Het gaat om een hidden *.sys in (system32/drivers), maar verwijderen met karspersky rootkit tools lukt niet:
Nadat de tool de rootkit heeft verwijderd en reboot, blijft hij terugkomen. Zelfde actie en daarna een nieuw install via usb help ook niets. Ook heb ik modem een factoryreset gegeven en zelfde herhaald.
DDSlog:
Code: Selecteer alles
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 10 Home
Boot Device: \Device\HarddiskVolume2
Install Date: 27-2-2018 11:05:35
System Uptime: 27-2-2018 11:22:07 (1 hours ago)
.
Motherboard: ASRock | | B85 Pro4
Processor: Intel(R) Core(TM) i5-4440 CPU @ 3.10GHz | CPUSocket | 3101/100mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 223 GiB total, 196,452 GiB free.
D: is Removable
E: is CDROM (CDFS)
.
==== Disabled Device Manager Items =============
.
Class GUID:
Description:
Device ID: ACPI\INT33A0\0
Manufacturer:
Name:
PNP Device ID: ACPI\INT33A0\0
Service:
.
==== System Restore Points ===================
.
RP1: 27-2-2018 11:18:33 - Windows Update
RP2: 27-2-2018 11:21:28 - rootkitscan 27feb2018-1121uur hardnekkig terugkomen na reboot
.
==== Installed Programs ======================
.
AMD Settings
Catalyst Control Center Next Localization BR
Catalyst Control Center Next Localization CHS
Catalyst Control Center Next Localization CHT
Catalyst Control Center Next Localization CS
Catalyst Control Center Next Localization DA
Catalyst Control Center Next Localization DE
Catalyst Control Center Next Localization EL
Catalyst Control Center Next Localization ES
Catalyst Control Center Next Localization FI
Catalyst Control Center Next Localization FR
Catalyst Control Center Next Localization HU
Catalyst Control Center Next Localization IT
Catalyst Control Center Next Localization JA
Catalyst Control Center Next Localization KO
Catalyst Control Center Next Localization NL
Catalyst Control Center Next Localization NO
Catalyst Control Center Next Localization PL
Catalyst Control Center Next Localization RU
Catalyst Control Center Next Localization SV
Catalyst Control Center Next Localization TH
Catalyst Control Center Next Localization TR
GlassWire 2.0 (remove only)
Microsoft OneDrive
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026
Microsoft Visual C++ 2015 x86 Additional Runtime - 14.0.23026
Microsoft Visual C++ 2015 x86 Minimum Runtime - 14.0.23026
Mozilla Firefox 58.0.2 (x64 nl)
Mozilla Maintenance Service
Realtek High Definition Audio Driver
.
==== End Of File ===========================
HELP