Vraagje mallware scanner/verwijderaar

Hallo,

Ik had een vraag. Wie weet een goede mallware verwijderaar. Ik ben vandaag op een aantal sites geweest, die mij niet echt betrouwbaar leken, en ik denk dus dat er keyloggers in zitten.

Dus wie weet een goede mallware verwijderaar?

Mvg, Jordy

Plaats eerst eens een HiJackThis log, daarmee kunnen we wel kijken OF je degelijk Malware hebt.

waar kan ik die log doen?

Download HiJackThis, dan moet je de log opslaan, en kopieeren naar one2xs ;d

Hier is die dan.

Spoiler tonen

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:06:06, on 14-5-2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20935)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.exe
C:WINDOWSsystem32igfxtray.exe
C:WINDOWSsystem32hkcmd.exe
C:WINDOWSsystem32igfxpers.exe
C:WINDOWSRTHDCPL.EXE
C:Program FilesDrive Space IndicatorDrvSpace.exe
C:Program FilesCommon FilesNokiaMPlatformNokiaMServer.exe
C:Program FilesCommon FilesLogitechQCDriverLVCOMS.EXE
C:PROGRA~1EPSONS~1EVENTM~1EEventManager.exe
C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe
C:PROGRA~1MYWEBS~1bar2.binm3SrchMn.exe
C:Program FilesCommon FilesJavaJava Updatejusched.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesUtilitiesVisualTaskTipsVisualTaskTips.exe
C:Program FilesW3iInstallIQUpdaterInstallIQUpdater.exe
C:PROGRA~1MYWEBS~1bar2.binmwsoemon.exe
C:Documents and SettingsAdministratorLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe
C:Program FilesMcAfee Security Scan2.0.181SSScheduler.exe
C:WINDOWSsystem32igfxsrvc.exe
C:Documents and SettingsAdministratorLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
C:Documents and SettingsAdministratorLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
C:Documents and SettingsAdministratorApplication Datalsass.exe
C:Program FilesBonjourmDNSResponder.exe
C:Program FilesFirebirdFirebird_2_1binfbguard.exe
C:Program FilesLogMeIn Hamachihamachi-2.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesJavajre6binjqs.exe
c:Program FilesMicrosoft SQL Server90Sharedsqlwriter.exe
C:WINDOWSsystem32svchost.exe
c:Program FilesZuneZuneBusEnum.exe
C:Program FilesTortoiseSVNbinTSVNCache.exe
C:Program FilesHide My IPHideMyIpSrv.exe
C:Program FilesFirebirdFirebird_2_1binfbserver.exe
C:Documents and SettingsAdministratorLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
C:Documents and SettingsAdministratorLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
C:Documents and SettingsAdministratorLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
C:Documents and SettingsAdministratorLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
C:WINDOWSsystem32SNDVOL32.EXE
C:Documents and SettingsAdministratorLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
C:Documents and SettingsAdministratorLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
C:Program FilesJavajre6binjava.exe
C:Documents and SettingsAdministratorLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
C:Documents and SettingsAdministratorLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
C:Documents and SettingsAdministratorLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
C:WINDOWSsystem32msiexec.exe
C:Program FilesTrend MicroHiJackThisHiJackThis.exe
C:Documents and SettingsAdministratorLocal SettingsApplication DataGoogleChromeApplicationchrome.exe
C:Documents and SettingsAdministratorLocal SettingsApplication DataGoogleChromeApplicationchrome.exe

