srosa infectie

[aga]

Hallo,

mijn pc is geinfecteerd met srosa. Ik ben al even bezig geweest om dingen weg te krijgen, maar aangezien het een rootkit is lukt het me niet. Mijn mcafee is uitgeschakeld en wil niet herstellen, AVG krijgt het niet weg. Spybot wordt geweigerd en ad-aware geeft foutmeldingen. Ik vrees dat dit mijn kunde te boven gaat. Kan iemand me helpen?

Alvast heel erg bedankt voor de moeite!

Ik heb met Hijackthis het volgende log gemaakt:


Logfile of HijackThis v1.99.1
Scan saved at 17:01:02, on 29-3-2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\SiteAdvisor\6253\SAService.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\PROGRA~1\AVG\AVG8\avgam.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\SiteAdvisor\6253\SiteAdv.exe
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
C:\Program Files\eMule\emule.exe
C:\Program Files\McAfee\MSC\mcuimgr.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\PROGRA~1\MICROS~2\Office12\OUTLOOK.EXE
C:\Documents and Settings\Alphons Bakker\Local Settings\Temporary Internet Files\Content.IE5\CMONV3JN\HijackThis[1].exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.reddingsbrigadeoss.nl/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Config\csrss.exe
O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files\Adobe\/Adobe Contribute CS3/contributeieplugin.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll
O2 - BHO: ThreeShips IEHelper - {17FDB9F8-DCC4-4F6A-AE07-B16018A48469} - C:\Program Files\Common Files\Threeships Shared\Dll\ThreeShipsIEHelper.dll
O2 - BHO: (no name) - {259F616C-A300-44F5-B04A-ED001A26C85C} - (no file)
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\PROGRA~1\mcafee\VIRUSS~1\scriptsn.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: De Telefoongids - {790C1F44-C559-434B-BE18-13C042555D8E} - C:\Program Files\De Telefoongids\De Telefoongids Zoekbalk\PhoneShell.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files\Adobe\/Adobe Contribute CS3/contributeieplugin.dll
O4 - HKLM\..\Run: [mcagent_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [SiteAdvisor] "C:\Program Files\SiteAdvisor\6253\SiteAdv.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] "C:\Program Files\Google\Gmail Notifier\gnotify.exe"
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [McENUI] C:\PROGRA~1\McAfee\MHN\McENUI.exe /hide
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe
O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Open with ScanSoft PDF Converter 4.0 - res://C:\Program Files\ScanSoft\PDF Professional 4.0\cnvres_eng.dll /100
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1199346546903
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl-esd.sun.com/update/1.6.0/jinstall-6u3-windows-i586-jc.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game09.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/mcfscan/2,2,0,5251/mcfscan.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe Version Cue CS3 - Unknown owner - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe" -win32service (file missing)
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: perfmons Service (perfmons) - Unknown owner - C:\WINDOWS\system32\perfmonss.exe (file missing)
O23 - Service: Routing Service (Routing) - Unknown owner - C:\WINDOWS\system32\routing.exe (file missing)
O23 - Service: SiSoftware Database Agent Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Professional Business XIIc\Win32\RpcDataSrv.exe
O23 - Service: SiSoftware Sandra Agent Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Professional Business XIIc\RpcSandraSrv.exe
O23 - Service: SiteAdvisor-service (SiteAdvisor Service) - Unknown owner - C:\Program Files\SiteAdvisor\6253\SAService.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

[Steggel]

Ga naar deze pagina: http://www.zonavirus.com/datos/desca...5/elibagla.asp
Helemaal onderaan klik je op de knop "Descargar ELIBAGLA 11.20"
Plaats dit bestand (EliBaglA.exe) op je bureaublad.
Dubbelklik erop om het programma te starten.
Controleer of naast Unidad dit staat: C:\
Onderaan moet je zorgen dat "Eliminar Ficheros Automaticamente" aangevinkt is.
Klik nu op de knop "Explorar" om de tool te laten scannen.

Post de inhoud van het bestandje C:\InfoSat.txt
Vervolgens klik je op de knop "Salir" om het programma af te sluiten.

[aga]

Hoi Steggel, dank voor je hulp.
Dit is het gevraagde bestandje:


Sun Mar 30 10:12:13 2008
EliBagle v11.20 (c)2008 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Acción Directa):
C:\WINDOWS\SYSTEM32\WINTEMS.EXE --> Bagle Acceso Denegado.
C:\WINDOWS\SYSTEM32\BAN_LIST.TXT --> Eliminado Bagle
C:\WINDOWS\SYSTEM32\DRIVERS\SROSA.SYS --> Bagle Acceso Denegado.
C:\WINDOWS\SYSTEM32\DRIVERS\HLDRRR.EXE --> Bagle Acceso Denegado.
Reinicie para Completar la Limpieza.

Sun Mar 30 10:13:07 2008
EliBagle v11.20 (c)2008 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

Nº Total de Directorios: 14101
Nº Total de Ficheros: 165569
Nº de Ficheros Analizados: 13514
Nº de Ficheros Infectados: 0
Nº de Ficheros Limpiados: 0

[Steggel]

Herstart de computer, dan start het programma opnieuw en wordt een nieuw log gemaakt.

[aga]

Dit zou het moeten zijn. Het progje wilde ook de d gaan scannen. Heb ik niet laten doen. Is dat ok?


Sun Mar 30 10:12:13 2008
EliBagle v11.20 (c)2008 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Acción Directa):
C:\WINDOWS\SYSTEM32\WINTEMS.EXE --> Bagle Acceso Denegado.
C:\WINDOWS\SYSTEM32\BAN_LIST.TXT --> Eliminado Bagle
C:\WINDOWS\SYSTEM32\DRIVERS\SROSA.SYS --> Bagle Acceso Denegado.
C:\WINDOWS\SYSTEM32\DRIVERS\HLDRRR.EXE --> Bagle Acceso Denegado.
Reinicie para Completar la Limpieza.

Sun Mar 30 10:13:07 2008
EliBagle v11.20 (c)2008 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

Nº Total de Directorios: 14101
Nº Total de Ficheros: 165569
Nº de Ficheros Analizados: 13514
Nº de Ficheros Infectados: 0
Nº de Ficheros Limpiados: 0

Sun Mar 30 12:09:15 2008
EliBagle v11.20 (c)2008 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Acción Directa):
C:\WINDOWS\SYSTEM32\WINTEMS.EXE --> Bagle Acceso Denegado.
C:\WINDOWS\SYSTEM32\DRIVERS\SROSA.SYS --> Bagle Acceso Denegado.
C:\WINDOWS\SYSTEM32\DRIVERS\HLDRRR.EXE --> Bagle Acceso Denegado.
Reinicie para Completar la Limpieza.

