mapje wininit.ini ?

[zotteke100]

Hallo,

ik heb een mapje staan : C:\WINDOWS\wininit.ini
met inhoud :

[rename]
c:\tempjunk6256.tmp=C:\WINDOWS\system32\buvgupfs.dll_old
nul=c:\tempjunk3033.tmp

c:\tempjunk7668.tmp=C:\WINDOWS\system32\hgGawxwv.dll_old
c:\tempjunk5394.tmp=C:\WINDOWS\system32\buvgupfs.dll_old
c:\tempjunk1635.tmp=C:\WINDOWS\system32\hgGawxwv.dll_old
c:\tempjunk3033.tmp=C:\WINDOWS\system32\rxinnapw.dll_old

Verleden maand had ik een virus (virtumondo) die intussen volledig verwijderd is.(Hoop ik toch)
Mijn vraag is nu of ik het mapje wininit.ini mag verwijderen ofwel de inhoud van het mapje wininit.ini mag verwijderen? Het is voor mij niet zo duidelijk wat wininit.ini doet.
Kan iemand ook even zien of alles van het virus eigenlijk wel verwijderd is?

Dank bij voorbaat,

Suzy


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:21:14, on 24/05/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TRUST\Bluetooth Software\bin\btwdins.exe
C:\Program Files\FireDaemon\FireDaemon.exe
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\FireDaemon\fdnet.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Live\installer\WLSetupSvc.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\TRUST\Bluetooth Software\BTTray.exe
C:\PROGRA~1\INCRED~1\bin\ImApp.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\PROGRA~1\INCRED~1\bin\IncMail.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.zita.be/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://pac.telenet.be:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http://proxy.telenet.be:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {A6984C00-C6EB-11D4-B4A4-080000180323} - C:\PROGRA~1\Rapidown\rapi310.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Download all by Rapidown... - C:\Program Files\Rapidown\rapidownGetAll.htm
O8 - Extra context menu item: Download by Rapidown... - C:\Program Files\Rapidown\rapidownGet.htm
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Verzenden naar &Bluetooth - C:\Program Files\TRUST\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Ashampoo AntiSpyWare 2 Service (AASW2_Service) - Unknown owner - C:\Program Files\Ashampoo\Ashampoo AntiSpyWare 2\AntiSpyWareService.exe
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - D:\Program Files\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\TRUST\Bluetooth Software\bin\btwdins.exe
O23 - Service: FireDaemon Web Server (fdnet) - FireDaemon Technologies Limited - C:\Program Files\FireDaemon\FireDaemon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: License Management Service ESD - element5 - C:\Program Files\Common Files\element5 Shared\Service\Licence Manager ESD.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe

--
End of file - 7879 bytes

[smeenk]

Download: RVAXO.exe

• Sla het bestand op je bureaublad op, dubbelklik het en kies voor "Unzip" om het uit te pakken.
• Start de computer in veilige modus.
• Open nu de map RVAXO op je bureaublad en dubbeklik RunMe.cmd
  Er zal een cmd-schermpje openen, daarin zullen snel enkele regels over niet gevonden bestanden voorbijkomen, dit is normaal.
• Mogelijk start er ook een uninstaller van een rogue scanner op, sluit deze niet af maar volg eventuele aanwijzingen en laat deze gewoon zijn werk doen.
  
• Daarna zal je PC herstarten, laat hem nu weer in normale modus starten. Na de herstart opent het cmd-venster van RVAXO opnieuw.
  Laat deze lopen en wacht tot er een logfile opent: C:\RVAXO-results.log
• Herstart je computer niet vanzelf, of start de tool niet na de reboot, doe dit dan handmatig.
• Post de inhoud van de logfile in je volgende bericht.

Post ook de inhoud van het 2e logje: C:\RVAXO-Vfind.log

[zotteke100]

Zoals je hebt gevraagd Smeenk :

---RVAXO.exe Updated: 2008-05-21---first run---
Uninstallers:

Files found:
C:\WINDOWS\wininit.ini
C:\WINDOWS\system32\clkcnt.txt

Folders Found:

Hosts-file was reset, If you use a custom hosts file please replace it...

