becc80b6ae10fe34fa0b38c8],

Registerwaardes: 1
PUP.Optional.MindSpark, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|FilmFanatic AppIntegrator 64-bit, C:\PROGRA~2\FILMFA~2\bar\1.bin\AppIntegrator64.exe, In Quarantaine, [cc860445028892a47ae9b21d43c03fc1]

Registerdata: 0
(Geen kwaadaardige items gedetecteerd)

Mappen: 2
PUP.Optional.Rolimno.A, C:\Users\Floros\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhhkecgfjgooimebgoohgglnmfagcfpp, In Quarantaine, [371bc4857e0c2e082235fc7c877c17e9],
PUP.Optional.Rolimno.A, C:\Users\Floros\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhhkecgfjgooimebgoohgglnmfagcfpp\1.0.1_0, In Quarantaine, [371bc4857e0c2e082235fc7c877c17e9],

Bestanden: 17
PUP.Optional.MaintainerSvc.A, C:\ProgramData\27be6962-d56d-4315-829e-0f381e2ea4c8\maintainer.exe, Verwijder-bij-Herstart, [aca6e46596f4e452eaa0e40fb64bd22e],
PUP.Optional.DomaIQ, C:\Users\Floros\Downloads\Setup v2 1 (1).exe, In Quarantaine, [65ed88c1276346f05d46946a966bba46],
PUP.Optional.DomaIQ, C:\Users\Floros\Downloads\Setup v2 1.exe, In Quarantaine, [76dca7a24f3be74f70331ae49e63fa06],
PUP.Optional.Amonetize.A, C:\Users\Floros\Downloads\FacebookMessenger__6629_i1429584267_il2421.exe, In Quarantaine, [1a3881c85931b284e47af1f621e4718f],
PUP.Optional.MindSpark.A, C:\Users\Floros\Downloads\FilmFanatic.exe, In Quarantaine, [a4aea4a5e2a8bd79339a8e0eec198977],
PUP.Optional.InstallBrain, C:\Users\Floros\Downloads\PCPerformerSetup (1).exe, In Quarantaine, [91c1e564ddad44f2d9c05178a45df907],
PUP.Optional.PCPerformer.A, C:\Users\Floros\Downloads\PCPerformerSetup.exe, In Quarantaine, [9ab84bfedcaeed49307fd9e0d1307b85],
PUP.Optional.SoftPulse.gen, C:\Users\Floros\Downloads\Player.exe, In Quarantaine, [54fea1a8d0ba9f97779f809d27db9d63],
FraudTool.YAC, C:\Users\Floros\Downloads\yet_another_cleaner_mmacn (1).exe, In Quarantaine, [9eb4be8b7317a88e13c7ca68b0528878],
FraudTool.YAC, C:\Users\Floros\Downloads\yet_another_cleaner_ymb (1).exe, In Quarantaine, [a6ac31181c6e9e987ec0e74cf0120bf5],
FraudTool.YAC, C:\Users\Floros\Downloads\yet_another_cleaner_ymb.exe, In Quarantaine, [b69c66e3098171c5aa94d360f210ef11],
Misused.Legit.AI, C:\Users\Floros\rtpgh\SandboxieSp32.exe, In Quarantaine, [bf9367e26e1c86b07a3ebbcc7d8427d9],
PUP.Optional.Rolimno.A, C:\Users\Floros\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhhkecgfjgooimebgoohgglnmfagcfpp\1.0.1_0\background.js, In Quarantaine, [371bc4857e0c2e082235fc7c877c17e9],
PUP.Optional.Rolimno.A, C:\Users\Floros\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhhkecgfjgooimebgoohgglnmfagcfpp\1.0.1_0\content.js, In Quarantaine, [371bc4857e0c2e082235fc7c877c17e9],
PUP.Optional.Rolimno.A, C:\Users\Floros\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhhkecgfjgooimebgoohgglnmfagcfpp\1.0.1_0\icon.png, In Quarantaine, [371bc4857e0c2e082235fc7c877c17e9],
PUP.Optional.Rolimno.A, C:\Users\Floros\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhhkecgfjgooimebgoohgglnmfagcfpp\1.0.1_0\manifest.json, In Quarantaine, [371bc4857e0c2e082235fc7c877c17e9],
PUP.Optional.Dsrlte.A, C:\Users\Floros\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences, Goed: (), Slecht: ( "homepage": "http://rts.dsrlte.com",), Vervangen,[aca6ab9eeb9f85b16e83ed44cd39728e]

Fysieke Sectoren: 0
(Geen kwaadaardige items gedetecteerd)

(end)

Sony · 24 mar 2015, 13:29

syrietje,

Malwarebytes nogmaals starten --> Historie --> Quarantaine --> Verwijder alles.
Laat ook eens weten hoe de computer nu reageert ?
Kent u CCleaner ?

Sony