Sun Mar 30 12:09:20 2008
EliBagle v11.20 (c)2008 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

Nº Total de Directorios: 14102
Nº Total de Ficheros: 165622
Nº de Ficheros Analizados: 13514
Nº de Ficheros Infectados: 0
Nº de Ficheros Limpiados: 0

[Steggel]

Ik ben nog niet overtuigt of het goed is gelukt.

Download Combofix.exe naar je bureaublad.
LET OP bij het opslaan, hernoem het als Combo-Fix.exe om op je Bureaublad op te slaan.

Dubbelklik dan op Combo-Fix.exe, accepteer de waarschuwing, de computer wordt gescant.
Post het log dat na enkele minuten wordt gemaakt.

[aga]

De pc werd opneiuw opgestart, ook het programma elibagla wilde opstarten, ik heb dit niet geaccepteerd.
Het volgende log rolde er uit:

ComboFix 08-03-30.1 - Alphons Bakker 2008-03-30 12:51:17.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1043.18.2239 [GMT 2:00]
Gestart vanuit: C:\Documents and Settings\Alphons Bakker\Bureaublad\Combo-Fix.exe
* Nieuw herstelpunt werd aangemaakt

WAARSCHUWING - DE RECOVERY CONSOLE IS NIET OP DIT SYSTEEM GEINSTALLEERD !!
.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\2.exe
C:\WINDOWS\system32\drivers\down
C:\WINDOWS\system32\drivers\down\109421.exe
C:\WINDOWS\system32\drivers\down\110046.exe
C:\WINDOWS\system32\drivers\down\112437.exe
C:\WINDOWS\system32\drivers\down\115125.exe
C:\WINDOWS\system32\drivers\down\11562890.exe
C:\WINDOWS\system32\drivers\down\11564234.exe
C:\WINDOWS\system32\drivers\down\11565015.exe
C:\WINDOWS\system32\drivers\down\11566250.exe
C:\WINDOWS\system32\drivers\down\11573390.exe
C:\WINDOWS\system32\drivers\down\11592218.exe
C:\WINDOWS\system32\drivers\down\11598812.exe
C:\WINDOWS\system32\drivers\down\11611390.exe
C:\WINDOWS\system32\drivers\down\11613765.exe
C:\WINDOWS\system32\drivers\down\11620171.exe
C:\WINDOWS\system32\drivers\down\11623750.exe
C:\WINDOWS\system32\drivers\down\11627265.exe
C:\WINDOWS\system32\drivers\down\11628218.exe
C:\WINDOWS\system32\drivers\down\11629781.exe
C:\WINDOWS\system32\drivers\down\123140.exe
C:\WINDOWS\system32\drivers\down\143046.exe
C:\WINDOWS\system32\drivers\down\14705125.exe
C:\WINDOWS\system32\drivers\down\14705406.exe
C:\WINDOWS\system32\drivers\down\14707609.exe
C:\WINDOWS\system32\drivers\down\14707734.exe
C:\WINDOWS\system32\drivers\down\14711875.exe
C:\WINDOWS\system32\drivers\down\14713531.exe
C:\WINDOWS\system32\drivers\down\14717421.exe
C:\WINDOWS\system32\drivers\down\14725390.exe
C:\WINDOWS\system32\drivers\down\14726468.exe
C:\WINDOWS\system32\drivers\down\14727562.exe
C:\WINDOWS\system32\drivers\down\14731312.exe
C:\WINDOWS\system32\drivers\down\14735421.exe
C:\WINDOWS\system32\drivers\down\14740734.exe
C:\WINDOWS\system32\drivers\down\14742203.exe
C:\WINDOWS\system32\drivers\down\14744125.exe
C:\WINDOWS\system32\drivers\down\14748078.exe
C:\WINDOWS\system32\drivers\down\14751343.exe
C:\WINDOWS\system32\drivers\down\14751578.exe
C:\WINDOWS\system32\drivers\down\14752781.exe
C:\WINDOWS\system32\drivers\down\14755218.exe
C:\WINDOWS\system32\drivers\down\14759250.exe
C:\WINDOWS\system32\drivers\down\14759562.exe
C:\WINDOWS\system32\drivers\down\14761609.exe
C:\WINDOWS\system32\drivers\down\14763171.exe
C:\WINDOWS\system32\drivers\down\14763390.exe
C:\WINDOWS\system32\drivers\down\14765750.exe
C:\WINDOWS\system32\drivers\down\14769937.exe
C:\WINDOWS\system32\drivers\down\14771906.exe
C:\WINDOWS\system32\drivers\down\14773218.exe
C:\WINDOWS\system32\drivers\down\14774250.exe
C:\WINDOWS\system32\drivers\down\14775312.exe
C:\WINDOWS\system32\drivers\down\14775515.exe
C:\WINDOWS\system32\drivers\down\14777593.exe
C:\WINDOWS\system32\drivers\down\14789343.exe
C:\WINDOWS\system32\drivers\down\14803515.exe
C:\WINDOWS\system32\drivers\down\14806921.exe
C:\WINDOWS\system32\drivers\down\14808468.exe
C:\WINDOWS\system32\drivers\down\14811171.exe
C:\WINDOWS\system32\drivers\down\14811906.exe
C:\WINDOWS\system32\drivers\down\14815234.exe
C:\WINDOWS\system32\drivers\down\14816781.exe
C:\WINDOWS\system32\drivers\down\14818484.exe
C:\WINDOWS\system32\drivers\down\14820546.exe
C:\WINDOWS\system32\drivers\down\14826812.exe
C:\WINDOWS\system32\drivers\down\14830468.exe
C:\WINDOWS\system32\drivers\down\14830859.exe
C:\WINDOWS\system32\drivers\down\14831062.exe
C:\WINDOWS\system32\drivers\down\14832562.exe
C:\WINDOWS\system32\drivers\down\14863406.exe
C:\WINDOWS\system32\drivers\down\14866937.exe
C:\WINDOWS\system32\drivers\down\149671.exe
C:\WINDOWS\system32\drivers\down\15024625.exe
C:\WINDOWS\system32\drivers\down\15024953.exe
C:\WINDOWS\system32\drivers\down\15068359.exe
C:\WINDOWS\system32\drivers\down\15068500.exe
C:\WINDOWS\system32\drivers\down\15069562.exe
C:\WINDOWS\system32\drivers\down\15075265.exe
C:\WINDOWS\system32\drivers\down\15095796.exe
C:\WINDOWS\system32\drivers\down\15102656.exe
C:\WINDOWS\system32\drivers\down\15104312.exe
C:\WINDOWS\system32\drivers\down\15106703.exe
C:\WINDOWS\system32\drivers\down\151343.exe
C:\WINDOWS\system32\drivers\down\15158984.exe
C:\WINDOWS\system32\drivers\down\15162328.exe
C:\WINDOWS\system32\drivers\down\15203109.exe
C:\WINDOWS\system32\drivers\down\15206265.exe
C:\WINDOWS\system32\drivers\down\15210734.exe