--------------RVAXO.exe last run---------------
Not deleted items:

--------------RVAXO.exe finished----------------





======C:\WINDOWS====
----a-w 0 2008-05-24 22:02:10 C:\WINDOWS\0.log
----a-w 5,125 2008-04-23 23:29:01 C:\WINDOWS\BM0b1c2354.txt.bak
----a-w 109,784 2008-04-23 23:36:17 C:\WINDOWS\BM0b1c2354.xml.bak
--s-a-w 2,048 2008-05-24 22:01:59 C:\WINDOWS\bootstat.dat
----a-w 12 2008-05-24 21:56:15 C:\WINDOWS\bthservsdp.dat
----a-w 173 2008-04-23 21:24:43 C:\WINDOWS\cmsetacl.log
----a-w 131,962 2008-05-13 23:46:50 C:\WINDOWS\comsetup.log
----a-w 181,142 2008-05-13 23:46:50 C:\WINDOWS\FaxSetup.log
----a-w 36 2008-04-24 08:16:03 C:\WINDOWS\GRAPPLER.INI
----a-w 108 2008-05-09 16:43:11 C:\WINDOWS\IFOLDER.INI
----a-w 434,900 2008-05-13 23:46:50 C:\WINDOWS\iis6.log
----a-w 2,891 2008-05-08 15:25:49 C:\WINDOWS\imsins.BAK
----a-w 1,917 2008-05-13 23:46:50 C:\WINDOWS\imsins.log
----a-w 16,751 2008-05-13 23:46:50 C:\WINDOWS\MedCtrOC.log
----a-w 5,658 2008-05-22 15:05:55 C:\WINDOWS\ModemLog_Bluetooth Fax Modem.txt
----a-w 5,654 2008-05-22 15:05:55 C:\WINDOWS\ModemLog_Bluetooth Modem.txt
----a-w 12,456 2008-05-23 01:18:29 C:\WINDOWS\ModemLog_Generic 56K HCF Data Fax Modem.txt
----a-w 10,624 2008-05-13 23:46:50 C:\WINDOWS\msgsocm.log
----a-w 98,336 2008-05-13 23:46:46 C:\WINDOWS\msmqinst.log
----a-w 69 2008-05-23 22:00:38 C:\WINDOWS\NeroDigital.ini
----a-w 32,228 2008-05-13 23:46:50 C:\WINDOWS\netfxocm.log
----a-w 2,548,688 2008-05-24 21:59:06 C:\WINDOWS\ntbtlog.txt
----a-w 49,808 2008-05-13 23:46:50 C:\WINDOWS\ntdtcsetup.log
----a-w 168,370 2008-05-13 23:46:50 C:\WINDOWS\ocgen.log
----a-w 11,437 2008-05-13 23:46:50 C:\WINDOWS\ocmsn.log
----a-w 4,205 2008-04-23 21:37:13 C:\WINDOWS\ODBCINST.INI
----a-w 519 2008-05-09 02:36:36 C:\WINDOWS\OEWABLog.txt
----a-w 980,343 2008-05-24 22:03:18 C:\WINDOWS\pfirewall.log
----a-w 4,197,005 2008-05-23 21:45:47 C:\WINDOWS\pfirewall.log.old
----a-w 147 2008-04-23 21:08:45 C:\WINDOWS\pnplog.txt
----a-w 1,978 2008-04-23 21:22:05 C:\WINDOWS\regopt.log
----a-w 4,381 2008-04-25 01:04:07 C:\WINDOWS\resetlog.txt
----a-w 32,174 2008-05-24 21:56:15 C:\WINDOWS\SchedLgU.Txt
----a-w 9,445,376 2008-05-09 19:11:43 C:\WINDOWS\sectest.db
----a-w 58,559 2008-05-13 07:20:51 C:\WINDOWS\setupact.log
----a-w 2,103,043 2008-05-21 01:39:36 C:\WINDOWS\setupapi.log
----a-w 1,344,492 2008-04-23 19:39:35 C:\WINDOWS\setupapi.old
----a-w 2,305 2008-04-28 19:17:12 C:\WINDOWS\setuperr.log
----a-w 670,633 2008-04-23 21:43:49 C:\WINDOWS\setuplog.txt
----a-w 26,248 2008-05-08 15:27:40 C:\WINDOWS\Sti_Trace.log
----a-w 246 2008-05-21 00:43:18 C:\WINDOWS\system.ini
----a-w 6,228 2008-05-13 23:46:50 C:\WINDOWS\tabletoc.log
----a-w 25 2008-04-24 08:16:03 C:\WINDOWS\TSCFM.INI
----a-w 271 2008-05-09 16:43:07 C:\WINDOWS\TSCTNDBG.INI
----a-w 1,044 2008-05-09 16:43:10 C:\WINDOWS\TSCTV.INI
----a-w 18,931 2008-05-09 16:43:07 C:\WINDOWS\TSCTVFM.INI
----a-w 108,017 2008-05-13 23:46:50 C:\WINDOWS\tsoc.log
----a-w 332 2008-05-24 21:56:16 C:\WINDOWS\wiadebug.log
----a-w 49 2008-05-24 21:56:16 C:\WINDOWS\wiaservc.log
----a-w 1,747 2008-05-21 00:43:18 C:\WINDOWS\win.ini
---ha-r 749 2008-04-23 21:36:51 C:\WINDOWS\WindowsShell.Manifest
----a-w 81,264 2008-05-24 21:56:15 C:\WINDOWS\WindowsUpdate.log

