Mededeling

**Juisterr** · 13-10-15, 10:19

Schakel eerst de Antivirussoftware uit voordat je zoek.exe download of uitvoert.
Schakel je antivirus- en antispywareprogramma's tijdelijk uit, deze kunnen namelijk de werking van Zoek.exe nadelig beïnvloeden.
(hier en hier) kan je lezen hoe je dat doet.

Download Zoek.exe naar het bureaublad (klik hier voor meer informatie over hoe zoek.exe te gebruiken)

Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kan je dat negeren, het is namelijk een onterechte waarschuwing.

Dubbelklik vervolgens op Zoek.exe om de tool te starten.
Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Kopieer nu onderstaande code en plak die in het grote invulvenster:
Note: Dit script is speciaal bedoeld voor deze Computer, gebruik dit dan ook niet op andere computers met een gelijkaardig probleem.
Code:
```
torpigcheck;  
emptyfolderscheck;delete
firefoxlook; 
Chromelook; 
CHRdefaults;
autoclean; 
iedefaults;
```
Klik nu op de knop "Run script".
Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
Post het geopende logje in het volgende bericht als bijlage.

**idont** · 14-10-15, 15:31

Zoek.exe v5.0.0.1 Updated 27-09-2015
Tool run by Edward on wo 14-10-2015 at 15:50:09,04.
Microsoft Windows 10 Home 10.0.10240 x64
Running in: Normal Mode No Internet Access Detected
Launched: C:\Users\Edward\Desktop\zoek.exe [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2015-10-14-134153.log 7945 bytes

==== Torpig Check ======================

HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandlers\ClearfiCopyHook {ED32C084-BABB-11E1-B491-D4D66088709B} C:\Program Files (x86)\Acer\clear.fi plug-in\Clearfishellext_x64.dll
HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandlers\DropboxCopyHook {FBC9D74C-AF55-4309-9FB2-C426E071637F} C:\Users\Edward\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll
HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandlers\FileSystem {217FC9C0-3AEA-1069-A2DB-08002B30309D} %SystemRoot%\system32\shell32.dll
HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandlers\Sharing {40dd6e20-7c17-11ce-a804-00aa003ca9f6} %SystemRoot%\system32\ntshrui.dll

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== Deleting Files \ Folders ======================

"C:\Windows\Installer\173d2.msi" not found

==== Folders in C:\PROGRA~3 0-6 Months Old ======================

2015-04-20 14:16:48 -------- d-----w- C:\PROGRA~3\NortonInstaller
2015-04-20 14:22:08 -------- d-----w- C:\PROGRA~3\Norton
2015-05-05 00:49:34 -------- d-----w- C:\PROGRA~3\Battle.net
2015-05-05 00:54:59 -------- d-----w- C:\PROGRA~3\Blizzard Entertainment
2015-06-01 23:24:01 -------- d-----w- C:\PROGRA~3\boost_interprocess
2015-06-29 11:55:19 -------- d-----w- C:\PROGRA~3\Dropbox
2015-07-10 11:04:22 -------- d-----w- C:\PROGRA~3\regid.1991-06.com.microsoft
2015-07-10 11:04:22 -------- d-----w- C:\PROGRA~3\USOPrivate
2015-07-10 11:04:22 -------- d-s---w- C:\PROGRA~3\Microsoft
2015-07-10 12:21:38 -------- d-sh--we C:\PROGRA~3\Application Data
2015-07-10 12:21:38 -------- d-sh--we C:\PROGRA~3\Desktop
2015-07-10 12:21:38 -------- d-sh--we C:\PROGRA~3\Documents
2015-07-10 12:21:38 -------- d-sh--we C:\PROGRA~3\Start Menu
2015-07-10 12:21:38 -------- d-sh--we C:\PROGRA~3\Templates
2015-07-10 12:22:45 -------- d-----w- C:\PROGRA~3\USOShared
2015-08-26 15:07:45 -------- d-----w- C:\PROGRA~3\NVIDIA Corporation
2015-08-26 15:15:47 -------- d-sh--we C:\PROGRA~3\Bureaublad
2015-08-26 15:15:47 -------- d-sh--we C:\PROGRA~3\Documenten
2015-08-26 15:15:47 -------- d-sh--we C:\PROGRA~3\Menu Start
2015-08-26 15:15:47 -------- d-sh--we C:\PROGRA~3\Sjablonen
2015-08-31 08:15:34 -------- d-----w- C:\PROGRA~3\MFAData
2015-08-31 08:15:34 -------- d--h--w- C:\PROGRA~3\Common Files
2015-08-31 08:19:34 -------- d-----w- C:\PROGRA~3\AVG2015
2015-10-08 18:25:22 -------- d-----w- C:\PROGRA~3\Electronic Arts
2015-10-08 18:25:22 -------- d-----w- C:\PROGRA~3\Origin
2015-10-09 01:06:47 -------- d-----w- C:\PROGRA~3\IntelDLM
2015-10-10 15:07:08 -------- d-----w- C:\PROGRA~3\Malwarebytes
2015-10-13 00:46:35 -------- d-----w- C:\PROGRA~3\HitmanPro

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"{4ED1F68A-5463-4931-9384-8FFF5ED91D92}"="C:\Program Files (x86)\McAfee\SiteAdvisor" [22-04-2015 14:18]