C:\WINDOWS\system32\drivers\down\15242187.exe
C:\WINDOWS\system32\drivers\down\15245593.exe
C:\WINDOWS\system32\drivers\down\162906.exe
C:\WINDOWS\system32\drivers\down\168281.exe
C:\WINDOWS\system32\drivers\down\168734.exe
C:\WINDOWS\system32\drivers\down\170484.exe
C:\WINDOWS\system32\drivers\down\172468.exe
C:\WINDOWS\system32\drivers\down\175937.exe
C:\WINDOWS\system32\drivers\down\177000.exe
C:\WINDOWS\system32\drivers\down\177421.exe
C:\WINDOWS\system32\drivers\down\184421.exe
C:\WINDOWS\system32\drivers\down\187265.exe
C:\WINDOWS\system32\drivers\down\187796.exe
C:\WINDOWS\system32\drivers\down\188500.exe
C:\WINDOWS\system32\drivers\down\190031.exe
C:\WINDOWS\system32\drivers\down\194140.exe
C:\WINDOWS\system32\drivers\down\199281.exe
C:\WINDOWS\system32\drivers\down\199953.exe
C:\WINDOWS\system32\drivers\down\200234.exe
C:\WINDOWS\system32\drivers\down\201750.exe
C:\WINDOWS\system32\drivers\down\207015.exe
C:\WINDOWS\system32\drivers\down\207984.exe
C:\WINDOWS\system32\drivers\down\208968.exe
C:\WINDOWS\system32\drivers\down\212718.exe
C:\WINDOWS\system32\drivers\down\213031.exe
C:\WINDOWS\system32\drivers\down\219984.exe
C:\WINDOWS\system32\drivers\down\220625.exe
C:\WINDOWS\system32\drivers\down\224078.exe
C:\WINDOWS\system32\drivers\down\224640.exe
C:\WINDOWS\system32\drivers\down\227843.exe
C:\WINDOWS\system32\drivers\down\229984.exe
C:\WINDOWS\system32\drivers\down\235156.exe
C:\WINDOWS\system32\drivers\down\236890.exe
C:\WINDOWS\system32\drivers\down\238890.exe
C:\WINDOWS\system32\drivers\down\249859.exe
C:\WINDOWS\system32\drivers\down\254390.exe
C:\WINDOWS\system32\drivers\down\257296.exe
C:\WINDOWS\system32\drivers\down\258515.exe
C:\WINDOWS\system32\drivers\down\259906.exe
C:\WINDOWS\system32\drivers\down\259953.exe
C:\WINDOWS\system32\drivers\down\260812.exe
C:\WINDOWS\system32\drivers\down\262000.exe
C:\WINDOWS\system32\drivers\down\266968.exe
C:\WINDOWS\system32\drivers\down\272296.exe
C:\WINDOWS\system32\drivers\down\274609.exe
C:\WINDOWS\system32\drivers\down\276531.exe
C:\WINDOWS\system32\drivers\down\279078.exe
C:\WINDOWS\system32\drivers\down\283406.exe
C:\WINDOWS\system32\drivers\down\29213359.exe
C:\WINDOWS\system32\drivers\down\29213640.exe
C:\WINDOWS\system32\drivers\down\29214656.exe
C:\WINDOWS\system32\drivers\down\29214781.exe
C:\WINDOWS\system32\drivers\down\29216031.exe
C:\WINDOWS\system32\drivers\down\29221484.exe
C:\WINDOWS\system32\drivers\down\29238781.exe
C:\WINDOWS\system32\drivers\down\29241187.exe
C:\WINDOWS\system32\drivers\down\29242625.exe
C:\WINDOWS\system32\drivers\down\29244296.exe
C:\WINDOWS\system32\drivers\down\29274031.exe
C:\WINDOWS\system32\drivers\down\29274312.exe
C:\WINDOWS\system32\drivers\down\29277359.exe
C:\WINDOWS\system32\drivers\down\29278390.exe
C:\WINDOWS\system32\drivers\down\29282593.exe
C:\WINDOWS\system32\drivers\down\29298328.exe
C:\WINDOWS\system32\drivers\down\29300812.exe
C:\WINDOWS\system32\drivers\down\29304250.exe
C:\WINDOWS\system32\drivers\down\29306078.exe
C:\WINDOWS\system32\drivers\down\29308078.exe
C:\WINDOWS\system32\drivers\down\29312640.exe
C:\WINDOWS\system32\drivers\down\29316875.exe
C:\WINDOWS\system32\drivers\down\29317234.exe
C:\WINDOWS\system32\drivers\down\29317531.exe
C:\WINDOWS\system32\drivers\down\29317593.exe
C:\WINDOWS\system32\drivers\down\29319078.exe
C:\WINDOWS\system32\drivers\down\29348750.exe
C:\WINDOWS\system32\drivers\down\29349078.exe
C:\WINDOWS\system32\drivers\down\29349265.exe
C:\WINDOWS\system32\drivers\down\29349796.exe
C:\WINDOWS\system32\drivers\down\29350578.exe
C:\WINDOWS\system32\drivers\down\29353234.exe
C:\WINDOWS\system32\drivers\down\293546.exe
C:\WINDOWS\system32\drivers\down\29381515.exe
C:\WINDOWS\system32\drivers\down\29384906.exe
C:\WINDOWS\system32\drivers\down\29652296.exe
C:\WINDOWS\system32\drivers\down\29652609.exe
C:\WINDOWS\system32\drivers\down\29656968.exe
C:\WINDOWS\system32\drivers\down\29657093.exe
C:\WINDOWS\system32\drivers\down\29658093.exe
C:\WINDOWS\system32\drivers\down\29662171.exe
C:\WINDOWS\system32\drivers\down\29678406.exe
C:\WINDOWS\system32\drivers\down\29685484.exe
C:\WINDOWS\system32\drivers\down\29687390.exe
C:\WINDOWS\system32\drivers\down\29689234.exe
C:\WINDOWS\system32\drivers\down\29698921.exe
C:\WINDOWS\system32\drivers\down\29704312.exe
C:\WINDOWS\system32\drivers\down\29704703.exe
C:\WINDOWS\system32\drivers\down\29704890.exe
C:\WINDOWS\system32\drivers\down\29706218.exe
C:\WINDOWS\system32\drivers\down\29737984.exe
C:\WINDOWS\system32\drivers\down\29741406.exe
C:\WINDOWS\system32\drivers\down\297515.exe
C:\WINDOWS\system32\drivers\down\308890.exe
C:\WINDOWS\system32\drivers\down\311906.exe
C:\WINDOWS\system32\drivers\down\314484.exe
C:\WINDOWS\system32\drivers\down\314796.exe
C:\WINDOWS\system32\drivers\down\314953.exe
C:\WINDOWS\system32\drivers\down\317343.exe
C:\WINDOWS\system32\drivers\down\318703.exe
C:\WINDOWS\system32\drivers\down\348421.exe
C:\WINDOWS\system32\drivers\down\352281.exe
C:\WINDOWS\system32\drivers\down\406750.exe
C:\WINDOWS\system32\drivers\down\407140.exe
C:\WINDOWS\system32\drivers\down\408453.exe
C:\WINDOWS\system32\drivers\down\409343.exe
C:\WINDOWS\system32\drivers\down\410515.exe