R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://nl.woofi.info
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://nl.woofi.info
R1 - HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = http://www.google.nl/
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Koppelingen
R3 - URLSearchHook: SHOUTcast Toolbar Search Class - {14f0d511-36a2-41ca-ae01-ba4f87282c97} - C:Program FilesSHOUTcast Radio Toolbarshoutcasttb.dll
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:Program FilesMyWebSearchbar2.binMWSSRCAS.DLL
F2 - REGystem.ini: Shell=Explorer.exe C:Documents and SettingsAdministratorApplication Datalsass.exe
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:Program FilesMyWebSearchbar2.binMWSSRCAS.DLL
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:Program FilesMyWebSearchbar2.binMWSBAR.DLL
O2 - BHO: PriceGong - {1631550F-191D-4826-B069-D9439253D926} - C:Program FilesPriceGong2.1.0PriceGongIE.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: facemoods Helper - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:Program Filesfacemoods.comfacemoods1.4.8.1bhfacemoods.dll
O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:Program FilesEpson SoftwareEasy Photo PrintEPTBL.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:Program FilesSkypeToolbarsInternet Explorerskypeieplugin.dll
O2 - BHO: SHOUTcast Loader - {ccec60fc-2608-4e58-9659-3ffc159e8ea9} - C:Program FilesSHOUTcast Radio Toolbarshoutcasttb.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:Program FilesAsk.comGenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program FilesJavajre6binjp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:Program FilesEPSONEPSON Web-To-PageEPSON Web-To-Page.dll
O3 - Toolbar: SHOUTcast Radio Toolbar - {0457331d-8ca6-4f97-9c26-6a9ef2b2dba8} - C:Program FilesSHOUTcast Radio Toolbarshoutcasttb.dll
O3 - Toolbar: facemoods Toolbar - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:Program Filesfacemoods.comfacemoods1.4.8.1facemoodsTlbr.dll
O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:Program FilesMyWebSearchbar2.binMWSBAR.DLL
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:Program FilesEPSONEPSON Web-To-PageEPSON Web-To-Page.dll
O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:Program FilesEpson SoftwareEasy Photo PrintEPTBL.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:Program FilesAsk.comGenericAskToolbar.dll
O4 - HKLM..Run: [IgfxTray] C:WINDOWSsystem32igfxtray.exe
O4 - HKLM..Run: [HotKeysCmds] C:WINDOWSsystem32hkcmd.exe
O4 - HKLM..Run: [Persistence] C:WINDOWSsystem32igfxpers.exe
O4 - HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM..Run: [DriveSpace] C:Program FilesDrive Space IndicatorDrvSpace.exe
O4 - HKLM..Run: [SkinClock] C:Program FilesDesktop Tray ClockDTClock.exe
O4 - HKLM..Run: [MSWUpdate] "C:Documents and SettingsAdministratorApplication Datalsass.exe"
O4 - HKLM..Run: [NokiaMServer] C:Program FilesCommon FilesNokiaMPlatformNokiaMServer /watchfiles
O4 - HKLM..Run: [HKLM] C:WINDOWSsystem32installsvchost.exe
O4 - HKLM..Run: [facemoods] "C:Program Filesfacemoods.comfacemoods1.4.8.1facemoodssrv.exe" /md I
O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeqttask.exe" -atboottime
O4 - HKLM..Run: [MyWebSearch Email Plugin] C:PROGRA~1MYWEBS~1bar2.binmwsoemon.exe
O4 - HKLM..Run: [LVCOMS] C:Program FilesCommon FilesLogitechQCDriverLVCOMS.EXE
O4 - HKLM..Run: [EEventManager] C:PROGRA~1EPSONS~1EVENTM~1EEventManager.exe
O4 - HKLM..Run: [Adobe Reader Speed Launcher] "C:Program FilesAdobeReader 9.0ReaderReader_sl.exe"
O4 - HKLM..Run: [Adobe ARM] "C:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe"
O4 - HKLM..Run: [Zune Launcher] "c:Program FilesZuneZuneLauncher.exe"
O4 - HKLM..Run: [RuneScape] C:WINDOWSsystem32JagexJagex2.exe
O4 - HKLM..Run: [My Web Search Bar Search Scope Monitor] "C:PROGRA~1MYWEBS~1bar2.binm3SrchMn.exe" /m=2 /w /h
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program FilesCommon FilesJavaJava Updatejusched.exe"
O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [VisualTaskTips] C:Program FilesUtilitiesVisualTaskTipsVisualTaskTips.exe
O4 - HKCU..Run: [SkinClock] C:Program FilesDesktop Tray ClockDTClock.exe
O4 - HKCU..Run: [MSWUpdate] "C:Documents and SettingsAdministratorApplication Datalsass.exe"
O4 - HKCU..Run: [msnmsgr] "C:Program FilesWindows LiveMessengermsnmsgr.exe" /background
O4 - HKCU..Run: [HKCU] C:WINDOWSsystem32installsvchost.exe
O4 - HKCU..Run: [InstallIQUpdater] "C:Program FilesW3iInstallIQUpdaterInstallIQUpdater.exe" /silent /autorun
O4 - HKCU..Run: [MyWebSearch Email Plugin] C:PROGRA~1MYWEBS~1bar2.binmwsoemon.exe
O4 - HKCU..Run: [Google Update] "C:Documents and SettingsAdministratorLocal SettingsApplication DataGoogleUpdateGoogleUpdate.exe" /c
O4 - HKCU..Run: [EPSON SX210 Series] C:WINDOWSSystem32spoolDRIVERSW32X863E_FATIFDE.EXE /FU "C:WINDOWSTEMPE_S9E.tmp" /EF "HKCU"
O4 - HKCU..Run: [JagexGames] C:Documents and SettingsAdministratorApplication DataRhaineJagexJagex.jar
O4 - HKCU..Run: [Jagex] C:Documents and SettingsAdministratorApplication DataJagexJagex.jar
O4 - HKCU..Run: [RuneScape] C:WINDOWSsystem32JagexJagex2.exe
O4 - HKCU..Run: [Microsoft Config] C:Documents and SettingsAdministratorLocal SettingsTempmsconfig.exe
O4 - HKLM..PoliciesExplorerRun: [Policies] C:WINDOWSsystem32JagexJagex2.exe
O4 - HKCU..PoliciesExplorerRun: [Policies] C:WINDOWSsystem32JagexJagex2.exe
O4 - HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User Netwerkservice)
O4 - HKUSS-1-5-20..Run: [VisualTaskTips] C:Program FilesUtilitiesVisualTaskTipsVisualTaskTips.exe (User Netwerkservice)
O4 - HKUSS-1-5-20..Run: [SkinClock] C:Program FilesDesktop Tray ClockDTClock.exe (User Netwerkservice)
O4 - HKUSS-1-5-20..RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User Netwerkservice)
O4 - HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User SYSTEM)
O4 - HKUSS-1-5-18..RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User SYSTEM)
O4 - HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User Default user)
O4 - HKUS.DEFAULT..RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User Default user)
O4 - Startup: LimeWire On Startup.lnk = C:Program FilesLimeWireLimeWire.exe
O4 - Global Startup: McAfee Security Scan Plus.lnk = ?
O4 - Global Startup: Nokia Ovi Suite.lnk = C:Program FilesNokiaOviSuiteRunLauncher.exe
O8 - Extra context menu item: &Search - [URL="http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?s=100000346&p=ZV

Quote:
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:Program FilesMyWebSearchbar2.binMWSSRCAS.DLL

Is volgens mij wel iets wat niet op je PC hoort..
Btw, MalwareBytes Anti-Malware is ook een goede oplossing.

zal ik even checken.

Oke. ;d

Ik raad je aan om op Habbers.nl een topic te plaatsen, Bendeboy (Opleider Hijackthis) heeft daar veel ervaring mee en kan je zeer goed helpen zolang je genoeg informatie plaatst . Hier zitten mensen, niet respectloos maar gewoon waar, die er niks vanaf weten en je straks de verkeerde kant op sturen