nurse84 help

[nurse84]

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org
Databaseversie: v2014.03.17.08
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16521
[administrator]
18/03/2014 15:13:02
mbam-log-2014-03-18 (15-13-02).txt
Scan type: Snelle scan
Ingeschakelde scan opties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM
Uitgeschakelde scan opties: P2P
Objecten gescand: 259522
Verstreken tijd: 12 minuut/minuten, 35 seconde
Geheugenprocessen gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
Geheugenmodulen gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
Registersleutels gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
Registerwaarden gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
Registerdata gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
Mappen gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
Bestanden gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
(einde)

[nurse84]

GMER 2.1.19357 - http://www.gmer.net
Rootkit scan 2014-03-18 16:18:38
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\00000061 WDC_WD10 rev.51.0 931,51GB
Running: ym9j09xx.exe; Driver: C:\Users\Deback\AppData\Local\Temp\uglcyuog.sys

---- Kernel code sections - GMER 2.1 ----
INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLoo kasideList + 528 fffff800041be000 45 bytes [A0, 11, 00, 00, 00, 00, 00, ...]
INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLoo kasideList + 575 fffff800041be02f 23 bytes [00, 00, 10, 00, 00, 00, 00, ...]
---- User code sections - GMER 2.1 ----
.text C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe[2112] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000077341465 2 bytes [34, 77]
.text C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe[2112] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000773414bb 2 bytes [34, 77]
.text ... * 2
.text C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMS Server.exe[2252] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000077341465 2 bytes [34, 77]
.text C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMS Server.exe[2252] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000773414bb 2 bytes [34, 77]
.text ... * 2
? C:\Windows\system32\mssprxy.dll [2908] entry point in ".rdata" section 000000006fd171e6
.text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3172] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000077341465 2 bytes [34, 77]
.text C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE[3172] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000773414bb 2 bytes [34, 77]
.text ... * 2
.text C:\Program Files (x86)\Skype\Phone\Skype.exe[1520] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000077341465 2 bytes [34, 77]
.text C:\Program Files (x86)\Skype\Phone\Skype.exe[1520] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000773414bb 2 bytes [34, 77]
.text ... * 2
.text C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe[4224] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000077341465 2 bytes [34, 77]
.text C:\Program Files (x86)\Canon\ImageBrowser EX\MFManager.exe[4224] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000773414bb 2 bytes [34, 77]
.text ... * 2
.text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1544] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000077341465 2 bytes [34, 77]
.text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[1544] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000773414bb 2 bytes [34, 77]
.text ... * 2
.text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[6276] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000077341465 2 bytes [34, 77]
.text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[6276] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000773414bb 2 bytes [34, 77]
.text ... * 2
.text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[4588] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000077341465 2 bytes [34, 77]
.text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[4588] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000773414bb 2 bytes [34, 77]
.text ... * 2
.text C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe[4968] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000077341465 2 bytes [34, 77]
.text C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe[4968] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000773414bb 2 bytes [34, 77]
.text ... * 2
.text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[5936] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000077341465 2 bytes [34, 77]
.text C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE[5936] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000773414bb 2 bytes [34, 77]
.text ... * 2
---- Threads - GMER 2.1 ----
Thread C:\Windows\system32\svchost.exe [2032:4708] 000007fef9282888
Thread C:\Windows\system32\svchost.exe [2032:4248] 000007fef9282a40
Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [5668:5888] 000007fefab92a7c
---- Registry - GMER 2.1 ----
Reg HKLM\SYSTEM\CurrentControlSet\Control\Network\{4D3 6E972-E325-11CE-BFC1-08002BE10318}\{FE475EED-2A5C-48A3-9220-C432B92164C4}\Connection@Name isatap.{F29BB848-4D2A-4875-97D6-C7413B6CB2C5}
Reg HKLM\SYSTEM\CurrentControlSet\Control\Network\{4d3 6e975-e325-11ce-bfc1-08002be10318}\{2B07FAA1-8217-4E30-B5EC-FD4501E773BB}\Linkage@Bind \Device\{96DE783F-E14E-4317-A2F6-1C137325FAD5}?\Device\{FE475EED-2A5C-48A3-9220-C432B92164C4}?\Device\{0EF37EAD-2A5C-44D5-8534-4CCCBAAADBEB}?\Device\{32CE94BD-F718-454B-A208-23EFED178509}?
Reg HKLM\SYSTEM\CurrentControlSet\Control\Network\{4d3 6e975-e325-11ce-bfc1-08002be10318}\{2B07FAA1-8217-4E30-B5EC-FD4501E773BB}\Linkage@Route "{96DE783F-E14E-4317-A2F6-1C137325FAD5}"?"{FE475EED-2A5C-48A3-9220-C432B92164C4}"?"{0EF37EAD-2A5C-44D5-8534-4CCCBAAADBEB}"?"{32CE94BD-F718-454B-A208-23EFED178509}"?
Reg HKLM\SYSTEM\CurrentControlSet\Control\Network\{4d3 6e975-e325-11ce-bfc1-08002be10318}\{2B07FAA1-8217-4E30-B5EC-FD4501E773BB}\Linkage@Export \Device\TCPIP6TUNNEL_{96DE783F-E14E-4317-A2F6-1C137325FAD5}?\Device\TCPIP6TUNNEL_{FE475EED-2A5C-48A3-9220-C432B92164C4}?\Device\TCPIP6TUNNEL_{0EF37EAD-2A5C-44D5-8534-4CCCBAAADBEB}?\Device\TCPIP6TUNNEL_{32CE94BD-F718-454B-A208-23EFED178509}?
Reg HKLM\SYSTEM\CurrentControlSet\services\iphlpsvc\Pa rameters\Isatap\{FE475EED-2A5C-48A3-9220-C432B92164C4}@InterfaceName isatap.{F29BB848-4D2A-4875-97D6-C7413B6CB2C5}
Reg HKLM\SYSTEM\CurrentControlSet\services\iphlpsvc\Pa rameters\Isatap\{FE475EED-2A5C-48A3-9220-C432B92164C4}@ReusableType 0
---- Disk sectors - GMER 2.1 ----
Disk \Device\Harddisk0\DR0 unknown MBR code
---- EOF - GMER 2.1 ----