C:\WINDOWS\system32\drivers\down\415750.exe
C:\WINDOWS\system32\drivers\down\43760546.exe
C:\WINDOWS\system32\drivers\down\43761031.exe
C:\WINDOWS\system32\drivers\down\43763031.exe
C:\WINDOWS\system32\drivers\down\43764687.exe
C:\WINDOWS\system32\drivers\down\43768078.exe
C:\WINDOWS\system32\drivers\down\43791921.exe
C:\WINDOWS\system32\drivers\down\43792390.exe
C:\WINDOWS\system32\drivers\down\43794140.exe
C:\WINDOWS\system32\drivers\down\43806203.exe
C:\WINDOWS\system32\drivers\down\43814765.exe
C:\WINDOWS\system32\drivers\down\43816484.exe
C:\WINDOWS\system32\drivers\down\43817187.exe
C:\WINDOWS\system32\drivers\down\43821421.exe
C:\WINDOWS\system32\drivers\down\43822140.exe
C:\WINDOWS\system32\drivers\down\43824906.exe
C:\WINDOWS\system32\drivers\down\43829625.exe
C:\WINDOWS\system32\drivers\down\43834421.exe
C:\WINDOWS\system32\drivers\down\43836265.exe
C:\WINDOWS\system32\drivers\down\43839593.exe
C:\WINDOWS\system32\drivers\down\43841015.exe
C:\WINDOWS\system32\drivers\down\43842828.exe
C:\WINDOWS\system32\drivers\down\43843953.exe
C:\WINDOWS\system32\drivers\down\43845468.exe
C:\WINDOWS\system32\drivers\down\43847187.exe
C:\WINDOWS\system32\drivers\down\43859234.exe
C:\WINDOWS\system32\drivers\down\43862625.exe
C:\WINDOWS\system32\drivers\down\43863921.exe
C:\WINDOWS\system32\drivers\down\43864203.exe
C:\WINDOWS\system32\drivers\down\43865781.exe
C:\WINDOWS\system32\drivers\down\43894812.exe
C:\WINDOWS\system32\drivers\down\43897906.exe
C:\WINDOWS\system32\drivers\down\43898578.exe
C:\WINDOWS\system32\drivers\down\43901718.exe
C:\WINDOWS\system32\drivers\down\44148187.exe
C:\WINDOWS\system32\drivers\down\44148656.exe
C:\WINDOWS\system32\drivers\down\44151500.exe
C:\WINDOWS\system32\drivers\down\44152125.exe
C:\WINDOWS\system32\drivers\down\44154671.exe
C:\WINDOWS\system32\drivers\down\44158750.exe
C:\WINDOWS\system32\drivers\down\44177906.exe
C:\WINDOWS\system32\drivers\down\44181125.exe
C:\WINDOWS\system32\drivers\down\44182671.exe
C:\WINDOWS\system32\drivers\down\44184343.exe
C:\WINDOWS\system32\drivers\down\44192250.exe
C:\WINDOWS\system32\drivers\down\44195640.exe
C:\WINDOWS\system32\drivers\down\44196328.exe
C:\WINDOWS\system32\drivers\down\44199609.exe
C:\WINDOWS\system32\drivers\down\44201296.exe
C:\WINDOWS\system32\drivers\down\44232109.exe
C:\WINDOWS\system32\drivers\down\44235906.exe
C:\WINDOWS\system32\drivers\down\452843.exe
C:\WINDOWS\system32\drivers\down\482875.exe
C:\WINDOWS\system32\drivers\down\484484.exe
C:\WINDOWS\system32\drivers\down\486218.exe
C:\WINDOWS\system32\drivers\down\493171.exe
C:\WINDOWS\system32\drivers\down\496125.exe
C:\WINDOWS\system32\drivers\down\496625.exe
C:\WINDOWS\system32\drivers\down\499968.exe
C:\WINDOWS\system32\drivers\down\501609.exe
C:\WINDOWS\system32\drivers\down\508156.exe
C:\WINDOWS\system32\drivers\down\508656.exe
C:\WINDOWS\system32\drivers\down\510390.exe
C:\WINDOWS\system32\drivers\down\511171.exe
C:\WINDOWS\system32\drivers\down\512171.exe
C:\WINDOWS\system32\drivers\down\528875.exe
C:\WINDOWS\system32\drivers\down\532265.exe
C:\WINDOWS\system32\drivers\down\536000.exe
C:\WINDOWS\system32\drivers\down\549859.exe
C:\WINDOWS\system32\drivers\down\557171.exe
C:\WINDOWS\system32\drivers\down\558890.exe
C:\WINDOWS\system32\drivers\down\561031.exe
C:\WINDOWS\system32\drivers\down\569937.exe
C:\WINDOWS\system32\drivers\down\573312.exe
C:\WINDOWS\system32\drivers\down\576328.exe
C:\WINDOWS\system32\drivers\down\576734.exe
C:\WINDOWS\system32\drivers\down\578343.exe
C:\WINDOWS\system32\drivers\down\58327015.exe
C:\WINDOWS\system32\drivers\down\58327296.exe
C:\WINDOWS\system32\drivers\down\58334375.exe
C:\WINDOWS\system32\drivers\down\58335296.exe
C:\WINDOWS\system32\drivers\down\58338703.exe
C:\WINDOWS\system32\drivers\down\58356734.exe
C:\WINDOWS\system32\drivers\down\58361953.exe
C:\WINDOWS\system32\drivers\down\58363562.exe
C:\WINDOWS\system32\drivers\down\58366109.exe
C:\WINDOWS\system32\drivers\down\58368328.exe
C:\WINDOWS\system32\drivers\down\58373953.exe
C:\WINDOWS\system32\drivers\down\58377453.exe
C:\WINDOWS\system32\drivers\down\58378390.exe
C:\WINDOWS\system32\drivers\down\58378578.exe
C:\WINDOWS\system32\drivers\down\58380156.exe
C:\WINDOWS\system32\drivers\down\58411906.exe
C:\WINDOWS\system32\drivers\down\58415406.exe
C:\WINDOWS\system32\drivers\down\613359.exe
C:\WINDOWS\system32\drivers\down\617140.exe
C:\WINDOWS\system32\drivers\hldrrr.exe
C:\WINDOWS\system32\drivers\srosa.sys
C:\WINDOWS\system32\drmgs.sys
C:\WINDOWS\system32\Indt2.sys
C:\WINDOWS\system32\mdelk.exe
C:\WINDOWS\system32\tmp0_120379198139.bk
C:\WINDOWS\system32\tmp0_157038461527.bk
C:\WINDOWS\system32\tmp0_19429422331.bk
C:\WINDOWS\system32\tmp0_260857626158.bk
C:\WINDOWS\system32\tmp0_283314332102.bk
C:\WINDOWS\system32\tmp0_29272325801.bk
C:\WINDOWS\system32\tmp0_354869404200.bk
C:\WINDOWS\system32\tmp0_475509884334.bk
C:\WINDOWS\system32\tmp0_516061691969.bk
C:\WINDOWS\system32\tmp0_618716174127.bk
C:\WINDOWS\system32\tmp0_675110366411.bk
C:\WINDOWS\system32\tmp0_722688179405.bk
C:\WINDOWS\system32\tmp0_731717354630.bk
C:\WINDOWS\system32\tmp0_827533129101.bk
C:\WINDOWS\system32\wintems.exe