==== Chromium Look ======================

Google Chrome Version: 45.0.2454.101

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
fheoggkfdfchfphceeifdbepaooicaho - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx[28-01-2015 15:25]

Google Slides - Edward\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek
Google Docs - Edward\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake
Google Drive - Edward\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf
YouTube - Edward\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo
Google Search - Edward\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
Google Sheets - Edward\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap
SiteAdvisor - Edward\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho
Google Docs Offline - Edward\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi
AdBlock - Edward\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom
Chrome Web Store Payments - Edward\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
Gmail - Edward\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{EE0F5ADC-8158-4AD9-AE0B-89FEB6CA1117} Unknown Url="Not_Found"

==== Reset Google Chrome ======================

C:\Users\Edward\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Edward\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Edward\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Edward\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2003150105-3056588064-1526723674-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EE0F5ADC-8158-4AD9-AE0B-89FEB6CA1117} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{EE0F5ADC-8158-4AD9-AE0B-89FEB6CA1117} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EE0F5ADC-8158-4AD9-AE0B-89FEB6CA1117} deleted successfully

==== Deleting CLSID Registry Values ======================

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\02F6486B12843E11F869800002C0A966 deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B6846F20-4821-11E3-8F96-0800200C9A66} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\02F6486B12843E11F869800002C0A966 deleted successfully

==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Edward\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Edward\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Edward\AppData\Local\Microsoft\Windows\INetCache\Low\IE emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\IE emptied successfully
C:\Users\Edward\AppData\Local\Microsoft\Windows\INetCache\IE\BCT0ANL2 will be deleted at reboot
C:\Users\Edward\AppData\Local\Microsoft\Windows\INetCache\IE\MYXNES12 will be deleted at reboot
C:\Users\Edward\AppData\Local\Microsoft\Windows\INetCache\IE\UHHUWJ1U will be deleted at reboot
C:\Users\Edward\AppData\Local\Microsoft\Windows\INetCache\IE\ZETFIR7L will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Edward\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=46 folders=34 64618144 bytes)

==== Empty Temp Folders ======================

C:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\Users\Edward\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\WINDOWS\Syswow64\Windows.Devices.Midi.dll" not deleted
"C:\WINDOWS\Syswow64\Windows.Devices.WiFi.dll" not deleted
"C:\WINDOWS\Syswow64\Windows.Gaming.Input.dll" not deleted
"C:\WINDOWS\Syswow64\Windows.Media.FaceAnalysis.dll" not deleted
"C:\WINDOWS\Syswow64\Windows.Media.Import.dll" not deleted
"C:\WINDOWS\Syswow64\Windows.Media.MediaControl.dll" not deleted
"C:\WINDOWS\Syswow64\Windows.Media.Speech.dll" not deleted
"C:\WINDOWS\Syswow64\Windows.Media.Speech.UXRes.dll" not deleted
"C:\WINDOWS\Syswow64\Windows.Media.Streaming.ps.dll" not deleted
"C:\WINDOWS\Syswow64\Windows.Networking.Connectivity.dll" not deleted
"C:\WINDOWS\Syswow64\Windows.UI.Immersive.dll" not deleted
"C:\WINDOWS\Syswow64\Windows.UI.Input.Inking.dll" not deleted
"C:\WINDOWS\Syswow64\Windows.UI.Xaml.Maps.dll" not deleted
"C:\Users\Edward\AppData\Local\Microsoft\Windows\INetCache\IE\BCT0ANL2" not found
"C:\Users\Edward\AppData\Local\Microsoft\Windows\INetCache\IE\MYXNES12" not found
"C:\Users\Edward\AppData\Local\Microsoft\Windows\INetCache\IE\UHHUWJ1U" not found
"C:\Users\Edward\AppData\Local\Microsoft\Windows\INetCache\IE\ZETFIR7L" not found

==== EOF on wo 14-10-2015 at 16:20:12,24 ======================

**Juisterr** · 14-10-15, 15:58

Gaat het al beter?

**idont** · 14-10-15, 16:41

Oorspronkelijk geplaatst door Juisterr Bekijk Berichten

Gaat het al beter?

Jazeker! Malwarebytes kan niks meer vinden. Hartstikke bedankt voor de hulp Juisterr!

**Juisterr** · 14-10-15, 18:51

Mooi, je kan de gebruikte tool(s) verwijderen.

Bescherming tegen ongewenste software.

Unchecky voorkomt installatie van ongewenste software

Dubbelklik op het installatiebestand unchecky_setup.exe om de installatie te starten.
In het scherm wat nu verschijnt kunt u voor meer opties kiezen, op deze manier kunt u zelf de locatie instellen waar Unchecky geïnstalleerd dien te worden.
Klik vervolgens op de knop Install om Unchecky te installeren.
Wanneer de installatie van Unchecky gereed is klikt u op Finish.
Start na de installatie wel even de computer opnieuw op, dit om de wijzigingen in het hostsbestand van Windows door te voeren.

Misschien ook beter om Hitmanproalert te installeren. Alert
Uitleg hieronder.
Uitleg

Mededeling

PUP.Optional.HomepageHelper

PUP.Optional.HomepageHelper

Comment

Comment

Comment

Comment

Comment