[nurse84]

Moet ik punt 3 ook doen?

[Rosty]

Download AdwCleaner by Xplode naar het bureaublad.

• Sluit alle openstaande vensters.
• Dubbelklik op AdwCleaner om hem te starten.
• Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren,
• Door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
• Klik vervolgens op Scan.
• Klik vervolgens op Clean als er items zijn gevonden.
• Klik bij Herstarten Noodzakelijk op OK

Nadat de PC opnieuw is opgestart, opent meestal een logfile.
Anders is het hier terug te vinden C:\AdwCleaner\AdwCleaner[S0].txt

[nurse84]

Groot probleem ik krijg pc niet meer opgestart. Krijg telkens startup repair... tussen het opstarten door krijg ik een blauw scherm met tekst maar kan er nets v lezen...gaat te vlug. Kan iemand mij wijze raad geven aub :-(:-(

[Rosty]

Probeer eens op te starten in veilige modus!!

[nurse84]

En hoe geraak ik daar? Ik krijg telkens windows foutherstel... als ik dat doe kom ik bij system recovery options... maar die vind niets en kzit als het ware in vizieuze cirkel pff

[nurse84]

# AdwCleaner v3.022 - Report created 18/03/2014 at 16:26:25
# Updated 13/03/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username :
# Running from : C:\Users\\Downloads\adwcleaner.exe
# Option : Scan
***** [ Services ] *****

***** [ Files / Folders ] *****
File Found : C:\Windows\System32\Tasks\BrowserDefendert
File Found : C:\Windows\System32\Tasks\Dealply
File Found : C:\Windows\System32\Tasks\DealPlyUpdate
Folder Found C:\Program Files (x86)\Delta
Folder Found C:\Program Files (x86)\pc speed up
Folder Found C:\ProgramData\Babylon
Folder Found C:\ProgramData\Microsoft\Windows\Start Menu\Programs\pc speed up
Folder Found C:\ProgramData\wincert
Folder Found C:\Users\\AppData\Roaming\BabSolution
Folder Found C:\Users\\AppData\Roaming\Babylon
Folder Found C:\Users\\AppData\Roaming\dvdvideosoftiehelpers
Folder Found C:\Users\\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
***** [ Shortcuts ] *****