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_PERFMONS
-------\Legacy_ROUTING
-------\Legacy_SROSA
-------\Service_perfmons
-------\Service_Routing
-------\Service_srosa


(((((((((((((((((((( Bestanden Gemaakt van 2008-02-28 to 2008-03-30 ))))))))))))))))))))))))))))))
.

2008-03-30 10:12 . 2008-03-30 10:12 <DIR> d-------- C:\Muestras
2008-03-28 21:03 . 2008-03-28 21:03 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-03-28 21:03 . 2008-03-28 21:03 1,409 --a------ C:\WINDOWS\QTFont.for
2008-03-24 17:08 . 2008-03-24 17:08 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Zylom
2008-03-21 17:03 . 2008-03-22 18:07 512 --a------ C:\WINDOWS\Elsevier.ini
2008-03-21 17:00 . 2008-03-21 17:01 <DIR> d-------- C:\Elsevier
2008-03-21 16:56 . 2008-03-21 16:56 <DIR> d-------- C:\Program Files\Belastingdienst
2008-03-16 17:28 . 2008-03-16 17:28 8,192 --ahs---- C:\WINDOWS\Thumbs.db
2008-03-16 16:00 . 2008-03-29 14:08 <DIR> d-------- C:\WINDOWS\system32\drivers\Avg
2008-03-16 16:00 . 2008-03-16 16:00 <DIR> d-------- C:\Program Files\AVG
2008-03-16 16:00 . 2008-03-16 16:00 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\avg8
2008-03-16 16:00 . 2008-03-16 16:00 96,520 --a------ C:\WINDOWS\system32\drivers\avgldx86.sys
2008-03-16 16:00 . 2008-03-16 16:00 74,760 --a------ C:\WINDOWS\system32\drivers\avgtdix.sys
2008-03-16 16:00 . 2008-03-16 16:00 12,424 --a------ C:\WINDOWS\system32\drivers\avgrkx86.sys
2008-03-16 16:00 . 2008-03-16 16:00 10,520 --a------ C:\WINDOWS\system32\avgrsstx.dll
2008-03-16 15:20 . 2008-03-16 15:20 <DIR> d-------- C:\Program Files\Lavasoft
2008-03-16 15:20 . 2008-03-16 15:21 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-03-14 15:28 . 2008-03-14 15:28 <DIR> d-------- C:\WINDOWS\McAfee.com
2008-03-13 20:28 . 2007-06-05 11:56 44,928 --a------ C:\WINDOWS\system32\drivers\SDTHOOK.SYS
2008-03-13 20:21 . 2007-06-08 10:44 8,576 --a------ C:\WINDOWS\system32\drivers\lyeqmuwvuunn.sys
2008-03-13 20:18 . 2007-06-08 10:44 8,576 --a------ C:\WINDOWS\system32\drivers\RkPavProc.sys
2008-03-13 20:01 . 2008-03-13 20:01 2,550 --a------ C:\WINDOWS\system32\Uninstall.ico
2008-03-13 20:01 . 2008-03-13 20:01 1,406 --a------ C:\WINDOWS\system32\Help.ico
2008-03-13 00:01 . 2008-03-13 00:01 68 --a------ C:\WINDOWS\system32\tmp3_186093776420.bk
2008-03-13 00:01 . 2008-03-13 00:01 68 --a------ C:\WINDOWS\system32\tmp1_808821263681.bk
2008-03-12 12:32 . 2008-03-12 12:32 68 --a------ C:\WINDOWS\system32\tmp4_68939127004.bk
2008-03-12 12:32 . 2008-03-12 12:32 68 --a------ C:\WINDOWS\system32\tmp3_270261740214.bk
2008-03-12 12:32 . 2008-03-12 12:32 68 --a------ C:\WINDOWS\system32\tmp1_701553843304.bk
2008-03-12 01:03 . 2008-03-12 01:03 68 --a------ C:\WINDOWS\system32\tmp4_703552191735.bk
2008-03-12 01:03 . 2008-03-12 01:03 68 --a------ C:\WINDOWS\system32\tmp3_148130809722.bk
2008-03-12 01:03 . 2008-03-12 01:03 68 --a------ C:\WINDOWS\system32\tmp1_332446455372.bk
2008-03-11 19:41 . 2008-03-11 19:41 <DIR> d-------- C:\Program Files\Astraware
2008-03-11 12:31 . 2008-03-11 12:31 68 --a------ C:\WINDOWS\system32\tmp4_495917663554.bk
2008-03-11 12:31 . 2008-03-11 12:31 68 --a------ C:\WINDOWS\system32\tmp3_42623525412.bk
2008-03-11 12:31 . 2008-03-11 12:31 68 --a------ C:\WINDOWS\system32\tmp1_705587898669.bk
2008-03-11 01:00 . 2008-03-11 01:00 68 --a------ C:\WINDOWS\system32\tmp4_140348851778.bk
2008-03-11 01:00 . 2008-03-11 01:00 68 --a------ C:\WINDOWS\system32\tmp3_123046232474.bk
2008-03-11 01:00 . 2008-03-11 01:00 68 --a------ C:\WINDOWS\system32\tmp1_172621427546.bk
2008-03-10 23:28 . 2008-03-10 23:28 <DIR> d-------- C:\Program Files\SuDokuV2
2008-03-10 22:27 . 2008-03-10 23:04 <DIR> d-------- C:\Program Files\HHLHLearn4Life
2008-03-10 22:27 . 2008-03-10 22:27 <DIR> d-------- C:\Program Files\Common Files\Threeships Shared
2008-03-10 22:27 . 2004-04-29 12:22 106,582 --------- C:\WINDOWS\system32\NATWorks.cpl