Entries: 52 (50)
Directories: 0 Files: 52
Bytes: 22,920,488 Blocks: 44,793
======C:\WINDOWS\system32=====
----a-w 288 2008-04-23 21:43:12 C:\WINDOWS\System32\$winnt$.inf
----a-w 1,906 2008-04-30 07:45:52 C:\WINDOWS\System32\AUTOEXEC.NT
----a-w 13,312 2008-05-21 13:57:35 C:\WINDOWS\System32\BASSMOD.dll
---ha-r 749 2008-04-23 21:36:51 C:\WINDOWS\System32\cdplayer.exe.manifest
----a-w 552 2008-04-22 22:33:13 C:\WINDOWS\System32\d3d8caps.dat
----a-w 1,324 2008-05-19 11:04:57 C:\WINDOWS\System32\d3d9caps.dat
----a-w 279,744 2008-05-21 14:38:28 C:\WINDOWS\System32\FNTCACHE.DAT
----a-w 443,290 2008-05-08 11:54:43 C:\WINDOWS\System32\iklog.log
----a-w 298,104 2008-05-10 02:13:54 C:\WINDOWS\System32\imon.dll
---ha-r 488 2008-04-23 21:37:03 C:\WINDOWS\System32\logonui.exe.manifest
----a-w 12,632 2008-05-24 11:50:03 C:\WINDOWS\System32\lsdelete.exe
----a-w 499,712 2008-04-21 07:03:38 C:\WINDOWS\System32\msvcp71.dll
---ha-r 749 2008-04-23 21:36:51 C:\WINDOWS\System32\ncpa.cpl.manifest
----a-w 4,452 2008-05-24 20:08:15 C:\WINDOWS\System32\nvapps.xml
---ha-r 749 2008-04-23 21:36:51 C:\WINDOWS\System32\nwc.cpl.manifest
----a-w 78,948 2008-05-09 17:05:54 C:\WINDOWS\System32\perfc009.dat
----a-w 102,044 2008-05-09 17:05:54 C:\WINDOWS\System32\perfc013.dat
----a-w 477,850 2008-05-09 17:05:54 C:\WINDOWS\System32\perfh009.dat
----a-w 552,228 2008-05-09 17:05:54 C:\WINDOWS\System32\perfh013.dat
----a-w 1,111,066 2008-05-09 17:05:54 C:\WINDOWS\System32\PerfStringBackup.INI
----a-w 826,539 2008-05-21 10:16:14 C:\WINDOWS\System32\RVAXO.bat
---ha-r 749 2008-04-23 21:36:51 C:\WINDOWS\System32\sapi.cpl.manifest
----a-w 90,668 2008-04-17 14:19:32 C:\WINDOWS\System32\vobis32.dll
---ha-r 488 2008-04-23 21:37:03 C:\WINDOWS\System32\WindowsLogon.manifest
----a-w 2,206 2008-05-24 09:42:38 C:\WINDOWS\System32\wpa.dbl
---ha-r 749 2008-04-23 21:36:51 C:\WINDOWS\System32\wuaucpl.cpl.manifest