***** [ Registry ] *****
Data Found : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~3\Wincert\WIN32C~1.DLL
Data Found : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~3\Wincert\WIN32C~1.DLL
Data Found : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~3\Wincert\WIN64C~1.DLL
Key Found : HKCU\Software\596da8ab76fbf41
Key Found : HKCU\Software\AVG Nation toolbar
Key Found : HKCU\Software\BabSolution
Key Found : HKCU\Software\Delta
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : HKCU\Software\torch
Key Found : [x64] HKCU\Software\AVG Nation toolbar
Key Found : [x64] HKCU\Software\BabSolution
Key Found : [x64] HKCU\Software\Delta
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : [x64] HKCU\Software\torch
Key Found : HKLM\SOFTWARE\596da8ab76fbf41
Key Found : HKLM\Software\AVG Nation toolbar
Key Found : HKLM\Software\AVG Security Toolbar
Key Found : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Found : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Found : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Key Found : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Found : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Found : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Key Found : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Key Found : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Key Found : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Key Found : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Key Found : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Key Found : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Key Found : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Key Found : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Key Found : HKLM\SOFTWARE\Classes\Prod.cap
Key Found : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Found : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found : HKLM\Software\DataMngr
Key Found : HKLM\Software\Delta
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\kiplfnciaok pcennlkldkdaeaaomamof
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASAPI3 2
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASMANC S
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader _voor_format-factory_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader _voor_format-factory_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader _voor_msn-messenger-8-5_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader _voor_msn-messenger-8-5_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASAPI3 2
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASMANC S
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall\Delta Chrome Toolbar
Key Found : HKLM\Software\torch
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : [x64] HKLM\SOFTWARE\Speedchecker Limited
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.16521
Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://isearch.babylon.com/?babsrc=HP_ss_Btisdt4&mntrId=204C94DBC9AA6B17&affI D=121564&tsp=4978
-\\ Google Chrome v33.0.1750.154
[ File : C:\Users\\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found : homepage
Found : homepage
Found : homepage
*************************
AdwCleaner[R0].txt - [7786 octets] - [18/03/2014 16:26:25]
########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [7846 octets] ##########
# AdwCleaner v3.022 - Report created 19/03/2014 at 19:53:21
# Updated 13/03/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Use
# Running from : C:\Users\\Desktop\adwcleaner.exe
# Option : Scan
***** [ Services ] *****

***** [ Files / Folders ] *****
File Found : C:\Windows\System32\Tasks\BrowserDefendert
File Found : C:\Windows\System32\Tasks\Dealply
File Found : C:\Windows\System32\Tasks\DealPlyUpdate
Folder Found C:\Program Files (x86)\Delta
Folder Found C:\Program Files (x86)\pc speed up
Folder Found C:\ProgramData\Babylon
Folder Found C:\ProgramData\Microsoft\Windows\Start Menu\Programs\pc speed up
Folder Found C:\ProgramData\wincert
Folder Found C:\Users\\AppData\Roaming\BabSolution
Folder Found C:\Users\\AppData\Roaming\Babylon
Folder Found C:\Users\\AppData\Roaming\dvdvideosoftiehelpers
Folder Found C:\Users\\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
***** [ Shortcuts ] *****

***** [ Registry ] *****
Data Found : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~3\Wincert\WIN32C~1.DLL
Data Found : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~3\Wincert\WIN32C~1.DLL
Data Found : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~3\Wincert\WIN64C~1.DLL
Key Found : HKCU\Software\596da8ab76fbf41
Key Found : HKCU\Software\AVG Nation toolbar
Key Found : HKCU\Software\BabSolution
Key Found : HKCU\Software\Delta
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : HKCU\Software\torch
Key Found : [x64] HKCU\Software\AVG Nation toolbar
Key Found : [x64] HKCU\Software\BabSolution
Key Found : [x64] HKCU\Software\Delta
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : [x64] HKCU\Software\torch
Key Found : HKLM\SOFTWARE\596da8ab76fbf41
Key Found : HKLM\Software\AVG Nation toolbar
Key Found : HKLM\Software\AVG Security Toolbar
Key Found : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Found : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Found : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Key Found : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Found : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Found : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Key Found : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Key Found : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Key Found : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Key Found : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Key Found : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Key Found : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Key Found : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Key Found : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Key Found : HKLM\SOFTWARE\Classes\Prod.cap
Key Found : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Found : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found : HKLM\Software\DataMngr
Key Found : HKLM\Software\Delta
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\kiplfnciaok pcennlkldkdaeaaomamof
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASAPI3 2
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASMANC S
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader _voor_format-factory_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader _voor_format-factory_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader _voor_msn-messenger-8-5_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader _voor_msn-messenger-8-5_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASAPI3 2
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASMANC S
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall\Delta Chrome Toolbar
Key Found : HKLM\Software\torch
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Key Found : [x64] HKLM\SOFTWARE\Speedchecker Limited
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.16521
Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://isearch.babylon.com/?babsrc=HP_ss_Btisdt4&mntrId=204C94DBC9AA6B17&affI D=121564&tsp=4978
-\\ Google Chrome v33.0.1750.154
[ File : C:\Users\\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Found : homepage
Found : homepage
Found : homepage
*************************
AdwCleaner[R0].txt - [15806 octets] - [18/03/2014 16:26:25]
########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [15867 octets] ##########

[nurse84]

uitgevoerd in veilige modus maar probleem nog niet opgelost?
Wat kan ik verder doen?
Alvast bedankt voor hulp!

[Rosty]

Voer nogmaals de instructies van AdwCleaner uit in Veiige Modus maar als er iets gevonden word moet je op "clean" drukken!!
Ook uit voeren als administrator :rechtsklikken op het AdwCleaner icoon en kiezen voor "uitvoeren als administratir".
Pos dan deze log hier.