2008-03-10 12:31 . 2008-03-10 12:31 68 --a------ C:\WINDOWS\system32\tmp4_7220629843.bk
2008-03-10 12:31 . 2008-03-10 12:31 68 --a------ C:\WINDOWS\system32\tmp3_8212154420.bk
2008-03-10 12:31 . 2008-03-10 12:31 68 --a------ C:\WINDOWS\system32\tmp1_230829362742.bk
2008-03-10 07:52 . 2008-03-10 21:48 <DIR> d-------- C:\Program Files\SuDoku
2008-03-10 07:52 . 2003-07-12 19:35 231,936 --a------ C:\WINDOWS\epsuninst.exe
2008-03-10 01:01 . 2008-03-10 01:01 68 --a------ C:\WINDOWS\system32\tmp4_118400256361.bk
2008-03-10 01:01 . 2008-03-10 01:01 68 --a------ C:\WINDOWS\system32\tmp3_447036749006.bk
2008-03-10 01:01 . 2008-03-10 01:01 68 --a------ C:\WINDOWS\system32\tmp1_4192063026.bk
2008-03-09 12:33 . 2008-03-09 12:33 68 --a------ C:\WINDOWS\system32\tmp4_376957164815.bk
2008-03-09 12:32 . 2008-03-09 12:32 68 --a------ C:\WINDOWS\system32\tmp3_52765515303.bk
2008-03-09 12:32 . 2008-03-09 12:32 68 --a------ C:\WINDOWS\system32\tmp1_85367741773.bk
2008-03-09 01:00 . 2008-03-09 01:00 68 --a------ C:\WINDOWS\system32\tmp4_794191317259.bk
2008-03-09 01:00 . 2008-03-09 01:00 68 --a------ C:\WINDOWS\system32\tmp3_548653221714.bk
2008-03-09 01:00 . 2008-03-09 01:00 68 --a------ C:\WINDOWS\system32\tmp1_431881460228.bk
2008-03-08 12:32 . 2008-03-08 12:32 68 --a------ C:\WINDOWS\system32\tmp4_25447866425.bk
2008-03-08 12:32 . 2008-03-08 12:32 68 --a------ C:\WINDOWS\system32\tmp3_3321636229.bk
2008-03-08 12:32 . 2008-03-08 12:32 68 --a------ C:\WINDOWS\system32\tmp1_57280314321.bk
2008-03-08 01:01 . 2008-03-08 01:01 68 --a------ C:\WINDOWS\system32\tmp4_41636815706.bk
2008-03-08 01:01 . 2008-03-08 01:01 68 --a------ C:\WINDOWS\system32\tmp3_6547879878.bk
2008-03-08 01:00 . 2008-03-08 01:00 68 --a------ C:\WINDOWS\system32\tmp1_637420732845.bk
2008-03-07 12:31 . 2008-03-07 12:31 68 --a------ C:\WINDOWS\system32\tmp4_372879853191.bk
2008-03-07 12:31 . 2008-03-07 12:31 68 --a------ C:\WINDOWS\system32\tmp3_29965609826.bk
2008-03-07 12:31 . 2008-03-07 12:31 68 --a------ C:\WINDOWS\system32\tmp2_862935234772.bk
2008-03-07 12:31 . 2008-03-07 12:31 68 --a------ C:\WINDOWS\system32\tmp1_349366348417.bk
2008-03-07 01:01 . 2008-03-07 01:01 68 --a------ C:\WINDOWS\system32\tmp4_494160750959.bk
2008-03-07 01:01 . 2008-03-07 01:01 68 --a------ C:\WINDOWS\system32\tmp3_376098393333.bk
2008-03-07 01:01 . 2008-03-07 01:01 68 --a------ C:\WINDOWS\system32\tmp2_505405176001.bk
2008-03-07 01:01 . 2008-03-07 01:01 68 --a------ C:\WINDOWS\system32\tmp1_322261325521.bk
2008-03-07 00:06 . 2008-03-07 00:06 <DIR> d-------- C:\Program Files\NeroInstall.bak
2008-03-06 18:15 . 2008-03-06 18:15 68 --a------ C:\WINDOWS\system32\tmp4_3520388817.bk
2008-03-06 18:15 . 2008-03-06 18:15 68 --a------ C:\WINDOWS\system32\tmp3_16547131119.bk
2008-03-06 18:15 . 2008-03-06 18:15 68 --a------ C:\WINDOWS\system32\tmp2_854171556865.bk
2008-03-06 18:15 . 2008-03-06 18:15 68 --a------ C:\WINDOWS\system32\tmp1_227224543801.bk
2008-03-06 18:13 . 2008-03-06 18:13 124,688 --a------ C:\WINDOWS\system32\MSWINSCK.OCX
2008-02-25 19:20 . 2008-03-02 23:44 <DIR> d-------- C:\xtra
2008-02-22 01:02 . 2008-03-13 21:28 <DIR> d-------- C:\Documents and Settings\Alphons Bakker\Application Data\Lavasoft
2008-02-22 00:59 . 2008-03-14 16:09 <DIR> d-a------ C:\Documents and Settings\All Users\Application Data\TEMP
2008-02-22 00:58 . 2008-02-22 00:58 164 --a------ C:\install.dat
2008-02-22 00:57 . 2008-03-16 16:14 <DIR> d-------- C:\Program Files\Spybot - Search & Destroy
2008-02-22 00:57 . 2008-03-16 16:14 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-02-22 00:56 . 2005-08-25 19:19 115,920 --a------ C:\WINDOWS\system32\MSINET.OCX
2008-02-22 00:55 . 2008-02-22 00:55 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Prevx
2008-02-01 00:13 . 2008-02-01 00:13 90,112 --a------ C:\WINDOWS\system32\QuickTimeVR.qtx
2008-02-01 00:13 . 2008-02-01 00:13 57,344 --a------ C:\WINDOWS\system32\QuickTime.qts