Entries: 26 (19)
Directories: 0 Files: 26
Bytes: 4,801,586 Blocks: 9,391
======C:\WINDOWS\system32\drivers=====
----a-w 512,096 2008-05-10 02:13:54 C:\WINDOWS\System32\drivers\amon.sys
----a-w 39,248 2008-05-03 20:24:38 C:\WINDOWS\System32\drivers\ikfileflt.sys
----a-w 52,304 2008-05-03 20:24:39 C:\WINDOWS\System32\drivers\ikfilesec.sys
----a-w 59,984 2008-05-03 20:24:49 C:\WINDOWS\System32\drivers\iksysflt.sys
----a-w 83,536 2008-05-03 20:24:51 C:\WINDOWS\System32\drivers\iksyssec.sys
----a-w 26,064 2008-05-03 20:24:40 C:\WINDOWS\System32\drivers\kcom.sys
----a-w 15,864 2008-05-05 18:46:32 C:\WINDOWS\System32\drivers\mbam.sys
----a-w 27,048 2008-05-05 18:46:36 C:\WINDOWS\System32\drivers\mbamcatchme.sys
----a-w 15,424 2008-05-10 02:13:53 C:\WINDOWS\System32\drivers\nod32drv.sys
----a-w 717,296 2008-05-14 00:09:01 C:\WINDOWS\System32\drivers\sptd.sys
----a-w 102,664 2008-04-23 20:05:41 C:\WINDOWS\System32\drivers\tmcomm.sys
----a-w 23,600 2008-05-19 12:35:54 C:\WINDOWS\System32\drivers\TVICHW32.SYS

Entries: 12 (12)
Directories: 0 Files: 12
Bytes: 1,675,128 Blocks: 3,278
=======C:\Program Files=====
Entries: 0 (0)
Directories: 0 Files: 0
Bytes: 0 Blocks: 0
=======C:=====
----a-w 211 2008-05-08 11:53:50 C:\Boot.bak
--sha-r 281 2008-05-21 00:43:18 C:\boot.ini
----a-w 15,530 2008-05-09 19:45:58 C:\ComboFix.txt
----a-w 269 2008-05-24 22:00:52 C:\firstrun6.log
--sha-w 1,073,008,640 2008-05-24 22:01:58 C:\hiberfil.sys
--sha-w 1,610,612,736 2008-05-24 22:01:56 C:\pagefile.sys
----a-w 404 2008-05-24 22:03:25 C:\RVAXO-results.log
----a-w 7,684 2008-05-24 22:03:25 C:\RVAXO-Vfind.log
----a-w 3,602 2008-05-17 14:15:26 C:\TaskList.txt

Entries: 9 (6)
Directories: 0 Files: 9
Bytes: 2,683,649,357 Blocks: 5,241,507
======C:\Documents and Settings\suzy\Application Data======
Entries: 0 (0)
Directories: 0 Files: 0
Bytes: 0 Blocks: 0
======C:\Documents and Settings\suzy======
----a-w 9,437,184 2008-04-23 13:04:51 C:\Documents and Settings\suzy\ntuser.bak
----a-w 6,823,936 2008-05-24 22:01:09 C:\Documents and Settings\suzy\ntuser.dat
---ha-w 49,152 2008-05-24 22:03:23 C:\Documents and Settings\suzy\ntuser.dat.LOG
--sh--w 288 2008-05-24 21:56:14 C:\Documents and Settings\suzy\ntuser.ini
---ha-w 0 2008-04-23 13:02:22 C:\Documents and Settings\suzy\ntuser.tmp.LOG
----a-w 0 2008-04-29 09:16:06 C:\Documents and Settings\suzy\regsvr32

Entries: 6 (3)
Directories: 0 Files: 6
Bytes: 16,310,560 Blocks: 31,857
======C:\WINDOWS\Downloaded Program Files====
---ha-w 65 2008-04-23 21:37:03 C:\WINDOWS\Downloaded Program Files\desktop.ini

Entries: 1 (0)
Directories: 0 Files: 1
Bytes: 65 Blocks: 1
=============

[smeenk]

Deze bestanden mag je verwijderen:
C:\WINDOWS\BM0b1c2354.txt.bak
C:\WINDOWS\BM0b1c2354.xml.bak

Voor de rest zie ik geen foute dingen meer

[zotteke100]

Smeenk, heel erg bedankt voor uw hulp.Ik kan nu met een gerust hart verder tokkelen op mijn pc.
Nog een klein vraagje, hoe verwijder ik dit progje RVAXO?
Mapje op bureaublad verwijderen + logtekstjes in C\ of moet het anders?

[smeenk]

Uninstall.cmd staat in de map RVAXO op je bureaublad.

[zotteke100]

thanks

[smeenk]

Graag gedaan hoor