.
((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-30 07:52 --------- d-----w C:\Documents and Settings\All Users\Application Data\Google Updater
2008-03-29 20:13 --------- d-----w C:\Program Files\eMule
2008-03-28 19:57 --------- d-----w C:\Documents and Settings\Alphons Bakker\Application Data\Vso
2008-03-28 12:54 --------- d-----w C:\Program Files\WMR11
2008-03-24 08:22 --------- d-----w C:\Documents and Settings\Alphons Bakker\Application Data\Azureus
2008-03-24 08:06 --------- d-----w C:\Program Files\Azureus
2008-03-21 19:54 --------- d-----w C:\Documents and Settings\Alphons Bakker\Application Data\SiteAdvisor
2008-03-16 16:13 --------- d-----w C:\Program Files\NewsLeecher
2008-03-16 13:20 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2008-03-14 12:37 --------- d-----w C:\Program Files\McAfee
2008-03-13 21:41 --------- d-----w C:\Documents and Settings\Alphons Bakker\Application Data\XnView Deluxe
2008-03-13 21:34 --------- d-----w C:\Program Files\TuneUp Utilities 2007
2008-03-13 19:38 --------- d-----w C:\Program Files\SiteAdvisor
2008-03-13 19:30 --------- d-----w C:\Program Files\Hitman Pro
2008-03-12 02:05 --------- d-----w C:\Documents and Settings\All Users\Application Data\Microsoft Help
2008-03-10 20:27 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-03-08 21:09 --------- d-----w C:\Documents and Settings\All Users\Application Data\DVD Shrink
2008-03-06 22:16 --------- d-----w C:\Program Files\Common Files\Nero
2008-03-06 22:15 --------- d-----w C:\Documents and Settings\All Users\Application Data\Nero
2008-02-09 19:05 --------- d-----w C:\Program Files\QuickTime
2008-02-06 18:16 --------- d-----w C:\Documents and Settings\Alphons Bakker\Application Data\Apple Computer
2008-02-06 15:36 --------- d-----w C:\Documents and Settings\Alphons Bakker\Application Data\NewsLeecher
2008-01-31 16:04 --------- d-----w C:\Program Files\activePDF
2008-01-30 22:13 --------- d-----w C:\Documents and Settings\Alphons Bakker\Application Data\ScanSoft
2008-01-30 22:11 --------- d-----w C:\Documents and Settings\All Users\Application Data\ScanSoft
2008-01-30 22:10 --------- d-----w C:\Program Files\ScanSoft
2008-01-30 21:53 --------- d-----w C:\Program Files\Common Files\ScanSoft Shared
2008-01-30 21:45 --------- d-----w C:\Program Files\PowerISO
2008-01-28 02:00 --------- d-----w C:\Program Files\Microsoft CAPICOM 2.1.0.2
2008-01-03 12:18 61,480 ----a-w C:\Documents and Settings\Alphons Bakker\GoToAssistDownloadHelper.exe
2007-12-20 18:03 87,608 ----a-w C:\Documents and Settings\Alphons Bakker\Application Data\ezpinst.exe
2007-12-20 18:03 47,360 ----a-w C:\Documents and Settings\Alphons Bakker\Application Data\pcouffin.sys
2007-12-04 08:59 972,072 ----a-w C:\WINDOWS\UNRecode.exe
.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"H/PC Connection Agent"="C:\Program Files\Microsoft ActiveSync\Wcescomm.exe" [2006-11-13 19:34 1289000]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2006-03-02 14:00 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"mcagent_exe"="C:\Program Files\McAfee.com\Agent\mcagent.exe" [2008-03-30 12:54 582992]
"SiteAdvisor"="C:\Program Files\SiteAdvisor\6253\SiteAdv.exe" [2007-08-24 23:57 36640]
"Acrobat Assistant 8.0"="C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe" [2007-03-29 23:14 624248]
"{0228e555-4f9c-4e35-a3ec-b109a192b4c2}"="C:\Program Files\Google\Gmail Notifier\gnotify.exe" [2005-07-15 23:48 479232]
"SoundMAX"="C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" [2006-05-18 15:26 729088]
"NeroFilterCheck"="C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe" [2007-03-01 15:57 153136]
"McENUI"="C:\PROGRA~1\McAfee\MHN\McENUI.exe" [2007-07-22 21:29 1160480]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2006-03-02 14:00 15360]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2007-02-05 16:39 294400]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=avgrsstx.dll

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" /background

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe Photo Downloader"="C:\Program Files\Adobe\Adobe Photoshop Lightroom 1.1\apdproxy.exe"
"Adobe_ID0EYTHM"=C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
"emMON"=emMON.exe
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
"NBKeyScan"="C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
"PVR Agent"=C:\Program Files\KWorld Multimedia\PVR Plus\TVR\Scheduled.exe
"Sony Ericsson PC Suite"="C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" /startoptions
"Media Codec Update Service"=C:\Program Files\Essentials Codec Pack\update.exe -silent
"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
"McENUI"=C:\PROGRA~1\McAfee\MHN\McENUI.exe /hide
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" -atboottime
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
"PWRISOVM.EXE"="C:\Program Files\PowerISO\PWRISOVM.EXE"
"SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe"
"SSBkgdUpdate"="C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
"PDF4 Registry Controller"="C:\Program Files\ScanSoft\PDF Professional 4.0\\RegistryController.exe"
"ISUSPM Startup"="C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" -startup
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
"ScanSoft OmniPage 16-reminder"="C:\Program Files\ScanSoft\OmniPage16\Ereg\Ereg.exe" -r "C:\Documents and Settings\All Users\Application Data\ScanSoft\OmniPage 16\Ereg\Ereg.ini"
"NeroFilterCheck"="C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe"
"AVG8_TRAY"=C:\PROGRA~1\AVG\AVG8\avgtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\Program Files\Microsoft ActiveSync\rapimgr.exe"= C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"C:\Program Files\Microsoft ActiveSync\wcescomm.exe"= C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"C:\Program Files\Microsoft ActiveSync\WCESMgr.exe"= C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
"C:\\Program Files\\Common Files\\McAfee\\MNA\\McNASvc.exe"=
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"C:\\Program Files\\Common Files\\Adobe\\Adobe Version Cue CS3\\Server\\bin\\VersionCueCS3.exe"=
"C:\\Program Files\\SiSoftware\\SiSoftware Sandra Professional Business XIIc\\Win32\\RpcDataSrv.exe"=
"C:\\Program Files\\SiSoftware\\SiSoftware Sandra Professional Business XIIc\\RpcSandraSrv.exe"=
"C:\\Program Files\\eMule\\emule.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
"3703:TCP"= 3703:TCP:Adobe Version Cue CS3 Server
"3704:TCP"= 3704:TCP:Adobe Version Cue CS3 Server
"50900:TCP"= 50900:TCP:Adobe Version Cue CS3 Server
"50901:TCP"= 50901:TCP:Adobe Version Cue CS3 Server

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)

R0 AvgRkx86;avgrkx86.sys;C:\WINDOWS\system32\Drivers\avgrkx86.sys [2008-03-16 16:00]
R0 iteraid;ITERAID_Service_Install;C:\WINDOWS\system32\drivers\iteraid.sys [2005-03-17 11:00]
R1 AvgLdx86;AVG AVI Loader Driver x86;C:\WINDOWS\system32\Drivers\avgldx86.sys [2008-03-16 16:00]
R2 avg8wd;AVG8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-03-16 16:00]
R2 AvgTdiX;AVG8 Network Redirector;C:\WINDOWS\system32\Drivers\avgtdix.sys [2008-03-16 16:00]
R2 UxTuneUp;TuneUp Thema-uitbreiding;C:\WINDOWS\System32\svchost.exe [2006-03-02 14:00]
R2 webdavfs;WebDAV File System;C:\WINDOWS\system32\drivers\webdavfs.sys [2007-02-27 15:50]
S3 hitmanpro2;Hitman Pro 2 Driver;C:\Program Files\Hitman Pro\hitmanpro2.sys [2006-11-03 13:02]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0cf9d31c-d08d-11dc-8524-0018f36ac27f}]
\Shell\AutoRun\command - K:\ClaroReadInternational.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8011fdb8-b9f4-11dc-8516-0018f36ac27f}]
\Shell\AutoRun\command - K:\ClaroReadInternational.exe

.
Inhoud van de 'Gedeelde Taken' map
"2008-03-28 16:20:57 C:\WINDOWS\Tasks\1-Click Maintenance.job"
- C:\Program Files\TuneUp Utilities 2007\SystemOptimizer.exe
"2008-03-29 17:59:01 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
"2008-02-15 00:16:31 C:\WINDOWS\Tasks\McDefragTask.job"
- c:\PROGRA~1\mcafee\mqc\QcConsol.exe'
"2008-03-01 00:00:17 C:\WINDOWS\Tasks\McQcTask.job"
- c:\PROGRA~1\mcafee\mqc\QcConsol.exe
"2008-03-30 03:08:14 C:\WINDOWS\Tasks\User_Feed_Synchronization-{1532754E-902F-4689-81DE-8B93829C9325}.job"
- C:\WINDOWS\system32\msfeedssync.exe
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-30 12:59:10
Windows 5.1.2600 Service Pack 2 NTFS

scannen van verborgen processen ...

scannen van verborgen autostart items ...

scannen van verborgen bestanden ...

Scan succesvol afgerond
verborgen bestanden: 0

**************************************************************************
.
--------------------- DLLs Geladen Onder Lopende Processen ---------------------

PROCESS: C:\WINDOWS\explorer.exe
-> C:\Program Files\SiteAdvisor\6253\saHook.dll
-> C:\WINDOWS\system32\webdavnp.dll
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\PROGRA~1\AVG\AVG8\avgam.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\SiteAdvisor\6253\SAService.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
C:\Program Files\McAfee\MSC\mcuimgr.exe
.
**************************************************************************
.
Voltooingstijd: 2008-03-30 13:02:36 - machine was rebooted
ComboFix-quarantined-files.txt 2008-03-30 11:02:33
Pre-Run: 67,529,596,928 bytes beschikbaar
Post-Run: 68,630,339,584 bytes beschikbaar
.
2008-03-12 02:06:00 --- E O F ---

[Steggel]

Ziet er goed uit.

Had je toestemming aan Elibagla gegeven dan had dat ook goed geweest, maar de bestanden zijn nu door Combo-Fix verwijderd.

Verwijder ComboFix via Start > Uitvoeren, kopiëer en plak Combo-fix /U
Klik op OK of toets Enter.
Dit verwijdert zowel ComboFix, als je oude systeemherstelpunten (met eventuele restanten van malware), en maakt een nieuw systeemherstelpunt aan.

Enig idee hoe srosa op je computer is gekomen?

[aga]

als ik combo-fix/u kopieer en plak krijg ik de melding dat het programma niet gevonden wordt. kan ik het ook via software weghalen?

En hoe kwam het er op.... Ik heb een bestand gedownload en daar zat een bestandje in dat ik niet vertrouwde, een keygen met erg weinig kb's. Ik gebruikte de toets del en toen enter. Helaas had ik del niet goed geraakt zodat het bestand ging openen. Foutje....

[Steggel]

Heb je wel een spatie tussen Combo-fix /U

[Steggel]

Probeer anders eens : Combofix /U
(dus zonder streepje)

[aga]

dat deed ie wel. Ik ga mijn pc opnieuw opstarten. Ik laat je zo nog even weten of alles naar behoren werkt. Ik wacht gespannen af, maar heb er alle vertrouwen in.

[aga]

Beste Steggel,

het ziet er naar uit dat alles weer naar behoren werkt. Mag ik je heel hartelijk danken!! Ik zal snel de mcafee software opnieuw gaan installeren. Nogmaals dank. Wat doen jullie op dit forum goed werk!

[Steggel]

Download Java Runtime Environment (JRE) 6u5.

• Scroll omlaag naar : "Java Runtime Environment (JRE) 6 Update 5".
• Klik op de "Download" knop aan de rechterkant.
• Vink aan: "Accept License Agreement", en klik op Continue.
• De pagina zal herladen.
• Klik op de Windows Offline Installation, Multi-language link ONDER Windows Platform - Java SE Runtime Environment 6 Update 5 en bewaar het op je Bureaublad.
• Sluit alle programma's die eventueel open zijn - Zeker je web browser!
• Ga dan naar Start > Configuratiescherm > Software en verwijder alle oudere versies van Java uit de Softwarelijst. (met Java Runtime Environment (JRE of J2SE) in de naam.
• Herhaal dit tot alle oudere versies verdwenen zijn.
• Na het verwijderen van alle oudere versies, herstart je pc.
• Dubbelklik vervolgens op jre-6u5-windows-i586-p.exe op je Bureaublad om de nieuwste versie van Java te installeren.

En gebruik in het vervolg geen cracks. Volgende keer heb je een keylogger of spamtool zonder dat je het weet.

Ik zal deze als opgelost markeren.